optimuspyspark (2.1.1), pantsbuild-pants (1.15.0) +20 more potentially affected by CVE-2024-6345 via setuptools (40.4.3)

setuptools PYPI version 40.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - optimuspyspark 2.1.1 - pantsbuild-pants 1.15.0 - pantsbuild-pants-contrib-avro 1.15.0 - pantsbuild-pants-contrib-awslambda-python 1.15.0 -...

asrtoolkit (0.1.1), bicleaner (>=0.10.4, <=0.12.0) +2 more potentially affected by CVE-2025-71176 via pytest (3.8.1)

pytest PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - asrtoolkit 0.1.1 - bicleaner =0.10.4, =1.1.1, =1.1.2 - optimuspyspark 2.1.1 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

carte-blanche (>=1.3.7, <=1.3.8), dop-python-pip-package (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2025-71176 via pytest (3.7.2)

pytest PYPI version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - carte-blanche =1.3.7, =0.0.1, =2.0.3, =2.0.6 - seleniumbase 1.14.6 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

genhtml-markdown (>=1.0.8, <=1.0.9), j2s3 (>=1.0.0, <=1.0.2) +4 more potentially affected by CVE-2025-71176 via pytest (3.8.0)

pytest PYPI version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - genhtml-markdown =1.0.8, =1.0.0, =1.0.0, =0.10.0, =1.15.7, =1.15.10 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

azureml-webservice-schema (>=0.1.57, <=1.0.33), mmtfpyspark (0.2.7) +1 more potentially affected by CVE-2025-55039 via pyspark (2.3.1)

pyspark PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - azureml-webservice-schema =0.1.57, =2.0.3, =2.1.1 Source cves: CVE-2025-55039 Source advisory: OSV:PYSEC-2025-184...

optimuspyspark (2.1.1), pantsbuild-pants (1.15.0) +20 more potentially affected by CVE-2025-47273 via setuptools (40.4.3)

setuptools PYPI version 40.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - optimuspyspark 2.1.1 - pantsbuild-pants 1.15.0 - pantsbuild-pants-contrib-avro 1.15.0 - pantsbuild-pants-contrib-awslambda-python 1.15.0 -...

optimuspyspark (>=2.0.3, <=2.1.0), takemessagecleaner (>=1.1.0, <=1.1.4) +1 more potentially affected by CVE-2025-47273 via setuptools (40.2.0)

setuptools PYPI version 40.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - optimuspyspark =2.0.3, =1.1.0, =1.1.4 - work-weixin 0.0.2.3 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

optimuspyspark (>=2.0.3, <=2.1.0), takemessagecleaner (>=1.1.0, <=1.1.4) +1 more potentially affected by CVE-2025-47273 via setuptools (40.2.0)

setuptools PYPI version 40.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - optimuspyspark =2.0.3, =1.1.0, =1.1.4 - work-weixin 0.0.2.3 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

optimuspyspark (>=2.0.3, <=2.1.0), takemessagecleaner (>=1.1.0, <=1.1.4) +1 more potentially affected by CVE-2024-6345 via setuptools (40.2.0)

setuptools PYPI version 40.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - optimuspyspark =2.0.3, =1.1.0, =1.1.4 - work-weixin 0.0.2.3 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

azureml-webservice-schema (>=0.1.57, <=1.0.33), mmtfpyspark (0.2.7) +1 more potentially affected by CVE-2023-22946 via pyspark (2.3.1)

pyspark PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - azureml-webservice-schema =0.1.57, =2.0.3, =2.1.1 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2023-25661 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2023-25661 Source advisory: OSV:GHSA-FXGC-95XX-GRVQ...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2023-25660 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2023-25660 Source advisory: OSV:GHSA-QJQC-VQCF-5QVJ...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2023-25665 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2023-25665...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2023-25665 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2023-25665 Source advisory: OSV:GHSA-558H-MQ8X-7Q9G...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2023-25666 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2023-25666...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2023-25666 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2023-25666 Source advisory: OSV:GHSA-F637-VH3R-VFH2...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2023-25669 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2023-25669 Source advisory: OSV:GHSA-RCF8-G8JV-VG6P...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2023-25672 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2023-25672 Source advisory: OSV:GHSA-94MM-G2MV-8P7R...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2023-25673 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2023-25673...

optimuspyspark (2.1.1), pantsbuild-pants (1.15.0) +20 more potentially affected by CVE-2022-40897 via setuptools (40.4.3)

setuptools PYPI version 40.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - optimuspyspark 2.1.1 - pantsbuild-pants 1.15.0 - pantsbuild-pants-contrib-avro 1.15.0 - pantsbuild-pants-contrib-awslambda-python 1.15.0 -...