7810 matches found
Information Leakage
case-utils is vulnerable to Information Leakage. The vulnerability is caused due to improper handling of UUIDs generation within the localuuid function. This could allow an attacker to guess the UUID, resulting in sensitive data exposure...
cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code
Impact What kind of vulnerability is it? Who is impacted? An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0 at and since 0.5.0, before 0.15.0. The vulnerability stems from a Python function,...
GHSA-RGRF-6MF5-M882 cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code
Impact What kind of vulnerability is it? Who is impacted? An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0 at and since 0.5.0, before 0.15.0. The vulnerability stems from a Python function,...
CVE-2024-22194
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...
case-prov (>=0.3.0, <=0.4.0) potentially affected by CVE-2024-22194 via case-utils (0.6.1)
case-utils PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov =0.3.0, =0.4.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...
case-prov (0.6.0) potentially affected by CVE-2024-22194 via case-utils (0.9.1.post0)
case-utils PYPI version 0.9.1.post0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.6.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...
case-prov (>=0.12.0, <=0.13.0) potentially affected by CVE-2024-22194 via case-utils (0.16.0)
case-utils PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov =0.12.0, =0.13.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...
PYSEC-2024-6
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...
PYSEC-2024-6
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...
PYSEC-2024-5
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...
Information disclosure
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...
case-prov (0.10.0) potentially affected by CVE-2024-22194 via case-utils (0.14.1.post0)
case-utils PYPI version 0.14.1.post0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.10.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...
case-prov (>=0.9.0, <=0.9.1) potentially affected by CVE-2024-22194 via case-utils (0.13.1.post0)
case-utils PYPI version 0.13.1.post0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov =0.9.0, =0.9.1 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...
PYSEC-2024-5
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...
case-prov (0.5.0) potentially affected by CVE-2024-22194 via case-utils (0.7.1)
case-utils PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.5.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...
case-prov (0.14.0) potentially affected by CVE-2024-22194 via case-utils (0.17.0)
case-utils PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.14.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...
case-prov (0.11.0) potentially affected by CVE-2024-22194 via case-utils (0.15.0)
case-utils PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.11.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...
case-prov (0.8.0) potentially affected by CVE-2024-22194 via case-utils (0.11.1.post0)
case-utils PYPI version 0.11.1.post0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.8.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...
case-prov (0.7.0) potentially affected by CVE-2024-22194 via case-utils (0.10.1.post0)
case-utils PYPI version 0.10.1.post0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.7.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...
CVE-2024-22194 cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...