bioimageio-engine (>=0.1.0, <=0.1.3), cmd2func (>=0.1.0, <=0.2.1) +11 more potentially affected by unknown CVE via funcdesc (0.2.1)

funcdesc PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on funcdesc and may be impacted: - bioimageio-engine =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.3.0, =0.1.1, =0.5.0, =0.5.4 - synago 0.1.0 Source cves:...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

grape (0.2.5), neat-ml (0.1.0) potentially affected by unknown CVE via embiggen (0.11.96)

embiggen PYPI version 0.11.96 is affected by a known vulnerability. The following packages have a transitive dependency on embiggen and may be impacted: - grape 0.2.5 - neat-ml 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-EMBIGGEN-17230566...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

mrbios (0.1.0) potentially affected by unknown CVE via executor-http (0.1.2)

executor-http PYPI version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on executor-http and may be impacted: - mrbios 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-EXECUTORHTTP-17220138...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

cafe-release (>=0.1.3, <=0.2.1rc1), cellist (>=1.0.0, <=1.1.1) +4 more potentially affected by unknown CVE via dynamo-release (>=1.4.1, <=1.5.3)

dynamo-release PYPI version =1.4.1, =0.1.3, =1.0.0, =0.1.7, =1.0.0, =1.1.1 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DYNAMORELEASE-17220136...

magique-ai (>=0.1.0, <=0.4.3), pantheon-agents (>=0.3.0, <=0.3.3) +2 more potentially affected by unknown CVE via magique (0.6.7)

magique PYPI version 0.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on magique and may be impacted: - magique-ai =0.1.0, =0.3.0, =0.1.1, =0.5.0, =0.5.4 Source cves: unknown CVE Source advisory: SNYK:PYTHON-MAGIQUE-17220140...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

phenotron (0.1.0), rarelink (>=2.0.6, <=2.0.7) potentially affected by unknown CVE via pyphetools (>=0.4.16, <=0.9.119)

pyphetools PYPI version =0.4.16, =2.0.6, =2.0.7 Source cves: unknown CVE Source advisory: SNYK:PYTHON-PYPHETOOLS-17230567...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

pantheon-agents (>=0.3.0, <=0.3.3), pantheon-cli (>=0.1.1, <=0.1.4) potentially affected by unknown CVE via pantheon-toolsets (0.5.4)

pantheon-toolsets PYPI version 0.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on pantheon-toolsets and may be impacted: - pantheon-agents =0.3.0, =0.1.1, =0.1.4 Source cves: unknown CVE Source advisory: SNYK:PYTHON-PANTHEONTOOLSETS-17220147...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...