apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2024-27906 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2024-27906 Source advisory:...

abi-ds-utils (1.0.1), acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0) +27 more potentially affected by CVE-2024-25128 via flask-appbuilder (>=4.1.2, <=4.3.10)

flask-appbuilder PYPI version =4.1.2, =0.10.5.2rc3, =0.2.1, =0.8.2, =0.3.1, =0.0.1a0, =2.3.3rc1, =1.0.0rc1, =1.0.0b2, =0.1.0, =0.1.20, =2.3.0.dev0, =2.3.0.dev2 and more Source cves: CVE-2024-25128 Source advisory: OSV:GHSA-J2PW-VP55-FQQJ...

Fedora 38 : yarnpkg (2024-5ecc250449)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5ecc250449 advisory. Update to 1.22.21, add fixes for CVE-2022-37599, CVE-2023-26136, CVE-2023-46234. Tenable has extracted the preceding description block directly from...

com.hazelcast:hazelcast-build-utils (3.9-ea), com.hazelcast:hazelcast-client (3.9-ea) +4 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.9-ea)

com.hazelcast:hazelcast MAVEN version 3.9-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.9-ea - com.hazelcast:hazelcast-client 3.9-ea -...

com.hazelcast:hazelcast-build-utils (3.8.8), com.hazelcast:hazelcast-client (3.8.8) +1 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.8.8)

com.hazelcast:hazelcast MAVEN version 3.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.8.8 - com.hazelcast:hazelcast-client 3.8.8 - com.hazelcast:hazelcast-spring...

com.hazelcast:hazelcast-build-utils (3.8.9), com.hazelcast:hazelcast-client (3.8.9) +1 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.8.9)

com.hazelcast:hazelcast MAVEN version 3.8.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.8.9 - com.hazelcast:hazelcast-client 3.8.9 - com.hazelcast:hazelcast-spring...

com.hazelcast:hazelcast-build-utils (3.12-beta-2), com.hazelcast:hazelcast-client (3.12-beta-2) +1 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.12-beta-2)

com.hazelcast:hazelcast MAVEN version 3.12-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.12-beta-2 - com.hazelcast:hazelcast-client 3.12-beta-2 -...

com.hazelcast:hazelcast-build-utils (3.11.7), com.hazelcast:hazelcast-client (3.11.7) +1 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.11.7)

com.hazelcast:hazelcast MAVEN version 3.11.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.11.7 - com.hazelcast:hazelcast-client 3.11.7 -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.3, <=1.0.4), com.hazelcast:hazelcast-build-utils (3.6.7) +11 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.6.7)

com.hazelcast:hazelcast MAVEN version 3.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.3, =1.4.5, =1.4.6 Source cves:...

com.hazelcast:hazelcast-build-utils (3.4.8), com.hazelcast:hazelcast-client (3.4.8) +7 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.4.8)

com.hazelcast:hazelcast MAVEN version 3.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.4.8 - com.hazelcast:hazelcast-client 3.4.8 - com.hazelcast:hazelcast-cloud...

com.erudika:para-cache-hazelcast (1.30.0), com.hazelcast:hazelcast-build-utils (3.10.4) +28 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.10.4)

com.hazelcast:hazelcast MAVEN version 3.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.erudika:para-cache-hazelcast 1.30.0 - com.hazelcast:hazelcast-build-utils 3.10.4 -...

com.hazelcast:hazelcast-aws (2.3), com.hazelcast:hazelcast-build-utils (3.11-beta-1) +10 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.11-beta-1)

com.hazelcast:hazelcast MAVEN version 3.11-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-aws 2.3 - com.hazelcast:hazelcast-build-utils 3.11-beta-1 -...

com.hazelcast:hazelcast-aws (2.4), com.hazelcast:hazelcast-build-utils (3.12-beta-1) +3 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.12-beta-1)

com.hazelcast:hazelcast MAVEN version 3.12-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-aws 2.4 - com.hazelcast:hazelcast-build-utils 3.12-beta-1 -...

Malware in usaa-wdio-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Denial of Service (DoS)

Overview rack is a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a singl...

SUSE CVE-2024-26141

Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the Rack::File middleware or the...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2024-27133 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2024-27133 Source advisory: OSV:GHSA-3V79-Q7PH-J75H...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2024-27132 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2024-27132 Source advisory: OSV:PYSEC-2024-240...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2024-27133 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2024-27133 Source advisory: OSV:PYSEC-2024-241...

MAL-2024-1027 Malicious code in usaa-wdio-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8b076880375cf5dbfd78a560a3e7cd946a69a75bd088646ecf041e3922f33a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...