kingarthur (0.2.2rc3), lookout-sdk-ml (0.4.3) +5 more potentially affected by unknown CVE via dulwich (0.20.45)

dulwich PYPI version 0.20.45 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - kingarthur 0.2.2rc3 - lookout-sdk-ml 0.4.3 - perceval =0.20.0rc4, =0.20.0rc5 - perceval-mozilla 0.3.2rc3 - perceval-opnfv 0.2.2rc3 -...

perceval-mozilla (>=0.3.2rc1, <=0.3.2rc2), qgis-deployment-toolbelt (>=0.8.0, <=0.10.0) potentially affected by unknown CVE via dulwich (0.20.35)

dulwich PYPI version 0.20.35 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - perceval-mozilla =0.3.2rc1, =0.8.0, =0.10.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

kingarthur (0.2.2rc3), lookout-sdk-ml (0.4.3) +5 more potentially affected by unknown CVE via dulwich (0.20.45)

dulwich PYPI version 0.20.45 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - kingarthur 0.2.2rc3 - lookout-sdk-ml 0.4.3 - perceval =0.20.0rc4, =0.20.0rc5 - perceval-mozilla 0.3.2rc3 - perceval-opnfv 0.2.2rc3 -...

perceval-mozilla (>=0.3.2rc1, <=0.3.2rc2), qgis-deployment-toolbelt (>=0.8.0, <=0.10.0) potentially affected by unknown CVE via dulwich (0.20.35)

dulwich PYPI version 0.20.35 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - perceval-mozilla =0.3.2rc1, =0.8.0, =0.10.0 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

graal (0.4.3rc3), perceval (0.21.2rc3) +5 more potentially affected by CVE-2026-59890 via setuptools (66.1.0)

setuptools PYPI version 66.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - graal 0.4.3rc3 - perceval 0.21.2rc3 - perceval-mozilla 0.3.6rc3 - perceval-opnfv 0.2.6rc3 - perceval-puppet 0.2.6rc3 - perceval-weblate...

graal (0.4.3rc3), perceval (0.21.2rc3) +5 more potentially affected by CVE-2026-59890 via setuptools (66.1.0)

setuptools PYPI version 66.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - graal 0.4.3rc3 - perceval 0.21.2rc3 - perceval-mozilla 0.3.6rc3 - perceval-opnfv 0.2.6rc3 - perceval-puppet 0.2.6rc3 - perceval-weblate...

graal (0.4.3rc3), perceval (0.21.2rc3) +5 more potentially affected by CVE-2024-6345 via setuptools (66.1.0)

setuptools PYPI version 66.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - graal 0.4.3rc3 - perceval 0.21.2rc3 - perceval-mozilla 0.3.6rc3 - perceval-opnfv 0.2.6rc3 - perceval-puppet 0.2.6rc3 - perceval-weblate...

graal (0.4.3rc3), perceval (0.21.2rc3) +5 more potentially affected by CVE-2025-47273 via setuptools (66.1.0)

setuptools PYPI version 66.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - graal 0.4.3rc3 - perceval 0.21.2rc3 - perceval-mozilla 0.3.6rc3 - perceval-opnfv 0.2.6rc3 - perceval-puppet 0.2.6rc3 - perceval-weblate...

graal (0.4.3rc3), perceval (0.21.2rc3) +5 more potentially affected by CVE-2025-47273 via setuptools (66.1.0)

setuptools PYPI version 66.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - graal 0.4.3rc3 - perceval 0.21.2rc3 - perceval-mozilla 0.3.6rc3 - perceval-opnfv 0.2.6rc3 - perceval-puppet 0.2.6rc3 - perceval-weblate...