GHSA-74P9-4V44-WWX5 vulnerabilities

Vulnerabilities for packages: python...

GHSA-74P9-4V44-WWX5 vulnerabilities

Vulnerabilities for packages: python...

CVE-2024-3220 vulnerabilities

Vulnerabilities for packages: python...

afs-file-validator (=1.0.1), apkutils (>=1.0.2 <=1.0.4) +43 more potentially affected by CVE-2025-15504 via lief (>=0.10.1 <=0.17.1)

lief PYPI version =0.10.1, =1.0.2, =1.0.0, =0.1.0, =1.0.0, =0.0.0, =0.4.2, =0.0.1, =2024.9.24, =5.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - famework =0.1.5 and more Source cves: CVE-2025-15504 Source advisory: SNYK:PYTHON-LIEF-14912565...

afs-file-validator (=1.0.1), apkutils (>=1.0.2 <=1.0.4) +43 more potentially affected by CVE-2025-15504 via lief (>=0.10.1 <=0.17.1)

lief PYPI version =0.10.1, =1.0.2, =1.0.0, =0.1.0, =1.0.0, =0.0.0, =0.4.2, =0.0.1, =2024.9.24, =5.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - famework =0.1.5 and more Source cves: CVE-2025-15504 Source advisory: OSV:GHSA-MJJP-XJFG-97WG...

adopt-a-doodle (>=0.0.1 <=0.0.3), bark-simulator (>=0.0.1 <=0.1.0) +105 more potentially affected by CVE-2026-22190 via panda3d (>=1.10.10 <=1.10.9)

panda3d PYPI version =1.10.10, =0.0.1, =0.0.1, =0.0.2, =0.1.0, =0.1.1, =0.0.3, =0.1.0, =21.2.0, =22.4.0, =20.12.0, =1.0.0, =0.0.1, =1.0.6, =0.0.2, =0.8.5, =0.8.10 and more Source cves: CVE-2026-22190 Source advisory: SNYK:PYTHON-PANDA3D-14931131...

Medium: python3.9

Issue Overview: When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents. CVE-2025-12084 When loading a plist file, the plistlib module...

Important Photon OS Security Update - PHSA-2026-4.0-0939

Updates of 'python3' packages of Photon OS have been released...

a-mailx (=0.1.0), aba-cli-scrapper (>=0.1.1 <=0.1.6) +1139 more potentially affected by CVE-2025-69228 via aiohttp (>=3.0.0b0 <=3.13.2)

aiohttp PYPI version =3.0.0b0, =0.1.1, =0.1.0b0, =1.1.0, =1.0.1, =0.0.0, =0.0.2, =4.8.2, =0.0.3, =0.1.3, =0.4.0, =56.0.0, =0.1.0, =0.1.31, =0.1.37 and more Source cves: CVE-2025-69228 Source advisory: SNYK:PYTHON-AIOHTTP-14871877...

a-mailx (=0.1.0), aba-cli-scrapper (>=0.1.1 <=0.1.6) +1139 more potentially affected by CVE-2025-69227 via aiohttp (>=3.0.0b0 <=3.13.2)

aiohttp PYPI version =3.0.0b0, =0.1.1, =0.1.0b0, =1.1.0, =1.0.1, =0.0.0, =0.0.2, =4.8.2, =0.0.3, =0.1.3, =0.4.0, =56.0.0, =0.1.0, =0.1.31, =0.1.37 and more Source cves: CVE-2025-69227 Source advisory: SNYK:PYTHON-AIOHTTP-14871979...

a-mailx (=0.1.0), aba-cli-scrapper (>=0.1.1 <=0.1.6) +1139 more potentially affected by CVE-2025-69225 via aiohttp (>=3.0.0b0 <=3.13.2)

aiohttp PYPI version =3.0.0b0, =0.1.1, =0.1.0b0, =1.1.0, =1.0.1, =0.0.0, =0.0.2, =4.8.2, =0.0.3, =0.1.3, =0.4.0, =56.0.0, =0.1.0, =0.1.31, =0.1.37 and more Source cves: CVE-2025-69225 Source advisory: SNYK:PYTHON-AIOHTTP-14871929...

GHSA-QHX6-HPFJ-8M4G vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-13837 vulnerabilities

Vulnerabilities for packages: python...

GHSA-399H-RRQC-RPGV vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-13836 vulnerabilities

Vulnerabilities for packages: python...

GHSA-399H-RRQC-RPGV vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-13836 vulnerabilities

Vulnerabilities for packages: python...

abadpour (>=6.13.1 <=7.24.1), abcli (>=9.273.1 <=9.572.1) +660 more potentially affected by unknown CVE via mlflow (>=3.0.0rc2 <=3.6.0rc0)

mlflow PYPI version =3.0.0rc2, =6.13.1, =9.273.1, =2.0.0, =0.1.0, =0.1.0, =0.4.4, =0.3.0, =0.1.0, =1.0.0, =0.1.0, =0.20.9, =0.21.10 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-MLFLOW-14829280...

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +10915 more potentially affected by CVE-2025-14930 via transformers (>=2.10.0 <=5.8.0)

transformers PYPI version =2.10.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =3.4.6 - aait-store-cut-part-001 =0.0.1 and more Source cves: CVE-2025-14930 Source advisory: SNYK:PYTHON-TRANSFORMERS-14563374...

angorapy (>=0.9.1 <=0.10.8), apple-hdr-heic (=0.1.0) +64 more potentially affected by CVE-2025-12840 via openexr (=3.4.11)

openexr PYPI version =3.4.11 is affected by a known vulnerability. The following packages have a transitive dependency on openexr and may be impacted: - angorapy =0.9.1, =0.5.0, =0.2.5, =0.1.0rc1, =0.0.1, =0.1.0, =0.2.1, =0.0.4, =0.1.7, =0.0.1, =0.1.1, =0.0.0, =0.0.4 and more Source cves:...