deepcomp (>=1.0.0, <=1.0.1), hub (>=1.0.0a0, <=1.0.0a4) +3 more potentially affected by CVE-2023-48022 via ray (1.0.0)

ray PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepcomp =1.0.0, =1.0.0a0, =0.1.1.1, =2.0.1, =0.0.1, =0.0.9 Source cves: CVE-2023-48022 Source advisory: OSV:GHSA-6WGJ-66M2-XXP2...

deepcomp (>=1.0.0, <=1.0.1), hub (>=1.0.0a0, <=1.0.0a4) +3 more potentially affected by CVE-2023-6020 via ray (1.0.0)

ray PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepcomp =1.0.0, =1.0.0a0, =0.1.1.1, =2.0.1, =0.0.1, =0.0.9 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...

deepcomp (>=1.0.0, <=1.0.1), hub (>=1.0.0a0, <=1.0.0a4) +3 more potentially affected by CVE-2023-48022 +2 more via ray (1.0.0)

ray PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepcomp =1.0.0, =1.0.0a0, =0.1.1.1, =2.0.1, =0.0.1, =0.0.9 Source cves: CVE-2023-48022, CVE-2023-48023, CVE-2023-6019 Source advisory:...

microbiome-toolbox (>=0.0.8, <=0.0.11), predictnow-client (>=0.0.1, <=0.0.9) potentially affected by CVE-2022-40897 via setuptools (50.3.0)

setuptools PYPI version 50.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - microbiome-toolbox =0.0.8, =0.0.1, =0.0.9 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

microbiome-toolbox (>=0.0.8, <=0.0.11), predictnow-client (>=0.0.1, <=0.0.9) potentially affected by CVE-2022-40897 via setuptools (50.3.0)

setuptools PYPI version 50.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - microbiome-toolbox =0.0.8, =0.0.1, =0.0.9 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...