phenopype (>=0.6.1, <=0.9.0), videotracking (>=0.0.1, <=0.0.16) potentially affected by CVE-2019-14493 via opencv-contrib-python (3.4.5.20)

opencv-contrib-python PYPI version 3.4.5.20 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python and may be impacted: - phenopype =0.6.1, =0.0.1, =0.0.16 Source cves: CVE-2019-14493 Source advisory: OSV:GHSA-3448-VRGH-85XR...

phenopype (>=1.0.6, <=3.4.2) potentially affected by CVE-2019-14493 via opencv-contrib-python (3.4.9.33)

opencv-contrib-python PYPI version 3.4.9.33 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python and may be impacted: - phenopype =1.0.6, =3.4.2 Source cves: CVE-2019-14493 Source advisory: OSV:GHSA-3448-VRGH-85XR...

cerebro8 (0.0.1), evenvizion (>=0.9.2, <=0.9.7) +6 more potentially affected by CVE-2019-14491 via opencv-contrib-python (>=3.4.2.17, <=3.4.5.20)

opencv-contrib-python PYPI version =3.4.2.17, =0.9.2, =0.1.0, =0.6.1, =1.0.1, =0.0.1, =0.0.16 Source cves: CVE-2019-14491 Source advisory: OSV:GHSA-FM39-CW8H-3P63...