11 matches found
lgblkb-tools (>=1.0.60, <=1.0.62), qwgc (0.0.3) +3 more potentially affected by CVE-2024-5569 via zipp (2.1.0)
zipp PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on zipp and may be impacted: - lgblkb-tools =1.0.60, =1.0.2, =0.1.3, =1.0.0, =1.0.2 Source cves: CVE-2024-5569 Source advisory: OSV:PYSEC-2026-2074...
cumulusci (>=2.5.6, <=3.7.0), lgblkb-tools (>=1.0.60, <=1.0.66) +2 more potentially affected by CVE-2024-28102 via jwcrypto (0.6.0)
jwcrypto PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =2.5.6, =1.0.60, =0.0.0, =1.4.5, =1.7.0 Source cves: CVE-2024-28102 Source advisory: OSV:PYSEC-2026-1484...
lgblkb-tools (>=1.0.60, <=1.1.10) potentially affected by CVE-2026-8212 via gdal (2.4.3)
gdal PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - lgblkb-tools =1.0.60, =1.1.10 Source cves: CVE-2026-8212 Source advisory: OSV:GHSA-R5M4-5VWW-W9F5...
lgblkb-tools (>=1.0.60, <=1.1.10) potentially affected by CVE-2026-8213 via gdal (2.4.3)
gdal PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - lgblkb-tools =1.0.60, =1.1.10 Source cves: CVE-2026-8213 Source advisory: OSV:PYSEC-2026-2157...
lgblkb-tools (>=1.0.60, <=1.1.10) potentially affected by CVE-2026-8087 via gdal (2.4.3)
gdal PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - lgblkb-tools =1.0.60, =1.1.10 Source cves: CVE-2026-8087 Source advisory: OSV:PYSEC-2026-2155...
lgblkb-tools (>=1.0.60, <=1.1.10) potentially affected by CVE-2026-8086 via gdal (2.4.3)
gdal PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - lgblkb-tools =1.0.60, =1.1.10 Source cves: CVE-2026-8086 Source advisory: OSV:PYSEC-2026-2154...
cumulusci (>=2.5.6, <=3.7.0), lgblkb-tools (>=1.0.60, <=1.0.66) +2 more potentially affected by CVE-2026-39373 via jwcrypto (0.6.0)
jwcrypto PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =2.5.6, =1.0.60, =0.0.0, =1.4.5, =1.7.0 Source cves: CVE-2026-39373 Source advisory: OSV:GHSA-FJRM-76X2-C4Q4...
lgblkb-tools (>=1.0.60, <=1.0.62), qwgc (0.0.3) +3 more potentially affected by CVE-2024-5569 via zipp (2.1.0)
zipp PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on zipp and may be impacted: - lgblkb-tools =1.0.60, =1.0.2, =0.1.3, =1.0.0, =1.0.2 Source cves: CVE-2024-5569 Source advisory: OSV:GHSA-JFMJ-5V4G-7637...
cumulusci (>=2.5.6, <=3.7.0), lgblkb-tools (>=1.0.60, <=1.0.66) +2 more potentially affected by CVE-2024-28102 via jwcrypto (0.6.0)
jwcrypto PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =2.5.6, =1.0.60, =0.0.0, =1.4.5, =1.7.0 Source cves: CVE-2024-28102 Source advisory: OSV:GHSA-J857-7RVV-VJ97...
cumulusci (>=2.5.6, <=3.7.0), lgblkb-tools (>=1.0.60, <=1.0.66) +2 more potentially affected by CVE-2023-6681 via jwcrypto (0.6.0)
jwcrypto PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =2.5.6, =1.0.60, =0.0.0, =1.4.5, =1.7.0 Source cves: CVE-2023-6681 Source advisory: OSV:PYSEC-2024-104...
lgblkb-tools (>=1.0.60, <=1.1.10) potentially affected by CVE-2019-17545 via gdal (2.4.3)
gdal PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - lgblkb-tools =1.0.60, =1.1.10 Source cves: CVE-2019-17545 Source advisory: OSV:PYSEC-2019-241...