edspdf (>=0.5.0b0, <=0.5.3), ocrmypdf (>=13.4.2, <=13.4.3) +3 more potentially affected by CVE-2025-70559 via pdfminer-six (20220319.0.0)

pdfminer-six PYPI version 20220319.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - edspdf =0.5.0b0, =13.4.2, =0.6.1, =1.4.0, =2.4.24, =3.2.9 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

ocrmypdf (>=9.4.0, <=9.5.0), seleniumbase (>=1.34.12, <=1.34.25) potentially affected by CVE-2025-64512 via pdfminer-six (20200104.0.0)

pdfminer-six PYPI version 20200104.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.4.0, =1.34.12, =1.34.25 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

seleniumbase (1.34.26) potentially affected by CVE-2025-64512 via pdfminer-six (20200121.0.0)

pdfminer-six PYPI version 20200121.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - seleniumbase 1.34.26 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

beancount-ce (>=0.1.0, <=1.2.0), ocrmypdf (>=10.3.2, <=11.3.0) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20200726.0.0)

pdfminer-six PYPI version 20200726.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - beancount-ce =0.1.0, =10.3.2, =0.3.0, =1.0.3, =1.44.0, =0.1.1, =0.1.7 Source cves: CVE-2025-64512 Source advisory:...

edspdf (>=0.5.0b0, <=0.5.3), ocrmypdf (>=13.4.2, <=13.4.3) +3 more potentially affected by CVE-2025-64512 via pdfminer-six (20220319.0.0)

pdfminer-six PYPI version 20220319.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - edspdf =0.5.0b0, =13.4.2, =0.6.1, =1.4.0, =2.4.24, =3.2.9 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

ocrmypdf (10.3.1), seleniumbase (>=1.43.0, <=1.43.1) potentially affected by CVE-2025-64512 via pdfminer-six (20200720.0.0)

pdfminer-six PYPI version 20200720.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf 10.3.1 - seleniumbase =1.43.0, =1.43.1 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

amazon-ad-sdk (0.2.23), seleniumbase (1.50.5) potentially affected by CVE-2025-50181 via urllib3 (1.26.1)

urllib3 PYPI version 1.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - amazon-ad-sdk 0.2.23 - seleniumbase 1.50.5 Source cves: CVE-2025-50181 Source advisory: OSV:GHSA-PQ67-6M6Q-MJ2V...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2024-28219 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2024-28219 Source advisory: OSV:GHSA-44WM-F244-XHP3...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2023-50782 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2023-50782 Source advisory:...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2023-50447 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2023-50447 Source advisory: OSV:GHSA-3F63-HFP8-52JQ...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2023-44271 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2023-44271 Source advisory: OSV:PYSEC-2023-227...

discord-musicbot (>=0.0.2.dev20170604, <=0.0.3.dev20170604), germanium (>=2.0.6, <=2.0.8) +6 more potentially affected by CVE-2023-5590 via selenium (3.4.3)

selenium PYPI version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - discord-musicbot =0.0.2.dev20170604, =2.0.6, =1.1.0, =0.2.3, =1.4.0, =0.8.0, =0.1.0a88, =0.1.0b10 Source cves: CVE-2023-5590 Source advisory:...

gfiberspeedtest (>=1.0.0, <=1.0.1), qpagent (337.0.0) +3 more potentially affected by CVE-2023-5590 via selenium (3.5.0)

selenium PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - gfiberspeedtest =1.0.0, =0.8.2, =0.9.1 Source cves: CVE-2023-5590 Source advisory: OSV:PYSEC-2023-206...

biweeklybudget (>=0.6.0, <=0.7.0), masterqa (1.1.2) +3 more potentially affected by CVE-2023-5590 via selenium (3.6.0)

selenium PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - biweeklybudget =0.6.0, =0.1.4, =1.4.6, =1.3.5, =1.3.6 Source cves: CVE-2023-5590 Source advisory: OSV:PYSEC-2023-206...

ausfin (>=0.1.0, <=0.2.3), germanium (>=2.0.9, <=2.0.11) +4 more potentially affected by CVE-2023-5590 via selenium (3.11.0)

selenium PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - ausfin =0.1.0, =2.0.9, =1.2.1, =1.10.0, =1.7.0, =2.1.1 Source cves: CVE-2023-5590 Source advisory: OSV:PYSEC-2023-206...

cloudfeaster (>=0.9.33, <=0.9.45), pytest-zafira (>=1.0.0, <=1.0.3) +1 more potentially affected by CVE-2023-5590 via selenium (3.14.0)

selenium PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - cloudfeaster =0.9.33, =1.0.0, =1.14.6, =1.15.10 Source cves: CVE-2023-5590 Source advisory: OSV:PYSEC-2023-206...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2023-4863 +1 more via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory:...

diycrate (>=0.2.10.3, <=0.2.10.9rc1), lintersmagic (0.1.1) +3 more potentially affected by CVE-2023-24816 via ipython (7.17.0)

ipython PYPI version 7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - diycrate =0.2.10.3, =1.45.2, =0.0.1, =0.0.6 - traktor-server 0.0.3 Source cves: CVE-2023-24816 Source advisory: OSV:PYSEC-2023-17...

plotly-light (>=1.0.3, <=1.0.4), seleniumbase (>=2.5.3, <=3.2.1) potentially affected by CVE-2023-24816 via ipython (7.33.0)

ipython PYPI version 7.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - plotly-light =1.0.3, =2.5.3, =3.2.1 Source cves: CVE-2023-24816 Source advisory: OSV:PYSEC-2023-17...

mlwhatif (0.0.1.dev0), roboduck (>=0.10.0, <=0.10.1) +1 more potentially affected by CVE-2023-24816 via ipython (7.25.0)

ipython PYPI version 7.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - mlwhatif 0.0.1.dev0 - roboduck =0.10.0, =1.63.13, =1.63.20 Source cves: CVE-2023-24816 Source advisory: OSV:PYSEC-2023-17...