Wallarm Webinar: NIST CSF 2.0, API Security, and CISO Imperatives

Last week, our good friend Raj Umadas, Director of Security at ActBlue, teamed up with our very own Tim Erlin, Head of Product, to talk about the newly proposed NIST Cybersecurity Framework CSF. It was a fantastic discussion covering the intent behind this update, the major changes from v1.1 to...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-40712 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-40712 Source advisory: OSV:GHSA-MJQH-V5F2-G2MW...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-40611 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-40611 Source advisory: OSV:GHSA-WPG8-MF6H-GM92...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-40611 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-40611 Source advisory: OSV:PYSEC-2023-170...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-40712 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-40712 Source advisory: OSV:PYSEC-2023-171...

org.drools.planner:drools-planner-core (5.2.1.final), org.drools.planner:drools-planner-examples (5.2.1.final) +25 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.2.1.final)

org.drools:drools-core MAVEN version 5.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.2.1.final - org.drools.planner:drools-planner-examples 5.2.1.final -...

org.drools.planner:drools-planner-core (5.4.0.beta2), org.drools.planner:drools-planner-distribution (5.4.0.beta2) +23 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.4.0.beta2)

org.drools:drools-core MAVEN version 5.4.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.4.0.beta2 - org.drools.planner:drools-planner-distribution 5.4.0.bet...

org.drools.planner:drools-planner-core (5.1.0), org.drools.planner:drools-planner-examples (5.1.0) +17 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.1.0)

org.drools:drools-core MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.1.0 - org.drools.planner:drools-planner-examples 5.1.0 -...

DRUPAL-CONTRIB-2023-041

This module makes PatternLab's custom Twig functions available to Drupal theming. The module's included examples don't sufficiently filter data. This vulnerability is mitigated by the fact that the included examples must have been copied to a site's theme...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-39441 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-39441 Source advisory: OSV:GHSA-5F35-PQ34-C87Q...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-40273 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-40273 Source advisory: OSV:GHSA-PM87-24WQ-R8W9...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-37379 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-37379 Source advisory: OSV:PYSEC-2023-152...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-39553 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-39553 Source advisory: OSV:PYSEC-2023-136...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-39508 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-39508 Source advisory: OSV:GHSA-269X-PG5C-5XGM...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-39508 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-39508 Source advisory: OSV:PYSEC-2023-134...

com.github.brandtg:dropwizard-helix (0.0.1), org.apache.helix:helix-examples (0.7.1) +2 more potentially affected by CVE-2023-38647 via org.apache.helix:helix-core (0.7.1)

org.apache.helix:helix-core MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.helix:helix-core and may be impacted: - com.github.brandtg:dropwizard-helix 0.0.1 - org.apache.helix:helix-examples 0.7.1 -...

com.google.cloud:gcloud-java-examples (>=0.2.5, <=0.2.8), com.google.cloud:gcloud-java-nio-examples (>=0.2.5, <=0.2.8) +4 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.10)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.google.cloud:gcloud-java-examples =0.2.5, =0.2.5, =0.3.0, =0.3.0, =0.13.0-alpha -...

org.apache.inlong:manager-client (>=1.4.0, <=1.7.0), org.apache.inlong:manager-client-examples (>=1.4.0, <=1.7.0) +1 more potentially affected by CVE-2023-34434 via org.apache.inlong:manager-pojo (>=1.4.0, <=1.7.0)

org.apache.inlong:manager-pojo MAVEN version =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.7.0 Source cves: CVE-2023-34434 Source advisory: GHSA-PQ67-9JF9-HC3C...

org.apache.inlong:manager-client (>=1.4.0, <=1.7.0), org.apache.inlong:manager-client-examples (>=1.4.0, <=1.7.0) +1 more potentially affected by CVE-2023-34434 via org.apache.inlong:manager-pojo (>=1.4.0, <=1.7.0)

org.apache.inlong:manager-pojo MAVEN version =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.7.0 Source cves: CVE-2023-34434 Source advisory: OSV:GHSA-PQ67-9JF9-HC3C...

org.apache.inlong:manager-client (>=1.4.0, <=1.7.0), org.apache.inlong:manager-client-examples (>=1.4.0, <=1.7.0) +1 more potentially affected by CVE-2023-34434 via org.apache.inlong:manager-pojo (>=1.4.0, <=1.7.0)

org.apache.inlong:manager-pojo MAVEN version =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.7.0 Source cves: CVE-2023-34434 Source advisory: MEND:CVE-2023-34434...