dcicsnovault (>=2.0.0b4 <=2.0.0b7), moksh-orchestrator (=0.2.1) potentially affected by CVE-2024-51734 via zope (=4.8.11)

zope PYPI version =4.8.11 is affected by a known vulnerability. The following packages have a transitive dependency on zope and may be impacted: - dcicsnovault =2.0.0b4, =2.0.0b7 - moksh-orchestrator =0.2.1 Source cves: CVE-2024-51734 Source advisory: OSV:GHSA-G5VW-3H65-2Q3V...

dcicsnovault (>=2.0.0b4 <=2.0.0b7), ethyca-fides (>=2.10.0 <=2.18.0) +2 more potentially affected by CVE-2024-51734 via accesscontrol (>=4.4.0 <=6.0.0)

accesscontrol PYPI version =4.4.0, =2.0.0b4, =2.10.0, =4.6.3, =4.8.11 Source cves: CVE-2024-51734 Source advisory: OSV:GHSA-G5VW-3H65-2Q3V...

a2grunnerp (>=0.1.0 <=0.1.8), dcicsnovault (>=2.0.0b4 <=2.0.0b7) +7 more potentially affected by CVE-2023-41039 via restrictedpython (>=6.0.0 <=6.1.0)

restrictedpython PYPI version =6.0.0, =0.1.0, =2.0.0b4, =0.0.42a3, =2.10.0, =2025.9.5, =0.8.2b36, =4.8.4, =4.8.11 Source cves: CVE-2023-41039 Source advisory: OSV:GHSA-XJW2-6JM9-RF67...

a2grunnerp (>=0.1.0 <=0.1.8), dcicsnovault (>=2.0.0b4 <=2.0.0b7) +7 more potentially affected by CVE-2023-41039 via restrictedpython (>=6.0.0 <=6.1.0)

restrictedpython PYPI version =6.0.0, =0.1.0, =2.0.0b4, =0.0.42a3, =2.10.0, =2025.9.5, =0.8.2b36, =4.8.4, =4.8.11 Source cves: CVE-2023-41039 Source advisory: OSV:PYSEC-2023-159...

esmvalcore (>=2.0.0 <=2.2.0), esque (>=0.2.0 <=0.3.1) +6 more potentially affected by CVE-2021-38305 via yamale (>=2.0.1 <=3.0.7)

yamale PYPI version =2.0.1, =2.0.0, =0.2.0, =0.0.2, =1.0.0, =0.0.1.dev3092, =0.1.0b0, =0.1.0b6 Source cves: CVE-2021-38305 Source advisory: OSV:GHSA-435P-F82X-MXWM...