5 matches found
invenio-accounts (>=1.0.0a1, <=1.0.0a5), python-database-rest-logging (>=1.0.2, <=1.0.5) potentially affected by CVE-2021-23385 via flask-security (1.7.5)
flask-security PYPI version 1.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security and may be impacted: - invenio-accounts =1.0.0a1, =1.0.2, =1.0.5 Source cves: CVE-2021-23385 Source advisory: OSV:PYSEC-2026-809...
invenio-accounts (>=1.0.0a1, <=1.0.0a5), python-database-rest-logging (>=1.0.2, <=1.0.5) potentially affected by unknown CVE via flask-security (1.7.5)
flask-security PYPI version 1.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security and may be impacted: - invenio-accounts =1.0.0a1, =1.0.2, =1.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-W2J7-F3C6-G8CW...
cloudmesh-client (>=4.5.0, <=4.7.3), python-database-rest-logging (>=1.0.2, <=1.0.5) potentially affected by CVE-2026-34531 via flask-httpauth (3.2.2)
flask-httpauth PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-httpauth and may be impacted: - cloudmesh-client =4.5.0, =1.0.2, =1.0.5 Source cves: CVE-2026-34531 Source advisory: OSV:PYSEC-2026-2152...
cloudmesh-client (>=4.5.0, <=4.7.3), python-database-rest-logging (>=1.0.2, <=1.0.5) potentially affected by CVE-2026-34531 via flask-httpauth (3.2.2)
flask-httpauth PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-httpauth and may be impacted: - cloudmesh-client =4.5.0, =1.0.2, =1.0.5 Source cves: CVE-2026-34531 Source advisory: OSV:GHSA-P44Q-VQPR-4XMG...
invenio-accounts (>=1.0.0a1, <=1.0.0a5), python-database-rest-logging (>=1.0.2, <=1.0.5) potentially affected by CVE-2021-23385 via flask-security (1.7.5)
flask-security PYPI version 1.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security and may be impacted: - invenio-accounts =1.0.0a1, =1.0.2, =1.0.5 Source cves: CVE-2021-23385 Source advisory: OSV:GHSA-CG8C-GC2J-2WF7...