owl-sanitizer-data-quality (>=0.1.0, <=0.5.0), pyrasterframes (0.9.0) +2 more potentially affected by CVE-2021-38296 via pyspark (2.4.5)

pyspark PYPI version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - owl-sanitizer-data-quality =0.1.0, =0.3.1, =0.3.15 Source cves: CVE-2021-38296 Source advisory: OSV:PYSEC-2022-186...

nuna-sql-tools (>=0.0.13, <=0.0.17), pydeequ (0.1.5) +1 more potentially affected by CVE-2021-38296 via pyspark (2.4.7)

pyspark PYPI version 2.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - nuna-sql-tools =0.0.13, =0.0.17 - pydeequ 0.1.5 - pyrasterframes 0.9.1 Source cves: CVE-2021-38296 Source advisory: OSV:PYSEC-2022-186...

dataland (>=0.1.2, <=0.1.7), pyrasterframes (>=0.8.0.dev0, <=0.8.3.post0) +1 more potentially affected by CVE-2021-38296 via pyspark (2.3.4)

pyspark PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - dataland =0.1.2, =0.8.0.dev0, =2.3.0, =2.3.0.post7 Source cves: CVE-2021-38296 Source advisory: OSV:PYSEC-2022-186...

evaporation (>=0.1.0, <=1.0.0), hspatial (>=0.1.0, <=2.1.3) +4 more potentially affected by CVE-2019-17545 via gdal (2.4.4)

gdal PYPI version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - evaporation =0.1.0, =0.1.0, =0.0.4, =1.0.16, =0.9.0, =0.9.1 Source cves: CVE-2019-17545 Source advisory: OSV:PYSEC-2019-241...