1541 matches found
MGASA-2020-0249 Updated python-typed-ast packages fix security vulnerability
Updated python-typed-ast package fixes security vulnerabilities: typedast 1.3.0 and 1.3.1 has a handlekeywordonlyargs out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source but not necessarily execute it may be able to crash the interpreter process...
ambition-edc (>=0.3.68 <=0.3.72), caluma (>=5.2.1 <=5.3.1) +28 more potentially affected by CVE-2020-9402 via django (>=2.2.0 <=2.2.10)
django PYPI version =2.2.0, =0.3.68, =5.2.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.26 - django-smorest =0.1.3 - djangorestframework-simplejwt-captcha =1.1.4 - djpub =0.0.1 and more Source cves: CVE-2020-9402 Source advisory: OSV:GHSA-3GH2-XW74-JMCW...
abba-python (>=0.1.6 <=0.3.0), adpred (>=1.1.2 <=1.2.7) +357 more potentially affected by CVE-2018-21233 via tensorflow (>=1.0.1 <=1.6.0)
tensorflow PYPI version =1.0.1, =0.1.6, =1.1.2, =0.0.1, =0.3.26, =0.2.0, =0.3.1, =0.1.0, =0.4.2, =0.1.0, =0.4.0, =0.1.0, =0.3.1 and more Source cves: CVE-2018-21233 Source advisory: OSV:GHSA-H98H-8MXR-M8GX...
adversarial-labeller (=0.1.8), alo7-airflow (>=1.10.0 <=1.10.0.7) +113 more potentially affected by CVE-2020-6802 via bleach (>=1.2.2 <=3.1.0)
bleach PYPI version =1.2.2, =1.10.0, =0.1.0, =0.0.6, =0.3.0, =0.3.4, =0.0.5, =0.1.3, =0.0.1, =0.2.1, =1.0.2, =0.1.2, =1.0.7 and more Source cves: CVE-2020-6802 Source advisory: OSV:PYSEC-2020-27...
add-psd-layer (=0.1.0), agkit (=0.27.0) +38 more potentially affected by CVE-2020-10571 via psd-tools (>=1.10.2 <=1.9.28)
psd-tools PYPI version =1.10.2, =0.1.2, =0.1.1, =0.1.0, =2.0.0, =4.1.0, =0.8.0, =0.1.0, =0.1.6, =2023.0.0, =1.1.0, =2024.0.0, =2024.0.1 and more Source cves: CVE-2020-10571 Source advisory: OSV:PYSEC-2020-91...
alcali (>=2018.3.4 <=2019.2.4.post0), argus-server (>=1.0.0 <=1.1.1) +164 more potentially affected by CVE-2020-9402 via django (>=3.0.0 <=3.0.3)
django PYPI version =3.0.0, =2018.3.4, =1.0.0, =0.1.0, =0.1.3, =0.18.0, =0.3.0, =2.8.0, =0.1.1, =0.0.1, =0.1.3 - djangelo =0.1.4 - django-acsecure =0.1.3 - django-add-default-value =0.4.0 - django-admin-custom-filters =0.1.0 and more Source cves: CVE-2020-9402 Source advisory: OSV:PYSEC-2020-36...
SUSE-SU-2020:0555-1 Security update for python-aws-sam-translator, python-boto3, python-botocore, python-cfn-lint, python-jsonschema, python-nose2, python-parameterized, python-pathlib2, python-pytest-cov, python-requests, python-s3transfer
This update for python-aws-sam-translator, python-boto3, python-botocore, python-cfn-lint, python-jsonschema, python-nose2, python-parameterized, python-pathlib2, python-pytest-cov, python-requests, python-s3transfer, python-jsonpatch, python-jsonpointer, python-scandir, python-PyYAML fixes the...
adversarial-labeller (=0.1.8), alo7-airflow (>=1.10.0 <=1.10.0.7) +113 more potentially affected by CVE-2020-6802 via bleach (>=1.2.2 <=3.1.0)
bleach PYPI version =1.2.2, =1.10.0, =0.1.0, =0.0.6, =0.3.0, =0.3.4, =0.0.5, =0.1.3, =0.0.1, =0.2.1, =1.0.2, =0.1.2, =1.0.7 and more Source cves: CVE-2020-6802 Source advisory: OSV:GHSA-Q65M-PV3F-WR5R...
acclaim-badges (=0.1.0), admindjango-ckeditor-blog (=0.1.0) +158 more potentially affected by CVE-2019-19844 via django (>=1.10.0 <=1.11.26)
django PYPI version =1.10.0, =0.2.0.dev20181221, =0.1.0b2696.post0.dev1, =0.2.1, =3.1.4, =2.0.0, =0.3.1, =0.0.19, =0.0.24 and more Source cves: CVE-2019-19844 Source advisory: OSV:GHSA-VFQ6-HQ5R-27R6...
agogosml-cli (=0.1.2), asrtt (>=0.0.2 <=1.3.2) +10 more potentially affected by CVE-2019-19588 via validators (>=0.12.2 <=0.12.5)
validators PYPI version =0.12.2, =0.0.2, =0.1.1, =1.0.5, =0.9.0, =0.1.3, =0.2.2, =0.1.0, =0.6.13, =0.1.1, =0.4.0.dev0 Source cves: CVE-2019-19588 Source advisory: OSV:PYSEC-2019-134...
aeropress (=0.0.5), allennlp-datalawyer (>=0.1.0 <=0.1.10) +34 more potentially affected by CVE-2019-19275 via typed-ast (>=0.6.3 <=1.3.1)
typed-ast PYPI version =0.6.3, =0.1.0, =1.0.1, =1.0.17, =2.4.1, =0.1.1, =1.0.0, =2.2.2b1, =0.31.0, =1.3.5, =1.0.0, =0.3.4, =0.9.94, =2.0.3 - hmt-escrow =0.2.0rc1 and more Source cves: CVE-2019-19275 Source advisory: OSV:PYSEC-2019-131...
bookscrape (>=0.0.1.dev1 <=0.0.2b7), codeforlife-portal (>=1.1.1 <=2.28.1) +53 more potentially affected by CVE-2019-17626 via reportlab (>=3.1.44 <=3.5.26)
reportlab PYPI version =3.1.44, =0.0.1.dev1, =1.1.1, =0.7.0, =0.1.0, =0.0.2, =1.1.0, =2.7.0, =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =0.1.0, =0.733.0, =0.736.0 and more Source cves: CVE-2019-17626 Source advisory: OSV:PYSEC-2019-117...
SUSE-RU-2019:2505-1 Recommended update for python-jmespath, python-jsonschema, python-paramiko, python-pexpect, python-pip, python-ply, python-pretend, python-process-tests, python-pycodestyle, python-pyflakes, python-pyxdg, python-tabulate, python-vcversioner
This update for python-jmespath, python-jsonschema, python-paramiko, python-pexpect, python-pip, python-ply, python-pretend, python-process-tests, python-pycodestyle, python-pyflakes, python-pyxdg, python-tabulate, python-vcversioner fixes the following issues: python-pip was updated to 10.0.1...
addok (=0.5.0), alo7-airflow (>=1.10.0 <=1.10.0.7) +159 more potentially affected by CVE-2019-14806 via werkzeug (>=0.10.1 <=0.15.2)
werkzeug PYPI version =0.10.1, =1.10.0, =1.10.3, =0.4.3, =0.1.0, =0.1.17, =0.6.7.post3, =0.1.0, =0.1.1, =0.6.4, =0.1.0, =0.1.0, =0.3.3 - clastic =19.0.0 and more Source cves: CVE-2019-14806 Source advisory: OSV:GHSA-GQ9M-QVPX-68HC...
NewStart CGSL MAIN 5.04 : python Multiple Vulnerabilities (NS-SA-2019-0008)
The remote NewStart CGSL host, running version MAIN 5.04, has python packages installed that are affected by multiple vulnerabilities: - Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service application crash an...
django-aesfield (=3.0.0), django-autoconfig (=0.8.0) +11 more potentially affected by CVE-2019-14233 via django (>=2.1.0 <=2.1.10)
django PYPI version =2.1.0, =0.1.0, =0.1.0, =0.3.0, =1.7.3, =0.0.3, =1.1.0, =0.1.2, =1.0.0rc2, =0.1.0, =0.2.0.dev2 Source cves: CVE-2019-14233 Source advisory: OSV:PYSEC-2019-12...
abbr (=0.0.0), add-dependencies (=2.3.0) +159 more potentially affected by CVE-2019-1010083 via flask (>=0.10.1 <=0.6.1)
flask PYPI version =0.10.1, =0.26.0, =1.4.15, =0.11.1, =0.4.0, =4.0.0, =1.10.0, =0.1.0, =0.14.0, =0.1.1, =0.1.17, =0.1.0, =1.0.0 - blendedux =0.0.2 and more Source cves: CVE-2019-1010083 Source advisory: OSV:GHSA-5WV5-4VPF-PJ6M...
aimmo (>=0.61.9 <=0.69.1b348), ambition-edc (>=0.3.68 <=0.3.72) +57 more potentially affected by CVE-2019-12308 via django (>=2.2.0 <=2.2.19)
django PYPI version =2.2.0, =0.61.9, =0.3.68, =0.14.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =2.0.0, =2.2.0 - django-country-filter =0.0.1 and more Source cves: CVE-2019-12308 Source advisory: OSV:PYSEC-2019-79...
EulerOS 2.0 SP3 : python (EulerOS-SA-2019-1594)
According to the version of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509...
