hellobluenove (2.0.0), hellowebapp-deploy (1.0.4) +1 more potentially affected by CVE-2024-49769 via waitress (1.1.0)

waitress PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on waitress and may be impacted: - hellobluenove 2.0.0 - hellowebapp-deploy 1.0.4 - saltdash =0.9.1, =0.9.5 Source cves: CVE-2024-49769 Source advisory: OSV:GHSA-3F84-RPWH-47G6...

chellow (>=2050.0.0, <=2230.0.0), dcicsnovault (>=2.0.0b0, <=2.0.0b11) +8 more potentially affected by CVE-2019-16792 via waitress (>=1.0.1, <=1.3.1)

waitress PYPI version =1.0.1, =2050.0.0, =2.0.0b0, =17.4.0, =1.1.0.dev20170908, =1.3.7, =0.9.1, =1.0.3, =1.0.4 Source cves: CVE-2019-16792 Source advisory: OSV:GHSA-4PPP-GPCR-7QF6...