9 matches found
tracdap-runtime (>=0.5.15, <=0.6.0rc1) potentially affected by unknown CVE via dulwich (0.21.2)
dulwich PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - tracdap-runtime =0.5.15, =0.6.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...
tracdap-runtime (>=0.9.0rc2, <=0.10.0b2) potentially affected by unknown CVE via dulwich (0.23.2)
dulwich PYPI version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - tracdap-runtime =0.9.0rc2, =0.10.0b2 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...
grimoirelab (>=1.9.1rc1, <=1.9.2), infrahub-server (>=1.6.0b0, <=1.8.0b0) +3 more potentially affected by unknown CVE via dulwich (0.22.7)
dulwich PYPI version 0.22.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.9.1rc1, =1.6.0b0, =0.1.2, =0.36.2, =0.8.0b4, =0.9.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...
grimoirelab (>=1.6.0rc1, <=1.7.0), qgis-deployment-toolbelt (>=0.34.5, <=0.36.0) +2 more potentially affected by unknown CVE via dulwich (0.22.1)
dulwich PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.6.0rc1, =0.34.5, =0.6.0rc3, =0.1.0, =0.3.4 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...
tracdap-runtime (>=0.5.15, <=0.6.0rc1) potentially affected by unknown CVE via dulwich (0.21.2)
dulwich PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - tracdap-runtime =0.5.15, =0.6.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...
tracdap-runtime (>=0.9.0rc2, <=0.10.0b2) potentially affected by unknown CVE via dulwich (0.23.2)
dulwich PYPI version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - tracdap-runtime =0.9.0rc2, =0.10.0b2 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...
grimoirelab (>=1.9.1rc1, <=1.9.2), infrahub-server (>=1.6.0b0, <=1.8.0b0) +3 more potentially affected by unknown CVE via dulwich (0.22.7)
dulwich PYPI version 0.22.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.9.1rc1, =1.6.0b0, =0.1.2, =0.36.2, =0.8.0b4, =0.9.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...
robotframework-browser (14.3.0), rooster-client (0.0.1) +1 more potentially affected by CVE-2026-0994 via protobuf (4.21.10)
protobuf PYPI version 4.21.10 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - robotframework-browser 14.3.0 - rooster-client 0.0.1 - tracdap-runtime =0.5.4, =0.6.0rc1 Source cves: CVE-2026-0994 Source advisory:...
robotframework-browser (14.3.0), rooster-client (0.0.1) +1 more potentially affected by CVE-2026-0994 via protobuf (4.21.10)
protobuf PYPI version 4.21.10 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - robotframework-browser 14.3.0 - rooster-client 0.0.1 - tracdap-runtime =0.5.4, =0.6.0rc1 Source cves: CVE-2026-0994 Source advisory:...