Information Disclosure

yaql is vulnerable to Information Disclosure. The vulnerability is due to improper handling of attribute access in the YAQL library's 'format' function, allowing unauthorized users to access sensitive information, including service account credentials...

python-muranoclient (>=0.5.8 <=0.6.0), slacktivate (>=0.2.1 <=0.2.26) +1 more potentially affected by CVE-2024-29156 via yaql (>=0.2.7 <=2.0.1)

yaql PYPI version =0.2.7, =0.5.8, =0.2.1, =0.2.26 - yglu =1.1.2 Source cves: CVE-2024-29156 Source advisory: OSV:GHSA-MVF6-HWXH-7V76...