kraken (0.4.3), revscoring (0.6.4) +1 more potentially affected by CVE-2023-29824 via scipy (0.14.0)

scipy PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on scipy and may be impacted: - kraken 0.4.3 - revscoring 0.6.4 - sparselsh 1.1.3 Source cves: CVE-2023-29824 Source advisory: OSV:PYSEC-2023-114...

kraken (0.4.3), revscoring (0.6.4) +1 more potentially affected by CVE-2023-25399 via scipy (0.14.0)

scipy PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on scipy and may be impacted: - kraken 0.4.3 - revscoring 0.6.4 - sparselsh 1.1.3 Source cves: CVE-2023-25399 Source advisory: OSV:PYSEC-2023-102...