CVE-2024-34991

The Axepta (axepta) module for PrestaShop , developed by Quadra Informatique, is vulnerable in versions prior to 1.3.4 . A lack of permissions control allows an unauthenticated guest to download sensitive information without restriction, including partial credit card data (such as expiry dates), ...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-4940 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-4940 Source advisory: OSV:GHSA-G6C9-F4XM-9J4X...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-4941 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-4325 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-4325 Source advisory: OSV:GHSA-973G-55HP-3FRW...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-4941 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-4941 Source advisory: OSV:PYSEC-2024-184...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-4253 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-4253 Source advisory: OSV:PYSEC-2024-321...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-1727 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-1727 Source advisory: OSV:GHSA-48CQ-79QQ-6F7X...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-34511 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-34511 Source advisory: OSV:GHSA-34RF-P3R3-58X2...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-34510 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-34510 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-34510 Source advisory: OSV:PYSEC-2024-255...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-1561 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-1561 Source advisory: OSV:GHSA-G9CJ-CFPP-4G2X...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-1183 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-1183 Source advisory: OSV:GHSA-QH6X-J82H-VPF9...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-2206 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-2206 Source advisory: OSV:GHSA-R364-M2J9-MF4H...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-1729 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-1729 Source advisory: OSV:GHSA-HMX6-R76C-85G9...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-0964 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-0964 Source advisory: OSV:GHSA-F3H9-8PHC-6GVH...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2023-51449 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2023-51449 Source advisory: OSV:PYSEC-2023-249...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2023-51449 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2023-51449 Source advisory: OSV:GHSA-6QM2-WPXQ-7QH2...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2023-6572 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2023-6572 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2023-6572 Source advisory: OSV:PYSEC-2023-255...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), gcvit (>=1.0.4, <=1.0.9) +8 more potentially affected by CVE-2023-25823 via gradio (>=3.0.2, <=3.11.0)

gradio PYPI version =3.0.2, =0.7.0.dev134, =1.0.4, =0.0.1, =2.0.0rc3, =1.7.1, =0.3.0, =1.3.1, =2.2.0, =1.1.0, =2.5.2, =3.0.0b0 Source cves: CVE-2023-25823 Source advisory: GHSA-3X5J-9VWR-8RR5...