cosmic-ray (>=6.1.1, <=8.3.5), fauxpy (>=0.1.0, <=0.7.0) +1 more potentially affected by CVE-2024-53899 via virtualenv (16.7.10)

virtualenv PYPI version 16.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cosmic-ray =6.1.1, =0.1.0, =0.7.0 - pickley 2.0.14 Source cves: CVE-2024-53899 Source advisory: OSV:PYSEC-2024-187...

pickley (1.9.19), thaispoon (0.0.1) potentially affected by CVE-2024-53899 via virtualenv (16.7.7)

virtualenv PYPI version 16.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pickley 1.9.19 - thaispoon 0.0.1 Source cves: CVE-2024-53899 Source advisory: OSV:PYSEC-2024-187...

pickley (2.0.14) potentially affected by CVE-2024-6345 via setuptools (44.1.0)

setuptools PYPI version 44.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pickley 2.0.14 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

pickley (2.0.14) potentially affected by CVE-2022-40897 via setuptools (44.1.0)

setuptools PYPI version 44.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pickley 2.0.14 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

pickley (2.0.14) potentially affected by CVE-2022-40897 via setuptools (44.1.0)

setuptools PYPI version 44.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pickley 2.0.14 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...