gpt-sovits-cpufast (0.1.0), lazyllm (>=0.3.0, <=0.6.3) potentially affected by CVE-2024-47872 via gradio (5.0.0b10)

gradio PYPI version 5.0.0b10 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gpt-sovits-cpufast 0.1.0 - lazyllm =0.3.0, =0.6.3 Source cves: CVE-2024-47872 Source advisory: SNYK:PYTHON-GRADIO-8180433...

africanwhisper (>=0.2.6, <=0.9.0), ominix-tts (0.1.0) potentially affected by CVE-2024-47868 via gradio (4.24.0)

gradio PYPI version 4.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - africanwhisper =0.2.6, =0.9.0 - ominix-tts 0.1.0 Source cves: CVE-2024-47868 Source advisory: OSV:GHSA-4Q3C-CJ7G-JCWF...

cabrnet (1.1.0), lisa-on-cuda (1.2.0) potentially affected by CVE-2024-47868 via gradio (4.33.0)

gradio PYPI version 4.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cabrnet 1.1.0 - lisa-on-cuda 1.2.0 Source cves: CVE-2024-47868 Source advisory: OSV:GHSA-4Q3C-CJ7G-JCWF...

gryannote (>=0.3.1, <=0.3.3), scraibe-webui (0.1.0) potentially affected by CVE-2024-47868 via gradio (4.27.0)

gradio PYPI version 4.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gryannote =0.3.1, =0.3.3 - scraibe-webui 0.1.0 Source cves: CVE-2024-47868 Source advisory: OSV:GHSA-4Q3C-CJ7G-JCWF...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +7957 more potentially affected by CVE-2024-48949 via elliptic (>=6.0.2, <=6.5.5)

elliptic NPM version =6.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-48949 Source advisory: OSV:GHSA-434G-2637-QMQR...

amaranth-yosys (0.25.0.0.post78), yowasp-runtime (>=1.41.0, <=1.42.0) potentially affected by CVE-2024-47813 via wasmtime (14.0.0)

wasmtime PYPI version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post78 - yowasp-runtime =1.41.0, =1.42.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (>=0.40.0.0.post96, <=0.40.0.0.post97), yowasp-runtime (>=1.60.0, <=1.62.0) potentially affected by CVE-2024-47813 via wasmtime (22.0.0)

wasmtime PYPI version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.40.0.0.post96, =1.60.0, =1.62.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

ashley (1.0.0b4), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2024-45231 via django (3.1.4)

django PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ashley 1.0.0b4 - hazard-feed =0.2.0, =0.2.5 - kiwitcms 8.9.0 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +518 more potentially affected by CVE-2024-45231 via django (>=4.0.0a1, <=4.2.15)

django PYPI version =4.0.0a1, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.1, =0.1.0, =0.0.3, =4.0.9.0, =4.2.10.0 and more Source cves: CVE-2024-45231 Source advisory: GHSA-RRQC-C2JX-6JGV...

django-blocklist (>=2.7.0, <=2.8.0), django-etf-api (0.1.0) +13 more potentially affected by CVE-2024-45231 via django (5.1.0)

django PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-blocklist =2.7.0, =1.0.3, =0.6.2, =0.146.0, =0.2.30, =1.0.0, =0.3.19, =0.91.0, =2.6.0b0, =2.6.0b2 Source cves: CVE-2024-45231 Source advisory...

rapid-router (>=1.0.0.post0.dev406, <=1.0.0.post0.dev408) potentially affected by CVE-2024-45231 via django (1.8.3)

django PYPI version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - rapid-router =1.0.0.post0.dev406, =1.0.0.post0.dev408 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

correctiv-chartbuilder (>=0.0.1, <=0.0.5), django-autoconfig (0.3.3) +1 more potentially affected by CVE-2024-45231 via django (1.8.0rc1)

django PYPI version 1.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - correctiv-chartbuilder =0.0.1, =1.0.25, =1.0.27 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

django-admin-caching (0.1.3), django-budget (0.7.2) +19 more potentially affected by CVE-2024-45231 via django (1.11.0)

django PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching 0.1.3 - django-budget 0.7.2 - django-currentuser =0.1.0, =0.1.2, =1.5.0, =1.1.7, =0.0.1, =1.18.0, =1.20.0 and more Source cves...

django-dragon (0.1.1), label-studio (>=1.3.0, <=1.4.0) potentially affected by CVE-2024-45231 via django (3.1.13)

django PYPI version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-dragon 0.1.1 - label-studio =1.3.0, =1.4.0 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

django-rest-authemail (1.6.0) potentially affected by CVE-2024-45231 via django (1.11.17)

django PYPI version 1.11.17 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail 1.6.0 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

boorunaut (0.4.3), caluma (>=6.3.2, <=6.4.0) potentially affected by CVE-2024-45231 via django (2.2.15)

django PYPI version 2.2.15 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - boorunaut 0.4.3 - caluma =6.3.2, =6.4.0 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

aimmo (>=2.4.1, <=2.4.3), cfl-common (>=6.12.5, <=6.17.0) +12 more potentially affected by CVE-2024-45231 via django (3.2.14)

django PYPI version 3.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.4.1, =6.12.5, =6.12.5, =1.1.2, =4.3.0rc1, =6.11.1, =5.0.0, =5.4.0 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @digitalnative/standard-protocol-sdk (>=0.0.190, <=0.0.195) +48 more potentially affected by CVE-2024-21533 via ggit (>=2.0.0, <=2.4.12)

ggit NPM version =2.0.0, =2.4.0-alpha.0, =0.0.190, =1.1.2, =0.1.0, =4.1.6, =0.1.0, =0.1.0, =0.0.1, =1.7.3, =1.0.0, =0.13.4, =1.9.1, =1.0.0, =1.21.0, =1.23.3 and more Source cves: CVE-2024-21533 Source advisory: OSV:GHSA-PR45-CG4X-FF4M...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @digitalnative/standard-protocol-sdk (>=0.0.190, <=0.0.195) +48 more potentially affected by CVE-2024-21532 via ggit (>=2.0.0, <=2.4.12)

ggit NPM version =2.0.0, =2.4.0-alpha.0, =0.0.190, =1.1.2, =0.1.0, =4.1.6, =0.1.0, =0.1.0, =0.0.1, =1.7.3, =1.0.0, =0.13.4, =1.9.1, =1.0.0, =1.21.0, =1.23.3 and more Source cves: CVE-2024-21532 Source advisory: OSV:GHSA-62CX-5XJ4-WFM4...

@antonovicha/hdbext-async (>=1.0.0, <=1.0.4), @christianwheeler/typeorm (>=0.2.23, <=0.2.27) +37 more potentially affected by CVE-2024-45277 via @sap/hana-client (>=2.3.119, <=2.21.28)

@sap/hana-client NPM version =2.3.119, =1.0.0, =0.2.23, =0.0.1-alpha.3, =0.1.2, =1.1.1, =0.1.0, =1.0.2, =6.2.0, =2.0.0, =1.0.0, =1.1.0, =2.4.3, =1.3.2, =1.26.1 and more Source cves: CVE-2024-45277 Source advisory: OSV:GHSA-6339-GV7W-G5F4...