OPENSUSE-SU-2024:13684-1 python310-fastapi-0.109.1-1.1 on GA media

These are all security issues fixed in the python310-fastapi-0.109.1-1.1 package on the GA media of openSUSE Tumbleweed...

aad-fastapi (>=1.0.0, <=1.1.2), aad-fastapi-dl37 (>=1.0.0, <=1.0.3) +184 more potentially affected by CVE-2024-35255 via azure-identity (>=1.0.1, <=1.16.0)

azure-identity PYPI version =1.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =0.1.12, =0.0.2, =0.0.53, =1.0.0, =0.1.10, =0.1.0rc2, =0.1.0rc6 and more Source cves: CVE-2024-35255 Source advisory: GHSA-M5VV-6R4H-3VJ9...

aad-fastapi (>=1.0.0, <=1.1.2), aad-fastapi-dl37 (1.0.3) +11 more potentially affected by CVE-2024-37568 via authlib (0.15.4)

authlib PYPI version 0.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - aad-fastapi =1.0.0, =0.0.1, =1.0.2, =1.0.2, =0.1.9, =3.37.0, =1.0.0, =2.6.0.dev1, =0.1.1, =0.4.0, =14.0.3, =14.8.2 Source cves: CVE-2024-37568...

aad-fastapi (>=1.0.0, <=1.1.2), aad-fastapi-dl37 (>=1.0.0, <=1.0.3) +133 more potentially affected by CVE-2024-37568 via authlib (>=0.10.0, <=1.3.0)

authlib PYPI version =0.10.0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =1.0.2, =1.2.0, =0.0.1, =0.1.0, =1.0.3, =2.0.0, =0.0.59, =0.5.0, =1.6.1, =4.2.0.dev106, =0.1.0, =0.3.0 and more Source cves: CVE-2024-37568 Source advisory: GHSA-5357-C2JX-V7QH...

fastapi-cognito (>=2.5.0, <=2.7.0), fds-sdk-utils (2.0.0) +3 more potentially affected by CVE-2024-37568 via joserfc (0.9.0)

joserfc PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on joserfc and may be impacted: - fastapi-cognito =2.5.0, =0.1.3, =0.18.1, =0.1.0, =0.5.5 Source cves: CVE-2024-37568 Source advisory: SNYK:PYTHON-JOSERFC-8600636...

aad-fastapi (>=1.0.0, <=1.1.2), aad-fastapi-dl37 (1.0.3) +11 more potentially affected by CVE-2024-37568 via authlib (0.15.4)

authlib PYPI version 0.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - aad-fastapi =1.0.0, =0.0.1, =1.0.2, =1.0.2, =0.1.9, =3.37.0, =1.0.0, =2.6.0.dev1, =0.1.1, =0.4.0, =14.0.3, =14.8.2 Source cves: CVE-2024-37568...

aad-fastapi-dl37 (>=1.0.0, <=1.0.2), annotell-auth (>=1.7.0, <=2.0.1) +62 more potentially affected by CVE-2024-37568 via authlib (>=1.0.0b2, <=1.3.0)

authlib PYPI version =1.0.0b2, =1.0.0, =1.7.0, =0.0.1, =0.1.0, =1.0.3, =2.0.0, =1.6.1, =4.2.0.dev106, =0.6.89, =0.4.0, =3.55.0, =3.88.0 - dataset-image-annotator 0.0.19 - datashare-network-client 0.4.0 and more Source cves: CVE-2024-37568 Source advisory: OSV:PYSEC-2024-52...

data-integration-babel (>=0.3.0, <=0.5.0), dbfactory (>=1.0.4, <=1.0.10) +9 more potentially affected by CVE-2024-36039 via pymysql (0.10.0)

pymysql PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymysql and may be impacted: - data-integration-babel =0.3.0, =1.0.4, =0.2.0, =2.2.6, =1.0.0, =0.2.2, =0.6.10, =1.42.14, =9.4.219.dev3, =10.0.71 - telegraf-pyplug 0.1.1 Source...

Fedora 39 : python-fastapi / python-starlette (2023-6c030b3c71)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-6c030b3c71 advisory. python-starlette 0.25.0 Fixed - Limit the number of fields and files when parsing multipart/form-data on the MultipartParser python-fastapi 0.92.0 This is a...

Fedora 40 : python-fastapi (2024-0396ef82cd)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-0396ef82cd advisory. Automatic update for python-fastapi-0.109.1-1.fc40. Changelog Thu Feb 8 2024 Packit - 0.109.1-1 - packit 0.109.1 upstream release - Resolves rhbz2262507,...

Fedora 38 : python-fastapi / python-starlette (2023-9d50269499)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-9d50269499 advisory. python-starlette 0.25.0 Fixed - Limit the number of fields and files when parsing multipart/form-data on the MultipartParser python-fastapi 0.92.0 This is a...

fastapi (>=0.9.0, <=0.15.0) potentially affected by CVE-2024-3772 via pydantic (0.21.0)

pydantic PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - fastapi =0.9.0, =0.15.0 Source cves: CVE-2024-3772 Source advisory: OSV:GHSA-MR82-8J83-VXMV...

cvgen (>=0.1.0, <=0.4.0), fastapi (>=0.21.0, <=0.23.0) +1 more potentially affected by CVE-2024-3772 via pydantic (0.25.0)

pydantic PYPI version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - cvgen =0.1.0, =0.21.0, =0.1.0, =0.1.1 Source cves: CVE-2024-3772 Source advisory: OSV:GHSA-MR82-8J83-VXMV...

asynql (0.1.0), botx (>=0.11.0, <=0.11.3) +2 more potentially affected by CVE-2024-3772 via pydantic (0.28.0)

pydantic PYPI version 0.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - asynql 0.1.0 - botx =0.11.0, =0.30.0, =0.1.4, =0.4.1 Source cves: CVE-2024-3772 Source advisory: OSV:GHSA-MR82-8J83-VXMV...

balto (>=0.1.5, <=0.3.0), botx (0.12.0) +4 more potentially affected by CVE-2024-3772 via pydantic (0.30.0)

pydantic PYPI version 0.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - balto =0.1.5, =0.1.2, =0.33.0, =0.1.7, =0.1.23 Source cves: CVE-2024-3772 Source advisory: OSV:GHSA-MR82-8J83-VXMV...

accidental-vulnerability (>=2.0.4, <=2.0.5), fastapi (>=0.1.18, <=0.8.0) +1 more potentially affected by CVE-2024-3772 via pydantic (0.18.2)

pydantic PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - accidental-vulnerability =2.0.4, =0.1.18, =2.1.0, =2.3.0 Source cves: CVE-2024-3772 Source advisory: OSV:GHSA-MR82-8J83-VXMV...

cupcake (0.0.4), fastapi (>=0.31.0, <=0.32.0) +6 more potentially affected by CVE-2024-3772 via pydantic (0.29.0)

pydantic PYPI version 0.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - cupcake 0.0.4 - fastapi =0.31.0, =0.0.1, =0.0.3, =0.1.0, =0.1.4, =0.0.1, =0.0.2 Source cves: CVE-2024-3772 Source advisory:...

fastapi (>=0.16.0, <=0.20.1), pyartifactory (>=1.0.1, <=1.0.2) potentially affected by CVE-2024-3772 via pydantic (0.23.0)

pydantic PYPI version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - fastapi =0.16.0, =1.0.1, =1.0.2 Source cves: CVE-2024-3772 Source advisory: OSV:GHSA-MR82-8J83-VXMV...

Fedora: Security Advisory (FEDORA-2024-2e802cdb4b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for python-fastapi (FEDORA-2024-09c7f715c9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...