aioimdb (>=1.0.5, <=1.1.2), auto-dl (0.1.1) +11 more potentially affected by CVE-2024-6345 via setuptools (39.0.1)

setuptools PYPI version 39.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aioimdb =1.0.5, =0.2.0b0, =1.1.0, =0.2.1, =0.0.2, =1.1.0rc0, =0.1.3, =0.2.6.1 Source cves: CVE-2024-6345 Source advisory:...

pybuilder (0.11.13) potentially affected by CVE-2022-40897 via setuptools (35.0.2)

setuptools PYPI version 35.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pybuilder 0.11.13 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

dcicsnovault (>=2.0.0b0, <=2.0.0b11), pybuilder (>=0.11.14, <=0.11.15) potentially affected by CVE-2022-40897 via setuptools (36.8.0)

setuptools PYPI version 36.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - dcicsnovault =2.0.0b0, =0.11.14, =0.11.15 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

pybuilder (0.11.13) potentially affected by CVE-2022-40897 via setuptools (35.0.2)

setuptools PYPI version 35.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pybuilder 0.11.13 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

chalice (>=1.2.3, <=1.6.0), httptesting (>=1.0.1, <=1.0.2) +4 more potentially affected by CVE-2021-3572 via pip (10.0.1)

pip PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.2.3, =1.0.1, =4.0.0, =4.0.0, =4.0.1 - zerv 0.1.0 Source cves: CVE-2021-3572 Source advisory: OSV:GHSA-5XP3-JFQ3-5Q8X...