cumulusci (>=2.5.6, <=3.7.0), lgblkb-tools (>=1.0.60, <=1.0.66) +2 more potentially affected by CVE-2024-28102 via jwcrypto (0.6.0)

jwcrypto PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =2.5.6, =1.0.60, =0.0.0, =1.4.5, =1.7.0 Source cves: CVE-2024-28102 Source advisory: OSV:PYSEC-2026-1484...

cumulusci (>=2.5.6, <=3.7.0), lgblkb-tools (>=1.0.60, <=1.0.66) +2 more potentially affected by CVE-2026-39373 via jwcrypto (0.6.0)

jwcrypto PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =2.5.6, =1.0.60, =0.0.0, =1.4.5, =1.7.0 Source cves: CVE-2026-39373 Source advisory: OSV:GHSA-FJRM-76X2-C4Q4...

cumulusci (>=2.5.6, <=3.7.0), lgblkb-tools (>=1.0.60, <=1.0.66) +2 more potentially affected by CVE-2024-28102 via jwcrypto (0.6.0)

jwcrypto PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =2.5.6, =1.0.60, =0.0.0, =1.4.5, =1.7.0 Source cves: CVE-2024-28102 Source advisory: OSV:GHSA-J857-7RVV-VJ97...

cumulusci (>=2.5.6, <=3.7.0), lgblkb-tools (>=1.0.60, <=1.0.66) +2 more potentially affected by CVE-2023-6681 via jwcrypto (0.6.0)

jwcrypto PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =2.5.6, =1.0.60, =0.0.0, =1.4.5, =1.7.0 Source cves: CVE-2023-6681 Source advisory: OSV:PYSEC-2024-104...