MiracleLinux 9 : python3.12-3.12.5-2.el9_5.2 (AXSA:2024-9442:17)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9442:17 advisory. python: Virtual environment venv activation scripts don't quote paths CVE-2024-9287 python: Unbounded memory buffering in...

airflow-tools (>=0.9.0 <=0.9.1) potentially affected by CVE-2024-12254 via aiohttp (=3.11.0rc2)

aiohttp PYPI version =3.11.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - airflow-tools =0.9.0, =0.9.1 Source cves: CVE-2024-12254 Source advisory: SNYK:PYTHON-AIOHTTP-8492046...