muffin (>=0.0.98, <=0.0.104) potentially affected by CVE-2024-52304 via aiohttp (0.16.6)

aiohttp PYPI version 0.16.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.98, =0.0.104 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

slskit (>=2020.5.0, <=2020.6.0) potentially affected by CVE-2023-34049 via salt (3000.9.0)

salt PYPI version 3000.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - slskit =2020.5.0, =2020.6.0 Source cves: CVE-2023-34049 Source advisory: OSV:PYSEC-2026-1892...

cloudmesh-client (>=4.2.6, <=4.4.0), nginxauthdaemon (>=1.0.0a1, <=1.1.0) +1 more potentially affected by CVE-2024-49766 via werkzeug (0.11.10)

werkzeug PYPI version 0.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.2.6, =1.0.0a1, =1.1.0 - picopayments-hub 0.0.11 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

eve (>=0.9.1, <=0.9.2), fancy-nlp (>=0.0.1, <=0.0.4) +15 more potentially affected by CVE-2024-49766 via werkzeug (0.15.4)

werkzeug PYPI version 0.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - eve =0.9.1, =0.0.1, =0.1.3, =2.0.0, =0.1.0a23, =0.1.0, =1.0.2, =1.0.0, =0.100.4, =0.1.0, =0.10.0 - revelation 1.1.0 and more Source cves:...

actinia-core (>=4.9.1, <=4.10.0), adeso (>=0.0.1, <=0.0.4) +27 more potentially affected by CVE-2024-49766 via werkzeug (2.3.6)

werkzeug PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - actinia-core =4.9.1, =0.0.1, =0.1.23, =0.6.14, =1.0.1, =1.0.0, =1.1.0, =2024.1.1, =0.0.1, =0.0.1, =0.0.25, =0.2.27 - fortigate-vpn-login 0.5.0 a...

drmlapp (1.0.6), python-webex-bot (0.51.0) potentially affected by CVE-2024-49766 via werkzeug (0.15.1)

werkzeug PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - drmlapp 1.0.6 - python-webex-bot 0.51.0 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-49766 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

docker-compose-control-center (3.1.0) potentially affected by CVE-2024-45231 via django (2.1.10)

django PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center 3.1.0 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

django-pesapal (>=0.3.0, <=0.3.4) potentially affected by CVE-2024-45231 via django (1.7.8)

django PYPI version 1.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-pesapal =0.3.0, =0.3.4 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

aiida-core (1.0.0) potentially affected by CVE-2024-45231 via django (1.11.25)

django PYPI version 1.11.25 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aiida-core 1.0.0 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

nemo (>=1.22.0, <=1.22.1), patchman (>=1.2.3, <=1.2.4) potentially affected by CVE-2024-45231 via django (1.11.27)

django PYPI version 1.11.27 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - nemo =1.22.0, =1.2.3, =1.2.4 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

carml (>=21.0.0, <=21.1.0), ctrader-fix (>=0.1.0, <=0.1.1) +17 more potentially affected by CVE-2024-41671 via twisted (21.7.0)

twisted PYPI version 21.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carml =21.0.0, =0.1.0, =0.4.0, =1.0.6, =0.0.1.dev15, =0.37.0, =0.1.2, =0.0.1, =0.1.0, =6.0.0, =6.0.2 and more Source cves: CVE-2024-41671 Source...

aaiopay (>=0.2.1, <=0.2.2), absorb (0.1.2) +146 more potentially affected by CVE-2024-6345 via setuptools (65.5.1)

setuptools PYPI version 65.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aaiopay =0.2.1, =0.1.0, =1.8.15, =1.8.17, =0.0.8, =1.8.14, =1.0.6a1, =0.0.1, =3.0.0, =0.1.2, =0.2.0, =0.2.1 and more Source cves:...

a2grunnerp (>=0.1.0, <=0.1.8), abracadabra (>=0.0.0, <=0.0.7) +900 more potentially affected by CVE-2024-5569 via zipp (>=3.0.0, <=3.19.0)

zipp PYPI version =3.0.0, =0.1.0, =0.0.0, =2.0.0a0, =1.0.0.dev0, =1.5.2, =0.1.0, =1.0.0, =1.0.9, =0.0.1, =1.3.0, =0.0.1, =0.1.2, =0.1.8 and more Source cves: CVE-2024-5569 Source advisory: OSV:PYSEC-2026-2074...

fastlane (>=0.1.0, <=2.2.3) potentially affected by CVE-2024-40647 via sentry-sdk (0.5.5)

sentry-sdk PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - fastlane =0.1.0, =2.2.3 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

aliot-py (>=0.1.0, <=1.0.6), angeltools (>=0.1.1, <=0.2.3.post5) +19 more potentially affected by CVE-2024-6345 via setuptools (62.1.0)

setuptools PYPI version 62.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aliot-py =0.1.0, =0.1.1, =0.3.0, =6.8.1, =2.0.8, =1.13.0, =2.4.3, =0.0.1, =1.0.5, =1.0.7 - nucypher 6.1.0 - pipsalabim 0.2.0 -...

an-website (>=22.7.1, <=22.7.5), antigen (0.2.0) +31 more potentially affected by CVE-2024-6345 via setuptools (62.6.0)

setuptools PYPI version 62.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.7.1, =0.2.0, =0.1.0, =0.1.3, =1.2.18, =3.5.2, =1.3.0, =1.4.2 and more Source cves: CVE-2024-6345 Source advisory:...

goyabu-cli (>=1.0.7, <=1.0.15) potentially affected by CVE-2024-6345 via setuptools (64.0.1)

setuptools PYPI version 64.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - goyabu-cli =1.0.7, =1.0.15 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

gripx (>=0.0.5, <=0.0.11), pythonmonitorapp (>=0.1.0, <=0.2.40) potentially affected by CVE-2024-6345 via setuptools (65.0.0)

setuptools PYPI version 65.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - gripx =0.0.5, =0.1.0, =0.2.40 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

python3-cisctl (>=0.1.2, <=1.1.0), python3-nbctl (>=0.0.2, <=1.0.0) +1 more potentially affected by CVE-2024-6345 via setuptools (65.1.1)

setuptools PYPI version 65.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - python3-cisctl =0.1.2, =0.0.2, =0.0.3, =0.0.28 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...