diff --git a/data/insecure_full.json b/data/insecure_full.json
index b99065f0..bcece28a 100644
--- a/data/insecure_full.json
+++ b/data/insecure_full.json
@@ -2,7 +2,7 @@
     "$meta": {
         "advisory": "PyUp.io metadata",
         "base_domain": "https://pyup.io",
-        "timestamp": 1711951247
+        "timestamp": 1714543250
     },
     "10cent10": [
         {
@@ -292,16 +292,6 @@
         }
     ],
     "acryl-datahub": [
-        {
-            "advisory": "DataHub's AuthServiceClient, particularly versions below 0.8.45, creates JSON strings using format strings with user-controlled data. This approach lets potential attackers alter these JSON strings and forward them to the backend, causing potential misuse and authentication bypasses. This could lead to the creation of system accounts, potentially resulting in full system compromise. This vulnerability was discovered and reported by the GitHub Security lab and is being tracked under GHSL-2022-081.\r\nhttps://github.com/datahub-project/datahub/security/advisories/GHSA-7wc6-p6c4-522c",
-            "cve": "CVE-2023-25561",
-            "id": "pyup.io-63339",
-            "more_info_path": "/vulnerabilities/CVE-2023-25561/63339",
-            "specs": [
-                "<0.8.45"
-            ],
-            "v": "<0.8.45"
-        },
         {
             "advisory": "In DataHub versions prior to 0.8.45, session cookies are only cleared upon new sign-ins, not during logouts. This allows potential attackers to bypass authentication checks using the AuthUtils.hasValidSessionCookie() method by using a cookie from a logged-out session. Consequently, any logged-out session cookie might be considered valid, leading to an authentication bypass. Users are advised to upgrade to version 0.8.45 to rectify this vulnerability. Currently, there are no known workarounds. This vulnerability was identified and reported by the GitHub Security lab and is being tracked under GHSL-2022-083.\r\nhttps://github.com/datahub-project/datahub/security/advisories/GHSA-3974-hxjh-m3jj\r\nhttps://github.com/datahub-project/datahub/blob/aa146db611e3a4ca3aa17bb740783f789d4444d3/datahub-frontend/app/auth/AuthUtils.java#L78",
             "cve": "CVE-2023-25562",
@@ -313,10 +303,10 @@
             "v": "<0.8.45"
         },
         {
-            "advisory": "DataHub's AuthServiceClient, specifically versions prior to 0.8.45, creates JSON strings using format strings containing user-controlled data. This method enables potential attackers to manipulate these JSON strings and forward them to the backend, leading to potential misuse and authentication bypasses. Such misuse could result in the generation of system accounts, potentially leading to full system compromise. This vulnerability was identified and reported by the GitHub Security lab and is being tracked under GHSL-2022-080.\r\nhttps://github.com/datahub-project/datahub/security/advisories/GHSA-6rpf-5cfg-h8f3",
-            "cve": "CVE-2023-25560",
-            "id": "pyup.io-63340",
-            "more_info_path": "/vulnerabilities/CVE-2023-25560/63340",
+            "advisory": "DataHub's AuthServiceClient, particularly versions below 0.8.45, creates JSON strings using format strings with user-controlled data. This approach lets potential attackers alter these JSON strings and forward them to the backend, causing potential misuse and authentication bypasses. This could lead to the creation of system accounts, potentially resulting in full system compromise. This vulnerability was discovered and reported by the GitHub Security lab and is being tracked under GHSL-2022-081.\r\nhttps://github.com/datahub-project/datahub/security/advisories/GHSA-7wc6-p6c4-522c",
+            "cve": "CVE-2023-25561",
+            "id": "pyup.io-63339",
+            "more_info_path": "/vulnerabilities/CVE-2023-25561/63339",
             "specs": [
                 "<0.8.45"
             ],
@@ -332,6 +322,16 @@
             ],
             "v": "<0.8.45"
         },
+        {
+            "advisory": "DataHub's AuthServiceClient, specifically versions prior to 0.8.45, creates JSON strings using format strings containing user-controlled data. This method enables potential attackers to manipulate these JSON strings and forward them to the backend, leading to potential misuse and authentication bypasses. Such misuse could result in the generation of system accounts, potentially leading to full system compromise. This vulnerability was identified and reported by the GitHub Security lab and is being tracked under GHSL-2022-080.\r\nhttps://github.com/datahub-project/datahub/security/advisories/GHSA-6rpf-5cfg-h8f3",
+            "cve": "CVE-2023-25560",
+            "id": "pyup.io-63340",
+            "more_info_path": "/vulnerabilities/CVE-2023-25560/63340",
+            "specs": [
+                "<0.8.45"
+            ],
+            "v": "<0.8.45"
+        },
         {
             "advisory": "DataHub under 0.8.45 frontend, acting as a proxy, is found to have a vulnerability where it doesn't properly construct URLs when forwarding data to the DataHub Metadata Store (GMS), potentially allowing external users to reroute requests from the DataHub Frontend to any host. This could enable attackers to reroute a request from the frontend proxy to any other server and return the result. The vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-076.\r\nhttps://github.com/datahub-project/datahub/security/advisories/GHSA-5w2h-q83m-65xg",
             "cve": "CVE-2023-25557",
@@ -410,9 +410,9 @@
     "actipy": [
         {
             "advisory": "Actipy 1.1.0 updates its dependency 'numpy' requirement to '>=1.22' to include security fixes.",
-            "cve": "CVE-2021-41496",
-            "id": "pyup.io-51303",
-            "more_info_path": "/vulnerabilities/CVE-2021-41496/51303",
+            "cve": "CVE-2021-34141",
+            "id": "pyup.io-51296",
+            "more_info_path": "/vulnerabilities/CVE-2021-34141/51296",
             "specs": [
                 "<1.1.0"
             ],
@@ -420,9 +420,9 @@
         },
         {
             "advisory": "Actipy 1.1.0 updates its dependency 'numpy' requirement to '>=1.22' to include security fixes.",
-            "cve": "CVE-2021-34141",
-            "id": "pyup.io-51296",
-            "more_info_path": "/vulnerabilities/CVE-2021-34141/51296",
+            "cve": "CVE-2021-41496",
+            "id": "pyup.io-51303",
+            "more_info_path": "/vulnerabilities/CVE-2021-41496/51303",
             "specs": [
                 "<1.1.0"
             ],
@@ -607,6 +607,18 @@
             "v": "<101.0.3"
         }
     ],
+    "ahc-tools": [
+        {
+            "advisory": "Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a (dot dot) the session parameter.",
+            "cve": "CVE-2014-3702",
+            "id": "pyup.io-70427",
+            "more_info_path": "/vulnerabilities/CVE-2014-3702/70427",
+            "specs": [
+                "<1.6.0"
+            ],
+            "v": "<1.6.0"
+        }
+    ],
     "ahjo": [
         {
             "advisory": "Ahjo 3.1.1 updates its dependency 'setuptools' to v65.5.1 to include a security fix.",
@@ -1077,12 +1089,24 @@
             "v": "<1.6.5"
         }
     ],
+    "ail": [
+        {
+            "advisory": "Global.py in AIL framework 2.8 allows path traversal.",
+            "cve": "CVE-2020-8545",
+            "id": "pyup.io-70578",
+            "more_info_path": "/vulnerabilities/CVE-2020-8545/70578",
+            "specs": [
+                "<2.9"
+            ],
+            "v": "<2.9"
+        }
+    ],
     "aim": [
         {
             "advisory": "Aim 1.2.13 updates its dependency 'pillow' to v6.2.2 to include security fixes.",
-            "cve": "CVE-2020-5310",
-            "id": "pyup.io-48607",
-            "more_info_path": "/vulnerabilities/CVE-2020-5310/48607",
+            "cve": "CVE-2020-5311",
+            "id": "pyup.io-48613",
+            "more_info_path": "/vulnerabilities/CVE-2020-5311/48613",
             "specs": [
                 "<1.2.13"
             ],
@@ -1090,9 +1114,9 @@
         },
         {
             "advisory": "Aim 1.2.13 updates its dependency 'pillow' to v6.2.2 to include security fixes.",
-            "cve": "CVE-2020-5311",
-            "id": "pyup.io-48613",
-            "more_info_path": "/vulnerabilities/CVE-2020-5311/48613",
+            "cve": "CVE-2020-5310",
+            "id": "pyup.io-48607",
+            "more_info_path": "/vulnerabilities/CVE-2020-5310/48607",
             "specs": [
                 "<1.2.13"
             ],
@@ -1165,7 +1189,7 @@
     ],
     "aiob": [
         {
-            "advisory": "AIOHTTP 3.8.1 can report a \"ValueError: Invalid IPv6 URL\" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute this issue because there is no example of a context in which denial of service would occur, and many common contexts have exception handing in the calling application.\r\nAlias:\r\nGHSA-rwqr-c348-m5wr",
+            "advisory": "AIOHTTP 3.8.1 can report a \"ValueError: Invalid IPv6 URL\" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute this issue because there is no example of a context in which denial of service would occur, and many common contexts have exception handing in the calling application.\r\nAlias: GHSA-rwqr-c348-m5wr",
             "cve": "CVE-2022-33124",
             "id": "pyup.io-62742",
             "more_info_path": "/vulnerabilities/CVE-2022-33124/62742",
@@ -1287,14 +1311,14 @@
             "v": "<3.8.0"
         },
         {
-            "advisory": "Aiohttp 3.8.6 includes a fix for CVE-2023-47627: The HTTP parser in AIOHTTP has numerous problems with header parsing, which could lead to request smuggling. This parser is only used when AIOHTTP_NO_EXTENSIONS is enabled (or not using a prebuilt wheel).\r\nhttps://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg",
-            "cve": "CVE-2023-47627",
-            "id": "pyup.io-62326",
-            "more_info_path": "/vulnerabilities/CVE-2023-47627/62326",
+            "advisory": "** Disputed ** AIOHTTP 3.8.1 can report a \"ValueError: Invalid IPv6 URL\" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute this issue because there is no example of a context in which denial of service would occur, and many common contexts have exception handing in the calling application",
+            "cve": "CVE-2022-33124",
+            "id": "pyup.io-68501",
+            "more_info_path": "/vulnerabilities/CVE-2022-33124/68501",
             "specs": [
-                "<3.8.6"
+                "<3.8.1"
             ],
-            "v": "<3.8.6"
+            "v": "<3.8.1"
         },
         {
             "advisory": "Aiohttp 3.8.6 updates vendored copy of  'llhttp' to v9.1.3 to include a security fix.\r\nhttps://github.com/aio-libs/aiohttp/security/advisories/GHSA-pjjw-qhg8-p2p9",
@@ -1306,6 +1330,16 @@
             ],
             "v": "<3.8.6"
         },
+        {
+            "advisory": "Aiohttp 3.8.6 includes a fix for CVE-2023-47627: The HTTP parser in AIOHTTP has numerous problems with header parsing, which could lead to request smuggling. This parser is only used when AIOHTTP_NO_EXTENSIONS is enabled (or not using a prebuilt wheel).\r\nhttps://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg",
+            "cve": "CVE-2023-47627",
+            "id": "pyup.io-62326",
+            "more_info_path": "/vulnerabilities/CVE-2023-47627/62326",
+            "specs": [
+                "<3.8.6"
+            ],
+            "v": "<3.8.6"
+        },
         {
             "advisory": "Aiohttp 3.9.0 includes a fix for CVE-2023-49081: Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request.\r\nhttps://github.com/aio-libs/aiohttp/security/advisories/GHSA-q3qx-c6g2-7pw2",
             "cve": "CVE-2023-49081",
@@ -2188,7 +2222,7 @@
             "v": "<4.2.1.0"
         },
         {
-            "advisory": "Aldryn-django 4.2.10.0 upgrades its Django dependency to 4.2.10 due to the CVE-2024-24680.",
+            "advisory": "Aldryn-django 4.2.10.0 upgrades its Django dependency to 4.2.10 due to CVE-2024-24680.",
             "cve": "CVE-2024-24680",
             "id": "pyup.io-65010",
             "more_info_path": "/vulnerabilities/CVE-2024-24680/65010",
@@ -2198,7 +2232,7 @@
             "v": "<4.2.10.0"
         },
         {
-            "advisory": "Aldryn-django 4.2.3.0 upgrades its Django dependency to 4.2.3 due to the CVE-2023-36053.",
+            "advisory": "Aldryn-django 4.2.3.0 upgrades its Django dependency to 4.2.3 due to CVE-2023-36053.",
             "cve": "CVE-2023-36053",
             "id": "pyup.io-65014",
             "more_info_path": "/vulnerabilities/CVE-2023-36053/65014",
@@ -2367,6 +2401,18 @@
             "v": ">0"
         }
     ],
+    "algoseek-connector": [
+        {
+            "advisory": "Algoseek-connector version 2.1.3 addresses a security vulnerability in the sqlparse library by updating from version \"^0.4.4\" to \"^0.5.0\", in response to the security advisory GHSA-2m57-hf25-phgg.",
+            "cve": "PVE-2024-67887",
+            "id": "pyup.io-67981",
+            "more_info_path": "/vulnerabilities/PVE-2024-67887/67981",
+            "specs": [
+                "<2.1.3"
+            ],
+            "v": "<2.1.3"
+        }
+    ],
     "allennlp": [
         {
             "advisory": "allennlp 0.6.1 upgrades flask to avoid security vulnerability.",
@@ -2485,6 +2531,18 @@
             "v": "<0.9.2"
         }
     ],
+    "altvmasterlist": [
+        {
+            "advisory": "Altvmasterlist version 3.1.0 updates its IDNA dependency from version 3.6 to 3.7 to fix a denial of service vulnerability.",
+            "cve": "CVE-2022-45061",
+            "id": "pyup.io-67623",
+            "more_info_path": "/vulnerabilities/CVE-2022-45061/67623",
+            "specs": [
+                "<3.1.0"
+            ],
+            "v": "<3.1.0"
+        }
+    ],
     "alvaro": [
         {
             "advisory": "Alvaro 1.1.1 replaced Pickle with JSON to prevent code injection vulnerabilities.\r\nhttps://github.com/edgecase963/Alvaro/commit/d87c53359e7edde827add46a7870d4192eef0451",
@@ -2747,16 +2805,6 @@
             ],
             "v": "<1.2.3"
         },
-        {
-            "advisory": "Ansible 1.5.4 includes a fix for CVE-2014-4657: The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.",
-            "cve": "CVE-2014-4657",
-            "id": "pyup.io-25617",
-            "more_info_path": "/vulnerabilities/CVE-2014-4657/25617",
-            "specs": [
-                "<1.5.4"
-            ],
-            "v": "<1.5.4"
-        },
         {
             "advisory": "Ansible 1.5.4 includes a fix for CVE-2014-2686: Ansible prior to 1.5.4 mishandles the evaluation of some strings.\r\nhttps://groups.google.com/forum/#!searchin/ansible-project/1.5.4/ansible-project/MUQxiKwSQDc/id6aVaawVboJ",
             "cve": "CVE-2014-2686",
@@ -2768,14 +2816,14 @@
             "v": "<1.5.4"
         },
         {
-            "advisory": "Ansible 1.5.5 includes a fix for CVE-2014-4660: Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file that uses the \"deb http://user:pass@server:port/\" format.\r\nhttps://www.openwall.com/lists/oss-security/2014/06/26/19",
-            "cve": "CVE-2014-4660",
-            "id": "pyup.io-42918",
-            "more_info_path": "/vulnerabilities/CVE-2014-4660/42918",
+            "advisory": "Ansible 1.5.4 includes a fix for CVE-2014-4657: The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.",
+            "cve": "CVE-2014-4657",
+            "id": "pyup.io-25617",
+            "more_info_path": "/vulnerabilities/CVE-2014-4657/25617",
             "specs": [
-                "<1.5.5"
+                "<1.5.4"
             ],
-            "v": "<1.5.5"
+            "v": "<1.5.4"
         },
         {
             "advisory": "Ansible 1.5.5 includes a fix for CVE-2014-4658: The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.",
@@ -2787,6 +2835,16 @@
             ],
             "v": "<1.5.5"
         },
+        {
+            "advisory": "Ansible 1.5.5 includes a fix for CVE-2014-4660: Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file that uses the \"deb http://user:pass@server:port/\" format.\r\nhttps://www.openwall.com/lists/oss-security/2014/06/26/19",
+            "cve": "CVE-2014-4660",
+            "id": "pyup.io-42918",
+            "more_info_path": "/vulnerabilities/CVE-2014-4660/42918",
+            "specs": [
+                "<1.5.5"
+            ],
+            "v": "<1.5.5"
+        },
         {
             "advisory": "Ansible 1.5.5 includes a fix for CVE-2014-4659: Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the \"deb http://user:pass@server:port/\" format.",
             "cve": "CVE-2014-4659",
@@ -2838,20 +2896,20 @@
             "v": "<1.6.7"
         },
         {
-            "advisory": "Ansible 1.7.0  avoids templating raw lookup strings.\r\nhttps://github.com/ansible/ansible/commit/650e967b30f26c285441fb848a408044c51ad622",
-            "cve": "PVE-2022-45329",
-            "id": "pyup.io-45329",
-            "more_info_path": "/vulnerabilities/PVE-2022-45329/45329",
+            "advisory": "Ansible 1.7.0  adds path checking for relative/escaped tar filenames in the ansible-galaxy command.\r\nhttps://github.com/ansible/ansible/commit/92382c41810a4496e7f894696da645fe5151c232",
+            "cve": "PVE-2021-25622",
+            "id": "pyup.io-25622",
+            "more_info_path": "/vulnerabilities/PVE-2021-25622/25622",
             "specs": [
                 "<1.7"
             ],
             "v": "<1.7"
         },
         {
-            "advisory": "Ansible 1.7.0  adds path checking for relative/escaped tar filenames in the ansible-galaxy command.\r\nhttps://github.com/ansible/ansible/commit/92382c41810a4496e7f894696da645fe5151c232",
-            "cve": "PVE-2021-25622",
-            "id": "pyup.io-25622",
-            "more_info_path": "/vulnerabilities/PVE-2021-25622/25622",
+            "advisory": "Ansible 1.7.0  avoids templating raw lookup strings.\r\nhttps://github.com/ansible/ansible/commit/650e967b30f26c285441fb848a408044c51ad622",
+            "cve": "PVE-2022-45329",
+            "id": "pyup.io-45329",
+            "more_info_path": "/vulnerabilities/PVE-2022-45329/45329",
             "specs": [
                 "<1.7"
             ],
@@ -2909,20 +2967,20 @@
             "v": "<2.1.4.0,>2.1.4.0,<2.2.1.0"
         },
         {
-            "advisory": "Ansible 2.2.0 includes a fix for CVE-2016-8614: A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing a remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614",
-            "cve": "CVE-2016-8614",
-            "id": "pyup.io-42916",
-            "more_info_path": "/vulnerabilities/CVE-2016-8614/42916",
+            "advisory": "Ansible 2.2.0 includes a fix for CVE-2016-8628: Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8628",
+            "cve": "CVE-2016-8628",
+            "id": "pyup.io-42915",
+            "more_info_path": "/vulnerabilities/CVE-2016-8628/42915",
             "specs": [
                 "<2.2.0"
             ],
             "v": "<2.2.0"
         },
         {
-            "advisory": "Ansible 2.2.0 includes a fix for CVE-2016-8628: Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8628",
-            "cve": "CVE-2016-8628",
-            "id": "pyup.io-42915",
-            "more_info_path": "/vulnerabilities/CVE-2016-8628/42915",
+            "advisory": "Ansible 2.2.0 includes a fix for CVE-2016-8614: A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing a remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614",
+            "cve": "CVE-2016-8614",
+            "id": "pyup.io-42916",
+            "more_info_path": "/vulnerabilities/CVE-2016-8614/42916",
             "specs": [
                 "<2.2.0"
             ],
@@ -2981,24 +3039,36 @@
             "v": "<2.9.23"
         },
         {
-            "advisory": "A flaw was found in Ansible where the secret information present in async_files are getting disclosed when the user changes the jobdir to a world readable directory. Any secret information in an async status file will be readable by a malicious user on that system.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1956464",
-            "cve": "CVE-2021-3532",
-            "id": "pyup.io-42923",
-            "more_info_path": "/vulnerabilities/CVE-2021-3532/42923",
+            "advisory": "A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to Ansible Tower, which allows any user that can gain access to the token to be fully authenticated to Ansible Tower. This flaw affects Ansible Tower versions before 3.6.4 and Ansible Tower versions before 3.5.6.",
+            "cve": "CVE-2020-10709",
+            "id": "pyup.io-70602",
+            "more_info_path": "/vulnerabilities/CVE-2020-10709/70602",
             "specs": [
-                ">0"
+                "<3.5.6",
+                ">=3.6.0,<3.6.4"
             ],
-            "v": ">0"
+            "v": "<3.5.6,>=3.6.0,<3.6.4"
         },
         {
-            "advisory": "A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service availability.",
-            "cve": "CVE-2020-25636",
-            "id": "pyup.io-54229",
-            "more_info_path": "/vulnerabilities/CVE-2020-25636/54229",
+            "advisory": "A vulnerability was found in Ansible Tower before 3.6.1 where an attacker with low privilege could retrieve usernames and passwords credentials from the new RHSM saved in plain text into the database at '/api/v2/config' when applying the Ansible Tower license.",
+            "cve": "CVE-2019-14890",
+            "id": "pyup.io-70527",
+            "more_info_path": "/vulnerabilities/CVE-2019-14890/70527",
             "specs": [
-                ">=0"
+                "<3.6.1"
             ],
-            "v": ">=0"
+            "v": "<3.6.1"
+        },
+        {
+            "advisory": "An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.",
+            "cve": "CVE-2022-1632",
+            "id": "pyup.io-62625",
+            "more_info_path": "/vulnerabilities/CVE-2022-1632/62625",
+            "specs": [
+                "==2.0",
+                "==4.0"
+            ],
+            "v": "==2.0,==4.0"
         },
         {
             "advisory": "A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.",
@@ -3010,6 +3080,16 @@
             ],
             "v": ">=0"
         },
+        {
+            "advisory": "A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service availability.",
+            "cve": "CVE-2020-25636",
+            "id": "pyup.io-54229",
+            "more_info_path": "/vulnerabilities/CVE-2020-25636/54229",
+            "specs": [
+                ">=0"
+            ],
+            "v": ">=0"
+        },
         {
             "advisory": "In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.",
             "cve": "CVE-2018-10874",
@@ -3066,6 +3146,16 @@
             ],
             "v": ">=2.3.0,<2.3.3,>=2.4.0,<2.4.1"
         },
+        {
+            "advisory": "A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.",
+            "cve": "CVE-2022-3697",
+            "id": "pyup.io-54564",
+            "more_info_path": "/vulnerabilities/CVE-2022-3697/54564",
+            "specs": [
+                ">=2.5.0,<7.0.0"
+            ],
+            "v": ">=2.5.0,<7.0.0"
+        },
         {
             "advisory": "Ansible 2.5.14, 2.6.11 and 2.7.5 include a fix for CVE-2018-16876: Ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16876",
             "cve": "CVE-2018-16876",
@@ -3139,10 +3229,10 @@
             "v": ">=2.7.0a0,<2.7.17,>=2.8.0a0,<2.8.11,>=2.9.0a0,<2.9.7"
         },
         {
-            "advisory": "Ansible versions 2.7.17, 2.8.9 and 2.9.6 include a fix for CVE-2020-1738: A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738",
-            "cve": "CVE-2020-1738",
-            "id": "pyup.io-42873",
-            "more_info_path": "/vulnerabilities/CVE-2020-1738/42873",
+            "advisory": "Ansible versions 2.7.17, 2.8.9 and 2.9.6 include a fix for CVE-2020-1736: A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736",
+            "cve": "CVE-2020-1736",
+            "id": "pyup.io-42875",
+            "more_info_path": "/vulnerabilities/CVE-2020-1736/42875",
             "specs": [
                 ">=2.7.0a0,<2.7.17",
                 ">=2.8.0a0,<2.8.9",
@@ -3151,10 +3241,10 @@
             "v": ">=2.7.0a0,<2.7.17,>=2.8.0a0,<2.8.9,>=2.9.0a0,<2.9.6"
         },
         {
-            "advisory": "Ansible versions 2.7.17, 2.8.9 and 2.9.6 include a fix for CVE-2020-1739: A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior. When a password is set with the argument \"password\" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739",
-            "cve": "CVE-2020-1739",
-            "id": "pyup.io-42871",
-            "more_info_path": "/vulnerabilities/CVE-2020-1739/42871",
+            "advisory": "Ansible versions 2.7.17, 2.8.9 and 2.9.6 include a fix for CVE-2020-10684: A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively, when using ansible_facts as a subkey of itself and promoting it to a variable when inject is enabled, overwriting the ansible_facts after the clean. An attacker could take advantage of this by altering the ansible_facts, such as ansible_hosts, users and any other key data which would lead into privilege escalation or code injection.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10684",
+            "cve": "CVE-2020-10684",
+            "id": "pyup.io-42864",
+            "more_info_path": "/vulnerabilities/CVE-2020-10684/42864",
             "specs": [
                 ">=2.7.0a0,<2.7.17",
                 ">=2.8.0a0,<2.8.9",
@@ -3163,10 +3253,10 @@
             "v": ">=2.7.0a0,<2.7.17,>=2.8.0a0,<2.8.9,>=2.9.0a0,<2.9.6"
         },
         {
-            "advisory": "Ansible versions 2.7.17, 2.8.9 and 2.9.6 include a fix for CVE-2020-1740: A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes \"ansible-vault edit\", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740",
-            "cve": "CVE-2020-1740",
-            "id": "pyup.io-42869",
-            "more_info_path": "/vulnerabilities/CVE-2020-1740/42869",
+            "advisory": "Ansible versions 2.7.17, 2.8.9 and 2.9.6 include a fix for CVE-2020-1738: A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738",
+            "cve": "CVE-2020-1738",
+            "id": "pyup.io-42873",
+            "more_info_path": "/vulnerabilities/CVE-2020-1738/42873",
             "specs": [
                 ">=2.7.0a0,<2.7.17",
                 ">=2.8.0a0,<2.8.9",
@@ -3175,10 +3265,10 @@
             "v": ">=2.7.0a0,<2.7.17,>=2.8.0a0,<2.8.9,>=2.9.0a0,<2.9.6"
         },
         {
-            "advisory": "Ansible versions 2.7.17, 2.8.9 and 2.9.6 include a fix for CVE-2020-1736: A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736",
-            "cve": "CVE-2020-1736",
-            "id": "pyup.io-42875",
-            "more_info_path": "/vulnerabilities/CVE-2020-1736/42875",
+            "advisory": "Ansible versions 2.7.17, 2.8.9 and 2.9.6 include a fix for CVE-2020-1739: A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior. When a password is set with the argument \"password\" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739",
+            "cve": "CVE-2020-1739",
+            "id": "pyup.io-42871",
+            "more_info_path": "/vulnerabilities/CVE-2020-1739/42871",
             "specs": [
                 ">=2.7.0a0,<2.7.17",
                 ">=2.8.0a0,<2.8.9",
@@ -3199,10 +3289,10 @@
             "v": ">=2.7.0a0,<2.7.17,>=2.8.0a0,<2.8.9,>=2.9.0a0,<2.9.6"
         },
         {
-            "advisory": "Ansible versions 2.7.17, 2.8.9 and 2.9.6 include a fix for CVE-2020-10684: A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively, when using ansible_facts as a subkey of itself and promoting it to a variable when inject is enabled, overwriting the ansible_facts after the clean. An attacker could take advantage of this by altering the ansible_facts, such as ansible_hosts, users and any other key data which would lead into privilege escalation or code injection.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10684",
-            "cve": "CVE-2020-10684",
-            "id": "pyup.io-42864",
-            "more_info_path": "/vulnerabilities/CVE-2020-10684/42864",
+            "advisory": "Ansible versions 2.7.17, 2.8.9 and 2.9.6 include a fix for CVE-2020-1740: A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes \"ansible-vault edit\", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740",
+            "cve": "CVE-2020-1740",
+            "id": "pyup.io-42869",
+            "more_info_path": "/vulnerabilities/CVE-2020-1740/42869",
             "specs": [
                 ">=2.7.0a0,<2.7.17",
                 ">=2.8.0a0,<2.8.9",
@@ -3281,6 +3371,16 @@
             ],
             "v": "<1.9.5,==2.0.0"
         },
+        {
+            "advisory": "A flaw was found in Ansible if an Ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory of a world-writable directory. When this occurs, there is a race condition on the managed machine. A malicious, non-privileged account on the remote machine can exploit the race condition to access the async result data. This flaw affects Ansible Tower 3.7 and Ansible Automation Platform 1.2.",
+            "cve": "CVE-2021-3533",
+            "id": "pyup.io-66667",
+            "more_info_path": "/vulnerabilities/CVE-2021-3533/66667",
+            "specs": [
+                "<2.12.0b1"
+            ],
+            "v": "<2.12.0b1"
+        },
         {
             "advisory": "An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. It was discovered that information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.",
             "cve": "CVE-2024-0690",
@@ -3314,17 +3414,6 @@
             ],
             "v": "==2.0,==2.1"
         },
-        {
-            "advisory": "An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.",
-            "cve": "CVE-2022-1632",
-            "id": "pyup.io-62625",
-            "more_info_path": "/vulnerabilities/CVE-2022-1632/62625",
-            "specs": [
-                "==2.0",
-                "==4.0"
-            ],
-            "v": "==2.0,==4.0"
-        },
         {
             "advisory": "An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.",
             "cve": "CVE-2020-14330",
@@ -3446,16 +3535,6 @@
             ],
             "v": ">=0,<2.9.6"
         },
-        {
-            "advisory": "A flaw was found in Ansible if an Ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory of a world-writable directory. When this occurs, there is a race condition on the managed machine. A malicious, non-privileged account on the remote machine can exploit the race condition to access the async result data. This flaw affects Ansible Tower 3.7 and Ansible Automation Platform 1.2.",
-            "cve": "CVE-2021-3533",
-            "id": "pyup.io-66667",
-            "more_info_path": "/vulnerabilities/CVE-2021-3533/66667",
-            "specs": [
-                ">=0,<3.0.0"
-            ],
-            "v": ">=0,<3.0.0"
-        },
         {
             "advisory": "Ansible 2.4.0.0rc1 includes a security fix: There is a mismatch between two hash formats that causes the generation of a relatively shorter salt value (8 characters), which would make it easier to do dictionary/brute force attacks.\r\nhttps://github.com/ansible/ansible/commit/f5aa9df1fddb4448d5d81fbb9d03bb82a16eda52",
             "cve": "PVE-2023-60874",
@@ -3511,16 +3590,6 @@
             ],
             "v": ">=2.5.0,<2.5.5,>=2.4.0,<2.4.5"
         },
-        {
-            "advisory": "A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.",
-            "cve": "CVE-2022-3697",
-            "id": "pyup.io-54564",
-            "more_info_path": "/vulnerabilities/CVE-2022-3697/54564",
-            "specs": [
-                ">=2.5.0,<7.0.0"
-            ],
-            "v": ">=2.5.0,<7.0.0"
-        },
         {
             "advisory": "A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.",
             "cve": "CVE-2019-14905",
@@ -3569,6 +3638,16 @@
             ],
             "v": ">=2.8.0a1,<2.8.19,>=2.9.0b1,<2.9.18"
         },
+        {
+            "advisory": "A vulnerability in versions of the Ansible solaris_zone module permits an attacker to execute arbitrary commands on a Solaris host. This issue arises when the module checks the zone name by using a basic 'ps' command, enabling the attack through a maliciously crafted zone name. This flaw poses a risk to various versions of Ansible Engine, exposing systems to potential unauthorized command execution.",
+            "cve": "CVE-2019-14904",
+            "id": "pyup.io-68097",
+            "more_info_path": "/vulnerabilities/CVE-2019-14904/68097",
+            "specs": [
+                ">=2.9.0,<2.9.2"
+            ],
+            "v": ">=2.9.0,<2.9.2"
+        },
         {
             "advisory": "An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system.",
             "cve": "CVE-2020-10691",
@@ -4049,10 +4128,10 @@
             "v": "<1.10.14"
         },
         {
-            "advisory": "Apache-airflow 1.10.3 sets HttpOnly flag to cookies by default.\r\nhttps://github.com/apache/airflow/commit/1211dddfd7167fd90575f40dd6734b0af9aec8b7",
-            "cve": "PVE-2022-51848",
-            "id": "pyup.io-51848",
-            "more_info_path": "/vulnerabilities/PVE-2022-51848/51848",
+            "advisory": "Apache-airflow 1.10.3 updates its dependency 'gunicorn' minimum requirement to v19.5.0 to include a security fix.",
+            "cve": "CVE-2018-1000164",
+            "id": "pyup.io-51833",
+            "more_info_path": "/vulnerabilities/CVE-2018-1000164/51833",
             "specs": [
                 "<1.10.3"
             ],
@@ -4069,60 +4148,60 @@
             "v": "<1.10.3"
         },
         {
-            "advisory": "Apache-airflow 1.10.3 updates its dependency 'gunicorn' minimum requirement to v19.5.0 to include a security fix.",
-            "cve": "CVE-2018-1000164",
-            "id": "pyup.io-51833",
-            "more_info_path": "/vulnerabilities/CVE-2018-1000164/51833",
+            "advisory": "Apache-airflow 1.10.3 sets HttpOnly flag to cookies by default.\r\nhttps://github.com/apache/airflow/commit/1211dddfd7167fd90575f40dd6734b0af9aec8b7",
+            "cve": "PVE-2022-51848",
+            "id": "pyup.io-51848",
+            "more_info_path": "/vulnerabilities/PVE-2022-51848/51848",
             "specs": [
                 "<1.10.3"
             ],
             "v": "<1.10.3"
         },
         {
-            "advisory": "Apache-airflow 1.9.0a0 includes a security fix: An individual with the capacity to create or modify Charts holds the potential to run any code they desire on the Airflow server.",
-            "cve": "PVE-2023-99964",
-            "id": "pyup.io-60877",
-            "more_info_path": "/vulnerabilities/PVE-2023-99964/60877",
+            "advisory": "Apache-airflow 1.9.0a0 includes a security fix: When navigating to a page where the 'dag_id' parameter is specified as an HTML tag, the tag is rendered. This is because it uses the Markup tag, which subsequently marks HTML as safe. This presents cross-site scripting vulnerabilities due to the display of unsanitized user input.",
+            "cve": "PVE-2023-99965",
+            "id": "pyup.io-60876",
+            "more_info_path": "/vulnerabilities/PVE-2023-99965/60876",
             "specs": [
                 "<1.9.0a0"
             ],
             "v": "<1.9.0a0"
         },
         {
-            "advisory": "Apache-airflow 1.9.0a0 includes a security fix: When navigating to a page where the 'dag_id' parameter is specified as an HTML tag, the tag is rendered. This is because it uses the Markup tag, which subsequently marks HTML as safe. This presents cross-site scripting vulnerabilities due to the display of unsanitized user input.",
-            "cve": "PVE-2023-99965",
-            "id": "pyup.io-60876",
-            "more_info_path": "/vulnerabilities/PVE-2023-99965/60876",
+            "advisory": "Apache-airflow 1.9.0a0 includes a security fix: An individual with the capacity to create or modify Charts holds the potential to run any code they desire on the Airflow server.",
+            "cve": "PVE-2023-99964",
+            "id": "pyup.io-60877",
+            "more_info_path": "/vulnerabilities/PVE-2023-99964/60877",
             "specs": [
                 "<1.9.0a0"
             ],
             "v": "<1.9.0a0"
         },
         {
-            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Apache Spark provider integration. Therefore, it is affected by CVE-2023-28710.",
-            "cve": "CVE-2023-28710",
-            "id": "pyup.io-63173",
-            "more_info_path": "/vulnerabilities/CVE-2023-28710/63173",
+            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Apache Sqoop provider integration. Therefore, it is affected by CVE-2023-25693.",
+            "cve": "CVE-2023-25693",
+            "id": "pyup.io-63178",
+            "more_info_path": "/vulnerabilities/CVE-2023-25693/63178",
             "specs": [
                 "<2.0.0b1"
             ],
             "v": "<2.0.0b1"
         },
         {
-            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Amazon provider integration. Therefore, it is affected by CVE-2023-25956.",
-            "cve": "CVE-2023-25956",
-            "id": "pyup.io-63177",
-            "more_info_path": "/vulnerabilities/CVE-2023-25956/63177",
+            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Apache Spark provider integration. Therefore, it is affected by CVE-2023-28710.",
+            "cve": "CVE-2023-28710",
+            "id": "pyup.io-63173",
+            "more_info_path": "/vulnerabilities/CVE-2023-28710/63173",
             "specs": [
                 "<2.0.0b1"
             ],
             "v": "<2.0.0b1"
         },
         {
-            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Docker provider integration. Therefore, it is affected by CVE-2022-38362.",
-            "cve": "CVE-2022-38362",
-            "id": "pyup.io-63172",
-            "more_info_path": "/vulnerabilities/CVE-2022-38362/63172",
+            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Apache Hive provider integration. Therefore, it is affected by CVE-2023-28706.",
+            "cve": "CVE-2023-28706",
+            "id": "pyup.io-63174",
+            "more_info_path": "/vulnerabilities/CVE-2023-28706/63174",
             "specs": [
                 "<2.0.0b1"
             ],
@@ -4139,20 +4218,20 @@
             "v": "<2.0.0b1"
         },
         {
-            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Apache Hive provider integration. Therefore, it is affected by CVE-2023-28706.",
-            "cve": "CVE-2023-28706",
-            "id": "pyup.io-63174",
-            "more_info_path": "/vulnerabilities/CVE-2023-28706/63174",
+            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Google Cloud provider integration. Therefore, it is affected by CVE-2023-25691.",
+            "cve": "CVE-2023-25691",
+            "id": "pyup.io-63175",
+            "more_info_path": "/vulnerabilities/CVE-2023-25691/63175",
             "specs": [
                 "<2.0.0b1"
             ],
             "v": "<2.0.0b1"
         },
         {
-            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Google Cloud provider integration. Therefore, it is affected by CVE-2023-25691.",
-            "cve": "CVE-2023-25691",
-            "id": "pyup.io-63175",
-            "more_info_path": "/vulnerabilities/CVE-2023-25691/63175",
+            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Apache Spark provider integration. Therefore, it is affected by CVE-2023-40195.",
+            "cve": "CVE-2023-40195",
+            "id": "pyup.io-63170",
+            "more_info_path": "/vulnerabilities/CVE-2023-40195/63170",
             "specs": [
                 "<2.0.0b1"
             ],
@@ -4169,30 +4248,30 @@
             "v": "<2.0.0b1"
         },
         {
-            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Apache Spark provider integration. Therefore, it is affected by CVE-2023-40195.",
-            "cve": "CVE-2023-40195",
-            "id": "pyup.io-63170",
-            "more_info_path": "/vulnerabilities/CVE-2023-40195/63170",
+            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Amazon provider integration. Therefore, it is affected by CVE-2023-25956.",
+            "cve": "CVE-2023-25956",
+            "id": "pyup.io-63177",
+            "more_info_path": "/vulnerabilities/CVE-2023-25956/63177",
             "specs": [
                 "<2.0.0b1"
             ],
             "v": "<2.0.0b1"
         },
         {
-            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Apache Hive provider integration. Therefore, it is affected by CVE-2022-46421.",
-            "cve": "CVE-2022-46421",
-            "id": "pyup.io-63180",
-            "more_info_path": "/vulnerabilities/CVE-2022-46421/63180",
+            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Docker provider integration. Therefore, it is affected by CVE-2022-38362.",
+            "cve": "CVE-2022-38362",
+            "id": "pyup.io-63172",
+            "more_info_path": "/vulnerabilities/CVE-2022-38362/63172",
             "specs": [
                 "<2.0.0b1"
             ],
             "v": "<2.0.0b1"
         },
         {
-            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Apache Sqoop provider integration. Therefore, it is affected by CVE-2023-25693.",
-            "cve": "CVE-2023-25693",
-            "id": "pyup.io-63178",
-            "more_info_path": "/vulnerabilities/CVE-2023-25693/63178",
+            "advisory": "Apache-airflow before 2.0.0b1 bundles the code for the Apache Hive provider integration. Therefore, it is affected by CVE-2022-46421.",
+            "cve": "CVE-2022-46421",
+            "id": "pyup.io-63180",
+            "more_info_path": "/vulnerabilities/CVE-2022-46421/63180",
             "specs": [
                 "<2.0.0b1"
             ],
@@ -4298,6 +4377,16 @@
             ],
             "v": "<2.6.0"
         },
+        {
+            "advisory": "The details page for task instances in the user interface is subject to a stored XSS vulnerability. This problem pertains to Apache Airflow versions prior to 2.6.0.\r\nhttps://github.com/apache/airflow/pull/30447/commits/3d894f7a643e9319f5c48e343ac39b248dedaa9b\r\nhttps://github.com/apache/airflow/pull/30779/commits/7c566f7ef4b33175aafc4f89f94fb2096b093940",
+            "cve": "CVE-2023-29247",
+            "id": "pyup.io-63344",
+            "more_info_path": "/vulnerabilities/CVE-2023-29247/63344",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
         {
             "advisory": "Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.",
             "cve": "CVE-2023-25754",
@@ -4309,14 +4398,14 @@
             "v": "<2.6.0"
         },
         {
-            "advisory": "The details page for task instances in the user interface is subject to a stored XSS vulnerability. This problem pertains to Apache Airflow versions prior to 2.6.0.\r\nhttps://github.com/apache/airflow/pull/30447/commits/3d894f7a643e9319f5c48e343ac39b248dedaa9b\r\nhttps://github.com/apache/airflow/pull/30779/commits/7c566f7ef4b33175aafc4f89f94fb2096b093940",
-            "cve": "CVE-2023-29247",
-            "id": "pyup.io-63344",
-            "more_info_path": "/vulnerabilities/CVE-2023-29247/63344",
+            "advisory": "Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is not affected",
+            "cve": "CVE-2023-22887",
+            "id": "pyup.io-62890",
+            "more_info_path": "/vulnerabilities/CVE-2023-22887/62890",
             "specs": [
-                "<2.6.0"
+                "<2.6.3"
             ],
-            "v": "<2.6.0"
+            "v": "<2.6.3"
         },
         {
             "advisory": "Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is not affected",
@@ -4349,30 +4438,20 @@
             "v": "<2.6.3"
         },
         {
-            "advisory": "Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is not affected",
-            "cve": "CVE-2023-22887",
-            "id": "pyup.io-62890",
-            "more_info_path": "/vulnerabilities/CVE-2023-22887/62890",
-            "specs": [
-                "<2.6.3"
-            ],
-            "v": "<2.6.3"
-        },
-        {
-            "advisory": "Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user to access connection information and exploit the test connection feature by sending many requests, leading to a denial of service (DoS) condition on the server. Furthermore, malicious actors can leverage this vulnerability to establish harmful connections with the server.\r\n\r\nUsers of Apache Airflow are strongly advised to upgrade to version 2.7.0 or newer to mitigate the risk associated with this vulnerability. Additionally, administrators are encouraged to review and adjust user permissions to restrict access to sensitive functionalities, reducing the attack surface.",
-            "cve": "CVE-2023-37379",
-            "id": "pyup.io-65002",
-            "more_info_path": "/vulnerabilities/CVE-2023-37379/65002",
+            "advisory": "Apache-airflow 2.7.0 disables default allowing the testing of connections in UI, API and CLI for security reasons.\r\nhttps://github.com/apache/airflow/pull/32052",
+            "cve": "PVE-2023-60952",
+            "id": "pyup.io-60952",
+            "more_info_path": "/vulnerabilities/PVE-2023-60952/60952",
             "specs": [
                 "<2.7.0"
             ],
             "v": "<2.7.0"
         },
         {
-            "advisory": "Apache-airflow 2.7.0 disables default allowing the testing of connections in UI, API and CLI for security reasons.\r\nhttps://github.com/apache/airflow/pull/32052",
-            "cve": "PVE-2023-60952",
-            "id": "pyup.io-60952",
-            "more_info_path": "/vulnerabilities/PVE-2023-60952/60952",
+            "advisory": "Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and\u00a0Apache Airflow before 2.7.0 are affected by the\u00a0Validation of OpenSSL Certificate vulnerability.\r\n\r\nThe default SSL context with SSL library did not check a server's X.509\u00a0certificate.\u00a0 Instead, the code accepted any certificate, which could\u00a0result in the disclosure of mail server credentials or mail contents\u00a0when the client connects to an attacker in a MITM position.\r\n\r\nUsers are strongly advised to upgrade to Apache Airflow version 2.7.0 or newer, Apache Airflow IMAP Provider version 3.3.0 or newer, and Apache Airflow SMTP Provider version 1.3.0 or newer to mitigate the risk associated with this vulnerability",
+            "cve": "CVE-2023-39441",
+            "id": "pyup.io-65020",
+            "more_info_path": "/vulnerabilities/CVE-2023-39441/65020",
             "specs": [
                 "<2.7.0"
             ],
@@ -4389,10 +4468,10 @@
             "v": "<2.7.0"
         },
         {
-            "advisory": "Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and\u00a0Apache Airflow before 2.7.0 are affected by the\u00a0Validation of OpenSSL Certificate vulnerability.\r\n\r\nThe default SSL context with SSL library did not check a server's X.509\u00a0certificate.\u00a0 Instead, the code accepted any certificate, which could\u00a0result in the disclosure of mail server credentials or mail contents\u00a0when the client connects to an attacker in a MITM position.\r\n\r\nUsers are strongly advised to upgrade to Apache Airflow version 2.7.0 or newer, Apache Airflow IMAP Provider version 3.3.0 or newer, and Apache Airflow SMTP Provider version 1.3.0 or newer to mitigate the risk associated with this vulnerability",
-            "cve": "CVE-2023-39441",
-            "id": "pyup.io-65020",
-            "more_info_path": "/vulnerabilities/CVE-2023-39441/65020",
+            "advisory": "Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user to access connection information and exploit the test connection feature by sending many requests, leading to a denial of service (DoS) condition on the server. Furthermore, malicious actors can leverage this vulnerability to establish harmful connections with the server.\r\n\r\nUsers of Apache Airflow are strongly advised to upgrade to version 2.7.0 or newer to mitigate the risk associated with this vulnerability. Additionally, administrators are encouraged to review and adjust user permissions to restrict access to sensitive functionalities, reducing the attack surface.",
+            "cve": "CVE-2023-37379",
+            "id": "pyup.io-65002",
+            "more_info_path": "/vulnerabilities/CVE-2023-37379/65002",
             "specs": [
                 "<2.7.0"
             ],
@@ -4479,20 +4558,20 @@
             "v": "<=2.3.2"
         },
         {
-            "advisory": "Apache-airflow 2.3.2 and prior versions ship with vulnerable dependencies (click == 7.1.2).",
-            "cve": "PVE-2022-47833",
-            "id": "pyup.io-49785",
-            "more_info_path": "/vulnerabilities/PVE-2022-47833/49785",
+            "advisory": "Apache-airflow 2.3.2 and prior versions ship with vulnerable dependencies (pyjwt == 1.7.1).",
+            "cve": "CVE-2022-29217",
+            "id": "pyup.io-49786",
+            "more_info_path": "/vulnerabilities/CVE-2022-29217/49786",
             "specs": [
                 "<=2.3.2"
             ],
             "v": "<=2.3.2"
         },
         {
-            "advisory": "Apache-airflow 2.3.2 and prior versions ship with vulnerable dependencies (pyjwt == 1.7.1).",
-            "cve": "CVE-2022-29217",
-            "id": "pyup.io-49786",
-            "more_info_path": "/vulnerabilities/CVE-2022-29217/49786",
+            "advisory": "Apache-airflow 2.3.2 and prior versions ship with vulnerable dependencies (click == 7.1.2).",
+            "cve": "PVE-2022-47833",
+            "id": "pyup.io-49785",
+            "more_info_path": "/vulnerabilities/PVE-2022-47833/49785",
             "specs": [
                 "<=2.3.2"
             ],
@@ -4538,16 +4617,6 @@
             ],
             "v": ">=0,<1.10.11rc1"
         },
-        {
-            "advisory": "An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping incorrectly, allowing authenticated users with appropriate permissions to create stored XSS attacks.",
-            "cve": "CVE-2020-11983",
-            "id": "pyup.io-54181",
-            "more_info_path": "/vulnerabilities/CVE-2020-11983/54181",
-            "specs": [
-                ">=0,<1.10.11rc1"
-            ],
-            "v": ">=0,<1.10.11rc1"
-        },
         {
             "advisory": "An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.",
             "cve": "CVE-2020-11981",
@@ -4578,6 +4647,16 @@
             ],
             "v": ">=0,<1.10.11rc1"
         },
+        {
+            "advisory": "An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping incorrectly, allowing authenticated users with appropriate permissions to create stored XSS attacks.",
+            "cve": "CVE-2020-11983",
+            "id": "pyup.io-54181",
+            "more_info_path": "/vulnerabilities/CVE-2020-11983/54181",
+            "specs": [
+                ">=0,<1.10.11rc1"
+            ],
+            "v": ">=0,<1.10.11rc1"
+        },
         {
             "advisory": "In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field.",
             "cve": "CVE-2020-17511",
@@ -4629,20 +4708,20 @@
             "v": ">=0,<1.10.3b1"
         },
         {
-            "advisory": "Versions of Apache Airflow prior to 1.10.5 expose a vulnerability where the Databricks operator logs API keys in plaintext during task execution. This exposure results from the operator encouraging users to input their API key into a connection's \"extra\" field, which the Databricks hook subsequently logs, leading to information exposure.\r\nhttps://github.com/apache/airflow/pull/5635/commits/89f015e6c89392b6de61dab8ab90182e6ee42b74",
-            "cve": "PVE-2024-99796",
-            "id": "pyup.io-66019",
-            "more_info_path": "/vulnerabilities/PVE-2024-99796/66019",
+            "advisory": "In Apache Airflow before 1.10.5 when running with the \"classic\" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new \"RBAC\" UI is unaffected.",
+            "cve": "CVE-2019-12398",
+            "id": "pyup.io-54139",
+            "more_info_path": "/vulnerabilities/CVE-2019-12398/54139",
             "specs": [
                 ">=0,<1.10.5"
             ],
             "v": ">=0,<1.10.5"
         },
         {
-            "advisory": "In Apache Airflow before 1.10.5 when running with the \"classic\" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new \"RBAC\" UI is unaffected.",
-            "cve": "CVE-2019-12398",
-            "id": "pyup.io-54139",
-            "more_info_path": "/vulnerabilities/CVE-2019-12398/54139",
+            "advisory": "Versions of Apache Airflow prior to 1.10.5 expose a vulnerability where the Databricks operator logs API keys in plaintext during task execution. This exposure results from the operator encouraging users to input their API key into a connection's \"extra\" field, which the Databricks hook subsequently logs, leading to information exposure.\r\nhttps://github.com/apache/airflow/pull/5635/commits/89f015e6c89392b6de61dab8ab90182e6ee42b74",
+            "cve": "PVE-2024-99796",
+            "id": "pyup.io-66019",
+            "more_info_path": "/vulnerabilities/PVE-2024-99796/66019",
             "specs": [
                 ">=0,<1.10.5"
             ],
@@ -4679,20 +4758,20 @@
             "v": ">=0,<1.9.0"
         },
         {
-            "advisory": "In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.",
-            "cve": "CVE-2017-17835",
-            "id": "pyup.io-53948",
-            "more_info_path": "/vulnerabilities/CVE-2017-17835/53948",
+            "advisory": "It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to Apache Airflow 1.9.0 or above.",
+            "cve": "CVE-2017-12614",
+            "id": "pyup.io-53928",
+            "more_info_path": "/vulnerabilities/CVE-2017-12614/53928",
             "specs": [
                 ">=0,<1.9.0"
             ],
             "v": ">=0,<1.9.0"
         },
         {
-            "advisory": "It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to Apache Airflow 1.9.0 or above.",
-            "cve": "CVE-2017-12614",
-            "id": "pyup.io-53928",
-            "more_info_path": "/vulnerabilities/CVE-2017-12614/53928",
+            "advisory": "In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.",
+            "cve": "CVE-2017-17835",
+            "id": "pyup.io-53948",
+            "more_info_path": "/vulnerabilities/CVE-2017-17835/53948",
             "specs": [
                 ">=0,<1.9.0"
             ],
@@ -4729,20 +4808,20 @@
             "v": ">=0,<2.3.0"
         },
         {
-            "advisory": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider versions prior to 4.1.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case HIve Provider is installed (Hive Provider 4.1.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the HIve Provider version 4.1.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Hive Provider installed).",
-            "cve": "CVE-2022-41131",
-            "id": "pyup.io-54592",
-            "more_info_path": "/vulnerabilities/CVE-2022-41131/54592",
+            "advisory": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to read arbtrary files in the task execution context, without write access to DAG files. This issue affects Spark Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Spark Provider is installed (Spark Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Spark Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Spark Provider installed).",
+            "cve": "CVE-2022-40954",
+            "id": "pyup.io-54588",
+            "more_info_path": "/vulnerabilities/CVE-2022-40954/54588",
             "specs": [
                 ">=0,<2.3.0"
             ],
             "v": ">=0,<2.3.0"
         },
         {
-            "advisory": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to read arbtrary files in the task execution context, without write access to DAG files. This issue affects Spark Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Spark Provider is installed (Spark Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Spark Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Spark Provider installed).",
-            "cve": "CVE-2022-40954",
-            "id": "pyup.io-54588",
-            "more_info_path": "/vulnerabilities/CVE-2022-40954/54588",
+            "advisory": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider versions prior to 4.1.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case HIve Provider is installed (Hive Provider 4.1.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the HIve Provider version 4.1.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Hive Provider installed).",
+            "cve": "CVE-2022-41131",
+            "id": "pyup.io-54592",
+            "more_info_path": "/vulnerabilities/CVE-2022-41131/54592",
             "specs": [
                 ">=0,<2.3.0"
             ],
@@ -4799,20 +4878,20 @@
             "v": ">=0,<2.4.1"
         },
         {
-            "advisory": "In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.",
-            "cve": "CVE-2022-43985",
-            "id": "pyup.io-54567",
-            "more_info_path": "/vulnerabilities/CVE-2022-43985/54567",
+            "advisory": "In Apache Airflow versions prior to 2.4.2, the \"Trigger DAG with config\" screen was susceptible to XSS attacks via the `origin` query argument.",
+            "cve": "CVE-2022-43982",
+            "id": "pyup.io-54568",
+            "more_info_path": "/vulnerabilities/CVE-2022-43982/54568",
             "specs": [
                 ">=0,<2.4.2"
             ],
             "v": ">=0,<2.4.2"
         },
         {
-            "advisory": "In Apache Airflow versions prior to 2.4.2, the \"Trigger DAG with config\" screen was susceptible to XSS attacks via the `origin` query argument.",
-            "cve": "CVE-2022-43982",
-            "id": "pyup.io-54568",
-            "more_info_path": "/vulnerabilities/CVE-2022-43982/54568",
+            "advisory": "In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.",
+            "cve": "CVE-2022-43985",
+            "id": "pyup.io-54567",
+            "more_info_path": "/vulnerabilities/CVE-2022-43985/54567",
             "specs": [
                 ">=0,<2.4.2"
             ],
@@ -4859,20 +4938,20 @@
             "v": ">=0,<2.6.3"
         },
         {
-            "advisory": "Apache Airflow, in versions before 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn't. This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2\u00a0Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.",
-            "cve": "CVE-2023-48291",
-            "id": "pyup.io-65191",
-            "more_info_path": "/vulnerabilities/CVE-2023-48291/65191",
+            "advisory": "Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification.",
+            "cve": "CVE-2023-50783",
+            "id": "pyup.io-65201",
+            "more_info_path": "/vulnerabilities/CVE-2023-50783/65201",
             "specs": [
                 ">=0,<2.8.0b1"
             ],
             "v": ">=0,<2.8.0b1"
         },
         {
-            "advisory": "Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification.",
-            "cve": "CVE-2023-50783",
-            "id": "pyup.io-65201",
-            "more_info_path": "/vulnerabilities/CVE-2023-50783/65201",
+            "advisory": "Apache Airflow, in versions before 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn't. This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2\u00a0Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.",
+            "cve": "CVE-2023-48291",
+            "id": "pyup.io-65191",
+            "more_info_path": "/vulnerabilities/CVE-2023-48291/65191",
             "specs": [
                 ">=0,<2.8.0b1"
             ],
@@ -4898,6 +4977,26 @@
             ],
             "v": ">=0,<2.8.1"
         },
+        {
+            "advisory": "Apache Airflow is affected by a vulnerability impacting versions before 2.8.2, where authenticated users can access DAG code and import errors for DAGs without required permissions via the API and UI. To mitigate this risk, upgrading to version 2.8.2 or newer is recommended.",
+            "cve": "CVE-2023-46052",
+            "id": "pyup.io-68475",
+            "more_info_path": "/vulnerabilities/CVE-2023-46052/68475",
+            "specs": [
+                ">=0,<2.8.2"
+            ],
+            "v": ">=0,<2.8.2"
+        },
+        {
+            "advisory": "Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permitted to view.\u00a0With 2.8.2 and newer, Ops and Viewer users do not have audit log permission by default, they need to be explicitly granted permissions to see the logs. Only admin users have audit log permission by default. Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerability",
+            "cve": "CVE-2023-46051",
+            "id": "pyup.io-68489",
+            "more_info_path": "/vulnerabilities/CVE-2023-46051/68489",
+            "specs": [
+                ">=0,<2.8.2"
+            ],
+            "v": ">=0,<2.8.2"
+        },
         {
             "advisory": "Apache-airflow 1.10.15 and 2.0.2 include a fix for CVE-2021-28359: The \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-17515 but the implemented fix did not fix the issue completely. Update to Airflow 1.10.15 or 2.0.2. Please also update your Python version to the latest available PATCH releases of the installed MINOR versions, example update to Python 3.6.13 if you are on Python 3.6. (Those contain the fix for CVE-2021-23336 https://nvd.nist.gov/vuln/detail/CVE-2021-23336).",
             "cve": "CVE-2021-28359",
@@ -4931,20 +5030,20 @@
             "v": ">=1.10.0,<2.7.0"
         },
         {
-            "advisory": "The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain parameters to pass to that endpoint and even after can just get some metadata about a DAG and a Task. This issue only affects Apache Airflow 2.0.0.",
-            "cve": "CVE-2021-26697",
-            "id": "pyup.io-54461",
-            "more_info_path": "/vulnerabilities/CVE-2021-26697/54461",
+            "advisory": "Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `[webserver] expose_config` is set to `False` in `airflow.cfg`. This allowed a privilege escalation attack. This issue affects Apache Airflow 2.0.0.",
+            "cve": "CVE-2021-26559",
+            "id": "pyup.io-54168",
+            "more_info_path": "/vulnerabilities/CVE-2021-26559/54168",
             "specs": [
                 ">=2.0.0,<2.0.1"
             ],
             "v": ">=2.0.0,<2.0.1"
         },
         {
-            "advisory": "Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `[webserver] expose_config` is set to `False` in `airflow.cfg`. This allowed a privilege escalation attack. This issue affects Apache Airflow 2.0.0.",
-            "cve": "CVE-2021-26559",
-            "id": "pyup.io-54168",
-            "more_info_path": "/vulnerabilities/CVE-2021-26559/54168",
+            "advisory": "The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain parameters to pass to that endpoint and even after can just get some metadata about a DAG and a Task. This issue only affects Apache Airflow 2.0.0.",
+            "cve": "CVE-2021-26697",
+            "id": "pyup.io-54461",
+            "more_info_path": "/vulnerabilities/CVE-2021-26697/54461",
             "specs": [
                 ">=2.0.0,<2.0.1"
             ],
@@ -4971,20 +5070,20 @@
             "v": ">=2.2.4,<2.3.4rc1"
         },
         {
-            "advisory": "In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.",
-            "cve": "CVE-2022-40754",
-            "id": "pyup.io-54715",
-            "more_info_path": "/vulnerabilities/CVE-2022-40754/54715",
+            "advisory": "In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.",
+            "cve": "CVE-2022-40604",
+            "id": "pyup.io-54551",
+            "more_info_path": "/vulnerabilities/CVE-2022-40604/54551",
             "specs": [
                 ">=2.3.0,<2.4.0b1"
             ],
             "v": ">=2.3.0,<2.4.0b1"
         },
         {
-            "advisory": "In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.",
-            "cve": "CVE-2022-40604",
-            "id": "pyup.io-54551",
-            "more_info_path": "/vulnerabilities/CVE-2022-40604/54551",
+            "advisory": "In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.",
+            "cve": "CVE-2022-40754",
+            "id": "pyup.io-54715",
+            "more_info_path": "/vulnerabilities/CVE-2022-40754/54715",
             "specs": [
                 ">=2.3.0,<2.4.0b1"
             ],
@@ -5162,16 +5261,6 @@
             ],
             "v": "<=2021.3.3"
         },
-        {
-            "advisory": "Apache-airflow-backport-providers-amazon 2021.3.3 and prior versions ship with vulnerable dependencies (flask-caching == 1.3.3).",
-            "cve": "CVE-2021-33026",
-            "id": "pyup.io-49926",
-            "more_info_path": "/vulnerabilities/CVE-2021-33026/49926",
-            "specs": [
-                "<=2021.3.3"
-            ],
-            "v": "<=2021.3.3"
-        },
         {
             "advisory": "Apache-airflow-backport-providers-amazon 2021.3.3 and prior versions ship with vulnerable dependencies (flask-appbuilder == 2.3.4).",
             "cve": "CVE-2021-29621",
@@ -5212,6 +5301,16 @@
             ],
             "v": "<=2021.3.3"
         },
+        {
+            "advisory": "Apache-airflow-backport-providers-amazon 2021.3.3 and prior versions ship with vulnerable dependencies (flask-caching == 1.3.3).",
+            "cve": "CVE-2021-33026",
+            "id": "pyup.io-49926",
+            "more_info_path": "/vulnerabilities/CVE-2021-33026/49926",
+            "specs": [
+                "<=2021.3.3"
+            ],
+            "v": "<=2021.3.3"
+        },
         {
             "advisory": "Apache-airflow-backport-providers-amazon 2021.3.3 and prior versions ship with vulnerable dependencies (urllib3 == 1.25.11).",
             "cve": "CVE-2021-33503",
@@ -5422,16 +5521,6 @@
             ],
             "v": "<=2021.3.3"
         },
-        {
-            "advisory": "Apache-airflow-backport-providers-cncf-kubernetes 2021.3.3 and prior versions ship with vulnerable dependencies (flask-caching == 1.3.3).",
-            "cve": "CVE-2021-33026",
-            "id": "pyup.io-49942",
-            "more_info_path": "/vulnerabilities/CVE-2021-33026/49942",
-            "specs": [
-                "<=2021.3.3"
-            ],
-            "v": "<=2021.3.3"
-        },
         {
             "advisory": "apache-airflow-backport-providers-cncf-kubernetes 2021.3.3 and prior versions ship with vulnerable dependencies (apache-airflow == 1.10.15).",
             "cve": "CVE-2023-25754",
@@ -5472,6 +5561,16 @@
             ],
             "v": "<=2021.3.3"
         },
+        {
+            "advisory": "Apache-airflow-backport-providers-cncf-kubernetes 2021.3.3 and prior versions ship with vulnerable dependencies (flask-caching == 1.3.3).",
+            "cve": "CVE-2021-33026",
+            "id": "pyup.io-49942",
+            "more_info_path": "/vulnerabilities/CVE-2021-33026/49942",
+            "specs": [
+                "<=2021.3.3"
+            ],
+            "v": "<=2021.3.3"
+        },
         {
             "advisory": "Apache-airflow-backport-providers-cncf-kubernetes 2021.3.3 and prior versions ship with vulnerable dependencies (urllib3 == 1.25.11).",
             "cve": "CVE-2021-33503",
@@ -6238,16 +6337,6 @@
         }
     ],
     "apache-airflow-backport-providers-slack": [
-        {
-            "advisory": "Apache-airflow-backport-providers-slack 2021.3.3 and prior versions ship with vulnerable dependencies (flask-caching == 1.3.3).",
-            "cve": "CVE-2021-33026",
-            "id": "pyup.io-49990",
-            "more_info_path": "/vulnerabilities/CVE-2021-33026/49990",
-            "specs": [
-                "<=2021.3.3"
-            ],
-            "v": "<=2021.3.3"
-        },
         {
             "advisory": "Apache-airflow-backport-providers-slack 2021.3.3 and prior versions ship with vulnerable dependencies (flask-appbuilder == 2.3.4).",
             "cve": "CVE-2021-41265",
@@ -6368,6 +6457,16 @@
             ],
             "v": "<=2021.3.3"
         },
+        {
+            "advisory": "Apache-airflow-backport-providers-slack 2021.3.3 and prior versions ship with vulnerable dependencies (flask-caching == 1.3.3).",
+            "cve": "CVE-2021-33026",
+            "id": "pyup.io-49990",
+            "more_info_path": "/vulnerabilities/CVE-2021-33026/49990",
+            "specs": [
+                "<=2021.3.3"
+            ],
+            "v": "<=2021.3.3"
+        },
         {
             "advisory": "Apache-airflow-backport-providers-slack 2021.3.3 and prior versions ship with vulnerable dependencies (flask-appbuilder == 2.3.4).",
             "cve": "CVE-2021-29621",
@@ -6524,16 +6623,6 @@
             ],
             "v": "<=2021.3.3"
         },
-        {
-            "advisory": "Apache-airflow-backport-providers-ssh 2021.3.3 and prior versions ship with vulnerable dependencies (flask-caching == 1.3.3).",
-            "cve": "CVE-2021-33026",
-            "id": "pyup.io-50006",
-            "more_info_path": "/vulnerabilities/CVE-2021-33026/50006",
-            "specs": [
-                "<=2021.3.3"
-            ],
-            "v": "<=2021.3.3"
-        },
         {
             "advisory": "Apache-airflow-backport-providers-ssh 2021.3.3 and prior versions ship with vulnerable dependencies (apache-airflow == 1.10.15).",
             "cve": "CVE-2021-37712",
@@ -6603,6 +6692,16 @@
                 "<=2021.3.3"
             ],
             "v": "<=2021.3.3"
+        },
+        {
+            "advisory": "Apache-airflow-backport-providers-ssh 2021.3.3 and prior versions ship with vulnerable dependencies (flask-caching == 1.3.3).",
+            "cve": "CVE-2021-33026",
+            "id": "pyup.io-50006",
+            "more_info_path": "/vulnerabilities/CVE-2021-33026/50006",
+            "specs": [
+                "<=2021.3.3"
+            ],
+            "v": "<=2021.3.3"
         }
     ],
     "apache-airflow-backport-providers-tableau": [
@@ -6666,16 +6765,6 @@
         }
     ],
     "apache-airflow-providers-airbyte": [
-        {
-            "advisory": "Apache-airflow-providers-airbyte 3.0.0 and prior versions ship with vulnerable dependencies (wtforms == 2.3.3).",
-            "cve": "PVE-2021-42852",
-            "id": "pyup.io-49838",
-            "more_info_path": "/vulnerabilities/PVE-2021-42852/49838",
-            "specs": [
-                "<=3.0.0"
-            ],
-            "v": "<=3.0.0"
-        },
         {
             "advisory": "Apache-airflow-providers-airbyte 3.0.0 and prior versions ship with vulnerable dependencies (click == 7.1.2).",
             "cve": "PVE-2022-47833",
@@ -6695,6 +6784,16 @@
                 "<=3.0.0"
             ],
             "v": "<=3.0.0"
+        },
+        {
+            "advisory": "Apache-airflow-providers-airbyte 3.0.0 and prior versions ship with vulnerable dependencies (wtforms == 2.3.3).",
+            "cve": "PVE-2021-42852",
+            "id": "pyup.io-49838",
+            "more_info_path": "/vulnerabilities/PVE-2021-42852/49838",
+            "specs": [
+                "<=3.0.0"
+            ],
+            "v": "<=3.0.0"
         }
     ],
     "apache-airflow-providers-amazon": [
@@ -7088,16 +7187,6 @@
         }
     ],
     "apache-airflow-providers-databricks": [
-        {
-            "advisory": "Apache-airflow-providers-databricks 3.0.0 and prior versions ship with vulnerable dependencies (wtforms == 2.3.3).",
-            "cve": "PVE-2021-42852",
-            "id": "pyup.io-49826",
-            "more_info_path": "/vulnerabilities/PVE-2021-42852/49826",
-            "specs": [
-                "<=3.0.0"
-            ],
-            "v": "<=3.0.0"
-        },
         {
             "advisory": "Apache-airflow-providers-databricks 3.0.0 and prior versions ship with vulnerable dependencies (click == 7.1.2).",
             "cve": "PVE-2022-47833",
@@ -7117,6 +7206,16 @@
                 "<=3.0.0"
             ],
             "v": "<=3.0.0"
+        },
+        {
+            "advisory": "Apache-airflow-providers-databricks 3.0.0 and prior versions ship with vulnerable dependencies (wtforms == 2.3.3).",
+            "cve": "PVE-2021-42852",
+            "id": "pyup.io-49826",
+            "more_info_path": "/vulnerabilities/PVE-2021-42852/49826",
+            "specs": [
+                "<=3.0.0"
+            ],
+            "v": "<=3.0.0"
         }
     ],
     "apache-airflow-providers-datadog": [
@@ -7352,6 +7451,16 @@
         }
     ],
     "apache-airflow-providers-microsoft-azure": [
+        {
+            "advisory": "Apache-airflow-providers-microsoft-azure 4.0.0 and prior versions ship with vulnerable dependencies (wtforms == 2.3.3).",
+            "cve": "PVE-2021-42852",
+            "id": "pyup.io-49877",
+            "more_info_path": "/vulnerabilities/PVE-2021-42852/49877",
+            "specs": [
+                "<=4.0.0"
+            ],
+            "v": "<=4.0.0"
+        },
         {
             "advisory": "Apache-airflow-providers-microsoft-azure 4.0.0 and prior versions ship with vulnerable dependencies (click == 7.1.2).",
             "cve": "PVE-2022-47833",
@@ -7371,16 +7480,6 @@
                 "<=4.0.0"
             ],
             "v": "<=4.0.0"
-        },
-        {
-            "advisory": "Apache-airflow-providers-microsoft-azure 4.0.0 and prior versions ship with vulnerable dependencies (wtforms == 2.3.3).",
-            "cve": "PVE-2021-42852",
-            "id": "pyup.io-49877",
-            "more_info_path": "/vulnerabilities/PVE-2021-42852/49877",
-            "specs": [
-                "<=4.0.0"
-            ],
-            "v": "<=4.0.0"
         }
     ],
     "apache-airflow-providers-microsoft-mssql": [
@@ -7818,16 +7917,6 @@
         }
     ],
     "apache-airflow-providers-slack": [
-        {
-            "advisory": "Apache-airflow-providers-slack 5.0.0 and prior versions ship with vulnerable dependencies (wtforms == 2.3.3).",
-            "cve": "PVE-2021-42852",
-            "id": "pyup.io-49853",
-            "more_info_path": "/vulnerabilities/PVE-2021-42852/49853",
-            "specs": [
-                "<=5.0.0"
-            ],
-            "v": "<=5.0.0"
-        },
         {
             "advisory": "Apache-airflow-providers-slack 5.0.0 and prior versions ship with vulnerable dependencies (click == 7.1.2).",
             "cve": "PVE-2022-47833",
@@ -7847,6 +7936,16 @@
                 "<=5.0.0"
             ],
             "v": "<=5.0.0"
+        },
+        {
+            "advisory": "Apache-airflow-providers-slack 5.0.0 and prior versions ship with vulnerable dependencies (wtforms == 2.3.3).",
+            "cve": "PVE-2021-42852",
+            "id": "pyup.io-49853",
+            "more_info_path": "/vulnerabilities/PVE-2021-42852/49853",
+            "specs": [
+                "<=5.0.0"
+            ],
+            "v": "<=5.0.0"
         }
     ],
     "apache-airflow-providers-snowflake": [
@@ -7861,20 +7960,20 @@
             "v": "<=3.0.0"
         },
         {
-            "advisory": "Apache-airflow-providers-snowflake 3.0.0 and prior versions ship with vulnerable dependencies (click == 7.1.2).",
-            "cve": "PVE-2022-47833",
-            "id": "pyup.io-49848",
-            "more_info_path": "/vulnerabilities/PVE-2022-47833/49848",
+            "advisory": "Apache-airflow-providers-snowflake 3.0.0 and prior versions ship with vulnerable dependencies (pyjwt == 1.7.1).",
+            "cve": "CVE-2022-29217",
+            "id": "pyup.io-49849",
+            "more_info_path": "/vulnerabilities/CVE-2022-29217/49849",
             "specs": [
                 "<=3.0.0"
             ],
             "v": "<=3.0.0"
         },
         {
-            "advisory": "Apache-airflow-providers-snowflake 3.0.0 and prior versions ship with vulnerable dependencies (pyjwt == 1.7.1).",
-            "cve": "CVE-2022-29217",
-            "id": "pyup.io-49849",
-            "more_info_path": "/vulnerabilities/CVE-2022-29217/49849",
+            "advisory": "Apache-airflow-providers-snowflake 3.0.0 and prior versions ship with vulnerable dependencies (click == 7.1.2).",
+            "cve": "PVE-2022-47833",
+            "id": "pyup.io-49848",
+            "more_info_path": "/vulnerabilities/PVE-2022-47833/49848",
             "specs": [
                 "<=3.0.0"
             ],
@@ -8060,6 +8159,16 @@
             ],
             "v": "<3.0.0"
         },
+        {
+            "advisory": "Apache-dolphinscheduler 3.0.0 (Python SDK) corresponds to DolphinScheduler version 3.0.0, which updates its MAVEN dependency 'jackson.databind' to v2.9.10.8 to include security fixes.",
+            "cve": "CVE-2018-11307",
+            "id": "pyup.io-50544",
+            "more_info_path": "/vulnerabilities/CVE-2018-11307/50544",
+            "specs": [
+                "<3.0.0"
+            ],
+            "v": "<3.0.0"
+        },
         {
             "advisory": "Apache-dolphinscheduler 3.0.0 updates its MAVEN dependency 'jackson.databind' to v2.9.10.8 to include security fixes.",
             "cve": "CVE-2020-10969",
@@ -8320,16 +8429,6 @@
             ],
             "v": "<3.0.0"
         },
-        {
-            "advisory": "Apache-dolphinscheduler 3.0.0 updates its MAVEN dependency 'jackson.databind' to v2.9.10.8 to include security fixes.",
-            "cve": "CVE-2018-11307",
-            "id": "pyup.io-50544",
-            "more_info_path": "/vulnerabilities/CVE-2018-11307/50544",
-            "specs": [
-                "<3.0.0"
-            ],
-            "v": "<3.0.0"
-        },
         {
             "advisory": "Apache-dolphinscheduler 3.0.0 updates its MAVEN dependency 'jackson.databind' to v2.9.10.8 to include security fixes.",
             "cve": "CVE-2018-19360",
@@ -8765,6 +8864,16 @@
             ],
             "v": "<0.13.1"
         },
+        {
+            "advisory": "Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.",
+            "cve": "CVE-2023-46226",
+            "id": "pyup.io-70407",
+            "more_info_path": "/vulnerabilities/CVE-2023-46226/70407",
+            "specs": [
+                "<1.3.0"
+            ],
+            "v": "<1.3.0"
+        },
         {
             "advisory": "Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB. This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.",
             "cve": "CVE-2023-30771",
@@ -9094,9 +9203,9 @@
         },
         {
             "advisory": "Apache-superset 1.2.0 updates NPM packages for security fixes.\r\nhttps://github.com/apache/superset/pull/13367",
-            "cve": "CVE-2020-28477",
-            "id": "pyup.io-41791",
-            "more_info_path": "/vulnerabilities/CVE-2020-28477/41791",
+            "cve": "CVE-2021-3807",
+            "id": "pyup.io-45803",
+            "more_info_path": "/vulnerabilities/CVE-2021-3807/45803",
             "specs": [
                 "<1.2.0"
             ],
@@ -9104,9 +9213,9 @@
         },
         {
             "advisory": "Apache-superset 1.2.0 updates NPM packages for security fixes.\r\nhttps://github.com/apache/superset/pull/13367",
-            "cve": "CVE-2021-3807",
-            "id": "pyup.io-45803",
-            "more_info_path": "/vulnerabilities/CVE-2021-3807/45803",
+            "cve": "CVE-2020-28477",
+            "id": "pyup.io-41791",
+            "more_info_path": "/vulnerabilities/CVE-2020-28477/41791",
             "specs": [
                 "<1.2.0"
             ],
@@ -9172,16 +9281,6 @@
             ],
             "v": "<2.1.2"
         },
-        {
-            "advisory": "Apache-superset 3.0.0 updates its dependency 'flask_caching' to v1.11.1 to include a security fix.",
-            "cve": "CVE-2021-33026",
-            "id": "pyup.io-61921",
-            "more_info_path": "/vulnerabilities/CVE-2021-33026/61921",
-            "specs": [
-                "<3.0.0"
-            ],
-            "v": "<3.0.0"
-        },
         {
             "advisory": "Apache-superset 3.0.0 updates its NPM dependency 'ansi-regex' to include a security fix.",
             "cve": "CVE-2021-3807",
@@ -9202,6 +9301,16 @@
             ],
             "v": "<3.0.0"
         },
+        {
+            "advisory": "An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.",
+            "cve": "CVE-2023-42502",
+            "id": "pyup.io-65227",
+            "more_info_path": "/vulnerabilities/CVE-2023-42502/65227",
+            "specs": [
+                "<3.0.0"
+            ],
+            "v": "<3.0.0"
+        },
         {
             "advisory": "An authenticated user with read permissions on database connection metadata could potentially access sensitive information such as the connection's username. This issue affects Apache Superset before 3.0.0.",
             "cve": "CVE-2023-42505",
@@ -9213,10 +9322,10 @@
             "v": "<3.0.0"
         },
         {
-            "advisory": "An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0.",
-            "cve": "CVE-2023-42502",
-            "id": "pyup.io-65227",
-            "more_info_path": "/vulnerabilities/CVE-2023-42502/65227",
+            "advisory": "Apache-superset 3.0.0 updates its dependency 'flask_caching' to v1.11.1 to include a security fix.",
+            "cve": "CVE-2021-33026",
+            "id": "pyup.io-61921",
+            "more_info_path": "/vulnerabilities/CVE-2021-33026/61921",
             "specs": [
                 "<3.0.0"
             ],
@@ -9276,6 +9385,17 @@
             ],
             "v": "<=1.5.2,==2.0.0"
         },
+        {
+            "advisory": "Dashboard rendering does not sufficiently sanitize the content of markdown components leading to possible XSS attack vectors that can be performed by authenticated users with create dashboard permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.",
+            "cve": "CVE-2022-43717",
+            "id": "pyup.io-54616",
+            "more_info_path": "/vulnerabilities/CVE-2022-43717/54616",
+            "specs": [
+                "<=1.5.2",
+                "==2.0.0"
+            ],
+            "v": "<=1.5.2,==2.0.0"
+        },
         {
             "advisory": "Upload data forms do not correctly render user input leading to possible XSS attack vectors that can be performed by authenticated users with database connection update permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.",
             "cve": "CVE-2022-43718",
@@ -9298,17 +9418,6 @@
             ],
             "v": "<=1.5.2,==2.0.0"
         },
-        {
-            "advisory": "Dashboard rendering does not sufficiently sanitize the content of markdown components leading to possible XSS attack vectors that can be performed by authenticated users with create dashboard permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.",
-            "cve": "CVE-2022-43717",
-            "id": "pyup.io-54616",
-            "more_info_path": "/vulnerabilities/CVE-2022-43717/54616",
-            "specs": [
-                "<=1.5.2",
-                "==2.0.0"
-            ],
-            "v": "<=1.5.2,==2.0.0"
-        },
         {
             "advisory": "An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1",
             "cve": "CVE-2023-27525",
@@ -9339,16 +9448,6 @@
             ],
             "v": "<=2.0.1"
         },
-        {
-            "advisory": "Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like\u00a0sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is using a SQLite database for its metadata (not advised for production use) it could result in more severe vulnerabilities related to confidentiality and integrity.\u00a0This vulnerability exists in Apache Superset versions up to and including 2.1.0.",
-            "cve": "CVE-2023-39265",
-            "id": "pyup.io-65000",
-            "more_info_path": "/vulnerabilities/CVE-2023-39265/65000",
-            "specs": [
-                "<=2.1.0"
-            ],
-            "v": "<=2.1.0"
-        },
         {
             "advisory": "Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network connections, possible SSRF.",
             "cve": "CVE-2023-36388",
@@ -9370,10 +9469,10 @@
             "v": "<=2.1.0"
         },
         {
-            "advisory": "A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0.",
-            "cve": "CVE-2023-27526",
-            "id": "pyup.io-62904",
-            "more_info_path": "/vulnerabilities/CVE-2023-27526/62904",
+            "advisory": "Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like\u00a0sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is using a SQLite database for its metadata (not advised for production use) it could result in more severe vulnerabilities related to confidentiality and integrity.\u00a0This vulnerability exists in Apache Superset versions up to and including 2.1.0.",
+            "cve": "CVE-2023-39265",
+            "id": "pyup.io-65000",
+            "more_info_path": "/vulnerabilities/CVE-2023-39265/65000",
             "specs": [
                 "<=2.1.0"
             ],
@@ -9389,6 +9488,16 @@
             ],
             "v": "<=2.1.0"
         },
+        {
+            "advisory": "A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0.",
+            "cve": "CVE-2023-27526",
+            "id": "pyup.io-62904",
+            "more_info_path": "/vulnerabilities/CVE-2023-27526/62904",
+            "specs": [
+                "<=2.1.0"
+            ],
+            "v": "<=2.1.0"
+        },
         {
             "advisory": "By default, stack traces for errors were enabled, which resulted in the exposure of internal traces on REST API endpoints to users.\u00a0This vulnerability exists in Apache Superset versions up to and including 2.1.0.",
             "cve": "CVE-2023-39264",
@@ -9420,10 +9529,10 @@
             "v": ">=0,<0.32.0"
         },
         {
-            "advisory": "Apache Superset versions before 0.34.0 are susceptible to a Cross-site Scripting (XSS) vulnerability that involves an issue through FAB list views.\r\nhttps://github.com/apache/superset/commit/b62d7e3e8eaa80e201af3141fb4fe26c39e1ff79",
-            "cve": "PVE-2024-99800",
-            "id": "pyup.io-66015",
-            "more_info_path": "/vulnerabilities/PVE-2024-99800/66015",
+            "advisory": "Cross-site Scripting (XSS) vulnerabilities have been detected in versions of apache-superset before 0.34.0, specifically through its Markup viz feature. XSS attacks manipulate a web application to execute malicious scripts on a client's browser, performing actions usually blocked by browser security, such as hijacking user sessions or exposing sensitive information. These attacks exploit the application\u2019s failure to sufficiently sanitize, validate, or escape user input, particularly special characters in dynamic content. Different XSS attacks include Stored, Reflected, DOM-based, and Mutated types, each with unique methods of injecting harmful code. To mitigate XSS risks, implementations should include sanitizing data inputs, encoding special characters, disabling client-side scripts where possible, redirecting invalid requests, detecting simultaneous logins, enforcing Content Security Policies, and understanding the security implications of third-party library usage.\r\nhttps://github.com/apache/superset/commit/0c5db55d55471c1c61c0750733733c157551b2d8",
+            "cve": "PVE-2024-99797",
+            "id": "pyup.io-66018",
+            "more_info_path": "/vulnerabilities/PVE-2024-99797/66018",
             "specs": [
                 ">=0,<0.34.0"
             ],
@@ -9440,10 +9549,10 @@
             "v": ">=0,<0.34.0"
         },
         {
-            "advisory": "Cross-site Scripting (XSS) vulnerabilities have been detected in versions of apache-superset before 0.34.0, specifically through its Markup viz feature. XSS attacks manipulate a web application to execute malicious scripts on a client's browser, performing actions usually blocked by browser security, such as hijacking user sessions or exposing sensitive information. These attacks exploit the application\u2019s failure to sufficiently sanitize, validate, or escape user input, particularly special characters in dynamic content. Different XSS attacks include Stored, Reflected, DOM-based, and Mutated types, each with unique methods of injecting harmful code. To mitigate XSS risks, implementations should include sanitizing data inputs, encoding special characters, disabling client-side scripts where possible, redirecting invalid requests, detecting simultaneous logins, enforcing Content Security Policies, and understanding the security implications of third-party library usage.\r\nhttps://github.com/apache/superset/commit/0c5db55d55471c1c61c0750733733c157551b2d8",
-            "cve": "PVE-2024-99797",
-            "id": "pyup.io-66018",
-            "more_info_path": "/vulnerabilities/PVE-2024-99797/66018",
+            "advisory": "Apache Superset versions before 0.34.0 are susceptible to a Cross-site Scripting (XSS) vulnerability that involves an issue through FAB list views.\r\nhttps://github.com/apache/superset/commit/b62d7e3e8eaa80e201af3141fb4fe26c39e1ff79",
+            "cve": "PVE-2024-99800",
+            "id": "pyup.io-66015",
+            "more_info_path": "/vulnerabilities/PVE-2024-99800/66015",
             "specs": [
                 ">=0,<0.34.0"
             ],
@@ -9510,20 +9619,20 @@
             "v": ">=0,<1.3.1"
         },
         {
-            "advisory": "Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.",
-            "cve": "CVE-2021-42250",
-            "id": "pyup.io-54375",
-            "more_info_path": "/vulnerabilities/CVE-2021-42250/54375",
+            "advisory": "Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way.",
+            "cve": "CVE-2021-41972",
+            "id": "pyup.io-54371",
+            "more_info_path": "/vulnerabilities/CVE-2021-41972/54371",
             "specs": [
                 ">=0,<1.3.2"
             ],
             "v": ">=0,<1.3.2"
         },
         {
-            "advisory": "Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way.",
-            "cve": "CVE-2021-41972",
-            "id": "pyup.io-54371",
-            "more_info_path": "/vulnerabilities/CVE-2021-41972/54371",
+            "advisory": "Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.",
+            "cve": "CVE-2021-42250",
+            "id": "pyup.io-54375",
+            "more_info_path": "/vulnerabilities/CVE-2021-42250/54375",
             "specs": [
                 ">=0,<1.3.2"
             ],
@@ -9560,10 +9669,10 @@
             "v": ">=0,<1.5.1"
         },
         {
-            "advisory": "Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.\u00a0\u00a0\r\nThis vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.",
-            "cve": "CVE-2023-46104",
-            "id": "pyup.io-65186",
-            "more_info_path": "/vulnerabilities/CVE-2023-46104/65186",
+            "advisory": "An authenticated Gamma user can create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts. This issue affects Apache Superset: before 2.1.2, from 3.0.0 before 3.0.2. Users are recommended to upgrade to version 3.0.2 or 2.1.3, which fixes the issue.",
+            "cve": "CVE-2023-49734",
+            "id": "pyup.io-65195",
+            "more_info_path": "/vulnerabilities/CVE-2023-49734/65195",
             "specs": [
                 ">=0,<2.1.3",
                 ">=3.0.0,<3.0.2"
@@ -9571,10 +9680,10 @@
             "v": ">=0,<2.1.3,>=3.0.0,<3.0.2"
         },
         {
-            "advisory": "An authenticated Gamma user can create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts. This issue affects Apache Superset: before 2.1.2, from 3.0.0 before 3.0.2. Users are recommended to upgrade to version 3.0.2 or 2.1.3, which fixes the issue.",
-            "cve": "CVE-2023-49734",
-            "id": "pyup.io-65195",
-            "more_info_path": "/vulnerabilities/CVE-2023-49734/65195",
+            "advisory": "Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.\u00a0\u00a0\r\nThis vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.",
+            "cve": "CVE-2023-46104",
+            "id": "pyup.io-65186",
+            "more_info_path": "/vulnerabilities/CVE-2023-46104/65186",
             "specs": [
                 ">=0,<2.1.3",
                 ">=3.0.0,<3.0.2"
@@ -9592,6 +9701,61 @@
             ],
             "v": ">=0,<2.1.3,>=3.0.0,<3.0.2"
         },
+        {
+            "advisory": "A vulnerability in various versions of Apache Superset allows authenticated users with alert creation privileges to execute a specially crafted SQL statement, leading to a database error. This error, improperly handled, could expose sensitive information in the alert's error log. Users are advised to upgrade their systems to mitigate this issue.",
+            "cve": "CVE-2023-29134",
+            "id": "pyup.io-68480",
+            "more_info_path": "/vulnerabilities/CVE-2023-29134/68480",
+            "specs": [
+                ">=0,<3.0.4",
+                ">=3.1.0,<3.1.1"
+            ],
+            "v": ">=0,<3.0.4,>=3.1.0,<3.1.1"
+        },
+        {
+            "advisory": "A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it's important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.",
+            "cve": "CVE-2024-22299",
+            "id": "pyup.io-68490",
+            "more_info_path": "/vulnerabilities/CVE-2024-22299/68490",
+            "specs": [
+                ">=0,<3.0.4",
+                ">=3.1.0,<3.1.1"
+            ],
+            "v": ">=0,<3.0.4,>=3.1.0,<3.1.1"
+        },
+        {
+            "advisory": "Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don't have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1. Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.",
+            "cve": "CVE-2024-30178",
+            "id": "pyup.io-68494",
+            "more_info_path": "/vulnerabilities/CVE-2024-30178/68494",
+            "specs": [
+                ">=0,<3.0.4",
+                ">=3.1.0,<3.1.1"
+            ],
+            "v": ">=0,<3.0.4,>=3.1.0,<3.1.1"
+        },
+        {
+            "advisory": "Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1. Users are recommended to upgrade to version 3.1.1, which fixes the issue.",
+            "cve": "CVE-2024-22149",
+            "id": "pyup.io-68495",
+            "more_info_path": "/vulnerabilities/CVE-2024-22149/68495",
+            "specs": [
+                ">=0,<3.0.4",
+                ">=3.1.0,<3.1.1"
+            ],
+            "v": ">=0,<3.0.4,>=3.1.0,<3.1.1"
+        },
+        {
+            "advisory": "A guest user could exploit a chart data REST API and send arbitrary SQL statements that on error could leak information from the underlying analytics database.This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1. Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.",
+            "cve": "CVE-2023-45935",
+            "id": "pyup.io-68496",
+            "more_info_path": "/vulnerabilities/CVE-2023-45935/68496",
+            "specs": [
+                ">=0,<3.0.4",
+                ">=3.1.0,<3.1.1"
+            ],
+            "v": ">=0,<3.0.4,>=3.1.0,<3.1.1"
+        },
         {
             "advisory": "An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability.",
             "cve": "CVE-2023-32672",
@@ -9962,6 +10126,18 @@
             "v": "<0.5.1"
         }
     ],
+    "aptdaemon": [
+        {
+            "advisory": "There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. This way an unprivileged user can check for the existence of any files on the system as root.",
+            "cve": "CVE-2020-15703",
+            "id": "pyup.io-70576",
+            "more_info_path": "/vulnerabilities/CVE-2020-15703/70576",
+            "specs": [
+                "<=1.1.1"
+            ],
+            "v": "<=1.1.1"
+        }
+    ],
     "aqtinstall": [
         {
             "advisory": "Aqtinstall 2.1.0 uses SHA-256 checksums from trusted mirrors only.\r\nhttps://github.com/miurahr/aqtinstall/pull/493",
@@ -9984,20 +10160,20 @@
             "v": "<2.1.0rc2"
         },
         {
-            "advisory": "Aqtinstall 2.1.0rc2 uses 'defusedxml' instead of 'xml.etree.ElementTree' to avoid XXE attacks.\r\nhttps://github.com/miurahr/aqtinstall/commit/745e6a25e46411ff526387615a1db51a6ba968e0",
-            "cve": "CVE-2013-1664",
-            "id": "pyup.io-47852",
-            "more_info_path": "/vulnerabilities/CVE-2013-1664/47852",
+            "advisory": "Aqtinstall 2.1.0rc2 uses 'secrets' instead of 'random' module to generate cryptographically safe numbers.\r\nhttps://github.com/miurahr/aqtinstall/commit/745e6a25e46411ff526387615a1db51a6ba968e0",
+            "cve": "PVE-2022-47013",
+            "id": "pyup.io-47013",
+            "more_info_path": "/vulnerabilities/PVE-2022-47013/47013",
             "specs": [
                 "<2.1.0rc2"
             ],
             "v": "<2.1.0rc2"
         },
         {
-            "advisory": "Aqtinstall 2.1.0rc2 uses 'secrets' instead of 'random' module to generate cryptographically safe numbers.\r\nhttps://github.com/miurahr/aqtinstall/commit/745e6a25e46411ff526387615a1db51a6ba968e0",
-            "cve": "PVE-2022-47013",
-            "id": "pyup.io-47013",
-            "more_info_path": "/vulnerabilities/PVE-2022-47013/47013",
+            "advisory": "Aqtinstall 2.1.0rc2 uses 'defusedxml' instead of 'xml.etree.ElementTree' to avoid XXE attacks.\r\nhttps://github.com/miurahr/aqtinstall/commit/745e6a25e46411ff526387615a1db51a6ba968e0",
+            "cve": "CVE-2013-1664",
+            "id": "pyup.io-47852",
+            "more_info_path": "/vulnerabilities/CVE-2013-1664/47852",
             "specs": [
                 "<2.1.0rc2"
             ],
@@ -10145,9 +10321,9 @@
         },
         {
             "advisory": "Argilla 0.13.0 stops requiring its NPM dependency 'node-sass' to avoid security issues.",
-            "cve": "CVE-2018-11694",
-            "id": "pyup.io-52815",
-            "more_info_path": "/vulnerabilities/CVE-2018-11694/52815",
+            "cve": "CVE-2019-18797",
+            "id": "pyup.io-52811",
+            "more_info_path": "/vulnerabilities/CVE-2019-18797/52811",
             "specs": [
                 "<0.13.0"
             ],
@@ -10155,9 +10331,9 @@
         },
         {
             "advisory": "Argilla 0.13.0 stops requiring its NPM dependency 'node-sass' to avoid security issues.",
-            "cve": "CVE-2019-18797",
-            "id": "pyup.io-52811",
-            "more_info_path": "/vulnerabilities/CVE-2019-18797/52811",
+            "cve": "CVE-2018-11694",
+            "id": "pyup.io-52815",
+            "more_info_path": "/vulnerabilities/CVE-2018-11694/52815",
             "specs": [
                 "<0.13.0"
             ],
@@ -10409,9 +10585,9 @@
         },
         {
             "advisory": "Argo-workflows 6.4.7 (Python SDK) is compatible with Argo-workflows core v3.4.7, which upgrades docker to v20.10.24 to include security fixes.\r\nhttps://github.com/argoproj/argo-workflows/pull/10868",
-            "cve": "CVE-2023-28840",
-            "id": "pyup.io-54979",
-            "more_info_path": "/vulnerabilities/CVE-2023-28840/54979",
+            "cve": "CVE-2023-28841",
+            "id": "pyup.io-54995",
+            "more_info_path": "/vulnerabilities/CVE-2023-28841/54995",
             "specs": [
                 "<6.4.7"
             ],
@@ -10419,9 +10595,9 @@
         },
         {
             "advisory": "Argo-workflows 6.4.7 (Python SDK) is compatible with Argo-workflows core v3.4.7, which upgrades docker to v20.10.24 to include security fixes.\r\nhttps://github.com/argoproj/argo-workflows/pull/10868",
-            "cve": "CVE-2023-28841",
-            "id": "pyup.io-54995",
-            "more_info_path": "/vulnerabilities/CVE-2023-28841/54995",
+            "cve": "CVE-2023-28840",
+            "id": "pyup.io-54979",
+            "more_info_path": "/vulnerabilities/CVE-2023-28840/54979",
             "specs": [
                 "<6.4.7"
             ],
@@ -10450,14 +10626,14 @@
     ],
     "aries-cloudagent": [
         {
-            "advisory": "Version 0.12.0rc1 of Aries-cloudagent updates its readthedocs-sphinx-search dependency from 0.1.1 to 1.3.2 for security reasons.\r\nhttps://github.com/hyperledger/aries-cloudagent-python/pull/2712/commits/8d7592de2aacf12cf90f2023d362e665d528361e",
-            "cve": "PVE-2024-65513",
-            "id": "pyup.io-65513",
-            "more_info_path": "/vulnerabilities/PVE-2024-65513/65513",
+            "advisory": "Aries-cloudagent 0.12.0 upgrades its readthedocs-sphinx-search from 0.1.1 to 1.3.2 in response to GHSA-xgfm-fjx6-62mj: This vulnerability could have let attackers insert arbitrary HTML into search results via a crafted search query, due to inadequate escaping of user content.",
+            "cve": "PVE-2024-67615",
+            "id": "pyup.io-67615",
+            "more_info_path": "/vulnerabilities/PVE-2024-67615/67615",
             "specs": [
-                "<0.12.0rc1"
+                "<0.12.0"
             ],
-            "v": "<0.12.0rc1"
+            "v": "<0.12.0"
         },
         {
             "advisory": "Aries-cloudagent is affected by a Insufficient Verification of Data Authenticity vulnerability. When verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs (LDP-VCs), the result of verifying the presentation 'document.proof' was not factored into the final 'verified' value ('true'/'false') on the presentation record. The flaw enables holders of W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs (LDPs) to present incorrectly constructed proofs, and allows malicious verifiers to save and replay a presentation from such holders as their own.\r\nhttps://github.com/hyperledger/aries-cloudagent-python/security/advisories/GHSA-97x9-59rv-q5pm",
@@ -10608,6 +10784,28 @@
             "v": "<0.3"
         }
     ],
+    "askbot": [
+        {
+            "advisory": "Multiple cross-site scripting (XSS) vulnerabilities in Askbot before 0.7.49 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) tag or (2) user search forms.",
+            "cve": "CVE-2014-2236",
+            "id": "pyup.io-70425",
+            "more_info_path": "/vulnerabilities/CVE-2014-2236/70425",
+            "specs": [
+                "<0.7.49"
+            ],
+            "v": "<0.7.49"
+        },
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form.",
+            "cve": "CVE-2014-2235",
+            "id": "pyup.io-70426",
+            "more_info_path": "/vulnerabilities/CVE-2014-2235/70426",
+            "specs": [
+                "<0.7.49"
+            ],
+            "v": "<0.7.49"
+        }
+    ],
     "aspeak": [
         {
             "advisory": "Aspeak 6.0.0 updates its dependency 'openssl' to version '0.10.55' to include a security fix.\r\nhttps://github.com/kxxt/aspeak/pull/76\r\nhttps://github.com/kxxt/aspeak/commit/17cbe32ed4c17bc57683688390691686946a4cbc\r\nhttps://github.com/advisories/GHSA-xcf7-rvmh-g6q4",
@@ -10697,11 +10895,21 @@
         }
     ],
     "astropy": [
+        {
+            "advisory": "Astropy 3.0.1 updates cfitsio to v3.43: NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The component is: over 40 source code files were changed. The attack vector is: remote unauthenticated attacker. The fixed version is: 3.43. NOTE: this CVE refers to the issues not covered by CVE-2018-3846, CVE-2018-3847, CVE-2018-3848, and CVE-2018-3849. One example is ftp_status in drvrnet.c mishandling a long string beginning with a '4' character.",
+            "cve": "CVE-2019-1010060",
+            "id": "pyup.io-70530",
+            "more_info_path": "/vulnerabilities/CVE-2019-1010060/70530",
+            "specs": [
+                "<3.0.1"
+            ],
+            "v": "<3.0.1"
+        },
         {
             "advisory": "Astropy 3.0.1 updates the bundled CFITSIO library to 3.430. This is to remedy a critical  security vulnerability that was identified by NASA.",
-            "cve": "CVE-2018-3849",
-            "id": "pyup.io-48548",
-            "more_info_path": "/vulnerabilities/CVE-2018-3849/48548",
+            "cve": "CVE-2018-3847",
+            "id": "pyup.io-48549",
+            "more_info_path": "/vulnerabilities/CVE-2018-3847/48549",
             "specs": [
                 "<3.0.1"
             ],
@@ -10709,9 +10917,9 @@
         },
         {
             "advisory": "Astropy 3.0.1 updates the bundled CFITSIO library to 3.430. This is to remedy a critical  security vulnerability that was identified by NASA.",
-            "cve": "CVE-2018-3846",
-            "id": "pyup.io-48550",
-            "more_info_path": "/vulnerabilities/CVE-2018-3846/48550",
+            "cve": "CVE-2018-3849",
+            "id": "pyup.io-48548",
+            "more_info_path": "/vulnerabilities/CVE-2018-3849/48548",
             "specs": [
                 "<3.0.1"
             ],
@@ -10719,9 +10927,9 @@
         },
         {
             "advisory": "Astropy 3.0.1 updates the bundled CFITSIO library to 3.430. This is to remedy a critical  security vulnerability that was identified by NASA.",
-            "cve": "CVE-2018-3847",
-            "id": "pyup.io-48549",
-            "more_info_path": "/vulnerabilities/CVE-2018-3847/48549",
+            "cve": "CVE-2018-3846",
+            "id": "pyup.io-48550",
+            "more_info_path": "/vulnerabilities/CVE-2018-3846/48550",
             "specs": [
                 "<3.0.1"
             ],
@@ -11481,9 +11689,9 @@
         },
         {
             "advisory": "Autogluon 0.5.3 updates its dependency 'transformers' requirement to \">=4.23.0,<4.24.0\" to include security fixes.",
-            "cve": "PVE-2022-51450",
-            "id": "pyup.io-51940",
-            "more_info_path": "/vulnerabilities/PVE-2022-51450/51940",
+            "cve": "CVE-2022-1941",
+            "id": "pyup.io-51994",
+            "more_info_path": "/vulnerabilities/CVE-2022-1941/51994",
             "specs": [
                 "<0.5.3"
             ],
@@ -11491,9 +11699,9 @@
         },
         {
             "advisory": "Autogluon 0.5.3 updates its dependency 'transformers' requirement to \">=4.23.0,<4.24.0\" to include security fixes.",
-            "cve": "CVE-2022-1941",
-            "id": "pyup.io-51994",
-            "more_info_path": "/vulnerabilities/CVE-2022-1941/51994",
+            "cve": "PVE-2022-51450",
+            "id": "pyup.io-51940",
+            "more_info_path": "/vulnerabilities/PVE-2022-51450/51940",
             "specs": [
                 "<0.5.3"
             ],
@@ -11541,9 +11749,9 @@
         },
         {
             "advisory": "Autogluon 0.4.1 updates its dependency 'ray' minimum requirement to v1.10.0 to include security fixes.",
-            "cve": "PVE-2021-42426",
-            "id": "pyup.io-48620",
-            "more_info_path": "/vulnerabilities/PVE-2021-42426/48620",
+            "cve": "CVE-2021-44228",
+            "id": "pyup.io-48621",
+            "more_info_path": "/vulnerabilities/CVE-2021-44228/48621",
             "specs": [
                 ">=0.4.0,<0.4.1"
             ],
@@ -11551,9 +11759,9 @@
         },
         {
             "advisory": "Autogluon 0.4.1 updates its dependency 'ray' minimum requirement to v1.10.0 to include security fixes.",
-            "cve": "CVE-2021-45105",
-            "id": "pyup.io-48623",
-            "more_info_path": "/vulnerabilities/CVE-2021-45105/48623",
+            "cve": "CVE-2021-45046",
+            "id": "pyup.io-48622",
+            "more_info_path": "/vulnerabilities/CVE-2021-45046/48622",
             "specs": [
                 ">=0.4.0,<0.4.1"
             ],
@@ -11571,9 +11779,9 @@
         },
         {
             "advisory": "Autogluon 0.4.1 updates its dependency 'ray' minimum requirement to v1.10.0 to include security fixes.",
-            "cve": "CVE-2021-45046",
-            "id": "pyup.io-48622",
-            "more_info_path": "/vulnerabilities/CVE-2021-45046/48622",
+            "cve": "PVE-2021-42426",
+            "id": "pyup.io-48620",
+            "more_info_path": "/vulnerabilities/PVE-2021-42426/48620",
             "specs": [
                 ">=0.4.0,<0.4.1"
             ],
@@ -11581,9 +11789,9 @@
         },
         {
             "advisory": "Autogluon 0.4.1 updates its dependency 'ray' minimum requirement to v1.10.0 to include security fixes.",
-            "cve": "CVE-2021-44228",
-            "id": "pyup.io-48621",
-            "more_info_path": "/vulnerabilities/CVE-2021-44228/48621",
+            "cve": "CVE-2021-45105",
+            "id": "pyup.io-48623",
+            "more_info_path": "/vulnerabilities/CVE-2021-45105/48623",
             "specs": [
                 ">=0.4.0,<0.4.1"
             ],
@@ -11638,6 +11846,18 @@
             "v": ">=0.4.0,<0.4.3,>=0.5.0,<0.5.2"
         }
     ],
+    "automationhat": [
+        {
+            "advisory": "Automationhat version 0.2.0 improves thread safety by making ads1015.read() function thread-safe, particularly when \"auto_lights\" is activated. Previously, asynchronous reads from the \"update_lights\" thread interfered with main thread ADC reads, leading to random erroneous readings.",
+            "cve": "PVE-2024-70556",
+            "id": "pyup.io-70556",
+            "more_info_path": "/vulnerabilities/PVE-2024-70556/70556",
+            "specs": [
+                "<0.2.0"
+            ],
+            "v": "<0.2.0"
+        }
+    ],
     "automatoes": [
         {
             "advisory": "Automatoes 0.9.7 updates its dependency 'cryptography' to v3.4.4 to include a security fix.",
@@ -12308,20 +12528,20 @@
             "v": "<1.5.18"
         },
         {
-            "advisory": "Awsiotsdk 1.6.1 includes a fix for CVE-2021-40829: Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.4.2), Python (versions prior to 1.6.1), C++ (versions prior to 1.12.7) and Node.js (versions prior to 1.5.3) did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities (CA) in their trust stores on MacOS.",
-            "cve": "CVE-2021-40829",
-            "id": "pyup.io-42781",
-            "more_info_path": "/vulnerabilities/CVE-2021-40829/42781",
+            "advisory": "Awsiotsdk 1.6.1 includes a fix for CVE-2021-40830: The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on Unix systems. TLS handshakes will thus succeed if the peer can be verified either from the user-supplied CA or the system\u2019s default trust-store. Attackers with access to a host\u2019s trust stores or able to compromise a certificate authority already in the host's trust-store (note: the attacker must also be able to spoof DNS in this case), may be able to use this issue to bypass CA pinning. An attacker could then spoof the MQTT broker, and either drop traffic and/or respond with the attacker's data, but they would not be able to forward this data on to the MQTT broker because the attacker would still need the user's private keys to authenticate against the MQTT broker. The 'aws_tls_ctx_options_override_default_trust_store_*' function within the aws-c-io submodule has been updated to override the default trust-store to correct this issue.\r\nhttps://github.com/aws/aws-iot-device-sdk-python-v2",
+            "cve": "CVE-2021-40830",
+            "id": "pyup.io-42782",
+            "more_info_path": "/vulnerabilities/CVE-2021-40830/42782",
             "specs": [
                 "<1.6.1"
             ],
             "v": "<1.6.1"
         },
         {
-            "advisory": "Awsiotsdk 1.6.1 includes a fix for CVE-2021-40830: The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on Unix systems. TLS handshakes will thus succeed if the peer can be verified either from the user-supplied CA or the system\u2019s default trust-store. Attackers with access to a host\u2019s trust stores or able to compromise a certificate authority already in the host's trust-store (note: the attacker must also be able to spoof DNS in this case), may be able to use this issue to bypass CA pinning. An attacker could then spoof the MQTT broker, and either drop traffic and/or respond with the attacker's data, but they would not be able to forward this data on to the MQTT broker because the attacker would still need the user's private keys to authenticate against the MQTT broker. The 'aws_tls_ctx_options_override_default_trust_store_*' function within the aws-c-io submodule has been updated to override the default trust-store to correct this issue.\r\nhttps://github.com/aws/aws-iot-device-sdk-python-v2",
-            "cve": "CVE-2021-40830",
-            "id": "pyup.io-42782",
-            "more_info_path": "/vulnerabilities/CVE-2021-40830/42782",
+            "advisory": "Awsiotsdk 1.6.1 includes a fix for CVE-2021-40829: Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.4.2), Python (versions prior to 1.6.1), C++ (versions prior to 1.12.7) and Node.js (versions prior to 1.5.3) did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities (CA) in their trust stores on MacOS.",
+            "cve": "CVE-2021-40829",
+            "id": "pyup.io-42781",
+            "more_info_path": "/vulnerabilities/CVE-2021-40829/42781",
             "specs": [
                 "<1.6.1"
             ],
@@ -12422,6 +12642,18 @@
             "v": "<1.0.11184"
         }
     ],
+    "azure-smtp-relay": [
+        {
+            "advisory": "Azure-smtp-relay version 1.0.6 has updated its aiosmtpd dependency to version 1.4.5 to address the security vulnerability identified in CVE-2024-27305.",
+            "cve": "CVE-2024-27305",
+            "id": "pyup.io-68073",
+            "more_info_path": "/vulnerabilities/CVE-2024-27305/68073",
+            "specs": [
+                "<1.0.6"
+            ],
+            "v": "<1.0.6"
+        }
+    ],
     "azureml-contrib-jupyterrun": [
         {
             "advisory": "Azureml-contrib-jupyterrun is a malicious package, typosquatting. It aims at targeting Azure environments.\r\nhttps://blog.sonatype.com/careful-out-there-open-source-attacks-continue-to-be-on-the-uptick",
@@ -12835,20 +13067,20 @@
             "v": "<0.4.1"
         },
         {
-            "advisory": "Baybe 0.8.2 has updated its onnx dependency to version 1.16.0 or newer to address the security issue CVE-2024-27318.",
+            "advisory": "Baybe 0.8.2 has updated its onnx dependency to version 1.16.0 or newer to address the security issue CVE-2024-27319.",
             "cve": "CVE-2024-27318",
-            "id": "pyup.io-66978",
-            "more_info_path": "/vulnerabilities/CVE-2024-27318/66978",
+            "id": "pyup.io-66984",
+            "more_info_path": "/vulnerabilities/CVE-2024-27318/66984",
             "specs": [
                 "<0.8.2"
             ],
             "v": "<0.8.2"
         },
         {
-            "advisory": "Baybe 0.8.2 has updated its onnx dependency to version 1.16.0 or newer to address the security issue CVE-2024-27319.",
+            "advisory": "Baybe 0.8.2 has updated its onnx dependency to version 1.16.0 or newer to address the security issue CVE-2024-27318.",
             "cve": "CVE-2024-27318",
-            "id": "pyup.io-66984",
-            "more_info_path": "/vulnerabilities/CVE-2024-27318/66984",
+            "id": "pyup.io-66978",
+            "more_info_path": "/vulnerabilities/CVE-2024-27318/66978",
             "specs": [
                 "<0.8.2"
             ],
@@ -12995,6 +13227,46 @@
             ],
             "v": "<1.6.4"
         },
+        {
+            "advisory": "The search bar code in bkr/server/widgets.py in Beaker before 20.1 does not escape </script> tags in string literals when producing JSON.",
+            "cve": "CVE-2015-3161",
+            "id": "pyup.io-70479",
+            "more_info_path": "/vulnerabilities/CVE-2015-3161/70479",
+            "specs": [
+                "<20.1"
+            ],
+            "v": "<20.1"
+        },
+        {
+            "advisory": "The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types via navigating to $BEAKER/powertypes and $BEAKER/keytypes respectively.",
+            "cve": "CVE-2015-3163",
+            "id": "pyup.io-70477",
+            "more_info_path": "/vulnerabilities/CVE-2015-3163/70477",
+            "specs": [
+                "<20.1"
+            ],
+            "v": "<20.1"
+        },
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in the edit comment dialog in bkr/server/widgets.py in Beaker 20.1 allows remote authenticated users to inject arbitrary web script or HTML via writing a crafted comment on an acked or nacked canceled job.",
+            "cve": "CVE-2015-3162",
+            "id": "pyup.io-70478",
+            "more_info_path": "/vulnerabilities/CVE-2015-3162/70478",
+            "specs": [
+                "<20.1"
+            ],
+            "v": "<20.1"
+        },
+        {
+            "advisory": "XML external entity (XXE) vulnerability in bkr/server/jobs.py in Beaker before 20.1 allows remote authenticated users to obtain sensitive information via submitting job XML to the server containing entity references which reference files from the Beaker server's file system.",
+            "cve": "CVE-2015-3160",
+            "id": "pyup.io-70480",
+            "more_info_path": "/vulnerabilities/CVE-2015-3160/70480",
+            "specs": [
+                "<20.1"
+            ],
+            "v": "<20.1"
+        },
         {
             "advisory": "The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.",
             "cve": "CVE-2013-7489",
@@ -13006,6 +13278,18 @@
             "v": "<=1.11.0"
         }
     ],
+    "beancount-import": [
+        {
+            "advisory": "Beancount-import version 1.4.0 has upgraded `@babel/traverse` from 7.13.0 to 7.23.3 in the frontend to address the security issue detailed in CVE-2023-45133.",
+            "cve": "CVE-2023-45133",
+            "id": "pyup.io-68055",
+            "more_info_path": "/vulnerabilities/CVE-2023-45133/68055",
+            "specs": [
+                "<1.4.0"
+            ],
+            "v": "<1.4.0"
+        }
+    ],
     "beautifulsup4": [
         {
             "advisory": "Beautifulsup4 is a malicious package. It injects obfuscated JS code that replaces crypto addresses in developer clipboards.",
@@ -13528,7 +13812,7 @@
     ],
     "binwalk": [
         {
-            "advisory": "A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink following. It is possible to launch the attack remotely. Upgrading to version 2.3.3 is able to address this issue. The name of the patch is fa0c0bd59b8588814756942fe4cb5452e76c1dcd. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216876.",
+            "advisory": "A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink following. It is possible to launch the attack remotely. Upgrading to version 2.3.3 can address this issue. The name of the patch is fa0c0bd59b8588814756942fe4cb5452e76c1dcd. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216876.",
             "cve": "CVE-2021-4287",
             "id": "pyup.io-54630",
             "more_info_path": "/vulnerabilities/CVE-2021-4287/54630",
@@ -13609,6 +13893,16 @@
         }
     ],
     "bitlyshortener": [
+        {
+            "advisory": "A recent update has significantly reduced the quota for free token-generated links in a specific service, dropping from 1000 to 50 links per month. This reduction severely limits the utility of the service for users who rely on the free token. Consequently, maintenance for the associated package is being discontinued, even though the package will still function with the new restricted quota.",
+            "cve": "PVE-2024-69617",
+            "id": "pyup.io-69617",
+            "more_info_path": "/vulnerabilities/PVE-2024-69617/69617",
+            "specs": [
+                "<0.7.0"
+            ],
+            "v": "<0.7.0"
+        },
         {
             "advisory": "Due to a sudden upstream breaking change by Bitly, versions of 'bitlyshortener' <0.5.0 can generate an invalid short URL when a vanity domain exists.",
             "cve": "PVE-2023-55202",
@@ -13653,9 +13947,9 @@
         },
         {
             "advisory": "Bittensor 5.3.1 updates its dependency 'cryptography' to version '41.0.0' to fix a Denial of Service vulnerability.\r\nhttps://github.com/opentensor/bittensor/commit/91d13b0fa711621cbf823708d4368b1b387e42c4",
-            "cve": "CVE-2023-0216",
-            "id": "pyup.io-59613",
-            "more_info_path": "/vulnerabilities/CVE-2023-0216/59613",
+            "cve": "CVE-2023-0217",
+            "id": "pyup.io-59609",
+            "more_info_path": "/vulnerabilities/CVE-2023-0217/59609",
             "specs": [
                 "<5.3.1"
             ],
@@ -13663,9 +13957,19 @@
         },
         {
             "advisory": "Bittensor 5.3.1 updates its dependency 'cryptography' to version '41.0.0' to fix a Denial of Service vulnerability.\r\nhttps://github.com/opentensor/bittensor/commit/91d13b0fa711621cbf823708d4368b1b387e42c4",
-            "cve": "CVE-2022-3996",
-            "id": "pyup.io-59617",
-            "more_info_path": "/vulnerabilities/CVE-2022-3996/59617",
+            "cve": "CVE-2022-4450",
+            "id": "pyup.io-59615",
+            "more_info_path": "/vulnerabilities/CVE-2022-4450/59615",
+            "specs": [
+                "<5.3.1"
+            ],
+            "v": "<5.3.1"
+        },
+        {
+            "advisory": "Bittensor 5.3.1 updates its dependency 'cryptography' to version '41.0.0' to fix an Expected Behavior Violation vulnerability.\r\nhttps://github.com/opentensor/bittensor/commit/91d13b0fa711621cbf823708d4368b1b387e42c4",
+            "cve": "CVE-2023-23931",
+            "id": "pyup.io-59616",
+            "more_info_path": "/vulnerabilities/CVE-2023-23931/59616",
             "specs": [
                 "<5.3.1"
             ],
@@ -13673,9 +13977,9 @@
         },
         {
             "advisory": "Bittensor 5.3.1 updates its dependency 'cryptography' to version '41.0.0' to fix a Denial of Service vulnerability.\r\nhttps://github.com/opentensor/bittensor/commit/91d13b0fa711621cbf823708d4368b1b387e42c4",
-            "cve": "CVE-2022-4450",
-            "id": "pyup.io-59615",
-            "more_info_path": "/vulnerabilities/CVE-2022-4450/59615",
+            "cve": "CVE-2022-3996",
+            "id": "pyup.io-59617",
+            "more_info_path": "/vulnerabilities/CVE-2022-3996/59617",
             "specs": [
                 "<5.3.1"
             ],
@@ -13683,9 +13987,9 @@
         },
         {
             "advisory": "Bittensor 5.3.1 updates its dependency 'cryptography' to version '41.0.0' to fix a Denial of Service vulnerability.\r\nhttps://github.com/opentensor/bittensor/commit/91d13b0fa711621cbf823708d4368b1b387e42c4",
-            "cve": "CVE-2023-0401",
-            "id": "pyup.io-59608",
-            "more_info_path": "/vulnerabilities/CVE-2023-0401/59608",
+            "cve": "CVE-2023-0216",
+            "id": "pyup.io-59613",
+            "more_info_path": "/vulnerabilities/CVE-2023-0216/59613",
             "specs": [
                 "<5.3.1"
             ],
@@ -13693,19 +13997,19 @@
         },
         {
             "advisory": "Bittensor 5.3.1 updates its dependency 'cryptography' to version '41.0.0' to fix a Denial of Service vulnerability.\r\nhttps://github.com/opentensor/bittensor/commit/91d13b0fa711621cbf823708d4368b1b387e42c4",
-            "cve": "CVE-2023-0217",
-            "id": "pyup.io-59609",
-            "more_info_path": "/vulnerabilities/CVE-2023-0217/59609",
+            "cve": "CVE-2022-4203",
+            "id": "pyup.io-59614",
+            "more_info_path": "/vulnerabilities/CVE-2022-4203/59614",
             "specs": [
                 "<5.3.1"
             ],
             "v": "<5.3.1"
         },
         {
-            "advisory": "Bittensor 5.3.1 updates its dependency 'cryptography' to version '41.0.0' to fix an Expected Behavior Violation vulnerability.\r\nhttps://github.com/opentensor/bittensor/commit/91d13b0fa711621cbf823708d4368b1b387e42c4",
-            "cve": "CVE-2023-23931",
-            "id": "pyup.io-59616",
-            "more_info_path": "/vulnerabilities/CVE-2023-23931/59616",
+            "advisory": "Bittensor 5.3.1 updates its dependency 'cryptography' to version '41.0.0' to fix a Denial of Service vulnerability.\r\nhttps://github.com/opentensor/bittensor/commit/91d13b0fa711621cbf823708d4368b1b387e42c4",
+            "cve": "CVE-2023-0401",
+            "id": "pyup.io-59608",
+            "more_info_path": "/vulnerabilities/CVE-2023-0401/59608",
             "specs": [
                 "<5.3.1"
             ],
@@ -13731,16 +14035,6 @@
             ],
             "v": "<5.3.1"
         },
-        {
-            "advisory": "Bittensor 5.3.1 updates its dependency 'cryptography' to version '41.0.0' to fix a Denial of Service vulnerability.\r\nhttps://github.com/opentensor/bittensor/commit/91d13b0fa711621cbf823708d4368b1b387e42c4",
-            "cve": "CVE-2022-4203",
-            "id": "pyup.io-59614",
-            "more_info_path": "/vulnerabilities/CVE-2022-4203/59614",
-            "specs": [
-                "<5.3.1"
-            ],
-            "v": "<5.3.1"
-        },
         {
             "advisory": "Bittensor 5.3.1 updates its dependency 'cryptography' to version '41.0.0' to fix a Use After Free vulnerability.\r\nhttps://github.com/opentensor/bittensor/commit/91d13b0fa711621cbf823708d4368b1b387e42c4",
             "cve": "CVE-2023-0215",
@@ -13839,6 +14133,16 @@
         }
     ],
     "blackboardsync": [
+        {
+            "advisory": "Blackboardsync 0.11.1rc.1 sets the pyqt5-qt5 version in the Pipfile and updates PyQt5 due to a security release addressing a recent cURL vulnerability. This update, specific to macOS, resolves an issue where the Pipfile.lock was not valid on other platforms, ensuring compatibility across different operating systems. The PyQt5 version is also updated in the pyproject.toml to maintain security and functionality.",
+            "cve": "PVE-2024-67002",
+            "id": "pyup.io-67002",
+            "more_info_path": "/vulnerabilities/PVE-2024-67002/67002",
+            "specs": [
+                "<0.11.1rc.1"
+            ],
+            "v": "<0.11.1rc.1"
+        },
         {
             "advisory": "Blackboardsync 0.9.8 updates its dependency 'certifi' from 2023.5.7 to 2023.7.22 to include a security fix.",
             "cve": "CVE-2023-37920",
@@ -14267,9 +14571,9 @@
         },
         {
             "advisory": "Bokeh 2.4.2 updates its dependency 'jquery-ui' to v1.13.0 to include security fixes.",
-            "cve": "CVE-2021-41184",
-            "id": "pyup.io-42815",
-            "more_info_path": "/vulnerabilities/CVE-2021-41184/42815",
+            "cve": "CVE-2021-41182",
+            "id": "pyup.io-42772",
+            "more_info_path": "/vulnerabilities/CVE-2021-41182/42772",
             "specs": [
                 "<2.4.2"
             ],
@@ -14287,9 +14591,9 @@
         },
         {
             "advisory": "Bokeh 2.4.2 updates its dependency 'jquery-ui' to v1.13.0 to include security fixes.",
-            "cve": "CVE-2021-41182",
-            "id": "pyup.io-42772",
-            "more_info_path": "/vulnerabilities/CVE-2021-41182/42772",
+            "cve": "CVE-2021-41184",
+            "id": "pyup.io-42815",
+            "more_info_path": "/vulnerabilities/CVE-2021-41184/42815",
             "specs": [
                 "<2.4.2"
             ],
@@ -14372,10 +14676,10 @@
     ],
     "borgmatic": [
         {
-            "advisory": "Borgmatic is vulnerable to shell injection within the PostgreSQL hook.\r\nhttps://github.com/borgmatic-collective/borgmatic/commit/3c22a8ec164087beb1d292dc114f78f8b6382ae2",
-            "cve": "PVE-2024-64386",
-            "id": "pyup.io-64386",
-            "more_info_path": "/vulnerabilities/PVE-2024-64386/64386",
+            "advisory": "Borgmatic is vulnerable to shell injection within the \"borgmatic borg\" action.\r\nhttps://github.com/borgmatic-collective/borgmatic/commit/3c22a8ec164087beb1d292dc114f78f8b6382ae2",
+            "cve": "PVE-2024-64394",
+            "id": "pyup.io-64394",
+            "more_info_path": "/vulnerabilities/PVE-2024-64394/64394",
             "specs": [
                 "<1.8.7"
             ],
@@ -14392,10 +14696,10 @@
             "v": "<1.8.7"
         },
         {
-            "advisory": "Borgmatic is vulnerable to shell injection within the SQLite hook.\r\nhttps://github.com/borgmatic-collective/borgmatic/commit/3c22a8ec164087beb1d292dc114f78f8b6382ae2",
-            "cve": "PVE-2024-64393",
-            "id": "pyup.io-64393",
-            "more_info_path": "/vulnerabilities/PVE-2024-64393/64393",
+            "advisory": "Borgmatic is vulnerable to shell injection within the PostgreSQL hook.\r\nhttps://github.com/borgmatic-collective/borgmatic/commit/3c22a8ec164087beb1d292dc114f78f8b6382ae2",
+            "cve": "PVE-2024-64386",
+            "id": "pyup.io-64386",
+            "more_info_path": "/vulnerabilities/PVE-2024-64386/64386",
             "specs": [
                 "<1.8.7"
             ],
@@ -14412,10 +14716,10 @@
             "v": "<1.8.7"
         },
         {
-            "advisory": "Borgmatic is vulnerable to shell injection within the \"borgmatic borg\" action.\r\nhttps://github.com/borgmatic-collective/borgmatic/commit/3c22a8ec164087beb1d292dc114f78f8b6382ae2",
-            "cve": "PVE-2024-64394",
-            "id": "pyup.io-64394",
-            "more_info_path": "/vulnerabilities/PVE-2024-64394/64394",
+            "advisory": "Borgmatic is vulnerable to shell injection within the SQLite hook.\r\nhttps://github.com/borgmatic-collective/borgmatic/commit/3c22a8ec164087beb1d292dc114f78f8b6382ae2",
+            "cve": "PVE-2024-64393",
+            "id": "pyup.io-64393",
+            "more_info_path": "/vulnerabilities/PVE-2024-64393/64393",
             "specs": [
                 "<1.8.7"
             ],
@@ -15048,9 +15352,9 @@
         },
         {
             "advisory": "C2cwsgiutils 4.0.0 updates its dependency 'pipenv' to v2020.5.28 to include security fixes.",
-            "cve": "CVE-2019-11324",
-            "id": "pyup.io-53060",
-            "more_info_path": "/vulnerabilities/CVE-2019-11324/53060",
+            "cve": "CVE-2019-11236",
+            "id": "pyup.io-53059",
+            "more_info_path": "/vulnerabilities/CVE-2019-11236/53059",
             "specs": [
                 "<4.0.0"
             ],
@@ -15058,9 +15362,9 @@
         },
         {
             "advisory": "C2cwsgiutils 4.0.0 updates its dependency 'pipenv' to v2020.5.28 to include security fixes.",
-            "cve": "CVE-2019-11236",
-            "id": "pyup.io-53059",
-            "more_info_path": "/vulnerabilities/CVE-2019-11236/53059",
+            "cve": "CVE-2019-11324",
+            "id": "pyup.io-53060",
+            "more_info_path": "/vulnerabilities/CVE-2019-11324/53060",
             "specs": [
                 "<4.0.0"
             ],
@@ -15219,6 +15523,16 @@
                 "<2.4.1"
             ],
             "v": "<2.4.1"
+        },
+        {
+            "advisory": "Calendar-view 2.4.2 has upgraded its Pillow dependency from version 10.2.0 to 10.3.0 to address the security issue identified in CVE-2024-28219.",
+            "cve": "CVE-2024-28219",
+            "id": "pyup.io-67927",
+            "more_info_path": "/vulnerabilities/CVE-2024-28219/67927",
+            "specs": [
+                "<2.4.2"
+            ],
+            "v": "<2.4.2"
         }
     ],
     "calibreweb": [
@@ -15459,6 +15773,18 @@
             "v": "<0.24.1"
         }
     ],
+    "canada-holiday": [
+        {
+            "advisory": "Canada-holiday 1.1.4 upgrades its black dependency to version 24.3.0, addressing the ReDoS vulnerability identified in CVE-2024-21503.",
+            "cve": "CVE-2024-21503",
+            "id": "pyup.io-67444",
+            "more_info_path": "/vulnerabilities/CVE-2024-21503/67444",
+            "specs": [
+                "<1.1.4"
+            ],
+            "v": "<1.1.4"
+        }
+    ],
     "cancat": [
         {
             "advisory": "Cancat 2.0.0 and prior uses a version of Arduino IDE that depends on a version of 'log4j' containing severe and critical vulnerabilities.",
@@ -15553,6 +15879,18 @@
             "v": "<1.4.0"
         }
     ],
+    "canto-curses": [
+        {
+            "advisory": "canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.",
+            "cve": "CVE-2013-7416",
+            "id": "pyup.io-67960",
+            "more_info_path": "/vulnerabilities/CVE-2013-7416/67960",
+            "specs": [
+                "<0.9.0"
+            ],
+            "v": "<0.9.0"
+        }
+    ],
     "canvaslms": [
         {
             "advisory": "Canvaslms 2.18 updates its dependency 'pygments' to version '2.15.1' to include a fix for a ReDoS vulnerability.\r\nhttps://github.com/dbosk/canvaslms/pull/100",
@@ -15631,6 +15969,18 @@
             "v": ">0"
         }
     ],
+    "capycli": [
+        {
+            "advisory": "Capycli 2.4.0 updates its dependency 'idna' to v3.7 to include a security fix.",
+            "cve": "CVE-2024-3651",
+            "id": "pyup.io-68074",
+            "more_info_path": "/vulnerabilities/CVE-2024-3651/68074",
+            "specs": [
+                "<2.4.0"
+            ],
+            "v": "<2.4.0"
+        }
+    ],
     "carla": [
         {
             "advisory": "Carla 0.9.11 includes a fix for a potential race condition vulnerability: Sorts vehicles by ID to avoid race condition in Traffic Manager.\r\nhttps://github.com/carla-simulator/carla/pull/3438",
@@ -15781,6 +16131,26 @@
         }
     ],
     "cassandra-medusa": [
+        {
+            "advisory": "Cassandra-medusa version 0.20.0 upgrades its Pycryptodome dependency to 3.19.1 from the previous version 3.19.0, aiming to address the security concerns outlined in CVE-2023-52323.",
+            "cve": "CVE-2023-52323",
+            "id": "pyup.io-67422",
+            "more_info_path": "/vulnerabilities/CVE-2023-52323/67422",
+            "specs": [
+                "<0.20.0"
+            ],
+            "v": "<0.20.0"
+        },
+        {
+            "advisory": "Cassandra-medusa version 0.20.0 has upgraded its Cryptography dependency to version 42.0.2 from 35.0, in response to CVE-2023-6129.",
+            "cve": "CVE-2023-6129",
+            "id": "pyup.io-67139",
+            "more_info_path": "/vulnerabilities/CVE-2023-6129/67139",
+            "specs": [
+                "<0.20.0"
+            ],
+            "v": "<0.20.0"
+        },
         {
             "advisory": "Cassandra-medusa 0.9.1 fixes MinIO support that had unsecured access.\r\nhttps://github.com/thelastpickle/cassandra-medusa/commit/2edb8afd9e0961fb3cf390322c0f59066967de84",
             "cve": "PVE-2021-42517",
@@ -15825,16 +16195,6 @@
             ],
             "v": "<0.26"
         },
-        {
-            "advisory": "Catboost 1.2.1 updates its NPM dependency 'semver' to version '5.7.2' to include a fix for a ReDoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/d0183bfcf67525a3ad9f4427e23f1472ad9f588c",
-            "cve": "CVE-2022-25883",
-            "id": "pyup.io-60757",
-            "more_info_path": "/vulnerabilities/CVE-2022-25883/60757",
-            "specs": [
-                "<1.2.1"
-            ],
-            "v": "<1.2.1"
-        },
         {
             "advisory": "Catboost 1.2.1 updates its NPM dependency 'tar' to version '6.1.15' to include a fix for an Arbitrary File Write vulnerability.\r\nhttps://github.com/catboost/catboost/commit/f54bd997762dede21c31022ae27b7fd5be36c925",
             "cve": "CVE-2021-37713",
@@ -15876,20 +16236,30 @@
             "v": "<1.2.1"
         },
         {
-            "advisory": "Catboost 1.2.1 updates its dependency 'snappy-java' to version '1.1.10.1' to include a fix for a DoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/b51a3b2302a1d6b1a596b406efef347c872d9a0e",
-            "cve": "CVE-2023-34455",
-            "id": "pyup.io-60767",
-            "more_info_path": "/vulnerabilities/CVE-2023-34455/60767",
+            "advisory": "Catboost 1.2.1 updates its NPM dependency 'minimist' to version '1.2.8' to include a fix for a Prototype Pollution vulnerability.\r\nhttps://github.com/catboost/catboost/commit/63b0cd67faf62ba3fcd7281044dad144f8b6ff4d",
+            "cve": "CVE-2021-44906",
+            "id": "pyup.io-60755",
+            "more_info_path": "/vulnerabilities/CVE-2021-44906/60755",
             "specs": [
                 "<1.2.1"
             ],
             "v": "<1.2.1"
         },
         {
-            "advisory": "Catboost 1.2.1 updates its dependency 'jackson-databind' to version '2.13.4.2' to include a fix for a DoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/e88f390a4e2630c9e8a5b82cd01c053a9fd29795",
-            "cve": "CVE-2022-42003",
-            "id": "pyup.io-60769",
-            "more_info_path": "/vulnerabilities/CVE-2022-42003/60769",
+            "advisory": "Catboost 1.2.1 updates its dependency 'nanoid' to version '3.3.6' to include a fix for an Information Exposure vulnerability.\r\nhttps://github.com/catboost/catboost/commit/9381a56a05fc7f2b8cecc323c5b26aa60d3703f0",
+            "cve": "CVE-2021-23566",
+            "id": "pyup.io-60761",
+            "more_info_path": "/vulnerabilities/CVE-2021-23566/60761",
+            "specs": [
+                "<1.2.1"
+            ],
+            "v": "<1.2.1"
+        },
+        {
+            "advisory": "Catboost 1.2.1 updates its NPM dependency 'minimatch' to version '3.1.2' to include a fix for a ReDoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/3b9820e0bfb7b9e34dbaf0403e95e0dcdc9d9ba3",
+            "cve": "CVE-2022-3517",
+            "id": "pyup.io-60744",
+            "more_info_path": "/vulnerabilities/CVE-2022-3517/60744",
             "specs": [
                 "<1.2.1"
             ],
@@ -15906,30 +16276,70 @@
             "v": "<1.2.1"
         },
         {
-            "advisory": "Catboost 1.2.1 updates its NPM dependency 'minimatch' to version '3.1.2' to include a fix for a ReDoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/3b9820e0bfb7b9e34dbaf0403e95e0dcdc9d9ba3",
-            "cve": "CVE-2022-3517",
-            "id": "pyup.io-60744",
-            "more_info_path": "/vulnerabilities/CVE-2022-3517/60744",
+            "advisory": "Catboost 1.2.1 updates its dependency 'jackson-databind' to version '2.13.4.2' to include a fix for a DoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/e88f390a4e2630c9e8a5b82cd01c053a9fd29795",
+            "cve": "CVE-2022-42003",
+            "id": "pyup.io-60769",
+            "more_info_path": "/vulnerabilities/CVE-2022-42003/60769",
             "specs": [
                 "<1.2.1"
             ],
             "v": "<1.2.1"
         },
         {
-            "advisory": "Catboost 1.2.1 updates its NPM dependency 'webpack' to version '5.76.0' to include a fix for a Sandbox Bypass vulnerability.\r\nhttps://github.com/catboost/catboost/commit/e132d847a527827023eb67165e11f1b05a19564f",
-            "cve": "CVE-2023-28154",
-            "id": "pyup.io-60751",
-            "more_info_path": "/vulnerabilities/CVE-2023-28154/60751",
+            "advisory": "Catboost 1.2.1 updates its dependency 'snappy-java' to version '1.1.10.1' to include a fix for a DoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/b51a3b2302a1d6b1a596b406efef347c872d9a0e",
+            "cve": "CVE-2023-34455",
+            "id": "pyup.io-60767",
+            "more_info_path": "/vulnerabilities/CVE-2023-34455/60767",
             "specs": [
                 "<1.2.1"
             ],
             "v": "<1.2.1"
         },
         {
-            "advisory": "Catboost 1.2.1 updates its dependency 'nanoid' to version '3.3.6' to include a fix for an Information Exposure vulnerability.\r\nhttps://github.com/catboost/catboost/commit/9381a56a05fc7f2b8cecc323c5b26aa60d3703f0",
-            "cve": "CVE-2021-23566",
-            "id": "pyup.io-60761",
-            "more_info_path": "/vulnerabilities/CVE-2021-23566/60761",
+            "advisory": "Catboost 1.2.1 updates its dependency 'postcss' to version '8.4.27' to include a fix for a ReDoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/8143d912bc7364b488ae5a33e2c83e29b988420f",
+            "cve": "CVE-2021-23368",
+            "id": "pyup.io-60760",
+            "more_info_path": "/vulnerabilities/CVE-2021-23368/60760",
+            "specs": [
+                "<1.2.1"
+            ],
+            "v": "<1.2.1"
+        },
+        {
+            "advisory": "Catboost 1.2.1 updates its dependency 'junit:junit' to version '4.13.1' to include a fix for an Information Exposure vulnerability.\r\nhttps://github.com/catboost/catboost/commit/95a9dca46d21133005b3d6d66be165384ba77f2d",
+            "cve": "CVE-2020-15250",
+            "id": "pyup.io-60765",
+            "more_info_path": "/vulnerabilities/CVE-2020-15250/60765",
+            "specs": [
+                "<1.2.1"
+            ],
+            "v": "<1.2.1"
+        },
+        {
+            "advisory": "Catboost 1.2.1 updates its NPM dependency 'semver' to version '5.7.2' to include a fix for a ReDoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/d0183bfcf67525a3ad9f4427e23f1472ad9f588c",
+            "cve": "CVE-2022-25883",
+            "id": "pyup.io-60757",
+            "more_info_path": "/vulnerabilities/CVE-2022-25883/60757",
+            "specs": [
+                "<1.2.1"
+            ],
+            "v": "<1.2.1"
+        },
+        {
+            "advisory": "Catboost 1.2.1 updates its dependency 'jackson-databind' to version '2.13.4.2' to include a fix for a DoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/e88f390a4e2630c9e8a5b82cd01c053a9fd29795",
+            "cve": "CVE-2022-42004",
+            "id": "pyup.io-60770",
+            "more_info_path": "/vulnerabilities/CVE-2022-42004/60770",
+            "specs": [
+                "<1.2.1"
+            ],
+            "v": "<1.2.1"
+        },
+        {
+            "advisory": "Catboost 1.2.1 updates its NPM dependency 'webpack' to version '5.76.0' to include a fix for a Sandbox Bypass vulnerability.\r\nhttps://github.com/catboost/catboost/commit/e132d847a527827023eb67165e11f1b05a19564f",
+            "cve": "CVE-2023-28154",
+            "id": "pyup.io-60751",
+            "more_info_path": "/vulnerabilities/CVE-2023-28154/60751",
             "specs": [
                 "<1.2.1"
             ],
@@ -15976,20 +16386,10 @@
             "v": "<1.2.1"
         },
         {
-            "advisory": "Catboost 1.2.1 updates its NPM dependency 'minimist' to version '1.2.8' to include a fix for a Prototype Pollution vulnerability.\r\nhttps://github.com/catboost/catboost/commit/63b0cd67faf62ba3fcd7281044dad144f8b6ff4d",
-            "cve": "CVE-2021-44906",
-            "id": "pyup.io-60755",
-            "more_info_path": "/vulnerabilities/CVE-2021-44906/60755",
-            "specs": [
-                "<1.2.1"
-            ],
-            "v": "<1.2.1"
-        },
-        {
-            "advisory": "Catboost 1.2.1 updates its dependency 'snappy-java' to version '1.1.10.1' to include a fix for an Integer Overflow vulnerability.\r\nhttps://github.com/catboost/catboost/commit/b51a3b2302a1d6b1a596b406efef347c872d9a0e",
-            "cve": "CVE-2023-34454",
-            "id": "pyup.io-60766",
-            "more_info_path": "/vulnerabilities/CVE-2023-34454/60766",
+            "advisory": "Catboost 1.2.1 updates its NPM dependency 'tenser' to version '5.19.2' to include a fix for a ReDoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/28aa3945fe8664bfbf0dd1d1cd2e04f6aca398b5",
+            "cve": "CVE-2022-25858",
+            "id": "pyup.io-60717",
+            "more_info_path": "/vulnerabilities/CVE-2022-25858/60717",
             "specs": [
                 "<1.2.1"
             ],
@@ -16006,20 +16406,10 @@
             "v": "<1.2.1"
         },
         {
-            "advisory": "Catboost 1.2.1 updates its NPM dependency 'tenser' to version '5.19.2' to include a fix for a ReDoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/28aa3945fe8664bfbf0dd1d1cd2e04f6aca398b5",
-            "cve": "CVE-2022-25858",
-            "id": "pyup.io-60717",
-            "more_info_path": "/vulnerabilities/CVE-2022-25858/60717",
-            "specs": [
-                "<1.2.1"
-            ],
-            "v": "<1.2.1"
-        },
-        {
-            "advisory": "Catboost 1.2.1 updates its dependency 'jackson-databind' to version '2.13.4.2' to include a fix for a DoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/e88f390a4e2630c9e8a5b82cd01c053a9fd29795",
-            "cve": "CVE-2022-42004",
-            "id": "pyup.io-60770",
-            "more_info_path": "/vulnerabilities/CVE-2022-42004/60770",
+            "advisory": "Catboost 1.2.1 updates its dependency 'snappy-java' to version '1.1.10.1' to include a fix for an Integer Overflow vulnerability.\r\nhttps://github.com/catboost/catboost/commit/b51a3b2302a1d6b1a596b406efef347c872d9a0e",
+            "cve": "CVE-2023-34454",
+            "id": "pyup.io-60766",
+            "more_info_path": "/vulnerabilities/CVE-2023-34454/60766",
             "specs": [
                 "<1.2.1"
             ],
@@ -16056,20 +16446,10 @@
             "v": "<1.2.1"
         },
         {
-            "advisory": "Catboost 1.2.1 updates its dependency 'junit:junit' to version '4.13.1' to include a fix for an Information Exposure vulnerability.\r\nhttps://github.com/catboost/catboost/commit/95a9dca46d21133005b3d6d66be165384ba77f2d",
-            "cve": "CVE-2020-15250",
-            "id": "pyup.io-60765",
-            "more_info_path": "/vulnerabilities/CVE-2020-15250/60765",
-            "specs": [
-                "<1.2.1"
-            ],
-            "v": "<1.2.1"
-        },
-        {
-            "advisory": "Catboost 1.2.1 updates its dependency 'postcss' to version '8.4.27' to include a fix for a ReDoS vulnerability.\r\nhttps://github.com/catboost/catboost/commit/8143d912bc7364b488ae5a33e2c83e29b988420f",
-            "cve": "CVE-2021-23368",
-            "id": "pyup.io-60760",
-            "more_info_path": "/vulnerabilities/CVE-2021-23368/60760",
+            "advisory": "Catboost 1.2.1 updates its NPM dependency 'tar' to version '6.1.15' to include a fix for an Arbitrary File Write vulnerability.\r\nhttps://github.com/catboost/catboost/commit/f54bd997762dede21c31022ae27b7fd5be36c925",
+            "cve": "CVE-2021-37701",
+            "id": "pyup.io-60746",
+            "more_info_path": "/vulnerabilities/CVE-2021-37701/60746",
             "specs": [
                 "<1.2.1"
             ],
@@ -16085,16 +16465,6 @@
             ],
             "v": "<1.2.1"
         },
-        {
-            "advisory": "Catboost 1.2.1 updates its NPM dependency 'tar' to version '6.1.15' to include a fix for an Arbitrary File Write vulnerability.\r\nhttps://github.com/catboost/catboost/commit/f54bd997762dede21c31022ae27b7fd5be36c925",
-            "cve": "CVE-2021-37701",
-            "id": "pyup.io-60746",
-            "more_info_path": "/vulnerabilities/CVE-2021-37701/60746",
-            "specs": [
-                "<1.2.1"
-            ],
-            "v": "<1.2.1"
-        },
         {
             "advisory": "Catboost 1.2.1 updates its NPM dependency 'tar' to version '6.1.15' to include a fix for an Arbitrary File Write vulnerability.\r\nhttps://github.com/catboost/catboost/commit/f54bd997762dede21c31022ae27b7fd5be36c925",
             "cve": "CVE-2021-32804",
@@ -16172,14 +16542,14 @@
             "v": "<5.6.0"
         },
         {
-            "advisory": "cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a patch for this issue.",
+            "advisory": "Affected versions of Cbor2 are vulnerable to Buffer Overflow. An attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object.",
             "cve": "CVE-2024-26134",
             "id": "pyup.io-66703",
             "more_info_path": "/vulnerabilities/CVE-2024-26134/66703",
             "specs": [
-                ">=5.5.1,<5.6.2"
+                ">=5.6.0,<5.6.2"
             ],
-            "v": ">=5.5.1,<5.6.2"
+            "v": ">=5.6.0,<5.6.2"
         }
     ],
     "ccf": [
@@ -16323,6 +16693,16 @@
         }
     ],
     "ceilometer": [
+        {
+            "advisory": "(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string from ceilometer.conf, which allows local users to obtain sensitive information (the DB2 or MongoDB password) by reading the log file.",
+            "cve": "CVE-2013-6384",
+            "id": "pyup.io-70583",
+            "more_info_path": "/vulnerabilities/CVE-2013-6384/70583",
+            "specs": [
+                "<2013.2.1"
+            ],
+            "v": "<2013.2.1"
+        },
         {
             "advisory": "A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.",
             "cve": "CVE-2019-3830",
@@ -16854,14 +17234,14 @@
     ],
     "chafa.py": [
         {
-            "advisory": "Chafa.py serves as a Python wrapper for the Chafa library. The GitHub repository hpjansson/chafa, prior to version 1.12.0, contains a heap-based Buffer Overflow vulnerability. This issue has been addressed in the Chapa.py update, specifically version 1.1.0. https://github.com/GuardKenzie/chafa.py/commit/1bc1dc5daff250c0187c4a309dfc640b790ca310",
+            "advisory": "Chafa.py serves as a Python wrapper for the Chafa library. The GitHub repository hpjansson/chafa, prior to version 1.12.0, contains a heap-based Buffer Overflow vulnerability. This issue has been addressed in the Chapa.py update, specifically version 1.1.0.",
             "cve": "CVE-2022-20610",
             "id": "pyup.io-63001",
             "more_info_path": "/vulnerabilities/CVE-2022-20610/63001",
             "specs": [
-                "<1.1.2"
+                "<1.1.0"
             ],
-            "v": "<1.1.2"
+            "v": "<1.1.0"
         }
     ],
     "chainerrl-visualizer": [
@@ -16896,6 +17276,16 @@
                 "<0.4.1"
             ],
             "v": "<0.4.1"
+        },
+        {
+            "advisory": "Chainlit 1.0.501 has updated its Starlette dependency to version \"^0.37.2\" from \"<0.33.0\" to address the security issue identified in CVE-2023-29159.",
+            "cve": "CVE-2023-29159",
+            "id": "pyup.io-67535",
+            "more_info_path": "/vulnerabilities/CVE-2023-29159/67535",
+            "specs": [
+                "<1.0.501"
+            ],
+            "v": "<1.0.501"
         }
     ],
     "changedetection-io": [
@@ -16911,6 +17301,16 @@
         }
     ],
     "changedetection.io": [
+        {
+            "advisory": "Changedetection.io version 0.45.21 includes a security update to fix a server-side template injection vulnerability in Jinja2 that could allow remote command execution, identified as CVE-2024-32651. Additionally, it implements the use of `ImmutableSandboxedEnvironment` for validation to enhance security.",
+            "cve": "CVE-2024-32651",
+            "id": "pyup.io-70483",
+            "more_info_path": "/vulnerabilities/CVE-2024-32651/70483",
+            "specs": [
+                "<0.45.21"
+            ],
+            "v": "<0.45.21"
+        },
         {
             "advisory": "Changedetection.io 0.45.6 updates its dependency 'flask' to include a security fix.",
             "cve": "CVE-2023-30861",
@@ -19855,6 +20255,16 @@
             ],
             "v": "<2.4.0"
         },
+        {
+            "advisory": "Chia 2.4.0 updates Tensorflow to v2.4.3 to include security fixes.",
+            "cve": "CVE-2020-8284",
+            "id": "pyup.io-44212",
+            "more_info_path": "/vulnerabilities/CVE-2020-8284/44212",
+            "specs": [
+                "<2.4.0"
+            ],
+            "v": "<2.4.0"
+        },
         {
             "advisory": "Chia 2.4.0 updates Tensorflow to v2.4.3 to include security fixes.",
             "cve": "CVE-2021-37674",
@@ -19905,16 +20315,6 @@
             ],
             "v": "<2.4.0"
         },
-        {
-            "advisory": "Chia 2.4.0 updates Tensorflow to v2.4.3 to include security fixes.",
-            "cve": "CVE-2020-8284",
-            "id": "pyup.io-44212",
-            "more_info_path": "/vulnerabilities/CVE-2020-8284/44212",
-            "specs": [
-                "<2.4.0"
-            ],
-            "v": "<2.4.0"
-        },
         {
             "advisory": "Chia 2.4.0 updates Tensorflow to v2.4.3 to include security fixes.",
             "cve": "CVE-2021-22901",
@@ -20979,9 +21379,9 @@
         },
         {
             "advisory": "Chia-blockchain 1.8.1rc4 updates its NPM dependency 'Electron' to 22.3.7 to include security fixes.",
-            "cve": "CVE-2023-2033",
-            "id": "pyup.io-63738",
-            "more_info_path": "/vulnerabilities/CVE-2023-2033/63738",
+            "cve": "CVE-2023-2135",
+            "id": "pyup.io-64106",
+            "more_info_path": "/vulnerabilities/CVE-2023-2135/64106",
             "specs": [
                 "<1.8.1rc4"
             ],
@@ -20999,9 +21399,9 @@
         },
         {
             "advisory": "Chia-blockchain 1.8.1rc4 updates its NPM dependency 'Electron' to 22.3.7 to include security fixes.",
-            "cve": "CVE-2023-2135",
-            "id": "pyup.io-64106",
-            "more_info_path": "/vulnerabilities/CVE-2023-2135/64106",
+            "cve": "CVE-2023-2134",
+            "id": "pyup.io-64105",
+            "more_info_path": "/vulnerabilities/CVE-2023-2134/64105",
             "specs": [
                 "<1.8.1rc4"
             ],
@@ -21009,9 +21409,9 @@
         },
         {
             "advisory": "Chia-blockchain 1.8.1rc4 updates its NPM dependency 'Electron' to 22.3.7 to include security fixes.",
-            "cve": "CVE-2023-2134",
-            "id": "pyup.io-64105",
-            "more_info_path": "/vulnerabilities/CVE-2023-2134/64105",
+            "cve": "CVE-2023-2033",
+            "id": "pyup.io-63738",
+            "more_info_path": "/vulnerabilities/CVE-2023-2033/63738",
             "specs": [
                 "<1.8.1rc4"
             ],
@@ -21210,6 +21610,16 @@
             ],
             "v": "<7.0.2,>=8.0.0,<8.1.1"
         },
+        {
+            "advisory": "OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.",
+            "cve": "CVE-2015-1851",
+            "id": "pyup.io-70457",
+            "more_info_path": "/vulnerabilities/CVE-2015-1851/70457",
+            "specs": [
+                ">2010,<2015.1.1"
+            ],
+            "v": ">2010,<2015.1.1"
+        },
         {
             "advisory": "The OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2 and Openstack Cinder (python-cinder) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.1 and 1:2014.1-0 before 1:2014.1-0ubuntu1.1 for Ubuntu 13.10 and 14.04 LTS does not properly set the sudo configuration, which makes it easier for attackers to gain privileges by leveraging another vulnerability.",
             "cve": "CVE-2013-1068",
@@ -21230,6 +21640,48 @@
             ],
             "v": ">=2010,<2014.1.3"
         },
+        {
+            "advisory": "The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors.",
+            "cve": "CVE-2013-4183",
+            "id": "pyup.io-68017",
+            "more_info_path": "/vulnerabilities/CVE-2013-4183/68017",
+            "specs": [
+                ">=2012,<2013.1.3"
+            ],
+            "v": ">=2012,<2013.1.3"
+        },
+        {
+            "advisory": "The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.",
+            "cve": "CVE-2013-4202",
+            "id": "pyup.io-68019",
+            "more_info_path": "/vulnerabilities/CVE-2013-4202/68019",
+            "specs": [
+                ">=2012,<=2013.1.3"
+            ],
+            "v": ">=2012,<=2013.1.3"
+        },
+        {
+            "advisory": "The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.",
+            "cve": "CVE-2014-7230",
+            "id": "pyup.io-70424",
+            "more_info_path": "/vulnerabilities/CVE-2014-7230/70424",
+            "specs": [
+                ">=2013.2,<2013.2.4",
+                ">=2014.1,<2014.1.3"
+            ],
+            "v": ">=2013.2,<2013.2.4,>=2014.1,<2014.1.3"
+        },
+        {
+            "advisory": "The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.",
+            "cve": "CVE-2014-7231",
+            "id": "pyup.io-70430",
+            "more_info_path": "/vulnerabilities/CVE-2014-7231/70430",
+            "specs": [
+                ">=2013.2,<2013.2.4",
+                ">=2014.1,<2014.1.3"
+            ],
+            "v": ">=2013.2,<2013.2.4,>=2014.1,<2014.1.3"
+        },
         {
             "advisory": "Cinder 22.1.0, 21.3.0 and 20.3.0 include a fix for CVE-2023-2088: A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.\r\nhttps://opendev.org/openstack/cinder/commit/68fdc323369943f494541a3510e71290b091359f\r\nhttps://bugs.launchpad.net/nova/+bug/2004555",
             "cve": "CVE-2023-2088",
@@ -21870,9 +22322,9 @@
     "cloudvision": [
         {
             "advisory": "Cloudvision 1.13.0 updates 'cryptography' minimum version to v41.0.3 to include security fixes in bundled OpenSSL.",
-            "cve": "CVE-2023-3446",
-            "id": "pyup.io-61131",
-            "more_info_path": "/vulnerabilities/CVE-2023-3446/61131",
+            "cve": "CVE-2023-2975",
+            "id": "pyup.io-61130",
+            "more_info_path": "/vulnerabilities/CVE-2023-2975/61130",
             "specs": [
                 "<1.13.0"
             ],
@@ -21880,9 +22332,9 @@
         },
         {
             "advisory": "Cloudvision 1.13.0 updates 'cryptography' minimum version to v41.0.3 to include security fixes in bundled OpenSSL.",
-            "cve": "CVE-2023-3817",
-            "id": "pyup.io-61129",
-            "more_info_path": "/vulnerabilities/CVE-2023-3817/61129",
+            "cve": "CVE-2023-3446",
+            "id": "pyup.io-61131",
+            "more_info_path": "/vulnerabilities/CVE-2023-3446/61131",
             "specs": [
                 "<1.13.0"
             ],
@@ -21890,9 +22342,9 @@
         },
         {
             "advisory": "Cloudvision 1.13.0 updates 'cryptography' minimum version to v41.0.3 to include security fixes in bundled OpenSSL.",
-            "cve": "CVE-2023-2975",
-            "id": "pyup.io-61130",
-            "more_info_path": "/vulnerabilities/CVE-2023-2975/61130",
+            "cve": "CVE-2023-3817",
+            "id": "pyup.io-61129",
+            "more_info_path": "/vulnerabilities/CVE-2023-3817/61129",
             "specs": [
                 "<1.13.0"
             ],
@@ -22113,6 +22565,16 @@
             ],
             "v": "<2.6.0"
         },
+        {
+            "advisory": "Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting (XSS) vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to be exploitable via \"network connectivity\". Sending unauthenticated JavaScript payload to the Cobbler XMLRPC API (/cobbler_api).",
+            "cve": "CVE-2018-1000225",
+            "id": "pyup.io-67945",
+            "more_info_path": "/vulnerabilities/CVE-2018-1000225/67945",
+            "specs": [
+                "<3.0.0"
+            ],
+            "v": "<3.0.0"
+        },
         {
             "advisory": "Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in Privilege escalation, data manipulation or exfiltration, LDAP credential harvesting. This attack appear to be exploitable via \"network connectivity\". Taking advantage of improper validation of security tokens in API endpoints. Please note this is a different issue than CVE-2018-10931.",
             "cve": "CVE-2018-1000226",
@@ -22450,6 +22912,18 @@
             "v": "<0.22.3"
         }
     ],
+    "cognitojwt": [
+        {
+            "advisory": "Cognitojwt version 1.5.0 transitions from the outdated python-jose library, which relied on the ecdsa package containing unresolved vulnerabilities, to the more frequently updated joserfc library.",
+            "cve": "CVE-2024-23342",
+            "id": "pyup.io-68046",
+            "more_info_path": "/vulnerabilities/CVE-2024-23342/68046",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        }
+    ],
     "cohen3": [
         {
             "advisory": "Cohen3 version 0.8.3 updates its dependency \"requests\" to include a security fix.",
@@ -22866,6 +23340,18 @@
             "v": ">=0,<1.7.4"
         }
     ],
+    "commonground-api-common": [
+        {
+            "advisory": "Versions of software utilizing the PyJWT library are susceptible to a theoretical privilege escalation due to a non-exploitable weakness in client-supplied JWT verification. Despite using an explicit allow-list of algorithms preventing the use of invalid ones, a hypothetical scenario was identified where, without such a mechanism, tampered client JWTs could lead to an attacker impersonating any client without detection. The JWT verification issue stems from the handling of the algorithm specified in the JWT header, specifically the use of a string for algorithm names rather than a strict list, potentially allowing any substring matching to pass verification checks. However, this vulnerability is considered non-exploitable since PyJWT does not support algorithm substrings that would exploit this issue.",
+            "cve": "PVE-2024-68497",
+            "id": "pyup.io-68497",
+            "more_info_path": "/vulnerabilities/PVE-2024-68497/68497",
+            "specs": [
+                "<=1.12.1"
+            ],
+            "v": "<=1.12.1"
+        }
+    ],
     "compas": [
         {
             "advisory": "Compas 1.17.5 includes a fix for CVE-2007-4559: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.\r\nhttps://github.com/compas-dev/compas/commit/0d0f9bec24511fe5dbc77ef73ee617dc83b4420e",
@@ -23003,9 +23489,9 @@
         },
         {
             "advisory": "Composer 0.13.0 updates its dependency 'pillow' to v9.0.0 in Dockerfile to include security fixes.\r\nhttps://github.com/mosaicml/composer/pull/2007",
-            "cve": "CVE-2021-34552",
-            "id": "pyup.io-53694",
-            "more_info_path": "/vulnerabilities/CVE-2021-34552/53694",
+            "cve": "PVE-2022-44524",
+            "id": "pyup.io-53692",
+            "more_info_path": "/vulnerabilities/PVE-2022-44524/53692",
             "specs": [
                 "<0.13.0"
             ],
@@ -23013,9 +23499,9 @@
         },
         {
             "advisory": "Composer 0.13.0 updates its dependency 'pillow' to v9.0.0 in Dockerfile to include security fixes.\r\nhttps://github.com/mosaicml/composer/pull/2007",
-            "cve": "PVE-2022-44524",
-            "id": "pyup.io-53692",
-            "more_info_path": "/vulnerabilities/PVE-2022-44524/53692",
+            "cve": "CVE-2021-34552",
+            "id": "pyup.io-53694",
+            "more_info_path": "/vulnerabilities/CVE-2021-34552/53694",
             "specs": [
                 "<0.13.0"
             ],
@@ -23387,9 +23873,9 @@
     "connect-sdk-python2": [
         {
             "advisory": "Connect-sdk-python2 3.33.0 updates the minimum 'requests' version from 2.20.0 to 2.25.0, as earlier versions depend on a vulnerable 'urllib3' version.",
-            "cve": "CVE-2020-26137",
-            "id": "pyup.io-51386",
-            "more_info_path": "/vulnerabilities/CVE-2020-26137/51386",
+            "cve": "CVE-2021-33503",
+            "id": "pyup.io-51387",
+            "more_info_path": "/vulnerabilities/CVE-2021-33503/51387",
             "specs": [
                 "<3.33.0"
             ],
@@ -23397,9 +23883,9 @@
         },
         {
             "advisory": "Connect-sdk-python2 3.33.0 updates the minimum 'requests' version from 2.20.0 to 2.25.0, as earlier versions depend on a vulnerable 'urllib3' version.",
-            "cve": "CVE-2019-11324",
-            "id": "pyup.io-51385",
-            "more_info_path": "/vulnerabilities/CVE-2019-11324/51385",
+            "cve": "CVE-2018-20060",
+            "id": "pyup.io-51359",
+            "more_info_path": "/vulnerabilities/CVE-2018-20060/51359",
             "specs": [
                 "<3.33.0"
             ],
@@ -23407,9 +23893,9 @@
         },
         {
             "advisory": "Connect-sdk-python2 3.33.0 updates the minimum 'requests' version from 2.20.0 to 2.25.0, as earlier versions depend on a vulnerable 'urllib3' version.",
-            "cve": "CVE-2021-33503",
-            "id": "pyup.io-51387",
-            "more_info_path": "/vulnerabilities/CVE-2021-33503/51387",
+            "cve": "CVE-2019-11236",
+            "id": "pyup.io-51384",
+            "more_info_path": "/vulnerabilities/CVE-2019-11236/51384",
             "specs": [
                 "<3.33.0"
             ],
@@ -23417,9 +23903,9 @@
         },
         {
             "advisory": "Connect-sdk-python2 3.33.0 updates the minimum 'requests' version from 2.20.0 to 2.25.0, as earlier versions depend on a vulnerable 'urllib3' version.",
-            "cve": "CVE-2019-11236",
-            "id": "pyup.io-51384",
-            "more_info_path": "/vulnerabilities/CVE-2019-11236/51384",
+            "cve": "CVE-2020-26137",
+            "id": "pyup.io-51386",
+            "more_info_path": "/vulnerabilities/CVE-2020-26137/51386",
             "specs": [
                 "<3.33.0"
             ],
@@ -23427,9 +23913,9 @@
         },
         {
             "advisory": "Connect-sdk-python2 3.33.0 updates the minimum 'requests' version from 2.20.0 to 2.25.0, as earlier versions depend on a vulnerable 'urllib3' version.",
-            "cve": "CVE-2018-20060",
-            "id": "pyup.io-51359",
-            "more_info_path": "/vulnerabilities/CVE-2018-20060/51359",
+            "cve": "CVE-2019-11324",
+            "id": "pyup.io-51385",
+            "more_info_path": "/vulnerabilities/CVE-2019-11324/51385",
             "specs": [
                 "<3.33.0"
             ],
@@ -23449,9 +23935,9 @@
         },
         {
             "advisory": "Connect-sdk-python3 3.33.0 updates the minimum 'requests' version from 2.20.0 to 2.25.0, as earlier versions depend on a vulnerable 'urllib3' version.",
-            "cve": "CVE-2020-26137",
-            "id": "pyup.io-51380",
-            "more_info_path": "/vulnerabilities/CVE-2020-26137/51380",
+            "cve": "CVE-2021-33503",
+            "id": "pyup.io-51360",
+            "more_info_path": "/vulnerabilities/CVE-2021-33503/51360",
             "specs": [
                 "<3.33.0"
             ],
@@ -23459,9 +23945,9 @@
         },
         {
             "advisory": "Connect-sdk-python3 3.33.0 updates the minimum 'requests' version from 2.20.0 to 2.25.0, as earlier versions depend on a vulnerable 'urllib3' version.",
-            "cve": "CVE-2019-11236",
-            "id": "pyup.io-51382",
-            "more_info_path": "/vulnerabilities/CVE-2019-11236/51382",
+            "cve": "CVE-2018-20060",
+            "id": "pyup.io-51383",
+            "more_info_path": "/vulnerabilities/CVE-2018-20060/51383",
             "specs": [
                 "<3.33.0"
             ],
@@ -23469,9 +23955,9 @@
         },
         {
             "advisory": "Connect-sdk-python3 3.33.0 updates the minimum 'requests' version from 2.20.0 to 2.25.0, as earlier versions depend on a vulnerable 'urllib3' version.",
-            "cve": "CVE-2018-20060",
-            "id": "pyup.io-51383",
-            "more_info_path": "/vulnerabilities/CVE-2018-20060/51383",
+            "cve": "CVE-2020-26137",
+            "id": "pyup.io-51380",
+            "more_info_path": "/vulnerabilities/CVE-2020-26137/51380",
             "specs": [
                 "<3.33.0"
             ],
@@ -23479,9 +23965,9 @@
         },
         {
             "advisory": "Connect-sdk-python3 3.33.0 updates the minimum 'requests' version from 2.20.0 to 2.25.0, as earlier versions depend on a vulnerable 'urllib3' version.",
-            "cve": "CVE-2021-33503",
-            "id": "pyup.io-51360",
-            "more_info_path": "/vulnerabilities/CVE-2021-33503/51360",
+            "cve": "CVE-2019-11236",
+            "id": "pyup.io-51382",
+            "more_info_path": "/vulnerabilities/CVE-2019-11236/51382",
             "specs": [
                 "<3.33.0"
             ],
@@ -23666,6 +24152,28 @@
             "v": "<1.0.2"
         }
     ],
+    "copy-spotter": [
+        {
+            "advisory": "Copy-spotter version 0.0.1 updates the Black library from version 23.11.0 to 24.3.0 to address the security vulnerabilities identified in CVE-2024-21503.",
+            "cve": "CVE-2024-21503",
+            "id": "pyup.io-68062",
+            "more_info_path": "/vulnerabilities/CVE-2024-21503/68062",
+            "specs": [
+                "<0.0.1"
+            ],
+            "v": "<0.0.1"
+        },
+        {
+            "advisory": "Copy-spotter version 0.0.1 has upgraded its nltk dependency from 3.6.3 to 3.6.6 to address the security issue identified in CVE-2021-3842.",
+            "cve": "CVE-2021-3842",
+            "id": "pyup.io-68082",
+            "more_info_path": "/vulnerabilities/CVE-2021-3842/68082",
+            "specs": [
+                "<0.0.1"
+            ],
+            "v": "<0.0.1"
+        }
+    ],
     "copyparty": [
         {
             "advisory": "Copyparty 0.11.31 includes a fix for a Race Condition vulnerability.\r\nhttps://github.com/9001/copyparty/commit/a5120d4f6fe4afe91eb0e091063de6b9ba9e81e1",
@@ -23728,20 +24236,20 @@
             "v": "<1.2.8"
         },
         {
-            "advisory": "Copyparty 1.8.2 includes a fix for a Race Condition vulnerability. Impact is on availability.\r\nhttps://github.com/9001/copyparty/commit/77f1e5144455eb946db7368792ea11c934f0f6da\r\nhttps://github.com/9001/copyparty/commit/8f59afb1593a75b8ce8c91ceee304097a07aea6e",
-            "cve": "PVE-2023-59475",
-            "id": "pyup.io-59475",
-            "more_info_path": "/vulnerabilities/PVE-2023-59475/59475",
+            "advisory": "Copyparty 1.8.2 includes a fix for a Path Traversal vulnerability: An attacker may use the /.cpr endpoint to have full access to the server filesystem.\r\nhttps://github.com/9001/copyparty/commit/043e3c7dd683113e2b1c15cacb9c8e68f76513ff\r\nhttps://github.com/9001/copyparty/security/advisories/GHSA-pxfv-7rr3-2qjg",
+            "cve": "CVE-2023-37474",
+            "id": "pyup.io-59466",
+            "more_info_path": "/vulnerabilities/CVE-2023-37474/59466",
             "specs": [
                 "<1.8.2"
             ],
             "v": "<1.8.2"
         },
         {
-            "advisory": "Copyparty 1.8.2 includes a fix for a Path Traversal vulnerability: An attacker may use the /.cpr endpoint to have full access to the server filesystem.\r\nhttps://github.com/9001/copyparty/commit/043e3c7dd683113e2b1c15cacb9c8e68f76513ff\r\nhttps://github.com/9001/copyparty/security/advisories/GHSA-pxfv-7rr3-2qjg",
-            "cve": "CVE-2023-37474",
-            "id": "pyup.io-59466",
-            "more_info_path": "/vulnerabilities/CVE-2023-37474/59466",
+            "advisory": "Copyparty 1.8.2 includes a fix for a Race Condition vulnerability. Impact is on availability.\r\nhttps://github.com/9001/copyparty/commit/77f1e5144455eb946db7368792ea11c934f0f6da\r\nhttps://github.com/9001/copyparty/commit/8f59afb1593a75b8ce8c91ceee304097a07aea6e",
+            "cve": "PVE-2023-59475",
+            "id": "pyup.io-59475",
+            "more_info_path": "/vulnerabilities/PVE-2023-59475/59475",
             "specs": [
                 "<1.8.2"
             ],
@@ -23922,8 +24430,8 @@
         {
             "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'jquery' to v3.5.1 to include security fixes.",
             "cve": "CVE-2012-6708",
-            "id": "pyup.io-49056",
-            "more_info_path": "/vulnerabilities/CVE-2012-6708/49056",
+            "id": "pyup.io-49057",
+            "more_info_path": "/vulnerabilities/CVE-2012-6708/49057",
             "specs": [
                 "<0.13.0"
             ],
@@ -23931,9 +24439,9 @@
         },
         {
             "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'jquery' to v3.5.1 to include security fixes.",
-            "cve": "CVE-2011-4969",
-            "id": "pyup.io-39529",
-            "more_info_path": "/vulnerabilities/CVE-2011-4969/39529",
+            "cve": "CVE-2019-11358",
+            "id": "pyup.io-49061",
+            "more_info_path": "/vulnerabilities/CVE-2019-11358/49061",
             "specs": [
                 "<0.13.0"
             ],
@@ -23941,9 +24449,9 @@
         },
         {
             "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'bootstrap' to v4.5.3 to include security fixes.",
-            "cve": "CVE-2016-10735",
-            "id": "pyup.io-49068",
-            "more_info_path": "/vulnerabilities/CVE-2016-10735/49068",
+            "cve": "CVE-2019-8331",
+            "id": "pyup.io-49063",
+            "more_info_path": "/vulnerabilities/CVE-2019-8331/49063",
             "specs": [
                 "<0.13.0"
             ],
@@ -23952,8 +24460,8 @@
         {
             "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'jquery' to v3.5.1 to include security fixes.",
             "cve": "CVE-2012-6708",
-            "id": "pyup.io-49057",
-            "more_info_path": "/vulnerabilities/CVE-2012-6708/49057",
+            "id": "pyup.io-49056",
+            "more_info_path": "/vulnerabilities/CVE-2012-6708/49056",
             "specs": [
                 "<0.13.0"
             ],
@@ -23961,9 +24469,9 @@
         },
         {
             "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'jquery' to v3.5.1 to include security fixes.",
-            "cve": "CVE-2019-11358",
-            "id": "pyup.io-49061",
-            "more_info_path": "/vulnerabilities/CVE-2019-11358/49061",
+            "cve": "CVE-2015-9251",
+            "id": "pyup.io-49059",
+            "more_info_path": "/vulnerabilities/CVE-2015-9251/49059",
             "specs": [
                 "<0.13.0"
             ],
@@ -23971,29 +24479,29 @@
         },
         {
             "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'bootstrap' to v4.5.3 to include security fixes.",
-            "cve": "CVE-2019-8331",
-            "id": "pyup.io-49063",
-            "more_info_path": "/vulnerabilities/CVE-2019-8331/49063",
+            "cve": "CVE-2018-14042",
+            "id": "pyup.io-49067",
+            "more_info_path": "/vulnerabilities/CVE-2018-14042/49067",
             "specs": [
                 "<0.13.0"
             ],
             "v": "<0.13.0"
         },
         {
-            "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'jquery' to v3.5.1 to include security fixes.",
-            "cve": "CVE-2020-7656",
-            "id": "pyup.io-49062",
-            "more_info_path": "/vulnerabilities/CVE-2020-7656/49062",
+            "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'bootstrap' to v4.5.3 to include security fixes.",
+            "cve": "CVE-2018-14040",
+            "id": "pyup.io-49066",
+            "more_info_path": "/vulnerabilities/CVE-2018-14040/49066",
             "specs": [
                 "<0.13.0"
             ],
             "v": "<0.13.0"
         },
         {
-            "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'bootstrap' to v4.5.3 to include security fixes.",
-            "cve": "CVE-2018-14042",
-            "id": "pyup.io-49067",
-            "more_info_path": "/vulnerabilities/CVE-2018-14042/49067",
+            "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'jquery' to v3.5.1 to include security fixes.",
+            "cve": "CVE-2019-11358",
+            "id": "pyup.io-49060",
+            "more_info_path": "/vulnerabilities/CVE-2019-11358/49060",
             "specs": [
                 "<0.13.0"
             ],
@@ -24001,19 +24509,19 @@
         },
         {
             "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'jquery' to v3.5.1 to include security fixes.",
-            "cve": "CVE-2015-9251",
-            "id": "pyup.io-49059",
-            "more_info_path": "/vulnerabilities/CVE-2015-9251/49059",
+            "cve": "CVE-2020-7656",
+            "id": "pyup.io-49062",
+            "more_info_path": "/vulnerabilities/CVE-2020-7656/49062",
             "specs": [
                 "<0.13.0"
             ],
             "v": "<0.13.0"
         },
         {
-            "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'bootstrap' to v4.5.3 to include security fixes.",
-            "cve": "CVE-2018-20676",
-            "id": "pyup.io-49065",
-            "more_info_path": "/vulnerabilities/CVE-2018-20676/49065",
+            "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'jquery' to v3.5.1 to include security fixes.",
+            "cve": "CVE-2011-4969",
+            "id": "pyup.io-39529",
+            "more_info_path": "/vulnerabilities/CVE-2011-4969/39529",
             "specs": [
                 "<0.13.0"
             ],
@@ -24021,19 +24529,19 @@
         },
         {
             "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'bootstrap' to v4.5.3 to include security fixes.",
-            "cve": "CVE-2018-14040",
-            "id": "pyup.io-49066",
-            "more_info_path": "/vulnerabilities/CVE-2018-14040/49066",
+            "cve": "CVE-2016-10735",
+            "id": "pyup.io-49068",
+            "more_info_path": "/vulnerabilities/CVE-2016-10735/49068",
             "specs": [
                 "<0.13.0"
             ],
             "v": "<0.13.0"
         },
         {
-            "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'jquery' to v3.5.1 to include security fixes.",
-            "cve": "CVE-2015-9251",
-            "id": "pyup.io-49058",
-            "more_info_path": "/vulnerabilities/CVE-2015-9251/49058",
+            "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'bootstrap' to v4.5.3 to include security fixes.",
+            "cve": "CVE-2018-20676",
+            "id": "pyup.io-49065",
+            "more_info_path": "/vulnerabilities/CVE-2018-20676/49065",
             "specs": [
                 "<0.13.0"
             ],
@@ -24041,9 +24549,9 @@
         },
         {
             "advisory": "Crate-docs-theme 0.13.0 updates its NPM dependency 'jquery' to v3.5.1 to include security fixes.",
-            "cve": "CVE-2019-11358",
-            "id": "pyup.io-49060",
-            "more_info_path": "/vulnerabilities/CVE-2019-11358/49060",
+            "cve": "CVE-2015-9251",
+            "id": "pyup.io-49058",
+            "more_info_path": "/vulnerabilities/CVE-2015-9251/49058",
             "specs": [
                 "<0.13.0"
             ],
@@ -24245,6 +24753,26 @@
                 "<1.7.2"
             ],
             "v": "<1.7.2"
+        },
+        {
+            "advisory": "Cryptoadvance.specter version 2.0.2 has updated its Electron dependency from version 22.1.0 to 22.3.21 to address security concerns outlined in CVE-2023-39956.",
+            "cve": "CVE-2023-39956",
+            "id": "pyup.io-67912",
+            "more_info_path": "/vulnerabilities/CVE-2023-39956/67912",
+            "specs": [
+                "<2.0.2"
+            ],
+            "v": "<2.0.2"
+        },
+        {
+            "advisory": "Cryptoadvance.specter version 2.0.2 addresses a security issue where the \"next\" parameter during the login process on Specter desktop could be manipulated to redirect users to an unauthorized domain after login. This vulnerability posed a phishing risk, as attackers could easily direct users to malicious sites by altering the \"next\" parameter in the URL. The update rectifies this issue to prevent potential phishing attacks.",
+            "cve": "PVE-2024-67911",
+            "id": "pyup.io-67911",
+            "more_info_path": "/vulnerabilities/PVE-2024-67911/67911",
+            "specs": [
+                "<2.0.2"
+            ],
+            "v": "<2.0.2"
         }
     ],
     "cryptoasset-data-downloader": [
@@ -24806,7 +25334,7 @@
     ],
     "curl-cffi": [
         {
-            "advisory": "Curl-cffi 0.5.10b4 and prior releases ship with a version of 'libcurl' that has a high-severity vulnerability.\r\nhttps://github.com/lwthiker/curl-impersonate/issues/194\r\nhttps://github.com/yifeikong/curl_cffi/blob/d0c6c9c08ecf4ab6a1a9e0bd7ea6ff80e562385b/Makefile#L4",
+            "advisory": "Curl-cffi 0.5.10b4 and prior releases ship with a version of 'libcurl' that has a high-severity vulnerability.",
             "cve": "CVE-2023-38545",
             "id": "pyup.io-61772",
             "more_info_path": "/vulnerabilities/CVE-2023-38545/61772",
@@ -24886,6 +25414,28 @@
             "v": "<0.14.0"
         }
     ],
+    "cve-bin-tool": [
+        {
+            "advisory": "Cve-bin-tool version 3.3rc3 updates its Pillow dependency to version 10.0.1 from 9.5.0 to address the security vulnerability outlined in CVE-2023-44271.",
+            "cve": "CVE-2023-44271",
+            "id": "pyup.io-67593",
+            "more_info_path": "/vulnerabilities/CVE-2023-44271/67593",
+            "specs": [
+                "<3.3rc3"
+            ],
+            "v": "<3.3rc3"
+        },
+        {
+            "advisory": "Cve-bin-tool version 3.3rc3 updates its Pillow dependency to version 10.0.1 from 9.5.0 to address the security vulnerability outlined in CVE-2023-4863.",
+            "cve": "CVE-2023-4863",
+            "id": "pyup.io-67586",
+            "more_info_path": "/vulnerabilities/CVE-2023-4863/67586",
+            "specs": [
+                "<3.3rc3"
+            ],
+            "v": "<3.3rc3"
+        }
+    ],
     "cve-py": [
         {
             "advisory": "Cve-py 1.2.1 includes a fix for a XXE vulnerability.\r\nhttps://github.com/Pavel-Sushko/cve-py/pull/13",
@@ -25653,9 +26203,9 @@
     "dagster-cloud": [
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-1292",
-            "id": "pyup.io-52154",
-            "more_info_path": "/vulnerabilities/CVE-2022-1292/52154",
+            "cve": "CVE-2022-2068",
+            "id": "pyup.io-52155",
+            "more_info_path": "/vulnerabilities/CVE-2022-2068/52155",
             "specs": [
                 "<1.1.4"
             ],
@@ -25663,9 +26213,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2021-4209",
-            "id": "pyup.io-52168",
-            "more_info_path": "/vulnerabilities/CVE-2021-4209/52168",
+            "cve": "CVE-2018-25032",
+            "id": "pyup.io-52166",
+            "more_info_path": "/vulnerabilities/CVE-2018-25032/52166",
             "specs": [
                 "<1.1.4"
             ],
@@ -25673,9 +26223,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-37434",
-            "id": "pyup.io-52156",
-            "more_info_path": "/vulnerabilities/CVE-2022-37434/52156",
+            "cve": "CVE-2021-3999",
+            "id": "pyup.io-52160",
+            "more_info_path": "/vulnerabilities/CVE-2021-3999/52160",
             "specs": [
                 "<1.1.4"
             ],
@@ -25683,9 +26233,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-2068",
-            "id": "pyup.io-52155",
-            "more_info_path": "/vulnerabilities/CVE-2022-2068/52155",
+            "cve": "CVE-2022-1292",
+            "id": "pyup.io-52154",
+            "more_info_path": "/vulnerabilities/CVE-2022-1292/52154",
             "specs": [
                 "<1.1.4"
             ],
@@ -25693,9 +26243,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-34903",
-            "id": "pyup.io-52167",
-            "more_info_path": "/vulnerabilities/CVE-2022-34903/52167",
+            "cve": "CVE-2021-46828",
+            "id": "pyup.io-52164",
+            "more_info_path": "/vulnerabilities/CVE-2021-46828/52164",
             "specs": [
                 "<1.1.4"
             ],
@@ -25703,9 +26253,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2021-4160",
-            "id": "pyup.io-52169",
-            "more_info_path": "/vulnerabilities/CVE-2021-4160/52169",
+            "cve": "CVE-2021-33574",
+            "id": "pyup.io-52153",
+            "more_info_path": "/vulnerabilities/CVE-2021-33574/52153",
             "specs": [
                 "<1.1.4"
             ],
@@ -25713,9 +26263,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-1587",
-            "id": "pyup.io-52157",
-            "more_info_path": "/vulnerabilities/CVE-2022-1587/52157",
+            "cve": "CVE-2022-37434",
+            "id": "pyup.io-52156",
+            "more_info_path": "/vulnerabilities/CVE-2022-37434/52156",
             "specs": [
                 "<1.1.4"
             ],
@@ -25723,9 +26273,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-1664",
-            "id": "pyup.io-52146",
-            "more_info_path": "/vulnerabilities/CVE-2022-1664/52146",
+            "cve": "CVE-2022-1586",
+            "id": "pyup.io-52158",
+            "more_info_path": "/vulnerabilities/CVE-2022-1586/52158",
             "specs": [
                 "<1.1.4"
             ],
@@ -25733,9 +26283,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-0778",
-            "id": "pyup.io-52165",
-            "more_info_path": "/vulnerabilities/CVE-2022-0778/52165",
+            "cve": "CVE-2022-2509",
+            "id": "pyup.io-52163",
+            "more_info_path": "/vulnerabilities/CVE-2022-2509/52163",
             "specs": [
                 "<1.1.4"
             ],
@@ -25743,9 +26293,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-2509",
-            "id": "pyup.io-52163",
-            "more_info_path": "/vulnerabilities/CVE-2022-2509/52163",
+            "cve": "CVE-2022-34903",
+            "id": "pyup.io-52167",
+            "more_info_path": "/vulnerabilities/CVE-2022-34903/52167",
             "specs": [
                 "<1.1.4"
             ],
@@ -25753,9 +26303,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2021-3997",
-            "id": "pyup.io-52170",
-            "more_info_path": "/vulnerabilities/CVE-2021-3997/52170",
+            "cve": "CVE-2022-0778",
+            "id": "pyup.io-52165",
+            "more_info_path": "/vulnerabilities/CVE-2022-0778/52165",
             "specs": [
                 "<1.1.4"
             ],
@@ -25763,9 +26313,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-23218",
-            "id": "pyup.io-52152",
-            "more_info_path": "/vulnerabilities/CVE-2022-23218/52152",
+            "cve": "CVE-2022-1664",
+            "id": "pyup.io-52146",
+            "more_info_path": "/vulnerabilities/CVE-2022-1664/52146",
             "specs": [
                 "<1.1.4"
             ],
@@ -25773,9 +26323,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2021-3999",
-            "id": "pyup.io-52160",
-            "more_info_path": "/vulnerabilities/CVE-2021-3999/52160",
+            "cve": "CVE-2022-40674",
+            "id": "pyup.io-52150",
+            "more_info_path": "/vulnerabilities/CVE-2022-40674/52150",
             "specs": [
                 "<1.1.4"
             ],
@@ -25783,9 +26333,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2021-33574",
-            "id": "pyup.io-52153",
-            "more_info_path": "/vulnerabilities/CVE-2021-33574/52153",
+            "cve": "CVE-2021-3997",
+            "id": "pyup.io-52170",
+            "more_info_path": "/vulnerabilities/CVE-2021-3997/52170",
             "specs": [
                 "<1.1.4"
             ],
@@ -25793,9 +26343,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2021-46828",
-            "id": "pyup.io-52164",
-            "more_info_path": "/vulnerabilities/CVE-2021-46828/52164",
+            "cve": "CVE-2021-4209",
+            "id": "pyup.io-52168",
+            "more_info_path": "/vulnerabilities/CVE-2021-4209/52168",
             "specs": [
                 "<1.1.4"
             ],
@@ -25803,9 +26353,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-40674",
-            "id": "pyup.io-52150",
-            "more_info_path": "/vulnerabilities/CVE-2022-40674/52150",
+            "cve": "CVE-2022-23219",
+            "id": "pyup.io-52151",
+            "more_info_path": "/vulnerabilities/CVE-2022-23219/52151",
             "specs": [
                 "<1.1.4"
             ],
@@ -25813,9 +26363,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2018-25032",
-            "id": "pyup.io-52166",
-            "more_info_path": "/vulnerabilities/CVE-2018-25032/52166",
+            "cve": "CVE-2022-1587",
+            "id": "pyup.io-52157",
+            "more_info_path": "/vulnerabilities/CVE-2022-1587/52157",
             "specs": [
                 "<1.1.4"
             ],
@@ -25823,9 +26373,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-1586",
-            "id": "pyup.io-52158",
-            "more_info_path": "/vulnerabilities/CVE-2022-1586/52158",
+            "cve": "CVE-2022-1271",
+            "id": "pyup.io-52159",
+            "more_info_path": "/vulnerabilities/CVE-2022-1271/52159",
             "specs": [
                 "<1.1.4"
             ],
@@ -25833,9 +26383,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-1271",
-            "id": "pyup.io-52159",
-            "more_info_path": "/vulnerabilities/CVE-2022-1271/52159",
+            "cve": "CVE-2021-4160",
+            "id": "pyup.io-52169",
+            "more_info_path": "/vulnerabilities/CVE-2021-4160/52169",
             "specs": [
                 "<1.1.4"
             ],
@@ -25843,9 +26393,9 @@
         },
         {
             "advisory": "Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image\u2019s base to 'python:3.8.15-slim' to include security fixes.",
-            "cve": "CVE-2022-23219",
-            "id": "pyup.io-52151",
-            "more_info_path": "/vulnerabilities/CVE-2022-23219/52151",
+            "cve": "CVE-2022-23218",
+            "id": "pyup.io-52152",
+            "more_info_path": "/vulnerabilities/CVE-2022-23218/52152",
             "specs": [
                 "<1.1.4"
             ],
@@ -25868,9 +26418,9 @@
     "daphne": [
         {
             "advisory": "Daphne 4.0.0 updates its dependency 'twisted' to versions '>=22.4' to include security fixes.",
-            "cve": "CVE-2022-24801",
-            "id": "pyup.io-51374",
-            "more_info_path": "/vulnerabilities/CVE-2022-24801/51374",
+            "cve": "CVE-2020-10108",
+            "id": "pyup.io-51379",
+            "more_info_path": "/vulnerabilities/CVE-2020-10108/51379",
             "specs": [
                 "<4.0.0"
             ],
@@ -25878,9 +26428,9 @@
         },
         {
             "advisory": "Daphne 4.0.0 updates its dependency 'twisted' to versions '>=22.4' to include security fixes.",
-            "cve": "CVE-2020-10108",
-            "id": "pyup.io-51379",
-            "more_info_path": "/vulnerabilities/CVE-2020-10108/51379",
+            "cve": "CVE-2022-21712",
+            "id": "pyup.io-51377",
+            "more_info_path": "/vulnerabilities/CVE-2022-21712/51377",
             "specs": [
                 "<4.0.0"
             ],
@@ -25888,9 +26438,9 @@
         },
         {
             "advisory": "Daphne 4.0.0 updates its dependency 'twisted' to versions '>=22.4' to include security fixes.",
-            "cve": "CVE-2022-21712",
-            "id": "pyup.io-51377",
-            "more_info_path": "/vulnerabilities/CVE-2022-21712/51377",
+            "cve": "CVE-2022-24801",
+            "id": "pyup.io-51374",
+            "more_info_path": "/vulnerabilities/CVE-2022-24801/51374",
             "specs": [
                 "<4.0.0"
             ],
@@ -25908,9 +26458,9 @@
         },
         {
             "advisory": "Daphne 4.0.0b1 updates its dependency 'twisted' requirement to '>=22.4' to include security fixes.",
-            "cve": "CVE-2019-12387",
-            "id": "pyup.io-50818",
-            "more_info_path": "/vulnerabilities/CVE-2019-12387/50818",
+            "cve": "CVE-2020-10109",
+            "id": "pyup.io-50816",
+            "more_info_path": "/vulnerabilities/CVE-2020-10109/50816",
             "specs": [
                 "<4.0.0b1"
             ],
@@ -25918,9 +26468,9 @@
         },
         {
             "advisory": "Daphne 4.0.0b1 updates its dependency 'twisted' requirement to '>=22.4' to include security fixes.",
-            "cve": "CVE-2019-12855",
-            "id": "pyup.io-50817",
-            "more_info_path": "/vulnerabilities/CVE-2019-12855/50817",
+            "cve": "CVE-2020-10108",
+            "id": "pyup.io-50815",
+            "more_info_path": "/vulnerabilities/CVE-2020-10108/50815",
             "specs": [
                 "<4.0.0b1"
             ],
@@ -25928,9 +26478,9 @@
         },
         {
             "advisory": "Daphne 4.0.0b1 updates its dependency 'twisted' requirement to '>=22.4' to include security fixes.",
-            "cve": "CVE-2022-21712",
-            "id": "pyup.io-50814",
-            "more_info_path": "/vulnerabilities/CVE-2022-21712/50814",
+            "cve": "CVE-2019-12387",
+            "id": "pyup.io-50818",
+            "more_info_path": "/vulnerabilities/CVE-2019-12387/50818",
             "specs": [
                 "<4.0.0b1"
             ],
@@ -25938,9 +26488,9 @@
         },
         {
             "advisory": "Daphne 4.0.0b1 updates its dependency 'twisted' requirement to '>=22.4' to include security fixes.",
-            "cve": "CVE-2022-24801",
-            "id": "pyup.io-50768",
-            "more_info_path": "/vulnerabilities/CVE-2022-24801/50768",
+            "cve": "CVE-2019-12855",
+            "id": "pyup.io-50817",
+            "more_info_path": "/vulnerabilities/CVE-2019-12855/50817",
             "specs": [
                 "<4.0.0b1"
             ],
@@ -25948,9 +26498,9 @@
         },
         {
             "advisory": "Daphne 4.0.0b1 updates its dependency 'twisted' requirement to '>=22.4' to include security fixes.",
-            "cve": "CVE-2020-10109",
-            "id": "pyup.io-50816",
-            "more_info_path": "/vulnerabilities/CVE-2020-10109/50816",
+            "cve": "CVE-2022-21712",
+            "id": "pyup.io-50814",
+            "more_info_path": "/vulnerabilities/CVE-2022-21712/50814",
             "specs": [
                 "<4.0.0b1"
             ],
@@ -25958,9 +26508,9 @@
         },
         {
             "advisory": "Daphne 4.0.0b1 updates its dependency 'twisted' requirement to '>=22.4' to include security fixes.",
-            "cve": "CVE-2020-10108",
-            "id": "pyup.io-50815",
-            "more_info_path": "/vulnerabilities/CVE-2020-10108/50815",
+            "cve": "CVE-2022-24801",
+            "id": "pyup.io-50768",
+            "more_info_path": "/vulnerabilities/CVE-2022-24801/50768",
             "specs": [
                 "<4.0.0b1"
             ],
@@ -25970,9 +26520,9 @@
     "dapla-toolbelt-pseudo": [
         {
             "advisory": "Dapla-toolbelt-pseudo 0.2.1 updates its dependency 'cryptography' to v39.0.1 to include security fixes.",
-            "cve": "CVE-2023-0401",
-            "id": "pyup.io-53714",
-            "more_info_path": "/vulnerabilities/CVE-2023-0401/53714",
+            "cve": "CVE-2022-4304",
+            "id": "pyup.io-53734",
+            "more_info_path": "/vulnerabilities/CVE-2022-4304/53734",
             "specs": [
                 "<0.2.1"
             ],
@@ -25980,9 +26530,9 @@
         },
         {
             "advisory": "Dapla-toolbelt-pseudo 0.2.1 updates its dependency 'cryptography' to v39.0.1 to include security fixes.",
-            "cve": "CVE-2023-0217",
-            "id": "pyup.io-53732",
-            "more_info_path": "/vulnerabilities/CVE-2023-0217/53732",
+            "cve": "CVE-2023-0401",
+            "id": "pyup.io-53714",
+            "more_info_path": "/vulnerabilities/CVE-2023-0401/53714",
             "specs": [
                 "<0.2.1"
             ],
@@ -25990,9 +26540,9 @@
         },
         {
             "advisory": "Dapla-toolbelt-pseudo 0.2.1 updates its dependency 'cryptography' to v39.0.1 to include security fixes.",
-            "cve": "CVE-2022-4304",
-            "id": "pyup.io-53734",
-            "more_info_path": "/vulnerabilities/CVE-2022-4304/53734",
+            "cve": "CVE-2022-4203",
+            "id": "pyup.io-53736",
+            "more_info_path": "/vulnerabilities/CVE-2022-4203/53736",
             "specs": [
                 "<0.2.1"
             ],
@@ -26000,9 +26550,9 @@
         },
         {
             "advisory": "Dapla-toolbelt-pseudo 0.2.1 updates its dependency 'cryptography' to v39.0.1 to include security fixes.",
-            "cve": "CVE-2023-0286",
-            "id": "pyup.io-53733",
-            "more_info_path": "/vulnerabilities/CVE-2023-0286/53733",
+            "cve": "CVE-2023-0217",
+            "id": "pyup.io-53732",
+            "more_info_path": "/vulnerabilities/CVE-2023-0217/53732",
             "specs": [
                 "<0.2.1"
             ],
@@ -26010,9 +26560,9 @@
         },
         {
             "advisory": "Dapla-toolbelt-pseudo 0.2.1 updates its dependency 'cryptography' to v39.0.1 to include security fixes.",
-            "cve": "CVE-2023-0215",
-            "id": "pyup.io-53731",
-            "more_info_path": "/vulnerabilities/CVE-2023-0215/53731",
+            "cve": "CVE-2023-0286",
+            "id": "pyup.io-53733",
+            "more_info_path": "/vulnerabilities/CVE-2023-0286/53733",
             "specs": [
                 "<0.2.1"
             ],
@@ -26020,9 +26570,9 @@
         },
         {
             "advisory": "Dapla-toolbelt-pseudo 0.2.1 updates its dependency 'cryptography' to v39.0.1 to include security fixes.",
-            "cve": "CVE-2022-4203",
-            "id": "pyup.io-53736",
-            "more_info_path": "/vulnerabilities/CVE-2022-4203/53736",
+            "cve": "CVE-2022-4450",
+            "id": "pyup.io-53735",
+            "more_info_path": "/vulnerabilities/CVE-2022-4450/53735",
             "specs": [
                 "<0.2.1"
             ],
@@ -26030,9 +26580,9 @@
         },
         {
             "advisory": "Dapla-toolbelt-pseudo 0.2.1 updates its dependency 'cryptography' to v39.0.1 to include security fixes.",
-            "cve": "CVE-2022-4450",
-            "id": "pyup.io-53735",
-            "more_info_path": "/vulnerabilities/CVE-2022-4450/53735",
+            "cve": "CVE-2023-0215",
+            "id": "pyup.io-53731",
+            "more_info_path": "/vulnerabilities/CVE-2023-0215/53731",
             "specs": [
                 "<0.2.1"
             ],
@@ -26120,20 +26670,20 @@
     ],
     "dash-extensions": [
         {
-            "advisory": "Dash-extensions 0.1.1 updates its dependency 'jsbeautifier' to v1.14.3 to include a fix for a ReDoS vulnerability.",
-            "cve": "PVE-2022-48568",
-            "id": "pyup.io-48568",
-            "more_info_path": "/vulnerabilities/PVE-2022-48568/48568",
+            "advisory": "Dash-extensions 0.1.1 updates its NPM dependency 'mermaid' to v9.0.1 to include a security fix.",
+            "cve": "CVE-2021-43861",
+            "id": "pyup.io-48567",
+            "more_info_path": "/vulnerabilities/CVE-2021-43861/48567",
             "specs": [
                 "<0.1.1"
             ],
             "v": "<0.1.1"
         },
         {
-            "advisory": "Dash-extensions 0.1.1 updates its NPM dependency 'mermaid' to v9.0.1 to include a security fix.",
-            "cve": "CVE-2021-43861",
-            "id": "pyup.io-48567",
-            "more_info_path": "/vulnerabilities/CVE-2021-43861/48567",
+            "advisory": "Dash-extensions 0.1.1 updates its dependency 'jsbeautifier' to v1.14.3 to include a fix for a ReDoS vulnerability.",
+            "cve": "PVE-2022-48568",
+            "id": "pyup.io-48568",
+            "more_info_path": "/vulnerabilities/PVE-2022-48568/48568",
             "specs": [
                 "<0.1.1"
             ],
@@ -26150,30 +26700,30 @@
             "v": "<0.1.1"
         },
         {
-            "advisory": "Dash-extensions 0.1.8 updates its NPM dependency 'minimatch' to v3.1.2 to include a security fix.",
-            "cve": "CVE-2022-3517",
-            "id": "pyup.io-52303",
-            "more_info_path": "/vulnerabilities/CVE-2022-3517/52303",
+            "advisory": "Dash-extensions 0.1.8 updates its dependency 'cryptography' to v 38.0.3 to include security fixes.",
+            "cve": "CVE-2022-3602",
+            "id": "pyup.io-52356",
+            "more_info_path": "/vulnerabilities/CVE-2022-3602/52356",
             "specs": [
                 "<0.1.8"
             ],
             "v": "<0.1.8"
         },
         {
-            "advisory": "Dash-extensions 0.1.8 updates its dependency 'cryptography' to v 38.0.3 to include security fixes.",
-            "cve": "CVE-2022-3602",
-            "id": "pyup.io-52356",
-            "more_info_path": "/vulnerabilities/CVE-2022-3602/52356",
+            "advisory": "Dash-extensions 0.1.8 updates its NPM dependency 'loader-utils' to v3.2.1 to include security fixes.",
+            "cve": "CVE-2022-37603",
+            "id": "pyup.io-52353",
+            "more_info_path": "/vulnerabilities/CVE-2022-37603/52353",
             "specs": [
                 "<0.1.8"
             ],
             "v": "<0.1.8"
         },
         {
-            "advisory": "Dash-extensions 0.1.8 updates its NPM dependency 'loader-utils' to v3.2.1 to include security fixes.",
-            "cve": "CVE-2022-37601",
-            "id": "pyup.io-52351",
-            "more_info_path": "/vulnerabilities/CVE-2022-37601/52351",
+            "advisory": "Dash-extensions 0.1.8 updates its NPM dependency 'minimatch' to v3.1.2 to include a security fix.",
+            "cve": "CVE-2022-3517",
+            "id": "pyup.io-52303",
+            "more_info_path": "/vulnerabilities/CVE-2022-3517/52303",
             "specs": [
                 "<0.1.8"
             ],
@@ -26181,9 +26731,9 @@
         },
         {
             "advisory": "Dash-extensions 0.1.8 updates its NPM dependency 'loader-utils' to v3.2.1 to include security fixes.",
-            "cve": "CVE-2022-37603",
-            "id": "pyup.io-52353",
-            "more_info_path": "/vulnerabilities/CVE-2022-37603/52353",
+            "cve": "CVE-2022-37601",
+            "id": "pyup.io-52351",
+            "more_info_path": "/vulnerabilities/CVE-2022-37601/52351",
             "specs": [
                 "<0.1.8"
             ],
@@ -26220,20 +26770,20 @@
             "v": "<0.1.8"
         },
         {
-            "advisory": "Dash-extensions 0.1.9 updates its NPM dependency 'loader-utils' requirement to '>=3.2.1' to include security fixes.",
-            "cve": "CVE-2022-37599",
-            "id": "pyup.io-52653",
-            "more_info_path": "/vulnerabilities/CVE-2022-37599/52653",
+            "advisory": "Dash-extensions 0.1.9 updates its dependency 'certifi' to v2022.12.7 to include a security fix.",
+            "cve": "CVE-2022-23491",
+            "id": "pyup.io-52654",
+            "more_info_path": "/vulnerabilities/CVE-2022-23491/52654",
             "specs": [
                 "<0.1.9"
             ],
             "v": "<0.1.9"
         },
         {
-            "advisory": "Dash-extensions 0.1.9 updates its dependency 'certifi' to v2022.12.7 to include a security fix.",
-            "cve": "CVE-2022-23491",
-            "id": "pyup.io-52654",
-            "more_info_path": "/vulnerabilities/CVE-2022-23491/52654",
+            "advisory": "Dash-extensions 0.1.9 updates its NPM dependency 'loader-utils' requirement to '>=3.2.1' to include security fixes.",
+            "cve": "CVE-2022-37599",
+            "id": "pyup.io-52653",
+            "more_info_path": "/vulnerabilities/CVE-2022-37599/52653",
             "specs": [
                 "<0.1.9"
             ],
@@ -26397,6 +26947,16 @@
             ],
             "v": "<1.8.37"
         },
+        {
+            "advisory": "Datacube-ows version 1.8.40 has updated its Pillow dependency to version 10.2.0 to address security concerns outlined in CVE-2023-4863.",
+            "cve": "CVE-2023-4863",
+            "id": "pyup.io-70566",
+            "more_info_path": "/vulnerabilities/CVE-2023-4863/70566",
+            "specs": [
+                "<1.8.40"
+            ],
+            "v": "<1.8.40"
+        },
         {
             "advisory": "Datacube-ows 1.8.8 removes the CodeCov token from ows to fix a security breach.\r\nhttps://github.com/opendatacube/datacube-ows/pull/585",
             "cve": "PVE-2021-42558",
@@ -26822,19 +27382,9 @@
     "datum": [
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23589",
-            "id": "pyup.io-50395",
-            "more_info_path": "/vulnerabilities/CVE-2022-23589/50395",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21727",
-            "id": "pyup.io-50347",
-            "more_info_path": "/vulnerabilities/CVE-2022-21727/50347",
+            "cve": "CVE-2022-23587",
+            "id": "pyup.io-50393",
+            "more_info_path": "/vulnerabilities/CVE-2022-23587/50393",
             "specs": [
                 "<1.5.0"
             ],
@@ -26842,9 +27392,9 @@
         },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23587",
-            "id": "pyup.io-50393",
-            "more_info_path": "/vulnerabilities/CVE-2022-23587/50393",
+            "cve": "CVE-2022-23589",
+            "id": "pyup.io-50395",
+            "more_info_path": "/vulnerabilities/CVE-2022-23589/50395",
             "specs": [
                 "<1.5.0"
             ],
@@ -26852,9 +27402,9 @@
         },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23561",
-            "id": "pyup.io-50367",
-            "more_info_path": "/vulnerabilities/CVE-2022-23561/50367",
+            "cve": "CVE-2022-21727",
+            "id": "pyup.io-50347",
+            "more_info_path": "/vulnerabilities/CVE-2022-21727/50347",
             "specs": [
                 "<1.5.0"
             ],
@@ -26910,26 +27460,6 @@
             ],
             "v": "<1.5.0"
         },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23595",
-            "id": "pyup.io-50399",
-            "more_info_path": "/vulnerabilities/CVE-2022-23595/50399",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-27779",
-            "id": "pyup.io-50404",
-            "more_info_path": "/vulnerabilities/CVE-2022-27779/50404",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
             "cve": "CVE-2022-23594",
@@ -26942,9 +27472,9 @@
         },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-29192",
-            "id": "pyup.io-50409",
-            "more_info_path": "/vulnerabilities/CVE-2022-29192/50409",
+            "cve": "CVE-2022-23595",
+            "id": "pyup.io-50399",
+            "more_info_path": "/vulnerabilities/CVE-2022-23595/50399",
             "specs": [
                 "<1.5.0"
             ],
@@ -27042,9 +27572,9 @@
         },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23580",
-            "id": "pyup.io-50386",
-            "more_info_path": "/vulnerabilities/CVE-2022-23580/50386",
+            "cve": "CVE-2022-23561",
+            "id": "pyup.io-50367",
+            "more_info_path": "/vulnerabilities/CVE-2022-23561/50367",
             "specs": [
                 "<1.5.0"
             ],
@@ -27052,9 +27582,29 @@
         },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-29197",
-            "id": "pyup.io-50414",
-            "more_info_path": "/vulnerabilities/CVE-2022-29197/50414",
+            "cve": "CVE-2022-27779",
+            "id": "pyup.io-50404",
+            "more_info_path": "/vulnerabilities/CVE-2022-27779/50404",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-29192",
+            "id": "pyup.io-50409",
+            "more_info_path": "/vulnerabilities/CVE-2022-29192/50409",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-23580",
+            "id": "pyup.io-50386",
+            "more_info_path": "/vulnerabilities/CVE-2022-23580/50386",
             "specs": [
                 "<1.5.0"
             ],
@@ -27070,6 +27620,236 @@
             ],
             "v": "<1.5.0"
         },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-23571",
+            "id": "pyup.io-50377",
+            "more_info_path": "/vulnerabilities/CVE-2022-23571/50377",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-23573",
+            "id": "pyup.io-50379",
+            "more_info_path": "/vulnerabilities/CVE-2022-23573/50379",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-21726",
+            "id": "pyup.io-50346",
+            "more_info_path": "/vulnerabilities/CVE-2022-21726/50346",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-21728",
+            "id": "pyup.io-50348",
+            "more_info_path": "/vulnerabilities/CVE-2022-21728/50348",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-23568",
+            "id": "pyup.io-50374",
+            "more_info_path": "/vulnerabilities/CVE-2022-23568/50374",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-27774",
+            "id": "pyup.io-50400",
+            "more_info_path": "/vulnerabilities/CVE-2022-27774/50400",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-29212",
+            "id": "pyup.io-50428",
+            "more_info_path": "/vulnerabilities/CVE-2022-29212/50428",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-29213",
+            "id": "pyup.io-50429",
+            "more_info_path": "/vulnerabilities/CVE-2022-29213/50429",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-21738",
+            "id": "pyup.io-50358",
+            "more_info_path": "/vulnerabilities/CVE-2022-21738/50358",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-29201",
+            "id": "pyup.io-50418",
+            "more_info_path": "/vulnerabilities/CVE-2022-29201/50418",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-21729",
+            "id": "pyup.io-50349",
+            "more_info_path": "/vulnerabilities/CVE-2022-21729/50349",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-21735",
+            "id": "pyup.io-50355",
+            "more_info_path": "/vulnerabilities/CVE-2022-21735/50355",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-21736",
+            "id": "pyup.io-50356",
+            "more_info_path": "/vulnerabilities/CVE-2022-21736/50356",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-21739",
+            "id": "pyup.io-50359",
+            "more_info_path": "/vulnerabilities/CVE-2022-21739/50359",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-23559",
+            "id": "pyup.io-50365",
+            "more_info_path": "/vulnerabilities/CVE-2022-23559/50365",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-23564",
+            "id": "pyup.io-50370",
+            "more_info_path": "/vulnerabilities/CVE-2022-23564/50370",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-23578",
+            "id": "pyup.io-50384",
+            "more_info_path": "/vulnerabilities/CVE-2022-23578/50384",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-23583",
+            "id": "pyup.io-50389",
+            "more_info_path": "/vulnerabilities/CVE-2022-23583/50389",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-29196",
+            "id": "pyup.io-50413",
+            "more_info_path": "/vulnerabilities/CVE-2022-29196/50413",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-29198",
+            "id": "pyup.io-50415",
+            "more_info_path": "/vulnerabilities/CVE-2022-29198/50415",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2020-10531",
+            "id": "pyup.io-50344",
+            "more_info_path": "/vulnerabilities/CVE-2020-10531/50344",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-27782",
+            "id": "pyup.io-50407",
+            "more_info_path": "/vulnerabilities/CVE-2022-27782/50407",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
+        {
+            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
+            "cve": "CVE-2022-29197",
+            "id": "pyup.io-50414",
+            "more_info_path": "/vulnerabilities/CVE-2022-29197/50414",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
             "cve": "CVE-2022-21730",
@@ -27092,9 +27872,9 @@
         },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21732",
-            "id": "pyup.io-50352",
-            "more_info_path": "/vulnerabilities/CVE-2022-21732/50352",
+            "cve": "CVE-2022-21733",
+            "id": "pyup.io-50353",
+            "more_info_path": "/vulnerabilities/CVE-2022-21733/50353",
             "specs": [
                 "<1.5.0"
             ],
@@ -27102,9 +27882,9 @@
         },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21733",
-            "id": "pyup.io-50353",
-            "more_info_path": "/vulnerabilities/CVE-2022-21733/50353",
+            "cve": "CVE-2022-21732",
+            "id": "pyup.io-50352",
+            "more_info_path": "/vulnerabilities/CVE-2022-21732/50352",
             "specs": [
                 "<1.5.0"
             ],
@@ -27170,16 +27950,6 @@
             ],
             "v": "<1.5.0"
         },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23571",
-            "id": "pyup.io-50377",
-            "more_info_path": "/vulnerabilities/CVE-2022-23571/50377",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
             "cve": "CVE-2022-23582",
@@ -27190,16 +27960,6 @@
             ],
             "v": "<1.5.0"
         },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23573",
-            "id": "pyup.io-50379",
-            "more_info_path": "/vulnerabilities/CVE-2022-23573/50379",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
             "cve": "CVE-2022-23576",
@@ -27370,36 +28130,6 @@
             ],
             "v": "<1.5.0"
         },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21726",
-            "id": "pyup.io-50346",
-            "more_info_path": "/vulnerabilities/CVE-2022-21726/50346",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21728",
-            "id": "pyup.io-50348",
-            "more_info_path": "/vulnerabilities/CVE-2022-21728/50348",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23568",
-            "id": "pyup.io-50374",
-            "more_info_path": "/vulnerabilities/CVE-2022-23568/50374",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
             "cve": "CVE-2022-27778",
@@ -27430,16 +28160,6 @@
             ],
             "v": "<1.5.0"
         },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-27774",
-            "id": "pyup.io-50400",
-            "more_info_path": "/vulnerabilities/CVE-2022-27774/50400",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
             "cve": "CVE-2022-29200",
@@ -27460,46 +28180,6 @@
             ],
             "v": "<1.5.0"
         },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-29212",
-            "id": "pyup.io-50428",
-            "more_info_path": "/vulnerabilities/CVE-2022-29212/50428",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-29213",
-            "id": "pyup.io-50429",
-            "more_info_path": "/vulnerabilities/CVE-2022-29213/50429",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21738",
-            "id": "pyup.io-50358",
-            "more_info_path": "/vulnerabilities/CVE-2022-21738/50358",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-29201",
-            "id": "pyup.io-50418",
-            "more_info_path": "/vulnerabilities/CVE-2022-29201/50418",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
             "cve": "CVE-2022-29204",
@@ -27510,16 +28190,6 @@
             ],
             "v": "<1.5.0"
         },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21725",
-            "id": "pyup.io-50345",
-            "more_info_path": "/vulnerabilities/CVE-2022-21725/50345",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
             "cve": "CVE-2022-29207",
@@ -27552,39 +28222,9 @@
         },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21729",
-            "id": "pyup.io-50349",
-            "more_info_path": "/vulnerabilities/CVE-2022-21729/50349",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21735",
-            "id": "pyup.io-50355",
-            "more_info_path": "/vulnerabilities/CVE-2022-21735/50355",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21736",
-            "id": "pyup.io-50356",
-            "more_info_path": "/vulnerabilities/CVE-2022-21736/50356",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-21739",
-            "id": "pyup.io-50359",
-            "more_info_path": "/vulnerabilities/CVE-2022-21739/50359",
+            "cve": "CVE-2022-21725",
+            "id": "pyup.io-50345",
+            "more_info_path": "/vulnerabilities/CVE-2022-21725/50345",
             "specs": [
                 "<1.5.0"
             ],
@@ -27610,76 +28250,6 @@
             ],
             "v": "<1.5.0"
         },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23559",
-            "id": "pyup.io-50365",
-            "more_info_path": "/vulnerabilities/CVE-2022-23559/50365",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23564",
-            "id": "pyup.io-50370",
-            "more_info_path": "/vulnerabilities/CVE-2022-23564/50370",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23578",
-            "id": "pyup.io-50384",
-            "more_info_path": "/vulnerabilities/CVE-2022-23578/50384",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-23583",
-            "id": "pyup.io-50389",
-            "more_info_path": "/vulnerabilities/CVE-2022-23583/50389",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-29196",
-            "id": "pyup.io-50413",
-            "more_info_path": "/vulnerabilities/CVE-2022-29196/50413",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-29198",
-            "id": "pyup.io-50415",
-            "more_info_path": "/vulnerabilities/CVE-2022-29198/50415",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2020-10531",
-            "id": "pyup.io-50344",
-            "more_info_path": "/vulnerabilities/CVE-2020-10531/50344",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
             "cve": "CVE-2018-25032",
@@ -27690,16 +28260,6 @@
             ],
             "v": "<1.5.0"
         },
-        {
-            "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
-            "cve": "CVE-2022-27782",
-            "id": "pyup.io-50407",
-            "more_info_path": "/vulnerabilities/CVE-2022-27782/50407",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
         {
             "advisory": "Datum 1.5.0 updates its dependency 'TensorFlow' to v2.8.1 to include security fixes.",
             "cve": "CVE-2022-27776",
@@ -27826,6 +28386,16 @@
             ],
             "v": "<0.20.0rc1"
         },
+        {
+            "advisory": "Dbt-core version 1.8.0b3 has upgraded sqlparse to versions between \">=0.5.0\" and \"<0.6.0\" to mitigate vulnerabilities identified in GHSA-2m57-hf25-phgg.",
+            "cve": "PVE-2024-67887",
+            "id": "pyup.io-68018",
+            "more_info_path": "/vulnerabilities/PVE-2024-67887/68018",
+            "specs": [
+                "<1.8.0b3"
+            ],
+            "v": "<1.8.0b3"
+        },
         {
             "advisory": "Affected versions of dbt-core are vulnerable to the clear text storage of sensitive information. The vulnerability arises when the software is used to pull source code from a private repository with a Personal Access Token (PAT), resulting in the PAT being written in plain text to the package-lock.yml file. This issue threatens the security of selected versions of dbt-core, specifically when interacting with private repositories.\r\nhttps://github.com/dbt-labs/dbt-core/commit/09f5bb3dcffeda7a60ad2b22c2891f237628ecd1",
             "cve": "PVE-2024-99810",
@@ -27837,6 +28407,18 @@
             "v": ">=1.7.0,<1.7.3"
         }
     ],
+    "dbt-coverage": [
+        {
+            "advisory": "Dbt-coverage version 0.3.7 has updated its certifi dependency from version 2023.7.22 to 2024.2.2 to address the security vulnerability identified in CVE-2023-37920.",
+            "cve": "CVE-2023-37920",
+            "id": "pyup.io-68469",
+            "more_info_path": "/vulnerabilities/CVE-2023-37920/68469",
+            "specs": [
+                "<0.3.7"
+            ],
+            "v": "<0.3.7"
+        }
+    ],
     "dbt-databricks": [
         {
             "advisory": "Dbt-databricks 1.5.6 updates its dependency 'databricks-sdk' to v0.9.0 to include a secure version of 'requests'.\r\nhttps://github.com/databricks/dbt-databricks/pull/460",
@@ -27881,6 +28463,18 @@
             "v": "<1.5.2"
         }
     ],
+    "dbt-redshift": [
+        {
+            "advisory": "Dbt-redshift version 1.8.0b3 has updated its sqlparse dependency to versions between \">=0.5.0\" and \"<0.6.0\". This change is made to address vulnerabilities specified in GHSA-2m57-hf25-phgg and is aligned with updates in dbt-core.",
+            "cve": "PVE-2024-68037",
+            "id": "pyup.io-68037",
+            "more_info_path": "/vulnerabilities/PVE-2024-68037/68037",
+            "specs": [
+                "<1.8.0b3"
+            ],
+            "v": "<1.8.0b3"
+        }
+    ],
     "dbt-snowflake": [
         {
             "advisory": "Dbt-snowflake version 1.8.0b1 has upgraded its cryptography dependency to approximately version 41.0.7. This update addresses a security issue present in version 41.0.5, detailed in CVE-2023-5363.\r\nhttps://github.com/dbt-labs/dbt-snowflake/pull/852/commits/43ac4ddfcffe5e596b12892cafa419c0f178f987",
@@ -27891,6 +28485,16 @@
                 "<1.8.0b1"
             ],
             "v": "<1.8.0b1"
+        },
+        {
+            "advisory": "Dbt-snowflake 1.8.0b2 updates its cryptography requirement to version 42.0.4 or newer, addressing security concerns highlighted by CVE-2024-26130.",
+            "cve": "CVE-2024-26130",
+            "id": "pyup.io-67468",
+            "more_info_path": "/vulnerabilities/CVE-2024-26130/67468",
+            "specs": [
+                "<1.8.0b2"
+            ],
+            "v": "<1.8.0b2"
         }
     ],
     "dbt-sqlserver": [
@@ -28050,9 +28654,9 @@
         },
         {
             "advisory": "Dds-cli 2.2.2 updates its dependency 'cryptography to v38.0.3 to include security fixes.",
-            "cve": "CVE-2022-3786",
-            "id": "pyup.io-61432",
-            "more_info_path": "/vulnerabilities/CVE-2022-3786/61432",
+            "cve": "CVE-2022-3602",
+            "id": "pyup.io-61417",
+            "more_info_path": "/vulnerabilities/CVE-2022-3602/61417",
             "specs": [
                 "<2.2.2"
             ],
@@ -28060,9 +28664,9 @@
         },
         {
             "advisory": "Dds-cli 2.2.2 updates its dependency 'cryptography to v38.0.3 to include security fixes.",
-            "cve": "CVE-2022-3602",
-            "id": "pyup.io-61417",
-            "more_info_path": "/vulnerabilities/CVE-2022-3602/61417",
+            "cve": "CVE-2022-3786",
+            "id": "pyup.io-61432",
+            "more_info_path": "/vulnerabilities/CVE-2022-3786/61432",
             "specs": [
                 "<2.2.2"
             ],
@@ -28314,22 +28918,12 @@
             "id": "pyup.io-55209",
             "more_info_path": "/vulnerabilities/PVE-2023-55209/55209",
             "specs": [
-                "==1.8.5"
+                "<=1.8.5"
             ],
-            "v": "==1.8.5"
+            "v": "<=1.8.5"
         }
     ],
     "deepcell": [
-        {
-            "advisory": "Deepcell 0.10.0rc1 updates its dependency 'TensorFlow' to v2.5.1 to include security fixes.",
-            "cve": "CVE-2020-8284",
-            "id": "pyup.io-48729",
-            "more_info_path": "/vulnerabilities/CVE-2020-8284/48729",
-            "specs": [
-                "<0.10.0rc1"
-            ],
-            "v": "<0.10.0rc1"
-        },
         {
             "advisory": "Deepcell 0.10.0rc1 updates its dependency 'TensorFlow' to v2.5.1 to include security fixes.",
             "cve": "CVE-2021-37684",
@@ -30050,6 +30644,16 @@
             ],
             "v": "<0.10.0rc1"
         },
+        {
+            "advisory": "Deepcell 0.10.0rc1 updates its dependency 'TensorFlow' to v2.5.1 to include security fixes.",
+            "cve": "CVE-2020-8284",
+            "id": "pyup.io-48729",
+            "more_info_path": "/vulnerabilities/CVE-2020-8284/48729",
+            "specs": [
+                "<0.10.0rc1"
+            ],
+            "v": "<0.10.0rc1"
+        },
         {
             "advisory": "Deepcell 0.10.0rc1 updates its dependency 'TensorFlow' to v2.5.1 to include security fixes.",
             "cve": "CVE-2021-22876",
@@ -31585,14 +32189,14 @@
     ],
     "deepdataspace": [
         {
-            "advisory": "Deepdataspace 0.5.0 updates its dependency 'django' to version '4.1.10' to include a fix for a ReDoS vulnerability.\r\nhttps://github.com/IDEA-Research/deepdataspace/commit/d1bedf2d3657bfd3ecf1bc42b6bcd6d94047a59d",
-            "cve": "CVE-2023-36053",
-            "id": "pyup.io-60633",
-            "more_info_path": "/vulnerabilities/CVE-2023-36053/60633",
+            "advisory": "Deepdataspace version 0.11.0 upgrades its cryptography library from version 42.0.2 to 42.0.5 to address the security issue detailed in CVE-2024-26130.",
+            "cve": "CVE-2024-26130",
+            "id": "pyup.io-67007",
+            "more_info_path": "/vulnerabilities/CVE-2024-26130/67007",
             "specs": [
-                "<0.5.0"
+                "<0.11.0"
             ],
-            "v": "<0.5.0"
+            "v": "<0.11.0"
         },
         {
             "advisory": "Deepdataspace 0.5.0 updates its dependency 'cryptography' to version '41.0.2' to include a fix for a Denial of Service vulnerability.\r\nhttps://github.com/IDEA-Research/deepdataspace/commit/4ddc986c8d12be1f2d805bc1085b336c40f4a5c1",
@@ -31604,6 +32208,16 @@
             ],
             "v": "<0.5.0"
         },
+        {
+            "advisory": "Deepdataspace 0.5.0 updates its dependency 'django' to version '4.1.10' to include a fix for a ReDoS vulnerability.",
+            "cve": "CVE-2023-36053",
+            "id": "pyup.io-60633",
+            "more_info_path": "/vulnerabilities/CVE-2023-36053/60633",
+            "specs": [
+                "<0.5.0"
+            ],
+            "v": "<0.5.0"
+        },
         {
             "advisory": "Deepdataspace 0.5.0 updates its dependency 'cryptography' to version '41.0.2' to include a fix for an Improper Certificate Validation vulnerability.\r\nhttps://github.com/IDEA-Research/deepdataspace/commit/4ddc986c8d12be1f2d805bc1085b336c40f4a5c1",
             "cve": "CVE-2023-38325",
@@ -31916,6 +32530,16 @@
         }
     ],
     "deluge": [
+        {
+            "advisory": "CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its __init__.py file and (2) causing the victim to download, install, and enable this plugin.",
+            "cve": "CVE-2017-7178",
+            "id": "pyup.io-67432",
+            "more_info_path": "/vulnerabilities/CVE-2017-7178/67432",
+            "specs": [
+                "<1.3.14"
+            ],
+            "v": "<1.3.14"
+        },
         {
             "advisory": "Deluge 2.0.0 updates SSL/TLS Protocol parameters for better security.",
             "cve": "PVE-2021-37155",
@@ -31926,6 +32550,16 @@
             ],
             "v": "<2.0.0"
         },
+        {
+            "advisory": "The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.",
+            "cve": "CVE-2017-9031",
+            "id": "pyup.io-67433",
+            "more_info_path": "/vulnerabilities/CVE-2017-9031/67433",
+            "specs": [
+                "<=1.3.14"
+            ],
+            "v": "<=1.3.14"
+        },
         {
             "advisory": "The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from torrent files is not properly sanitised as it's interpreted directly as HTML. Someone who supplies the user with a malicious torrent file can execute arbitrary Javascript code in the context of the user's browser session.",
             "cve": "CVE-2021-3427",
@@ -31949,6 +32583,18 @@
             "v": "<0.4.2"
         }
     ],
+    "denyhosts": [
+        {
+            "advisory": "denyhosts 2.6 uses an incorrect regular expression when analyzing authentication logs, which allows remote attackers to cause a denial of service (incorrect block of IP addresses) via crafted login names.",
+            "cve": "CVE-2013-6890",
+            "id": "pyup.io-67959",
+            "more_info_path": "/vulnerabilities/CVE-2013-6890/67959",
+            "specs": [
+                "<2.7"
+            ],
+            "v": "<2.7"
+        }
+    ],
     "dequests": [
         {
             "advisory": "Dequests is a malicious package, typosquatting the popular Python 'requests' library. It embeds source code that retrieves a Golang-based ransomware binary from a remote server.\r\nhttps://thehackernews.com/2022/12/malware-strains-targeting-python-and.html",
@@ -32025,6 +32671,28 @@
             "v": "<0.3.0"
         }
     ],
+    "designate": [
+        {
+            "advisory": "Designate does not enforce the DNS protocol limit concerning record set sizes",
+            "cve": "CVE-2015-5694",
+            "id": "pyup.io-70474",
+            "more_info_path": "/vulnerabilities/CVE-2015-5694/70474",
+            "specs": [
+                "<1.0.0"
+            ],
+            "v": "<1.0.0"
+        },
+        {
+            "advisory": "Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.",
+            "cve": "CVE-2015-5695",
+            "id": "pyup.io-70475",
+            "more_info_path": "/vulnerabilities/CVE-2015-5695/70475",
+            "specs": [
+                "<=1.0.0.0b1"
+            ],
+            "v": "<=1.0.0.0b1"
+        }
+    ],
     "destringcare": [
         {
             "advisory": "Destringcare 0.0.4 removes its dependency 'pycrypto' to fix security vulnerabilities.",
@@ -32100,9 +32768,9 @@
         },
         {
             "advisory": "Determined 0.17.0rc0 switches from debian:10.3-slim to ubuntu:20.04 and unattended-upgrades, to fix security issues.\r\nhttps://github.com/determined-ai/determined/pull/2914",
-            "cve": "CVE-2019-17543",
-            "id": "pyup.io-45577",
-            "more_info_path": "/vulnerabilities/CVE-2019-17543/45577",
+            "cve": "CVE-2018-12886",
+            "id": "pyup.io-42148",
+            "more_info_path": "/vulnerabilities/CVE-2018-12886/42148",
             "specs": [
                 "<0.17.0rc0"
             ],
@@ -32110,9 +32778,9 @@
         },
         {
             "advisory": "Determined 0.17.0rc0 switches from debian:10.3-slim to ubuntu:20.04 and unattended-upgrades, to fix security issues.\r\nhttps://github.com/determined-ai/determined/pull/2914",
-            "cve": "CVE-2018-12886",
-            "id": "pyup.io-42148",
-            "more_info_path": "/vulnerabilities/CVE-2018-12886/42148",
+            "cve": "CVE-2019-17543",
+            "id": "pyup.io-45577",
+            "more_info_path": "/vulnerabilities/CVE-2019-17543/45577",
             "specs": [
                 "<0.17.0rc0"
             ],
@@ -32120,9 +32788,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41218",
-            "id": "pyup.io-43331",
-            "more_info_path": "/vulnerabilities/CVE-2021-41218/43331",
+            "cve": "CVE-2021-41203",
+            "id": "pyup.io-43316",
+            "more_info_path": "/vulnerabilities/CVE-2021-41203/43316",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32130,9 +32798,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41200",
-            "id": "pyup.io-43317",
-            "more_info_path": "/vulnerabilities/CVE-2021-41200/43317",
+            "cve": "CVE-2021-41207",
+            "id": "pyup.io-43339",
+            "more_info_path": "/vulnerabilities/CVE-2021-41207/43339",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32140,9 +32808,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41204",
-            "id": "pyup.io-43327",
-            "more_info_path": "/vulnerabilities/CVE-2021-41204/43327",
+            "cve": "CVE-2021-41226",
+            "id": "pyup.io-43322",
+            "more_info_path": "/vulnerabilities/CVE-2021-41226/43322",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32150,9 +32818,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41227",
-            "id": "pyup.io-43323",
-            "more_info_path": "/vulnerabilities/CVE-2021-41227/43323",
+            "cve": "CVE-2021-41215",
+            "id": "pyup.io-43333",
+            "more_info_path": "/vulnerabilities/CVE-2021-41215/43333",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32160,9 +32828,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41198",
-            "id": "pyup.io-43344",
-            "more_info_path": "/vulnerabilities/CVE-2021-41198/43344",
+            "cve": "CVE-2021-41212",
+            "id": "pyup.io-43337",
+            "more_info_path": "/vulnerabilities/CVE-2021-41212/43337",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32170,9 +32838,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41209",
-            "id": "pyup.io-43325",
-            "more_info_path": "/vulnerabilities/CVE-2021-41209/43325",
+            "cve": "CVE-2021-41217",
+            "id": "pyup.io-43318",
+            "more_info_path": "/vulnerabilities/CVE-2021-41217/43318",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32180,9 +32848,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41213",
-            "id": "pyup.io-43326",
-            "more_info_path": "/vulnerabilities/CVE-2021-41213/43326",
+            "cve": "CVE-2021-41202",
+            "id": "pyup.io-43340",
+            "more_info_path": "/vulnerabilities/CVE-2021-41202/43340",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32190,9 +32858,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41216",
-            "id": "pyup.io-43332",
-            "more_info_path": "/vulnerabilities/CVE-2021-41216/43332",
+            "cve": "CVE-2021-41221",
+            "id": "pyup.io-43324",
+            "more_info_path": "/vulnerabilities/CVE-2021-41221/43324",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32200,9 +32868,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41226",
-            "id": "pyup.io-43322",
-            "more_info_path": "/vulnerabilities/CVE-2021-41226/43322",
+            "cve": "CVE-2021-41200",
+            "id": "pyup.io-43317",
+            "more_info_path": "/vulnerabilities/CVE-2021-41200/43317",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32210,9 +32878,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41197",
-            "id": "pyup.io-43342",
-            "more_info_path": "/vulnerabilities/CVE-2021-41197/43342",
+            "cve": "CVE-2021-41199",
+            "id": "pyup.io-42944",
+            "more_info_path": "/vulnerabilities/CVE-2021-41199/42944",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32220,9 +32888,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41221",
-            "id": "pyup.io-43324",
-            "more_info_path": "/vulnerabilities/CVE-2021-41221/43324",
+            "cve": "CVE-2021-41206",
+            "id": "pyup.io-43335",
+            "more_info_path": "/vulnerabilities/CVE-2021-41206/43335",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32230,9 +32898,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41208",
-            "id": "pyup.io-43334",
-            "more_info_path": "/vulnerabilities/CVE-2021-41208/43334",
+            "cve": "CVE-2021-41228",
+            "id": "pyup.io-43328",
+            "more_info_path": "/vulnerabilities/CVE-2021-41228/43328",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32240,9 +32908,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41195",
-            "id": "pyup.io-43343",
-            "more_info_path": "/vulnerabilities/CVE-2021-41195/43343",
+            "cve": "CVE-2021-41198",
+            "id": "pyup.io-43344",
+            "more_info_path": "/vulnerabilities/CVE-2021-41198/43344",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32250,9 +32918,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41214",
-            "id": "pyup.io-43319",
-            "more_info_path": "/vulnerabilities/CVE-2021-41214/43319",
+            "cve": "CVE-2021-41210",
+            "id": "pyup.io-43338",
+            "more_info_path": "/vulnerabilities/CVE-2021-41210/43338",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32260,9 +32928,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41224",
-            "id": "pyup.io-43330",
-            "more_info_path": "/vulnerabilities/CVE-2021-41224/43330",
+            "cve": "CVE-2021-41218",
+            "id": "pyup.io-43331",
+            "more_info_path": "/vulnerabilities/CVE-2021-41218/43331",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32270,9 +32938,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41215",
-            "id": "pyup.io-43333",
-            "more_info_path": "/vulnerabilities/CVE-2021-41215/43333",
+            "cve": "CVE-2021-41214",
+            "id": "pyup.io-43319",
+            "more_info_path": "/vulnerabilities/CVE-2021-41214/43319",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32280,9 +32948,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41203",
-            "id": "pyup.io-43316",
-            "more_info_path": "/vulnerabilities/CVE-2021-41203/43316",
+            "cve": "CVE-2021-41195",
+            "id": "pyup.io-43343",
+            "more_info_path": "/vulnerabilities/CVE-2021-41195/43343",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32290,9 +32958,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41207",
-            "id": "pyup.io-43339",
-            "more_info_path": "/vulnerabilities/CVE-2021-41207/43339",
+            "cve": "CVE-2021-41196",
+            "id": "pyup.io-43315",
+            "more_info_path": "/vulnerabilities/CVE-2021-41196/43315",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32300,9 +32968,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41225",
-            "id": "pyup.io-43321",
-            "more_info_path": "/vulnerabilities/CVE-2021-41225/43321",
+            "cve": "CVE-2021-41209",
+            "id": "pyup.io-43325",
+            "more_info_path": "/vulnerabilities/CVE-2021-41209/43325",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32310,9 +32978,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41219",
-            "id": "pyup.io-43320",
-            "more_info_path": "/vulnerabilities/CVE-2021-41219/43320",
+            "cve": "CVE-2021-41216",
+            "id": "pyup.io-43332",
+            "more_info_path": "/vulnerabilities/CVE-2021-41216/43332",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32320,9 +32988,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41202",
-            "id": "pyup.io-43340",
-            "more_info_path": "/vulnerabilities/CVE-2021-41202/43340",
+            "cve": "CVE-2021-41208",
+            "id": "pyup.io-43334",
+            "more_info_path": "/vulnerabilities/CVE-2021-41208/43334",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32330,9 +32998,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41212",
-            "id": "pyup.io-43337",
-            "more_info_path": "/vulnerabilities/CVE-2021-41212/43337",
+            "cve": "CVE-2021-41225",
+            "id": "pyup.io-43321",
+            "more_info_path": "/vulnerabilities/CVE-2021-41225/43321",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32340,9 +33008,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41199",
-            "id": "pyup.io-42944",
-            "more_info_path": "/vulnerabilities/CVE-2021-41199/42944",
+            "cve": "CVE-2021-41204",
+            "id": "pyup.io-43327",
+            "more_info_path": "/vulnerabilities/CVE-2021-41204/43327",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32350,9 +33018,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41206",
-            "id": "pyup.io-43335",
-            "more_info_path": "/vulnerabilities/CVE-2021-41206/43335",
+            "cve": "CVE-2021-41219",
+            "id": "pyup.io-43320",
+            "more_info_path": "/vulnerabilities/CVE-2021-41219/43320",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32360,9 +33028,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41196",
-            "id": "pyup.io-43315",
-            "more_info_path": "/vulnerabilities/CVE-2021-41196/43315",
+            "cve": "CVE-2021-41224",
+            "id": "pyup.io-43330",
+            "more_info_path": "/vulnerabilities/CVE-2021-41224/43330",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32370,9 +33038,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41210",
-            "id": "pyup.io-43338",
-            "more_info_path": "/vulnerabilities/CVE-2021-41210/43338",
+            "cve": "CVE-2021-41201",
+            "id": "pyup.io-43341",
+            "more_info_path": "/vulnerabilities/CVE-2021-41201/43341",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32380,9 +33048,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41228",
-            "id": "pyup.io-43328",
-            "more_info_path": "/vulnerabilities/CVE-2021-41228/43328",
+            "cve": "CVE-2021-41205",
+            "id": "pyup.io-43336",
+            "more_info_path": "/vulnerabilities/CVE-2021-41205/43336",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32390,9 +33058,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41201",
-            "id": "pyup.io-43341",
-            "more_info_path": "/vulnerabilities/CVE-2021-41201/43341",
+            "cve": "CVE-2021-41222",
+            "id": "pyup.io-43329",
+            "more_info_path": "/vulnerabilities/CVE-2021-41222/43329",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32400,9 +33068,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41217",
-            "id": "pyup.io-43318",
-            "more_info_path": "/vulnerabilities/CVE-2021-41217/43318",
+            "cve": "CVE-2021-41227",
+            "id": "pyup.io-43323",
+            "more_info_path": "/vulnerabilities/CVE-2021-41227/43323",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32410,9 +33078,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41222",
-            "id": "pyup.io-43329",
-            "more_info_path": "/vulnerabilities/CVE-2021-41222/43329",
+            "cve": "CVE-2021-41213",
+            "id": "pyup.io-43326",
+            "more_info_path": "/vulnerabilities/CVE-2021-41213/43326",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32420,9 +33088,9 @@
         },
         {
             "advisory": "Determined 0.17.4rc0 includes images updates (to Tensorflow v2.4.4, v2.5.2 and v2.6.2) to include security fixes.",
-            "cve": "CVE-2021-41205",
-            "id": "pyup.io-43336",
-            "more_info_path": "/vulnerabilities/CVE-2021-41205/43336",
+            "cve": "CVE-2021-41197",
+            "id": "pyup.io-43342",
+            "more_info_path": "/vulnerabilities/CVE-2021-41197/43342",
             "specs": [
                 "<0.17.4rc0"
             ],
@@ -32448,6 +33116,16 @@
             ],
             "v": "<0.17.6"
         },
+        {
+            "advisory": "Determined 0.17.6 updates env images to include security fixes.\r\nhttps://github.com/determined-ai/determined/pull/3415/commits/18fc5278cd589089dd753f687ec606499117029d",
+            "cve": "CVE-2019-9512",
+            "id": "pyup.io-54969",
+            "more_info_path": "/vulnerabilities/CVE-2019-9512/54969",
+            "specs": [
+                "<0.17.6"
+            ],
+            "v": "<0.17.6"
+        },
         {
             "advisory": "Determined 0.17.6 updates env images to include security fixes.\r\nhttps://github.com/determined-ai/determined/pull/3415/commits/18fc5278cd589089dd753f687ec606499117029d",
             "cve": "CVE-2019-19844",
@@ -32480,29 +33158,29 @@
         },
         {
             "advisory": "Determined 0.17.6 updates env images to include security fixes.\r\nhttps://github.com/determined-ai/determined/pull/3415/commits/18fc5278cd589089dd753f687ec606499117029d",
-            "cve": "CVE-2019-9512",
-            "id": "pyup.io-54969",
-            "more_info_path": "/vulnerabilities/CVE-2019-9512/54969",
+            "cve": "CVE-2020-10108",
+            "id": "pyup.io-44642",
+            "more_info_path": "/vulnerabilities/CVE-2020-10108/44642",
             "specs": [
                 "<0.17.6"
             ],
             "v": "<0.17.6"
         },
         {
-            "advisory": "Determined 0.17.6 updates env images to include security fixes.\r\nhttps://github.com/determined-ai/determined/pull/3415/commits/18fc5278cd589089dd753f687ec606499117029d",
-            "cve": "CVE-2020-10108",
-            "id": "pyup.io-44642",
-            "more_info_path": "/vulnerabilities/CVE-2020-10108/44642",
+            "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
+            "cve": "CVE-2022-27778",
+            "id": "pyup.io-49534",
+            "more_info_path": "/vulnerabilities/CVE-2022-27778/49534",
             "specs": [
-                "<0.17.6"
+                "<0.18.2"
             ],
-            "v": "<0.17.6"
+            "v": "<0.18.2"
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-27775",
-            "id": "pyup.io-49531",
-            "more_info_path": "/vulnerabilities/CVE-2022-27775/49531",
+            "cve": "CVE-2022-29211",
+            "id": "pyup.io-49557",
+            "more_info_path": "/vulnerabilities/CVE-2022-29211/49557",
             "specs": [
                 "<0.18.2"
             ],
@@ -32510,9 +33188,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29209",
-            "id": "pyup.io-49556",
-            "more_info_path": "/vulnerabilities/CVE-2022-29209/49556",
+            "cve": "CVE-2018-25032",
+            "id": "pyup.io-49422",
+            "more_info_path": "/vulnerabilities/CVE-2018-25032/49422",
             "specs": [
                 "<0.18.2"
             ],
@@ -32520,9 +33198,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29205",
-            "id": "pyup.io-49552",
-            "more_info_path": "/vulnerabilities/CVE-2022-29205/49552",
+            "cve": "CVE-2022-29208",
+            "id": "pyup.io-49555",
+            "more_info_path": "/vulnerabilities/CVE-2022-29208/49555",
             "specs": [
                 "<0.18.2"
             ],
@@ -32530,9 +33208,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-27781",
-            "id": "pyup.io-49537",
-            "more_info_path": "/vulnerabilities/CVE-2022-27781/49537",
+            "cve": "CVE-2022-29213",
+            "id": "pyup.io-49559",
+            "more_info_path": "/vulnerabilities/CVE-2022-29213/49559",
             "specs": [
                 "<0.18.2"
             ],
@@ -32540,9 +33218,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-27776",
-            "id": "pyup.io-49532",
-            "more_info_path": "/vulnerabilities/CVE-2022-27776/49532",
+            "cve": "CVE-2022-27775",
+            "id": "pyup.io-49531",
+            "more_info_path": "/vulnerabilities/CVE-2022-27775/49531",
             "specs": [
                 "<0.18.2"
             ],
@@ -32550,9 +33228,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-22576",
-            "id": "pyup.io-49529",
-            "more_info_path": "/vulnerabilities/CVE-2022-22576/49529",
+            "cve": "CVE-2022-29200",
+            "id": "pyup.io-49547",
+            "more_info_path": "/vulnerabilities/CVE-2022-29200/49547",
             "specs": [
                 "<0.18.2"
             ],
@@ -32560,9 +33238,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-27779",
-            "id": "pyup.io-49535",
-            "more_info_path": "/vulnerabilities/CVE-2022-27779/49535",
+            "cve": "CVE-2022-29207",
+            "id": "pyup.io-49554",
+            "more_info_path": "/vulnerabilities/CVE-2022-29207/49554",
             "specs": [
                 "<0.18.2"
             ],
@@ -32570,9 +33248,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29202",
-            "id": "pyup.io-49549",
-            "more_info_path": "/vulnerabilities/CVE-2022-29202/49549",
+            "cve": "CVE-2022-30115",
+            "id": "pyup.io-49561",
+            "more_info_path": "/vulnerabilities/CVE-2022-30115/49561",
             "specs": [
                 "<0.18.2"
             ],
@@ -32580,9 +33258,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29207",
-            "id": "pyup.io-49554",
-            "more_info_path": "/vulnerabilities/CVE-2022-29207/49554",
+            "cve": "CVE-2022-22576",
+            "id": "pyup.io-49529",
+            "more_info_path": "/vulnerabilities/CVE-2022-22576/49529",
             "specs": [
                 "<0.18.2"
             ],
@@ -32590,9 +33268,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29198",
-            "id": "pyup.io-49545",
-            "more_info_path": "/vulnerabilities/CVE-2022-29198/49545",
+            "cve": "CVE-2022-29199",
+            "id": "pyup.io-49546",
+            "more_info_path": "/vulnerabilities/CVE-2022-29199/49546",
             "specs": [
                 "<0.18.2"
             ],
@@ -32600,9 +33278,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-30115",
-            "id": "pyup.io-49561",
-            "more_info_path": "/vulnerabilities/CVE-2022-30115/49561",
+            "cve": "CVE-2022-29212",
+            "id": "pyup.io-49558",
+            "more_info_path": "/vulnerabilities/CVE-2022-29212/49558",
             "specs": [
                 "<0.18.2"
             ],
@@ -32610,9 +33288,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-27780",
-            "id": "pyup.io-49536",
-            "more_info_path": "/vulnerabilities/CVE-2022-27780/49536",
+            "cve": "CVE-2022-29209",
+            "id": "pyup.io-49556",
+            "more_info_path": "/vulnerabilities/CVE-2022-29209/49556",
             "specs": [
                 "<0.18.2"
             ],
@@ -32620,9 +33298,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-27778",
-            "id": "pyup.io-49534",
-            "more_info_path": "/vulnerabilities/CVE-2022-27778/49534",
+            "cve": "CVE-2022-29193",
+            "id": "pyup.io-49540",
+            "more_info_path": "/vulnerabilities/CVE-2022-29193/49540",
             "specs": [
                 "<0.18.2"
             ],
@@ -32630,9 +33308,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-27774",
-            "id": "pyup.io-49530",
-            "more_info_path": "/vulnerabilities/CVE-2022-27774/49530",
+            "cve": "CVE-2022-27780",
+            "id": "pyup.io-49536",
+            "more_info_path": "/vulnerabilities/CVE-2022-27780/49536",
             "specs": [
                 "<0.18.2"
             ],
@@ -32640,9 +33318,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29206",
-            "id": "pyup.io-49553",
-            "more_info_path": "/vulnerabilities/CVE-2022-29206/49553",
+            "cve": "CVE-2022-29204",
+            "id": "pyup.io-49551",
+            "more_info_path": "/vulnerabilities/CVE-2022-29204/49551",
             "specs": [
                 "<0.18.2"
             ],
@@ -32650,9 +33328,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29193",
-            "id": "pyup.io-49540",
-            "more_info_path": "/vulnerabilities/CVE-2022-29193/49540",
+            "cve": "CVE-2022-29195",
+            "id": "pyup.io-49542",
+            "more_info_path": "/vulnerabilities/CVE-2022-29195/49542",
             "specs": [
                 "<0.18.2"
             ],
@@ -32660,9 +33338,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29197",
-            "id": "pyup.io-49544",
-            "more_info_path": "/vulnerabilities/CVE-2022-29197/49544",
+            "cve": "CVE-2022-29205",
+            "id": "pyup.io-49552",
+            "more_info_path": "/vulnerabilities/CVE-2022-29205/49552",
             "specs": [
                 "<0.18.2"
             ],
@@ -32680,9 +33358,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2018-25032",
-            "id": "pyup.io-49422",
-            "more_info_path": "/vulnerabilities/CVE-2018-25032/49422",
+            "cve": "CVE-2022-27781",
+            "id": "pyup.io-49537",
+            "more_info_path": "/vulnerabilities/CVE-2022-27781/49537",
             "specs": [
                 "<0.18.2"
             ],
@@ -32690,9 +33368,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29208",
-            "id": "pyup.io-49555",
-            "more_info_path": "/vulnerabilities/CVE-2022-29208/49555",
+            "cve": "CVE-2022-27776",
+            "id": "pyup.io-49532",
+            "more_info_path": "/vulnerabilities/CVE-2022-27776/49532",
             "specs": [
                 "<0.18.2"
             ],
@@ -32700,9 +33378,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29200",
-            "id": "pyup.io-49547",
-            "more_info_path": "/vulnerabilities/CVE-2022-29200/49547",
+            "cve": "CVE-2022-29206",
+            "id": "pyup.io-49553",
+            "more_info_path": "/vulnerabilities/CVE-2022-29206/49553",
             "specs": [
                 "<0.18.2"
             ],
@@ -32710,9 +33388,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29203",
-            "id": "pyup.io-49550",
-            "more_info_path": "/vulnerabilities/CVE-2022-29203/49550",
+            "cve": "CVE-2022-27774",
+            "id": "pyup.io-49530",
+            "more_info_path": "/vulnerabilities/CVE-2022-27774/49530",
             "specs": [
                 "<0.18.2"
             ],
@@ -32720,9 +33398,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29212",
-            "id": "pyup.io-49558",
-            "more_info_path": "/vulnerabilities/CVE-2022-29212/49558",
+            "cve": "CVE-2022-29202",
+            "id": "pyup.io-49549",
+            "more_info_path": "/vulnerabilities/CVE-2022-29202/49549",
             "specs": [
                 "<0.18.2"
             ],
@@ -32730,9 +33408,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29201",
-            "id": "pyup.io-49548",
-            "more_info_path": "/vulnerabilities/CVE-2022-29201/49548",
+            "cve": "CVE-2022-29191",
+            "id": "pyup.io-49538",
+            "more_info_path": "/vulnerabilities/CVE-2022-29191/49538",
             "specs": [
                 "<0.18.2"
             ],
@@ -32740,9 +33418,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29191",
-            "id": "pyup.io-49538",
-            "more_info_path": "/vulnerabilities/CVE-2022-29191/49538",
+            "cve": "CVE-2022-29201",
+            "id": "pyup.io-49548",
+            "more_info_path": "/vulnerabilities/CVE-2022-29201/49548",
             "specs": [
                 "<0.18.2"
             ],
@@ -32750,9 +33428,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29199",
-            "id": "pyup.io-49546",
-            "more_info_path": "/vulnerabilities/CVE-2022-29199/49546",
+            "cve": "CVE-2022-27779",
+            "id": "pyup.io-49535",
+            "more_info_path": "/vulnerabilities/CVE-2022-27779/49535",
             "specs": [
                 "<0.18.2"
             ],
@@ -32760,9 +33438,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29211",
-            "id": "pyup.io-49557",
-            "more_info_path": "/vulnerabilities/CVE-2022-29211/49557",
+            "cve": "CVE-2022-27777",
+            "id": "pyup.io-49533",
+            "more_info_path": "/vulnerabilities/CVE-2022-27777/49533",
             "specs": [
                 "<0.18.2"
             ],
@@ -32770,9 +33448,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29213",
-            "id": "pyup.io-49559",
-            "more_info_path": "/vulnerabilities/CVE-2022-29213/49559",
+            "cve": "CVE-2022-29198",
+            "id": "pyup.io-49545",
+            "more_info_path": "/vulnerabilities/CVE-2022-29198/49545",
             "specs": [
                 "<0.18.2"
             ],
@@ -32790,9 +33468,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29204",
-            "id": "pyup.io-49551",
-            "more_info_path": "/vulnerabilities/CVE-2022-29204/49551",
+            "cve": "CVE-2022-29196",
+            "id": "pyup.io-49543",
+            "more_info_path": "/vulnerabilities/CVE-2022-29196/49543",
             "specs": [
                 "<0.18.2"
             ],
@@ -32800,9 +33478,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-27777",
-            "id": "pyup.io-49533",
-            "more_info_path": "/vulnerabilities/CVE-2022-27777/49533",
+            "cve": "CVE-2022-29197",
+            "id": "pyup.io-49544",
+            "more_info_path": "/vulnerabilities/CVE-2022-29197/49544",
             "specs": [
                 "<0.18.2"
             ],
@@ -32810,9 +33488,9 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29196",
-            "id": "pyup.io-49543",
-            "more_info_path": "/vulnerabilities/CVE-2022-29196/49543",
+            "cve": "CVE-2022-29194",
+            "id": "pyup.io-49541",
+            "more_info_path": "/vulnerabilities/CVE-2022-29194/49541",
             "specs": [
                 "<0.18.2"
             ],
@@ -32820,39 +33498,39 @@
         },
         {
             "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29195",
-            "id": "pyup.io-49542",
-            "more_info_path": "/vulnerabilities/CVE-2022-29195/49542",
+            "cve": "CVE-2022-29203",
+            "id": "pyup.io-49550",
+            "more_info_path": "/vulnerabilities/CVE-2022-29203/49550",
             "specs": [
                 "<0.18.2"
             ],
             "v": "<0.18.2"
         },
         {
-            "advisory": "Determined 0.18.2 updates its dependency 'TensorFlow' supported versions to 2.6.5, 2.7.3 and 2.8.2 to include security fixes.",
-            "cve": "CVE-2022-29194",
-            "id": "pyup.io-49541",
-            "more_info_path": "/vulnerabilities/CVE-2022-29194/49541",
+            "advisory": "Determined 0.19.3 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
+            "cve": "CVE-2022-0512",
+            "id": "pyup.io-50982",
+            "more_info_path": "/vulnerabilities/CVE-2022-0512/50982",
             "specs": [
-                "<0.18.2"
+                "<0.19.3"
             ],
-            "v": "<0.18.2"
+            "v": "<0.19.3"
         },
         {
-            "advisory": "Determined 0.19.3 stops using the NPM package 'trim-newlines', preventing a security issue.",
-            "cve": "CVE-2021-33623",
-            "id": "pyup.io-50978",
-            "more_info_path": "/vulnerabilities/CVE-2021-33623/50978",
+            "advisory": "Determined 0.19.3 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
+            "cve": "CVE-2022-0686",
+            "id": "pyup.io-50980",
+            "more_info_path": "/vulnerabilities/CVE-2022-0686/50980",
             "specs": [
                 "<0.19.3"
             ],
             "v": "<0.19.3"
         },
         {
-            "advisory": "Determined 0.19.3 updates its NPM dependency 'ansi-regex' to v3.0.1 to include a security fix.",
-            "cve": "CVE-2021-3807",
-            "id": "pyup.io-50971",
-            "more_info_path": "/vulnerabilities/CVE-2021-3807/50971",
+            "advisory": "Determined 0.19.3 updates its NPM dependency 'terser' to v4.8.1 to include a security fix.",
+            "cve": "CVE-2022-25858",
+            "id": "pyup.io-50977",
+            "more_info_path": "/vulnerabilities/CVE-2022-25858/50977",
             "specs": [
                 "<0.19.3"
             ],
@@ -32869,50 +33547,50 @@
             "v": "<0.19.3"
         },
         {
-            "advisory": "Determined 0.19.3 updates its NPM dependency 'follow-redirects' to v1.15.1 to include security fixes.",
-            "cve": "CVE-2022-0155",
-            "id": "pyup.io-50975",
-            "more_info_path": "/vulnerabilities/CVE-2022-0155/50975",
+            "advisory": "Determined 0.19.3 stops using the NPM package 'trim-newlines', preventing a security issue.",
+            "cve": "CVE-2021-33623",
+            "id": "pyup.io-50978",
+            "more_info_path": "/vulnerabilities/CVE-2021-33623/50978",
             "specs": [
                 "<0.19.3"
             ],
             "v": "<0.19.3"
         },
         {
-            "advisory": "Determined 0.19.3 updates its NPM dependency 'terser' to v4.8.1 to include a security fix.",
-            "cve": "CVE-2022-25858",
-            "id": "pyup.io-50977",
-            "more_info_path": "/vulnerabilities/CVE-2022-25858/50977",
+            "advisory": "Determined 0.19.3 updates its NPM dependency 'follow-redirects' to v1.15.1 to include security fixes.",
+            "cve": "CVE-2022-0155",
+            "id": "pyup.io-50975",
+            "more_info_path": "/vulnerabilities/CVE-2022-0155/50975",
             "specs": [
                 "<0.19.3"
             ],
             "v": "<0.19.3"
         },
         {
-            "advisory": "Determined 0.19.3 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
-            "cve": "CVE-2022-0639",
-            "id": "pyup.io-50979",
-            "more_info_path": "/vulnerabilities/CVE-2022-0639/50979",
+            "advisory": "Determined 0.19.3 updates its NPM dependency 'eventsource' to v1.1.2 to include a security fix.",
+            "cve": "CVE-2022-1650",
+            "id": "pyup.io-50973",
+            "more_info_path": "/vulnerabilities/CVE-2022-1650/50973",
             "specs": [
                 "<0.19.3"
             ],
             "v": "<0.19.3"
         },
         {
-            "advisory": "Determined 0.19.3 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
-            "cve": "CVE-2022-0686",
-            "id": "pyup.io-50980",
-            "more_info_path": "/vulnerabilities/CVE-2022-0686/50980",
+            "advisory": "Determined 0.19.3 updates its NPM dependency 'ansi-regex' to v3.0.1 to include a security fix.",
+            "cve": "CVE-2021-3807",
+            "id": "pyup.io-50971",
+            "more_info_path": "/vulnerabilities/CVE-2021-3807/50971",
             "specs": [
                 "<0.19.3"
             ],
             "v": "<0.19.3"
         },
         {
-            "advisory": "Determined 0.19.3 updates its NPM dependency 'eventsource' to v1.1.2 to include a security fix.",
-            "cve": "CVE-2022-1650",
-            "id": "pyup.io-50973",
-            "more_info_path": "/vulnerabilities/CVE-2022-1650/50973",
+            "advisory": "Determined 0.19.3 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
+            "cve": "CVE-2022-0639",
+            "id": "pyup.io-50979",
+            "more_info_path": "/vulnerabilities/CVE-2022-0639/50979",
             "specs": [
                 "<0.19.3"
             ],
@@ -32928,16 +33606,6 @@
             ],
             "v": "<0.19.3"
         },
-        {
-            "advisory": "Determined 0.19.3 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
-            "cve": "CVE-2022-0691",
-            "id": "pyup.io-50981",
-            "more_info_path": "/vulnerabilities/CVE-2022-0691/50981",
-            "specs": [
-                "<0.19.3"
-            ],
-            "v": "<0.19.3"
-        },
         {
             "advisory": "Determined 0.19.3 updates its NPM dependency 'moment' to v2.29.4 to include a security fix.",
             "cve": "CVE-2022-31129",
@@ -32950,9 +33618,9 @@
         },
         {
             "advisory": "Determined 0.19.3 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
-            "cve": "CVE-2022-0512",
-            "id": "pyup.io-50982",
-            "more_info_path": "/vulnerabilities/CVE-2022-0512/50982",
+            "cve": "CVE-2022-0691",
+            "id": "pyup.io-50981",
+            "more_info_path": "/vulnerabilities/CVE-2022-0691/50981",
             "specs": [
                 "<0.19.3"
             ],
@@ -33098,6 +33766,18 @@
             "v": "<1.4.0"
         }
     ],
+    "digger": [
+        {
+            "advisory": "National Library of the Netherlands digger < 6697d1269d981e35e11f240725b16401b5ce3db5 is affected by a XML External Entity (XXE) vulnerability. Since XML parsing resolves external entities, a malicious XML stream could leak internal files and/or cause a DoS.",
+            "cve": "CVE-2021-44556",
+            "id": "pyup.io-70579",
+            "more_info_path": "/vulnerabilities/CVE-2021-44556/70579",
+            "specs": [
+                "<6697d1269d981e35e11f240725b16401b5ce3db5"
+            ],
+            "v": "<6697d1269d981e35e11f240725b16401b5ce3db5"
+        }
+    ],
     "digitalmarketplace-utils": [
         {
             "advisory": "Digitalmarketplace-utils versions before v22.0.0 included vulnerabilities where untrusted input might result in susceptibility to a cross-site scripting (XSS) exploit.\r\nhttps://github.com/Crown-Commercial-Service/digitalmarketplace-utils/pull/286",
@@ -33810,17 +34490,6 @@
             ],
             "v": "<1.2.2"
         },
-        {
-            "advisory": "django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier.",
-            "cve": "CVE-2011-4136",
-            "id": "pyup.io-33063",
-            "more_info_path": "/vulnerabilities/CVE-2011-4136/33063",
-            "specs": [
-                "<1.2.7",
-                ">=1.3a1,<1.3.1"
-            ],
-            "v": "<1.2.7,>=1.3a1,<1.3.1"
-        },
         {
             "advisory": "The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code.",
             "cve": "CVE-2011-4140",
@@ -33865,6 +34534,17 @@
             ],
             "v": "<1.2.7,>=1.3a1,<1.3.1"
         },
+        {
+            "advisory": "django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier.",
+            "cve": "CVE-2011-4136",
+            "id": "pyup.io-33063",
+            "more_info_path": "/vulnerabilities/CVE-2011-4136/33063",
+            "specs": [
+                "<1.2.7",
+                ">=1.3a1,<1.3.1"
+            ],
+            "v": "<1.2.7,>=1.3a1,<1.3.1"
+        },
         {
             "advisory": "The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.",
             "cve": "CVE-2012-3442",
@@ -33962,10 +34642,10 @@
             "v": "<1.4.14,>=1.5a1,<1.5.9,>=1.6a1,<1.6.6,>=1.7a1,<1.7rc3"
         },
         {
-            "advisory": "Django 1.4.14, 1.5.9, 1.6.6 and 1.7rc3 include a fix for CVE-2014-0481: The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name.",
-            "cve": "CVE-2014-0481",
-            "id": "pyup.io-35514",
-            "more_info_path": "/vulnerabilities/CVE-2014-0481/35514",
+            "advisory": "The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship between models, which allows remote authenticated users to obtain sensitive information via a to_field parameter in a popup action to an admin change form page, as demonstrated by a /admin/auth/user/?pop=1&t=password URI. See: CVE-2014-0483.",
+            "cve": "CVE-2014-0483",
+            "id": "pyup.io-35516",
+            "more_info_path": "/vulnerabilities/CVE-2014-0483/35516",
             "specs": [
                 "<1.4.14",
                 ">=1.5a1,<1.5.9",
@@ -33975,10 +34655,10 @@
             "v": "<1.4.14,>=1.5a1,<1.5.9,>=1.6a1,<1.6.6,>=1.7a1,<1.7rc3"
         },
         {
-            "advisory": "The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship between models, which allows remote authenticated users to obtain sensitive information via a to_field parameter in a popup action to an admin change form page, as demonstrated by a /admin/auth/user/?pop=1&t=password URI. See: CVE-2014-0483.",
-            "cve": "CVE-2014-0483",
-            "id": "pyup.io-35516",
-            "more_info_path": "/vulnerabilities/CVE-2014-0483/35516",
+            "advisory": "Django 1.4.14, 1.5.9, 1.6.6 and 1.7rc3 include a fix for CVE-2014-0482: The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.",
+            "cve": "CVE-2014-0482",
+            "id": "pyup.io-35515",
+            "more_info_path": "/vulnerabilities/CVE-2014-0482/35515",
             "specs": [
                 "<1.4.14",
                 ">=1.5a1,<1.5.9",
@@ -33988,10 +34668,10 @@
             "v": "<1.4.14,>=1.5a1,<1.5.9,>=1.6a1,<1.6.6,>=1.7a1,<1.7rc3"
         },
         {
-            "advisory": "Django 1.4.14, 1.5.9, 1.6.6 and 1.7rc3 include a fix for CVE-2014-0482: The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.",
-            "cve": "CVE-2014-0482",
-            "id": "pyup.io-35515",
-            "more_info_path": "/vulnerabilities/CVE-2014-0482/35515",
+            "advisory": "Django 1.4.14, 1.5.9, 1.6.6 and 1.7rc3 include a fix for CVE-2014-0481: The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name.",
+            "cve": "CVE-2014-0481",
+            "id": "pyup.io-35514",
+            "more_info_path": "/vulnerabilities/CVE-2014-0481/35514",
             "specs": [
                 "<1.4.14",
                 ">=1.5a1,<1.5.9",
@@ -34249,10 +34929,10 @@
             "v": "<2.2.26,>=3.0a1,<3.2.11,>=4.0a1,<4.0.1"
         },
         {
-            "advisory": "Django 2.2.27, 3.2.12 and 4.0.2 include a fix for CVE-2022-23833: Denial-of-service possibility in file uploads.\r\nhttps://www.djangoproject.com/weblog/2022/feb/01/security-releases",
-            "cve": "CVE-2022-23833",
-            "id": "pyup.io-44741",
-            "more_info_path": "/vulnerabilities/CVE-2022-23833/44741",
+            "advisory": "The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.",
+            "cve": "CVE-2022-22818",
+            "id": "pyup.io-44742",
+            "more_info_path": "/vulnerabilities/CVE-2022-22818/44742",
             "specs": [
                 "<2.2.27",
                 ">=3.0a1,<3.2.12",
@@ -34261,10 +34941,10 @@
             "v": "<2.2.27,>=3.0a1,<3.2.12,>=4.0a1,<4.0.2"
         },
         {
-            "advisory": "The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.",
-            "cve": "CVE-2022-22818",
-            "id": "pyup.io-44742",
-            "more_info_path": "/vulnerabilities/CVE-2022-22818/44742",
+            "advisory": "Django 2.2.27, 3.2.12 and 4.0.2 include a fix for CVE-2022-23833: Denial-of-service possibility in file uploads.\r\nhttps://www.djangoproject.com/weblog/2022/feb/01/security-releases",
+            "cve": "CVE-2022-23833",
+            "id": "pyup.io-44741",
+            "more_info_path": "/vulnerabilities/CVE-2022-23833/44741",
             "specs": [
                 "<2.2.27",
                 ">=3.0a1,<3.2.12",
@@ -34367,7 +35047,7 @@
             "v": "<3.2.19,>=4.0a1,<4.1.9,>=4.2a1,<4.2.1"
         },
         {
-            "advisory": "Django 3.2.21, 4.1.11 and 4.2.5 include a fix for CVE-2023-41164: Potential denial of service vulnerability in django.utils.encoding.uri_to_iri().\r\nhttps://www.djangoproject.com/weblog/2023/sep/04/security-releases",
+            "advisory": "Affected versions of Django are vulnerable to potential Denial of Service via certain inputs with a very large number of Unicode characters in django.utils.encoding.uri_to_iri().",
             "cve": "CVE-2023-41164",
             "id": "pyup.io-60956",
             "more_info_path": "/vulnerabilities/CVE-2023-41164/60956",
@@ -34379,7 +35059,7 @@
             "v": "<3.2.21,>=4.0a1,<4.1.11,>=4.2a1,<4.2.5"
         },
         {
-            "advisory": "Django 4.2.6, 4.1.12 and 3.2.22 include a fix for CVE-2023-43665: Denial-of-service possibility in django.utils.text.Truncator. The django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.\r\nhttps://www.djangoproject.com/weblog/2023/oct/04/security-releases",
+            "advisory": "Affected versions of Django are vulnerable to Denial-of-Service via django.utils.text.Truncator. The django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.",
             "cve": "CVE-2023-43665",
             "id": "pyup.io-61586",
             "more_info_path": "/vulnerabilities/CVE-2023-43665/61586",
@@ -34415,7 +35095,7 @@
             "v": "<3.2.24,>=4.0a1,<4.2.10,>=5.0a1,<5.0.2"
         },
         {
-            "advisory": "Affected versions of Django are vulnerable to potential regular expression denial-of-service. django.utils.text.Truncator.words() method (with html=True) and truncatewords_html template filter were subject to a potential regular expression denial-of-service attack using a suitably crafted string (follow up to CVE-2019-14232 and CVE-2023-43665).",
+            "advisory": "Affected versions of Django are vulnerable to potential regular expression denial-of-service (REDoS). django.utils.text.Truncator.words() method (with html=True) and truncatewords_html template filter were subject to a potential regular expression denial-of-service attack using a suitably crafted string (follow up to CVE-2019-14232 and CVE-2023-43665).",
             "cve": "CVE-2024-27351",
             "id": "pyup.io-65771",
             "more_info_path": "/vulnerabilities/CVE-2024-27351/65771",
@@ -34427,20 +35107,20 @@
             "v": "<3.2.25,>=4.0a1,<4.2.11,>=5.0a1,<5.0.3"
         },
         {
-            "advisory": "bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a (1) .po or (2) .mo file.",
-            "cve": "CVE-2007-0404",
-            "id": "pyup.io-61151",
-            "more_info_path": "/vulnerabilities/CVE-2007-0404/61151",
+            "advisory": "The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.",
+            "cve": "CVE-2007-0405",
+            "id": "pyup.io-61152",
+            "more_info_path": "/vulnerabilities/CVE-2007-0405/61152",
             "specs": [
                 "<=0.95"
             ],
             "v": "<=0.95"
         },
         {
-            "advisory": "The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.",
-            "cve": "CVE-2007-0405",
-            "id": "pyup.io-61152",
-            "more_info_path": "/vulnerabilities/CVE-2007-0405/61152",
+            "advisory": "bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a (1) .po or (2) .mo file.",
+            "cve": "CVE-2007-0404",
+            "id": "pyup.io-61151",
+            "more_info_path": "/vulnerabilities/CVE-2007-0404/61151",
             "specs": [
                 "<=0.95"
             ],
@@ -35014,7 +35694,7 @@
             "v": ">=3.2a1,<3.2.1,<2.2.21,>=3.0a1,<3.1.9"
         },
         {
-            "advisory": "Django 3.2.20, 4.1.10 and 4.2.3 include a fix for CVE-2023-36053: EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.\r\nhttps://www.djangoproject.com/weblog/2023/jul/03/security-releases",
+            "advisory": "Affected versions of Django are vulnerable to a potential ReDoS (regular expression denial of service) in EmailValidator and URLValidator via a very large number of domain name labels of emails and URLs.",
             "cve": "CVE-2023-36053",
             "id": "pyup.io-59293",
             "more_info_path": "/vulnerabilities/CVE-2023-36053/59293",
@@ -35230,7 +35910,7 @@
     ],
     "django-ajax-utilities": [
         {
-            "advisory": "Django-ajax-utilities 1.2.9 includes a fix for CVE-2017-20182: This issue affects the function Pagination of the file django_ajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. \r\n#NOTE: The data we include in this advisory differs from the publicly available on nvd.nist.gov. The patch commit was issued for version 1.2.9.\r\nhttps://github.com/vikingco/django-ajax-utilities/pull/29/commits/329eb1dd1580ca1f9d4f95bc69939833226515c9",
+            "advisory": "Django-ajax-utilities 1.2.9 includes a fix for CVE-2017-20182: This issue affects the function Pagination of the file django_ajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument URL leads to cross-site scripting. The attack may be initiated remotely. \r\n#NOTE: The data we include in this advisory differs from the publicly available on nvd.nist.gov. The patch commit was issued for version 1.2.9.\r\nhttps://github.com/vikingco/django-ajax-utilities/pull/29/commits/329eb1dd1580ca1f9d4f95bc69939833226515c9",
             "cve": "CVE-2017-20182",
             "id": "pyup.io-53607",
             "more_info_path": "/vulnerabilities/CVE-2017-20182/53607",
@@ -35896,9 +36576,9 @@
     "django-dsfr": [
         {
             "advisory": "Django-dsfr 0.6.2 updates its dependency 'Django' to v3.2.12 to include security fixes.",
-            "cve": "CVE-2022-23833",
-            "id": "pyup.io-45309",
-            "more_info_path": "/vulnerabilities/CVE-2022-23833/45309",
+            "cve": "CVE-2021-45116",
+            "id": "pyup.io-45311",
+            "more_info_path": "/vulnerabilities/CVE-2021-45116/45311",
             "specs": [
                 "<0.6.2"
             ],
@@ -35906,9 +36586,9 @@
         },
         {
             "advisory": "Django-dsfr 0.6.2 updates its dependency 'Django' to v3.2.12 to include security fixes.",
-            "cve": "CVE-2021-45452",
-            "id": "pyup.io-45310",
-            "more_info_path": "/vulnerabilities/CVE-2021-45452/45310",
+            "cve": "CVE-2022-23833",
+            "id": "pyup.io-45309",
+            "more_info_path": "/vulnerabilities/CVE-2022-23833/45309",
             "specs": [
                 "<0.6.2"
             ],
@@ -35916,9 +36596,9 @@
         },
         {
             "advisory": "Django-dsfr 0.6.2 updates its dependency 'Django' to v3.2.12 to include security fixes.",
-            "cve": "CVE-2021-45116",
-            "id": "pyup.io-45311",
-            "more_info_path": "/vulnerabilities/CVE-2021-45116/45311",
+            "cve": "CVE-2021-45452",
+            "id": "pyup.io-45310",
+            "more_info_path": "/vulnerabilities/CVE-2021-45452/45310",
             "specs": [
                 "<0.6.2"
             ],
@@ -36193,6 +36873,26 @@
                 "<2.15.2"
             ],
             "v": "<2.15.2"
+        },
+        {
+            "advisory": "Django-grappelli version 3.0.4 updates its grunt dependency to version 1.5.3 to address a path traversal vulnerability identified in CVE-2022-0436, which affects versions prior to 1.5.2.",
+            "cve": "CVE-2022-0436",
+            "id": "pyup.io-70378",
+            "more_info_path": "/vulnerabilities/CVE-2022-0436/70378",
+            "specs": [
+                "<3.0.4"
+            ],
+            "v": "<3.0.4"
+        },
+        {
+            "advisory": "Django-grappelli version 3.0.4 has updated its grunt dependency to version 1.5.3. This update addresses a race condition vulnerability identified in CVE-2022-1537, which impacts versions prior to 1.5.2.",
+            "cve": "CVE-2022-1537",
+            "id": "pyup.io-70380",
+            "more_info_path": "/vulnerabilities/CVE-2022-1537/70380",
+            "specs": [
+                "<3.0.4"
+            ],
+            "v": "<3.0.4"
         }
     ],
     "django-guts": [
@@ -36287,20 +36987,20 @@
     ],
     "django-helpdesk": [
         {
-            "advisory": "Django-helpdesk 0.3.1 includes a fix for CVE-2021-3945: Django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').\r\nhttps://github.com/django-helpdesk/django-helpdesk/commit/2c7065e0c4296e0c692fb4a7ee19c7357583af30\r\nhttps://huntr.dev/bounties/745f483c-70ed-441f-ab2e-7ac1305439a4",
-            "cve": "CVE-2021-3945",
-            "id": "pyup.io-42683",
-            "more_info_path": "/vulnerabilities/CVE-2021-3945/42683",
+            "advisory": "Django-helpdesk 0.3.1 includes a fix for CVE-2021-3950: Django-helpdesk is vulnerable to improper neutralization of input during web page generation ('Cross-site Scripting').\r\nhttps://huntr.dev/bounties/4d7a5fdd-b2de-467a-ade0-3f2fb386638e\r\nhttps://github.com/django-helpdesk/django-helpdesk/commit/04483bdac3b5196737516398b5ce0383875a5c60",
+            "cve": "CVE-2021-3950",
+            "id": "pyup.io-42743",
+            "more_info_path": "/vulnerabilities/CVE-2021-3950/42743",
             "specs": [
                 "<0.3.1"
             ],
             "v": "<0.3.1"
         },
         {
-            "advisory": "Django-helpdesk 0.3.1 includes a fix for CVE-2021-3950: Django-helpdesk is vulnerable to improper neutralization of input during web page generation ('Cross-site Scripting').\r\nhttps://huntr.dev/bounties/4d7a5fdd-b2de-467a-ade0-3f2fb386638e\r\nhttps://github.com/django-helpdesk/django-helpdesk/commit/04483bdac3b5196737516398b5ce0383875a5c60",
-            "cve": "CVE-2021-3950",
-            "id": "pyup.io-42743",
-            "more_info_path": "/vulnerabilities/CVE-2021-3950/42743",
+            "advisory": "Django-helpdesk 0.3.1 includes a fix for CVE-2021-3945: Django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').\r\nhttps://github.com/django-helpdesk/django-helpdesk/commit/2c7065e0c4296e0c692fb4a7ee19c7357583af30\r\nhttps://huntr.dev/bounties/745f483c-70ed-441f-ab2e-7ac1305439a4",
+            "cve": "CVE-2021-3945",
+            "id": "pyup.io-42683",
+            "more_info_path": "/vulnerabilities/CVE-2021-3945/42683",
             "specs": [
                 "<0.3.1"
             ],
@@ -38284,6 +38984,16 @@
                 "<1.1.0"
             ],
             "v": "<1.1.0"
+        },
+        {
+            "advisory": "Django-sql-explorer version 4.2.0b1 addresses a regex-injection vulnerability, enhancing security measures within the application.",
+            "cve": "PVE-2024-70482",
+            "id": "pyup.io-70482",
+            "more_info_path": "/vulnerabilities/PVE-2024-70482/70482",
+            "specs": [
+                "<4.2.0"
+            ],
+            "v": "<4.2.0"
         }
     ],
     "django-sticky-uploads": [
@@ -39661,20 +40371,20 @@
             "v": "<1.0.12,>=1.1.0,<1.1.113,>=1.2.0,<1.2.65"
         },
         {
-            "advisory": "Docassemble version 1.4.97 addresses a critical security flaw, impacting versions from 1.4.53 to 1.4.96, where file contents within the filesystem could potentially be exposed. Given the high severity of this issue, users are strongly advised to update to the latest version immediately to secure their systems.",
-            "cve": "PVE-2024-65732",
-            "id": "pyup.io-65732",
-            "more_info_path": "/vulnerabilities/PVE-2024-65732/65732",
+            "advisory": "Docassemble version 1.4.97 rectifies a security vulnerability present in versions up to 1.4.96. This flaw allowed for the creation of open redirect URLs.\r\nhttps://github.com/jhpyle/docassemble/commit/4801ac7ff7c90df00ac09523077930cdb6dea2aa",
+            "cve": "PVE-2024-65739",
+            "id": "pyup.io-65739",
+            "more_info_path": "/vulnerabilities/PVE-2024-65739/65739",
             "specs": [
                 "<1.4.97"
             ],
             "v": "<1.4.97"
         },
         {
-            "advisory": "Docassemble version 1.4.97 rectifies a security vulnerability present in versions up to 1.4.96. This flaw allowed for the creation of open redirect URLs.\r\nhttps://github.com/jhpyle/docassemble/commit/4801ac7ff7c90df00ac09523077930cdb6dea2aa",
-            "cve": "PVE-2024-65739",
-            "id": "pyup.io-65739",
-            "more_info_path": "/vulnerabilities/PVE-2024-65739/65739",
+            "advisory": "Docassemble version 1.4.97 addresses a critical security flaw, impacting versions from 1.4.53 to 1.4.96, where file contents within the filesystem could potentially be exposed. Given the high severity of this issue, users are strongly advised to update to the latest version immediately to secure their systems.",
+            "cve": "PVE-2024-65732",
+            "id": "pyup.io-65732",
+            "more_info_path": "/vulnerabilities/PVE-2024-65732/65732",
             "specs": [
                 "<1.4.97"
             ],
@@ -39691,6 +40401,50 @@
             "v": "<1.4.97"
         }
     ],
+    "docassemble-base": [
+        {
+            "advisory": "Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch.",
+            "cve": "CVE-2023-46046",
+            "id": "pyup.io-68481",
+            "more_info_path": "/vulnerabilities/CVE-2023-46046/68481",
+            "specs": [
+                ">=1.4.53,<1.4.97"
+            ],
+            "v": ">=1.4.53,<1.4.97"
+        }
+    ],
+    "docassemble-webapp": [
+        {
+            "advisory": "Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, a user could type HTML into a field, including the field for the user's name, and then that HTML could be displayed on the screen as HTML. The vulnerability has been patched in version 1.4.97 of the master branch.",
+            "cve": "CVE-2023-45925",
+            "id": "pyup.io-68485",
+            "more_info_path": "/vulnerabilities/CVE-2023-45925/68485",
+            "specs": [
+                ">=0,<1.4.97"
+            ],
+            "v": ">=0,<1.4.97"
+        },
+        {
+            "advisory": "Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch.",
+            "cve": "CVE-2023-46049",
+            "id": "pyup.io-68483",
+            "more_info_path": "/vulnerabilities/CVE-2023-46049/68483",
+            "specs": [
+                ">=0,<1.4.97"
+            ],
+            "v": ">=0,<1.4.97"
+        },
+        {
+            "advisory": "Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch.",
+            "cve": "CVE-2023-46046",
+            "id": "pyup.io-68482",
+            "more_info_path": "/vulnerabilities/CVE-2023-46046/68482",
+            "specs": [
+                ">=1.4.53,<1.4.97"
+            ],
+            "v": ">=1.4.53,<1.4.97"
+        }
+    ],
     "doccano": [
         {
             "advisory": "Doccano 1.0.1 adds X-Frame-Options header to prevent clickjacking.",
@@ -39811,6 +40565,16 @@
                 "<1.1.34"
             ],
             "v": "<1.1.34"
+        },
+        {
+            "advisory": "Docker-tidy version 2.1.7 has upgraded its idna dependency to version 3.7 in response to CVE-2024-3651.",
+            "cve": "CVE-2024-3651",
+            "id": "pyup.io-67893",
+            "more_info_path": "/vulnerabilities/CVE-2024-3651/67893",
+            "specs": [
+                "<2.1.7"
+            ],
+            "v": "<2.1.7"
         }
     ],
     "dockerspawner": [
@@ -39850,6 +40614,16 @@
         }
     ],
     "dogtag-pki": [
+        {
+            "advisory": "It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.",
+            "cve": "CVE-2017-7537",
+            "id": "pyup.io-67544",
+            "more_info_path": "/vulnerabilities/CVE-2017-7537/67544",
+            "specs": [
+                "<10.6.4"
+            ],
+            "v": "<10.6.4"
+        },
         {
             "advisory": "Dogtag-pki 10.9.0-b1 includes a fix for CVE-2020-15720: The pki.client.PKIConnection class did not enable python-requests certificate validation. Since the verify parameter was hard-coded in all request functions, it was not possible to override the setting. As a result, tools making use of this class, such as the pki-server command, may have been vulnerable to Person-in-the-Middle attacks in certain non-localhost use cases.\r\nhttps://github.com/dogtagpki/pki/commit/50c23ec146ee9abf28c9de87a5f7787d495f0b72",
             "cve": "CVE-2020-15720",
@@ -39879,6 +40653,36 @@
                 "<=10.9.0"
             ],
             "v": "<=10.9.0"
+        },
+        {
+            "advisory": "A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.",
+            "cve": "CVE-2019-10146",
+            "id": "pyup.io-70508",
+            "more_info_path": "/vulnerabilities/CVE-2019-10146/70508",
+            "specs": [
+                ">=10.0,<=10.7.3"
+            ],
+            "v": ">=10.0,<=10.7.3"
+        },
+        {
+            "advisory": "A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.",
+            "cve": "CVE-2019-10180",
+            "id": "pyup.io-70509",
+            "more_info_path": "/vulnerabilities/CVE-2019-10180/70509",
+            "specs": [
+                ">=10.0,<=10.8.3"
+            ],
+            "v": ">=10.0,<=10.8.3"
+        },
+        {
+            "advisory": "A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.",
+            "cve": "CVE-2019-10221",
+            "id": "pyup.io-70510",
+            "more_info_path": "/vulnerabilities/CVE-2019-10221/70510",
+            "specs": [
+                ">=10.0,<=10.8.3"
+            ],
+            "v": ">=10.0,<=10.8.3"
         }
     ],
     "domonic": [
@@ -40277,6 +41081,16 @@
                 "<0.6.0"
             ],
             "v": "<0.6.0"
+        },
+        {
+            "advisory": "DuckDB <=0.9.2 and DuckDB extension-template <=0.9.2 are vulnerable to malicious extension injection via the custom extension feature.",
+            "cve": "CVE-2024-22682",
+            "id": "pyup.io-70404",
+            "more_info_path": "/vulnerabilities/CVE-2024-22682/70404",
+            "specs": [
+                "<0.9.3.dev6"
+            ],
+            "v": "<0.9.3.dev6"
         }
     ],
     "dulwich": [
@@ -40311,6 +41125,18 @@
             "v": ">=0,<0.9.9"
         }
     ],
+    "duplicity": [
+        {
+            "advisory": "The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.",
+            "cve": "CVE-2007-5201",
+            "id": "pyup.io-67545",
+            "more_info_path": "/vulnerabilities/CVE-2007-5201/67545",
+            "specs": [
+                "<0.4.9"
+            ],
+            "v": "<0.4.9"
+        }
+    ],
     "duty-board": [
         {
             "advisory": "Duty-board 0.0.1a2 updates its NPM dependency 'json5' to v1.0.2 to include a security fix.",
@@ -40519,20 +41345,20 @@
     ],
     "ecdsa": [
         {
-            "advisory": "An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service. See CVE-2019-14853.",
-            "cve": "CVE-2019-14853",
-            "id": "pyup.io-37762",
-            "more_info_path": "/vulnerabilities/CVE-2019-14853/37762",
+            "advisory": "A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions. See: CVE-2019-14859.",
+            "cve": "CVE-2019-14859",
+            "id": "pyup.io-37763",
+            "more_info_path": "/vulnerabilities/CVE-2019-14859/37763",
             "specs": [
                 "<0.13.3"
             ],
             "v": "<0.13.3"
         },
         {
-            "advisory": "A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions. See: CVE-2019-14859.",
-            "cve": "CVE-2019-14859",
-            "id": "pyup.io-37763",
-            "more_info_path": "/vulnerabilities/CVE-2019-14859/37763",
+            "advisory": "An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service. See CVE-2019-14853.",
+            "cve": "CVE-2019-14853",
+            "id": "pyup.io-37762",
+            "more_info_path": "/vulnerabilities/CVE-2019-14853/37762",
             "specs": [
                 "<0.13.3"
             ],
@@ -40617,6 +41443,18 @@
             "v": "<1.0.5"
         }
     ],
+    "edumfa": [
+        {
+            "advisory": "Edumfa version 2.0.2 has updated its dependency on the idna library to version 3.7 in response to the security vulnerability detailed in CVE-2024-3651.",
+            "cve": "CVE-2024-3651",
+            "id": "pyup.io-70489",
+            "more_info_path": "/vulnerabilities/CVE-2024-3651/70489",
+            "specs": [
+                "<2.0.2"
+            ],
+            "v": "<2.0.2"
+        }
+    ],
     "edx-celeryutils": [
         {
             "advisory": "Edx-celeryutils updates its Jinja2 dependency from version 2.9.6 to 2.10.1 to address the security vulnerability CVE-2019-10906.\r\nhttps://github.com/openedx/edx-celeryutils/commit/d38e5f5866917346a8a503b42ad1129f55ee3b4d",
@@ -40724,6 +41562,42 @@
             "v": ">=1.10.0,<=1.26.0"
         }
     ],
+    "electrum": [
+        {
+            "advisory": "The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a user pastes code that they do not understand and (2) code pasted by a physically proximate attacker at an unattended workstation, which makes it easier for attackers to steal Bitcoin via hook code that runs at a later time when the wallet password has been entered, a different vulnerability than CVE-2018-1000022.",
+            "cve": "CVE-2018-6353",
+            "id": "pyup.io-67601",
+            "more_info_path": "/vulnerabilities/CVE-2018-6353/67601",
+            "specs": [
+                "<2.9.4",
+                ">=3.0,<3.0.5"
+            ],
+            "v": "<2.9.4,>=3.0,<3.0.5"
+        },
+        {
+            "advisory": "paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR code data). On Windows, this can lead to capture of credentials over SMB. On Linux and UNIX, it can lead to a denial of service by specifying the /dev/zero filename.",
+            "cve": "CVE-2022-31246",
+            "id": "pyup.io-70610",
+            "more_info_path": "/vulnerabilities/CVE-2022-31246/70610",
+            "specs": [
+                "<4.2.2"
+            ],
+            "v": "<4.2.2"
+        }
+    ],
+    "electrum-python": [
+        {
+            "advisory": "The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a user pastes code that they do not understand and (2) code pasted by a physically proximate attacker at an unattended workstation, which makes it easier for attackers to steal Bitcoin via hook code that runs at a later time when the wallet password has been entered, a different vulnerability than CVE-2018-1000022.",
+            "cve": "CVE-2018-6353",
+            "id": "pyup.io-67602",
+            "more_info_path": "/vulnerabilities/CVE-2018-6353/67602",
+            "specs": [
+                "<2.9.4",
+                ">=3.0,<3.0.5"
+            ],
+            "v": "<2.9.4,>=3.0,<3.0.5"
+        }
+    ],
     "electrumsv-secp256k1": [
         {
             "advisory": "Electrumsv-secp256k1 version 8.0.0 makes build system support new GitHub & PyPI security requirements.",
@@ -41092,20 +41966,20 @@
     ],
     "embedchain": [
         {
-            "advisory": "The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.",
-            "cve": "CVE-2024-23732",
-            "id": "pyup.io-66692",
-            "more_info_path": "/vulnerabilities/CVE-2024-23732/66692",
+            "advisory": "The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.",
+            "cve": "CVE-2024-23731",
+            "id": "pyup.io-66691",
+            "more_info_path": "/vulnerabilities/CVE-2024-23731/66691",
             "specs": [
                 "<0.1.57"
             ],
             "v": "<0.1.57"
         },
         {
-            "advisory": "The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.",
-            "cve": "CVE-2024-23731",
-            "id": "pyup.io-66691",
-            "more_info_path": "/vulnerabilities/CVE-2024-23731/66691",
+            "advisory": "The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.",
+            "cve": "CVE-2024-23732",
+            "id": "pyup.io-66692",
+            "more_info_path": "/vulnerabilities/CVE-2024-23732/66692",
             "specs": [
                 "<0.1.57"
             ],
@@ -41113,16 +41987,6 @@
         }
     ],
     "embedded-topic-model": [
-        {
-            "advisory": "Embedded-topic-model 1.2.0 updates its dependency 'scipy' to versions '>=1.11.*' to include security fixes.\r\nhttps://github.com/lffloyd/embedded-topic-model/commit/331fc0",
-            "cve": "CVE-2023-29824",
-            "id": "pyup.io-61024",
-            "more_info_path": "/vulnerabilities/CVE-2023-29824/61024",
-            "specs": [
-                "<1.2.0"
-            ],
-            "v": "<1.2.0"
-        },
         {
             "advisory": "Embedded-topic-model 1.2.0 updates its dependency 'skicit-learn' to versions '>=1.3.*' to include a security fix.\r\nhttps://github.com/lffloyd/embedded-topic-model/commit/331fc0",
             "cve": "PVE-2022-52255",
@@ -41142,6 +42006,16 @@
                 "<1.2.0"
             ],
             "v": "<1.2.0"
+        },
+        {
+            "advisory": "Embedded-topic-model 1.2.0 updates its dependency 'scipy' to versions '>=1.11.*' to include security fixes.\r\nhttps://github.com/lffloyd/embedded-topic-model/commit/331fc0",
+            "cve": "CVE-2023-29824",
+            "id": "pyup.io-61024",
+            "more_info_path": "/vulnerabilities/CVE-2023-29824/61024",
+            "specs": [
+                "<1.2.0"
+            ],
+            "v": "<1.2.0"
         }
     ],
     "embody-codec": [
@@ -41182,20 +42056,20 @@
     ],
     "encapsia-api": [
         {
-            "advisory": "Encapsia-api 0.2.9 updates its dependency 'py' to v1.10.0 to include a security fix.",
-            "cve": "CVE-2020-29651",
-            "id": "pyup.io-44972",
-            "more_info_path": "/vulnerabilities/CVE-2020-29651/44972",
+            "advisory": "Encapsia-api 0.2.9 updates its dependency 'cryptography' to v3.4.6 to include a security fix.",
+            "cve": "CVE-2020-36242",
+            "id": "pyup.io-39689",
+            "more_info_path": "/vulnerabilities/CVE-2020-36242/39689",
             "specs": [
                 "<0.2.9"
             ],
             "v": "<0.2.9"
         },
         {
-            "advisory": "Encapsia-api 0.2.9 updates its dependency 'cryptography' to v3.4.6 to include a security fix.",
-            "cve": "CVE-2020-36242",
-            "id": "pyup.io-39689",
-            "more_info_path": "/vulnerabilities/CVE-2020-36242/39689",
+            "advisory": "Encapsia-api 0.2.9 updates its dependency 'py' to v1.10.0 to include a security fix.",
+            "cve": "CVE-2020-29651",
+            "id": "pyup.io-44972",
+            "more_info_path": "/vulnerabilities/CVE-2020-29651/44972",
             "specs": [
                 "<0.2.9"
             ],
@@ -41204,20 +42078,20 @@
     ],
     "encapsia-cli": [
         {
-            "advisory": "Encapsia-cli 0.5.2 updates its dependency 'httpie' requirement to ^3.1.0 to include security fixes.",
-            "cve": "CVE-2022-24737",
-            "id": "pyup.io-52522",
-            "more_info_path": "/vulnerabilities/CVE-2022-24737/52522",
+            "advisory": "Encapsia-cli 0.5.2 includes a fix for CVE-2007-4559: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
+            "cve": "CVE-2007-4559",
+            "id": "pyup.io-52524",
+            "more_info_path": "/vulnerabilities/CVE-2007-4559/52524",
             "specs": [
                 "<0.5.2"
             ],
             "v": "<0.5.2"
         },
         {
-            "advisory": "Encapsia-cli 0.5.2 includes a fix for CVE-2007-4559: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
-            "cve": "CVE-2007-4559",
-            "id": "pyup.io-52524",
-            "more_info_path": "/vulnerabilities/CVE-2007-4559/52524",
+            "advisory": "Encapsia-cli 0.5.2 updates its dependency 'certifi' to v2022.12.7 to include a security fix.",
+            "cve": "CVE-2022-23491",
+            "id": "pyup.io-52430",
+            "more_info_path": "/vulnerabilities/CVE-2022-23491/52430",
             "specs": [
                 "<0.5.2"
             ],
@@ -41234,10 +42108,10 @@
             "v": "<0.5.2"
         },
         {
-            "advisory": "Encapsia-cli 0.5.2 updates its dependency 'certifi' to v2022.12.7 to include a security fix.",
-            "cve": "CVE-2022-23491",
-            "id": "pyup.io-52430",
-            "more_info_path": "/vulnerabilities/CVE-2022-23491/52430",
+            "advisory": "Encapsia-cli 0.5.2 updates its dependency 'httpie' requirement to ^3.1.0 to include security fixes.",
+            "cve": "CVE-2022-24737",
+            "id": "pyup.io-52522",
+            "more_info_path": "/vulnerabilities/CVE-2022-24737/52522",
             "specs": [
                 "<0.5.2"
             ],
@@ -41292,6 +42166,18 @@
             "v": "<0.11.0"
         }
     ],
+    "entropy-pooling": [
+        {
+            "advisory": "Entropy-pooling version 1.0.4 updates its Pillow dependency from version 10.2.0 to 10.3.0 in response to the security concerns identified in CVE-2024-28219.",
+            "cve": "CVE-2024-28219",
+            "id": "pyup.io-70377",
+            "more_info_path": "/vulnerabilities/CVE-2024-28219/70377",
+            "specs": [
+                "<1.0.4"
+            ],
+            "v": "<1.0.4"
+        }
+    ],
     "envd": [
         {
             "advisory": "Envd 0.3.45 updates its Go dependency 'go-git' to v5.11.0 to include a security fix.",
@@ -41478,6 +42364,16 @@
                 "<=2021.9.1"
             ],
             "v": "<=2021.9.1"
+        },
+        {
+            "advisory": "ESPHome is a system to control your ESP8266/ESP32. A security misconfiguration in the edit configuration file API in the dashboard component of ESPHome version 2023.12.9 (command line installation) allows authenticated remote attackers to read and write arbitrary files under the configuration directory rendering remote code execution possible.  This vulnerability is patched in 2024.2.1.",
+            "cve": "CVE-2023-39306",
+            "id": "pyup.io-68488",
+            "more_info_path": "/vulnerabilities/CVE-2023-39306/68488",
+            "specs": [
+                ">=2023.12.9,<2024.2.1"
+            ],
+            "v": ">=2023.12.9,<2024.2.1"
         }
     ],
     "esptool": [
@@ -41514,6 +42410,16 @@
                 ">=0,<4.2.0"
             ],
             "v": ">=0,<4.2.0"
+        },
+        {
+            "advisory": "Ethereum ABI (Application Binary Interface) library versions before 5.0.1 are susceptible to a vulnerability due to a recursive pointer issue. This flaw can trigger an OverflowError when decoding specially crafted payloads. The vulnerability specifically arises when attempting to decode deep nested arrays encoded in hex, as demonstrated by inputs causing Python integers to exceed the size that can be converted to C ssize_t. This issue underscores the importance of carefully handling array decoding to prevent potential overflows, emphasizing the need for appropriate validation and error handling mechanisms in applications processing such data.",
+            "cve": "PVE-2024-68474",
+            "id": "pyup.io-68474",
+            "more_info_path": "/vulnerabilities/PVE-2024-68474/68474",
+            "specs": [
+                ">=0,<5.0.1"
+            ],
+            "v": ">=0,<5.0.1"
         }
     ],
     "eth-account": [
@@ -41620,20 +42526,20 @@
             "v": "<2.22.1"
         },
         {
-            "advisory": "Ethyca-fides 2.22.1 addresses the moderate severity vulnerability CVE-2023-46126. This issue affected versions of Fides before 2.22.1, where the privacy policy URL field in consent and privacy notices was not properly validated. Malicious users with contributor access or higher could exploit this to execute arbitrary JavaScript on integrated websites. The patch now properly sanitizes input, preventing such attacks. https://github.com/ethyca/fides/security/advisories/GHSA-fgjj-5jmr-gh83",
-            "cve": "CVE-2023-46126",
-            "id": "pyup.io-63526",
-            "more_info_path": "/vulnerabilities/CVE-2023-46126/63526",
+            "advisory": "Ethyca-fides 2.22.1 fixes a vulnerability identified as CVE-2023-46125. The issue was found with the GET api/v1/config endpoint. It allowed Admin UI users with roles lower than the owner role, such as the viewer role, to retrieve the configuration information using the API. Even though the configuration data was filtered to suppress most sensitive information, it still contained details about the internals and backend infrastructure like server addresses, ports, and database usernames. \r\nhttps://github.com/ethyca/fides/security/advisories/GHSA-rjxg-rpg3-9r89",
+            "cve": "CVE-2023-46125",
+            "id": "pyup.io-63521",
+            "more_info_path": "/vulnerabilities/CVE-2023-46125/63521",
             "specs": [
                 "<2.22.1"
             ],
             "v": "<2.22.1"
         },
         {
-            "advisory": "Ethyca-fides 2.22.1 fixes a vulnerability identified as CVE-2023-46125. The issue was found with the GET api/v1/config endpoint. It allowed Admin UI users with roles lower than the owner role, such as the viewer role, to retrieve the configuration information using the API. Even though the configuration data was filtered to suppress most sensitive information, it still contained details about the internals and backend infrastructure like server addresses, ports, and database usernames. \r\nhttps://github.com/ethyca/fides/security/advisories/GHSA-rjxg-rpg3-9r89",
-            "cve": "CVE-2023-46125",
-            "id": "pyup.io-63521",
-            "more_info_path": "/vulnerabilities/CVE-2023-46125/63521",
+            "advisory": "Ethyca-fides 2.22.1 addresses the moderate severity vulnerability CVE-2023-46126. This issue affected versions of Fides before 2.22.1, where the privacy policy URL field in consent and privacy notices was not properly validated. Malicious users with contributor access or higher could exploit this to execute arbitrary JavaScript on integrated websites. The patch now properly sanitizes input, preventing such attacks. https://github.com/ethyca/fides/security/advisories/GHSA-fgjj-5jmr-gh83",
+            "cve": "CVE-2023-46126",
+            "id": "pyup.io-63526",
+            "more_info_path": "/vulnerabilities/CVE-2023-46126/63526",
             "specs": [
                 "<2.22.1"
             ],
@@ -41660,20 +42566,20 @@
             "v": "<2.24.0"
         },
         {
-            "advisory": "The Fides webserver is vulnerable to a type of Denial of Service (DoS) attack. Attackers can exploit a weakness in the connector template upload feature to upload a malicious zip bomb file, resulting in resource exhaustion and service unavailability for all users of the Fides webserver. This vulnerability affects Fides versions `2.11.0` through `2.15.1`. Exploitation is limited to users with elevated privileges with the `CONNECTOR_TEMPLATE_REGISTER` scope, which includes root users and users with the owner role. The vulnerability has been patched in Fides version `2.16.0`. Users are advised to upgrade to this version or later to secure their systems against this threat. There is no known workaround to remediate this vulnerability without upgrading. If an attack occurs, the impact can be mitigated by manually or automatically restarting the affected container.",
-            "cve": "CVE-2023-37480",
-            "id": "pyup.io-65025",
-            "more_info_path": "/vulnerabilities/CVE-2023-37480/65025",
+            "advisory": "Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fides webserver is vulnerable to a type of Denial of Service (DoS) attack. Attackers can exploit this vulnerability to upload zip files containing malicious SVG bombs (similar to a billion laughs attack), causing resource exhaustion in Admin UI browser tabs and creating a persistent denial of service of the 'new connector' page (`datastore-connection/new`). This vulnerability affects Fides versions `2.11.0` through `2.15.1`. Exploitation is limited to users with elevated privileges with the `CONNECTOR_TEMPLATE_REGISTER` scope, which includes root users and users with the owner role. The vulnerability has been patched in Fides version `2.16.0`. Users are advised to upgrade to this version or later to secure their systems against this threat. There is no known workaround to remediate this vulnerability without upgrading.",
+            "cve": "CVE-2023-37481",
+            "id": "pyup.io-65027",
+            "more_info_path": "/vulnerabilities/CVE-2023-37481/65027",
             "specs": [
                 ">=2.11.0,<2.16.0"
             ],
             "v": ">=2.11.0,<2.16.0"
         },
         {
-            "advisory": "Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fides webserver is vulnerable to a type of Denial of Service (DoS) attack. Attackers can exploit this vulnerability to upload zip files containing malicious SVG bombs (similar to a billion laughs attack), causing resource exhaustion in Admin UI browser tabs and creating a persistent denial of service of the 'new connector' page (`datastore-connection/new`). This vulnerability affects Fides versions `2.11.0` through `2.15.1`. Exploitation is limited to users with elevated privileges with the `CONNECTOR_TEMPLATE_REGISTER` scope, which includes root users and users with the owner role. The vulnerability has been patched in Fides version `2.16.0`. Users are advised to upgrade to this version or later to secure their systems against this threat. There is no known workaround to remediate this vulnerability without upgrading.",
-            "cve": "CVE-2023-37481",
-            "id": "pyup.io-65027",
-            "more_info_path": "/vulnerabilities/CVE-2023-37481/65027",
+            "advisory": "The Fides webserver is vulnerable to a type of Denial of Service (DoS) attack. Attackers can exploit a weakness in the connector template upload feature to upload a malicious zip bomb file, resulting in resource exhaustion and service unavailability for all users of the Fides webserver. This vulnerability affects Fides versions `2.11.0` through `2.15.1`. Exploitation is limited to users with elevated privileges with the `CONNECTOR_TEMPLATE_REGISTER` scope, which includes root users and users with the owner role. The vulnerability has been patched in Fides version `2.16.0`. Users are advised to upgrade to this version or later to secure their systems against this threat. There is no known workaround to remediate this vulnerability without upgrading. If an attack occurs, the impact can be mitigated by manually or automatically restarting the affected container.",
+            "cve": "CVE-2023-37480",
+            "id": "pyup.io-65025",
+            "more_info_path": "/vulnerabilities/CVE-2023-37480/65025",
             "specs": [
                 ">=2.11.0,<2.16.0"
             ],
@@ -41968,20 +42874,20 @@
             "v": "<0.8"
         },
         {
-            "advisory": "Evennia 0.8 updates its dependency 'Twisted' minimum requirement to v18.0.0 to include a security fix.\r\nhttps://github.com/evennia/evennia/commit/6b7766d2956ae7be19f2cf7be0d43056c0accbb0",
-            "cve": "CVE-2016-1000111",
-            "id": "pyup.io-51937",
-            "more_info_path": "/vulnerabilities/CVE-2016-1000111/51937",
+            "advisory": "Evennia 0.8 updates its dependency 'pillow' to v5.2.0 to include security fixes.\r\nhttps://github.com/evennia/evennia/commit/6b7766d2956ae7be19f2cf7be0d43056c0accbb0",
+            "cve": "CVE-2016-9190",
+            "id": "pyup.io-52039",
+            "more_info_path": "/vulnerabilities/CVE-2016-9190/52039",
             "specs": [
                 "<0.8"
             ],
             "v": "<0.8"
         },
         {
-            "advisory": "Evennia 0.8 updates its dependency 'pillow' to v5.2.0 to include security fixes.\r\nhttps://github.com/evennia/evennia/commit/6b7766d2956ae7be19f2cf7be0d43056c0accbb0",
-            "cve": "CVE-2016-9190",
-            "id": "pyup.io-52039",
-            "more_info_path": "/vulnerabilities/CVE-2016-9190/52039",
+            "advisory": "Evennia 0.8 updates its dependency 'Twisted' minimum requirement to v18.0.0 to include a security fix.\r\nhttps://github.com/evennia/evennia/commit/6b7766d2956ae7be19f2cf7be0d43056c0accbb0",
+            "cve": "CVE-2016-1000111",
+            "id": "pyup.io-51937",
+            "more_info_path": "/vulnerabilities/CVE-2016-1000111/51937",
             "specs": [
                 "<0.8"
             ],
@@ -42089,9 +42995,9 @@
         },
         {
             "advisory": "Evennia 4.0.0 enhances security on the website character page by implementing URL validation for redirects. \r\nhttps://github.com/evennia/evennia/commit/23b9d06db5e6e8b0e48198dd46b85ce57fd0f10d",
-            "cve": null,
+            "cve": "PVE-2024-66790",
             "id": "pyup.io-66790",
-            "more_info_path": "/vulnerabilities/None/66790",
+            "more_info_path": "/vulnerabilities/PVE-2024-66790/66790",
             "specs": [
                 "<4.0.0"
             ],
@@ -42144,7 +43050,7 @@
             "v": "<0.34.3"
         },
         {
-            "advisory": "Eventlet 0.35.2 Copied the complete fix for (CVE-2023-29483) and handling of truncated exceptions in greendns.py after Dnspython 2.6.0rc1 dns.query.udp() API change heads-up.\r\nhttps://github.com/eventlet/eventlet/pull/916",
+            "advisory": "Eventlet 0.35.2 copied the complete fix for (CVE-2023-29483) and handling of truncated exceptions in greendns.py after Dnspython 2.6.0rc1 dns.query.udp() API change heads-up.\r\nhttps://github.com/eventlet/eventlet/pull/916",
             "cve": "CVE-2023-29483",
             "id": "pyup.io-66927",
             "more_info_path": "/vulnerabilities/CVE-2023-29483/66927",
@@ -42214,10 +43120,10 @@
     ],
     "exchanges-wrapper": [
         {
-            "advisory": "Exchanges-wrapper 1.3.4 updates its dependency 'grpcio' to version '1.56.0' to include a fix for a Connection Confusion vulnerability.\r\nhttps://github.com/DogsTailFarmer/exchanges-wrapper/commit/f679262b648bdf08d4fa4e4f071a12562c25a54a\r\nhttps://github.com/advisories/GHSA-cfgp-2977-2fmm",
-            "cve": "CVE-2023-32731",
-            "id": "pyup.io-59871",
-            "more_info_path": "/vulnerabilities/CVE-2023-32731/59871",
+            "advisory": "Exchanges-wrapper 1.3.4 updates its dependency 'grpcio' to version '1.56.0' to include a fix for a Reachable Assertion vulnerability.\r\nhttps://github.com/DogsTailFarmer/exchanges-wrapper/commit/f679262b648bdf08d4fa4e4f071a12562c25a54a\r\nhttps://github.com/advisories/GHSA-6628-q6j9-w8vg",
+            "cve": "CVE-2023-1428",
+            "id": "pyup.io-59519",
+            "more_info_path": "/vulnerabilities/CVE-2023-1428/59519",
             "specs": [
                 "<1.3.4"
             ],
@@ -42234,16 +43140,28 @@
             "v": "<1.3.4"
         },
         {
-            "advisory": "Exchanges-wrapper 1.3.4 updates its dependency 'grpcio' to version '1.56.0' to include a fix for a Reachable Assertion vulnerability.\r\nhttps://github.com/DogsTailFarmer/exchanges-wrapper/commit/f679262b648bdf08d4fa4e4f071a12562c25a54a\r\nhttps://github.com/advisories/GHSA-6628-q6j9-w8vg",
-            "cve": "CVE-2023-1428",
-            "id": "pyup.io-59519",
-            "more_info_path": "/vulnerabilities/CVE-2023-1428/59519",
+            "advisory": "Exchanges-wrapper 1.3.4 updates its dependency 'grpcio' to version '1.56.0' to include a fix for a Connection Confusion vulnerability.\r\nhttps://github.com/DogsTailFarmer/exchanges-wrapper/commit/f679262b648bdf08d4fa4e4f071a12562c25a54a\r\nhttps://github.com/advisories/GHSA-cfgp-2977-2fmm",
+            "cve": "CVE-2023-32731",
+            "id": "pyup.io-59871",
+            "more_info_path": "/vulnerabilities/CVE-2023-32731/59871",
             "specs": [
                 "<1.3.4"
             ],
             "v": "<1.3.4"
         }
     ],
+    "execnet": [
+        {
+            "advisory": "Execnet 1.0.6 resolves a race condition that occurred when multiple threads simultaneously transmitted data over channels, which previously led to crashes in the serializer and process. This fix enhances stability and concurrency handling.",
+            "cve": "PVE-2024-67501",
+            "id": "pyup.io-67501",
+            "more_info_path": "/vulnerabilities/PVE-2024-67501/67501",
+            "specs": [
+                "<1.0.6"
+            ],
+            "v": "<1.0.6"
+        }
+    ],
     "exgrex-py": [
         {
             "advisory": "Exgrex-py 0.3a2 updates its dependency 'bleach' to v3.3.0 to include a security fix.",
@@ -42560,6 +43478,18 @@
             "v": ">=0,<0.0.2"
         }
     ],
+    "f-ask": [
+        {
+            "advisory": "Certain versions of Flask, part of the Pallets Project, are susceptible to an Improper Input Validation vulnerability. This issue could lead to excessive memory usage, potentially causing a denial of service if attackers supply JSON data in an incorrect encoding.",
+            "cve": null,
+            "id": "pyup.io-69621",
+            "more_info_path": "/vulnerabilities/None/69621",
+            "specs": [
+                ">=0,<0.12.3"
+            ],
+            "v": ">=0,<0.12.3"
+        }
+    ],
     "faapi": [
         {
             "advisory": "Faapi 3.1.0 updates its dependency 'lxml' to v4.7.1 to include a security fix.",
@@ -43045,9 +43975,9 @@
         },
         {
             "advisory": "Fastapi 0.75.2 updates its NPM dependency 'swagger-ui' to include security fixes.",
-            "cve": "CVE-2021-46708",
-            "id": "pyup.io-48161",
-            "more_info_path": "/vulnerabilities/CVE-2021-46708/48161",
+            "cve": "CVE-2018-25031",
+            "id": "pyup.io-48160",
+            "more_info_path": "/vulnerabilities/CVE-2018-25031/48160",
             "specs": [
                 "<0.75.2"
             ],
@@ -43055,9 +43985,9 @@
         },
         {
             "advisory": "Fastapi 0.75.2 updates its NPM dependency 'swagger-ui' to include security fixes.",
-            "cve": "CVE-2018-25031",
-            "id": "pyup.io-48160",
-            "more_info_path": "/vulnerabilities/CVE-2018-25031/48160",
+            "cve": "CVE-2021-46708",
+            "id": "pyup.io-48161",
+            "more_info_path": "/vulnerabilities/CVE-2021-46708/48161",
             "specs": [
                 "<0.75.2"
             ],
@@ -43714,6 +44644,18 @@
             "v": ">0"
         }
     ],
+    "fflogsapi": [
+        {
+            "advisory": "Fflogsapi version 2.1.0 upgrades its cryptography library to version 42.0.5 from 39.0.1 to address the security issue CVE-2024-26130.",
+            "cve": "CVE-2024-26130",
+            "id": "pyup.io-67467",
+            "more_info_path": "/vulnerabilities/CVE-2024-26130/67467",
+            "specs": [
+                "<2.1.0"
+            ],
+            "v": "<2.1.0"
+        }
+    ],
     "ffmpeg-normalize": [
         {
             "advisory": "Ffmpeg-normalize 1.24.0 includes a fix for a Race Condition vulnerability.\r\nhttps://github.com/slhck/ffmpeg-normalize/commit/daf1bf15dde81e5916b8fb4c7853c833e89328f9",
@@ -43761,9 +44703,9 @@
         },
         {
             "advisory": "Fhir-pyrate 0.2.0b1 updates its dependency \"numpy\" to v1.23.1 to include security fixes.",
-            "cve": "CVE-2021-41496",
-            "id": "pyup.io-50794",
-            "more_info_path": "/vulnerabilities/CVE-2021-41496/50794",
+            "cve": "CVE-2021-34141",
+            "id": "pyup.io-50784",
+            "more_info_path": "/vulnerabilities/CVE-2021-34141/50784",
             "specs": [
                 "<0.2.0b1"
             ],
@@ -43771,9 +44713,9 @@
         },
         {
             "advisory": "Fhir-pyrate 0.2.0b1 updates its dependency \"numpy\" to v1.23.1 to include security fixes.",
-            "cve": "CVE-2021-41495",
-            "id": "pyup.io-50793",
-            "more_info_path": "/vulnerabilities/CVE-2021-41495/50793",
+            "cve": "CVE-2021-41496",
+            "id": "pyup.io-50794",
+            "more_info_path": "/vulnerabilities/CVE-2021-41496/50794",
             "specs": [
                 "<0.2.0b1"
             ],
@@ -43781,9 +44723,9 @@
         },
         {
             "advisory": "Fhir-pyrate 0.2.0b1 updates its dependency \"numpy\" to v1.23.1 to include security fixes.",
-            "cve": "CVE-2021-34141",
-            "id": "pyup.io-50784",
-            "more_info_path": "/vulnerabilities/CVE-2021-34141/50784",
+            "cve": "CVE-2021-41495",
+            "id": "pyup.io-50793",
+            "more_info_path": "/vulnerabilities/CVE-2021-41495/50793",
             "specs": [
                 "<0.2.0b1"
             ],
@@ -43936,6 +44878,18 @@
             "v": "<0.25.3"
         }
     ],
+    "fin-maestro-kin": [
+        {
+            "advisory": "Fin-maestro-kin 0.2.2 updates its dependency 'pillow' to version 10.3.0 to include a fix for a Buffer Overflow vulnerability.",
+            "cve": "CVE-2024-28219",
+            "id": "pyup.io-67525",
+            "more_info_path": "/vulnerabilities/CVE-2024-28219/67525",
+            "specs": [
+                "<0.2.2"
+            ],
+            "v": "<0.2.2"
+        }
+    ],
     "fincity-django-allauth": [
         {
             "advisory": "Fincity-django-allauth 0.18.0 requires the 'AUDIENCE' parameter to be explicitly configured, as required by the Persona specification for security reasons.\r\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=1051025",
@@ -44000,7 +44954,7 @@
     ],
     "fiona": [
         {
-            "advisory": "Fiona 1.9.4.post1 and prior releases ship with a version of 'libcurl' that has a high-severity vulnerability.\r\nhttps://github.com/sgillies/fiona-wheels/issues/39",
+            "advisory": "Fiona 1.9.4.post1 and prior releases ship with a version of 'libcurl' that has a high-severity vulnerability.",
             "cve": "CVE-2023-38545",
             "id": "pyup.io-61771",
             "more_info_path": "/vulnerabilities/CVE-2023-38545/61771",
@@ -44102,20 +45056,20 @@
     ],
     "fittrackee": [
         {
-            "advisory": "Fittrackee 0.5.7 sanitizes input when serving images, map titles and in username.\r\nhttps://github.com/SamR1/FitTrackee/pull/151",
-            "cve": "PVE-2022-45387",
-            "id": "pyup.io-45387",
-            "more_info_path": "/vulnerabilities/PVE-2022-45387/45387",
+            "advisory": "Fittrackee 0.5.7 sets autoescape on jinja templates.\r\nhttps://github.com/SamR1/FitTrackee/pull/152",
+            "cve": "PVE-2022-44973",
+            "id": "pyup.io-44973",
+            "more_info_path": "/vulnerabilities/PVE-2022-44973/44973",
             "specs": [
                 "<0.5.7"
             ],
             "v": "<0.5.7"
         },
         {
-            "advisory": "Fittrackee 0.5.7 sets autoescape on jinja templates.\r\nhttps://github.com/SamR1/FitTrackee/pull/152",
-            "cve": "PVE-2022-44973",
-            "id": "pyup.io-44973",
-            "more_info_path": "/vulnerabilities/PVE-2022-44973/44973",
+            "advisory": "Fittrackee 0.5.7 sanitizes input when serving images, map titles and in username.\r\nhttps://github.com/SamR1/FitTrackee/pull/151",
+            "cve": "PVE-2022-45387",
+            "id": "pyup.io-45387",
+            "more_info_path": "/vulnerabilities/PVE-2022-45387/45387",
             "specs": [
                 "<0.5.7"
             ],
@@ -44307,7 +45261,7 @@
             "v": "<=1.5.2"
         },
         {
-            "advisory": "Affected versions of Flask-Admin are vulnerable to cross-site scripting (XSS) attacks, which occur when attackers trick a web-based application into accepting a request from what it perceives to be a trusted source. This can lead to the execution of malicious scripts in the user's browser, potentially resulting in session hijacking, exposure of sensitive information, unauthorized access to privileged functions, and malware delivery. XSS exploits are mainly achieved by injecting malicious code into web applications, highlighting the importance of escaping special characters in user input to prevent such manipulations. The advisory outlines that XSS attacks can manifest in various forms, including stored, reflected, DOM-based, and mutated, each with specific characteristics regarding the origin and method of execution of the malicious code. It further advises on prevention methods such as sanitizing data input, converting special characters to their HTML or URL encoded equivalents, providing options to disable client-side scripts, redirecting invalid requests, detecting and invalidating simultaneous logins from different IPs, enforcing a Content Security Policy, and understanding the security features of used libraries. These practices are designed to mitigate the risk and impact of XSS vulnerabilities in web servers, application servers, and web application environments.\r\nhttps://github.com/flask-admin/flask-admin/commit/0dc5a48fd0a4fdd28172e0bc508373ddb58fc50b",
+            "advisory": "Affected versions of Flask-Admin are vulnerable to cross-site scripting (XSS) via scheme.\r\nhttps://github.com/flask-admin/flask-admin/commit/0dc5a48fd0a4fdd28172e0bc508373ddb58fc50b",
             "cve": "PVE-2024-99786",
             "id": "pyup.io-66043",
             "more_info_path": "/vulnerabilities/PVE-2024-99786/66043",
@@ -44470,6 +45424,16 @@
             ],
             "v": "<4.3.0"
         },
+        {
+            "advisory": "Flask-AppBuilder is an application development framework, built on top of Flask. When Flask-AppBuilder is set to AUTH_TYPE AUTH_OID, it allows an attacker to forge an HTTP request, that could deceive the backend into using any requested OpenID service. This vulnerability could grant an attacker unauthorised privilege access if a custom OpenID service is deployed by the attacker and accessible by the backend. This vulnerability is only exploitable when the application is using the OpenID 2.0 authorization protocol. Upgrade to Flask-AppBuilder 4.3.11 to fix the vulnerability.",
+            "cve": "CVE-2023-46047",
+            "id": "pyup.io-68493",
+            "more_info_path": "/vulnerabilities/CVE-2023-46047/68493",
+            "specs": [
+                "<4.3.11"
+            ],
+            "v": "<4.3.11"
+        },
         {
             "advisory": "Flask-AppBuilder 4.3.2 includes a fix for an Information Disclosure vulnerability.\r\nhttps://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-jhpr-j7cq-3jp3",
             "cve": "CVE-2023-34110",
@@ -45160,6 +46124,26 @@
             ],
             "v": "<1.2.0"
         },
+        {
+            "advisory": "** DISPUTED ** Flower 0.9.3 has XSS via the name parameter in an @app.task call. NOTE: The project author stated that he doesn't think this is a valid vulnerability. Worker name and task name aren\u2019t user facing configuration options. They are internal backend config options and person having rights to change them already has full access.",
+            "cve": "CVE-2019-16925",
+            "id": "pyup.io-70511",
+            "more_info_path": "/vulnerabilities/CVE-2019-16925/70511",
+            "specs": [
+                "<=0.9.3"
+            ],
+            "v": "<=0.9.3"
+        },
+        {
+            "advisory": "** DISPUTED ** Flower 0.9.3 has XSS via a crafted worker name. NOTE: The project author stated that he doesn't think this is a valid vulnerability. Worker name and task name aren\u2019t user facing configuration options. They are internal backend config options and person having rights to change them already has full access.",
+            "cve": "CVE-2019-16926",
+            "id": "pyup.io-70512",
+            "more_info_path": "/vulnerabilities/CVE-2019-16926/70512",
+            "specs": [
+                "<=0.9.3"
+            ],
+            "v": "<=0.9.3"
+        },
         {
             "advisory": "Flower before 0.9.2 has a XSS on tasks page because data is not properly escaped.",
             "cve": "PVE-2023-55193",
@@ -45182,6 +46166,16 @@
         }
     ],
     "flytekit": [
+        {
+            "advisory": "Flytekit 0.30.0 stops using unauthenticated git.\r\nhttps://github.com/flyteorg/flytekit/pull/810",
+            "cve": "PVE-2022-44776",
+            "id": "pyup.io-44776",
+            "more_info_path": "/vulnerabilities/PVE-2022-44776/44776",
+            "specs": [
+                "<0.30.0"
+            ],
+            "v": "<0.30.0"
+        },
         {
             "advisory": "Flytekit 0.30.0 updates its dependency 'ipython' to v7.31.1 to include a security fix.",
             "cve": "CVE-2022-21699",
@@ -45193,14 +46187,14 @@
             "v": "<0.30.0"
         },
         {
-            "advisory": "Flytekit 0.30.0 stops using unauthenticated git.\r\nhttps://github.com/flyteorg/flytekit/pull/810",
-            "cve": "PVE-2022-44776",
-            "id": "pyup.io-44776",
-            "more_info_path": "/vulnerabilities/PVE-2022-44776/44776",
+            "advisory": "Flytekit 1.1.0 updates its dependency 'cookiecutter' to v2.1.1 to include a security fix.",
+            "cve": "CVE-2022-24065",
+            "id": "pyup.io-49722",
+            "more_info_path": "/vulnerabilities/CVE-2022-24065/49722",
             "specs": [
-                "<0.30.0"
+                "<1.1.0"
             ],
-            "v": "<0.30.0"
+            "v": "<1.1.0"
         },
         {
             "advisory": "Flytekit 1.1.0 updates its dependency 'pillow' to v9.1.1 to include a security fix.",
@@ -45213,14 +46207,14 @@
             "v": "<1.1.0"
         },
         {
-            "advisory": "Flytekit 1.1.0 updates its dependency 'cookiecutter' to v2.1.1 to include a security fix.",
+            "advisory": "Flytekit 1.2.0 updates its dependency 'cookiecutter' to v2.1.1 to include a security fix.",
             "cve": "CVE-2022-24065",
-            "id": "pyup.io-49722",
-            "more_info_path": "/vulnerabilities/CVE-2022-24065/49722",
+            "id": "pyup.io-51331",
+            "more_info_path": "/vulnerabilities/CVE-2022-24065/51331",
             "specs": [
-                "<1.1.0"
+                "<1.2.0"
             ],
-            "v": "<1.1.0"
+            "v": "<1.2.0"
         },
         {
             "advisory": "Flytekit 1.2.0 updates its dependency 'oauthlib' to v3.2.1 to include a security fix.",
@@ -45243,50 +46237,40 @@
             "v": "<1.2.0"
         },
         {
-            "advisory": "Flytekit 1.2.0 updates its dependency 'lxml' to v4.9.1 to include a security fix.",
-            "cve": "CVE-2022-2309",
-            "id": "pyup.io-51327",
-            "more_info_path": "/vulnerabilities/CVE-2022-2309/51327",
-            "specs": [
-                "<1.2.0"
-            ],
-            "v": "<1.2.0"
-        },
-        {
-            "advisory": "Flytekit 1.2.0 updates its dependency 'mistune' to v2.0.3 to include a security fix.",
-            "cve": "CVE-2022-34749",
-            "id": "pyup.io-51329",
-            "more_info_path": "/vulnerabilities/CVE-2022-34749/51329",
+            "advisory": "Flytekit 1.2.0 updates its dependency 'protobuf' to v3.20.2 to include a security fix.",
+            "cve": "CVE-2022-1941",
+            "id": "pyup.io-51334",
+            "more_info_path": "/vulnerabilities/CVE-2022-1941/51334",
             "specs": [
                 "<1.2.0"
             ],
             "v": "<1.2.0"
         },
         {
-            "advisory": "Flytekit 1.2.0 updates its dependency 'cookiecutter' to v2.1.1 to include a security fix.",
-            "cve": "CVE-2022-24065",
-            "id": "pyup.io-51331",
-            "more_info_path": "/vulnerabilities/CVE-2022-24065/51331",
+            "advisory": "Flytekit 1.2.0 updates its dependency 'lxml' to v4.9.1 to include a security fix.",
+            "cve": "CVE-2022-2309",
+            "id": "pyup.io-51327",
+            "more_info_path": "/vulnerabilities/CVE-2022-2309/51327",
             "specs": [
                 "<1.2.0"
             ],
             "v": "<1.2.0"
         },
         {
-            "advisory": "Flytekit 1.2.0 updates its dependency 'protobuf' to v3.20.2 to include a security fix.",
-            "cve": "CVE-2022-1941",
-            "id": "pyup.io-51334",
-            "more_info_path": "/vulnerabilities/CVE-2022-1941/51334",
+            "advisory": "Flytekit 1.2.0 updates its dependency 'notebook' to v6.4.12 to include a security fix.",
+            "cve": "CVE-2022-29238",
+            "id": "pyup.io-51330",
+            "more_info_path": "/vulnerabilities/CVE-2022-29238/51330",
             "specs": [
                 "<1.2.0"
             ],
             "v": "<1.2.0"
         },
         {
-            "advisory": "Flytekit 1.2.0 updates its dependency 'notebook' to v6.4.12 to include a security fix.",
-            "cve": "CVE-2022-29238",
-            "id": "pyup.io-51330",
-            "more_info_path": "/vulnerabilities/CVE-2022-29238/51330",
+            "advisory": "Flytekit 1.2.0 updates its dependency 'mistune' to v2.0.3 to include a security fix.",
+            "cve": "CVE-2022-34749",
+            "id": "pyup.io-51329",
+            "more_info_path": "/vulnerabilities/CVE-2022-34749/51329",
             "specs": [
                 "<1.2.0"
             ],
@@ -45411,6 +46395,18 @@
             "v": "<1.0"
         }
     ],
+    "fortitudo-tech": [
+        {
+            "advisory": "Fortitudo-tech version 1.0.6 updates its idna library from version 3.6 to 3.7 to address the vulnerability described in CVE-2024-3651.",
+            "cve": "CVE-2024-3651",
+            "id": "pyup.io-70379",
+            "more_info_path": "/vulnerabilities/CVE-2024-3651/70379",
+            "specs": [
+                "<1.0.6"
+            ],
+            "v": "<1.0.6"
+        }
+    ],
     "fosslight-android": [
         {
             "advisory": "A vulnerability patch has been integrated into Fosslight-android version 4.1.15. Earlier versions may have hard-coded sensitive credentials and lacked measures to counter potential SQL injection vulnerabilities.",
@@ -45509,20 +46505,30 @@
     ],
     "fractal-server": [
         {
-            "advisory": "Fractal-server 1.3.0a3 updates its dependency 'starlette' to version '0.27.0' to include a security fix.\r\nhttps://github.com/fractal-analytics-platform/fractal-server/pull/723",
-            "cve": "CVE-2023-29159",
-            "id": "pyup.io-59001",
-            "more_info_path": "/vulnerabilities/CVE-2023-29159/59001",
+            "advisory": "Fractal-server 1.3.0a3 updates its dependency 'requests' to version '2.31.0' to include a security fix.\r\nhttps://github.com/fractal-analytics-platform/fractal-server/pull/723",
+            "cve": "CVE-2023-32681",
+            "id": "pyup.io-59000",
+            "more_info_path": "/vulnerabilities/CVE-2023-32681/59000",
             "specs": [
                 "<1.3.0a3"
             ],
             "v": "<1.3.0a3"
         },
         {
-            "advisory": "Fractal-server 1.3.0a3 updates its dependency 'requests' to version '2.31.0' to include a security fix.\r\nhttps://github.com/fractal-analytics-platform/fractal-server/pull/723",
-            "cve": "CVE-2023-32681",
-            "id": "pyup.io-59000",
-            "more_info_path": "/vulnerabilities/CVE-2023-32681/59000",
+            "advisory": "Fractal-server 1.3.0a3 updates its dependency 'cryptography' to version '41.0.1' to include a security fix.\r\nhttps://github.com/fractal-analytics-platform/fractal-server/pull/739/commits/ec5bbd57acabf5a1fc357cfb96c21e059c619475",
+            "cve": "CVE-2023-2650",
+            "id": "pyup.io-59002",
+            "more_info_path": "/vulnerabilities/CVE-2023-2650/59002",
+            "specs": [
+                "<1.3.0a3"
+            ],
+            "v": "<1.3.0a3"
+        },
+        {
+            "advisory": "Fractal-server 1.3.0a3 updates its dependency 'starlette' to version '0.27.0' to include a security fix.\r\nhttps://github.com/fractal-analytics-platform/fractal-server/pull/723",
+            "cve": "CVE-2023-29159",
+            "id": "pyup.io-59001",
+            "more_info_path": "/vulnerabilities/CVE-2023-29159/59001",
             "specs": [
                 "<1.3.0a3"
             ],
@@ -45537,19 +46543,71 @@
                 "<1.3.0a3"
             ],
             "v": "<1.3.0a3"
+        }
+    ],
+    "frapp": [
+        {
+            "advisory": "public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted \"changed value of\" text.",
+            "cve": "CVE-2019-15700",
+            "id": "pyup.io-70505",
+            "more_info_path": "/vulnerabilities/CVE-2019-15700/70505",
+            "specs": [
+                "<12.0.9"
+            ],
+            "v": "<12.0.9"
         },
         {
-            "advisory": "Fractal-server 1.3.0a3 updates its dependency 'cryptography' to version '41.0.1' to include a security fix.\r\nhttps://github.com/fractal-analytics-platform/fractal-server/pull/739/commits/ec5bbd57acabf5a1fc357cfb96c21e059c619475",
-            "cve": "CVE-2023-2650",
-            "id": "pyup.io-59002",
-            "more_info_path": "/vulnerabilities/CVE-2023-2650/59002",
+            "advisory": "In ERPNext, versions v11.0.0-beta through v13.0.2 are vulnerable to Missing Authorization, in the chat rooms functionality. A low privileged attacker can send a direct message or a group message to any member or group, impersonating themselves as the administrator. The attacker can also read chat messages of groups that they do not belong to, and of other users.",
+            "cve": "CVE-2022-23055",
+            "id": "pyup.io-70599",
+            "more_info_path": "/vulnerabilities/CVE-2022-23055/70599",
             "specs": [
-                "<1.3.0a3"
+                "<13.1.0"
             ],
-            "v": "<1.3.0a3"
+            "v": "<13.1.0"
         }
     ],
     "frappe": [
+        {
+            "advisory": "An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.",
+            "cve": "CVE-2019-14967",
+            "id": "pyup.io-70503",
+            "more_info_path": "/vulnerabilities/CVE-2019-14967/70503",
+            "specs": [
+                "<11.1.46"
+            ],
+            "v": "<11.1.46"
+        },
+        {
+            "advisory": "An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection.",
+            "cve": "CVE-2019-14966",
+            "id": "pyup.io-70502",
+            "more_info_path": "/vulnerabilities/CVE-2019-14966/70502",
+            "specs": [
+                "<12.0.4"
+            ],
+            "v": "<12.0.4"
+        },
+        {
+            "advisory": "An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection (SSTI) issue exists.",
+            "cve": "CVE-2019-14965",
+            "id": "pyup.io-70501",
+            "more_info_path": "/vulnerabilities/CVE-2019-14965/70501",
+            "specs": [
+                "<12.0.4"
+            ],
+            "v": "<12.0.4"
+        },
+        {
+            "advisory": "In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security.",
+            "cve": "CVE-2020-27508",
+            "id": "pyup.io-70577",
+            "more_info_path": "/vulnerabilities/CVE-2020-27508/70577",
+            "specs": [
+                "<12.10.0"
+            ],
+            "v": "<12.10.0"
+        },
         {
             "advisory": "Frappe 14.49.0 includes a fix for CVE-2023-46127: A malicious Frappe user with desk access could create documents containing HTML payloads allowing HTML Injection.\r\nhttps://github.com/frappe/frappe/security/advisories/GHSA-j2w9-8xrr-7g98",
             "cve": "CVE-2023-46127",
@@ -45590,6 +46648,17 @@
             ],
             "v": "<=14.14.3"
         },
+        {
+            "advisory": "Frappe is a low code web framework written in Python and Javascript. A SQL Injection vulnerability has been identified in the Frappe Framework which could allow a malicious actor to access sensitive information. This issue has been addressed in versions 13.46.1 and 14.20.0. Users are advised to upgrade. There's no workaround to fix this without upgrading.",
+            "cve": "CVE-2023-41328",
+            "id": "pyup.io-70411",
+            "more_info_path": "/vulnerabilities/CVE-2023-41328/70411",
+            "specs": [
+                ">13.0.0,<13.46.1",
+                ">14.0.0,<14.20.0"
+            ],
+            "v": ">13.0.0,<13.46.1,>14.0.0,<14.20.0"
+        },
         {
             "advisory": "In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were being stored as public files (no authentication is required to access; having a link is sufficient) instead of private files.",
             "cve": "CVE-2019-20529",
@@ -45613,6 +46682,56 @@
             ],
             "v": "<1.1.1"
         },
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in the Web UI in FreeIPA 4.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to breadcrumb navigation.",
+            "cve": "CVE-2014-7850",
+            "id": "pyup.io-70470",
+            "more_info_path": "/vulnerabilities/CVE-2014-7850/70470",
+            "specs": [
+                "<4.1.2"
+            ],
+            "v": "<4.1.2"
+        },
+        {
+            "advisory": "ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.",
+            "cve": "CVE-2015-5284",
+            "id": "pyup.io-70466",
+            "more_info_path": "/vulnerabilities/CVE-2015-5284/70466",
+            "specs": [
+                "<4.2.2"
+            ],
+            "v": "<4.2.2"
+        },
+        {
+            "advisory": "The cert_revoke command in FreeIPA does not check for the \"revoke certificate\" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the \"retrieve certificate\" permission.",
+            "cve": "CVE-2016-5404",
+            "id": "pyup.io-70533",
+            "more_info_path": "/vulnerabilities/CVE-2016-5404/70533",
+            "specs": [
+                "<4.3.3"
+            ],
+            "v": "<4.3.3"
+        },
+        {
+            "advisory": "A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.",
+            "cve": "CVE-2017-2590",
+            "id": "pyup.io-67438",
+            "more_info_path": "/vulnerabilities/CVE-2017-2590/67438",
+            "specs": [
+                "<4.4.0"
+            ],
+            "v": "<4.4.0"
+        },
+        {
+            "advisory": "Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.",
+            "cve": "CVE-2016-9575",
+            "id": "pyup.io-70517",
+            "more_info_path": "/vulnerabilities/CVE-2016-9575/70517",
+            "specs": [
+                "<4.4.3"
+            ],
+            "v": "<4.4.3"
+        },
         {
             "advisory": "Freeipa 4.6.7, 4.7.4 and 4.8.3 include a fix for CVE-2019-14867: A flaw was found in IPA in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14867",
             "cve": "CVE-2019-14867",
@@ -45625,6 +46744,46 @@
             ],
             "v": "<4.6.7,>=4.7.0rc1,<4.7.4,>=4.8.0rc1,<4.8.3"
         },
+        {
+            "advisory": "ipa 3.0 does not properly check server identity before sending credential containing cookies",
+            "cve": "CVE-2012-5631",
+            "id": "pyup.io-67961",
+            "more_info_path": "/vulnerabilities/CVE-2012-5631/67961",
+            "specs": [
+                "<=3.0.0"
+            ],
+            "v": "<=3.0.0"
+        },
+        {
+            "advisory": "FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.",
+            "cve": "CVE-2016-5414",
+            "id": "pyup.io-70513",
+            "more_info_path": "/vulnerabilities/CVE-2016-5414/70513",
+            "specs": [
+                "<=4.4.0"
+            ],
+            "v": "<=4.4.0"
+        },
+        {
+            "advisory": "FreeIPA might display user data improperly via vectors involving non-printable characters.",
+            "cve": "CVE-2015-5179",
+            "id": "pyup.io-70468",
+            "more_info_path": "/vulnerabilities/CVE-2015-5179/70468",
+            "specs": [
+                "<=4.5.0"
+            ],
+            "v": "<=4.5.0"
+        },
+        {
+            "advisory": "FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of service by locking out the account in which system services run on.",
+            "cve": "CVE-2016-7030",
+            "id": "pyup.io-70515",
+            "more_info_path": "/vulnerabilities/CVE-2016-7030/70515",
+            "specs": [
+                "<=4.6.0"
+            ],
+            "v": "<=4.6.0"
+        },
         {
             "advisory": "FreeIPA versions 1.3.0b0 to 4.8.0rc1, which employ Samba to integrate with Microsoft's Active Directory, were discovered to be susceptible to a Denial of Service (DoS) attack known as SMBLoris. This vulnerability was detected in August 2017.",
             "cve": "PVE-2023-99971",
@@ -45645,6 +46804,47 @@
             ],
             "v": ">=1.9.0a,<=2.1.90rc1"
         },
+        {
+            "advisory": "FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor authentication leveraging an enabled OTP token, which triggers an anonymous bind.",
+            "cve": "CVE-2014-7828",
+            "id": "pyup.io-70472",
+            "more_info_path": "/vulnerabilities/CVE-2014-7828/70472",
+            "specs": [
+                ">=4.0,<4.0.5",
+                ">4.1,<4.1.1"
+            ],
+            "v": ">=4.0,<4.0.5,>4.1,<4.1.1"
+        },
+        {
+            "advisory": "A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.",
+            "cve": "CVE-2020-1722",
+            "id": "pyup.io-70580",
+            "more_info_path": "/vulnerabilities/CVE-2020-1722/70580",
+            "specs": [
+                ">=4.0.0,<=4.8.0"
+            ],
+            "v": ">=4.0.0,<=4.8.0"
+        },
+        {
+            "advisory": "It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users' permission. A remote, authenticated attacker could potentially use this flaw to disclose the password hashes belonging to Stage Users. This security issue does not result in disclosure of password hashes belonging to active standard users. NOTE: some developers feel that this report is a suggestion for a design change to Stage User activation, not a statement of a vulnerability.",
+            "cve": "CVE-2017-12169",
+            "id": "pyup.io-67437",
+            "more_info_path": "/vulnerabilities/CVE-2017-12169/67437",
+            "specs": [
+                ">=4.2.0"
+            ],
+            "v": ">=4.2.0"
+        },
+        {
+            "advisory": "A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.",
+            "cve": "CVE-2019-14826",
+            "id": "pyup.io-70519",
+            "more_info_path": "/vulnerabilities/CVE-2019-14826/70519",
+            "specs": [
+                ">=4.5.0"
+            ],
+            "v": ">=4.5.0"
+        },
         {
             "advisory": "A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.",
             "cve": "CVE-2019-10195",
@@ -46448,6 +47648,16 @@
         }
     ],
     "geonode": [
+        {
+            "advisory": "Geonode 2.10 updates 'urllib3' to v1.24.2 to include security fixes.",
+            "cve": "CVE-2018-20060",
+            "id": "pyup.io-42969",
+            "more_info_path": "/vulnerabilities/CVE-2018-20060/42969",
+            "specs": [
+                "<2.10"
+            ],
+            "v": "<2.10"
+        },
         {
             "advisory": "Geonode 2.10 updates 'urllib3' to v1.24.2 to include security fixes.",
             "cve": "CVE-2019-11324",
@@ -46478,16 +47688,6 @@
             ],
             "v": "<2.10"
         },
-        {
-            "advisory": "Geonode 2.10 updates 'urllib3' to v1.24.2 to include security fixes.",
-            "cve": "CVE-2018-20060",
-            "id": "pyup.io-42969",
-            "more_info_path": "/vulnerabilities/CVE-2018-20060/42969",
-            "specs": [
-                "<2.10"
-            ],
-            "v": "<2.10"
-        },
         {
             "advisory": "Geonode 2.10 updates 'django' to v1.11.22 to include a security fix.",
             "cve": "CVE-2019-12781",
@@ -46585,6 +47785,18 @@
             "v": "<=1.7.11"
         }
     ],
+    "geosss": [
+        {
+            "advisory": "Geosss 0.1.9 secures its codebase by updating the version constraint for Black to \">=24.3.0, < 25.0.0\" to mitigate the risk associated with CVE-2024-21503.",
+            "cve": "CVE-2024-21503",
+            "id": "pyup.io-67417",
+            "more_info_path": "/vulnerabilities/CVE-2024-21503/67417",
+            "specs": [
+                "<0.1.9"
+            ],
+            "v": "<0.1.9"
+        }
+    ],
     "geotribu": [
         {
             "advisory": "Geotribu 0.31.1 updates its Pillow dependency to version 10.2 to address the CVE-2022-22817.\r\nhttps://github.com/geotribu/cli/pull/165/commits/ee7ff27877b789df2d385e1dcdbd912bb08ea003",
@@ -46665,20 +47877,20 @@
             "v": "<1.0.0"
         },
         {
-            "advisory": "Geti-sdk 1.0.1 sanitizes project download target path.\r\nhttps://github.com/openvinotoolkit/geti-sdk/pull/87",
-            "cve": "PVE-2023-54989",
-            "id": "pyup.io-54989",
-            "more_info_path": "/vulnerabilities/PVE-2023-54989/54989",
+            "advisory": "Geti-sdk 1.0.1 reduce permissions upon directory creation.\r\nhttps://github.com/openvinotoolkit/geti-sdk/pull/90",
+            "cve": "PVE-2023-54993",
+            "id": "pyup.io-54993",
+            "more_info_path": "/vulnerabilities/PVE-2023-54993/54993",
             "specs": [
                 "<1.0.1"
             ],
             "v": "<1.0.1"
         },
         {
-            "advisory": "Geti-sdk 1.0.1 reduce permissions upon directory creation.\r\nhttps://github.com/openvinotoolkit/geti-sdk/pull/90",
-            "cve": "PVE-2023-54993",
-            "id": "pyup.io-54993",
-            "more_info_path": "/vulnerabilities/PVE-2023-54993/54993",
+            "advisory": "Geti-sdk 1.0.1 sanitizes project download target path.\r\nhttps://github.com/openvinotoolkit/geti-sdk/pull/87",
+            "cve": "PVE-2023-54989",
+            "id": "pyup.io-54989",
+            "more_info_path": "/vulnerabilities/PVE-2023-54989/54989",
             "specs": [
                 "<1.0.1"
             ],
@@ -46743,6 +47955,16 @@
         }
     ],
     "ggshield": [
+        {
+            "advisory": "Ggshield 1.18.0 updates its dependency 'cryptography' to version '41.0.3' to include a fix for a Denial of Service vulnerability.\r\nhttps://github.com/GitGuardian/ggshield/commit/3c67771a4d66accede14fa23dfce9ea51571e082",
+            "cve": "CVE-2023-3817",
+            "id": "pyup.io-60443",
+            "more_info_path": "/vulnerabilities/CVE-2023-3817/60443",
+            "specs": [
+                "<1.18.0"
+            ],
+            "v": "<1.18.0"
+        },
         {
             "advisory": "Ggshield 1.18.0 updates its dependency 'cryptography' to version '41.0.3' to include a fix for a Denial of Service vulnerability.\r\nhttps://github.com/GitGuardian/ggshield/commit/3c67771a4d66accede14fa23dfce9ea51571e082",
             "cve": "CVE-2023-2975",
@@ -46762,16 +47984,6 @@
                 "<1.18.0"
             ],
             "v": "<1.18.0"
-        },
-        {
-            "advisory": "Ggshield 1.18.0 updates its dependency 'cryptography' to version '41.0.3' to include a fix for a Denial of Service vulnerability.\r\nhttps://github.com/GitGuardian/ggshield/commit/3c67771a4d66accede14fa23dfce9ea51571e082",
-            "cve": "CVE-2023-3817",
-            "id": "pyup.io-60443",
-            "more_info_path": "/vulnerabilities/CVE-2023-3817/60443",
-            "specs": [
-                "<1.18.0"
-            ],
-            "v": "<1.18.0"
         }
     ],
     "ghga-service-commons": [
@@ -47119,9 +48331,9 @@
     "githubkit": [
         {
             "advisory": "Githubkit 0.9.4 updates its dependency 'cryptography' to v38.0.3 to include security fixes.",
-            "cve": "CVE-2022-3602",
-            "id": "pyup.io-52515",
-            "more_info_path": "/vulnerabilities/CVE-2022-3602/52515",
+            "cve": "CVE-2022-3786",
+            "id": "pyup.io-52470",
+            "more_info_path": "/vulnerabilities/CVE-2022-3786/52470",
             "specs": [
                 "<0.9.4"
             ],
@@ -47129,9 +48341,9 @@
         },
         {
             "advisory": "Githubkit 0.9.4 updates its dependency 'cryptography' to v38.0.3 to include security fixes.",
-            "cve": "CVE-2022-3786",
-            "id": "pyup.io-52470",
-            "more_info_path": "/vulnerabilities/CVE-2022-3786/52470",
+            "cve": "CVE-2022-3602",
+            "id": "pyup.io-52515",
+            "more_info_path": "/vulnerabilities/CVE-2022-3602/52515",
             "specs": [
                 "<0.9.4"
             ],
@@ -47248,6 +48460,36 @@
             ],
             "v": "<11.0.1,==12.0.0"
         },
+        {
+            "advisory": "The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image.",
+            "cve": "CVE-2013-1840",
+            "id": "pyup.io-67955",
+            "more_info_path": "/vulnerabilities/CVE-2013-1840/67955",
+            "specs": [
+                "<13.0.0"
+            ],
+            "v": "<13.0.0"
+        },
+        {
+            "advisory": "An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'localhost:22'. This could then allow an attacker to enumerate internal network details while appearing masked, since the scan would appear to originate from the Glance Image service.",
+            "cve": "CVE-2017-7200",
+            "id": "pyup.io-67541",
+            "more_info_path": "/vulnerabilities/CVE-2017-7200/67541",
+            "specs": [
+                "<13.0.0"
+            ],
+            "v": "<13.0.0"
+        },
+        {
+            "advisory": "The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.",
+            "cve": "CVE-2013-4354",
+            "id": "pyup.io-67992",
+            "more_info_path": "/vulnerabilities/CVE-2013-4354/67992",
+            "specs": [
+                "<2.1"
+            ],
+            "v": "<2.1"
+        },
         {
             "advisory": "Glance 23.0.1, 24.1.1 and 25.0.0 include a fix for CVE-2022-47951: An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.",
             "cve": "CVE-2022-47951",
@@ -47260,6 +48502,16 @@
             ],
             "v": "<23.0.1,>=24.0.0.0rc1,<24.1.1,>=25.0.0.0b1,<25.0.0"
         },
+        {
+            "advisory": "The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.",
+            "cve": "CVE-2015-8234",
+            "id": "pyup.io-70458",
+            "more_info_path": "/vulnerabilities/CVE-2015-8234/70458",
+            "specs": [
+                "<=11.0.0"
+            ],
+            "v": "<=11.0.0"
+        },
         {
             "advisory": "OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.",
             "cve": "CVE-2013-4428",
@@ -47282,6 +48534,89 @@
             ],
             "v": ">0"
         },
+        {
+            "advisory": "OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading the log.",
+            "cve": "CVE-2014-1948",
+            "id": "pyup.io-70456",
+            "more_info_path": "/vulnerabilities/CVE-2014-1948/70456",
+            "specs": [
+                ">2010,<2013.2.2"
+            ],
+            "v": ">2010,<2013.2.2"
+        },
+        {
+            "advisory": "OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image.",
+            "cve": "CVE-2014-5356",
+            "id": "pyup.io-70455",
+            "more_info_path": "/vulnerabilities/CVE-2014-5356/70455",
+            "specs": [
+                ">2010,<2014.1.3"
+            ],
+            "v": ">2010,<2014.1.3"
+        },
+        {
+            "advisory": "The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493.",
+            "cve": "CVE-2015-1195",
+            "id": "pyup.io-70453",
+            "more_info_path": "/vulnerabilities/CVE-2015-1195/70453",
+            "specs": [
+                ">2010,<2014.1.4",
+                ">=2014.2,<2014.2.2"
+            ],
+            "v": ">2010,<2014.1.4,>=2014.2,<2014.2.2"
+        },
+        {
+            "advisory": "OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them before the uploads finish, a different vulnerability than CVE-2015-1881.",
+            "cve": "CVE-2014-9684",
+            "id": "pyup.io-70454",
+            "more_info_path": "/vulnerabilities/CVE-2014-9684/70454",
+            "specs": [
+                ">2010,<2014.2.3"
+            ],
+            "v": ">2010,<2014.2.3"
+        },
+        {
+            "advisory": "OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them, a different vulnerability than CVE-2014-9684.",
+            "cve": "CVE-2015-1881",
+            "id": "pyup.io-70452",
+            "more_info_path": "/vulnerabilities/CVE-2015-1881/70452",
+            "specs": [
+                ">2010,<2015.1.0"
+            ],
+            "v": ">2010,<2015.1.0"
+        },
+        {
+            "advisory": "OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly using the import task flow API to create images and then deleting them.",
+            "cve": "CVE-2015-3289",
+            "id": "pyup.io-70459",
+            "more_info_path": "/vulnerabilities/CVE-2015-3289/70459",
+            "specs": [
+                ">2010,<2015.1.1"
+            ],
+            "v": ">2010,<2015.1.1"
+        },
+        {
+            "advisory": "OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.",
+            "cve": "CVE-2014-9623",
+            "id": "pyup.io-70428",
+            "more_info_path": "/vulnerabilities/CVE-2014-9623/70428",
+            "specs": [
+                ">2010,<=2014.1.3",
+                ">=2014,<=2014.2"
+            ],
+            "v": ">2010,<=2014.1.3,>=2014,<=2014.2"
+        },
+        {
+            "advisory": "A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v2 `/images` API POST method for authenticated users, resulting in possible denial of service attacks through database table saturation.",
+            "cve": "CVE-2016-8611",
+            "id": "pyup.io-70621",
+            "more_info_path": "/vulnerabilities/CVE-2016-8611/70621",
+            "specs": [
+                ">2010,<=2015.1.4",
+                "<=26.0.0.0"
+            ],
+            "v": ">2010,<=2015.1.4,<=26.0.0.0"
+        },
         {
             "advisory": "OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/*.",
             "cve": "CVE-2015-5251",
@@ -47315,6 +48650,36 @@
             ],
             "v": ">=2010,<2015.1.3,>=11.0.0.0rc1,<11.0.2"
         },
+        {
+            "advisory": "The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.",
+            "cve": "CVE-2012-4573",
+            "id": "pyup.io-68003",
+            "more_info_path": "/vulnerabilities/CVE-2012-4573/68003",
+            "specs": [
+                ">=2012.2,<2013.2.4"
+            ],
+            "v": ">=2012.2,<2013.2.4"
+        },
+        {
+            "advisory": "The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4573.",
+            "cve": "CVE-2012-5482",
+            "id": "pyup.io-68004",
+            "more_info_path": "/vulnerabilities/CVE-2012-5482/68004",
+            "specs": [
+                ">=2012.2,<2013.2.4"
+            ],
+            "v": ">=2012.2,<2013.2.4"
+        },
+        {
+            "advisory": "store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.",
+            "cve": "CVE-2013-0212",
+            "id": "pyup.io-68005",
+            "more_info_path": "/vulnerabilities/CVE-2013-0212/68005",
+            "specs": [
+                ">=2012.2,<2013.2.4"
+            ],
+            "v": ">=2012.2,<2013.2.4"
+        },
         {
             "advisory": "The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.",
             "cve": "CVE-2014-0162",
@@ -47325,6 +48690,17 @@
             ],
             "v": ">=2013.2.0,<2013.2.4"
         },
+        {
+            "advisory": "The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property.",
+            "cve": "CVE-2014-9493",
+            "id": "pyup.io-70429",
+            "more_info_path": "/vulnerabilities/CVE-2014-9493/70429",
+            "specs": [
+                ">=2014.1,<2014.1.4",
+                ">=2014.2,<2014.2.2"
+            ],
+            "v": ">=2014.1,<2014.1.4,>=2014.2,<2014.2.2"
+        },
         {
             "advisory": "The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.",
             "cve": "CVE-2015-5163",
@@ -47560,20 +48936,20 @@
             "v": "<2.12.0"
         },
         {
-            "advisory": "Gnoll 4.2.7 pins its dependency 'wheel' to versions >=0.38.0 to include a security fix.",
-            "cve": "CVE-2022-40898",
-            "id": "pyup.io-52496",
-            "more_info_path": "/vulnerabilities/CVE-2022-40898/52496",
+            "advisory": "Gnoll 4.2.7 updates its dependency 'setuptools' to v65.5.1 to include a security fix.",
+            "cve": "CVE-2022-40897",
+            "id": "pyup.io-52493",
+            "more_info_path": "/vulnerabilities/CVE-2022-40897/52493",
             "specs": [
                 "<4.2.7"
             ],
             "v": "<4.2.7"
         },
         {
-            "advisory": "Gnoll 4.2.7 updates its dependency 'setuptools' to v65.5.1 to include a security fix.",
-            "cve": "CVE-2022-40897",
-            "id": "pyup.io-52493",
-            "more_info_path": "/vulnerabilities/CVE-2022-40897/52493",
+            "advisory": "Gnoll 4.2.7 pins its dependency 'wheel' to versions >=0.38.0 to include a security fix.",
+            "cve": "CVE-2022-40898",
+            "id": "pyup.io-52496",
+            "more_info_path": "/vulnerabilities/CVE-2022-40898/52496",
             "specs": [
                 "<4.2.7"
             ],
@@ -47613,6 +48989,16 @@
         }
     ],
     "gns3-server": [
+        {
+            "advisory": "Untrusted search path vulnerability in GNS3 1.2.3 allows local users to gain privileges via a Trojan horse uuid.dll in an unspecified directory.",
+            "cve": "CVE-2015-2667",
+            "id": "pyup.io-70465",
+            "more_info_path": "/vulnerabilities/CVE-2015-2667/70465",
+            "specs": [
+                "<1.2.3"
+            ],
+            "v": "<1.2.3"
+        },
         {
             "advisory": "GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration file while executing in a setuid root context.",
             "cve": "CVE-2020-14976",
@@ -47859,16 +49245,6 @@
             ],
             "v": "<0.67.0"
         },
-        {
-            "advisory": "Gordo 1.12.0 updates its dependency \"numpy\" to v1.21.0 to include a security fix.",
-            "cve": "CVE-2021-33430",
-            "id": "pyup.io-51152",
-            "more_info_path": "/vulnerabilities/CVE-2021-33430/51152",
-            "specs": [
-                "<1.12.0"
-            ],
-            "v": "<1.12.0"
-        },
         {
             "advisory": "Gordo 1.12.0 updates its dependency \"TensorFlow\" requirement to \"~=2.7.0\" to include security fixes.",
             "cve": "CVE-2022-21725",
@@ -48399,6 +49775,16 @@
             ],
             "v": "<1.12.0"
         },
+        {
+            "advisory": "Gordo 1.12.0 updates its dependency \"numpy\" to v1.21.0 to include a security fix.",
+            "cve": "CVE-2021-33430",
+            "id": "pyup.io-51152",
+            "more_info_path": "/vulnerabilities/CVE-2021-33430/51152",
+            "specs": [
+                "<1.12.0"
+            ],
+            "v": "<1.12.0"
+        },
         {
             "advisory": "Gordo 5.1.2 updates its dependency 'cryptography' to version '41.0.0' to include a security fix.\r\nhttps://github.com/equinor/gordo/pull/1324/commits/3e02a6e184236c6406fb6faa1dda440baa2af68a",
             "cve": "CVE-2023-2650",
@@ -48584,6 +49970,18 @@
             "v": "<2.8.6"
         }
     ],
+    "gpyg": [
+        {
+            "advisory": "Gpyg version 0.3.0 resolves the issue with unquoted strings by ensuring user inputs are correctly quoted.",
+            "cve": "PVE-2024-67021",
+            "id": "pyup.io-67021",
+            "more_info_path": "/vulnerabilities/PVE-2024-67021/67021",
+            "specs": [
+                "<0.3.0"
+            ],
+            "v": "<0.3.0"
+        }
+    ],
     "gradio": [
         {
             "advisory": "Gradio 2.6.0 fixes arbitrary file read vulnerabilities.\r\nhttps://github.com/gradio-app/gradio/pull/406",
@@ -48635,6 +50033,16 @@
             ],
             "v": "<4.11.0"
         },
+        {
+            "advisory": "Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository gradio-app/gradio prior to main.",
+            "cve": "CVE-2023-6572",
+            "id": "pyup.io-70406",
+            "more_info_path": "/vulnerabilities/CVE-2023-6572/70406",
+            "specs": [
+                "<4.14.0"
+            ],
+            "v": "<4.14.0"
+        },
         {
             "advisory": "Gradio version 4.19.1 introduces security enhancements to protect against timing attacks that could potentially guess Gradio passwords.\r\nhttps://github.com/gradio-app/gradio/commit/e329f1fd38935213fe0e73962e8cbd5d3af6e87b",
             "cve": "PVE-2024-65402",
@@ -48896,20 +50304,20 @@
     ],
     "graphscope": [
         {
-            "advisory": "Graphscope 0.7.0 updates its dependency 'Apache Commons IO' to v2.7 to include a security fix.",
-            "cve": "CVE-2021-29425",
-            "id": "pyup.io-42560",
-            "more_info_path": "/vulnerabilities/CVE-2021-29425/42560",
+            "advisory": "Graphscope 0.7.0 updates its dependency 'SLF4J' to v1.7.31 to include a security fix.",
+            "cve": "CVE-2018-8088",
+            "id": "pyup.io-42561",
+            "more_info_path": "/vulnerabilities/CVE-2018-8088/42561",
             "specs": [
                 "<0.7.0"
             ],
             "v": "<0.7.0"
         },
         {
-            "advisory": "Graphscope 0.7.0 updates its dependency 'SLF4J' to v1.7.31 to include a security fix.",
-            "cve": "CVE-2018-8088",
-            "id": "pyup.io-42561",
-            "more_info_path": "/vulnerabilities/CVE-2018-8088/42561",
+            "advisory": "Graphscope 0.7.0 updates its dependency 'Apache Commons IO' to v2.7 to include a security fix.",
+            "cve": "CVE-2021-29425",
+            "id": "pyup.io-42560",
+            "more_info_path": "/vulnerabilities/CVE-2021-29425/42560",
             "specs": [
                 "<0.7.0"
             ],
@@ -48994,20 +50402,20 @@
             "v": "<1.2.0"
         },
         {
-            "advisory": "Grpcio 1.3.0 includes a fix for CVE-2017-8359: Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.\r\nhttps://github.com/grpc/grpc/pull/10353/commits/aab6992c006be6fb80df73fd9f218365099c016d",
-            "cve": "CVE-2017-8359",
-            "id": "pyup.io-47263",
-            "more_info_path": "/vulnerabilities/CVE-2017-8359/47263",
+            "advisory": "Grpcio 1.3.0 includes a fix for CVE-2017-9431: Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c.\r\nhttps://github.com/grpc/grpc/pull/10492/commits/c6ec1155d026c91b1badb07ef1605bb747cff064",
+            "cve": "CVE-2017-9431",
+            "id": "pyup.io-47264",
+            "more_info_path": "/vulnerabilities/CVE-2017-9431/47264",
             "specs": [
                 "<1.3.0"
             ],
             "v": "<1.3.0"
         },
         {
-            "advisory": "Grpcio 1.3.0 includes a fix for CVE-2017-9431: Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c.\r\nhttps://github.com/grpc/grpc/pull/10492/commits/c6ec1155d026c91b1badb07ef1605bb747cff064",
-            "cve": "CVE-2017-9431",
-            "id": "pyup.io-47264",
-            "more_info_path": "/vulnerabilities/CVE-2017-9431/47264",
+            "advisory": "Grpcio 1.3.0 includes a fix for CVE-2017-8359: Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.\r\nhttps://github.com/grpc/grpc/pull/10353/commits/aab6992c006be6fb80df73fd9f218365099c016d",
+            "cve": "CVE-2017-8359",
+            "id": "pyup.io-47263",
+            "more_info_path": "/vulnerabilities/CVE-2017-8359/47263",
             "specs": [
                 "<1.3.0"
             ],
@@ -49024,20 +50432,20 @@
             "v": "<1.53.0"
         },
         {
-            "advisory": "Grpcio 1.53.0 includes a fix for a Connection Confusion vulnerability. When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and a backend, this could lead to requests from the proxy being interpreted as containing headers from different proxy clients - leading to an information leak that can be used for privilege escalation or data exfiltration.\r\nhttps://github.com/advisories/GHSA-cfgp-2977-2fmm",
-            "cve": "CVE-2023-32731",
-            "id": "pyup.io-59869",
-            "more_info_path": "/vulnerabilities/CVE-2023-32731/59869",
+            "advisory": "Grpcio 1.53.0 includes a fix for a Connection Termination vulnerability. The prior versions contain a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for -bin suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies.\r\nhttps://github.com/advisories/GHSA-9hxf-ppjv-w6rq",
+            "cve": "CVE-2023-32732",
+            "id": "pyup.io-59868",
+            "more_info_path": "/vulnerabilities/CVE-2023-32732/59868",
             "specs": [
                 "<1.53.0"
             ],
             "v": "<1.53.0"
         },
         {
-            "advisory": "Grpcio 1.53.0 includes a fix for a Connection Termination vulnerability. The prior versions contain a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for -bin suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies.\r\nhttps://github.com/advisories/GHSA-9hxf-ppjv-w6rq",
-            "cve": "CVE-2023-32732",
-            "id": "pyup.io-59868",
-            "more_info_path": "/vulnerabilities/CVE-2023-32732/59868",
+            "advisory": "Grpcio 1.53.0 includes a fix for a Connection Confusion vulnerability. When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and a backend, this could lead to requests from the proxy being interpreted as containing headers from different proxy clients - leading to an information leak that can be used for privilege escalation or data exfiltration.\r\nhttps://github.com/advisories/GHSA-cfgp-2977-2fmm",
+            "cve": "CVE-2023-32731",
+            "id": "pyup.io-59869",
+            "more_info_path": "/vulnerabilities/CVE-2023-32731/59869",
             "specs": [
                 "<1.53.0"
             ],
@@ -49093,9 +50501,9 @@
         },
         {
             "advisory": "Grpcio-tools 1.3.0 depends on 'grpcio' v1.3.0, which includes security fixes.",
-            "cve": "CVE-2017-8359",
-            "id": "pyup.io-47169",
-            "more_info_path": "/vulnerabilities/CVE-2017-8359/47169",
+            "cve": "CVE-2017-9431",
+            "id": "pyup.io-47168",
+            "more_info_path": "/vulnerabilities/CVE-2017-9431/47168",
             "specs": [
                 "<1.3.0"
             ],
@@ -49103,9 +50511,9 @@
         },
         {
             "advisory": "Grpcio-tools 1.3.0 depends on 'grpcio' v1.3.0, which includes security fixes.",
-            "cve": "CVE-2017-9431",
-            "id": "pyup.io-47168",
-            "more_info_path": "/vulnerabilities/CVE-2017-9431/47168",
+            "cve": "CVE-2017-8359",
+            "id": "pyup.io-47169",
+            "more_info_path": "/vulnerabilities/CVE-2017-8359/47169",
             "specs": [
                 "<1.3.0"
             ],
@@ -49324,9 +50732,9 @@
     "gyver": [
         {
             "advisory": "Gyver 2.8.3 updates its dependency 'cryptography' to versions ^41.0.4 to include security fixes.",
-            "cve": "CVE-2023-3446",
-            "id": "pyup.io-61396",
-            "more_info_path": "/vulnerabilities/CVE-2023-3446/61396",
+            "cve": "CVE-2023-38325",
+            "id": "pyup.io-61403",
+            "more_info_path": "/vulnerabilities/CVE-2023-38325/61403",
             "specs": [
                 "<2.8.3"
             ],
@@ -49334,9 +50742,9 @@
         },
         {
             "advisory": "Gyver 2.8.3 updates its dependency 'cryptography' to versions ^41.0.4 to include security fixes.",
-            "cve": "CVE-2023-38325",
-            "id": "pyup.io-61403",
-            "more_info_path": "/vulnerabilities/CVE-2023-38325/61403",
+            "cve": "CVE-2023-3446",
+            "id": "pyup.io-61396",
+            "more_info_path": "/vulnerabilities/CVE-2023-3446/61396",
             "specs": [
                 "<2.8.3"
             ],
@@ -49361,6 +50769,16 @@
                 "<2.8.4"
             ],
             "v": "<2.8.4"
+        },
+        {
+            "advisory": "Gyver version 4.1.2 has upgraded its orjson dependency from version 3.9.4 to 3.10.0 to address the security issues outlined in CVE-2024-27454.",
+            "cve": "CVE-2024-27454",
+            "id": "pyup.io-68040",
+            "more_info_path": "/vulnerabilities/CVE-2024-27454/68040",
+            "specs": [
+                "<4.1.2"
+            ],
+            "v": "<4.1.2"
         }
     ],
     "h2o": [
@@ -49475,7 +50893,7 @@
             "v": "<3.40.0.3"
         },
         {
-            "advisory": "H2o 3.40.0.4 updates its dependency 'json-smart' to '2.4.10' to fix CVE-2023-1370.\r\n https://github.com/h2oai/h2o-3/pull/6680",
+            "advisory": "H2o 3.40.0.4 updates its dependency 'json-smart' to '2.4.10' to fix CVE-2023-1370.",
             "cve": "CVE-2023-1370",
             "id": "pyup.io-59335",
             "more_info_path": "/vulnerabilities/CVE-2023-1370/59335",
@@ -49793,6 +51211,20 @@
             "v": "<=1.16.6"
         }
     ],
+    "heat": [
+        {
+            "advisory": "In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are <=5.0.3, >=6.0.0 <=6.1.0, and ==7.0.0.",
+            "cve": "CVE-2016-9185",
+            "id": "pyup.io-70500",
+            "more_info_path": "/vulnerabilities/CVE-2016-9185/70500",
+            "specs": [
+                "<=5.0.3",
+                ">=6.0.0,<=6.1.0",
+                "<=7.0.0"
+            ],
+            "v": "<=5.0.3,>=6.0.0,<=6.1.0,<=7.0.0"
+        }
+    ],
     "heedy": [
         {
             "advisory": "Heedy 0.3.0a1 reports it its changelog: There might [...] be security issues. Use at your own risk.",
@@ -49829,6 +51261,18 @@
             "v": ">0"
         }
     ],
+    "help-tokens": [
+        {
+            "advisory": "Help-tokens 1.0.4 has updated its Jinja2 requirement from version 2.9.6 to 2.10.1 to address a known security vulnerability found in previous versions, as identified by CVE-2019-10906.",
+            "cve": "PVE-2024-67010",
+            "id": "pyup.io-67010",
+            "more_info_path": "/vulnerabilities/PVE-2024-67010/67010",
+            "specs": [
+                "<1.0.4"
+            ],
+            "v": "<1.0.4"
+        }
+    ],
     "henosis": [
         {
             "advisory": "Henosis 0.0.11 uses 'yaml.safe_load()' to prevent a code execution vulnerability.",
@@ -49841,6 +51285,18 @@
             "v": "<0.0.11"
         }
     ],
+    "hexkit": [
+        {
+            "advisory": "Hexkit 2.2.0 has upgraded its cryptography library requirement to version 42.0.4 or later, addressing the security issue CVE-2024-26130.",
+            "cve": "CVE-2024-26130",
+            "id": "pyup.io-67587",
+            "more_info_path": "/vulnerabilities/CVE-2024-26130/67587",
+            "specs": [
+                "<2.2.0"
+            ],
+            "v": "<2.2.0"
+        }
+    ],
     "heyoo": [
         {
             "advisory": "Heyoo version 0.4 has disabled the debug mode, which was previously activated by default in the hook. The app was vulnerable to exploitation once online.\r\nhttps://github.com/Neurotech-HQ/heyoo/pull/85/commits/7631be553bd15093d807f4446a3ab941e6a14994",
@@ -49936,6 +51392,18 @@
             "v": "<1.2.0"
         }
     ],
+    "hikari": [
+        {
+            "advisory": "Hikari version 2.0.0.dev73 addresses a bug where prematurely shutting down a bot during its startup phase led to a deadlock, enhancing stability and functionality during the bot's initialization process.",
+            "cve": "PVE-2024-67104",
+            "id": "pyup.io-67104",
+            "more_info_path": "/vulnerabilities/PVE-2024-67104/67104",
+            "specs": [
+                "<2.0.0.dev73"
+            ],
+            "v": "<2.0.0.dev73"
+        }
+    ],
     "hippogym": [
         {
             "advisory": "Hippogym 1.1.0 updates its dependency 'pillow' to v7.1.0 to include security fixes.",
@@ -50175,6 +51643,16 @@
             ],
             "v": "<2023.3.0"
         },
+        {
+            "advisory": "The Home Assistant Companion for iOS and macOS app up to version 2023.4 are vulnerable to Client-Side Request Forgery. Attackers may send malicious links/QRs to victims that, when visited, will make the victim to call arbitrary services in their Home Assistant installation. Combined with this security advisory, may result in full compromise and remote code execution (RCE). Version 2023.7 addresses this issue and all users are advised to upgrade. There are no known workarounds for this vulnerability. This issue is also tracked as GitHub Security Lab (GHSL) Vulnerability Report: GHSL-2023-161.",
+            "cve": "CVE-2023-44385",
+            "id": "pyup.io-70400",
+            "more_info_path": "/vulnerabilities/CVE-2023-44385/70400",
+            "specs": [
+                "<2023.7"
+            ],
+            "v": "<2023.7"
+        },
         {
             "advisory": "Homeassistant 2023.8.0 includes a fix for CVE-2023-41896: Whilst auditing the frontend code to identify hidden parameters, Cure53 detected 'auth_callback=1', which is leveraged by the WebSocket authentication logic in tandem with the 'state' parameter. The state parameter contains the 'hassUrl', which is subsequently utilized to establish a WebSocket connection. This behavior permits an attacker to create a malicious Home Assistant link with a modified state parameter that forces the frontend to connect to an alternative WebSocket backend. Henceforth, the attacker can spoof any WebSocket responses and trigger cross site scripting (XSS). Since the XSS is executed on the actual Home Assistant frontend domain, it can connect to the real Home Assistant backend, which essentially represents a comprehensive takeover scenario. Permitting the site to be iframed by other origins, as discussed in GHSA-935v-rmg9-44mw, renders this exploit substantially covert since a malicious website can obfuscate the compromise strategy in the background. However, even without this, the attacker can still send the 'auth_callback' link directly to the victim user. To mitigate this issue, Cure53 advises modifying the WebSocket code\u2019s authentication flow. An optimal implementation in this regard would not trust the 'hassUrl' passed in by a GET parameter. Cure53 must stipulate the significant time required of the Cure53 consultants to identify an XSS vector, despite holding full control over the WebSocket responses. In many areas, data from the WebSocket was properly sanitized, which hinders post-exploitation. The audit team eventually detected the 'js_url' for custom panels, though generally, the frontend exhibited reasonable security hardening. This issue has been addressed in Home Assistant Core version 2023.8.0 and in the npm package home-assistant-js-websocket in version 8.2.0.\r\nhttps://github.com/home-assistant/core/security/advisories/GHSA-cr83-q7r2-7f5q",
             "cve": "CVE-2023-41896",
@@ -50185,16 +51663,6 @@
             ],
             "v": "<2023.8.0"
         },
-        {
-            "advisory": "Homeassistant 2023.8.1 updates its dependency 'cryptography' to version '41.0.3' to include a fix for a Denial of Service vulnerability.\r\nhttps://github.com/home-assistant/core/pull/97611",
-            "cve": "CVE-2023-3817",
-            "id": "pyup.io-60215",
-            "more_info_path": "/vulnerabilities/CVE-2023-3817/60215",
-            "specs": [
-                "<2023.8.1"
-            ],
-            "v": "<2023.8.1"
-        },
         {
             "advisory": "Homeassistant 2023.8.1 updates its dependency 'cryptography' to version '41.0.3' to include a fix for a Denial of Service vulnerability.\r\nhttps://github.com/home-assistant/core/pull/97611",
             "cve": "CVE-2023-3446",
@@ -50216,14 +51684,14 @@
             "v": "<2023.8.1"
         },
         {
-            "advisory": "Home assistant is an open source home automation. The audit team\u2019s analyses confirmed that the `redirect_uri` and `client_id` are alterable when logging in. Consequently, the code parameter utilized to fetch the `access_token` post-authentication will be sent to the URL specified in the aforementioned parameters. Since an arbitrary URL is permitted and `homeassistant.local` represents the preferred, default domain likely used and trusted by many users, an attacker could leverage this weakness to manipulate a user and retrieve account access. Notably, this attack strategy is plausible if the victim has exposed their Home Assistant to the Internet, since after acquiring the victim\u2019s `access_token` the adversary would need to utilize it directly towards the instance to achieve any pertinent malicious actions. To achieve this compromise attempt, the attacker must send a link with a `redirect_uri` that they control to the victim\u2019s own Home Assistant instance. In the eventuality the victim authenticates via said link, the attacker would obtain code sent to the specified URL in `redirect_uri`, which can then be leveraged to fetch an `access_token`. Pertinently, an attacker could increase the efficacy of this strategy by registering a near identical domain to `homeassistant.local`, which at first glance may appear legitimate and thereby obfuscate any malicious intentions. This issue has been addressed in version 2023.9.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.",
-            "cve": "CVE-2023-41893",
-            "id": "pyup.io-65361",
-            "more_info_path": "/vulnerabilities/CVE-2023-41893/65361",
+            "advisory": "Homeassistant 2023.8.1 updates its dependency 'cryptography' to version '41.0.3' to include a fix for a Denial of Service vulnerability.\r\nhttps://github.com/home-assistant/core/pull/97611",
+            "cve": "CVE-2023-3817",
+            "id": "pyup.io-60215",
+            "more_info_path": "/vulnerabilities/CVE-2023-3817/60215",
             "specs": [
-                "<2023.9.0"
+                "<2023.8.1"
             ],
-            "v": "<2023.9.0"
+            "v": "<2023.8.1"
         },
         {
             "advisory": "Homeassistant 2023.9.0 includes a fix for CVE-2023-41899: In affected versions the 'hassio.addon_stdin' is vulnerable to a partial Server-Side Request Forgery where an attacker capable of calling this service (e.g.: through GHSA-h2jp-7grc-9xpp) may be able to invoke any Supervisor REST API endpoints with a POST request. An attacker able to exploit will be able to control the data dictionary, including its addon and input key/values.\r\nhttps://github.com/home-assistant/core/pull/99232",
@@ -50235,6 +51703,46 @@
             ],
             "v": "<2023.9.0"
         },
+        {
+            "advisory": "Home assistant is an open source home automation. The assessment verified that webhooks available in the webhook component are triggerable via the `*.ui.nabu.casa` URL without authentication, even when the webhook is marked as Only accessible from the local network. This issue is facilitated by the SniTun proxy, which sets the source address to 127.0.0.1 on all requests sent to the public URL and forwarded to the local Home Assistant. This issue has been addressed in version 2023.9.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.",
+            "cve": "CVE-2023-41894",
+            "id": "pyup.io-70403",
+            "more_info_path": "/vulnerabilities/CVE-2023-41894/70403",
+            "specs": [
+                "<2023.9.0"
+            ],
+            "v": "<2023.9.0"
+        },
+        {
+            "advisory": "Home assistant is an open source home automation. The Home Assistant login page allows users to use their local Home Assistant credentials and log in to another website that specifies the `redirect_uri` and `client_id` parameters. Although the `redirect_uri` validation typically ensures that it matches the `client_id` and the scheme represents either `http` or `https`, Home Assistant will fetch the `client_id` and check for `<link rel=\"redirect_uri\" href=\"...\">` HTML tags on the page. These URLs are not subjected to the same scheme validation and thus allow for arbitrary JavaScript execution on the Home Assistant administration page via usage of `javascript:` scheme URIs. This Cross-site Scripting (XSS) vulnerability can be executed on the Home Assistant frontend domain, which may be used for a full takeover of the Home Assistant account and installation. This issue has been addressed in version 2023.9.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.",
+            "cve": "CVE-2023-41895",
+            "id": "pyup.io-70402",
+            "more_info_path": "/vulnerabilities/CVE-2023-41895/70402",
+            "specs": [
+                "<2023.9.0"
+            ],
+            "v": "<2023.9.0"
+        },
+        {
+            "advisory": "Home assistant is an open source home automation. Home Assistant server does not set any HTTP security headers, including the X-Frame-Options header, which specifies whether the web page is allowed to be framed. The omission of this and correlating headers facilitates covert clickjacking attacks and alternative exploit opportunities, such as the vector described in this security advisory. This fault incurs major risk, considering the ability to trick users into installing an external and malicious add-on with minimal user interaction, which would enable Remote Code Execution (RCE) within the Home Assistant application. This issue has been addressed in version 2023.9.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.",
+            "cve": "CVE-2023-41897",
+            "id": "pyup.io-70401",
+            "more_info_path": "/vulnerabilities/CVE-2023-41897/70401",
+            "specs": [
+                "<2023.9.0"
+            ],
+            "v": "<2023.9.0"
+        },
+        {
+            "advisory": "Home assistant is an open source home automation. The audit team\u2019s analyses confirmed that the `redirect_uri` and `client_id` are alterable when logging in. Consequently, the code parameter utilized to fetch the `access_token` post-authentication will be sent to the URL specified in the aforementioned parameters. Since an arbitrary URL is permitted and `homeassistant.local` represents the preferred, default domain likely used and trusted by many users, an attacker could leverage this weakness to manipulate a user and retrieve account access. Notably, this attack strategy is plausible if the victim has exposed their Home Assistant to the Internet, since after acquiring the victim\u2019s `access_token` the adversary would need to utilize it directly towards the instance to achieve any pertinent malicious actions. To achieve this compromise attempt, the attacker must send a link with a `redirect_uri` that they control to the victim\u2019s own Home Assistant instance. In the eventuality the victim authenticates via said link, the attacker would obtain code sent to the specified URL in `redirect_uri`, which can then be leveraged to fetch an `access_token`. Pertinently, an attacker could increase the efficacy of this strategy by registering a near identical domain to `homeassistant.local`, which at first glance may appear legitimate and thereby obfuscate any malicious intentions. This issue has been addressed in version 2023.9.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.",
+            "cve": "CVE-2023-41893",
+            "id": "pyup.io-65361",
+            "more_info_path": "/vulnerabilities/CVE-2023-41893/65361",
+            "specs": [
+                "<2023.9.0"
+            ],
+            "v": "<2023.9.0"
+        },
         {
             "advisory": "Homeassistant 2023.9.2 includes a fix for CVE-2023-41898: The Home Assistant Companion for Android app up to version 2023.8.2 is vulnerable to arbitrary URL loading in a WebView. This enables all sorts of attacks, including arbitrary JavaScript execution, limited native code execution, and credential theft.\r\nhttps://github.blog/2023-11-30-securing-our-home-labs-home-assistant-code-review",
             "cve": "CVE-2023-41898",
@@ -50245,6 +51753,16 @@
             ],
             "v": "<2023.9.2"
         },
+        {
+            "advisory": "An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration.",
+            "cve": "CVE-2020-36517",
+            "id": "pyup.io-70619",
+            "more_info_path": "/vulnerabilities/CVE-2020-36517/70619",
+            "specs": [
+                "<=2022.03"
+            ],
+            "v": "<=2022.03"
+        },
         {
             "advisory": "Home Assistant before version 2023.12.3 has a vulnerability where the login page would disclose all active user accounts to unauthenticated LAN requests. This aimed to simplify login by displaying user profiles, similar to other applications. However, it exposed accounts to any LAN-connected device. Version 2023.12.3 patches this issue, limiting account visibility to enhance security. This vulnerability was specific to requests from the local or any reachable private subnet.",
             "cve": "CVE-2023-50715",
@@ -50322,20 +51840,20 @@
     ],
     "honeybee-radiance-postprocess": [
         {
-            "advisory": "Honeybee-radiance-postprocess 0.4.166 updates its dependency 'setuptools' to v65.5.1 to include a security fix.",
-            "cve": "CVE-2022-40897",
-            "id": "pyup.io-53623",
-            "more_info_path": "/vulnerabilities/CVE-2022-40897/53623",
+            "advisory": "Honeybee-radiance-postprocess 0.4.166 updates its dependency 'wheel' to v0.38.1 to include a security fix.",
+            "cve": "CVE-2022-40898",
+            "id": "pyup.io-53615",
+            "more_info_path": "/vulnerabilities/CVE-2022-40898/53615",
             "specs": [
                 "<0.4.166"
             ],
             "v": "<0.4.166"
         },
         {
-            "advisory": "Honeybee-radiance-postprocess 0.4.166 updates its dependency 'wheel' to v0.38.1 to include a security fix.",
-            "cve": "CVE-2022-40898",
-            "id": "pyup.io-53615",
-            "more_info_path": "/vulnerabilities/CVE-2022-40898/53615",
+            "advisory": "Honeybee-radiance-postprocess 0.4.166 updates its dependency 'setuptools' to v65.5.1 to include a security fix.",
+            "cve": "CVE-2022-40897",
+            "id": "pyup.io-53623",
+            "more_info_path": "/vulnerabilities/CVE-2022-40897/53623",
             "specs": [
                 "<0.4.166"
             ],
@@ -50550,9 +52068,124 @@
             "id": "pyup.io-37741",
             "more_info_path": "/vulnerabilities/CVE-2012-5474/37741",
             "specs": [
-                ">=2000,<2012.1.1"
+                ">2010,<2012.1.1"
+            ],
+            "v": ">2010,<2012.1.1"
+        },
+        {
+            "advisory": "Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) \"Volumes\" or (2) \"Network Topology\" page.",
+            "cve": "CVE-2013-6858",
+            "id": "pyup.io-70589",
+            "more_info_path": "/vulnerabilities/CVE-2013-6858/70589",
+            "specs": [
+                ">2010,<2013.2.1"
+            ],
+            "v": ">2010,<2013.2.1"
+        },
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.",
+            "cve": "CVE-2014-3475",
+            "id": "pyup.io-70423",
+            "more_info_path": "/vulnerabilities/CVE-2014-3475/70423",
+            "specs": [
+                ">2010,<2013.2.4",
+                ">=2014.1,<2014.1.2"
+            ],
+            "v": ">2010,<2013.2.4,>=2014.1,<2014.1.2"
+        },
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-3475.",
+            "cve": "CVE-2014-8578",
+            "id": "pyup.io-70584",
+            "more_info_path": "/vulnerabilities/CVE-2014-8578/70584",
+            "specs": [
+                ">2010,<2013.2.4",
+                ">=2014.1,<2014.2"
             ],
-            "v": ">=2000,<2012.1.1"
+            "v": ">2010,<2013.2.4,>=2014.1,<2014.2"
+        },
+        {
+            "advisory": "Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.",
+            "cve": "CVE-2015-3988",
+            "id": "pyup.io-70417",
+            "more_info_path": "/vulnerabilities/CVE-2015-3988/70417",
+            "specs": [
+                ">2010,<2015.1.1"
+            ],
+            "v": ">2010,<2015.1.1"
+        },
+        {
+            "advisory": "Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by mistake.",
+            "cve": "CVE-2012-3540",
+            "id": "pyup.io-68014",
+            "more_info_path": "/vulnerabilities/CVE-2012-3540/68014",
+            "specs": [
+                ">2010,<=2012.1"
+            ],
+            "v": ">2010,<=2012.1"
+        },
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console.",
+            "cve": "CVE-2012-2094",
+            "id": "pyup.io-68011",
+            "more_info_path": "/vulnerabilities/CVE-2012-2094/68011",
+            "specs": [
+                ">2010,<=2012.1"
+            ],
+            "v": ">2010,<=2012.1"
+        },
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.",
+            "cve": "CVE-2015-3219",
+            "id": "pyup.io-70418",
+            "more_info_path": "/vulnerabilities/CVE-2015-3219/70418",
+            "specs": [
+                ">2014.2,<2014.2.4",
+                ">2015.1,<2015.1.1"
+            ],
+            "v": ">2014.2,<2014.2.4,>2015.1,<2015.1.1"
+        },
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name.",
+            "cve": "CVE-2014-3594",
+            "id": "pyup.io-70590",
+            "more_info_path": "/vulnerabilities/CVE-2014-3594/70590",
+            "specs": [
+                ">=2010,<2013.2.4",
+                ">=2014.1,<2014.1.2"
+            ],
+            "v": ">=2010,<2013.2.4,>=2014.1,<2014.1.2"
+        },
+        {
+            "advisory": "OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.",
+            "cve": "CVE-2014-8124",
+            "id": "pyup.io-70611",
+            "more_info_path": "/vulnerabilities/CVE-2014-8124/70611",
+            "specs": [
+                ">=2010,<2014.1.3",
+                ">=2014.2.0,<2014.2.1"
+            ],
+            "v": ">=2010,<2014.1.3,>=2014.2.0,<2014.2.1"
+        },
+        {
+            "advisory": "Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.",
+            "cve": "CVE-2012-2144",
+            "id": "pyup.io-68012",
+            "more_info_path": "/vulnerabilities/CVE-2012-2144/68012",
+            "specs": [
+                ">=2012,<2012.1.1"
+            ],
+            "v": ">=2012,<2012.1.1"
+        },
+        {
+            "advisory": "Within the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value.",
+            "cve": "CVE-2012-5476",
+            "id": "pyup.io-67991",
+            "more_info_path": "/vulnerabilities/CVE-2012-5476/67991",
+            "specs": [
+                ">=2012.2,<=2012.2"
+            ],
+            "v": ">=2012.2,<=2012.2"
         },
         {
             "advisory": "The Identity v3 API in OpenStack Dashboard (Horizon) before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication token for that user.",
@@ -50573,6 +52206,18 @@
                 ">=2013.2.0,<2013.2.4"
             ],
             "v": ">=2013.2.0,<2013.2.4"
+        },
+        {
+            "advisory": "OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.",
+            "cve": "CVE-2017-7400",
+            "id": "pyup.io-67543",
+            "more_info_path": "/vulnerabilities/CVE-2017-7400/67543",
+            "specs": [
+                ">=9.0.0,<=9.1.1",
+                ">=10.0.0,<=10.0.2",
+                "==11.0.0"
+            ],
+            "v": ">=9.0.0,<=9.1.1,>=10.0.0,<=10.0.2,==11.0.0"
         }
     ],
     "horovod": [
@@ -52378,16 +54023,6 @@
             ],
             "v": "<3.4.0"
         },
-        {
-            "advisory": "Hotaru 3.4.0 updates its dependency 'Tensorflow' minimum requirement to v2.6.1 to include security fixes.",
-            "cve": "CVE-2020-8284",
-            "id": "pyup.io-45867",
-            "more_info_path": "/vulnerabilities/CVE-2020-8284/45867",
-            "specs": [
-                "<3.4.0"
-            ],
-            "v": "<3.4.0"
-        },
         {
             "advisory": "Hotaru 3.4.0 updates its dependency 'Tensorflow' minimum requirement to v2.6.1 to include security fixes.",
             "cve": "CVE-2020-8169",
@@ -52418,6 +54053,16 @@
             ],
             "v": "<3.4.0"
         },
+        {
+            "advisory": "Hotaru 3.4.0 updates its dependency 'Tensorflow' minimum requirement to v2.6.1 to include security fixes.",
+            "cve": "CVE-2020-8284",
+            "id": "pyup.io-45867",
+            "more_info_path": "/vulnerabilities/CVE-2020-8284/45867",
+            "specs": [
+                "<3.4.0"
+            ],
+            "v": "<3.4.0"
+        },
         {
             "advisory": "Hotaru 3.4.0 updates its dependency 'Tensorflow' minimum requirement to v2.6.1 to include security fixes.",
             "cve": "CVE-2020-8286",
@@ -53897,6 +55542,18 @@
             "v": "<0.1.2"
         }
     ],
+    "ibis-framework": [
+        {
+            "advisory": "Ibis-framework versions before 7.1.0 are susceptible to an OS Command Injection vulnerability due to improper neutralization of special elements used in OS commands. This vulnerability allows attackers to execute arbitrary code on the system where the ibis-framework is deployed.",
+            "cve": "CVE-2023-47248",
+            "id": "pyup.io-68084",
+            "more_info_path": "/vulnerabilities/CVE-2023-47248/68084",
+            "specs": [
+                "<7.1.0"
+            ],
+            "v": "<7.1.0"
+        }
+    ],
     "ibis-substrait": [
         {
             "advisory": "Ibis-substrait version 2.11.1 upgrades its protobuf dependency to version 3.20.2 in response to the security vulnerability CVE-2022-1941.\r\nhttps://github.com/ibis-project/ibis-substrait/commit/d45f2399cd19b5014a0de1deb74abbdbd3a24aa7",
@@ -53921,6 +55578,28 @@
             "v": "<1.0.1"
         }
     ],
+    "ibmsecurity": [
+        {
+            "advisory": "Affected versions of Ibmsecurity are vulnerable to a Insecure Communications flaw. All the SSL/TLS connections to the remote ISVA server are configured in an insecure way.",
+            "cve": "PVE-2024-67500",
+            "id": "pyup.io-67500",
+            "more_info_path": "/vulnerabilities/PVE-2024-67500/67500",
+            "specs": [
+                "<2024.4.5.0"
+            ],
+            "v": "<2024.4.5.0"
+        },
+        {
+            "advisory": "Affected versions of Ibmsecurity are vulnerable to a Hardcoded Credentials flaw.",
+            "cve": "PVE-2024-67530",
+            "id": "pyup.io-67530",
+            "more_info_path": "/vulnerabilities/PVE-2024-67530/67530",
+            "specs": [
+                "<2024.4.5.0"
+            ],
+            "v": "<2024.4.5.0"
+        }
+    ],
     "idchecker": [
         {
             "advisory": "Idchecker was re-created for security reasons.",
@@ -53933,6 +55612,18 @@
             "v": "<1.1.2"
         }
     ],
+    "idna": [
+        {
+            "advisory": "CVE-2024-3651 impacts the idna.encode() function, where a specially crafted argument could lead to significant resource consumption, causing a denial-of-service. In version 3.7, this function has been updated to reject such inputs efficiently, minimizing resource use. A practical workaround involves enforcing a maximum domain name length of 253 characters before encoding, as the vulnerability is triggered by unusually large inputs that normal operations wouldn't encounter.",
+            "cve": "CVE-2024-3651",
+            "id": "pyup.io-67895",
+            "more_info_path": "/vulnerabilities/CVE-2024-3651/67895",
+            "specs": [
+                "<3.7"
+            ],
+            "v": "<3.7"
+        }
+    ],
     "ietfdata": [
         {
             "advisory": "Ietfdata 0.6.3 updates its dependency 'certifi' to v2022.12.7 to include a security fix.",
@@ -54263,10 +55954,10 @@
             "v": "<1.0.1"
         },
         {
-            "advisory": "In-toto 2.0.0 fixes a security issue: Configuration Read From Local Directory.\r\nhttps://github.com/in-toto/in-toto/security/advisories/GHSA-wc64-c5rv-32pf",
-            "cve": "CVE-2023-32076",
-            "id": "pyup.io-58654",
-            "more_info_path": "/vulnerabilities/CVE-2023-32076/58654",
+            "advisory": "In-toto 2.0.0 fixes a security issue: Functionaries Do Not Perform Verification.\r\nhttps://github.com/in-toto/docs/security/advisories/GHSA-p86f-xmg6-9q4x",
+            "cve": "PVE-2023-58647",
+            "id": "pyup.io-58647",
+            "more_info_path": "/vulnerabilities/PVE-2023-58647/58647",
             "specs": [
                 "<2.0.0"
             ],
@@ -54283,10 +55974,10 @@
             "v": "<2.0.0"
         },
         {
-            "advisory": "In-toto 2.0.0 fixes a security issue: Functionaries Do Not Perform Verification.\r\nhttps://github.com/in-toto/docs/security/advisories/GHSA-p86f-xmg6-9q4x",
-            "cve": "PVE-2023-58647",
-            "id": "pyup.io-58647",
-            "more_info_path": "/vulnerabilities/PVE-2023-58647/58647",
+            "advisory": "In-toto 2.0.0 fixes a security issue: Configuration Read From Local Directory.\r\nhttps://github.com/in-toto/in-toto/security/advisories/GHSA-wc64-c5rv-32pf",
+            "cve": "CVE-2023-32076",
+            "id": "pyup.io-58654",
+            "more_info_path": "/vulnerabilities/CVE-2023-32076/58654",
             "specs": [
                 "<2.0.0"
             ],
@@ -54303,6 +55994,16 @@
                 "<0.46.0"
             ],
             "v": "<0.46.0"
+        },
+        {
+            "advisory": "Inboard version 0.68.0 has updated its gunicorn dependency from version 21.2.0 to 22.0.0 to address the security vulnerability detailed in CVE-2024-1135.",
+            "cve": "CVE-2024-1135",
+            "id": "pyup.io-70536",
+            "more_info_path": "/vulnerabilities/CVE-2024-1135/70536",
+            "specs": [
+                "<0.68.0"
+            ],
+            "v": "<0.68.0"
         }
     ],
     "incrivelsim": [
@@ -54359,6 +56060,16 @@
             ],
             "v": "<2.1.3"
         },
+        {
+            "advisory": "Indico 2.2.8 updates its dependency 'bleach' to v3.1.4 to include security fixes.",
+            "cve": "CVE-2020-6817",
+            "id": "pyup.io-43466",
+            "more_info_path": "/vulnerabilities/CVE-2020-6817/43466",
+            "specs": [
+                "<2.2.8"
+            ],
+            "v": "<2.2.8"
+        },
         {
             "advisory": "Indico 2.2.8 updates its dependency 'pillow' to v6.2.2 to include security fixes.",
             "cve": "CVE-2020-5312",
@@ -54370,10 +56081,20 @@
             "v": "<2.2.8"
         },
         {
-            "advisory": "Indico 2.2.8 updates its dependency 'bleach' to v3.1.4 to include security fixes.",
-            "cve": "CVE-2020-6817",
-            "id": "pyup.io-43466",
-            "more_info_path": "/vulnerabilities/CVE-2020-6817/43466",
+            "advisory": "Indico 2.2.8 updates its dependency 'pillow' to v6.2.2 to include security fixes.",
+            "cve": "CVE-2019-19911",
+            "id": "pyup.io-43465",
+            "more_info_path": "/vulnerabilities/CVE-2019-19911/43465",
+            "specs": [
+                "<2.2.8"
+            ],
+            "v": "<2.2.8"
+        },
+        {
+            "advisory": "Indico 2.2.8 updates its dependency 'pillow' to v6.2.2 to include security fixes.",
+            "cve": "CVE-2020-5310",
+            "id": "pyup.io-38163",
+            "more_info_path": "/vulnerabilities/CVE-2020-5310/38163",
             "specs": [
                 "<2.2.8"
             ],
@@ -54409,26 +56130,6 @@
             ],
             "v": "<2.2.8"
         },
-        {
-            "advisory": "Indico 2.2.8 updates its dependency 'pillow' to v6.2.2 to include security fixes.",
-            "cve": "CVE-2020-5310",
-            "id": "pyup.io-38163",
-            "more_info_path": "/vulnerabilities/CVE-2020-5310/38163",
-            "specs": [
-                "<2.2.8"
-            ],
-            "v": "<2.2.8"
-        },
-        {
-            "advisory": "Indico 2.2.8 updates its dependency 'pillow' to v6.2.2 to include security fixes.",
-            "cve": "CVE-2019-19911",
-            "id": "pyup.io-43465",
-            "more_info_path": "/vulnerabilities/CVE-2019-19911/43465",
-            "specs": [
-                "<2.2.8"
-            ],
-            "v": "<2.2.8"
-        },
         {
             "advisory": "Indico 2.3.1 fixes a potential data leakage between OAuth-authenticated and unauthenticated HTTP API requests for the same resource. Developers believe this issue was not exploitable in any Indico instance.",
             "cve": "PVE-2022-48311",
@@ -54489,6 +56190,16 @@
             ],
             "v": "<3.0rc1"
         },
+        {
+            "advisory": "Indico 3.2.3 updates its dependency 'cryptography ' to include a security fix.",
+            "cve": "CVE-2023-0286",
+            "id": "pyup.io-53450",
+            "more_info_path": "/vulnerabilities/CVE-2023-0286/53450",
+            "specs": [
+                "<3.2.3"
+            ],
+            "v": "<3.2.3"
+        },
         {
             "advisory": "Indico 3.2.3 sanitizes HTML in global announcement messages to avoid XSS attacks.",
             "cve": "PVE-2023-53437",
@@ -54509,16 +56220,6 @@
             ],
             "v": "<3.2.3"
         },
-        {
-            "advisory": "Indico 3.2.3 updates its dependency 'cryptography ' to include a security fix.",
-            "cve": "CVE-2023-0286",
-            "id": "pyup.io-53450",
-            "more_info_path": "/vulnerabilities/CVE-2023-0286/53450",
-            "specs": [
-                "<3.2.3"
-            ],
-            "v": "<3.2.3"
-        },
         {
             "advisory": "Indico 3.2.5 includes a fix for a XSS vulnerability.\r\nhttps://github.com/indico/indico/pull/5818",
             "cve": "PVE-2023-59202",
@@ -67225,20 +68926,20 @@
             "v": "<0.8.0"
         },
         {
-            "advisory": "Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2.\r\nhttps://github.com/inventree/InvenTree/security/advisories/GHSA-7rq4-qcpw-74gq",
-            "cve": "CVE-2022-2112",
-            "id": "pyup.io-54072",
-            "more_info_path": "/vulnerabilities/CVE-2022-2112/54072",
+            "advisory": "Inventree 0.7.2 includes a security fix: Affected versions can have malicious javascript code injected into the users browser by other authenticated users, as data fields retrieved from the database are not properly sanitized before displaying in various front-end views.\r\n- https://huntr.dev/bounties/4cae8442-c042-43c2-ad89-6f666eaf3d57/\r\n- https://huntr.dev/bounties/9d640ef2-c52c-4106-b043-f7497d577078/\r\n- https://huntr.dev/bounties/b114e82f-6c02-485b-82ea-e242f89169c2/\r\n- https://huntr.dev/bounties/22783cd3-1b2c-48fc-b31f-03b53c86da0b/",
+            "cve": "PVE-2023-55205",
+            "id": "pyup.io-55205",
+            "more_info_path": "/vulnerabilities/PVE-2023-55205/55205",
             "specs": [
                 ">=0,<0.7.2"
             ],
             "v": ">=0,<0.7.2"
         },
         {
-            "advisory": "Inventree 0.7.2 includes a security fix: Affected versions can have malicious javascript code injected into the users browser by other authenticated users, as data fields retrieved from the database are not properly sanitized before displaying in various front-end views.\r\n- https://huntr.dev/bounties/4cae8442-c042-43c2-ad89-6f666eaf3d57/\r\n- https://huntr.dev/bounties/9d640ef2-c52c-4106-b043-f7497d577078/\r\n- https://huntr.dev/bounties/b114e82f-6c02-485b-82ea-e242f89169c2/\r\n- https://huntr.dev/bounties/22783cd3-1b2c-48fc-b31f-03b53c86da0b/",
-            "cve": "PVE-2023-55205",
-            "id": "pyup.io-55205",
-            "more_info_path": "/vulnerabilities/PVE-2023-55205/55205",
+            "advisory": "Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2.\r\nhttps://github.com/inventree/InvenTree/security/advisories/GHSA-7rq4-qcpw-74gq",
+            "cve": "CVE-2022-2112",
+            "id": "pyup.io-54072",
+            "more_info_path": "/vulnerabilities/CVE-2022-2112/54072",
             "specs": [
                 ">=0,<0.7.2"
             ],
@@ -67266,16 +68967,6 @@
         }
     ],
     "invokeai": [
-        {
-            "advisory": "Invokeai 2.0.2 updates its dependency, transformers, from version 4.19.2 to 4.21.3. This update was prompted by a vulnerability identified as CVE-2023-6730.\r\nhttps://github.com/invoke-ai/InvokeAI/commit/90d37eac034592cc3aed5a15a98971801b21988e",
-            "cve": "CVE-2023-6730",
-            "id": "pyup.io-63304",
-            "more_info_path": "/vulnerabilities/CVE-2023-6730/63304",
-            "specs": [
-                "<2.0.2"
-            ],
-            "v": "<2.0.2"
-        },
         {
             "advisory": "Invokeai 2.0.2 updates its dependency, protobuf, from version 3.19.4 to 3.19.6. This update was prompted by a vulnerability identified as CVE-2022-1941.\r\nhttps://github.com/invoke-ai/InvokeAI/commit/90d37eac034592cc3aed5a15a98971801b21988e",
             "cve": "CVE-2022-1941",
@@ -67295,6 +68986,16 @@
                 "<2.0.2"
             ],
             "v": "<2.0.2"
+        },
+        {
+            "advisory": "Invokeai 2.0.2 updates its dependency, transformers, from version 4.19.2 to 4.21.3. This update was prompted by a vulnerability identified as CVE-2023-6730.\r\nhttps://github.com/invoke-ai/InvokeAI/commit/90d37eac034592cc3aed5a15a98971801b21988e",
+            "cve": "CVE-2023-6730",
+            "id": "pyup.io-63304",
+            "more_info_path": "/vulnerabilities/CVE-2023-6730/63304",
+            "specs": [
+                "<2.0.2"
+            ],
+            "v": "<2.0.2"
         }
     ],
     "iotedgehubdev": [
@@ -67310,6 +69011,56 @@
         }
     ],
     "ipa": [
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in the Web UI in FreeIPA 4.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to breadcrumb navigation.",
+            "cve": "CVE-2014-7850",
+            "id": "pyup.io-70471",
+            "more_info_path": "/vulnerabilities/CVE-2014-7850/70471",
+            "specs": [
+                "<4.1.2"
+            ],
+            "v": "<4.1.2"
+        },
+        {
+            "advisory": "ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.",
+            "cve": "CVE-2015-5284",
+            "id": "pyup.io-70467",
+            "more_info_path": "/vulnerabilities/CVE-2015-5284/70467",
+            "specs": [
+                "<4.2.2"
+            ],
+            "v": "<4.2.2"
+        },
+        {
+            "advisory": "The cert_revoke command in FreeIPA does not check for the \"revoke certificate\" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the \"retrieve certificate\" permission.",
+            "cve": "CVE-2016-5404",
+            "id": "pyup.io-70534",
+            "more_info_path": "/vulnerabilities/CVE-2016-5404/70534",
+            "specs": [
+                "<4.3.3"
+            ],
+            "v": "<4.3.3"
+        },
+        {
+            "advisory": "A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.",
+            "cve": "CVE-2017-2590",
+            "id": "pyup.io-67440",
+            "more_info_path": "/vulnerabilities/CVE-2017-2590/67440",
+            "specs": [
+                "<4.4.0"
+            ],
+            "v": "<4.4.0"
+        },
+        {
+            "advisory": "Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.",
+            "cve": "CVE-2016-9575",
+            "id": "pyup.io-70518",
+            "more_info_path": "/vulnerabilities/CVE-2016-9575/70518",
+            "specs": [
+                "<4.4.3"
+            ],
+            "v": "<4.4.3"
+        },
         {
             "advisory": "A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points, FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for the reflection of a cookie representing an already logged-in user. An attacker would always have to go through a new authentication attempt.",
             "cve": "CVE-2023-5455",
@@ -67322,6 +69073,77 @@
             ],
             "v": "<4.6.10,>=4.7.0,<4.9.14,>=4.10.0,<4.10.3"
         },
+        {
+            "advisory": "ipa 3.0 does not properly check server identity before sending credential containing cookies",
+            "cve": "CVE-2012-5631",
+            "id": "pyup.io-67962",
+            "more_info_path": "/vulnerabilities/CVE-2012-5631/67962",
+            "specs": [
+                "<=3.0.0"
+            ],
+            "v": "<=3.0.0"
+        },
+        {
+            "advisory": "FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.",
+            "cve": "CVE-2016-5414",
+            "id": "pyup.io-70514",
+            "more_info_path": "/vulnerabilities/CVE-2016-5414/70514",
+            "specs": [
+                "<=4.4.0"
+            ],
+            "v": "<=4.4.0"
+        },
+        {
+            "advisory": "FreeIPA might display user data improperly via vectors involving non-printable characters.",
+            "cve": "CVE-2015-5179",
+            "id": "pyup.io-70469",
+            "more_info_path": "/vulnerabilities/CVE-2015-5179/70469",
+            "specs": [
+                "<=4.5.0"
+            ],
+            "v": "<=4.5.0"
+        },
+        {
+            "advisory": "FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of service by locking out the account in which system services run on.",
+            "cve": "CVE-2016-7030",
+            "id": "pyup.io-70516",
+            "more_info_path": "/vulnerabilities/CVE-2016-7030/70516",
+            "specs": [
+                "<=4.6.0"
+            ],
+            "v": "<=4.6.0"
+        },
+        {
+            "advisory": "FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor authentication leveraging an enabled OTP token, which triggers an anonymous bind.",
+            "cve": "CVE-2014-7828",
+            "id": "pyup.io-70473",
+            "more_info_path": "/vulnerabilities/CVE-2014-7828/70473",
+            "specs": [
+                ">=4.0,<4.0.5",
+                ">4.1,<4.1.1"
+            ],
+            "v": ">=4.0,<4.0.5,>4.1,<4.1.1"
+        },
+        {
+            "advisory": "A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.",
+            "cve": "CVE-2020-1722",
+            "id": "pyup.io-70581",
+            "more_info_path": "/vulnerabilities/CVE-2020-1722/70581",
+            "specs": [
+                ">=4.0.0,<=4.8.0"
+            ],
+            "v": ">=4.0.0,<=4.8.0"
+        },
+        {
+            "advisory": "It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users' permission. A remote, authenticated attacker could potentially use this flaw to disclose the password hashes belonging to Stage Users. This security issue does not result in disclosure of password hashes belonging to active standard users. NOTE: some developers feel that this report is a suggestion for a design change to Stage User activation, not a statement of a vulnerability.",
+            "cve": "CVE-2017-12169",
+            "id": "pyup.io-67439",
+            "more_info_path": "/vulnerabilities/CVE-2017-12169/67439",
+            "specs": [
+                ">=4.2.0"
+            ],
+            "v": ">=4.2.0"
+        },
         {
             "advisory": "A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.",
             "cve": "CVE-2019-10195",
@@ -67460,6 +69282,37 @@
         }
     ],
     "ipsilon": [
+        {
+            "advisory": "providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name.",
+            "cve": "CVE-2015-5217",
+            "id": "pyup.io-70463",
+            "more_info_path": "/vulnerabilities/CVE-2015-5217/70463",
+            "specs": [
+                "<1.0.1"
+            ],
+            "v": "<1.0.1"
+        },
+        {
+            "advisory": "** DISPUTED ** The default configuration of the Jinja templating engine used in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not enable auto-escaping, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via template variables. NOTE: This may be a duplicate of CVE-2015-5216. Moreover, the Jinja development team does not enable auto-escape by default for performance issues as explained in https://jinja.palletsprojects.com/en/master/faq/#why-is-autoescaping-not-the-default.",
+            "cve": "CVE-2015-5215",
+            "id": "pyup.io-70464",
+            "more_info_path": "/vulnerabilities/CVE-2015-5215/70464",
+            "specs": [
+                "<1.0.1"
+            ],
+            "v": "<1.0.1"
+        },
+        {
+            "advisory": "providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider (SP).",
+            "cve": "CVE-2015-5301",
+            "id": "pyup.io-70462",
+            "more_info_path": "/vulnerabilities/CVE-2015-5301/70462",
+            "specs": [
+                "<1.0.2",
+                ">=1.1,<1.1.1"
+            ],
+            "v": "<1.0.2,>=1.1,<1.1.1"
+        },
         {
             "advisory": "The Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly escape certain characters in a Python exception-message template, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via an HTTP response. See: CVE-2015-5216.",
             "cve": "CVE-2015-5216",
@@ -68107,6 +69960,18 @@
             "v": "<0.6.12"
         }
     ],
+    "ironic": [
+        {
+            "advisory": "OpenStack Ironic 4.2.0 through 4.2.1 does not \"clean\" the disk after use, which allows remote authenticated users to obtain sensitive information.",
+            "cve": "CVE-2015-7514",
+            "id": "pyup.io-70476",
+            "more_info_path": "/vulnerabilities/CVE-2015-7514/70476",
+            "specs": [
+                "<4.2.2"
+            ],
+            "v": "<4.2.2"
+        }
+    ],
     "ironic-discoverd": [
         {
             "advisory": "Ironic-inspector (aka ironic-discoverd) 2.3.0 includes a fix for CVE-2015-5306: When debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.\r\nhttps://opendev.org/openstack/ironic-inspector/commit/77d0052c5133034490386fbfadfdb1bdb49aa44f",
@@ -68157,6 +70022,18 @@
             "v": ">=4.2.0,<4.2.3"
         }
     ],
+    "irssi": [
+        {
+            "advisory": "Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.",
+            "cve": "CVE-2019-5882",
+            "id": "pyup.io-70575",
+            "more_info_path": "/vulnerabilities/CVE-2019-5882/70575",
+            "specs": [
+                "<1.1.2"
+            ],
+            "v": "<1.1.2"
+        }
+    ],
     "iscc-core": [
         {
             "advisory": "Iscc-core 0.2.0 uses a cryptographycally safe random choice function.\r\nhttps://github.com/iscc/iscc-core/commit/87570e28fb14fd016bc0f1938d1a23397a98edb4",
@@ -68495,16 +70372,6 @@
             ],
             "v": "<2.0.0"
         },
-        {
-            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29552",
-            "id": "pyup.io-44144",
-            "more_info_path": "/vulnerabilities/CVE-2021-29552/44144",
-            "specs": [
-                "<2.0.0"
-            ],
-            "v": "<2.0.0"
-        },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
             "cve": "CVE-2021-29549",
@@ -68537,9 +70404,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29512",
-            "id": "pyup.io-44088",
-            "more_info_path": "/vulnerabilities/CVE-2021-29512/44088",
+            "cve": "CVE-2021-29586",
+            "id": "pyup.io-44107",
+            "more_info_path": "/vulnerabilities/CVE-2021-29586/44107",
             "specs": [
                 "<2.0.0"
             ],
@@ -68547,9 +70414,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29551",
-            "id": "pyup.io-44096",
-            "more_info_path": "/vulnerabilities/CVE-2021-29551/44096",
+            "cve": "CVE-2021-29579",
+            "id": "pyup.io-44101",
+            "more_info_path": "/vulnerabilities/CVE-2021-29579/44101",
             "specs": [
                 "<2.0.0"
             ],
@@ -68557,9 +70424,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29541",
-            "id": "pyup.io-44130",
-            "more_info_path": "/vulnerabilities/CVE-2021-29541/44130",
+            "cve": "CVE-2021-29512",
+            "id": "pyup.io-44088",
+            "more_info_path": "/vulnerabilities/CVE-2021-29512/44088",
             "specs": [
                 "<2.0.0"
             ],
@@ -68585,6 +70452,16 @@
             ],
             "v": "<2.0.0"
         },
+        {
+            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
+            "cve": "CVE-2021-29541",
+            "id": "pyup.io-44130",
+            "more_info_path": "/vulnerabilities/CVE-2021-29541/44130",
+            "specs": [
+                "<2.0.0"
+            ],
+            "v": "<2.0.0"
+        },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
             "cve": "CVE-2021-29598",
@@ -68595,6 +70472,36 @@
             ],
             "v": "<2.0.0"
         },
+        {
+            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
+            "cve": "CVE-2021-29551",
+            "id": "pyup.io-44096",
+            "more_info_path": "/vulnerabilities/CVE-2021-29551/44096",
+            "specs": [
+                "<2.0.0"
+            ],
+            "v": "<2.0.0"
+        },
+        {
+            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
+            "cve": "CVE-2021-29567",
+            "id": "pyup.io-44086",
+            "more_info_path": "/vulnerabilities/CVE-2021-29567/44086",
+            "specs": [
+                "<2.0.0"
+            ],
+            "v": "<2.0.0"
+        },
+        {
+            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
+            "cve": "CVE-2021-29552",
+            "id": "pyup.io-44144",
+            "more_info_path": "/vulnerabilities/CVE-2021-29552/44144",
+            "specs": [
+                "<2.0.0"
+            ],
+            "v": "<2.0.0"
+        },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
             "cve": "CVE-2021-29615",
@@ -68605,6 +70512,16 @@
             ],
             "v": "<2.0.0"
         },
+        {
+            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
+            "cve": "CVE-2021-29553",
+            "id": "pyup.io-44141",
+            "more_info_path": "/vulnerabilities/CVE-2021-29553/44141",
+            "specs": [
+                "<2.0.0"
+            ],
+            "v": "<2.0.0"
+        },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
             "cve": "CVE-2021-29595",
@@ -68667,9 +70584,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29546",
-            "id": "pyup.io-44135",
-            "more_info_path": "/vulnerabilities/CVE-2021-29546/44135",
+            "cve": "CVE-2021-29618",
+            "id": "pyup.io-44140",
+            "more_info_path": "/vulnerabilities/CVE-2021-29618/44140",
             "specs": [
                 "<2.0.0"
             ],
@@ -68677,9 +70594,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29618",
-            "id": "pyup.io-44140",
-            "more_info_path": "/vulnerabilities/CVE-2021-29618/44140",
+            "cve": "CVE-2021-29546",
+            "id": "pyup.io-44135",
+            "more_info_path": "/vulnerabilities/CVE-2021-29546/44135",
             "specs": [
                 "<2.0.0"
             ],
@@ -68735,16 +70652,6 @@
             ],
             "v": "<2.0.0"
         },
-        {
-            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29586",
-            "id": "pyup.io-44107",
-            "more_info_path": "/vulnerabilities/CVE-2021-29586/44107",
-            "specs": [
-                "<2.0.0"
-            ],
-            "v": "<2.0.0"
-        },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
             "cve": "CVE-2021-29608",
@@ -68757,9 +70664,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29523",
-            "id": "pyup.io-44068",
-            "more_info_path": "/vulnerabilities/CVE-2021-29523/44068",
+            "cve": "CVE-2021-29526",
+            "id": "pyup.io-44157",
+            "more_info_path": "/vulnerabilities/CVE-2021-29526/44157",
             "specs": [
                 "<2.0.0"
             ],
@@ -68767,9 +70674,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29526",
-            "id": "pyup.io-44157",
-            "more_info_path": "/vulnerabilities/CVE-2021-29526/44157",
+            "cve": "CVE-2021-29523",
+            "id": "pyup.io-44068",
+            "more_info_path": "/vulnerabilities/CVE-2021-29523/44068",
             "specs": [
                 "<2.0.0"
             ],
@@ -68895,16 +70802,6 @@
             ],
             "v": "<2.0.0"
         },
-        {
-            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29579",
-            "id": "pyup.io-44101",
-            "more_info_path": "/vulnerabilities/CVE-2021-29579/44101",
-            "specs": [
-                "<2.0.0"
-            ],
-            "v": "<2.0.0"
-        },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
             "cve": "CVE-2021-29522",
@@ -69037,9 +70934,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29534",
-            "id": "pyup.io-44075",
-            "more_info_path": "/vulnerabilities/CVE-2021-29534/44075",
+            "cve": "CVE-2021-29513",
+            "id": "pyup.io-44097",
+            "more_info_path": "/vulnerabilities/CVE-2021-29513/44097",
             "specs": [
                 "<2.0.0"
             ],
@@ -69047,9 +70944,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29513",
-            "id": "pyup.io-44097",
-            "more_info_path": "/vulnerabilities/CVE-2021-29513/44097",
+            "cve": "CVE-2021-29534",
+            "id": "pyup.io-44075",
+            "more_info_path": "/vulnerabilities/CVE-2021-29534/44075",
             "specs": [
                 "<2.0.0"
             ],
@@ -69117,19 +71014,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29532",
-            "id": "pyup.io-44070",
-            "more_info_path": "/vulnerabilities/CVE-2021-29532/44070",
-            "specs": [
-                "<2.0.0"
-            ],
-            "v": "<2.0.0"
-        },
-        {
-            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29524",
-            "id": "pyup.io-44064",
-            "more_info_path": "/vulnerabilities/CVE-2021-29524/44064",
+            "cve": "CVE-2021-29544",
+            "id": "pyup.io-44074",
+            "more_info_path": "/vulnerabilities/CVE-2021-29544/44074",
             "specs": [
                 "<2.0.0"
             ],
@@ -69137,9 +71024,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29619",
-            "id": "pyup.io-44143",
-            "more_info_path": "/vulnerabilities/CVE-2021-29619/44143",
+            "cve": "CVE-2021-29552",
+            "id": "pyup.io-44142",
+            "more_info_path": "/vulnerabilities/CVE-2021-29552/44142",
             "specs": [
                 "<2.0.0"
             ],
@@ -69147,9 +71034,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29544",
-            "id": "pyup.io-44074",
-            "more_info_path": "/vulnerabilities/CVE-2021-29544/44074",
+            "cve": "CVE-2021-29532",
+            "id": "pyup.io-44070",
+            "more_info_path": "/vulnerabilities/CVE-2021-29532/44070",
             "specs": [
                 "<2.0.0"
             ],
@@ -69157,9 +71044,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29552",
-            "id": "pyup.io-44142",
-            "more_info_path": "/vulnerabilities/CVE-2021-29552/44142",
+            "cve": "CVE-2021-29619",
+            "id": "pyup.io-44143",
+            "more_info_path": "/vulnerabilities/CVE-2021-29619/44143",
             "specs": [
                 "<2.0.0"
             ],
@@ -69167,9 +71054,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29569",
-            "id": "pyup.io-44161",
-            "more_info_path": "/vulnerabilities/CVE-2021-29569/44161",
+            "cve": "CVE-2021-29524",
+            "id": "pyup.io-44064",
+            "more_info_path": "/vulnerabilities/CVE-2021-29524/44064",
             "specs": [
                 "<2.0.0"
             ],
@@ -69197,19 +71084,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29533",
-            "id": "pyup.io-44089",
-            "more_info_path": "/vulnerabilities/CVE-2021-29533/44089",
-            "specs": [
-                "<2.0.0"
-            ],
-            "v": "<2.0.0"
-        },
-        {
-            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29612",
-            "id": "pyup.io-44134",
-            "more_info_path": "/vulnerabilities/CVE-2021-29612/44134",
+            "cve": "CVE-2021-29577",
+            "id": "pyup.io-44171",
+            "more_info_path": "/vulnerabilities/CVE-2021-29577/44171",
             "specs": [
                 "<2.0.0"
             ],
@@ -69217,9 +71094,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29567",
-            "id": "pyup.io-44086",
-            "more_info_path": "/vulnerabilities/CVE-2021-29567/44086",
+            "cve": "CVE-2021-29533",
+            "id": "pyup.io-44089",
+            "more_info_path": "/vulnerabilities/CVE-2021-29533/44089",
             "specs": [
                 "<2.0.0"
             ],
@@ -69227,9 +71104,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29577",
-            "id": "pyup.io-44171",
-            "more_info_path": "/vulnerabilities/CVE-2021-29577/44171",
+            "cve": "CVE-2021-29612",
+            "id": "pyup.io-44134",
+            "more_info_path": "/vulnerabilities/CVE-2021-29612/44134",
             "specs": [
                 "<2.0.0"
             ],
@@ -69275,16 +71152,6 @@
             ],
             "v": "<2.0.0"
         },
-        {
-            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29540",
-            "id": "pyup.io-44094",
-            "more_info_path": "/vulnerabilities/CVE-2021-29540/44094",
-            "specs": [
-                "<2.0.0"
-            ],
-            "v": "<2.0.0"
-        },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
             "cve": "CVE-2021-29601",
@@ -69357,9 +71224,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2020-8286",
-            "id": "pyup.io-44155",
-            "more_info_path": "/vulnerabilities/CVE-2020-8286/44155",
+            "cve": "CVE-2021-29611",
+            "id": "pyup.io-44133",
+            "more_info_path": "/vulnerabilities/CVE-2021-29611/44133",
             "specs": [
                 "<2.0.0"
             ],
@@ -69367,9 +71234,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29611",
-            "id": "pyup.io-44133",
-            "more_info_path": "/vulnerabilities/CVE-2021-29611/44133",
+            "cve": "CVE-2020-8286",
+            "id": "pyup.io-44155",
+            "more_info_path": "/vulnerabilities/CVE-2020-8286/44155",
             "specs": [
                 "<2.0.0"
             ],
@@ -69377,9 +71244,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29590",
-            "id": "pyup.io-44109",
-            "more_info_path": "/vulnerabilities/CVE-2021-29590/44109",
+            "cve": "CVE-2021-29607",
+            "id": "pyup.io-44131",
+            "more_info_path": "/vulnerabilities/CVE-2021-29607/44131",
             "specs": [
                 "<2.0.0"
             ],
@@ -69387,9 +71254,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29548",
-            "id": "pyup.io-44091",
-            "more_info_path": "/vulnerabilities/CVE-2021-29548/44091",
+            "cve": "CVE-2021-29599",
+            "id": "pyup.io-44123",
+            "more_info_path": "/vulnerabilities/CVE-2021-29599/44123",
             "specs": [
                 "<2.0.0"
             ],
@@ -69397,9 +71264,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29607",
-            "id": "pyup.io-44131",
-            "more_info_path": "/vulnerabilities/CVE-2021-29607/44131",
+            "cve": "CVE-2021-29590",
+            "id": "pyup.io-44109",
+            "more_info_path": "/vulnerabilities/CVE-2021-29590/44109",
             "specs": [
                 "<2.0.0"
             ],
@@ -69407,9 +71274,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29599",
-            "id": "pyup.io-44123",
-            "more_info_path": "/vulnerabilities/CVE-2021-29599/44123",
+            "cve": "CVE-2021-29548",
+            "id": "pyup.io-44091",
+            "more_info_path": "/vulnerabilities/CVE-2021-29548/44091",
             "specs": [
                 "<2.0.0"
             ],
@@ -69447,9 +71314,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29553",
-            "id": "pyup.io-44141",
-            "more_info_path": "/vulnerabilities/CVE-2021-29553/44141",
+            "cve": "CVE-2021-29527",
+            "id": "pyup.io-44116",
+            "more_info_path": "/vulnerabilities/CVE-2021-29527/44116",
             "specs": [
                 "<2.0.0"
             ],
@@ -69457,9 +71324,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29527",
-            "id": "pyup.io-44116",
-            "more_info_path": "/vulnerabilities/CVE-2021-29527/44116",
+            "cve": "CVE-2020-8177",
+            "id": "pyup.io-44146",
+            "more_info_path": "/vulnerabilities/CVE-2020-8177/44146",
             "specs": [
                 "<2.0.0"
             ],
@@ -69467,9 +71334,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2020-8177",
-            "id": "pyup.io-44146",
-            "more_info_path": "/vulnerabilities/CVE-2020-8177/44146",
+            "cve": "CVE-2021-29580",
+            "id": "pyup.io-44099",
+            "more_info_path": "/vulnerabilities/CVE-2021-29580/44099",
             "specs": [
                 "<2.0.0"
             ],
@@ -69487,9 +71354,19 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29580",
-            "id": "pyup.io-44099",
-            "more_info_path": "/vulnerabilities/CVE-2021-29580/44099",
+            "cve": "CVE-2021-29569",
+            "id": "pyup.io-44161",
+            "more_info_path": "/vulnerabilities/CVE-2021-29569/44161",
+            "specs": [
+                "<2.0.0"
+            ],
+            "v": "<2.0.0"
+        },
+        {
+            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
+            "cve": "CVE-2021-29540",
+            "id": "pyup.io-44094",
+            "more_info_path": "/vulnerabilities/CVE-2021-29540/44094",
             "specs": [
                 "<2.0.0"
             ],
@@ -69505,6 +71382,16 @@
             ],
             "v": "<2.0.0"
         },
+        {
+            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
+            "cve": "CVE-2021-29610",
+            "id": "pyup.io-44076",
+            "more_info_path": "/vulnerabilities/CVE-2021-29610/44076",
+            "specs": [
+                "<2.0.0"
+            ],
+            "v": "<2.0.0"
+        },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
             "cve": "CVE-2020-8284",
@@ -69547,19 +71434,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29564",
-            "id": "pyup.io-44066",
-            "more_info_path": "/vulnerabilities/CVE-2021-29564/44066",
-            "specs": [
-                "<2.0.0"
-            ],
-            "v": "<2.0.0"
-        },
-        {
-            "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29516",
-            "id": "pyup.io-44159",
-            "more_info_path": "/vulnerabilities/CVE-2021-29516/44159",
+            "cve": "CVE-2021-29563",
+            "id": "pyup.io-44080",
+            "more_info_path": "/vulnerabilities/CVE-2021-29563/44080",
             "specs": [
                 "<2.0.0"
             ],
@@ -69577,9 +71454,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29610",
-            "id": "pyup.io-44076",
-            "more_info_path": "/vulnerabilities/CVE-2021-29610/44076",
+            "cve": "CVE-2021-29564",
+            "id": "pyup.io-44066",
+            "more_info_path": "/vulnerabilities/CVE-2021-29564/44066",
             "specs": [
                 "<2.0.0"
             ],
@@ -69587,9 +71464,9 @@
         },
         {
             "advisory": "Jina version 2.0.0 updates its dependency \"Tensorflow\" to v2.4.2 to include security fixes.",
-            "cve": "CVE-2021-29563",
-            "id": "pyup.io-44080",
-            "more_info_path": "/vulnerabilities/CVE-2021-29563/44080",
+            "cve": "CVE-2021-29516",
+            "id": "pyup.io-44159",
+            "more_info_path": "/vulnerabilities/CVE-2021-29516/44159",
             "specs": [
                 "<2.0.0"
             ],
@@ -69687,6 +71564,16 @@
             ],
             "v": "<3.1.3"
         },
+        {
+            "advisory": "** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the \"source\" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.",
+            "cve": "CVE-2019-8341",
+            "id": "pyup.io-70612",
+            "more_info_path": "/vulnerabilities/CVE-2019-8341/70612",
+            "specs": [
+                "<=2.10"
+            ],
+            "v": "<=2.10"
+        },
         {
             "advisory": "Jinja2 2.10.1 adds 'SandboxedEnvironment' to handle 'str.format_map' in order to prevent code execution through untrusted format strings.\r\nhttps://github.com/pallets/jinja/commit/a2a6c930bcca591a25d2b316fcfd2d6793897b26",
             "cve": "CVE-2019-10906",
@@ -69918,20 +71805,20 @@
             "v": "<1.1.1"
         },
         {
-            "advisory": "Joblib 1.2.0 fixes a security issue where 'eval(pre_dispatch)' could potentially run arbitrary code. Now only basic numerics are supported.\r\nhttps://github.com/joblib/joblib/pull/1327",
-            "cve": "PVE-2022-51041",
-            "id": "pyup.io-51041",
-            "more_info_path": "/vulnerabilities/PVE-2022-51041/51041",
+            "advisory": "Joblib 1.2.0 includes a fix for CVE-2022-21797: The package joblib from 0 and before 1.2.0 is vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.\r\nhttps://github.com/joblib/joblib/issues/1128",
+            "cve": "CVE-2022-21797",
+            "id": "pyup.io-51242",
+            "more_info_path": "/vulnerabilities/CVE-2022-21797/51242",
             "specs": [
                 "<1.2.0"
             ],
             "v": "<1.2.0"
         },
         {
-            "advisory": "Joblib 1.2.0 includes a fix for CVE-2022-21797: The package joblib from 0 and before 1.2.0 is vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.\r\nhttps://github.com/joblib/joblib/issues/1128",
-            "cve": "CVE-2022-21797",
-            "id": "pyup.io-51242",
-            "more_info_path": "/vulnerabilities/CVE-2022-21797/51242",
+            "advisory": "Joblib 1.2.0 fixes a security issue where 'eval(pre_dispatch)' could potentially run arbitrary code. Now only basic numerics are supported.\r\nhttps://github.com/joblib/joblib/pull/1327",
+            "cve": "PVE-2022-51041",
+            "id": "pyup.io-51041",
+            "more_info_path": "/vulnerabilities/PVE-2022-51041/51041",
             "specs": [
                 "<1.2.0"
             ],
@@ -71171,20 +73058,20 @@
             "v": "<1.4.0"
         },
         {
-            "advisory": "Jwcrypto version 1.5.1 addresses a potential DoS issue with p2c headers, limiting the default maximum to 16384 to prevent excessive resource usage. For applications requiring more iterations, the jwa default max needs to be adjusted manually.\r\nhttps://github.com/latchset/jwcrypto/commit/d2655d370586cb830e49acfb450f87598da60be8",
-            "cve": "PVE-2023-63154",
-            "id": "pyup.io-63154",
-            "more_info_path": "/vulnerabilities/PVE-2023-63154/63154",
+            "advisory": "A vulnerability was found in JWCrypto versions before 1.5.1. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.",
+            "cve": "CVE-2023-6681",
+            "id": "pyup.io-66713",
+            "more_info_path": "/vulnerabilities/CVE-2023-6681/66713",
             "specs": [
                 "<1.5.1"
             ],
             "v": "<1.5.1"
         },
         {
-            "advisory": "A vulnerability was found in JWCrypto versions before 1.5.1. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.",
-            "cve": "CVE-2023-6681",
-            "id": "pyup.io-66713",
-            "more_info_path": "/vulnerabilities/CVE-2023-6681/66713",
+            "advisory": "Jwcrypto version 1.5.1 addresses a potential DoS issue with p2c headers, limiting the default maximum to 16384 to prevent excessive resource usage. For applications requiring more iterations, the jwa default max needs to be adjusted manually.\r\nhttps://github.com/latchset/jwcrypto/commit/d2655d370586cb830e49acfb450f87598da60be8",
+            "cve": "PVE-2023-63154",
+            "id": "pyup.io-63154",
+            "more_info_path": "/vulnerabilities/PVE-2023-63154/63154",
             "specs": [
                 "<1.5.1"
             ],
@@ -71603,6 +73490,28 @@
             "v": ">=0.7,<0.7.1"
         }
     ],
+    "keycloak-httpd-client-install": [
+        {
+            "advisory": "keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.",
+            "cve": "CVE-2017-15111",
+            "id": "pyup.io-67428",
+            "more_info_path": "/vulnerabilities/CVE-2017-15111/67428",
+            "specs": [
+                "<0.8"
+            ],
+            "v": "<0.8"
+        },
+        {
+            "advisory": "keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users.",
+            "cve": "CVE-2017-15112",
+            "id": "pyup.io-67429",
+            "more_info_path": "/vulnerabilities/CVE-2017-15112/67429",
+            "specs": [
+                "<0.8"
+            ],
+            "v": "<0.8"
+        }
+    ],
     "keylime": [
         {
             "advisory": "A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were being re-added to a verifier. This could lead to a remote code execution.",
@@ -71758,6 +73667,29 @@
         }
     ],
     "keystone": [
+        {
+            "advisory": "In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated \"GET /v3/OS-FEDERATION/projects\" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all projects in the deployment and their attributes. Only Keystone with the /v3/OS-FEDERATION endpoint enabled via policy.json is affected.",
+            "cve": "CVE-2018-14432",
+            "id": "pyup.io-70607",
+            "more_info_path": "/vulnerabilities/CVE-2018-14432/70607",
+            "specs": [
+                "<11.04",
+                ">=12.0.0,<12.0.0",
+                ">=13.0.0<13.0.0"
+            ],
+            "v": "<11.04,>=12.0.0,<12.0.0,>=13.0.0<13.0.0"
+        },
+        {
+            "advisory": "An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticated user can create an EC2 credential for themselves for a project that they have a specified role on, and then perform an update to the credential user and project, allowing them to masquerade as another user. This potentially allows a malicious user to act as the admin on a project another user has the admin role on, which can effectively grant that user global admin privileges.",
+            "cve": "CVE-2020-12691",
+            "id": "pyup.io-38585",
+            "more_info_path": "/vulnerabilities/CVE-2020-12691/38585",
+            "specs": [
+                "<15.0.1",
+                ">=16.0.0.0rc1,<=16.0.0"
+            ],
+            "v": "<15.0.1,>=16.0.0.0rc1,<=16.0.0"
+        },
         {
             "advisory": "An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of roles provided for an OAuth1 access token is silently ignored. Thus, when an access token is used to request a keystone token, the keystone token contains every role assignment the creator had for the project. This results in the provided keystone token having more role assignments than the creator intended, possibly giving unintended escalated access. See: CVE-2020-12690.",
             "cve": "CVE-2020-12690",
@@ -71780,17 +73712,6 @@
             ],
             "v": "<15.0.1,>=16.0.0.0rc1,<=16.0.0"
         },
-        {
-            "advisory": "An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticated user can create an EC2 credential for themselves for a project that they have a specified role on, and then perform an update to the credential user and project, allowing them to masquerade as another user. This potentially allows a malicious user to act as the admin on a project another user has the admin role on, which can effectively grant that user global admin privileges.",
-            "cve": "CVE-2020-12691",
-            "id": "pyup.io-38585",
-            "more_info_path": "/vulnerabilities/CVE-2020-12691/38585",
-            "specs": [
-                "<15.0.1",
-                ">=16.0.0.0rc1,<=16.0.0"
-            ],
-            "v": "<15.0.1,>=16.0.0.0rc1,<=16.0.0"
-        },
         {
             "advisory": "An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any user authenticated within a limited scope (trust/oauth/application credential) can create an EC2 credential with an escalated permission, such as obtaining admin while the user is on a limited viewer role. This potentially allows a malicious user to act as the admin on a project another user has the admin role on, which can effectively grant that user global admin privileges.",
             "cve": "CVE-2020-12689",
@@ -71802,6 +73723,17 @@
             ],
             "v": "<15.0.1,>=16.0.0.0rc1,<=16.0.0"
         },
+        {
+            "advisory": "OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.",
+            "cve": "CVE-2015-3646",
+            "id": "pyup.io-70443",
+            "more_info_path": "/vulnerabilities/CVE-2015-3646/70443",
+            "specs": [
+                "<2014.1.5",
+                ">=2014.2,<2014.2.4"
+            ],
+            "v": "<2014.1.5,>=2014.2,<2014.2.4"
+        },
         {
             "advisory": "In Keystone versions prior to 8.0.0, It is possible to remotely trigger a crash in Keystone by sending an extremely long password. When Keystone is validating the password, glibc allocates space on the stack for the entire password. If the password is long enough, stack space can be exhausted, resulting in a crash. This vulnerability is mitigated by a patch to impose a reasonable limit on password length (4 kB). See also: CVE-2012-1572 and https://security.openstack.org/ossa/OSSA-2012-002.html.\r\nhttps://github.com/openstack/keystone/commit/239e4f64c2134338b32ffd6d42c0b6ff70cd040c",
             "cve": "CVE-2012-1572",
@@ -71812,6 +73744,26 @@
             ],
             "v": "<8.0.0"
         },
+        {
+            "advisory": "The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users to prevent revocation of a chain of tokens and bypass intended access restrictions by rescoping a token.",
+            "cve": "CVE-2016-4911",
+            "id": "pyup.io-70597",
+            "more_info_path": "/vulnerabilities/CVE-2016-4911/70597",
+            "specs": [
+                "<9.0.1"
+            ],
+            "v": "<9.0.1"
+        },
+        {
+            "advisory": "An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and unintentionally be granted all related roles including administrative roles.",
+            "cve": "CVE-2017-2673",
+            "id": "pyup.io-70606",
+            "more_info_path": "/vulnerabilities/CVE-2017-2673/70606",
+            "specs": [
+                "<=12.0.3-9\u00b6"
+            ],
+            "v": "<=12.0.3-9\u00b6"
+        },
         {
             "advisory": "The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.",
             "cve": "CVE-2013-4477",
@@ -71863,6 +73815,76 @@
             ],
             "v": ">0"
         },
+        {
+            "advisory": "The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list, which prevents the token from being invalidated by bulk token revocation and allows the trustee to bypass intended access restrictions.",
+            "cve": "CVE-2014-2237",
+            "id": "pyup.io-70451",
+            "more_info_path": "/vulnerabilities/CVE-2014-2237/70451",
+            "specs": [
+                ">2010,<2013.2.3"
+            ],
+            "v": ">2010,<2013.2.3"
+        },
+        {
+            "advisory": "The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka \"authentication chaining.\"",
+            "cve": "CVE-2014-2828",
+            "id": "pyup.io-70450",
+            "more_info_path": "/vulnerabilities/CVE-2014-2828/70450",
+            "specs": [
+                ">2010,<2014.1"
+            ],
+            "v": ">2010,<2014.1"
+        },
+        {
+            "advisory": "OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.",
+            "cve": "CVE-2014-5253",
+            "id": "pyup.io-70444",
+            "more_info_path": "/vulnerabilities/CVE-2014-5253/70444",
+            "specs": [
+                ">2010,<2014.2"
+            ],
+            "v": ">2010,<2014.2"
+        },
+        {
+            "advisory": "The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expired token.",
+            "cve": "CVE-2014-5251",
+            "id": "pyup.io-70446",
+            "more_info_path": "/vulnerabilities/CVE-2014-5251/70446",
+            "specs": [
+                ">2010,<2014.2"
+            ],
+            "v": ">2010,<2014.2"
+        },
+        {
+            "advisory": "OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.",
+            "cve": "CVE-2014-3520",
+            "id": "pyup.io-70447",
+            "more_info_path": "/vulnerabilities/CVE-2014-3520/70447",
+            "specs": [
+                ">2010,<2014.2"
+            ],
+            "v": ">2010,<2014.2"
+        },
+        {
+            "advisory": "OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.",
+            "cve": "CVE-2014-3476",
+            "id": "pyup.io-70448",
+            "more_info_path": "/vulnerabilities/CVE-2014-3476/70448",
+            "specs": [
+                ">2010,<2014.2"
+            ],
+            "v": ">2010,<2014.2"
+        },
+        {
+            "advisory": "The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request to v3/auth/tokens/.",
+            "cve": "CVE-2014-5252",
+            "id": "pyup.io-70445",
+            "more_info_path": "/vulnerabilities/CVE-2014-5252/70445",
+            "specs": [
+                ">2010,<2014.2"
+            ],
+            "v": ">2010,<2014.2"
+        },
         {
             "advisory": "Keystone versions 16.0.2, 17.0.1, 18.0.1 and 19.0.1 include a fix for CVE-2021-38155: OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking (related to PCI DSS features). By guessing the name of an account and failing to authenticate multiple times, any unauthenticated actor could both confirm the account exists and obtain that account's corresponding UUID, which might be leveraged for other unrelated attacks. All deployments enabling security_compliance.lockout_failure_attempts are affected.\r\nhttps://security.openstack.org/ossa/OSSA-2021-003.html",
             "cve": "CVE-2021-38155",
@@ -71906,6 +73928,16 @@
             ],
             "v": ">=2010,<2012.1.3"
         },
+        {
+            "advisory": "OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.\r\nhttps://review.opendev.org/c/openstack/keystone/+/24906",
+            "cve": "CVE-2013-1865",
+            "id": "pyup.io-35416",
+            "more_info_path": "/vulnerabilities/CVE-2013-1865/35416",
+            "specs": [
+                ">=2010,<2012.2"
+            ],
+            "v": ">=2010,<2012.2"
+        },
         {
             "advisory": "OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists because of a CVE-2012-3426 regression.",
             "cve": "CVE-2012-5563",
@@ -71917,14 +73949,146 @@
             "v": ">=2010,<2012.2"
         },
         {
-            "advisory": "OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.\r\nhttps://review.opendev.org/c/openstack/keystone/+/24906",
-            "cve": "CVE-2013-1865",
-            "id": "pyup.io-35416",
-            "more_info_path": "/vulnerabilities/CVE-2013-1865/35416",
+            "advisory": "The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by \"$(admin_token)\" in the publicurl endpoint field.",
+            "cve": "CVE-2014-3621",
+            "id": "pyup.io-70603",
+            "more_info_path": "/vulnerabilities/CVE-2014-3621/70603",
             "specs": [
-                ">=2010,<2012.2"
+                ">=2010,<2013.2.3",
+                ">=2014.1,<2014.1.2.1"
             ],
-            "v": ">=2010,<2012.2"
+            "v": ">=2010,<2013.2.3,>=2014.1,<2014.1.2.1"
+        },
+        {
+            "advisory": "Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. (dot dot) in the path attribute of a file element.",
+            "cve": "CVE-2012-3360",
+            "id": "pyup.io-68022",
+            "more_info_path": "/vulnerabilities/CVE-2012-3360/68022",
+            "specs": [
+                ">=2010.1-rc2,<=2012.2"
+            ],
+            "v": ">=2010.1-rc2,<=2012.2"
+        },
+        {
+            "advisory": "OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by (1) creating new tokens through token chaining, (2) leveraging possession of a token for a disabled user account, or (3) leveraging possession of a token for an account with a changed password.",
+            "cve": "CVE-2012-3426",
+            "id": "pyup.io-68007",
+            "more_info_path": "/vulnerabilities/CVE-2012-3426/68007",
+            "specs": [
+                ">=2011.3.1,<2012.1.1"
+            ],
+            "v": ">=2011.3.1,<2012.1.1"
+        },
+        {
+            "advisory": "OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, which allows remote authenticated users to access the tenant's resources by requesting a token for the tenant.",
+            "cve": "CVE-2012-4457",
+            "id": "pyup.io-68008",
+            "more_info_path": "/vulnerabilities/CVE-2012-4457/68008",
+            "specs": [
+                ">=2011.3.1,<2012.1.2"
+            ],
+            "v": ">=2011.3.1,<2012.1.2"
+        },
+        {
+            "advisory": "OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token.",
+            "cve": "CVE-2013-2059",
+            "id": "pyup.io-67997",
+            "more_info_path": "/vulnerabilities/CVE-2013-2059/67997",
+            "specs": [
+                ">=2011.3.1,<2012.2.4",
+                ">=2013,<2013.1.1"
+            ],
+            "v": ">=2011.3.1,<2012.2.4,>=2013,<2013.1.1"
+        },
+        {
+            "advisory": "OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.",
+            "cve": "CVE-2013-0282",
+            "id": "pyup.io-67995",
+            "more_info_path": "/vulnerabilities/CVE-2013-0282/67995",
+            "specs": [
+                ">=2011.3.1,<2013.1"
+            ],
+            "v": ">=2011.3.1,<2013.1"
+        },
+        {
+            "advisory": "OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.",
+            "cve": "CVE-2013-2014",
+            "id": "pyup.io-67996",
+            "more_info_path": "/vulnerabilities/CVE-2013-2014/67996",
+            "specs": [
+                ">=2011.3.1,<2013.1"
+            ],
+            "v": ">=2011.3.1,<2013.1"
+        },
+        {
+            "advisory": "OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.",
+            "cve": "CVE-2013-2006",
+            "id": "pyup.io-68009",
+            "more_info_path": "/vulnerabilities/CVE-2013-2006/68009",
+            "specs": [
+                ">=2011.3.1,<2013.1"
+            ],
+            "v": ">=2011.3.1,<2013.1"
+        },
+        {
+            "advisory": "OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.",
+            "cve": "CVE-2013-2157",
+            "id": "pyup.io-67998",
+            "more_info_path": "/vulnerabilities/CVE-2013-2157/67998",
+            "specs": [
+                ">=2011.3.1,<2013.1.3"
+            ],
+            "v": ">=2011.3.1,<2013.1.3"
+        },
+        {
+            "advisory": "OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote authenticated users to retain access via the token.",
+            "cve": "CVE-2013-4222",
+            "id": "pyup.io-68010",
+            "more_info_path": "/vulnerabilities/CVE-2013-4222/68010",
+            "specs": [
+                ">=2011.3.1,<2013.1.3"
+            ],
+            "v": ">=2011.3.1,<2013.1.3"
+        },
+        {
+            "advisory": "OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.",
+            "cve": "CVE-2013-0247",
+            "id": "pyup.io-67994",
+            "more_info_path": "/vulnerabilities/CVE-2013-0247/67994",
+            "specs": [
+                ">=2011.3.1,<2013.1.g3"
+            ],
+            "v": ">=2011.3.1,<2013.1.g3"
+        },
+        {
+            "advisory": "The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request.",
+            "cve": "CVE-2013-6391",
+            "id": "pyup.io-68002",
+            "more_info_path": "/vulnerabilities/CVE-2013-6391/68002",
+            "specs": [
+                ">=2011.3.1,<2013.2.1"
+            ],
+            "v": ">=2011.3.1,<2013.2.1"
+        },
+        {
+            "advisory": "tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.",
+            "cve": "CVE-2012-5483",
+            "id": "pyup.io-67993",
+            "more_info_path": "/vulnerabilities/CVE-2012-5483/67993",
+            "specs": [
+                ">=2011.3.1,<=2012.1.3"
+            ],
+            "v": ">=2011.3.1,<=2012.1.3"
+        },
+        {
+            "advisory": "OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens when the user role has been removed from a tenant, which allows remote authenticated users to bypass intended authorization restrictions by leveraging a token for the removed user role.",
+            "cve": "CVE-2012-5571",
+            "id": "pyup.io-68006",
+            "more_info_path": "/vulnerabilities/CVE-2012-5571/68006",
+            "specs": [
+                ">=2011.3.1,<=2013.2"
+            ],
+            "v": ">=2011.3.1,<=2013.2"
         },
         {
             "advisory": "The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.",
@@ -73156,9 +75320,9 @@
         },
         {
             "advisory": "Kserve 0.9.0rc0 updates its dependency 'ray' to v1.9.2 to include security fixes.",
-            "cve": "CVE-2021-45046",
-            "id": "pyup.io-49420",
-            "more_info_path": "/vulnerabilities/CVE-2021-45046/49420",
+            "cve": "CVE-2021-44228",
+            "id": "pyup.io-49405",
+            "more_info_path": "/vulnerabilities/CVE-2021-44228/49405",
             "specs": [
                 "<0.9.0rc0"
             ],
@@ -73166,9 +75330,9 @@
         },
         {
             "advisory": "Kserve 0.9.0rc0 updates its dependency 'ray' to v1.9.2 to include security fixes.",
-            "cve": "CVE-2021-44228",
-            "id": "pyup.io-49405",
-            "more_info_path": "/vulnerabilities/CVE-2021-44228/49405",
+            "cve": "CVE-2021-45046",
+            "id": "pyup.io-49420",
+            "more_info_path": "/vulnerabilities/CVE-2021-45046/49420",
             "specs": [
                 "<0.9.0rc0"
             ],
@@ -73507,20 +75671,20 @@
             "v": "<1.10.1"
         },
         {
-            "advisory": "Label-studio 1.11.0 addresses the CVE-2023-47116 by introducing more exhaustive IP validation for Server Side Request Forgery (SSRF) defenses. This includes banning all IPs within reserved blocks, for both IPv4 and IPv6, by default. The system also allows users to ban additional blocks using USER_ADDITIONAL_BANNED_SUBNETS, or to specify their full list of banned IP blocks themselves using USE_DEFAULT_BANNED_SUBNETS. By default, USE_DEFAULT_BANNED_SUBNETS is set to True. Additionally, the error message has been made more informative when SSRF protection blocks an upload.\r\nhttps://github.com/HumanSignal/label-studio/pull/5316",
-            "cve": "CVE-2023-47116",
-            "id": "pyup.io-64822",
-            "more_info_path": "/vulnerabilities/CVE-2023-47116/64822",
+            "advisory": "Label Studio before 1.11.0 is vulnerable to cross-site scripting (XSS) because it fails to properly sanitize data uploaded via the file upload feature before it is rendered within Choices or Labels tags. This vulnerability allows attackers to inject malicious scripts that could execute within the user's browser session. However, exploitation is contingent upon the attacker having permission to use the \"data import\" function.",
+            "cve": "CVE-2024-26152",
+            "id": "pyup.io-66696",
+            "more_info_path": "/vulnerabilities/CVE-2024-26152/66696",
             "specs": [
                 "<1.11.0"
             ],
             "v": "<1.11.0"
         },
         {
-            "advisory": "Label Studio before 1.11.0 is vulnerable to cross-site scripting (XSS) because it fails to properly sanitize data uploaded via the file upload feature before it is rendered within Choices or Labels tags. This vulnerability allows attackers to inject malicious scripts that could execute within the user's browser session. However, exploitation is contingent upon the attacker having permission to use the \"data import\" function.",
-            "cve": "CVE-2024-26152",
-            "id": "pyup.io-66696",
-            "more_info_path": "/vulnerabilities/CVE-2024-26152/66696",
+            "advisory": "Label-studio 1.11.0 addresses the CVE-2023-47116 by introducing more exhaustive IP validation for Server Side Request Forgery (SSRF) defenses. This includes banning all IPs within reserved blocks, for both IPv4 and IPv6, by default. The system also allows users to ban additional blocks using USER_ADDITIONAL_BANNED_SUBNETS, or to specify their full list of banned IP blocks themselves using USE_DEFAULT_BANNED_SUBNETS. By default, USE_DEFAULT_BANNED_SUBNETS is set to True. Additionally, the error message has been made more informative when SSRF protection blocks an upload.\r\nhttps://github.com/HumanSignal/label-studio/pull/5316",
+            "cve": "CVE-2023-47116",
+            "id": "pyup.io-64822",
+            "more_info_path": "/vulnerabilities/CVE-2023-47116/64822",
             "specs": [
                 "<1.11.0"
             ],
@@ -73907,20 +76071,20 @@
     ],
     "ladybug-comfort": [
         {
-            "advisory": "Ladybug-comfort 0.16.18 updates its dependency 'wheel' to v0.38.1 to include a security fix.",
-            "cve": "CVE-2022-40898",
-            "id": "pyup.io-52877",
-            "more_info_path": "/vulnerabilities/CVE-2022-40898/52877",
+            "advisory": "Ladybug-comfort 0.16.18 updates its dependency 'setuptools' to v65.5.1 to include a security fix.",
+            "cve": "CVE-2022-40897",
+            "id": "pyup.io-52844",
+            "more_info_path": "/vulnerabilities/CVE-2022-40897/52844",
             "specs": [
                 "<0.16.18"
             ],
             "v": "<0.16.18"
         },
         {
-            "advisory": "Ladybug-comfort 0.16.18 updates its dependency 'setuptools' to v65.5.1 to include a security fix.",
-            "cve": "CVE-2022-40897",
-            "id": "pyup.io-52844",
-            "more_info_path": "/vulnerabilities/CVE-2022-40897/52844",
+            "advisory": "Ladybug-comfort 0.16.18 updates its dependency 'wheel' to v0.38.1 to include a security fix.",
+            "cve": "CVE-2022-40898",
+            "id": "pyup.io-52877",
+            "more_info_path": "/vulnerabilities/CVE-2022-40898/52877",
             "specs": [
                 "<0.16.18"
             ],
@@ -74031,20 +76195,20 @@
             "v": "<0.0.236"
         },
         {
-            "advisory": "Langchain 0.0.236 includes a fix for CVE-2023-36258: Versions before 0.0.236 allow an attacker to execute arbitrary code via the PALChain in the python exec method.\r\nhttps://github.com/langchain-ai/langchain/issues/5872\r\nhttps://github.com/langchain-ai/langchain/commit/e294ba475a355feb95003ed8f1a2b99942509a9e",
-            "cve": "CVE-2023-36258",
-            "id": "pyup.io-59294",
-            "more_info_path": "/vulnerabilities/CVE-2023-36258/59294",
+            "advisory": "Langchain 0.0.236 includes a fix for an Arbitrary Code Execution vulnerability. In affected versions, the vulnerability allows an attacker to execute arbitrary code via the Python exec calls in the PALChain.\r\nhttps://github.com/langchain-ai/langchain/commit/8ba9835b925473655914f63822775679e03ea137\r\nhttps://github.com/langchain-ai/langchain/commit/e294ba475a355feb95003ed8f1a2b99942509a9e",
+            "cve": "CVE-2023-36095",
+            "id": "pyup.io-60218",
+            "more_info_path": "/vulnerabilities/CVE-2023-36095/60218",
             "specs": [
                 "<0.0.236"
             ],
             "v": "<0.0.236"
         },
         {
-            "advisory": "Langchain 0.0.236 includes a fix for an Arbitrary Code Execution vulnerability. In affected versions, the vulnerability allows an attacker to execute arbitrary code via the Python exec calls in the PALChain.\r\nhttps://github.com/langchain-ai/langchain/commit/8ba9835b925473655914f63822775679e03ea137\r\nhttps://github.com/langchain-ai/langchain/commit/e294ba475a355feb95003ed8f1a2b99942509a9e",
-            "cve": "CVE-2023-36095",
-            "id": "pyup.io-60218",
-            "more_info_path": "/vulnerabilities/CVE-2023-36095/60218",
+            "advisory": "Langchain 0.0.236 includes a fix for CVE-2023-36258: Versions before 0.0.236 allow an attacker to execute arbitrary code via the PALChain in the python exec method.\r\nhttps://github.com/langchain-ai/langchain/issues/5872\r\nhttps://github.com/langchain-ai/langchain/commit/e294ba475a355feb95003ed8f1a2b99942509a9e",
+            "cve": "CVE-2023-36258",
+            "id": "pyup.io-59294",
+            "more_info_path": "/vulnerabilities/CVE-2023-36258/59294",
             "specs": [
                 "<0.0.236"
             ],
@@ -74196,12 +76360,22 @@
             "id": "pyup.io-66962",
             "more_info_path": "/vulnerabilities/CVE-2024-1455/66962",
             "specs": [
-                ">=0"
+                ">=0,<1.4"
             ],
-            "v": ">=0"
+            "v": ">=0,<1.4"
         }
     ],
     "langchain-experimental": [
+        {
+            "advisory": "langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__, or __base__ attribute in Python code. These are not prohibited by pal_chain/base.py.",
+            "cve": "CVE-2023-45920",
+            "id": "pyup.io-68479",
+            "more_info_path": "/vulnerabilities/CVE-2023-45920/68479",
+            "specs": [
+                "<0.0.52"
+            ],
+            "v": "<0.0.52"
+        },
         {
             "advisory": "Langchain_experimental allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via the PALChain in the python exec method.\r\nhttps://github.com/langchain-ai/langchain/commit/4c97a10bd0d9385cfee234a63b5bd826a295e483\r\nhttps://github.com/pypa/advisory-database/blob/main/vulns/langchain-experimental/PYSEC-2023-194.yaml",
             "cve": "CVE-2023-44467",
@@ -74412,16 +76586,6 @@
             ],
             "v": "<2.2.2"
         },
-        {
-            "advisory": "Lazuli 2.2.3 updates its dependency 'mkdocs' to v1.3.1 to include a security fix.",
-            "cve": "CVE-2021-40978",
-            "id": "pyup.io-50476",
-            "more_info_path": "/vulnerabilities/CVE-2021-40978/50476",
-            "specs": [
-                "<2.2.3"
-            ],
-            "v": "<2.2.3"
-        },
         {
             "advisory": "Lazuli 2.2.3 updates its dependency 'nltk' to v3.7 to include security fixes.",
             "cve": "CVE-2021-43854",
@@ -74511,6 +76675,16 @@
                 "<2.2.3"
             ],
             "v": "<2.2.3"
+        },
+        {
+            "advisory": "Lazuli 2.2.3 updates its dependency 'mkdocs' to v1.3.1 to include a security fix.",
+            "cve": "CVE-2021-40978",
+            "id": "pyup.io-50476",
+            "more_info_path": "/vulnerabilities/CVE-2021-40978/50476",
+            "specs": [
+                "<2.2.3"
+            ],
+            "v": "<2.2.3"
         }
     ],
     "lbt-dragonfly": [
@@ -74640,6 +76814,18 @@
             "v": ">0,<0"
         }
     ],
+    "ledfx": [
+        {
+            "advisory": "Ledfx 2.0.70 addresses and resolves a critical issue that could cause crashes due to a race condition and the presence of empty virtual data. The race condition could potentially be exploited to cause a denial of service (DoS).",
+            "cve": "PVE-2024-67135",
+            "id": "pyup.io-67135",
+            "more_info_path": "/vulnerabilities/PVE-2024-67135/67135",
+            "specs": [
+                "<2.0.70"
+            ],
+            "v": "<2.0.70"
+        }
+    ],
     "lekt": [
         {
             "advisory": "Lekt 14.0.13 updates Open EDX image version to 14.2.1, which includes a security fix for a XSS vulnerability in edx-platform.\r\nhttps://github.com/lektorium-tutor/lekt/commit/b46a7b0fa806604eddaed8646a2a8712a8508c79",
@@ -74752,10 +76938,10 @@
     ],
     "lg-rez": [
         {
-            "advisory": "Lg-rez 2.1.4 updates its dependency 'rsa' to v4.7 to include a security fix.",
-            "cve": "CVE-2020-25658",
-            "id": "pyup.io-42106",
-            "more_info_path": "/vulnerabilities/CVE-2020-25658/42106",
+            "advisory": "Lg-rez version 2.1.4 updates its dependency 'pillow' to v8.2.0 to include security fixes.",
+            "cve": "CVE-2021-28676",
+            "id": "pyup.io-42104",
+            "more_info_path": "/vulnerabilities/CVE-2021-28676/42104",
             "specs": [
                 "<2.1.4"
             ],
@@ -74763,9 +76949,9 @@
         },
         {
             "advisory": "Lg-rez version 2.1.4 updates its dependency 'pillow' to v8.2.0 to include security fixes.",
-            "cve": "CVE-2021-28678",
-            "id": "pyup.io-42049",
-            "more_info_path": "/vulnerabilities/CVE-2021-28678/42049",
+            "cve": "CVE-2021-28677",
+            "id": "pyup.io-42105",
+            "more_info_path": "/vulnerabilities/CVE-2021-28677/42105",
             "specs": [
                 "<2.1.4"
             ],
@@ -74773,19 +76959,19 @@
         },
         {
             "advisory": "Lg-rez version 2.1.4 updates its dependency 'pillow' to v8.2.0 to include security fixes.",
-            "cve": "CVE-2021-28677",
-            "id": "pyup.io-42105",
-            "more_info_path": "/vulnerabilities/CVE-2021-28677/42105",
+            "cve": "CVE-2021-28678",
+            "id": "pyup.io-42049",
+            "more_info_path": "/vulnerabilities/CVE-2021-28678/42049",
             "specs": [
                 "<2.1.4"
             ],
             "v": "<2.1.4"
         },
         {
-            "advisory": "Lg-rez version 2.1.4 updates its dependency 'pillow' to v8.2.0 to include security fixes.",
-            "cve": "CVE-2021-28676",
-            "id": "pyup.io-42104",
-            "more_info_path": "/vulnerabilities/CVE-2021-28676/42104",
+            "advisory": "Lg-rez 2.1.4 updates its dependency 'rsa' to v4.7 to include a security fix.",
+            "cve": "CVE-2020-25658",
+            "id": "pyup.io-42106",
+            "more_info_path": "/vulnerabilities/CVE-2020-25658/42106",
             "specs": [
                 "<2.1.4"
             ],
@@ -74958,20 +77144,20 @@
     ],
     "libretranslate": [
         {
-            "advisory": "Libretranslate 1.5.4 updates its Flask dependency from 2.2.2 to 2.2.5. This upgrade addresses the vulnerability identified as CVE-2023-30861.\r\nhttps://github.com/LibreTranslate/LibreTranslate/pull/570/commits/51341d92ade55e47d94ac2f6dd095fcc226e62d0",
-            "cve": "CVE-2023-30861",
-            "id": "pyup.io-63742",
-            "more_info_path": "/vulnerabilities/CVE-2023-30861/63742",
+            "advisory": "Libretranslate 1.5.4 updates its Werkzeug dependency from 2.2.2 to 2.3.8. This upgrade addresses the vulnerability identified as CVE-2023-25577.\r\nhttps://github.com/LibreTranslate/LibreTranslate/pull/570/commits/51341d92ade55e47d94ac2f6dd095fcc226e62d0",
+            "cve": "CVE-2023-25577",
+            "id": "pyup.io-64074",
+            "more_info_path": "/vulnerabilities/CVE-2023-25577/64074",
             "specs": [
                 "<1.5.4"
             ],
             "v": "<1.5.4"
         },
         {
-            "advisory": "Libretranslate 1.5.4 updates its Werkzeug dependency from 2.2.2 to 2.3.8. This upgrade addresses the vulnerability identified as CVE-2023-25577.\r\nhttps://github.com/LibreTranslate/LibreTranslate/pull/570/commits/51341d92ade55e47d94ac2f6dd095fcc226e62d0",
-            "cve": "CVE-2023-25577",
-            "id": "pyup.io-64074",
-            "more_info_path": "/vulnerabilities/CVE-2023-25577/64074",
+            "advisory": "Libretranslate 1.5.4 updates its Flask dependency from 2.2.2 to 2.2.5. This upgrade addresses the vulnerability identified as CVE-2023-30861.\r\nhttps://github.com/LibreTranslate/LibreTranslate/pull/570/commits/51341d92ade55e47d94ac2f6dd095fcc226e62d0",
+            "cve": "CVE-2023-30861",
+            "id": "pyup.io-63742",
+            "more_info_path": "/vulnerabilities/CVE-2023-30861/63742",
             "specs": [
                 "<1.5.4"
             ],
@@ -75327,16 +77513,6 @@
         }
     ],
     "lightning": [
-        {
-            "advisory": "Lightning 2.0.4 updates its dependency 'vite' to version '2.9.16' to include a security fix.\r\nhttps://github.com/Lightning-AI/lightning/commit/7d2a46efa9834c3bb0bc1069df0a2e3a6e855d01",
-            "cve": "CVE-2022-35204",
-            "id": "pyup.io-59185",
-            "more_info_path": "/vulnerabilities/CVE-2022-35204/59185",
-            "specs": [
-                "<2.0.4"
-            ],
-            "v": "<2.0.4"
-        },
         {
             "advisory": "Lightning 2.0.4 updates its dependency 'vite' to version '2.9.16' to include a security fix.\r\nhttps://github.com/Lightning-AI/lightning/commit/7d2a46efa9834c3bb0bc1069df0a2e3a6e855d01",
             "cve": "CVE-2023-34092",
@@ -75348,10 +77524,10 @@
             "v": "<2.0.4"
         },
         {
-            "advisory": "Lightning 2.0.4 updates its dependency 'redis' to version '4.5.5' to include a security fix.\r\nhttps://github.com/Lightning-AI/lightning/commit/0831e138c02e492bdd384be99079d949c93b1e8e",
-            "cve": "CVE-2023-28858",
-            "id": "pyup.io-59186",
-            "more_info_path": "/vulnerabilities/CVE-2023-28858/59186",
+            "advisory": "Lightning 2.0.4 updates its dependency 'vite' to version '2.9.16' to include a security fix.\r\nhttps://github.com/Lightning-AI/lightning/commit/7d2a46efa9834c3bb0bc1069df0a2e3a6e855d01",
+            "cve": "CVE-2022-35204",
+            "id": "pyup.io-59185",
+            "more_info_path": "/vulnerabilities/CVE-2022-35204/59185",
             "specs": [
                 "<2.0.4"
             ],
@@ -75376,6 +77552,16 @@
                 "<2.0.4"
             ],
             "v": "<2.0.4"
+        },
+        {
+            "advisory": "Lightning 2.0.4 updates its dependency 'redis' to version '4.5.5' to include a security fix.\r\nhttps://github.com/Lightning-AI/lightning/commit/0831e138c02e492bdd384be99079d949c93b1e8e",
+            "cve": "CVE-2023-28858",
+            "id": "pyup.io-59186",
+            "more_info_path": "/vulnerabilities/CVE-2023-28858/59186",
+            "specs": [
+                "<2.0.4"
+            ],
+            "v": "<2.0.4"
         }
     ],
     "lilac": [
@@ -75632,6 +77818,38 @@
             "v": "<0.0.102"
         }
     ],
+    "litellm": [
+        {
+            "advisory": "Litellm version 1.35.1.dev1 introduces a low-severity security fix by disabling demo accounts on the Admin UI. Previously, the Proxy used a hardcoded demo account with no permissions, posing a potential security risk.",
+            "cve": "PVE-2024-67612",
+            "id": "pyup.io-67612",
+            "more_info_path": "/vulnerabilities/PVE-2024-67612/67612",
+            "specs": [
+                "<1.35.1.dev1"
+            ],
+            "v": "<1.35.1.dev1"
+        },
+        {
+            "advisory": "Affected versions of Litellm are vulnerable to improper authorization. Users could remove files from litellm proxy server when calling  /audio/transcriptions.",
+            "cve": "PVE-2024-68072",
+            "id": "pyup.io-68072",
+            "more_info_path": "/vulnerabilities/PVE-2024-68072/68072",
+            "specs": [
+                "<1.35.18"
+            ],
+            "v": "<1.35.18"
+        },
+        {
+            "advisory": "Litellm version 1.35.20.dev2 resolves an issue where users could inadvertently delete files from the Litellm proxy server when accessing the `/audio/transcriptions` endpoint.",
+            "cve": "PVE-2024-69610",
+            "id": "pyup.io-69610",
+            "more_info_path": "/vulnerabilities/PVE-2024-69610/69610",
+            "specs": [
+                "<1.35.20.dev2"
+            ],
+            "v": "<1.35.20.dev2"
+        }
+    ],
     "lithops": [
         {
             "advisory": "Lithops 1.0.1 fixes a flask security issue. See: CVE-2018-1000656.",
@@ -76378,6 +78596,18 @@
             "v": "<0.8.5"
         }
     ],
+    "loggerhead": [
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view.",
+            "cve": "CVE-2011-0728",
+            "id": "pyup.io-67952",
+            "more_info_path": "/vulnerabilities/CVE-2011-0728/67952",
+            "specs": [
+                "<1.18.1"
+            ],
+            "v": "<1.18.1"
+        }
+    ],
     "logilab-common": [
         {
             "advisory": "The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.",
@@ -76401,16 +78631,6 @@
         }
     ],
     "logprep": [
-        {
-            "advisory": "Logprep 7.0.0 updates its dependency 'urllib3' to include a security fix.",
-            "cve": "CVE-2023-43804",
-            "id": "pyup.io-61804",
-            "more_info_path": "/vulnerabilities/CVE-2023-43804/61804",
-            "specs": [
-                "<7.0.0"
-            ],
-            "v": "<7.0.0"
-        },
         {
             "advisory": "Logprep 7.0.0 updates its dependency 'certifi' to include a security fix.",
             "cve": "CVE-2023-37920",
@@ -76430,6 +78650,16 @@
                 "<7.0.0"
             ],
             "v": "<7.0.0"
+        },
+        {
+            "advisory": "Logprep 7.0.0 updates its dependency 'urllib3' to include a security fix.",
+            "cve": "CVE-2023-43804",
+            "id": "pyup.io-61804",
+            "more_info_path": "/vulnerabilities/CVE-2023-43804/61804",
+            "specs": [
+                "<7.0.0"
+            ],
+            "v": "<7.0.0"
         }
     ],
     "loguru": [
@@ -76956,20 +79186,20 @@
             "v": "<0.9.62"
         },
         {
-            "advisory": "Mage-ai 0.9.62 has updated its cryptography dependency from 36.0.2 to 41.0.6 to address the security issue identified as CVE-2024-22195.",
-            "cve": "CVE-2024-0727",
-            "id": "pyup.io-65072",
-            "more_info_path": "/vulnerabilities/CVE-2024-0727/65072",
+            "advisory": "Mage-ai 0.9.62 has updated its ipython dependency from 7.34.0 to 8.10.0 to address the security issue identified as CVE-2023-24816.",
+            "cve": "CVE-2023-24816",
+            "id": "pyup.io-65071",
+            "more_info_path": "/vulnerabilities/CVE-2023-24816/65071",
             "specs": [
                 "<0.9.62"
             ],
             "v": "<0.9.62"
         },
         {
-            "advisory": "Mage-ai 0.9.62 has updated its ipython dependency from 7.34.0 to 8.10.0 to address the security issue identified as CVE-2023-24816.",
-            "cve": "CVE-2023-24816",
-            "id": "pyup.io-65071",
-            "more_info_path": "/vulnerabilities/CVE-2023-24816/65071",
+            "advisory": "Mage-ai 0.9.62 has updated its cryptography dependency from 36.0.2 to 41.0.6 to address the security issue identified as CVE-2024-22195.",
+            "cve": "CVE-2024-0727",
+            "id": "pyup.io-65072",
+            "more_info_path": "/vulnerabilities/CVE-2024-0727/65072",
             "specs": [
                 "<0.9.62"
             ],
@@ -76986,20 +79216,20 @@
             "v": "<0.9.62"
         },
         {
-            "advisory": "Mage-ai version 0.9.65 updates its jupyter-server dependency to 2.11.2 from the previous 1.23.5 in response to the security vulnerability CVE-2023-49080.\r\nhttps://github.com/mage-ai/mage-ai/pull/4444/commits/6fd7c487c4accb1af62438b07b876d732d3c301a",
-            "cve": "CVE-2023-49080",
-            "id": "pyup.io-66645",
-            "more_info_path": "/vulnerabilities/CVE-2023-49080/66645",
+            "advisory": "Mage-ai version 0.9.65 updates its Jinja2 dependency to 3.1.3 from the previous 3.1.2 in response to the security vulnerability CVE-2024-22195.\r\nhttps://github.com/mage-ai/mage-ai/pull/4444/commits/6fd7c487c4accb1af62438b07b876d732d3c301a",
+            "cve": "CVE-2024-22195",
+            "id": "pyup.io-66072",
+            "more_info_path": "/vulnerabilities/CVE-2024-22195/66072",
             "specs": [
                 "<0.9.65"
             ],
             "v": "<0.9.65"
         },
         {
-            "advisory": "Mage-ai version 0.9.65 updates its Jinja2 dependency to 3.1.3 from the previous 3.1.2 in response to the security vulnerability CVE-2024-22195.\r\nhttps://github.com/mage-ai/mage-ai/pull/4444/commits/6fd7c487c4accb1af62438b07b876d732d3c301a",
-            "cve": "CVE-2024-22195",
-            "id": "pyup.io-66072",
-            "more_info_path": "/vulnerabilities/CVE-2024-22195/66072",
+            "advisory": "Mage-ai version 0.9.65 updates its jupyter-server dependency to 2.11.2 from the previous 1.23.5 in response to the security vulnerability CVE-2023-49080.\r\nhttps://github.com/mage-ai/mage-ai/pull/4444/commits/6fd7c487c4accb1af62438b07b876d732d3c301a",
+            "cve": "CVE-2023-49080",
+            "id": "pyup.io-66645",
+            "more_info_path": "/vulnerabilities/CVE-2023-49080/66645",
             "specs": [
                 "<0.9.65"
             ],
@@ -77040,6 +79270,18 @@
             "v": ">0"
         }
     ],
+    "mailchecker": [
+        {
+            "advisory": "Mailchecker version 3.2.9 includes a security enhancement by forcing the lodash library to update to versions greater than 4.17.5. This update addresses the CVE-2018-3721.",
+            "cve": "CVE-2018-3721",
+            "id": "pyup.io-68095",
+            "more_info_path": "/vulnerabilities/CVE-2018-3721/68095",
+            "specs": [
+                "<3.2.9"
+            ],
+            "v": "<3.2.9"
+        }
+    ],
     "mailman": [
         {
             "advisory": "Mailman 2.1.14 includes a fix for CVE-2011-0707: Three XSS flaws due improper escaping of the full name of the member.",
@@ -77091,6 +79333,26 @@
             ],
             "v": "<2.1.28"
         },
+        {
+            "advisory": "/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.",
+            "cve": "CVE-2020-12108",
+            "id": "pyup.io-70585",
+            "more_info_path": "/vulnerabilities/CVE-2020-12108/70585",
+            "specs": [
+                "<2.1.31"
+            ],
+            "v": "<2.1.31"
+        },
+        {
+            "advisory": "GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.",
+            "cve": "CVE-2020-15011",
+            "id": "pyup.io-70582",
+            "more_info_path": "/vulnerabilities/CVE-2020-15011/70582",
+            "specs": [
+                "<2.1.33"
+            ],
+            "v": "<2.1.33"
+        },
         {
             "advisory": "GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).",
             "cve": "CVE-2021-42097",
@@ -77231,6 +79493,16 @@
             ],
             "v": "<=2.1"
         },
+        {
+            "advisory": "Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators.",
+            "cve": "CVE-2016-7123",
+            "id": "pyup.io-70520",
+            "more_info_path": "/vulnerabilities/CVE-2016-7123/70520",
+            "specs": [
+                "<=2.1.14"
+            ],
+            "v": "<=2.1.14"
+        },
         {
             "advisory": "Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.",
             "cve": "CVE-2018-0618",
@@ -77414,6 +79686,18 @@
             "v": ">=2.1.4,<=2.1.6"
         }
     ],
+    "mailpile": [
+        {
+            "advisory": "The \"Security and Privacy\" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.",
+            "cve": "CVE-2018-20954",
+            "id": "pyup.io-70572",
+            "more_info_path": "/vulnerabilities/CVE-2018-20954/70572",
+            "specs": [
+                "<1.0.0rc4"
+            ],
+            "v": "<1.0.0rc4"
+        }
+    ],
     "mako": [
         {
             "advisory": "Mako 0.3.4 includes a fix for CVE-2010-2480: Improper escaping of single quotes in escape.cgi (XSS).",
@@ -77473,6 +79757,26 @@
         }
     ],
     "manila": [
+        {
+            "advisory": "User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to an arbitrary cephx user, including existing users. The access key is retrieved via the interface drivers. Then, all users of the requesting OpenStack project can view the access key. This enables the attacker to target any resource that the user has access to. This can be done to even \"admin\" users, compromising the ceph administrator. This flaw affects Ceph versions prior to 14.2.16, 15.x prior to 15.2.8, and 16.x prior to 16.2.0.",
+            "cve": "CVE-2020-27781",
+            "id": "pyup.io-70605",
+            "more_info_path": "/vulnerabilities/CVE-2020-27781/70605",
+            "specs": [
+                "<16.2.0"
+            ],
+            "v": "<16.2.0"
+        },
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in the \"Shares\" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the \"Create Share\" form.",
+            "cve": "CVE-2016-6519",
+            "id": "pyup.io-70604",
+            "more_info_path": "/vulnerabilities/CVE-2016-6519/70604",
+            "specs": [
+                "<2.5.1"
+            ],
+            "v": "<2.5.1"
+        },
         {
             "advisory": "OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks. See: CVE-2020-9543.",
             "cve": "CVE-2020-9543",
@@ -77817,6 +80121,16 @@
                 "<0.3.5"
             ],
             "v": "<0.3.5"
+        },
+        {
+            "advisory": "Dbt-snowflake 1.8.0b2 updates its cryptography requirement to version 42.0.4 or newer, addressing security concerns highlighted by CVE-2024-26130.",
+            "cve": "CVE-2024-31207",
+            "id": "pyup.io-67471",
+            "more_info_path": "/vulnerabilities/CVE-2024-31207/67471",
+            "specs": [
+                "<0.3.9"
+            ],
+            "v": "<0.3.9"
         }
     ],
     "markdown-it-py": [
@@ -78279,6 +80593,16 @@
             ],
             "v": "<0.10.0"
         },
+        {
+            "advisory": "Matlab-proxy version 0.15.1 addresses an issue where token authentication was invalidated due to cookie overlap from other servers operating on different ports within the same domain.",
+            "cve": "PVE-2024-70494",
+            "id": "pyup.io-70494",
+            "more_info_path": "/vulnerabilities/PVE-2024-70494/70494",
+            "specs": [
+                "<0.15.1"
+            ],
+            "v": "<0.15.1"
+        },
         {
             "advisory": "Matlab-proxy 0.8.0 includes a fix for an unsafe defaults vulnerability.\r\nhttps://github.com/mathworks/matlab-proxy/commit/b446ec20374e8adb3b3f79ba49ce4ccb73f1bcf4",
             "cve": "PVE-2023-61464",
@@ -78422,6 +80746,36 @@
             ],
             "v": "<0.28.1"
         },
+        {
+            "advisory": "The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.",
+            "cve": "CVE-2018-12291",
+            "id": "pyup.io-67946",
+            "more_info_path": "/vulnerabilities/CVE-2018-12291/67946",
+            "specs": [
+                "<0.31.1"
+            ],
+            "v": "<0.31.1"
+        },
+        {
+            "advisory": "In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.",
+            "cve": "CVE-2018-12423",
+            "id": "pyup.io-67947",
+            "more_info_path": "/vulnerabilities/CVE-2018-12423/67947",
+            "specs": [
+                "<0.31.2"
+            ],
+            "v": "<0.31.2"
+        },
+        {
+            "advisory": "Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation.",
+            "cve": "CVE-2018-16515",
+            "id": "pyup.io-67948",
+            "more_info_path": "/vulnerabilities/CVE-2018-16515/67948",
+            "specs": [
+                "<0.33.3.1"
+            ],
+            "v": "<0.33.3.1"
+        },
         {
             "advisory": "Matrix-synapse 1.25.0 includes a fix for CVE-2021-21273: Open redirects on some federation and push requests.\r\nhttps://github.com/matrix-org/synapse/security/advisories/GHSA-v936-j8gp-9q3p",
             "cve": "CVE-2021-21273",
@@ -78823,6 +81177,16 @@
                 "<4.4.10"
             ],
             "v": "<4.4.10"
+        },
+        {
+            "advisory": "Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a (1) tag or the (2) title of a source in a Staging folder, (3) Name field in a bootstrap setup, or Title field in a (4) smart link or (5) web form.",
+            "cve": "CVE-2014-3840",
+            "id": "pyup.io-70422",
+            "more_info_path": "/vulnerabilities/CVE-2014-3840/70422",
+            "specs": [
+                "<=0.13"
+            ],
+            "v": "<=0.13"
         }
     ],
     "md4c": [
@@ -79019,6 +81383,18 @@
             "v": "<0.1.20"
         }
     ],
+    "meraki": [
+        {
+            "advisory": "Versions of aiohttp before 1.40.1, an asynchronous HTTP client/server framework for asyncio and Python, are susceptible to a vulnerability where improper validation allows an attacker to modify or create a new HTTP request by controlling the HTTP version of the request. This issue specifically affects environments where the attacker has the ability to control the HTTP version.",
+            "cve": "CVE-2023-49081",
+            "id": "pyup.io-68085",
+            "more_info_path": "/vulnerabilities/CVE-2023-49081/68085",
+            "specs": [
+                "<1.40.1"
+            ],
+            "v": "<1.40.1"
+        }
+    ],
     "mercurial": [
         {
             "advisory": "Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.",
@@ -79273,20 +81649,20 @@
     ],
     "metricflow": [
         {
-            "advisory": "Metricflow 0.100.0 updates its dependency 'snowflake-connector-python' to 2.7.8 to include a security fix.",
-            "cve": "CVE-2022-29217",
-            "id": "pyup.io-50267",
-            "more_info_path": "/vulnerabilities/CVE-2022-29217/50267",
+            "advisory": "Metricflow 0.100.0 updates its dependency 'numpy' to v1.22.2 to include a security fix.",
+            "cve": "CVE-2021-41495",
+            "id": "pyup.io-50258",
+            "more_info_path": "/vulnerabilities/CVE-2021-41495/50258",
             "specs": [
                 "<0.100.0"
             ],
             "v": "<0.100.0"
         },
         {
-            "advisory": "Metricflow 0.100.0 updates its dependency 'numpy' to v1.22.2 to include a security fix.",
-            "cve": "CVE-2021-41495",
-            "id": "pyup.io-50258",
-            "more_info_path": "/vulnerabilities/CVE-2021-41495/50258",
+            "advisory": "Metricflow 0.100.0 updates its dependency 'snowflake-connector-python' to 2.7.8 to include a security fix.",
+            "cve": "CVE-2022-29217",
+            "id": "pyup.io-50267",
+            "more_info_path": "/vulnerabilities/CVE-2022-29217/50267",
             "specs": [
                 "<0.100.0"
             ],
@@ -79356,6 +81732,26 @@
             ],
             "v": "<=4.3.1"
         },
+        {
+            "advisory": "An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header.",
+            "cve": "CVE-2024-22311",
+            "id": "pyup.io-68491",
+            "more_info_path": "/vulnerabilities/CVE-2024-22311/68491",
+            "specs": [
+                "<=6.0.0"
+            ],
+            "v": "<=6.0.0"
+        },
+        {
+            "advisory": "An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.",
+            "cve": "CVE-2023-45922",
+            "id": "pyup.io-68492",
+            "more_info_path": "/vulnerabilities/CVE-2023-45922/68492",
+            "specs": [
+                "<=6.0.0"
+            ],
+            "v": "<=6.0.0"
+        },
         {
             "advisory": "Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632.",
             "cve": "CVE-2020-19002",
@@ -79489,6 +81885,30 @@
             "v": "<2024.1.5"
         }
     ],
+    "micropython-copy": [
+        {
+            "advisory": "A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manipulation leads to use after free. The exploit has been disclosed to the public and may be used. The patch is identified as 8b24aa36ba978eafc6114b6798b47b7bfecdca26. It is recommended to apply a patch to fix this issue. VDB-249158 is the identifier assigned to this vulnerability.",
+            "cve": "CVE-2023-7152",
+            "id": "pyup.io-70396",
+            "more_info_path": "/vulnerabilities/CVE-2023-7152/70396",
+            "specs": [
+                "<1.22.0"
+            ],
+            "v": "<1.22.0"
+        }
+    ],
+    "micropython-io": [
+        {
+            "advisory": "A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manipulation leads to use after free. The exploit has been disclosed to the public and may be used. The patch is identified as 8b24aa36ba978eafc6114b6798b47b7bfecdca26. It is recommended to apply a patch to fix this issue. VDB-249158 is the identifier assigned to this vulnerability.",
+            "cve": "CVE-2023-7152",
+            "id": "pyup.io-70397",
+            "more_info_path": "/vulnerabilities/CVE-2023-7152/70397",
+            "specs": [
+                "<1.22.0"
+            ],
+            "v": "<1.22.0"
+        }
+    ],
     "micropython-mdns": [
         {
             "advisory": "Micropython-mdns 1.3.0 updates its dependency 'wheel' to v0.38.0 to include a security fix.",
@@ -79514,9 +81934,9 @@
         },
         {
             "advisory": "Microstructpy 1.5.4 updates its dependency 'numpy' to v1.22.0 to include security fixes.",
-            "cve": "CVE-2021-33430",
-            "id": "pyup.io-50871",
-            "more_info_path": "/vulnerabilities/CVE-2021-33430/50871",
+            "cve": "CVE-2021-34141",
+            "id": "pyup.io-50914",
+            "more_info_path": "/vulnerabilities/CVE-2021-34141/50914",
             "specs": [
                 "<1.5.4"
             ],
@@ -79524,9 +81944,9 @@
         },
         {
             "advisory": "Microstructpy 1.5.4 updates its dependency 'numpy' to v1.22.0 to include security fixes.",
-            "cve": "CVE-2021-34141",
-            "id": "pyup.io-50914",
-            "more_info_path": "/vulnerabilities/CVE-2021-34141/50914",
+            "cve": "CVE-2021-33430",
+            "id": "pyup.io-50871",
+            "more_info_path": "/vulnerabilities/CVE-2021-33430/50871",
             "specs": [
                 "<1.5.4"
             ],
@@ -79613,20 +82033,20 @@
             "v": "<22.11.4.3"
         },
         {
-            "advisory": "Mindsdb 23.11.4.1 fixes a security bug related to the file upload security. \r\nhttps://github.com/mindsdb/mindsdb/commit/9dfec88ed0840cf3eb7805d6383067d256d9f7d3",
-            "cve": "PVE-2023-62723",
-            "id": "pyup.io-62723",
-            "more_info_path": "/vulnerabilities/PVE-2023-62723/62723",
+            "advisory": "MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side request forgery vulnerability in `file.py`. This can lead to limited information disclosure. Users should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the issue.",
+            "cve": "CVE-2023-49795",
+            "id": "pyup.io-65355",
+            "more_info_path": "/vulnerabilities/CVE-2023-49795/65355",
             "specs": [
                 "<23.11.4.1"
             ],
             "v": "<23.11.4.1"
         },
         {
-            "advisory": "MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side request forgery vulnerability in `file.py`. This can lead to limited information disclosure. Users should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the issue.",
-            "cve": "CVE-2023-49795",
-            "id": "pyup.io-65355",
-            "more_info_path": "/vulnerabilities/CVE-2023-49795/65355",
+            "advisory": "Mindsdb 23.11.4.1 fixes a security bug related to the file upload security. \r\nhttps://github.com/mindsdb/mindsdb/commit/9dfec88ed0840cf3eb7805d6383067d256d9f7d3",
+            "cve": "PVE-2023-62723",
+            "id": "pyup.io-62723",
+            "more_info_path": "/vulnerabilities/PVE-2023-62723/62723",
             "specs": [
                 "<23.11.4.1"
             ],
@@ -79695,20 +82115,10 @@
             "v": "<0.5.0-beta"
         },
         {
-            "advisory": "Mindspore 0.5.0beta upgrades its dependency 'SQLite' to handle CVE-2020-13630.",
-            "cve": "CVE-2020-13630",
-            "id": "pyup.io-40836",
-            "more_info_path": "/vulnerabilities/CVE-2020-13630/40836",
-            "specs": [
-                "<0.5.0beta"
-            ],
-            "v": "<0.5.0beta"
-        },
-        {
-            "advisory": "Mindspore 0.5.0beta upgrades its dependency 'SQLite' to version 3.32.2 to include security fixes.",
-            "cve": "CVE-2020-11655",
-            "id": "pyup.io-40834",
-            "more_info_path": "/vulnerabilities/CVE-2020-11655/40834",
+            "advisory": "Mindspore 0.5.0beta updates the underlying 'libjpeg-turbo' dependency to 2.0.4 to handle CVE-2020-13790.",
+            "cve": "CVE-2020-13790",
+            "id": "pyup.io-41016",
+            "more_info_path": "/vulnerabilities/CVE-2020-13790/41016",
             "specs": [
                 "<0.5.0beta"
             ],
@@ -79725,20 +82135,20 @@
             "v": "<0.5.0beta"
         },
         {
-            "advisory": "Mindspore 0.5.0beta updates its dependency 'sqlite' to v3.32.2 to include security fixes.",
-            "cve": "CVE-2020-11656",
-            "id": "pyup.io-41006",
-            "more_info_path": "/vulnerabilities/CVE-2020-11656/41006",
+            "advisory": "Mindspore 0.5.0beta upgrades its dependency 'SQLite' to handle CVE-2020-13630.",
+            "cve": "CVE-2020-13630",
+            "id": "pyup.io-40836",
+            "more_info_path": "/vulnerabilities/CVE-2020-13630/40836",
             "specs": [
                 "<0.5.0beta"
             ],
             "v": "<0.5.0beta"
         },
         {
-            "advisory": "Mindspore 0.5.0beta updates the underlying 'libjpeg-turbo' dependency to 2.0.4 to handle CVE-2020-13790.",
-            "cve": "CVE-2020-13790",
-            "id": "pyup.io-41016",
-            "more_info_path": "/vulnerabilities/CVE-2020-13790/41016",
+            "advisory": "Mindspore 0.5.0beta updates its dependency 'sqlite' to v3.32.2 to include security fixes.",
+            "cve": "CVE-2020-11656",
+            "id": "pyup.io-41006",
+            "more_info_path": "/vulnerabilities/CVE-2020-11656/41006",
             "specs": [
                 "<0.5.0beta"
             ],
@@ -79784,6 +82194,16 @@
             ],
             "v": "<0.5.0beta"
         },
+        {
+            "advisory": "Mindspore 0.5.0beta upgrades its dependency 'SQLite' to version 3.32.2 to include security fixes.",
+            "cve": "CVE-2020-11655",
+            "id": "pyup.io-40834",
+            "more_info_path": "/vulnerabilities/CVE-2020-11655/40834",
+            "specs": [
+                "<0.5.0beta"
+            ],
+            "v": "<0.5.0beta"
+        },
         {
             "advisory": "Mindspore 0.5.0beta upgrades its depedency 'SQLite' to 3.32.2 to handle CVE-2020-13632.",
             "cve": "CVE-2020-13632",
@@ -79855,20 +82275,20 @@
             "v": ">=0.7.0,<1.3.0"
         },
         {
-            "advisory": "When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers.",
-            "cve": "CVE-2021-33648",
-            "id": "pyup.io-65822",
-            "more_info_path": "/vulnerabilities/CVE-2021-33648/65822",
+            "advisory": "When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it will cause a division by 0 exception.",
+            "cve": "CVE-2021-33651",
+            "id": "pyup.io-65825",
+            "more_info_path": "/vulnerabilities/CVE-2021-33651/65825",
             "specs": [
                 ">=1.1.0,<1.3.0"
             ],
             "v": ">=1.1.0,<1.3.0"
         },
         {
-            "advisory": "When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it will cause a division by 0 exception.",
-            "cve": "CVE-2021-33651",
-            "id": "pyup.io-65825",
-            "more_info_path": "/vulnerabilities/CVE-2021-33651/65825",
+            "advisory": "When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers.",
+            "cve": "CVE-2021-33648",
+            "id": "pyup.io-65822",
+            "more_info_path": "/vulnerabilities/CVE-2021-33648/65822",
             "specs": [
                 ">=1.1.0,<1.3.0"
             ],
@@ -80126,9 +82546,9 @@
         },
         {
             "advisory": "Mitmproxy 9.0.1 updates its precompiled binaries with OpenSSL 3.0.7, to include security fixes.",
-            "cve": "CVE-2022-3602",
-            "id": "pyup.io-51778",
-            "more_info_path": "/vulnerabilities/CVE-2022-3602/51778",
+            "cve": "CVE-2022-3786",
+            "id": "pyup.io-51651",
+            "more_info_path": "/vulnerabilities/CVE-2022-3786/51651",
             "specs": [
                 "<9.0.1"
             ],
@@ -80136,9 +82556,9 @@
         },
         {
             "advisory": "Mitmproxy 9.0.1 updates its precompiled binaries with OpenSSL 3.0.7, to include security fixes.",
-            "cve": "CVE-2022-3786",
-            "id": "pyup.io-51651",
-            "more_info_path": "/vulnerabilities/CVE-2022-3786/51651",
+            "cve": "CVE-2022-3602",
+            "id": "pyup.io-51778",
+            "more_info_path": "/vulnerabilities/CVE-2022-3602/51778",
             "specs": [
                 "<9.0.1"
             ],
@@ -80208,16 +82628,6 @@
         }
     ],
     "mjml": [
-        {
-            "advisory": "Version 0.11.0 of Mjml addresses a security concern where HTML entities like &gt; were not properly escaped in the output, potentially allowing the injection of untrusted data.\r\nhttps://github.com/FelixSchwarz/mjml-python/commit/8d410b7a500703080bb14ed7e3d2663fe16767e6",
-            "cve": "PVE-2024-65629",
-            "id": "pyup.io-65629",
-            "more_info_path": "/vulnerabilities/PVE-2024-65629/65629",
-            "specs": [
-                "<0.11.0"
-            ],
-            "v": "<0.11.0"
-        },
         {
             "advisory": "The `mjml` PyPI package, found at the `FelixSchwarz/mjml-python` GitHub repo, is an unofficial Python port of MJML, a markup language created by Mailjet. All users of `FelixSchwarz/mjml-python` who insert untrusted data into mjml templates unless that data is checked in a very strict manner. User input like `&lt;script&gt;` would be rendered as `<script>` in the final HTML output. The attacker must be able to control some data which is later injected in an mjml template which is then send out as email to other users. The attacker could control contents of email messages sent through the platform. The problem has been fixed in version 0.11.0 of this library. Versions before 0.10.0 are not affected by this security issue. As a workaround, ensure that potentially untrusted user input does not contain any sequences which could be rendered as HTML. See CVE-2024-26151.",
             "cve": "CVE-2024-26151",
@@ -80425,14 +82835,34 @@
             "v": "<2.0.0rc0"
         },
         {
-            "advisory": "Mlflow 2.2.1 includes a fix for CVE-2023-1177: Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.\r\nhttps://github.com/advisories/GHSA-xg73-94fp-g449",
-            "cve": "CVE-2023-1177",
-            "id": "pyup.io-55009",
-            "more_info_path": "/vulnerabilities/CVE-2023-1177/55009",
+            "advisory": "Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. This issue leads to a client-side RCE when running an untrusted recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over template variables.",
+            "cve": "CVE-2023-49815",
+            "id": "pyup.io-68487",
+            "more_info_path": "/vulnerabilities/CVE-2023-49815/68487",
             "specs": [
-                "<2.2.1"
+                "<2.10.0"
             ],
-            "v": "<2.2.1"
+            "v": "<2.10.0"
+        },
+        {
+            "advisory": "Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields.",
+            "cve": "CVE-2024-22300",
+            "id": "pyup.io-68486",
+            "more_info_path": "/vulnerabilities/CVE-2024-22300/68486",
+            "specs": [
+                "<2.10.0"
+            ],
+            "v": "<2.10.0"
+        },
+        {
+            "advisory": "Mlflow 2.12.0 has implemented a security patch to address a critical Local File Read/Path Traversal vulnerability found in the Model Registry.",
+            "cve": "PVE-2024-67933",
+            "id": "pyup.io-67933",
+            "more_info_path": "/vulnerabilities/PVE-2024-67933/67933",
+            "specs": [
+                "<2.12.1"
+            ],
+            "v": "<2.12.1"
         },
         {
             "advisory": "Mlflow 2.2.1 includes a fix for CVE-2023-1176: Remote file existence check vulnerability in 'mlflow server' and 'mlflow ui' CLIs.\r\nhttps://github.com/advisories/GHSA-wp72-7hj9-5265",
@@ -80444,6 +82874,16 @@
             ],
             "v": "<2.2.1"
         },
+        {
+            "advisory": "Mlflow 2.2.1 includes a fix for CVE-2023-1177: Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.\r\nhttps://github.com/advisories/GHSA-xg73-94fp-g449",
+            "cve": "CVE-2023-1177",
+            "id": "pyup.io-55009",
+            "more_info_path": "/vulnerabilities/CVE-2023-1177/55009",
+            "specs": [
+                "<2.2.1"
+            ],
+            "v": "<2.2.1"
+        },
         {
             "advisory": "Mlflow 2.3.0 includes a fix for a Path Traversal vulnerability.\r\nhttps://github.com/advisories/GHSA-wjq3-7jxx-whj9",
             "cve": "CVE-2023-2780",
@@ -80485,20 +82925,20 @@
             "v": "<2.4.1"
         },
         {
-            "advisory": "Mlflow 2.6.0 includes a fix for CVE-2023-3765: Multiple path traversals on Windows hosts.\r\nhttps://github.com/advisories/GHSA-fmxj-6h9g-6vw3\r\nhttps://huntr.dev/bounties/4be5fd63-8a0a-490d-9ee1-f33dc768ed76\r\nhttps://github.com/mlflow/mlflow/commit/6dde93758d42455cb90ef324407919ed67668b9b",
-            "cve": "CVE-2023-3765",
-            "id": "pyup.io-60598",
-            "more_info_path": "/vulnerabilities/CVE-2023-3765/60598",
+            "advisory": "Mlflow 2.6.0 includes a fix for a Command Injection vulnerability.\r\nhttps://github.com/advisories/GHSA-ffw3-6378-cqgp",
+            "cve": "CVE-2023-4033",
+            "id": "pyup.io-60599",
+            "more_info_path": "/vulnerabilities/CVE-2023-4033/60599",
             "specs": [
                 "<2.6.0"
             ],
             "v": "<2.6.0"
         },
         {
-            "advisory": "Mlflow 2.6.0 includes a fix for a Command Injection vulnerability.\r\nhttps://github.com/advisories/GHSA-ffw3-6378-cqgp",
-            "cve": "CVE-2023-4033",
-            "id": "pyup.io-60599",
-            "more_info_path": "/vulnerabilities/CVE-2023-4033/60599",
+            "advisory": "Mlflow 2.6.0 includes a fix for CVE-2023-3765: Multiple path traversals on Windows hosts.\r\nhttps://github.com/advisories/GHSA-fmxj-6h9g-6vw3\r\nhttps://huntr.dev/bounties/4be5fd63-8a0a-490d-9ee1-f33dc768ed76\r\nhttps://github.com/mlflow/mlflow/commit/6dde93758d42455cb90ef324407919ed67668b9b",
+            "cve": "CVE-2023-3765",
+            "id": "pyup.io-60598",
+            "more_info_path": "/vulnerabilities/CVE-2023-3765/60598",
             "specs": [
                 "<2.6.0"
             ],
@@ -80535,10 +82975,10 @@
             "v": "<2.9.0"
         },
         {
-            "advisory": "mlflow 2.9.2 addresses a vulnerability that allows an attacker to inject malicious code into the \u201cContent-Type\u201d header of a POST request, which is then reflected back to the user without proper sanitization or escaping.\r\nhttps://github.com/mlflow/mlflow/commit/28ff3f94994941e038f2172c6484b65dc4db6ca1",
-            "cve": "CVE-2023-6568",
-            "id": "pyup.io-62994",
-            "more_info_path": "/vulnerabilities/CVE-2023-6568/62994",
+            "advisory": "Mlflow 2.9.2 fixes for Windows Path Traversal attack.\r\n#NOTE: This vulnerability affects only users of Windows.\r\nhttps://github.com/mlflow/mlflow/pull/10647/commits/63dfb885aec22d07b4452828e7fa3e532cc945c4",
+            "cve": "CVE-2023-6753",
+            "id": "pyup.io-62996",
+            "more_info_path": "/vulnerabilities/CVE-2023-6753/62996",
             "specs": [
                 "<2.9.2"
             ],
@@ -80555,10 +82995,10 @@
             "v": "<2.9.2"
         },
         {
-            "advisory": "Mlflow 2.9.2 fixes for Windows Path Traversal attack.\r\n#NOTE: This vulnerability affects only users of Windows.\r\nhttps://github.com/mlflow/mlflow/pull/10647/commits/63dfb885aec22d07b4452828e7fa3e532cc945c4",
-            "cve": "CVE-2023-6753",
-            "id": "pyup.io-62996",
-            "more_info_path": "/vulnerabilities/CVE-2023-6753/62996",
+            "advisory": "mlflow 2.9.2 addresses a vulnerability that allows an attacker to inject malicious code into the \u201cContent-Type\u201d header of a POST request, which is then reflected back to the user without proper sanitization or escaping.\r\nhttps://github.com/mlflow/mlflow/commit/28ff3f94994941e038f2172c6484b65dc4db6ca1",
+            "cve": "CVE-2023-6568",
+            "id": "pyup.io-62994",
+            "more_info_path": "/vulnerabilities/CVE-2023-6568/62994",
             "specs": [
                 "<2.9.2"
             ],
@@ -80584,6 +83024,16 @@
             ],
             "v": ">=0,<1.23.1"
         },
+        {
+            "advisory": "A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abuse to get a remote code execution on the victim machine.",
+            "cve": "CVE-2023-6974",
+            "id": "pyup.io-65219",
+            "more_info_path": "/vulnerabilities/CVE-2023-6974/65219",
+            "specs": [
+                ">=0,<2.9.2"
+            ],
+            "v": ">=0,<2.9.2"
+        },
         {
             "advisory": "Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.",
             "cve": "CVE-2023-6831",
@@ -80594,6 +83044,16 @@
             ],
             "v": ">=0,<2.9.2"
         },
+        {
+            "advisory": "A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.",
+            "cve": "CVE-2023-6975",
+            "id": "pyup.io-65220",
+            "more_info_path": "/vulnerabilities/CVE-2023-6975/65220",
+            "specs": [
+                ">=0,<2.9.2"
+            ],
+            "v": ">=0,<2.9.2"
+        },
         {
             "advisory": "Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.",
             "cve": "CVE-2023-6909",
@@ -80614,16 +83074,6 @@
             ],
             "v": ">=0,<2.9.2"
         },
-        {
-            "advisory": "A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abuse to get a remote code execution on the victim machine.",
-            "cve": "CVE-2023-6974",
-            "id": "pyup.io-65219",
-            "more_info_path": "/vulnerabilities/CVE-2023-6974/65219",
-            "specs": [
-                ">=0,<2.9.2"
-            ],
-            "v": ">=0,<2.9.2"
-        },
         {
             "advisory": "with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.",
             "cve": "CVE-2023-6940",
@@ -80634,16 +83084,6 @@
             ],
             "v": ">=0,<2.9.2"
         },
-        {
-            "advisory": "A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.",
-            "cve": "CVE-2023-6975",
-            "id": "pyup.io-65220",
-            "more_info_path": "/vulnerabilities/CVE-2023-6975/65220",
-            "specs": [
-                ">=0,<2.9.2"
-            ],
-            "v": ">=0,<2.9.2"
-        },
         {
             "advisory": "This vulnerability enables malicious users to read sensitive files on the server.\r\nhttps://github.com/mlflow/mlflow/commit/4bd7f27c810ba7487d53ed5ef1038fca0f8dc28c",
             "cve": "CVE-2023-6977",
@@ -80690,40 +83130,10 @@
             "v": "<1.0.3rc1"
         },
         {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-32804",
-            "id": "pyup.io-49208",
-            "more_info_path": "/vulnerabilities/CVE-2021-32804/49208",
-            "specs": [
-                "<1.0.3rc1"
-            ],
-            "v": "<1.0.3rc1"
-        },
-        {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2016-10228",
-            "id": "pyup.io-49200",
-            "more_info_path": "/vulnerabilities/CVE-2016-10228/49200",
-            "specs": [
-                "<1.0.3rc1"
-            ],
-            "v": "<1.0.3rc1"
-        },
-        {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-3326",
-            "id": "pyup.io-49179",
-            "more_info_path": "/vulnerabilities/CVE-2021-3326/49179",
-            "specs": [
-                "<1.0.3rc1"
-            ],
-            "v": "<1.0.3rc1"
-        },
-        {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-41247",
-            "id": "pyup.io-49173",
-            "more_info_path": "/vulnerabilities/CVE-2021-41247/49173",
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e\r\nhttps://github.com/advisories/GHSA-hxwm-x553-x359",
+            "cve": "PVE-2022-49161",
+            "id": "pyup.io-49165",
+            "more_info_path": "/vulnerabilities/PVE-2022-49161/49165",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80731,9 +83141,9 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-3999",
-            "id": "pyup.io-49188",
-            "more_info_path": "/vulnerabilities/CVE-2021-3999/49188",
+            "cve": "CVE-2021-32804",
+            "id": "pyup.io-49208",
+            "more_info_path": "/vulnerabilities/CVE-2021-32804/49208",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80741,9 +83151,9 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-3997",
-            "id": "pyup.io-49204",
-            "more_info_path": "/vulnerabilities/CVE-2021-3997/49204",
+            "cve": "CVE-2020-6096",
+            "id": "pyup.io-49182",
+            "more_info_path": "/vulnerabilities/CVE-2020-6096/49182",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80751,19 +83161,19 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-33503",
-            "id": "pyup.io-49213",
-            "more_info_path": "/vulnerabilities/CVE-2021-33503/49213",
+            "cve": "CVE-2022-24785",
+            "id": "pyup.io-49205",
+            "more_info_path": "/vulnerabilities/CVE-2022-24785/49205",
             "specs": [
                 "<1.0.3rc1"
             ],
             "v": "<1.0.3rc1"
         },
         {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-35942",
-            "id": "pyup.io-49175",
-            "more_info_path": "/vulnerabilities/CVE-2021-35942/49175",
+            "advisory": "Mlrun 1.0.3rc1 adds \"pillow~=9.0\" to requirements to tackle vulnerabilities.",
+            "cve": "CVE-2022-22817",
+            "id": "pyup.io-49220",
+            "more_info_path": "/vulnerabilities/CVE-2022-22817/49220",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80771,9 +83181,9 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-23343",
-            "id": "pyup.io-49207",
-            "more_info_path": "/vulnerabilities/CVE-2021-23343/49207",
+            "cve": "CVE-2021-41247",
+            "id": "pyup.io-49173",
+            "more_info_path": "/vulnerabilities/CVE-2021-41247/49173",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80781,9 +83191,9 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-33910",
-            "id": "pyup.io-49202",
-            "more_info_path": "/vulnerabilities/CVE-2021-33910/49202",
+            "cve": "CVE-2021-37713",
+            "id": "pyup.io-49209",
+            "more_info_path": "/vulnerabilities/CVE-2021-37713/49209",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80791,9 +83201,9 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2019-25013",
-            "id": "pyup.io-49185",
-            "more_info_path": "/vulnerabilities/CVE-2019-25013/49185",
+            "cve": "CVE-2021-3997",
+            "id": "pyup.io-49204",
+            "more_info_path": "/vulnerabilities/CVE-2021-3997/49204",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80801,9 +83211,9 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-3807",
-            "id": "pyup.io-49166",
-            "more_info_path": "/vulnerabilities/CVE-2021-3807/49166",
+            "cve": "CVE-2020-29562",
+            "id": "pyup.io-49184",
+            "more_info_path": "/vulnerabilities/CVE-2020-29562/49184",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80821,59 +83231,9 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-39134",
-            "id": "pyup.io-49164",
-            "more_info_path": "/vulnerabilities/CVE-2021-39134/49164",
-            "specs": [
-                "<1.0.3rc1"
-            ],
-            "v": "<1.0.3rc1"
-        },
-        {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-33430",
-            "id": "pyup.io-49206",
-            "more_info_path": "/vulnerabilities/CVE-2021-33430/49206",
-            "specs": [
-                "<1.0.3rc1"
-            ],
-            "v": "<1.0.3rc1"
-        },
-        {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2020-27618",
-            "id": "pyup.io-49176",
-            "more_info_path": "/vulnerabilities/CVE-2020-27618/49176",
-            "specs": [
-                "<1.0.3rc1"
-            ],
-            "v": "<1.0.3rc1"
-        },
-        {
-            "advisory": "Mlrun 1.0.3rc1 adds \"notebook~=6.4\" to requirements to tackle vulnerabilities.",
-            "cve": "CVE-2021-32798",
-            "id": "pyup.io-49216",
-            "more_info_path": "/vulnerabilities/CVE-2021-32798/49216",
-            "specs": [
-                "<1.0.3rc1"
-            ],
-            "v": "<1.0.3rc1"
-        },
-        {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-43138",
-            "id": "pyup.io-49167",
-            "more_info_path": "/vulnerabilities/CVE-2021-43138/49167",
-            "specs": [
-                "<1.0.3rc1"
-            ],
-            "v": "<1.0.3rc1"
-        },
-        {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-37701",
-            "id": "pyup.io-49211",
-            "more_info_path": "/vulnerabilities/CVE-2021-37701/49211",
+            "cve": "CVE-2021-33910",
+            "id": "pyup.io-49202",
+            "more_info_path": "/vulnerabilities/CVE-2021-33910/49202",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80881,9 +83241,9 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2022-0155",
-            "id": "pyup.io-49169",
-            "more_info_path": "/vulnerabilities/CVE-2022-0155/49169",
+            "cve": "CVE-2021-3807",
+            "id": "pyup.io-49166",
+            "more_info_path": "/vulnerabilities/CVE-2021-3807/49166",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80909,16 +83269,6 @@
             ],
             "v": "<1.0.3rc1"
         },
-        {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2020-29562",
-            "id": "pyup.io-49184",
-            "more_info_path": "/vulnerabilities/CVE-2020-29562/49184",
-            "specs": [
-                "<1.0.3rc1"
-            ],
-            "v": "<1.0.3rc1"
-        },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
             "cve": "CVE-2022-24757",
@@ -80950,10 +83300,10 @@
             "v": "<1.0.3rc1"
         },
         {
-            "advisory": "Mlrun 1.0.3rc1 adds \"pillow~=9.0\" to requirements to tackle vulnerabilities.",
-            "cve": "CVE-2022-22817",
-            "id": "pyup.io-49220",
-            "more_info_path": "/vulnerabilities/CVE-2022-22817/49220",
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
+            "cve": "CVE-2022-0536",
+            "id": "pyup.io-49168",
+            "more_info_path": "/vulnerabilities/CVE-2022-0536/49168",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80961,29 +83311,29 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2020-6096",
-            "id": "pyup.io-49182",
-            "more_info_path": "/vulnerabilities/CVE-2020-6096/49182",
+            "cve": "CVE-2021-39134",
+            "id": "pyup.io-49164",
+            "more_info_path": "/vulnerabilities/CVE-2021-39134/49164",
             "specs": [
                 "<1.0.3rc1"
             ],
             "v": "<1.0.3rc1"
         },
         {
-            "advisory": "Mlrun 1.0.3rc1 adds \"pillow~=9.0\" to requirements to tackle vulnerabilities.",
-            "cve": "CVE-2022-24303",
-            "id": "pyup.io-49217",
-            "more_info_path": "/vulnerabilities/CVE-2022-24303/49217",
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
+            "cve": "CVE-2022-0155",
+            "id": "pyup.io-49169",
+            "more_info_path": "/vulnerabilities/CVE-2022-0155/49169",
             "specs": [
                 "<1.0.3rc1"
             ],
             "v": "<1.0.3rc1"
         },
         {
-            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e\r\nhttps://github.com/advisories/GHSA-hxwm-x553-x359",
-            "cve": "PVE-2022-49161",
-            "id": "pyup.io-49165",
-            "more_info_path": "/vulnerabilities/PVE-2022-49161/49165",
+            "advisory": "Mlrun 1.0.3rc1 adds \"notebook~=6.4\" to requirements to tackle vulnerabilities.",
+            "cve": "CVE-2022-24758",
+            "id": "pyup.io-49215",
+            "more_info_path": "/vulnerabilities/CVE-2022-24758/49215",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -80999,11 +83349,21 @@
             ],
             "v": "<1.0.3rc1"
         },
+        {
+            "advisory": "Mlrun 1.0.3rc1 adds \"notebook~=6.4\" to requirements to tackle vulnerabilities.",
+            "cve": "CVE-2021-32798",
+            "id": "pyup.io-49216",
+            "more_info_path": "/vulnerabilities/CVE-2021-32798/49216",
+            "specs": [
+                "<1.0.3rc1"
+            ],
+            "v": "<1.0.3rc1"
+        },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2022-24785",
-            "id": "pyup.io-49205",
-            "more_info_path": "/vulnerabilities/CVE-2022-24785/49205",
+            "cve": "CVE-2021-33503",
+            "id": "pyup.io-49213",
+            "more_info_path": "/vulnerabilities/CVE-2021-33503/49213",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -81011,9 +83371,9 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-37713",
-            "id": "pyup.io-49209",
-            "more_info_path": "/vulnerabilities/CVE-2021-37713/49209",
+            "cve": "CVE-2021-33430",
+            "id": "pyup.io-49206",
+            "more_info_path": "/vulnerabilities/CVE-2021-33430/49206",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -81031,19 +83391,29 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2022-0536",
-            "id": "pyup.io-49168",
-            "more_info_path": "/vulnerabilities/CVE-2022-0536/49168",
+            "cve": "CVE-2019-25013",
+            "id": "pyup.io-49185",
+            "more_info_path": "/vulnerabilities/CVE-2019-25013/49185",
             "specs": [
                 "<1.0.3rc1"
             ],
             "v": "<1.0.3rc1"
         },
         {
-            "advisory": "Mlrun 1.0.3rc1 adds \"notebook~=6.4\" to requirements to tackle vulnerabilities.",
-            "cve": "CVE-2022-24758",
-            "id": "pyup.io-49215",
-            "more_info_path": "/vulnerabilities/CVE-2022-24758/49215",
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
+            "cve": "CVE-2020-27618",
+            "id": "pyup.io-49176",
+            "more_info_path": "/vulnerabilities/CVE-2020-27618/49176",
+            "specs": [
+                "<1.0.3rc1"
+            ],
+            "v": "<1.0.3rc1"
+        },
+        {
+            "advisory": "Mlrun 1.0.3rc1 adds \"pillow~=9.0\" to requirements to tackle vulnerabilities.",
+            "cve": "CVE-2022-24303",
+            "id": "pyup.io-49217",
+            "more_info_path": "/vulnerabilities/CVE-2022-24303/49217",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -81051,9 +83421,9 @@
         },
         {
             "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
-            "cve": "CVE-2021-32797",
-            "id": "pyup.io-49174",
-            "more_info_path": "/vulnerabilities/CVE-2021-32797/49174",
+            "cve": "CVE-2021-3999",
+            "id": "pyup.io-49188",
+            "more_info_path": "/vulnerabilities/CVE-2021-3999/49188",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -81070,10 +83440,10 @@
             "v": "<1.0.3rc1"
         },
         {
-            "advisory": "Mlrun 1.0.3rc1 adds \"pillow~=9.0\" to requirements to tackle vulnerabilities.",
-            "cve": "CVE-2022-22815",
-            "id": "pyup.io-49219",
-            "more_info_path": "/vulnerabilities/CVE-2022-22815/49219",
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
+            "cve": "CVE-2021-32797",
+            "id": "pyup.io-49174",
+            "more_info_path": "/vulnerabilities/CVE-2021-32797/49174",
             "specs": [
                 "<1.0.3rc1"
             ],
@@ -81089,6 +83459,86 @@
             ],
             "v": "<1.0.3rc1"
         },
+        {
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
+            "cve": "CVE-2021-3326",
+            "id": "pyup.io-49179",
+            "more_info_path": "/vulnerabilities/CVE-2021-3326/49179",
+            "specs": [
+                "<1.0.3rc1"
+            ],
+            "v": "<1.0.3rc1"
+        },
+        {
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
+            "cve": "CVE-2016-10228",
+            "id": "pyup.io-49200",
+            "more_info_path": "/vulnerabilities/CVE-2016-10228/49200",
+            "specs": [
+                "<1.0.3rc1"
+            ],
+            "v": "<1.0.3rc1"
+        },
+        {
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
+            "cve": "CVE-2021-23343",
+            "id": "pyup.io-49207",
+            "more_info_path": "/vulnerabilities/CVE-2021-23343/49207",
+            "specs": [
+                "<1.0.3rc1"
+            ],
+            "v": "<1.0.3rc1"
+        },
+        {
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
+            "cve": "CVE-2021-35942",
+            "id": "pyup.io-49175",
+            "more_info_path": "/vulnerabilities/CVE-2021-35942/49175",
+            "specs": [
+                "<1.0.3rc1"
+            ],
+            "v": "<1.0.3rc1"
+        },
+        {
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
+            "cve": "CVE-2021-37701",
+            "id": "pyup.io-49211",
+            "more_info_path": "/vulnerabilities/CVE-2021-37701/49211",
+            "specs": [
+                "<1.0.3rc1"
+            ],
+            "v": "<1.0.3rc1"
+        },
+        {
+            "advisory": "Mlrun 1.0.3rc1 adds command to install security fixes in Docker base image.\r\nhttps://github.com/mlrun/mlrun/pull/1997/commits/de4c87f478f8d76dd8e46942588c81ef0d0b481e",
+            "cve": "CVE-2021-43138",
+            "id": "pyup.io-49167",
+            "more_info_path": "/vulnerabilities/CVE-2021-43138/49167",
+            "specs": [
+                "<1.0.3rc1"
+            ],
+            "v": "<1.0.3rc1"
+        },
+        {
+            "advisory": "Mlrun 1.0.3rc1 adds \"pillow~=9.0\" to requirements to tackle vulnerabilities.",
+            "cve": "CVE-2022-22815",
+            "id": "pyup.io-49219",
+            "more_info_path": "/vulnerabilities/CVE-2022-22815/49219",
+            "specs": [
+                "<1.0.3rc1"
+            ],
+            "v": "<1.0.3rc1"
+        },
+        {
+            "advisory": "Mlrun 1.0.4rc1 updates its dependency 'Fastapi' to v0.78.0 to fix a transitive vulnerability related to 'ujson'.",
+            "cve": "CVE-2021-45958",
+            "id": "pyup.io-49374",
+            "more_info_path": "/vulnerabilities/CVE-2021-45958/49374",
+            "specs": [
+                "<1.0.4rc1"
+            ],
+            "v": "<1.0.4rc1"
+        },
         {
             "advisory": "Mlrun 1.0.4rc1 updates its dependency 'storey' to v1.0.5 to fix transitive vulnerabilities related to NumPy.",
             "cve": "CVE-2021-41495",
@@ -81109,16 +83559,6 @@
             ],
             "v": "<1.0.4rc1"
         },
-        {
-            "advisory": "Mlrun 1.0.4rc1 updates its dependency 'Fastapi' to v0.78.0 to fix a transitive vulnerability related to 'ujson'.",
-            "cve": "CVE-2021-45958",
-            "id": "pyup.io-49374",
-            "more_info_path": "/vulnerabilities/CVE-2021-45958/49374",
-            "specs": [
-                "<1.0.4rc1"
-            ],
-            "v": "<1.0.4rc1"
-        },
         {
             "advisory": "Mlrun 1.0.4rc1 updates its dependency 'storey' to v1.0.5 to fix transitive vulnerabilities related to NumPy.",
             "cve": "CVE-2021-34141",
@@ -81130,10 +83570,10 @@
             "v": "<1.0.4rc1"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'ansi-regex' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-3807",
-            "id": "pyup.io-50987",
-            "more_info_path": "/vulnerabilities/CVE-2021-3807/50987",
+            "advisory": "Mlrun 1.1.0 updates the NPM package '@npmcli/arborist' in its base image to include security fixes.",
+            "cve": "CVE-2021-39134",
+            "id": "pyup.io-50985",
+            "more_info_path": "/vulnerabilities/CVE-2021-39134/50985",
             "specs": [
                 "<1.1.0"
             ],
@@ -81141,59 +83581,59 @@
         },
         {
             "advisory": "Mlrun 1.1.0 updates the packages 'libsystemd0' and 'libudev1' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-3997",
-            "id": "pyup.io-51020",
-            "more_info_path": "/vulnerabilities/CVE-2021-3997/51020",
+            "cve": "CVE-2021-33910",
+            "id": "pyup.io-51018",
+            "more_info_path": "/vulnerabilities/CVE-2021-33910/51018",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the packages 'libsystemd0' and 'libudev1' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2020-13529",
-            "id": "pyup.io-51019",
-            "more_info_path": "/vulnerabilities/CVE-2020-13529/51019",
+            "advisory": "Mlrun 1.1.0 updates the Python package 'urllib3' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-33503",
+            "id": "pyup.io-51006",
+            "more_info_path": "/vulnerabilities/CVE-2021-33503/51006",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'path-parse' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-23343",
-            "id": "pyup.io-50993",
-            "more_info_path": "/vulnerabilities/CVE-2021-23343/50993",
+            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2019-25013",
+            "id": "pyup.io-51017",
+            "more_info_path": "/vulnerabilities/CVE-2019-25013/51017",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'follow-redirects' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2022-0155",
-            "id": "pyup.io-50990",
-            "more_info_path": "/vulnerabilities/CVE-2022-0155/50990",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'async' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-43138",
+            "id": "pyup.io-50988",
+            "more_info_path": "/vulnerabilities/CVE-2021-43138/50988",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2020-27618",
-            "id": "pyup.io-51008",
-            "more_info_path": "/vulnerabilities/CVE-2020-27618/51008",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'ansi-regex' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-3807",
+            "id": "pyup.io-50987",
+            "more_info_path": "/vulnerabilities/CVE-2021-3807/50987",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'async' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-43138",
-            "id": "pyup.io-50988",
-            "more_info_path": "/vulnerabilities/CVE-2021-43138/50988",
+            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2022-23219",
+            "id": "pyup.io-51010",
+            "more_info_path": "/vulnerabilities/CVE-2022-23219/51010",
             "specs": [
                 "<1.1.0"
             ],
@@ -81201,39 +83641,49 @@
         },
         {
             "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2022-23219",
-            "id": "pyup.io-51010",
-            "more_info_path": "/vulnerabilities/CVE-2022-23219/51010",
+            "cve": "CVE-2022-23218",
+            "id": "pyup.io-51012",
+            "more_info_path": "/vulnerabilities/CVE-2022-23218/51012",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2020-29562",
-            "id": "pyup.io-51016",
-            "more_info_path": "/vulnerabilities/CVE-2020-29562/51016",
+            "advisory": "Mlrun 1.1.0 updates the Python package 'jupyterhub' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-41247",
+            "id": "pyup.io-51002",
+            "more_info_path": "/vulnerabilities/CVE-2021-41247/51002",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'tar' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-37712",
-            "id": "pyup.io-51000",
-            "more_info_path": "/vulnerabilities/CVE-2021-37712/51000",
+            "advisory": "Mlrun 1.1.0 updates the NPM package '@npmcli/git' in its base image to include a security fix.\r\nhttps://github.com/advisories/GHSA-hxwm-x553-x359",
+            "cve": "PVE-2022-50919",
+            "id": "pyup.io-50986",
+            "more_info_path": "/vulnerabilities/PVE-2022-50919/50986",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'tar' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-37713",
-            "id": "pyup.io-50995",
-            "more_info_path": "/vulnerabilities/CVE-2021-37713/50995",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'json-schema' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-3918",
+            "id": "pyup.io-50991",
+            "more_info_path": "/vulnerabilities/CVE-2021-3918/50991",
+            "specs": [
+                "<1.1.0"
+            ],
+            "v": "<1.1.0"
+        },
+        {
+            "advisory": "Mlrun 1.1.0 updates the packages 'libsystemd0' and 'libudev1' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2020-13529",
+            "id": "pyup.io-51019",
+            "more_info_path": "/vulnerabilities/CVE-2020-13529/51019",
             "specs": [
                 "<1.1.0"
             ],
@@ -81241,9 +83691,9 @@
         },
         {
             "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2020-6096",
-            "id": "pyup.io-51014",
-            "more_info_path": "/vulnerabilities/CVE-2020-6096/51014",
+            "cve": "CVE-2020-27618",
+            "id": "pyup.io-51008",
+            "more_info_path": "/vulnerabilities/CVE-2020-27618/51008",
             "specs": [
                 "<1.1.0"
             ],
@@ -81261,29 +83711,29 @@
         },
         {
             "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-3326",
-            "id": "pyup.io-51011",
-            "more_info_path": "/vulnerabilities/CVE-2021-3326/51011",
+            "cve": "CVE-2016-10228",
+            "id": "pyup.io-51015",
+            "more_info_path": "/vulnerabilities/CVE-2016-10228/51015",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the Python package 'jupyterhub' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-41247",
-            "id": "pyup.io-51002",
-            "more_info_path": "/vulnerabilities/CVE-2021-41247/51002",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'moment' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2022-24785",
+            "id": "pyup.io-50992",
+            "more_info_path": "/vulnerabilities/CVE-2022-24785/50992",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2022-23218",
-            "id": "pyup.io-51012",
-            "more_info_path": "/vulnerabilities/CVE-2022-23218/51012",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'follow-redirects' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2022-0155",
+            "id": "pyup.io-50990",
+            "more_info_path": "/vulnerabilities/CVE-2022-0155/50990",
             "specs": [
                 "<1.1.0"
             ],
@@ -81291,119 +83741,119 @@
         },
         {
             "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2016-10228",
-            "id": "pyup.io-51015",
-            "more_info_path": "/vulnerabilities/CVE-2016-10228/51015",
+            "cve": "CVE-2020-29562",
+            "id": "pyup.io-51016",
+            "more_info_path": "/vulnerabilities/CVE-2020-29562/51016",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package '@npmcli/git' in its base image to include a security fix.\r\nhttps://github.com/advisories/GHSA-hxwm-x553-x359",
-            "cve": "PVE-2022-50919",
-            "id": "pyup.io-50986",
-            "more_info_path": "/vulnerabilities/PVE-2022-50919/50986",
+            "advisory": "Mlrun 1.1.0 updates the packages 'libsystemd0' and 'libudev1' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-3997",
+            "id": "pyup.io-51020",
+            "more_info_path": "/vulnerabilities/CVE-2021-3997/51020",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'follow-redirects' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2022-0536",
-            "id": "pyup.io-50989",
-            "more_info_path": "/vulnerabilities/CVE-2022-0536/50989",
+            "advisory": "Mlrun 1.1.0 updates the Python package 'jupyter-server' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2022-24757",
+            "id": "pyup.io-51001",
+            "more_info_path": "/vulnerabilities/CVE-2022-24757/51001",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-3999",
-            "id": "pyup.io-51013",
-            "more_info_path": "/vulnerabilities/CVE-2021-3999/51013",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'tar' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-32804",
+            "id": "pyup.io-50994",
+            "more_info_path": "/vulnerabilities/CVE-2021-32804/50994",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package '@npmcli/arborist' in its base image to include security fixes.",
-            "cve": "CVE-2021-39134",
-            "id": "pyup.io-50985",
-            "more_info_path": "/vulnerabilities/CVE-2021-39134/50985",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'tar' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-32803",
+            "id": "pyup.io-50996",
+            "more_info_path": "/vulnerabilities/CVE-2021-32803/50996",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the Python package 'urllib3' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-33503",
-            "id": "pyup.io-51006",
-            "more_info_path": "/vulnerabilities/CVE-2021-33503/51006",
+            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-3999",
+            "id": "pyup.io-51013",
+            "more_info_path": "/vulnerabilities/CVE-2021-3999/51013",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the Python package 'numpy' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-33430",
-            "id": "pyup.io-51005",
-            "more_info_path": "/vulnerabilities/CVE-2021-33430/51005",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'tar' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-37701",
+            "id": "pyup.io-50997",
+            "more_info_path": "/vulnerabilities/CVE-2021-37701/50997",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-35942",
-            "id": "pyup.io-51007",
-            "more_info_path": "/vulnerabilities/CVE-2021-35942/51007",
+            "advisory": "Mlrun 1.1.0 updates the NPM package '@npmcli/arborist' in its base image to include security fixes.",
+            "cve": "CVE-2021-39135",
+            "id": "pyup.io-50919",
+            "more_info_path": "/vulnerabilities/CVE-2021-39135/50919",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package '@npmcli/arborist' in its base image to include security fixes.",
-            "cve": "CVE-2021-39135",
-            "id": "pyup.io-50919",
-            "more_info_path": "/vulnerabilities/CVE-2021-39135/50919",
+            "advisory": "Mlrun 1.1.0 updates the Python package 'numpy' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-33430",
+            "id": "pyup.io-51005",
+            "more_info_path": "/vulnerabilities/CVE-2021-33430/51005",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'moment' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2022-24785",
-            "id": "pyup.io-50992",
-            "more_info_path": "/vulnerabilities/CVE-2022-24785/50992",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'path-parse' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-23343",
+            "id": "pyup.io-50993",
+            "more_info_path": "/vulnerabilities/CVE-2021-23343/50993",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'tar' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-32804",
-            "id": "pyup.io-50994",
-            "more_info_path": "/vulnerabilities/CVE-2021-32804/50994",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'follow-redirects' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2022-0536",
+            "id": "pyup.io-50989",
+            "more_info_path": "/vulnerabilities/CVE-2022-0536/50989",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the Python package 'jupyter-server' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2022-24757",
-            "id": "pyup.io-51001",
-            "more_info_path": "/vulnerabilities/CVE-2022-24757/51001",
+            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-35942",
+            "id": "pyup.io-51007",
+            "more_info_path": "/vulnerabilities/CVE-2021-35942/51007",
             "specs": [
                 "<1.1.0"
             ],
@@ -81411,39 +83861,39 @@
         },
         {
             "advisory": "Mlrun 1.1.0 updates the NPM package 'tar' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-32803",
-            "id": "pyup.io-50996",
-            "more_info_path": "/vulnerabilities/CVE-2021-32803/50996",
+            "cve": "CVE-2021-37713",
+            "id": "pyup.io-50995",
+            "more_info_path": "/vulnerabilities/CVE-2021-37713/50995",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'json-schema' in its base image to include a security fix.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-3918",
-            "id": "pyup.io-50991",
-            "more_info_path": "/vulnerabilities/CVE-2021-3918/50991",
+            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2020-6096",
+            "id": "pyup.io-51014",
+            "more_info_path": "/vulnerabilities/CVE-2020-6096/51014",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2019-25013",
-            "id": "pyup.io-51017",
-            "more_info_path": "/vulnerabilities/CVE-2019-25013/51017",
+            "advisory": "Mlrun 1.1.0 updates the NPM package 'tar' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-37712",
+            "id": "pyup.io-51000",
+            "more_info_path": "/vulnerabilities/CVE-2021-37712/51000",
             "specs": [
                 "<1.1.0"
             ],
             "v": "<1.1.0"
         },
         {
-            "advisory": "Mlrun 1.1.0 updates the packages 'libsystemd0' and 'libudev1' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-33910",
-            "id": "pyup.io-51018",
-            "more_info_path": "/vulnerabilities/CVE-2021-33910/51018",
+            "advisory": "Mlrun 1.1.0 updates the packages 'libc-bin',  'libc-dev-bin', 'libc6', 'libc6-dev' and 'locales' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
+            "cve": "CVE-2021-3326",
+            "id": "pyup.io-51011",
+            "more_info_path": "/vulnerabilities/CVE-2021-3326/51011",
             "specs": [
                 "<1.1.0"
             ],
@@ -81469,16 +83919,6 @@
             ],
             "v": "<1.1.0"
         },
-        {
-            "advisory": "Mlrun 1.1.0 updates the NPM package 'tar' in its base image to include security fixes.\r\nhttps://github.com/mlrun/mlrun/pull/1997",
-            "cve": "CVE-2021-37701",
-            "id": "pyup.io-50997",
-            "more_info_path": "/vulnerabilities/CVE-2021-37701/50997",
-            "specs": [
-                "<1.1.0"
-            ],
-            "v": "<1.1.0"
-        },
         {
             "advisory": "Mlrun 1.3.0rc19 requires 'setuptools~=65.5' to include a security fix.",
             "cve": "CVE-2022-40897",
@@ -81540,20 +83980,20 @@
             "v": "<1.4.0rc9"
         },
         {
-            "advisory": "Mlrun version 1.6.2rc1 upgrades its Cryptography dependency to approximately version 41.0 from 42.0 to mitigate the security risks identified in CVE-2024-24762.\r\nhttps://github.com/mlrun/mlrun/pull/5205/commits/71647ae50e2f6a97adbad3312c1737db46b7eb38",
+            "advisory": "Mlrun version 1.6.2rc1 upgrades its FastAPI dependency to approximately version 0.110.0 from 0.103.2 to mitigate the security risks identified in CVE-2024-24762.\r\nhttps://github.com/mlrun/mlrun/pull/5205/commits/71647ae50e2f6a97adbad3312c1737db46b7eb38",
             "cve": "CVE-2024-24762",
-            "id": "pyup.io-65950",
-            "more_info_path": "/vulnerabilities/CVE-2024-24762/65950",
+            "id": "pyup.io-65893",
+            "more_info_path": "/vulnerabilities/CVE-2024-24762/65893",
             "specs": [
                 "<1.6.2rc1"
             ],
             "v": "<1.6.2rc1"
         },
         {
-            "advisory": "Mlrun version 1.6.2rc1 upgrades its FastAPI dependency to approximately version 0.110.0 from 0.103.2 to mitigate the security risks identified in CVE-2024-24762.\r\nhttps://github.com/mlrun/mlrun/pull/5205/commits/71647ae50e2f6a97adbad3312c1737db46b7eb38",
+            "advisory": "Mlrun version 1.6.2rc1 upgrades its Cryptography dependency to approximately version 41.0 from 42.0 to mitigate the security risks identified in CVE-2024-24762.\r\nhttps://github.com/mlrun/mlrun/pull/5205/commits/71647ae50e2f6a97adbad3312c1737db46b7eb38",
             "cve": "CVE-2024-24762",
-            "id": "pyup.io-65893",
-            "more_info_path": "/vulnerabilities/CVE-2024-24762/65893",
+            "id": "pyup.io-65950",
+            "more_info_path": "/vulnerabilities/CVE-2024-24762/65950",
             "specs": [
                 "<1.6.2rc1"
             ],
@@ -81569,6 +84009,16 @@
             ],
             "v": "<1.7.0rc5"
         },
+        {
+            "advisory": "Mlrun 1.7.0rc8 updates its orjson requirement, now demanding a minimum version of 3.9.15 but staying below 4.0, to tackle the vulnerabilities highlighted in CVE-2024-27454.",
+            "cve": "CVE-2024-27454",
+            "id": "pyup.io-67574",
+            "more_info_path": "/vulnerabilities/CVE-2024-27454/67574",
+            "specs": [
+                "<1.7.0rc8"
+            ],
+            "v": "<1.7.0rc8"
+        },
         {
             "advisory": "Mlrun 1.1.0rc6 and prior uses a version of 'TensorFlow' (2.4.1) that has known vulnerabilities.",
             "cve": "CVE-2021-29605",
@@ -81829,6 +84279,16 @@
             ],
             "v": "<2.13"
         },
+        {
+            "advisory": "Mmpm 2.13 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
+            "cve": "CVE-2022-0639",
+            "id": "pyup.io-48431",
+            "more_info_path": "/vulnerabilities/CVE-2022-0639/48431",
+            "specs": [
+                "<2.13"
+            ],
+            "v": "<2.13"
+        },
         {
             "advisory": "Mmpm 2.13 updates its NPM dependency 'tar' to v4.4.19 to include security fixes.",
             "cve": "CVE-2021-32803",
@@ -81851,19 +84311,29 @@
         },
         {
             "advisory": "Mmpm 2.13 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
-            "cve": "CVE-2022-0639",
-            "id": "pyup.io-48431",
-            "more_info_path": "/vulnerabilities/CVE-2022-0639/48431",
+            "cve": "CVE-2022-0691",
+            "id": "pyup.io-48433",
+            "more_info_path": "/vulnerabilities/CVE-2022-0691/48433",
             "specs": [
                 "<2.13"
             ],
             "v": "<2.13"
         },
         {
-            "advisory": "Mmpm 2.13 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
-            "cve": "CVE-2022-0691",
-            "id": "pyup.io-48433",
-            "more_info_path": "/vulnerabilities/CVE-2022-0691/48433",
+            "advisory": "Mmpm 2.13 updates its NPM dependency 'tar' to v4.4.19 to include security fixes.",
+            "cve": "CVE-2021-37712",
+            "id": "pyup.io-48425",
+            "more_info_path": "/vulnerabilities/CVE-2021-37712/48425",
+            "specs": [
+                "<2.13"
+            ],
+            "v": "<2.13"
+        },
+        {
+            "advisory": "Mmpm 2.13 updates its NPM dependency 'path-parse' to v1.0.7 to include a security fix.",
+            "cve": "CVE-2021-23343",
+            "id": "pyup.io-48404",
+            "more_info_path": "/vulnerabilities/CVE-2021-23343/48404",
             "specs": [
                 "<2.13"
             ],
@@ -81881,9 +84351,9 @@
         },
         {
             "advisory": "Mmpm 2.13 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
-            "cve": "CVE-2022-0512",
-            "id": "pyup.io-48434",
-            "more_info_path": "/vulnerabilities/CVE-2022-0512/48434",
+            "cve": "CVE-2021-3664",
+            "id": "pyup.io-48435",
+            "more_info_path": "/vulnerabilities/CVE-2021-3664/48435",
             "specs": [
                 "<2.13"
             ],
@@ -81891,9 +84361,9 @@
         },
         {
             "advisory": "Mmpm 2.13 updates its NPM dependency 'url-parse' to v1.5.10 to include security fixes.",
-            "cve": "CVE-2021-3664",
-            "id": "pyup.io-48435",
-            "more_info_path": "/vulnerabilities/CVE-2021-3664/48435",
+            "cve": "CVE-2022-0512",
+            "id": "pyup.io-48434",
+            "more_info_path": "/vulnerabilities/CVE-2022-0512/48434",
             "specs": [
                 "<2.13"
             ],
@@ -81919,21 +84389,11 @@
             ],
             "v": "<2.13"
         },
-        {
-            "advisory": "Mmpm 2.13 updates its NPM dependency 'path-parse' to v1.0.7 to include a security fix.",
-            "cve": "CVE-2021-23343",
-            "id": "pyup.io-48404",
-            "more_info_path": "/vulnerabilities/CVE-2021-23343/48404",
-            "specs": [
-                "<2.13"
-            ],
-            "v": "<2.13"
-        },
         {
             "advisory": "Mmpm 2.13 updates its NPM dependency 'tar' to v4.4.19 to include security fixes.",
-            "cve": "CVE-2021-37712",
-            "id": "pyup.io-48425",
-            "more_info_path": "/vulnerabilities/CVE-2021-37712/48425",
+            "cve": "CVE-2021-32804",
+            "id": "pyup.io-48427",
+            "more_info_path": "/vulnerabilities/CVE-2021-32804/48427",
             "specs": [
                 "<2.13"
             ],
@@ -81949,16 +84409,6 @@
             ],
             "v": "<2.13"
         },
-        {
-            "advisory": "Mmpm 2.13 updates its NPM dependency 'tar' to v4.4.19 to include security fixes.",
-            "cve": "CVE-2021-32804",
-            "id": "pyup.io-48427",
-            "more_info_path": "/vulnerabilities/CVE-2021-32804/48427",
-            "specs": [
-                "<2.13"
-            ],
-            "v": "<2.13"
-        },
         {
             "advisory": "Mmpm 2.13 updates its NPM dependency 'async' to v2.6.4 to include a security fix.",
             "cve": "CVE-2021-43138",
@@ -81987,10 +84437,9 @@
             "id": "pyup.io-65353",
             "more_info_path": "/vulnerabilities/CVE-2023-42261/65353",
             "specs": [
-                "<=3.7.6",
-                "==3.7.8"
+                "<=v3.7.8"
             ],
-            "v": "<=3.7.6,==3.7.8"
+            "v": "<=v3.7.8"
         },
         {
             "advisory": "Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability in the `StaticAnalyzer/views.py` script. This vulnerability allows attackers to read arbitrary files via a crafted HTTP request.",
@@ -82028,6 +84477,16 @@
         }
     ],
     "mod-wsgi": [
+        {
+            "advisory": "mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.",
+            "cve": "CVE-2014-0242",
+            "id": "pyup.io-70461",
+            "more_info_path": "/vulnerabilities/CVE-2014-0242/70461",
+            "specs": [
+                "<3.4"
+            ],
+            "v": "<3.4"
+        },
         {
             "advisory": "Mod-wsgi 3.5 includes a fix for CVE-2014-0240: Local privilege escalation when using daemon mode.\r\nhttps://github.com/GrahamDumpleton/mod_wsgi/commit/d9d5fea585b23991f76532a9b07de7fcd3b649f4",
             "cve": "CVE-2014-0240",
@@ -82853,6 +85312,18 @@
             "v": "<12.0.1"
         }
     ],
+    "monopyly": [
+        {
+            "advisory": "Monopyly 1.4.6 has updated its dependencies, including a significant security upgrade for gunicorn from version 21.2.0 to 22.0.0. This change addresses a security vulnerability detailed in CVE-2024-1135.",
+            "cve": "CVE-2024-1135",
+            "id": "pyup.io-67937",
+            "more_info_path": "/vulnerabilities/CVE-2024-1135/67937",
+            "specs": [
+                "<1.4.6"
+            ],
+            "v": "<1.4.6"
+        }
+    ],
     "monoshape": [
         {
             "advisory": "Monoshape 1.2 includes a vulnerable version of Pillow (6.2).",
@@ -82946,6 +85417,16 @@
         }
     ],
     "mosaicml": [
+        {
+            "advisory": "Mosaicml 0.13.0 updates its dependency 'pillow' to v9.0.0 in Dockerfile to include security fixes.\r\nhttps://github.com/mosaicml/composer/pull/2007",
+            "cve": "PVE-2021-44525",
+            "id": "pyup.io-53702",
+            "more_info_path": "/vulnerabilities/PVE-2021-44525/53702",
+            "specs": [
+                "<0.13.0"
+            ],
+            "v": "<0.13.0"
+        },
         {
             "advisory": "Mosaicml 0.13.0 updates its dependency 'pillow' to v9.0.0 in Dockerfile to include security fixes.\r\nhttps://github.com/mosaicml/composer/pull/2007",
             "cve": "CVE-2022-22816",
@@ -83006,16 +85487,6 @@
             ],
             "v": "<0.13.0"
         },
-        {
-            "advisory": "Mosaicml 0.13.0 updates its dependency 'pillow' to v9.0.0 in Dockerfile to include security fixes.\r\nhttps://github.com/mosaicml/composer/pull/2007",
-            "cve": "PVE-2021-44525",
-            "id": "pyup.io-53702",
-            "more_info_path": "/vulnerabilities/PVE-2021-44525/53702",
-            "specs": [
-                "<0.13.0"
-            ],
-            "v": "<0.13.0"
-        },
         {
             "advisory": "Mosaicml version 0.5.0 introduces a safe_load feature, enhancing security by limiting HF dataset downloads to specific file types. This security measure only allows files with .jsonl, .csv, or .parquet extensions, effectively preventing the risk of arbitrary code execution by restricting the types of files that can be loaded.\r\nhttps://github.com/mosaicml/llm-foundry/pull/798",
             "cve": "PVE-2024-66860",
@@ -83640,6 +86111,18 @@
             "v": "<0.12.4"
         }
     ],
+    "mtdata": [
+        {
+            "advisory": "Mtdata version 0.2.4 now implements file locking using portalocker to address race conditions encountered when multiple instances of `mtdata get` are run concurrently.",
+            "cve": "PVE-2024-70487",
+            "id": "pyup.io-70487",
+            "more_info_path": "/vulnerabilities/PVE-2024-70487/70487",
+            "specs": [
+                "<0.2.4"
+            ],
+            "v": "<0.2.4"
+        }
+    ],
     "mtga": [
         {
             "advisory": "mtga 2.0.0beta includes API security improvements & fixes.",
@@ -84047,16 +86530,6 @@
             ],
             "v": "<2.3.2"
         },
-        {
-            "advisory": "Muffnn 2.3.2 increases the minimum version of 'tensorflow' to v1.15.4 to include security fixes.",
-            "cve": "CVE-2019-13960",
-            "id": "pyup.io-43787",
-            "more_info_path": "/vulnerabilities/CVE-2019-13960/43787",
-            "specs": [
-                "<2.3.2"
-            ],
-            "v": "<2.3.2"
-        },
         {
             "advisory": "Muffnn 2.3.2 increases the minimum version of 'tensorflow' to v1.15.4 to include security fixes.",
             "cve": "CVE-2020-13435",
@@ -84116,6 +86589,16 @@
                 "<2.3.2"
             ],
             "v": "<2.3.2"
+        },
+        {
+            "advisory": "Muffnn 2.3.2 increases the minimum version of 'tensorflow' to v1.15.4 to include security fixes.",
+            "cve": "CVE-2019-13960",
+            "id": "pyup.io-43787",
+            "more_info_path": "/vulnerabilities/CVE-2019-13960/43787",
+            "specs": [
+                "<2.3.2"
+            ],
+            "v": "<2.3.2"
         }
     ],
     "mujoco": [
@@ -84315,16 +86798,6 @@
             ],
             "v": "<1.4.19"
         },
-        {
-            "advisory": "Muttlib 1.4.19 updates its dependency 'numpy' to include security fixes.",
-            "cve": "CVE-2021-33430",
-            "id": "pyup.io-50847",
-            "more_info_path": "/vulnerabilities/CVE-2021-33430/50847",
-            "specs": [
-                "<1.4.19"
-            ],
-            "v": "<1.4.19"
-        },
         {
             "advisory": "Muttlib 1.4.19 updates its dependency 'ujson' requirement to \">=5.4.0\" to include security fixes.",
             "cve": "CVE-2022-31117",
@@ -84345,16 +86818,6 @@
             ],
             "v": "<1.4.19"
         },
-        {
-            "advisory": "Muttlib 1.4.19 updates its dependency 'numpy' to include security fixes.",
-            "cve": "CVE-2021-41496",
-            "id": "pyup.io-50859",
-            "more_info_path": "/vulnerabilities/CVE-2021-41496/50859",
-            "specs": [
-                "<1.4.19"
-            ],
-            "v": "<1.4.19"
-        },
         {
             "advisory": "Muttlib 1.4.19 updates its dependency 'pillow' requirement to \">=9.1.1\" to include security fixes.",
             "cve": "CVE-2022-24303",
@@ -84394,6 +86857,26 @@
                 "<1.4.19"
             ],
             "v": "<1.4.19"
+        },
+        {
+            "advisory": "Muttlib 1.4.19 updates its dependency 'numpy' to include security fixes.",
+            "cve": "CVE-2021-41496",
+            "id": "pyup.io-50859",
+            "more_info_path": "/vulnerabilities/CVE-2021-41496/50859",
+            "specs": [
+                "<1.4.19"
+            ],
+            "v": "<1.4.19"
+        },
+        {
+            "advisory": "Muttlib 1.4.19 updates its dependency 'numpy' to include security fixes.",
+            "cve": "CVE-2021-33430",
+            "id": "pyup.io-50847",
+            "more_info_path": "/vulnerabilities/CVE-2021-33430/50847",
+            "specs": [
+                "<1.4.19"
+            ],
+            "v": "<1.4.19"
         }
     ],
     "mwdb-core": [
@@ -84418,6 +86901,18 @@
             "v": "<2.7.0"
         }
     ],
+    "mwlib": [
+        {
+            "advisory": "mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions",
+            "cve": "CVE-2012-1109",
+            "id": "pyup.io-67954",
+            "more_info_path": "/vulnerabilities/CVE-2012-1109/67954",
+            "specs": [
+                "<0.13.5"
+            ],
+            "v": "<0.13.5"
+        }
+    ],
     "mxnet": [
         {
             "advisory": "In mxnet before 1.0.0, mxnet listens on all available interfaces when running training in distributed mode.",
@@ -85001,9 +87496,9 @@
         },
         {
             "advisory": "Nautilus-trader 1.137.1 updates its dependency 'pillow' to v9.0.0 to include security fixes.",
-            "cve": "CVE-2022-22816",
-            "id": "pyup.io-44602",
-            "more_info_path": "/vulnerabilities/CVE-2022-22816/44602",
+            "cve": "PVE-2022-44524",
+            "id": "pyup.io-44600",
+            "more_info_path": "/vulnerabilities/PVE-2022-44524/44600",
             "specs": [
                 "<1.137.1"
             ],
@@ -85011,9 +87506,9 @@
         },
         {
             "advisory": "Nautilus-trader 1.137.1 updates its dependency 'pillow' to v9.0.0 to include security fixes.",
-            "cve": "PVE-2022-44524",
-            "id": "pyup.io-44600",
-            "more_info_path": "/vulnerabilities/PVE-2022-44524/44600",
+            "cve": "CVE-2022-22816",
+            "id": "pyup.io-44602",
+            "more_info_path": "/vulnerabilities/CVE-2022-22816/44602",
             "specs": [
                 "<1.137.1"
             ],
@@ -85206,17 +87701,6 @@
             ],
             "v": "<1.6.6,>=2.0.0,<2.0.5"
         },
-        {
-            "advisory": "Nautobot 1.6.8 updates its paramiko dependency from version 3.3.1 to 3.4.0. This change is in response to the security vulnerability identified as CVE-2023-48795.\r\nhttps://github.com/nautobot/nautobot/pull/5002/commits/e8e2bfdf4c0c0e8d923d936b44d53e91405eb256",
-            "cve": "CVE-2023-48795",
-            "id": "pyup.io-63586",
-            "more_info_path": "/vulnerabilities/CVE-2023-48795/63586",
-            "specs": [
-                "<1.6.8",
-                ">=2.0.0rc1,<2.1.0"
-            ],
-            "v": "<1.6.8,>=2.0.0rc1,<2.1.0"
-        },
         {
             "advisory": "Nautobot 1.6.8 updates its cryptography dependency from version 41.0.5 to 41.0.6. This change is in response to the security vulnerability identified as CVE-2023-49083.\r\nhttps://github.com/nautobot/nautobot/pull/4876/commits/c10507a8f9f70f5741711dc85f4c87adb08600cc",
             "cve": "CVE-2023-49083",
@@ -85229,14 +87713,15 @@
             "v": "<1.6.8,>=2.0.0rc1,<2.1.0"
         },
         {
-            "advisory": "Nautobot 2.0.3 addresses a security vulnerability in certain REST API endpoints. These endpoints, when combined with the ?depth=<N> query parameter, could potentially expose hashed user passwords to any authenticated user with access to these endpoints. Although the passwords were not exposed in plaintext, this vulnerability was considered significant enough to warrant a patch.\r\nhttps://github.com/nautobot/nautobot/pull/4692\r\nhttps://github.com/nautobot/nautobot/security/advisories/GHSA-r2hw-74xv-4gqp",
-            "cve": "CVE-2023-46128",
-            "id": "pyup.io-63588",
-            "more_info_path": "/vulnerabilities/CVE-2023-46128/63588",
+            "advisory": "Nautobot 1.6.8 updates its paramiko dependency from version 3.3.1 to 3.4.0. This change is in response to the security vulnerability identified as CVE-2023-48795.\r\nhttps://github.com/nautobot/nautobot/pull/5002/commits/e8e2bfdf4c0c0e8d923d936b44d53e91405eb256",
+            "cve": "CVE-2023-48795",
+            "id": "pyup.io-63586",
+            "more_info_path": "/vulnerabilities/CVE-2023-48795/63586",
             "specs": [
-                "<2.0.3"
+                "<1.6.8",
+                ">=2.0.0rc1,<2.1.0"
             ],
-            "v": "<2.0.3"
+            "v": "<1.6.8,>=2.0.0rc1,<2.1.0"
         },
         {
             "advisory": "Nautobot 2.0.3 upgrades the urllib3 dependency from version 2.0.6 to 2.0.7, following the discovery of a security vulnerability known as CVE-2023-45803.\r\nhttps://github.com/nautobot/nautobot/pull/4671/commits/387d30432452dd622f5125fe3ccd23dd8045790d",
@@ -85258,6 +87743,16 @@
             ],
             "v": "<2.0.3"
         },
+        {
+            "advisory": "Nautobot 2.0.3 addresses a security vulnerability in certain REST API endpoints. These endpoints, when combined with the ?depth=<N> query parameter, could potentially expose hashed user passwords to any authenticated user with access to these endpoints. Although the passwords were not exposed in plaintext, this vulnerability was considered significant enough to warrant a patch.\r\nhttps://github.com/nautobot/nautobot/pull/4692\r\nhttps://github.com/nautobot/nautobot/security/advisories/GHSA-r2hw-74xv-4gqp",
+            "cve": "CVE-2023-46128",
+            "id": "pyup.io-63588",
+            "more_info_path": "/vulnerabilities/CVE-2023-46128/63588",
+            "specs": [
+                "<2.0.3"
+            ],
+            "v": "<2.0.3"
+        },
         {
             "advisory": "Nautobot 2.0.6 resolves problems related to network device discovery and data consistency checks. With this release, users can expect improved performance and fewer disruptions during operation. \r\nhttps://github.com/nautobot/nautobot/pull/4959",
             "cve": "PVE-2024-63587",
@@ -85279,6 +87774,28 @@
             ],
             "v": "<2.0.6,<1.6.7"
         },
+        {
+            "advisory": "Nautobot updates its Django dependency to '~3.2.25' to address the security concerns highlighted in CVE-2024-27351.",
+            "cve": "CVE-2024-27351",
+            "id": "pyup.io-67146",
+            "more_info_path": "/vulnerabilities/CVE-2024-27351/67146",
+            "specs": [
+                ">= 2.0.0,< 2.1.9",
+                "<1.6.16"
+            ],
+            "v": ">= 2.0.0,< 2.1.9,<1.6.16"
+        },
+        {
+            "advisory": "Nautobot fixes the CVE-2024-29199: Several Nautobot URL endpoints were found to be improperly accessible to unauthenticated (anonymous) users. These endpoints will not disclose any Nautobot data to an unauthenticated user unless the Nautobot configuration variable EXEMPT_VIEW_PERMISSIONS is changed from its default value (an empty list) to permit access to specific data by unauthenticated users. This vulnerability is fixed in 1.6.16 and 2.1.9.",
+            "cve": "CVE-2024-29199",
+            "id": "pyup.io-67024",
+            "more_info_path": "/vulnerabilities/CVE-2024-29199/67024",
+            "specs": [
+                ">= 2.0.0,< 2.1.9",
+                "<1.6.16"
+            ],
+            "v": ">= 2.0.0,< 2.1.9,<1.6.16"
+        },
         {
             "advisory": "Nautobot, a Network Source of Truth and Network Automation Platform, built on Django Python framework and PostgreSQL or MySQL database, has a vulnerability in versions 1.x and 2.0.x prior to 1.6.7 and 2.0.6. The URLs /files/get/?name=... and /files/download/?name=... provide admin access to uploaded files, which are ephemeral and deleted after the Job runs. These URLs do not require user authentication by default, which could lead to unauthorized access to files. The vulnerability has been fixed in Nautobot 1.6.7 and Nautobot 2.0.6.\r\nhttps://github.com/nautobot/nautobot/security/advisories/GHSA-75mc-3pjc-727q",
             "cve": "CVE-2023-50263",
@@ -85383,9 +87900,9 @@
     "nba-api": [
         {
             "advisory": "Nba-api 1.1.14 updates its dependency 'numpy' to v1.22.2 to include a security fix.",
-            "cve": "CVE-2021-41496",
-            "id": "pyup.io-61610",
-            "more_info_path": "/vulnerabilities/CVE-2021-41496/61610",
+            "cve": "CVE-2021-34141",
+            "id": "pyup.io-61646",
+            "more_info_path": "/vulnerabilities/CVE-2021-34141/61646",
             "specs": [
                 "<1.1.14"
             ],
@@ -85393,9 +87910,9 @@
         },
         {
             "advisory": "Nba-api 1.1.14 updates its dependency 'numpy' to v1.22.2 to include a security fix.",
-            "cve": "CVE-2021-34141",
-            "id": "pyup.io-61646",
-            "more_info_path": "/vulnerabilities/CVE-2021-34141/61646",
+            "cve": "CVE-2021-41496",
+            "id": "pyup.io-61610",
+            "more_info_path": "/vulnerabilities/CVE-2021-41496/61610",
             "specs": [
                 "<1.1.14"
             ],
@@ -85602,12 +88119,24 @@
             "v": "<0.22.1"
         }
     ],
+    "nef-pipelines": [
+        {
+            "advisory": "Nef-pipelines version 0.1.62 updates its strategy to use urllib3 version 1.26.15 to sidestep a security alert linked to CVE-2021-33503.",
+            "cve": "CVE-2021-33503",
+            "id": "pyup.io-67568",
+            "more_info_path": "/vulnerabilities/CVE-2021-33503/67568",
+            "specs": [
+                "<0.1.62"
+            ],
+            "v": "<0.1.62"
+        }
+    ],
     "negmas": [
         {
             "advisory": "Negmas 0.10.2 updates its dependency 'pillow' to v10.0.1 to include security fixes.",
-            "cve": "CVE-2023-4863",
-            "id": "pyup.io-62560",
-            "more_info_path": "/vulnerabilities/CVE-2023-4863/62560",
+            "cve": "CVE-2023-44271",
+            "id": "pyup.io-62485",
+            "more_info_path": "/vulnerabilities/CVE-2023-44271/62485",
             "specs": [
                 "<0.10.2"
             ],
@@ -85615,9 +88144,9 @@
         },
         {
             "advisory": "Negmas 0.10.2 updates its dependency 'pillow' to v10.0.1 to include security fixes.",
-            "cve": "CVE-2023-44271",
-            "id": "pyup.io-62485",
-            "more_info_path": "/vulnerabilities/CVE-2023-44271/62485",
+            "cve": "CVE-2023-4863",
+            "id": "pyup.io-62560",
+            "more_info_path": "/vulnerabilities/CVE-2023-4863/62560",
             "specs": [
                 "<0.10.2"
             ],
@@ -85655,6 +88184,16 @@
             ],
             "v": "<1.14.1"
         },
+        {
+            "advisory": "Nemo 1.14.4 updates its dependency 'django' to v1.11.23 to include security fixes.",
+            "cve": "CVE-2019-14234",
+            "id": "pyup.io-52403",
+            "more_info_path": "/vulnerabilities/CVE-2019-14234/52403",
+            "specs": [
+                "<1.14.4"
+            ],
+            "v": "<1.14.4"
+        },
         {
             "advisory": "Nemo 1.14.4 updates its dependency 'django' to v1.11.23 to include security fixes.",
             "cve": "CVE-2019-14233",
@@ -85685,16 +88224,6 @@
             ],
             "v": "<1.14.4"
         },
-        {
-            "advisory": "Nemo 1.14.4 updates its dependency 'django' to v1.11.23 to include security fixes.",
-            "cve": "CVE-2019-14234",
-            "id": "pyup.io-52403",
-            "more_info_path": "/vulnerabilities/CVE-2019-14234/52403",
-            "specs": [
-                "<1.14.4"
-            ],
-            "v": "<1.14.4"
-        },
         {
             "advisory": "Nemo 1.6.0 updates its dependency 'requests' to v2.20.0 to include a security fix.",
             "cve": "CVE-2018-18074",
@@ -85707,9 +88236,9 @@
         },
         {
             "advisory": "Nemo 2.3.3 updates the 'Django' dependency to v2.2.13 to include security fixes.",
-            "cve": "CVE-2020-9402",
-            "id": "pyup.io-40131",
-            "more_info_path": "/vulnerabilities/CVE-2020-9402/40131",
+            "cve": "CVE-2020-13254",
+            "id": "pyup.io-43666",
+            "more_info_path": "/vulnerabilities/CVE-2020-13254/43666",
             "specs": [
                 "<2.3.3"
             ],
@@ -85717,9 +88246,9 @@
         },
         {
             "advisory": "Nemo 2.3.3 updates the 'Django' dependency to v2.2.13 to include security fixes.",
-            "cve": "CVE-2020-13254",
-            "id": "pyup.io-43666",
-            "more_info_path": "/vulnerabilities/CVE-2020-13254/43666",
+            "cve": "CVE-2020-9402",
+            "id": "pyup.io-40131",
+            "more_info_path": "/vulnerabilities/CVE-2020-9402/40131",
             "specs": [
                 "<2.3.3"
             ],
@@ -85747,9 +88276,9 @@
         },
         {
             "advisory": "Nemo 3.14.0 updates its dependency 'pillow' to v9.0.0 to include security fixes.",
-            "cve": "CVE-2022-22816",
-            "id": "pyup.io-44730",
-            "more_info_path": "/vulnerabilities/CVE-2022-22816/44730",
+            "cve": "CVE-2022-22817",
+            "id": "pyup.io-44751",
+            "more_info_path": "/vulnerabilities/CVE-2022-22817/44751",
             "specs": [
                 "<3.14.0"
             ],
@@ -85757,9 +88286,9 @@
         },
         {
             "advisory": "Nemo 3.14.0 updates its dependency 'pillow' to v9.0.0 to include security fixes.",
-            "cve": "CVE-2022-22817",
-            "id": "pyup.io-44751",
-            "more_info_path": "/vulnerabilities/CVE-2022-22817/44751",
+            "cve": "CVE-2022-22816",
+            "id": "pyup.io-44730",
+            "more_info_path": "/vulnerabilities/CVE-2022-22816/44730",
             "specs": [
                 "<3.14.0"
             ],
@@ -85767,9 +88296,9 @@
         },
         {
             "advisory": "Nemo 3.15.0 updates its dependency 'Django' to v2.2.27 to include security fixes.",
-            "cve": "CVE-2022-22818",
-            "id": "pyup.io-45284",
-            "more_info_path": "/vulnerabilities/CVE-2022-22818/45284",
+            "cve": "CVE-2022-23833",
+            "id": "pyup.io-45313",
+            "more_info_path": "/vulnerabilities/CVE-2022-23833/45313",
             "specs": [
                 "<3.15.0"
             ],
@@ -85777,9 +88306,9 @@
         },
         {
             "advisory": "Nemo 3.15.0 updates its dependency 'Django' to v2.2.27 to include security fixes.",
-            "cve": "CVE-2022-23833",
-            "id": "pyup.io-45313",
-            "more_info_path": "/vulnerabilities/CVE-2022-23833/45313",
+            "cve": "CVE-2022-22818",
+            "id": "pyup.io-45284",
+            "more_info_path": "/vulnerabilities/CVE-2022-22818/45284",
             "specs": [
                 "<3.15.0"
             ],
@@ -85816,20 +88345,20 @@
             "v": "<3.9.2"
         },
         {
-            "advisory": "Nemo 4.1.0 updates its dependency 'Pillow' to v9.1.1 to include a security fix.",
-            "cve": "CVE-2022-30595",
-            "id": "pyup.io-49528",
-            "more_info_path": "/vulnerabilities/CVE-2022-30595/49528",
+            "advisory": "Nemo 4.1.0 updates its dependency 'Django' to v3.2.13 to include security fixes.",
+            "cve": "CVE-2022-28346",
+            "id": "pyup.io-49527",
+            "more_info_path": "/vulnerabilities/CVE-2022-28346/49527",
             "specs": [
                 "<4.1.0"
             ],
             "v": "<4.1.0"
         },
         {
-            "advisory": "Nemo 4.1.0 updates its dependency 'Django' to v3.2.13 to include security fixes.",
-            "cve": "CVE-2022-28346",
-            "id": "pyup.io-49527",
-            "more_info_path": "/vulnerabilities/CVE-2022-28346/49527",
+            "advisory": "Nemo 4.1.0 updates its dependency 'Pillow' to v9.1.1 to include a security fix.",
+            "cve": "CVE-2022-30595",
+            "id": "pyup.io-49528",
+            "more_info_path": "/vulnerabilities/CVE-2022-30595/49528",
             "specs": [
                 "<4.1.0"
             ],
@@ -85897,9 +88426,9 @@
         },
         {
             "advisory": "Nemo 4.5.0 updates its dependency 'django' to v3.2.18 to include security fixes.",
-            "cve": "CVE-2023-24580",
-            "id": "pyup.io-54983",
-            "more_info_path": "/vulnerabilities/CVE-2023-24580/54983",
+            "cve": "CVE-2023-23969",
+            "id": "pyup.io-54994",
+            "more_info_path": "/vulnerabilities/CVE-2023-23969/54994",
             "specs": [
                 "<4.5.0"
             ],
@@ -85907,9 +88436,9 @@
         },
         {
             "advisory": "Nemo 4.5.0 updates its dependency 'django' to v3.2.18 to include security fixes.",
-            "cve": "CVE-2023-23969",
-            "id": "pyup.io-54994",
-            "more_info_path": "/vulnerabilities/CVE-2023-23969/54994",
+            "cve": "CVE-2023-24580",
+            "id": "pyup.io-54983",
+            "more_info_path": "/vulnerabilities/CVE-2023-24580/54983",
             "specs": [
                 "<4.5.0"
             ],
@@ -85926,7 +88455,7 @@
             "v": "<4.5.5"
         },
         {
-            "advisory": "Nemo 4.6.0 updates its dependency 'django' to version '3.2.20' to fix a ReDoS vulnerability.\r\nhttps://github.com/usnistgov/NEMO/commit/806724fb08e7af1307d7186bfd8c40e154167e89",
+            "advisory": "Nemo 4.6.0 updates its dependency 'django' to version '3.2.20' to fix a ReDoS vulnerability.",
             "cve": "CVE-2023-36053",
             "id": "pyup.io-59619",
             "more_info_path": "/vulnerabilities/CVE-2023-36053/59619",
@@ -86176,20 +88705,20 @@
             "v": "<0.2.2"
         },
         {
-            "advisory": "Nerfstudio 0.2.2 updates its NPM dependency 'webpack' to 5.80.0 to include a security fix.",
-            "cve": "CVE-2023-28154",
-            "id": "pyup.io-55281",
-            "more_info_path": "/vulnerabilities/CVE-2023-28154/55281",
+            "advisory": "Nerfstudio 0.2.2 updates its NPM dependency 'decode-uri-component' to 0.2.2 to include a security fix.",
+            "cve": "CVE-2022-38900",
+            "id": "pyup.io-55287",
+            "more_info_path": "/vulnerabilities/CVE-2022-38900/55287",
             "specs": [
                 "<0.2.2"
             ],
             "v": "<0.2.2"
         },
         {
-            "advisory": "Nerfstudio 0.2.2 updates its NPM dependency 'decode-uri-component' to 0.2.2 to include a security fix.",
-            "cve": "CVE-2022-38900",
-            "id": "pyup.io-55287",
-            "more_info_path": "/vulnerabilities/CVE-2022-38900/55287",
+            "advisory": "Nerfstudio 0.2.2 updates its NPM dependency 'webpack' to 5.80.0 to include a security fix.",
+            "cve": "CVE-2023-28154",
+            "id": "pyup.io-55281",
+            "more_info_path": "/vulnerabilities/CVE-2023-28154/55281",
             "specs": [
                 "<0.2.2"
             ],
@@ -86240,6 +88769,18 @@
             "v": "<3.3.0b1"
         }
     ],
+    "netdata": [
+        {
+            "advisory": "Netdata version 1.0.3 enhances its security by updating the httpx dependency range to \">=0.23,<1,\" addressing CVE-2021-41945.",
+            "cve": "CVE-2021-41945",
+            "id": "pyup.io-67442",
+            "more_info_path": "/vulnerabilities/CVE-2021-41945/67442",
+            "specs": [
+                "<1.0.3"
+            ],
+            "v": "<1.0.3"
+        }
+    ],
     "netdumplings": [
         {
             "advisory": "Netdumplings 0.4.0 updates its 'websockets' dependency to v7.0.0 to include a security fix.",
@@ -86344,6 +88885,18 @@
             "v": "<1.8.1"
         }
     ],
+    "netznoe-smartmeter-portal-api": [
+        {
+            "advisory": "Netznoe-smartmeter-portal-api version 1.0.2 updates its requests library from version 2.28.2 to 2.31.0 to address security issues detailed in CVE-2023-32681.",
+            "cve": "CVE-2023-32681",
+            "id": "pyup.io-67888",
+            "more_info_path": "/vulnerabilities/CVE-2023-32681/67888",
+            "specs": [
+                "<1.0.2"
+            ],
+            "v": "<1.0.2"
+        }
+    ],
     "neural-compressor": [
         {
             "advisory": "Neural-compressor 2.5 addresses a security vulnerability allowing SQL/CMD injection, which could let attackers manipulate database fields like q_model_path, enabling unauthorized downloads from the host system. This flaw also made the Neural Solution component susceptible to remote code execution (RCE) by exploiting unvalidated script_url parameters in POST requests.",
@@ -86383,10 +88936,10 @@
             "v": "<10.0.8,>=11.0.0.0b1,<11.0.7,>=12.0.0.0b1,<12.0.6,>=13.0.0.0b1,<13.0.3"
         },
         {
-            "advisory": "Neutron 13.0.0.0b2, 12.0.3 and 11.0.5 include a fix for CVE-2018-14636: Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively down prior to live-migration and kept down after the migration is complete. This is possible due to the Open vSwitch integration bridge being connected to the instance during migration. When connected to the integration bridge, all traffic for instances using the same Open vSwitch instance would potentially be visible to the migrated guest, as the required Open vSwitch VLAN filters are only applied post-migration.",
-            "cve": "CVE-2018-14636",
-            "id": "pyup.io-36483",
-            "more_info_path": "/vulnerabilities/CVE-2018-14636/36483",
+            "advisory": "Neutron 13.0.0.0b2, 12.0.3 and 11.0.5 include a fix for CVE-2018-14635: When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool.",
+            "cve": "CVE-2018-14635",
+            "id": "pyup.io-36482",
+            "more_info_path": "/vulnerabilities/CVE-2018-14635/36482",
             "specs": [
                 "<11.0.5",
                 ">=12.0.0.0b1,<12.0.3",
@@ -86395,10 +88948,10 @@
             "v": "<11.0.5,>=12.0.0.0b1,<12.0.3,>=13.0.0.0b1,<13.0.0.0b2"
         },
         {
-            "advisory": "Neutron 13.0.0.0b2, 12.0.3 and 11.0.5 include a fix for CVE-2018-14635: When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool.",
-            "cve": "CVE-2018-14635",
-            "id": "pyup.io-36482",
-            "more_info_path": "/vulnerabilities/CVE-2018-14635/36482",
+            "advisory": "Neutron 13.0.0.0b2, 12.0.3 and 11.0.5 include a fix for CVE-2018-14636: Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively down prior to live-migration and kept down after the migration is complete. This is possible due to the Open vSwitch integration bridge being connected to the instance during migration. When connected to the integration bridge, all traffic for instances using the same Open vSwitch instance would potentially be visible to the migrated guest, as the required Open vSwitch VLAN filters are only applied post-migration.",
+            "cve": "CVE-2018-14636",
+            "id": "pyup.io-36483",
+            "more_info_path": "/vulnerabilities/CVE-2018-14636/36483",
             "specs": [
                 "<11.0.5",
                 ">=12.0.0.0b1,<12.0.3",
@@ -86452,6 +89005,39 @@
             ],
             "v": "<21.0.0.0rc1"
         },
+        {
+            "advisory": "The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.",
+            "cve": "CVE-2016-5362",
+            "id": "pyup.io-70523",
+            "more_info_path": "/vulnerabilities/CVE-2016-5362/70523",
+            "specs": [
+                "<7.0.4",
+                ">=8.0.0,<=8.1.0"
+            ],
+            "v": "<7.0.4,>=8.0.0,<=8.1.0"
+        },
+        {
+            "advisory": "The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP discovery message or (2) crafted non-IP traffic.",
+            "cve": "CVE-2016-5363",
+            "id": "pyup.io-70524",
+            "more_info_path": "/vulnerabilities/CVE-2016-5363/70524",
+            "specs": [
+                "<7.0.4",
+                ">=8.0.0,<=8.1.0"
+            ],
+            "v": "<7.0.4,>=8.0.0,<=8.1.0"
+        },
+        {
+            "advisory": "The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.",
+            "cve": "CVE-2015-8914",
+            "id": "pyup.io-70438",
+            "more_info_path": "/vulnerabilities/CVE-2015-8914/70438",
+            "specs": [
+                "<7.0.4",
+                ">=8.0.0,<=8.1.0"
+            ],
+            "v": "<7.0.4,>=8.0.0,<=8.1.0"
+        },
         {
             "advisory": "A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an update, at which point an attacker could access exposed tenant VMs and network resources.",
             "cve": "CVE-2017-7543",
@@ -86475,6 +89061,46 @@
             ],
             "v": "<=23.0.0.0b2"
         },
+        {
+            "advisory": "OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.",
+            "cve": "CVE-2014-6414",
+            "id": "pyup.io-70440",
+            "more_info_path": "/vulnerabilities/CVE-2014-6414/70440",
+            "specs": [
+                ">2010,<2014.1.3"
+            ],
+            "v": ">2010,<2014.1.3"
+        },
+        {
+            "advisory": "The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.",
+            "cve": "CVE-2014-0187",
+            "id": "pyup.io-70442",
+            "more_info_path": "/vulnerabilities/CVE-2014-0187/70442",
+            "specs": [
+                ">2010,<2014.2"
+            ],
+            "v": ">2010,<2014.2"
+        },
+        {
+            "advisory": "The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update processing) by creating eight routers and assigning an ipv6 non-provider subnet to each.",
+            "cve": "CVE-2014-8153",
+            "id": "pyup.io-70439",
+            "more_info_path": "/vulnerabilities/CVE-2014-8153/70439",
+            "specs": [
+                ">2010,<2014.2.2"
+            ],
+            "v": ">2010,<2014.2.2"
+        },
+        {
+            "advisory": "The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request).",
+            "cve": "CVE-2014-4615",
+            "id": "pyup.io-70432",
+            "more_info_path": "/vulnerabilities/CVE-2014-4615/70432",
+            "specs": [
+                ">2014,<2014.1.2"
+            ],
+            "v": ">2014,<2014.1.2"
+        },
         {
             "advisory": "An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated user may prevent Neutron from being able to configure networks on any compute nodes where those security groups are present, because of an Open vSwitch (OVS) firewall KeyError. All Neutron deployments utilizing neutron-openvswitch-agent are affected. See: CVE-2019-10876.",
             "cve": "CVE-2019-10876",
@@ -86521,6 +89147,16 @@
             ],
             "v": ">=2010,<2014.2.4,>=2015.1,<2015.1.1"
         },
+        {
+            "advisory": "The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.",
+            "cve": "CVE-2013-6433",
+            "id": "pyup.io-68016",
+            "more_info_path": "/vulnerabilities/CVE-2013-6433/68016",
+            "specs": [
+                ">=2011.3,<=2013.2.3"
+            ],
+            "v": ">=2011.3,<=2013.2.3"
+        },
         {
             "advisory": "The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.",
             "cve": "CVE-2014-0056",
@@ -86530,6 +89166,29 @@
                 ">=2012.2,<2013.2.3"
             ],
             "v": ">=2012.2,<2013.2.3"
+        },
+        {
+            "advisory": "Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.",
+            "cve": "CVE-2013-6419",
+            "id": "pyup.io-67990",
+            "more_info_path": "/vulnerabilities/CVE-2013-6419/67990",
+            "specs": [
+                ">=2013,<2013.2.1",
+                ">=2014,<2014.1"
+            ],
+            "v": ">=2013,<2013.2.1,>=2014,<2014.1"
+        },
+        {
+            "advisory": "The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.",
+            "cve": "CVE-2014-4167",
+            "id": "pyup.io-70441",
+            "more_info_path": "/vulnerabilities/CVE-2014-4167/70441",
+            "specs": [
+                ">=2014.1",
+                "<=2014.1.1",
+                ">=2010,<=2013.2.3"
+            ],
+            "v": ">=2014.1,<=2014.1.1,>=2010,<=2013.2.3"
         }
     ],
     "newrelic": [
@@ -86567,6 +89226,16 @@
             ],
             "v": "<23.04.4"
         },
+        {
+            "advisory": "Nextflow 23.04.5 upgrades its Eclipse JGit dependency version from 6.5.0.202303070854-r to 6.6.1.202309021850-r due to the CVE-2023-4759.\r\nhttps://github.com/nextflow-io/nextflow/pull/4513/commits/8f9bb14d390a641814427449837b53d4cbc753d2",
+            "cve": "CVE-2023-4759",
+            "id": "pyup.io-64230",
+            "more_info_path": "/vulnerabilities/CVE-2023-4759/64230",
+            "specs": [
+                "<23.04.5"
+            ],
+            "v": "<23.04.5"
+        },
         {
             "advisory": "Nextflow 23.04.5 upgrades its Apache Ivy dependency version from 2.5.1 to 2.5.2 due to the CVE-2022-46751.\r\nhttps://github.com/nextflow-io/nextflow/pull/4513/commits/8f9bb14d390a641814427449837b53d4cbc753d2",
             "cve": "CVE-2022-46751",
@@ -86586,16 +89255,6 @@
                 "<23.04.5"
             ],
             "v": "<23.04.5"
-        },
-        {
-            "advisory": "Nextflow 23.04.5 upgrades its Eclipse JGit dependency version from 6.5.0.202303070854-r to 6.6.1.202309021850-r due to the CVE-2023-4759.\r\nhttps://github.com/nextflow-io/nextflow/pull/4513/commits/8f9bb14d390a641814427449837b53d4cbc753d2",
-            "cve": "CVE-2023-4759",
-            "id": "pyup.io-64230",
-            "more_info_path": "/vulnerabilities/CVE-2023-4759/64230",
-            "specs": [
-                "<23.04.5"
-            ],
-            "v": "<23.04.5"
         }
     ],
     "nf-core": [
@@ -86673,9 +89332,9 @@
     "nicegui": [
         {
             "advisory": "Nicegui 0.7.2 updates its dependency 'pillow' to v9.0.0 to include security fixes.",
-            "cve": "CVE-2022-22817",
-            "id": "pyup.io-44596",
-            "more_info_path": "/vulnerabilities/CVE-2022-22817/44596",
+            "cve": "CVE-2022-22815",
+            "id": "pyup.io-44585",
+            "more_info_path": "/vulnerabilities/CVE-2022-22815/44585",
             "specs": [
                 "<0.7.2"
             ],
@@ -86683,9 +89342,9 @@
         },
         {
             "advisory": "Nicegui 0.7.2 updates its dependency 'pillow' to v9.0.0 to include security fixes.",
-            "cve": "PVE-2022-44524",
-            "id": "pyup.io-44598",
-            "more_info_path": "/vulnerabilities/PVE-2022-44524/44598",
+            "cve": "CVE-2022-22816",
+            "id": "pyup.io-44595",
+            "more_info_path": "/vulnerabilities/CVE-2022-22816/44595",
             "specs": [
                 "<0.7.2"
             ],
@@ -86703,9 +89362,9 @@
         },
         {
             "advisory": "Nicegui 0.7.2 updates its dependency 'pillow' to v9.0.0 to include security fixes.",
-            "cve": "CVE-2022-22816",
-            "id": "pyup.io-44595",
-            "more_info_path": "/vulnerabilities/CVE-2022-22816/44595",
+            "cve": "CVE-2022-22817",
+            "id": "pyup.io-44596",
+            "more_info_path": "/vulnerabilities/CVE-2022-22817/44596",
             "specs": [
                 "<0.7.2"
             ],
@@ -86713,19 +89372,19 @@
         },
         {
             "advisory": "Nicegui 0.7.2 updates its dependency 'pillow' to v9.0.0 to include security fixes.",
-            "cve": "CVE-2022-22815",
-            "id": "pyup.io-44585",
-            "more_info_path": "/vulnerabilities/CVE-2022-22815/44585",
+            "cve": "PVE-2022-44524",
+            "id": "pyup.io-44598",
+            "more_info_path": "/vulnerabilities/PVE-2022-44524/44598",
             "specs": [
                 "<0.7.2"
             ],
             "v": "<0.7.2"
         },
         {
-            "advisory": "Nicegui 0.9.26 updates its dependency 'pillow' to v9.3.0 to include a security fix.",
-            "cve": "CVE-2022-45199",
-            "id": "pyup.io-52528",
-            "more_info_path": "/vulnerabilities/CVE-2022-45199/52528",
+            "advisory": "Nicegui 0.9.26 updates its dependency 'cryptography' to v38.0.3 to include security fixes.",
+            "cve": "CVE-2022-3602",
+            "id": "pyup.io-52527",
+            "more_info_path": "/vulnerabilities/CVE-2022-3602/52527",
             "specs": [
                 "<0.9.26"
             ],
@@ -86742,10 +89401,10 @@
             "v": "<0.9.26"
         },
         {
-            "advisory": "Nicegui 0.9.26 updates its dependency 'cryptography' to v38.0.3 to include security fixes.",
-            "cve": "CVE-2022-3602",
-            "id": "pyup.io-52527",
-            "more_info_path": "/vulnerabilities/CVE-2022-3602/52527",
+            "advisory": "Nicegui 0.9.26 updates its dependency 'pillow' to v9.3.0 to include a security fix.",
+            "cve": "CVE-2022-45199",
+            "id": "pyup.io-52528",
+            "more_info_path": "/vulnerabilities/CVE-2022-45199/52528",
             "specs": [
                 "<0.9.26"
             ],
@@ -86775,9 +89434,9 @@
         },
         {
             "advisory": "Niceml 0.9.0 updates its dependency 'pillow' to versions \"^10.1.0\" to include security fixes.",
-            "cve": "CVE-2023-44271",
-            "id": "pyup.io-62522",
-            "more_info_path": "/vulnerabilities/CVE-2023-44271/62522",
+            "cve": "CVE-2023-4863",
+            "id": "pyup.io-62559",
+            "more_info_path": "/vulnerabilities/CVE-2023-4863/62559",
             "specs": [
                 "<0.9.0"
             ],
@@ -86785,9 +89444,9 @@
         },
         {
             "advisory": "Niceml 0.9.0 updates its dependency 'pillow' to versions \"^10.1.0\" to include security fixes.",
-            "cve": "CVE-2023-4863",
-            "id": "pyup.io-62559",
-            "more_info_path": "/vulnerabilities/CVE-2023-4863/62559",
+            "cve": "CVE-2023-44271",
+            "id": "pyup.io-62522",
+            "more_info_path": "/vulnerabilities/CVE-2023-44271/62522",
             "specs": [
                 "<0.9.0"
             ],
@@ -86851,29 +89510,29 @@
     "nidaqmx": [
         {
             "advisory": "Nidaqmx 0.5.8 updates its dependency 'urllib3' to v1.25.9 to include security fixes.",
-            "cve": "CVE-2018-20060",
-            "id": "pyup.io-44705",
-            "more_info_path": "/vulnerabilities/CVE-2018-20060/44705",
+            "cve": "CVE-2020-26137",
+            "id": "pyup.io-44702",
+            "more_info_path": "/vulnerabilities/CVE-2020-26137/44702",
             "specs": [
                 "<0.5.8"
             ],
             "v": "<0.5.8"
         },
         {
-            "advisory": "Nidaqmx 0.5.8 updates its dependency 'jinja2' to v2.11.2 to include security fixes.",
-            "cve": "CVE-2020-28493",
-            "id": "pyup.io-44700",
-            "more_info_path": "/vulnerabilities/CVE-2020-28493/44700",
+            "advisory": "Nidaqmx 0.5.8 updates its dependency 'requests' to v2.23.0 to include a security fix.",
+            "cve": "CVE-2018-18074",
+            "id": "pyup.io-44701",
+            "more_info_path": "/vulnerabilities/CVE-2018-18074/44701",
             "specs": [
                 "<0.5.8"
             ],
             "v": "<0.5.8"
         },
         {
-            "advisory": "Nidaqmx 0.5.8 updates its dependency 'requests' to v2.23.0 to include a security fix.",
-            "cve": "CVE-2018-18074",
-            "id": "pyup.io-44701",
-            "more_info_path": "/vulnerabilities/CVE-2018-18074/44701",
+            "advisory": "Nidaqmx 0.5.8 updates its dependency 'jinja2' to v2.11.2 to include security fixes.",
+            "cve": "CVE-2020-28493",
+            "id": "pyup.io-44700",
+            "more_info_path": "/vulnerabilities/CVE-2020-28493/44700",
             "specs": [
                 "<0.5.8"
             ],
@@ -86881,9 +89540,9 @@
         },
         {
             "advisory": "Nidaqmx 0.5.8 updates its dependency 'urllib3' to v1.25.9 to include security fixes.",
-            "cve": "CVE-2020-26137",
-            "id": "pyup.io-44702",
-            "more_info_path": "/vulnerabilities/CVE-2020-26137/44702",
+            "cve": "CVE-2018-20060",
+            "id": "pyup.io-44705",
+            "more_info_path": "/vulnerabilities/CVE-2018-20060/44705",
             "specs": [
                 "<0.5.8"
             ],
@@ -86954,6 +89613,18 @@
             "v": "<2.0.2"
         }
     ],
+    "nikola": [
+        {
+            "advisory": "Nikola version 8.3.1 addresses a directory traversal vulnerability within its nikola auto command, which stemmed from an issue in the aiottp library detailed in CVE-2024-23334.",
+            "cve": "CVE-2024-23334",
+            "id": "pyup.io-70558",
+            "more_info_path": "/vulnerabilities/CVE-2024-23334/70558",
+            "specs": [
+                "<8.3.1"
+            ],
+            "v": "<8.3.1"
+        }
+    ],
     "nimview": [
         {
             "advisory": "Nimview 0.1.2 adds a (weak) CSRF check.\r\nhttps://github.com/marcomq/nimview/commit/e91ad0e656e75703c5101834c9fa86b12c1a22bf",
@@ -87502,9 +90173,9 @@
     "nobinobi-daily-follow-up": [
         {
             "advisory": "Nobinobi-daily-follow-up 0.1.1.12 updates its dependency 'django' to v3.2.4 to include security fixes.",
-            "cve": "CVE-2021-31542",
-            "id": "pyup.io-40810",
-            "more_info_path": "/vulnerabilities/CVE-2021-31542/40810",
+            "cve": "CVE-2021-33203",
+            "id": "pyup.io-49103",
+            "more_info_path": "/vulnerabilities/CVE-2021-33203/49103",
             "specs": [
                 "<0.1.1.12"
             ],
@@ -87512,9 +90183,9 @@
         },
         {
             "advisory": "Nobinobi-daily-follow-up 0.1.1.12 updates its dependency 'django' to v3.2.4 to include security fixes.",
-            "cve": "CVE-2021-33571",
-            "id": "pyup.io-49102",
-            "more_info_path": "/vulnerabilities/CVE-2021-33571/49102",
+            "cve": "CVE-2021-31542",
+            "id": "pyup.io-40810",
+            "more_info_path": "/vulnerabilities/CVE-2021-31542/40810",
             "specs": [
                 "<0.1.1.12"
             ],
@@ -87522,9 +90193,9 @@
         },
         {
             "advisory": "Nobinobi-daily-follow-up 0.1.1.12 updates its dependency 'django' to v3.2.4 to include security fixes.",
-            "cve": "CVE-2021-33203",
-            "id": "pyup.io-49103",
-            "more_info_path": "/vulnerabilities/CVE-2021-33203/49103",
+            "cve": "CVE-2021-33571",
+            "id": "pyup.io-49102",
+            "more_info_path": "/vulnerabilities/CVE-2021-33571/49102",
             "specs": [
                 "<0.1.1.12"
             ],
@@ -88193,6 +90864,28 @@
             ],
             "v": "<12.0.4,==13.0.0"
         },
+        {
+            "advisory": "In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.",
+            "cve": "CVE-2017-16239",
+            "id": "pyup.io-67536",
+            "more_info_path": "/vulnerabilities/CVE-2017-16239/67536",
+            "specs": [
+                "<14.0.9",
+                ">=15.0.0,<=15.0.7",
+                "<=16.0.0,>=16.0.2"
+            ],
+            "v": "<14.0.9,>=15.0.0,<=15.0.7,<=16.0.0,>=16.0.2"
+        },
+        {
+            "advisory": "An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.",
+            "cve": "CVE-2017-17051",
+            "id": "pyup.io-67537",
+            "more_info_path": "/vulnerabilities/CVE-2017-17051/67537",
+            "specs": [
+                "<16.0.4"
+            ],
+            "v": "<16.0.4"
+        },
         {
             "advisory": "Nova 17.0.12, 18.2.2 and 19.0.2 include a fix for CVE-2019-14433: An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.",
             "cve": "CVE-2019-14433",
@@ -88285,6 +90978,92 @@
             ],
             "v": ">0"
         },
+        {
+            "advisory": "The \"create an instance\" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for CVE-2013-2256.",
+            "cve": "CVE-2013-4278",
+            "id": "pyup.io-70564",
+            "more_info_path": "/vulnerabilities/CVE-2013-4278/70564",
+            "specs": [
+                ">2010,<2013.2"
+            ],
+            "v": ">2010,<2013.2"
+        },
+        {
+            "advisory": "The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image.",
+            "cve": "CVE-2014-2573",
+            "id": "pyup.io-70460",
+            "more_info_path": "/vulnerabilities/CVE-2014-2573/70460",
+            "specs": [
+                ">2010,<2013.2.4"
+            ],
+            "v": ">2010,<2013.2.4"
+        },
+        {
+            "advisory": "The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.",
+            "cve": "CVE-2014-7231",
+            "id": "pyup.io-70431",
+            "more_info_path": "/vulnerabilities/CVE-2014-7231/70431",
+            "specs": [
+                ">2010,<=2014.1.5"
+            ],
+            "v": ">2010,<=2014.1.5"
+        },
+        {
+            "advisory": "OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.",
+            "cve": "CVE-2015-7548",
+            "id": "pyup.io-70437",
+            "more_info_path": "/vulnerabilities/CVE-2015-7548/70437",
+            "specs": [
+                ">=12.0.0,<12.0.1",
+                ">=2010,<2015.1.3"
+            ],
+            "v": ">=12.0.0,<12.0.1,>=2010,<2015.1.3"
+        },
+        {
+            "advisory": "The volume_utils._parse_volume_info function in OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty) includes the connection_info dictionary in the StorageError message when using the Xen backend, which might allow attackers to obtain sensitive password information by reading log files or other unspecified vectors.",
+            "cve": "CVE-2015-8749",
+            "id": "pyup.io-70436",
+            "more_info_path": "/vulnerabilities/CVE-2015-8749/70436",
+            "specs": [
+                ">=12.0.0,<12.0.1",
+                ">=2010,<2015.1.3"
+            ],
+            "v": ">=12.0.0,<12.0.1,>=2010,<2015.1.3"
+        },
+        {
+            "advisory": "The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk.",
+            "cve": "CVE-2016-2140",
+            "id": "pyup.io-70525",
+            "more_info_path": "/vulnerabilities/CVE-2016-2140/70525",
+            "specs": [
+                ">=12.0.0,<12.0.3",
+                ">=2010,<2015.1.4"
+            ],
+            "v": ">=12.0.0,<12.0.3,>=2010,<2015.1.4"
+        },
+        {
+            "advisory": "An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.",
+            "cve": "CVE-2017-7214",
+            "id": "pyup.io-67542",
+            "more_info_path": "/vulnerabilities/CVE-2017-7214/67542",
+            "specs": [
+                ">=13.0.0,<=13.1.3",
+                ">=14.0.0,<=14.0.4",
+                ">=15.0.0,<=15.0.1"
+            ],
+            "v": ">=13.0.0,<=13.1.3,>=14.0.0,<=14.0.4,>=15.0.0,<=15.0.1"
+        },
+        {
+            "advisory": "An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected.",
+            "cve": "CVE-2017-18191",
+            "id": "pyup.io-67540",
+            "more_info_path": "/vulnerabilities/CVE-2017-18191/67540",
+            "specs": [
+                ">=15.0.0,<=15.1.0",
+                ">=16.0.0,<=16.1.1"
+            ],
+            "v": ">=15.0.0,<=15.1.0,>=16.0.0,<=16.1.1"
+        },
         {
             "advisory": "Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem. See: CVE-2011-3147.",
             "cve": "CVE-2011-3147",
@@ -88389,6 +91168,118 @@
             ],
             "v": ">=2010,<2014.2.4,>=2015.1,<2015.1.2"
         },
+        {
+            "advisory": "The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.",
+            "cve": "CVE-2014-0134",
+            "id": "pyup.io-68020",
+            "more_info_path": "/vulnerabilities/CVE-2014-0134/68020",
+            "specs": [
+                ">=2010.1-rc2,<2013",
+                ">=2013.2,<2013.2.3",
+                ">=2014,<2014.1"
+            ],
+            "v": ">=2010.1-rc2,<2013,>=2013.2,<2013.2.3,>=2014,<2014.1"
+        },
+        {
+            "advisory": "The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping parameter.",
+            "cve": "CVE-2013-0208",
+            "id": "pyup.io-68025",
+            "more_info_path": "/vulnerabilities/CVE-2013-0208/68025",
+            "specs": [
+                ">=2010.1-rc2,<2013.1.1"
+            ],
+            "v": ">=2010.1-rc2,<2013.1.1"
+        },
+        {
+            "advisory": "Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-network consumption) via a large number of server-creation operations, which triggers a large number of update requests.",
+            "cve": "CVE-2013-4185",
+            "id": "pyup.io-68029",
+            "more_info_path": "/vulnerabilities/CVE-2013-4185/68029",
+            "specs": [
+                ">=2010.1-rc2,<2013.2.3"
+            ],
+            "v": ">=2010.1-rc2,<2013.2.3"
+        },
+        {
+            "advisory": "XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.",
+            "cve": "CVE-2013-2161",
+            "id": "pyup.io-68030",
+            "more_info_path": "/vulnerabilities/CVE-2013-2161/68030",
+            "specs": [
+                ">=2010.1-rc2,<2014"
+            ],
+            "v": ">=2010.1-rc2,<2014"
+        },
+        {
+            "advisory": "Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.",
+            "cve": "CVE-2012-2101",
+            "id": "pyup.io-68028",
+            "more_info_path": "/vulnerabilities/CVE-2012-2101/68028",
+            "specs": [
+                ">=2010.1-rc2,<=2012.1"
+            ],
+            "v": ">=2010.1-rc2,<=2012.1"
+        },
+        {
+            "advisory": "Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.",
+            "cve": "CVE-2012-0030",
+            "id": "pyup.io-68027",
+            "more_info_path": "/vulnerabilities/CVE-2012-0030/68027",
+            "specs": [
+                ">=2010.1-rc2,<=2012.1.3"
+            ],
+            "v": ">=2010.1-rc2,<=2012.1.3"
+        },
+        {
+            "advisory": "The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.",
+            "cve": "CVE-2012-2654",
+            "id": "pyup.io-68021",
+            "more_info_path": "/vulnerabilities/CVE-2012-2654/68021",
+            "specs": [
+                ">=2010.1-rc2,<=2012.2"
+            ],
+            "v": ">=2010.1-rc2,<=2012.2"
+        },
+        {
+            "advisory": "The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repeated IDs in the os:scheduler_hints section.",
+            "cve": "CVE-2012-3371",
+            "id": "pyup.io-68023",
+            "more_info_path": "/vulnerabilities/CVE-2012-3371/68023",
+            "specs": [
+                ">=2010.1-rc2,<=2012.2"
+            ],
+            "v": ">=2010.1-rc2,<=2012.2"
+        },
+        {
+            "advisory": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).",
+            "cve": "CVE-2012-5625",
+            "id": "pyup.io-68024",
+            "more_info_path": "/vulnerabilities/CVE-2012-5625/68024",
+            "specs": [
+                ">=2010.1-rc2,<=2012.2.2"
+            ],
+            "v": ">=2010.1-rc2,<=2012.2.2"
+        },
+        {
+            "advisory": "OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.",
+            "cve": "CVE-2013-4463",
+            "id": "pyup.io-68026",
+            "more_info_path": "/vulnerabilities/CVE-2013-4463/68026",
+            "specs": [
+                ">=2010.1-rc2,<=2013.2.4"
+            ],
+            "v": ">=2010.1-rc2,<=2013.2.4"
+        },
+        {
+            "advisory": "OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.",
+            "cve": "CVE-2012-1585",
+            "id": "pyup.io-67999",
+            "more_info_path": "/vulnerabilities/CVE-2012-1585/67999",
+            "specs": [
+                ">=2011.1,<2011.3"
+            ],
+            "v": ">=2011.1,<2011.3"
+        },
         {
             "advisory": "Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.",
             "cve": "CVE-2011-4596",
@@ -88399,6 +91290,26 @@
             ],
             "v": ">=2011.3,<2011.3.1"
         },
+        {
+            "advisory": "OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.",
+            "cve": "CVE-2013-0335",
+            "id": "pyup.io-67983",
+            "more_info_path": "/vulnerabilities/CVE-2013-0335/67983",
+            "specs": [
+                ">=2012,<2013.1.g3"
+            ],
+            "v": ">=2012,<2013.1.g3"
+        },
+        {
+            "advisory": "OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.",
+            "cve": "CVE-2013-1838",
+            "id": "pyup.io-67986",
+            "more_info_path": "/vulnerabilities/CVE-2013-1838/67986",
+            "specs": [
+                ">=2012,<=2012.2"
+            ],
+            "v": ">=2012,<=2012.2"
+        },
         {
             "advisory": "virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3361.",
             "cve": "CVE-2012-3447",
@@ -88409,6 +91320,48 @@
             ],
             "v": ">=2012.1.0,<2012.1.2"
         },
+        {
+            "advisory": "OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.",
+            "cve": "CVE-2013-2096",
+            "id": "pyup.io-67985",
+            "more_info_path": "/vulnerabilities/CVE-2013-2096/67985",
+            "specs": [
+                ">=2013,<2013.1.5"
+            ],
+            "v": ">=2013,<2013.1.5"
+        },
+        {
+            "advisory": "Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.",
+            "cve": "CVE-2013-6419",
+            "id": "pyup.io-67989",
+            "more_info_path": "/vulnerabilities/CVE-2013-6419/67989",
+            "specs": [
+                ">=2013,<2013.2.1",
+                ">=2014,<2014.1"
+            ],
+            "v": ">=2013,<2013.2.1,>=2014,<2014.1"
+        },
+        {
+            "advisory": "The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with unique os_type settings, which triggers the creation of a new ephemeral disk backing file.",
+            "cve": "CVE-2013-6437",
+            "id": "pyup.io-68000",
+            "more_info_path": "/vulnerabilities/CVE-2013-6437/68000",
+            "specs": [
+                ">=2013,<2013.2.2",
+                ">=2014,<2014.1"
+            ],
+            "v": ">=2013,<2013.2.2,>=2014,<2014.1"
+        },
+        {
+            "advisory": "The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.",
+            "cve": "CVE-2013-4497",
+            "id": "pyup.io-67988",
+            "more_info_path": "/vulnerabilities/CVE-2013-4497/67988",
+            "specs": [
+                ">=2013,<=2013.2"
+            ],
+            "v": ">=2013,<=2013.2"
+        },
         {
             "advisory": "The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compute/api.py when using non-default policies, which allows remote authenticated users to gain privileges via these API requests.",
             "cve": "CVE-2014-0167",
@@ -88419,6 +91372,48 @@
             ],
             "v": ">=2013.1,<2013.2.4"
         },
+        {
+            "advisory": "OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.",
+            "cve": "CVE-2013-7048",
+            "id": "pyup.io-68001",
+            "more_info_path": "/vulnerabilities/CVE-2013-7048/68001",
+            "specs": [
+                ">=2013.1,<=2013.1.4",
+                ">=2013.2,<=2013.2.1"
+            ],
+            "v": ">=2013.1,<=2013.1.4,>=2013.2,<=2013.2.1"
+        },
+        {
+            "advisory": "The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.",
+            "cve": "CVE-2014-8333",
+            "id": "pyup.io-70421",
+            "more_info_path": "/vulnerabilities/CVE-2014-8333/70421",
+            "specs": [
+                ">=2014.1,<2014.1.4"
+            ],
+            "v": ">=2014.1,<2014.1.4"
+        },
+        {
+            "advisory": "Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to access unintended consoles by spawning an instance that triggers the same VNC port to be allocated to two different instances.",
+            "cve": "CVE-2014-8750",
+            "id": "pyup.io-70420",
+            "more_info_path": "/vulnerabilities/CVE-2014-8750/70420",
+            "specs": [
+                ">=2014.1,<2014.1.4"
+            ],
+            "v": ">=2014.1,<2014.1.4"
+        },
+        {
+            "advisory": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.",
+            "cve": "CVE-2015-3241",
+            "id": "pyup.io-70419",
+            "more_info_path": "/vulnerabilities/CVE-2015-3241/70419",
+            "specs": [
+                ">=2014.2,<=2014.2.3",
+                ">=2015.1.0,<=2015.1.1"
+            ],
+            "v": ">=2014.2,<=2014.2.3,>=2015.1.0,<=2015.1.1"
+        },
         {
             "advisory": "OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.",
             "cve": "CVE-2014-3708",
@@ -88542,6 +91537,16 @@
         }
     ],
     "nsupdate": [
+        {
+            "advisory": "A vulnerability classified as problematic has been found in nsupdate.info. This affects an unknown part of the file `src/nsupdate/settings/base.py` of the component `CSRF Cookie Handler`. The manipulation of the argument `CSRF_COOKIE_HTTPONLY` leads to cookie without `httponly` flag. It is possible to initiate the attack remotely. The name of the patch is 60a3fe559c453bc36b0ec3e5dd39c1303640a59a. It is recommended to apply a patch to fix this issue. The identifier VDB-216909 was assigned to this vulnerability.",
+            "cve": "CVE-2019-25091",
+            "id": "pyup.io-54640",
+            "more_info_path": "/vulnerabilities/CVE-2019-25091/54640",
+            "specs": [
+                "<0.12.0"
+            ],
+            "v": "<0.12.0"
+        },
         {
             "advisory": "nsupdate before 0.3.0 is vulnerable to a undisclosed security issue.",
             "cve": "PVE-2021-25906",
@@ -88581,16 +91586,6 @@
                 "<0.9.1"
             ],
             "v": "<0.9.1"
-        },
-        {
-            "advisory": "A vulnerability classified as problematic has been found in nsupdate.info. This affects an unknown part of the file `src/nsupdate/settings/base.py` of the component `CSRF Cookie Handler`. The manipulation of the argument `CSRF_COOKIE_HTTPONLY` leads to cookie without `httponly` flag. It is possible to initiate the attack remotely. The name of the patch is 60a3fe559c453bc36b0ec3e5dd39c1303640a59a. It is recommended to apply a patch to fix this issue. The identifier VDB-216909 was assigned to this vulnerability.",
-            "cve": "CVE-2019-25091",
-            "id": "pyup.io-54640",
-            "more_info_path": "/vulnerabilities/CVE-2019-25091/54640",
-            "specs": [
-                "<2019-05-19"
-            ],
-            "v": "<2019-05-19"
         }
     ],
     "ntopng": [
@@ -88983,20 +91978,20 @@
             "v": ">=0,<2.0.16"
         },
         {
-            "advisory": "NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.",
-            "cve": "CVE-2022-31605",
-            "id": "pyup.io-54410",
-            "more_info_path": "/vulnerabilities/CVE-2022-31605/54410",
+            "advisory": "NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe deserialization. The deserialization of Untrusted Data may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.",
+            "cve": "CVE-2022-31604",
+            "id": "pyup.io-54409",
+            "more_info_path": "/vulnerabilities/CVE-2022-31604/54409",
             "specs": [
                 ">=0,<2.1.2"
             ],
             "v": ">=0,<2.1.2"
         },
         {
-            "advisory": "NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe deserialization. The deserialization of Untrusted Data may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.",
-            "cve": "CVE-2022-31604",
-            "id": "pyup.io-54409",
-            "more_info_path": "/vulnerabilities/CVE-2022-31604/54409",
+            "advisory": "NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.",
+            "cve": "CVE-2022-31605",
+            "id": "pyup.io-54410",
+            "more_info_path": "/vulnerabilities/CVE-2022-31605/54410",
             "specs": [
                 ">=0,<2.1.2"
             ],
@@ -89399,20 +92394,20 @@
             "v": "<1.8.2"
         },
         {
-            "advisory": "Octoprint 1.8.3 resolves a vulnerability where a malicious admin user could upload a specially crafted language pack containing one or more symlinks to files on the OctoPrint server, which would then be contained in created backups and could thus be extracted that way. This could be used by a malicious admin user to extract files from the OctoPrint server readable by the system user the OctoPrint server is running under, including OS files outside the scope of OctoPrint. \r\nhttps://github.com/OctoPrint/OctoPrint/commit/3e3c11811e216fb371a33e28412df83f9701e5b0",
-            "cve": "PVE-2024-64841",
-            "id": "pyup.io-64841",
-            "more_info_path": "/vulnerabilities/PVE-2024-64841/64841",
+            "advisory": "Version 1.8.3 of OctoPrint addresses a security vulnerability that allowed for a Cross-Site Request Forgery (CSRF) attack combined with phishing. In this attack scenario, an admin user could be deceived into visiting a malicious website, which could then install harmful plugins on the OctoPrint server using the admin's login credentials. To mitigate this risk, the latest update has introduced stricter measures for API requests. Now, the API requires a CSRF cookie provided by the server during the initial page load, along with a CSRF header containing the same value for any API request that isn't a GET, HEAD, or OPTIONS request.\r\nhttps://github.com/OctoPrint/OctoPrint/commit/59a0c8e8d79e9d28c4a2dfbf4105f8dd580a8f04",
+            "cve": "PVE-2024-64730",
+            "id": "pyup.io-64730",
+            "more_info_path": "/vulnerabilities/PVE-2024-64730/64730",
             "specs": [
                 "<1.8.3"
             ],
             "v": "<1.8.3"
         },
         {
-            "advisory": "Version 1.8.3 of OctoPrint addresses a security vulnerability that allowed for a Cross-Site Request Forgery (CSRF) attack combined with phishing. In this attack scenario, an admin user could be deceived into visiting a malicious website, which could then install harmful plugins on the OctoPrint server using the admin's login credentials. To mitigate this risk, the latest update has introduced stricter measures for API requests. Now, the API requires a CSRF cookie provided by the server during the initial page load, along with a CSRF header containing the same value for any API request that isn't a GET, HEAD, or OPTIONS request.\r\nhttps://github.com/OctoPrint/OctoPrint/commit/59a0c8e8d79e9d28c4a2dfbf4105f8dd580a8f04",
-            "cve": "PVE-2024-64730",
-            "id": "pyup.io-64730",
-            "more_info_path": "/vulnerabilities/PVE-2024-64730/64730",
+            "advisory": "Octoprint 1.8.3 resolves a vulnerability where a malicious admin user could upload a specially crafted language pack containing one or more symlinks to files on the OctoPrint server, which would then be contained in created backups and could thus be extracted that way. This could be used by a malicious admin user to extract files from the OctoPrint server readable by the system user the OctoPrint server is running under, including OS files outside the scope of OctoPrint. \r\nhttps://github.com/OctoPrint/OctoPrint/commit/3e3c11811e216fb371a33e28412df83f9701e5b0",
+            "cve": "PVE-2024-64841",
+            "id": "pyup.io-64841",
+            "more_info_path": "/vulnerabilities/PVE-2024-64841/64841",
             "specs": [
                 "<1.8.3"
             ],
@@ -89428,6 +92423,36 @@
             ],
             "v": "<1.9.3"
         },
+        {
+            "advisory": "** DISPUTED ** OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with \"blind port forwarding ... Putting OctoPrint onto the public internet is a terrible idea, and I really can't emphasize that enough.\"",
+            "cve": "CVE-2018-16710",
+            "id": "pyup.io-67596",
+            "more_info_path": "/vulnerabilities/CVE-2018-16710/67596",
+            "specs": [
+                "<=1.3.9"
+            ],
+            "v": "<=1.3.9"
+        },
+        {
+            "advisory": "OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through the \"Test\" button included in the web interface will execute JavaScript code in the victims browser when attempting to render the snapshot image. An attacker who successfully talked a victim with admin rights into performing a snapshot test with such a crafted URL could use this to retrieve or modify sensitive configuration settings, interrupt prints or otherwise interact with the OctoPrint instance in a malicious way. The vulnerability is patched in version 1.10.0rc3. OctoPrint administrators are strongly advised to thoroughly vet who has admin access to their installation and what settings they modify based on instructions by strangers.",
+            "cve": "CVE-2024-28237",
+            "id": "pyup.io-67597",
+            "more_info_path": "/vulnerabilities/CVE-2024-28237/67597",
+            "specs": [
+                "<=1.9.3"
+            ],
+            "v": "<=1.9.3"
+        },
+        {
+            "advisory": "OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to change the password of other admin accounts, including their own, without having to repeat their password. An attacker who managed to hijack an admin account might use this to lock out actual admins from their OctoPrint instance. The vulnerability will be patched in version 1.10.0.",
+            "cve": "CVE-2024-23637",
+            "id": "pyup.io-67598",
+            "more_info_path": "/vulnerabilities/CVE-2024-23637/67598",
+            "specs": [
+                "<=1.9.3"
+            ],
+            "v": "<=1.9.3"
+        },
         {
             "advisory": "OctoPrint 1.7.3 and prior does not have rate limiting on the login page, making it possible for attackers to attempt brute force attacks. The severity of this issue is limited by OctoPrint normally running in a restricted LAN. The `devel` and `maintenance` branches of the repository have a fix that limits the rate of failed login attempts.",
             "cve": "CVE-2022-2822",
@@ -89438,16 +92463,6 @@
             ],
             "v": ">=0"
         },
-        {
-            "advisory": "OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.",
-            "cve": "CVE-2021-32561",
-            "id": "pyup.io-54268",
-            "more_info_path": "/vulnerabilities/CVE-2021-32561/54268",
-            "specs": [
-                ">=0,<1.6.0"
-            ],
-            "v": ">=0,<1.6.0"
-        },
         {
             "advisory": "The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.",
             "cve": "CVE-2021-32560",
@@ -89459,14 +92474,14 @@
             "v": ">=0,<1.6.0"
         },
         {
-            "advisory": "Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. The login endpoint allows for javascript injection which may lead to account takeover in a phishing scenario.",
-            "cve": "CVE-2022-1430",
-            "id": "pyup.io-54451",
-            "more_info_path": "/vulnerabilities/CVE-2022-1430/54451",
+            "advisory": "OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.",
+            "cve": "CVE-2021-32561",
+            "id": "pyup.io-54268",
+            "more_info_path": "/vulnerabilities/CVE-2021-32561/54268",
             "specs": [
-                ">=0,<1.8.0"
+                ">=0,<1.6.0"
             ],
-            "v": ">=0,<1.8.0"
+            "v": ">=0,<1.6.0"
         },
         {
             "advisory": "Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0.",
@@ -89478,6 +92493,16 @@
             ],
             "v": ">=0,<1.8.0"
         },
+        {
+            "advisory": "Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. The login endpoint allows for javascript injection which may lead to account takeover in a phishing scenario.",
+            "cve": "CVE-2022-1430",
+            "id": "pyup.io-54451",
+            "more_info_path": "/vulnerabilities/CVE-2022-1430/54451",
+            "specs": [
+                ">=0,<1.8.0"
+            ],
+            "v": ">=0,<1.8.0"
+        },
         {
             "advisory": "OctoPrint before 1.8.0 is susceptible to Cross-site Scripting (XSS) due to Chrome interpreting URL objects from unencoded HTML tags in the web page. XSS attacks facilitate executing malicious scripts in a user's browser under the guise of a trusted application, primarily exploiting vulnerabilities through special character injection, like less than and greater than signs, that aren't properly escaped. These attacks may lead to cookie theft, session hijacking, exposure of sensitive information, privileged access exploitation, and malware delivery. XSS can manifest in various forms including stored XSS (where malicious code is stored on the server), reflected XSS (where the code is reflected off the web server following user interaction), DOM-based XSS (directed at the client side without server-side alteration), and mutated XSS (where injected code is modified by the browser). To mitigate XSS risks, best practices include sanitizing data inputs, converting special characters to HTML or URL encoded equivalents, allowing users to disable scripts, redirecting invalid requests, logging and invalidating simultaneous or suspicious logins, enforcing Content Security Policies, and understanding the security features of utilized libraries.",
             "cve": "PVE-2024-99773",
@@ -89641,6 +92666,16 @@
                 "<0.46.2"
             ],
             "v": "<0.46.2"
+        },
+        {
+            "advisory": "Octue version 0.54.0 updates its gunicorn dependency from version \"^20.1\" to version \"^22\" to address security concerns. This upgrade helps mitigate vulnerabilities related to chunked encoding support that could potentially lead to HTTP request smuggling attacks, initially fixed in Gunicorn 20.0.1.",
+            "cve": "PVE-2021-40104",
+            "id": "pyup.io-68471",
+            "more_info_path": "/vulnerabilities/PVE-2021-40104/68471",
+            "specs": [
+                "<0.54.0"
+            ],
+            "v": "<0.54.0"
         }
     ],
     "odooghost": [
@@ -89690,6 +92725,16 @@
         }
     ],
     "offlineimap": [
+        {
+            "advisory": "offlineimap before 6.3.2 does not check for SSL server certificate validation when \"ssl = yes\" option is specified which can allow man-in-the-middle attacks.",
+            "cve": "CVE-2010-4532",
+            "id": "pyup.io-67951",
+            "more_info_path": "/vulnerabilities/CVE-2010-4532/67951",
+            "specs": [
+                "<6.3.2-rc1"
+            ],
+            "v": "<6.3.2-rc1"
+        },
         {
             "advisory": "offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies.",
             "cve": "CVE-2010-4533",
@@ -89747,6 +92792,18 @@
             "v": ">0"
         }
     ],
+    "okdata-aws": [
+        {
+            "advisory": "Okdata-aws version 4.1.0 has upgraded its idna dependency from version 3.3 to 3.7 in response to CVE-2024-3651.",
+            "cve": "CVE-2024-3651",
+            "id": "pyup.io-67943",
+            "more_info_path": "/vulnerabilities/CVE-2024-3651/67943",
+            "specs": [
+                "<4.1.0"
+            ],
+            "v": "<4.1.0"
+        }
+    ],
     "okdata-cli": [
         {
             "advisory": "Okdata-cli version 0.12.1 updates its dependency \"urlib3\" to v1.26.5 to include a security fix.",
@@ -89759,6 +92816,18 @@
             "v": "<0.12.1"
         }
     ],
+    "okdata-sdk": [
+        {
+            "advisory": "Okdata-sdk version 3.1.1 updates its dependency, upgrading python-keycloak to eliminate the use of python-jose. This change addresses the security vulnerability identified in CVE-2016-7036.",
+            "cve": "CVE-2016-7036",
+            "id": "pyup.io-67609",
+            "more_info_path": "/vulnerabilities/CVE-2016-7036/67609",
+            "specs": [
+                "<3.1.1"
+            ],
+            "v": "<3.1.1"
+        }
+    ],
     "oksana": [
         {
             "advisory": "Oksana is a malicious package. It exfiltrates data from the host where it is installed.\r\nhttps://bertusk.medium.com/malicious-pypi-packages-found-exfiltrating-data-and-opening-reverse-shells-87d4afb5d99e",
@@ -89773,16 +92842,6 @@
         }
     ],
     "omegaml": [
-        {
-            "advisory": "Omegaml 0.15.2 updates its dependency 'numpy' to v1.22.2 to include security fixes.\r\nhttps://github.com/omegaml/omegaml/pull/273",
-            "cve": "CVE-2021-33430",
-            "id": "pyup.io-52214",
-            "more_info_path": "/vulnerabilities/CVE-2021-33430/52214",
-            "specs": [
-                "<0.15.2"
-            ],
-            "v": "<0.15.2"
-        },
         {
             "advisory": "Omegaml 0.15.2 updates its dependency 'urllib3' to v1.26.5 to include security fixes.",
             "cve": "CVE-2021-33503",
@@ -90423,16 +93482,6 @@
             ],
             "v": "<0.15.2"
         },
-        {
-            "advisory": "Omegaml 0.15.2 updates its dependency 'numpy' to v1.22.2 to include security fixes.\r\nhttps://github.com/omegaml/omegaml/pull/273",
-            "cve": "CVE-2021-41495",
-            "id": "pyup.io-52212",
-            "more_info_path": "/vulnerabilities/CVE-2021-41495/52212",
-            "specs": [
-                "<0.15.2"
-            ],
-            "v": "<0.15.2"
-        },
         {
             "advisory": "Omegaml 0.15.2 updates its dependency 'psutil' to v5.6.7 to include a security fix.\r\nhttps://github.com/omegaml/omegaml/pull/273",
             "cve": "CVE-2019-18874",
@@ -90623,6 +93672,16 @@
             ],
             "v": "<0.15.2"
         },
+        {
+            "advisory": "Omegaml 0.15.2 updates its dependency 'numpy' to v1.22.2 to include security fixes.\r\nhttps://github.com/omegaml/omegaml/pull/273",
+            "cve": "CVE-2021-33430",
+            "id": "pyup.io-52214",
+            "more_info_path": "/vulnerabilities/CVE-2021-33430/52214",
+            "specs": [
+                "<0.15.2"
+            ],
+            "v": "<0.15.2"
+        },
         {
             "advisory": "Omegaml 0.15.2 updates its dependency 'pillow' to v9.0.1 to include security fixes.\r\nhttps://github.com/omegaml/omegaml/pull/273",
             "cve": "CVE-2020-10994",
@@ -90763,6 +93822,16 @@
             ],
             "v": "<0.15.2"
         },
+        {
+            "advisory": "Omegaml 0.15.2 updates its dependency 'numpy' to v1.22.2 to include security fixes.\r\nhttps://github.com/omegaml/omegaml/pull/273",
+            "cve": "CVE-2021-41495",
+            "id": "pyup.io-52212",
+            "more_info_path": "/vulnerabilities/CVE-2021-41495/52212",
+            "specs": [
+                "<0.15.2"
+            ],
+            "v": "<0.15.2"
+        },
         {
             "advisory": "Omegaml 0.15.2 updates 'tensorflow' in the docker image to v2.10.0rc3 to include several security fixes.\r\nhttps://github.com/omegaml/omegaml/pull/248",
             "cve": "CVE-2022-27778",
@@ -91131,6 +94200,16 @@
         }
     ],
     "onionshare-cli": [
+        {
+            "advisory": "hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.",
+            "cve": "CVE-2016-5026",
+            "id": "pyup.io-70522",
+            "more_info_path": "/vulnerabilities/CVE-2016-5026/70522",
+            "specs": [
+                "<0.9.1"
+            ],
+            "v": "<0.9.1"
+        },
         {
             "advisory": "The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname.",
             "cve": "CVE-2018-19960",
@@ -91275,6 +94354,16 @@
             ],
             "v": "<1.13.0"
         },
+        {
+            "advisory": "Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.",
+            "cve": "CVE-2024-27319",
+            "id": "pyup.io-69618",
+            "more_info_path": "/vulnerabilities/CVE-2024-27319/69618",
+            "specs": [
+                "<=1.15.0"
+            ],
+            "v": "<=1.15.0"
+        },
         {
             "advisory": "Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for CVE-2022-25882. See CVE-2024-27318.",
             "cve": "CVE-2024-27318",
@@ -91288,20 +94377,20 @@
     ],
     "onnxruntime": [
         {
-            "advisory": "Onnxruntime 1.13.1 updates 'onnx' to v1.12.1 to fix a vulnerability that allows reading of tensor_data outside the model directory.\r\nhttps://github.com/microsoft/onnxruntime/pull/12915",
-            "cve": "CVE-2022-25882",
-            "id": "pyup.io-53234",
-            "more_info_path": "/vulnerabilities/CVE-2022-25882/53234",
+            "advisory": "Onnxruntime 1.13.1 updates 'protobuf' to v3.18.3 to include a security fix.",
+            "cve": "CVE-2022-1941",
+            "id": "pyup.io-53249",
+            "more_info_path": "/vulnerabilities/CVE-2022-1941/53249",
             "specs": [
                 "<1.13.1"
             ],
             "v": "<1.13.1"
         },
         {
-            "advisory": "Onnxruntime 1.13.1 updates 'protobuf' to v3.18.3 to include a security fix.",
-            "cve": "CVE-2022-1941",
-            "id": "pyup.io-53249",
-            "more_info_path": "/vulnerabilities/CVE-2022-1941/53249",
+            "advisory": "Onnxruntime 1.13.1 updates 'onnx' to v1.12.1 to fix a vulnerability that allows reading of tensor_data outside the model directory.\r\nhttps://github.com/microsoft/onnxruntime/pull/12915",
+            "cve": "CVE-2022-25882",
+            "id": "pyup.io-53234",
+            "more_info_path": "/vulnerabilities/CVE-2022-25882/53234",
             "specs": [
                 "<1.13.1"
             ],
@@ -91697,16 +94786,6 @@
         }
     ],
     "openbb": [
-        {
-            "advisory": "Openbb 2.3.0 updates its dependency 'gitpython' to v3.1.30 to include a security fix.",
-            "cve": "CVE-2022-24439",
-            "id": "pyup.io-53331",
-            "more_info_path": "/vulnerabilities/CVE-2022-24439/53331",
-            "specs": [
-                "<2.3.0"
-            ],
-            "v": "<2.3.0"
-        },
         {
             "advisory": "Openbb 2.3.0 updates its dependency 'cryptography' to v39.0.0 to include security fixes.",
             "cve": "CVE-2022-3602",
@@ -91728,20 +94807,30 @@
             "v": "<2.3.0"
         },
         {
-            "advisory": "Openbb 2.3.0 updates its dependency 'future' to v0.18.3 to include a security fix.",
-            "cve": "CVE-2022-40899",
-            "id": "pyup.io-53330",
-            "more_info_path": "/vulnerabilities/CVE-2022-40899/53330",
+            "advisory": "Openbb 2.3.0 updates its dependency 'cryptography' to v39.0.0 to include security fixes.",
+            "cve": "CVE-2022-3786",
+            "id": "pyup.io-53328",
+            "more_info_path": "/vulnerabilities/CVE-2022-3786/53328",
             "specs": [
                 "<2.3.0"
             ],
             "v": "<2.3.0"
         },
         {
-            "advisory": "Openbb 2.3.0 updates its dependency 'cryptography' to v39.0.0 to include security fixes.",
-            "cve": "CVE-2022-3786",
-            "id": "pyup.io-53328",
-            "more_info_path": "/vulnerabilities/CVE-2022-3786/53328",
+            "advisory": "Openbb 2.3.0 updates its dependency 'gitpython' to v3.1.30 to include a security fix.",
+            "cve": "CVE-2022-24439",
+            "id": "pyup.io-53331",
+            "more_info_path": "/vulnerabilities/CVE-2022-24439/53331",
+            "specs": [
+                "<2.3.0"
+            ],
+            "v": "<2.3.0"
+        },
+        {
+            "advisory": "Openbb 2.3.0 updates its dependency 'future' to v0.18.3 to include a security fix.",
+            "cve": "CVE-2022-40899",
+            "id": "pyup.io-53330",
+            "more_info_path": "/vulnerabilities/CVE-2022-40899/53330",
             "specs": [
                 "<2.3.0"
             ],
@@ -92193,6 +95282,16 @@
             ],
             "v": "<4.7.0"
         },
+        {
+            "advisory": "The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely.\r\nhttps://github.com/opencv/opencv_contrib/pull/3480",
+            "cve": "CVE-2023-2617",
+            "id": "pyup.io-63406",
+            "more_info_path": "/vulnerabilities/CVE-2023-2617/63406",
+            "specs": [
+                "<= 4.7.0"
+            ],
+            "v": "<= 4.7.0"
+        },
         {
             "advisory": "In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects OpenCV 3.3 (corresponding to OpenCV-Python 3.3.0.9) and earlier.",
             "cve": "CVE-2017-12862",
@@ -92323,16 +95422,6 @@
             ],
             "v": ">=3.4.9.31,<4.8.1.78"
         },
-        {
-            "advisory": "The OpenCV wechat_qrcode module, versions up to 4.7.0, contains a critical vulnerability affecting the DecodedBitStreamParser::decodeByteSegment function in the qrcode/decoder/decoded_bit_stream_parser.cpp file. This vulnerability, if exploited, could lead to a null pointer dereference. Attackers can potentially launch this attack remotely.\r\nhttps://github.com/opencv/opencv_contrib/pull/3480",
-            "cve": "CVE-2023-2617",
-            "id": "pyup.io-63406",
-            "more_info_path": "/vulnerabilities/CVE-2023-2617/63406",
-            "specs": [
-                ">=4.0.0,<=4.7.0"
-            ],
-            "v": ">=4.0.0,<=4.7.0"
-        },
         {
             "advisory": "Opencv-python 4.1.1.26 and 3.4.7.28 include a fix for CVE-2019-14491: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.",
             "cve": "CVE-2019-14491",
@@ -92412,20 +95501,20 @@
     ],
     "opendp": [
         {
-            "advisory": "Opendp 0.5.0 replaces the underlying implementation of 'make_base_laplace' and 'make_base_gaussian' to address precision-based attacks.\r\nhttps://github.com/opendp/opendp/commit/fb03d511f530c23e5fb48cd50df331d142dbef52\r\nhttps://tpdp.journalprivacyconfidentiality.org/2022/papers/HaneyDHSH22.pdf",
-            "cve": "PVE-2022-50753",
-            "id": "pyup.io-50753",
-            "more_info_path": "/vulnerabilities/PVE-2022-50753/50753",
+            "advisory": "Opendp 0.5.0 hardens samplers to handle some privacy violation cases.\r\nhttps://github.com/opendp/opendp/pull/481",
+            "cve": "PVE-2022-50829",
+            "id": "pyup.io-50829",
+            "more_info_path": "/vulnerabilities/PVE-2022-50829/50829",
             "specs": [
                 "<0.5.0"
             ],
             "v": "<0.5.0"
         },
         {
-            "advisory": "Opendp 0.5.0 hardens samplers to handle some privacy violation cases.\r\nhttps://github.com/opendp/opendp/pull/481",
-            "cve": "PVE-2022-50829",
-            "id": "pyup.io-50829",
-            "more_info_path": "/vulnerabilities/PVE-2022-50829/50829",
+            "advisory": "Opendp 0.5.0 replaces the underlying implementation of 'make_base_laplace' and 'make_base_gaussian' to address precision-based attacks.\r\nhttps://github.com/opendp/opendp/commit/fb03d511f530c23e5fb48cd50df331d142dbef52\r\nhttps://tpdp.journalprivacyconfidentiality.org/2022/papers/HaneyDHSH22.pdf",
+            "cve": "PVE-2022-50753",
+            "id": "pyup.io-50753",
+            "more_info_path": "/vulnerabilities/PVE-2022-50753/50753",
             "specs": [
                 "<0.5.0"
             ],
@@ -92468,6 +95557,18 @@
             "v": "<0.0.2"
         }
     ],
+    "openimis-be-api-fhir-r4": [
+        {
+            "advisory": "Openimis-be-api-fhir-r4 version 23.10 has upgraded its aiohttp library from version 3.8.1 to 3.8.5 to address security vulnerabilities and ensure compatibility as noted in CVE-2023-47627.",
+            "cve": "CVE-2023-47627",
+            "id": "pyup.io-70569",
+            "more_info_path": "/vulnerabilities/CVE-2023-47627/70569",
+            "specs": [
+                "<23.10"
+            ],
+            "v": "<23.10"
+        }
+    ],
     "openpyxl": [
         {
             "advisory": "Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.",
@@ -92620,6 +95721,36 @@
                 "<20.0.0"
             ],
             "v": "<20.0.0"
+        },
+        {
+            "advisory": "OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.",
+            "cve": "CVE-2014-3801",
+            "id": "pyup.io-70481",
+            "more_info_path": "/vulnerabilities/CVE-2014-3801/70481",
+            "specs": [
+                "<5.0.0a0"
+            ],
+            "v": "<5.0.0a0"
+        },
+        {
+            "advisory": "The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenant_id in the request path.",
+            "cve": "CVE-2013-6428",
+            "id": "pyup.io-67977",
+            "more_info_path": "/vulnerabilities/CVE-2013-6428/67977",
+            "specs": [
+                ">=2013,<2013.2.1"
+            ],
+            "v": ">=2013,<2013.2.1"
+        },
+        {
+            "advisory": "The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and (1) create a stack via the CreateStack method or (2) update a stack via the UpdateStack method.",
+            "cve": "CVE-2013-6426",
+            "id": "pyup.io-67978",
+            "more_info_path": "/vulnerabilities/CVE-2013-6426/67978",
+            "specs": [
+                ">=2013,<2013.2.1"
+            ],
+            "v": ">=2013,<2013.2.1"
         }
     ],
     "openstack-keystone": [
@@ -95808,6 +98939,18 @@
             "v": ">=1.2.85,<=1.2.178"
         }
     ],
+    "openvpn-ldap-auth": [
+        {
+            "advisory": "Openvpn-ldap-auth version 0.1.7 updates its dependencies to include pytest version 4.3.0 or higher to address a known security vulnerability.",
+            "cve": "PVE-2024-67455",
+            "id": "pyup.io-67455",
+            "more_info_path": "/vulnerabilities/PVE-2024-67455/67455",
+            "specs": [
+                "<0.1.7"
+            ],
+            "v": "<0.1.7"
+        }
+    ],
     "openvpn-monitor": [
         {
             "advisory": "Openvpn-monitor throughout 1.1.3 is affected by CVE-2021-31606: Authorization Bypass to disconnect arbitrary clients.\r\nA fix is available in openvpn-monitor GH repository.\r\nhttps://github.com/furlongm/openvpn-monitor/commit/ddb9d31ef0ec56f578bdacf99ebe9d68455ed8ca",
@@ -96102,6 +99245,18 @@
             "v": "<1.3.1"
         }
     ],
+    "orjson": [
+        {
+            "advisory": "orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.",
+            "cve": "CVE-2024-27454",
+            "id": "pyup.io-67584",
+            "more_info_path": "/vulnerabilities/CVE-2024-27454/67584",
+            "specs": [
+                "<=3.9.15"
+            ],
+            "v": "<=3.9.15"
+        }
+    ],
     "ormar": [
         {
             "advisory": "Ormar 0.10.9 updates the 'pydantic' library to fix a security vulnerability (CVE-2021-29510).",
@@ -96248,6 +99403,18 @@
             "v": "<3.8.1,>=3.9.0,<3.19.1,>=3.20.0,<3.23.1"
         }
     ],
+    "ostorlab": [
+        {
+            "advisory": "Ostorlab version 1.0.5 updates its base image to python:3.10.14-alpine3.19 from python:3.9-bullseye to address vulnerabilities, enhancing the security and reliability of the docker environment.",
+            "cve": "PVE-2024-67449",
+            "id": "pyup.io-67449",
+            "more_info_path": "/vulnerabilities/PVE-2024-67449/67449",
+            "specs": [
+                "<1.0.5"
+            ],
+            "v": "<1.0.5"
+        }
+    ],
     "osxcollector": [
         {
             "advisory": "An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute.",
@@ -96383,6 +99550,36 @@
                 "==3.5.0.4"
             ],
             "v": "<3.4.0.7,==3.5.0.4"
+        },
+        {
+            "advisory": "The REST API in overt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page.",
+            "cve": "CVE-2014-0153",
+            "id": "pyup.io-67963",
+            "more_info_path": "/vulnerabilities/CVE-2014-0153/67963",
+            "specs": [
+                "<=3.4.0"
+            ],
+            "v": "<=3.4.0"
+        },
+        {
+            "advisory": "Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.",
+            "cve": "CVE-2014-0152",
+            "id": "pyup.io-70433",
+            "more_info_path": "/vulnerabilities/CVE-2014-0152/70433",
+            "specs": [
+                "<=3.4.0"
+            ],
+            "v": "<=3.4.0"
+        },
+        {
+            "advisory": "oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.",
+            "cve": "CVE-2016-6341",
+            "id": "pyup.io-70526",
+            "more_info_path": "/vulnerabilities/CVE-2016-6341/70526",
+            "specs": [
+                "<=4.0.2"
+            ],
+            "v": "<=4.0.2"
         }
     ],
     "ovs": [
@@ -96494,6 +99691,18 @@
             "v": "==0.24.1"
         }
     ],
+    "ozi": [
+        {
+            "advisory": "Ozi version 0.0.302 updates its dependency on Black to version 24.3 or higher. This adjustment is made to address the ReDoS (Regular Expression Denial of Service) vulnerability identified in CVE-2024-21503.",
+            "cve": "CVE-2024-21503",
+            "id": "pyup.io-67005",
+            "more_info_path": "/vulnerabilities/CVE-2024-21503/67005",
+            "specs": [
+                "<0.0.302"
+            ],
+            "v": "<0.0.302"
+        }
+    ],
     "packstack": [
         {
             "advisory": "Packstack 2012.2.3 includes a fix for CVE-2013-0261: (1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.\r\nhttps://opendev.org/x/packstack/commit/624d49a0e8305e6613a9637437f7cdfb8a7852e9",
@@ -96560,20 +99769,20 @@
             "v": "<1.3.7"
         },
         {
-            "advisory": "Pact-python 1.7.0 updates its dependency 'wheel' to v0.38.0 to include a security fix.",
-            "cve": "CVE-2022-40898",
-            "id": "pyup.io-53382",
-            "more_info_path": "/vulnerabilities/CVE-2022-40898/53382",
+            "advisory": "Pact-python 1.7.0 includes a fix for CVE-2007-4559: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
+            "cve": "CVE-2007-4559",
+            "id": "pyup.io-53381",
+            "more_info_path": "/vulnerabilities/CVE-2007-4559/53381",
             "specs": [
                 "<1.7.0"
             ],
             "v": "<1.7.0"
         },
         {
-            "advisory": "Pact-python 1.7.0 includes a fix for CVE-2007-4559: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
-            "cve": "CVE-2007-4559",
-            "id": "pyup.io-53381",
-            "more_info_path": "/vulnerabilities/CVE-2007-4559/53381",
+            "advisory": "Pact-python 1.7.0 updates its dependency 'wheel' to v0.38.0 to include a security fix.",
+            "cve": "CVE-2022-40898",
+            "id": "pyup.io-53382",
+            "more_info_path": "/vulnerabilities/CVE-2022-40898/53382",
             "specs": [
                 "<1.7.0"
             ],
@@ -96623,6 +99832,16 @@
             ],
             "v": "<2.5.0"
         },
+        {
+            "advisory": "Code injection in `paddle.audio.functional.get_window` in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. A [patch](https://github.com/PaddlePaddle/Paddle/commit/26c419ca386aeae3c461faf2b828d00b48e908eb) is available on the `develop` branch of the repository and anticipated to be part of a 2.4 release.",
+            "cve": "CVE-2022-46742",
+            "id": "pyup.io-54595",
+            "more_info_path": "/vulnerabilities/CVE-2022-46742/54595",
+            "specs": [
+                "<2.5.0"
+            ],
+            "v": "<2.5.0"
+        },
         {
             "advisory": "FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service.",
             "cve": "CVE-2023-38672",
@@ -96654,14 +99873,134 @@
             "v": "<2.6.0"
         },
         {
-            "advisory": "Code injection in `paddle.audio.functional.get_window` in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. A [patch](https://github.com/PaddlePaddle/Paddle/commit/26c419ca386aeae3c461faf2b828d00b48e908eb) is available on the `develop` branch of the repository and anticipated to be part of a 2.4 release.",
-            "cve": "CVE-2022-46742",
-            "id": "pyup.io-54595",
-            "more_info_path": "/vulnerabilities/CVE-2022-46742/54595",
+            "advisory": "Nullptr in paddle.put_along_axis\u00a0in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-52303",
+            "id": "pyup.io-70390",
+            "more_info_path": "/vulnerabilities/CVE-2023-52303/70390",
             "specs": [
-                ">=0"
+                "<2.6.0"
             ],
-            "v": ">=0"
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "OOB access in paddle.mode\u00a0in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-38678",
+            "id": "pyup.io-70392",
+            "more_info_path": "/vulnerabilities/CVE-2023-38678/70392",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-38677",
+            "id": "pyup.io-70393",
+            "more_info_path": "/vulnerabilities/CVE-2023-38677/70393",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-38674",
+            "id": "pyup.io-70395",
+            "more_info_path": "/vulnerabilities/CVE-2023-38674/70395",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "FPE in paddle.argmin and paddle.argmax\u00a0in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-52313",
+            "id": "pyup.io-70383",
+            "more_info_path": "/vulnerabilities/CVE-2023-52313/70383",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "Nullptr dereference in paddle.crop\u00a0in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-52312",
+            "id": "pyup.io-70384",
+            "more_info_path": "/vulnerabilities/CVE-2023-52312/70384",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "Heap buffer overflow in paddle.repeat_interleave\u00a0in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.",
+            "cve": "CVE-2023-52309",
+            "id": "pyup.io-70385",
+            "more_info_path": "/vulnerabilities/CVE-2023-52309/70385",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "FPE in paddle.amin\u00a0in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-52308",
+            "id": "pyup.io-70386",
+            "more_info_path": "/vulnerabilities/CVE-2023-52308/70386",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "FPE in paddle.lerp\u00a0in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-52306",
+            "id": "pyup.io-70387",
+            "more_info_path": "/vulnerabilities/CVE-2023-52306/70387",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "FPE in paddle.topk\u00a0in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-52305",
+            "id": "pyup.io-70388",
+            "more_info_path": "/vulnerabilities/CVE-2023-52305/70388",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "Stack overflow in paddle.searchsorted\u00a0in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.",
+            "cve": "CVE-2023-52304",
+            "id": "pyup.io-70389",
+            "more_info_path": "/vulnerabilities/CVE-2023-52304/70389",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "Nullptr in paddle.nextafter\u00a0in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-52302",
+            "id": "pyup.io-70391",
+            "more_info_path": "/vulnerabilities/CVE-2023-52302/70391",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
+        },
+        {
+            "advisory": "Nullptr in paddle.dot\u00a0in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.",
+            "cve": "CVE-2023-38676",
+            "id": "pyup.io-70394",
+            "more_info_path": "/vulnerabilities/CVE-2023-38676/70394",
+            "specs": [
+                "<2.6.0"
+            ],
+            "v": "<2.6.0"
         },
         {
             "advisory": "In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.",
@@ -96821,16 +100160,6 @@
             ],
             "v": "<1.2.2"
         },
-        {
-            "advisory": "Palladium 1.2.2 updates its dependency 'numpy' to v1.17.0 to include a security fix.",
-            "cve": "CVE-2019-6446",
-            "id": "pyup.io-44628",
-            "more_info_path": "/vulnerabilities/CVE-2019-6446/44628",
-            "specs": [
-                "<1.2.2"
-            ],
-            "v": "<1.2.2"
-        },
         {
             "advisory": "Palladium 1.2.2 updates its dependency 'jinja2' to v2.10.1 to include a security fix.",
             "cve": "CVE-2019-10906",
@@ -96851,6 +100180,16 @@
             ],
             "v": "<1.2.2"
         },
+        {
+            "advisory": "Palladium 1.2.2 updates its dependency 'numpy' to v1.17.0 to include a security fix.",
+            "cve": "CVE-2019-6446",
+            "id": "pyup.io-44628",
+            "more_info_path": "/vulnerabilities/CVE-2019-6446/44628",
+            "specs": [
+                "<1.2.2"
+            ],
+            "v": "<1.2.2"
+        },
         {
             "advisory": "Palladium 1.2.2 updates its dependency 'urllib3' to v1.25.3 to include security fixes.",
             "cve": "CVE-2019-11324",
@@ -97084,6 +100423,58 @@
             "v": "<=0.8.0"
         }
     ],
+    "panther-analysis-tool": [
+        {
+            "advisory": "Panther-analysis-tool version 0.45.0 has updated its setuptools dependency to version 65.5.1 from 40.5.0, in response to the security vulnerability identified as CVE-2022-40897..",
+            "cve": "CVE-2022-40897",
+            "id": "pyup.io-67507",
+            "more_info_path": "/vulnerabilities/CVE-2022-40897/67507",
+            "specs": [
+                "<0.45.0"
+            ],
+            "v": "<0.45.0"
+        },
+        {
+            "advisory": "Panther-analysis-tool version 0.45.0 has upgraded its aiohttp library to version 3.9.2 from the previous 3.8.6, addressing security concerns highlighted by CVE-2024-23334",
+            "cve": "CVE-2024-23334",
+            "id": "pyup.io-67505",
+            "more_info_path": "/vulnerabilities/CVE-2024-23334/67505",
+            "specs": [
+                "<0.45.0"
+            ],
+            "v": "<0.45.0"
+        },
+        {
+            "advisory": "Panther-analysis-tool version 0.45.0 has upgraded its aiohttp library to version 3.9.2 from the previous 3.8.6, addressing security concerns highlighted by CVE-2023-49082.",
+            "cve": "CVE-2023-49082",
+            "id": "pyup.io-67486",
+            "more_info_path": "/vulnerabilities/CVE-2023-49082/67486",
+            "specs": [
+                "<0.45.0"
+            ],
+            "v": "<0.45.0"
+        },
+        {
+            "advisory": "Panther-analysis-tool version 0.45.0 has upgraded its aiohttp library to version 3.9.2 from the previous 3.8.6, addressing security concerns highlighted by CVE-2023-49081",
+            "cve": "CVE-2023-49081",
+            "id": "pyup.io-67504",
+            "more_info_path": "/vulnerabilities/CVE-2023-49081/67504",
+            "specs": [
+                "<0.45.0"
+            ],
+            "v": "<0.45.0"
+        },
+        {
+            "advisory": "Panther-analysis-tool version 0.45.0 has upgraded its aiohttp library to version 3.9.2 from the previous 3.8.6, addressing security concerns highlighted by CVE-2024-23829",
+            "cve": "CVE-2024-23829",
+            "id": "pyup.io-67506",
+            "more_info_path": "/vulnerabilities/CVE-2024-23829/67506",
+            "specs": [
+                "<0.45.0"
+            ],
+            "v": "<0.45.0"
+        }
+    ],
     "papermerge": [
         {
             "advisory": "Papermerge 1.5.5 includes a fix for a stored XSS vulnerability on tags.\r\nhttps://github.com/ciur/papermerge/issues/271",
@@ -97220,20 +100611,20 @@
             "v": "<1.7.2"
         },
         {
-            "advisory": "Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new \u201cstrict kex\u201d mode. For further details, refer to the official Paramiko documentation or GitHub repository.\r\nhttps://github.com/advisories/GHSA-45x7-px36-x8w8",
+            "advisory": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms.",
             "cve": "CVE-2023-48795",
-            "id": "pyup.io-63227",
-            "more_info_path": "/vulnerabilities/CVE-2023-48795/63227",
+            "id": "pyup.io-65193",
+            "more_info_path": "/vulnerabilities/CVE-2023-48795/65193",
             "specs": [
                 "<3.4.0"
             ],
             "v": "<3.4.0"
         },
         {
-            "advisory": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms.",
+            "advisory": "Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new \u201cstrict kex\u201d mode. For further details, refer to the official Paramiko documentation or GitHub repository.\r\nhttps://github.com/advisories/GHSA-45x7-px36-x8w8",
             "cve": "CVE-2023-48795",
-            "id": "pyup.io-65193",
-            "more_info_path": "/vulnerabilities/CVE-2023-48795/65193",
+            "id": "pyup.io-63227",
+            "more_info_path": "/vulnerabilities/CVE-2023-48795/63227",
             "specs": [
                 "<3.4.0"
             ],
@@ -97301,6 +100692,18 @@
             "v": "<2.0.0"
         }
     ],
+    "parso": [
+        {
+            "advisory": "A deserialization vulnerability has been identified in various versions of parso up to 0.4.0, stemming from how grammar parsing from the cache is handled. It involves the potential for arbitrary code execution if a maliciously crafted pickle file is written to a cache grammar file and subsequently parsed. It's important to note that exploitation of this vulnerability hinges on the attacker's ability to write to the cache directory, a scenario considered unlikely in common configurations.",
+            "cve": null,
+            "id": "pyup.io-69622",
+            "more_info_path": "/vulnerabilities/None/69622",
+            "specs": [
+                ">=0,<0.5.0"
+            ],
+            "v": ">=0,<0.5.0"
+        }
+    ],
     "parsons": [
         {
             "advisory": "Parsons 0.13.2 updates its dependency 'httplib2' from v0.12.0 to v0.18.0 to include a security fix.",
@@ -97650,26 +101053,6 @@
             ],
             "v": "<1.0.6"
         },
-        {
-            "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2021-28676",
-            "id": "pyup.io-49511",
-            "more_info_path": "/vulnerabilities/CVE-2021-28676/49511",
-            "specs": [
-                "<1.0.6"
-            ],
-            "v": "<1.0.6"
-        },
-        {
-            "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2021-25289",
-            "id": "pyup.io-49514",
-            "more_info_path": "/vulnerabilities/CVE-2021-25289/49514",
-            "specs": [
-                "<1.0.6"
-            ],
-            "v": "<1.0.6"
-        },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
             "cve": "CVE-2021-25290",
@@ -97732,9 +101115,9 @@
         },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2020-35653",
-            "id": "pyup.io-49520",
-            "more_info_path": "/vulnerabilities/CVE-2020-35653/49520",
+            "cve": "CVE-2021-28677",
+            "id": "pyup.io-49510",
+            "more_info_path": "/vulnerabilities/CVE-2021-28677/49510",
             "specs": [
                 "<1.0.6"
             ],
@@ -97742,9 +101125,9 @@
         },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2021-27922",
-            "id": "pyup.io-49442",
-            "more_info_path": "/vulnerabilities/CVE-2021-27922/49442",
+            "cve": "CVE-2020-35654",
+            "id": "pyup.io-49521",
+            "more_info_path": "/vulnerabilities/CVE-2020-35654/49521",
             "specs": [
                 "<1.0.6"
             ],
@@ -97762,9 +101145,9 @@
         },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2021-28678",
-            "id": "pyup.io-49509",
-            "more_info_path": "/vulnerabilities/CVE-2021-28678/49509",
+            "cve": "CVE-2021-27922",
+            "id": "pyup.io-49442",
+            "more_info_path": "/vulnerabilities/CVE-2021-27922/49442",
             "specs": [
                 "<1.0.6"
             ],
@@ -97772,9 +101155,9 @@
         },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2022-22816",
-            "id": "pyup.io-49506",
-            "more_info_path": "/vulnerabilities/CVE-2022-22816/49506",
+            "cve": "CVE-2020-35653",
+            "id": "pyup.io-49520",
+            "more_info_path": "/vulnerabilities/CVE-2020-35653/49520",
             "specs": [
                 "<1.0.6"
             ],
@@ -97782,9 +101165,9 @@
         },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2020-35654",
-            "id": "pyup.io-49521",
-            "more_info_path": "/vulnerabilities/CVE-2020-35654/49521",
+            "cve": "CVE-2021-28676",
+            "id": "pyup.io-49511",
+            "more_info_path": "/vulnerabilities/CVE-2021-28676/49511",
             "specs": [
                 "<1.0.6"
             ],
@@ -97792,9 +101175,9 @@
         },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2021-25293",
-            "id": "pyup.io-49518",
-            "more_info_path": "/vulnerabilities/CVE-2021-25293/49518",
+            "cve": "CVE-2021-28678",
+            "id": "pyup.io-49509",
+            "more_info_path": "/vulnerabilities/CVE-2021-28678/49509",
             "specs": [
                 "<1.0.6"
             ],
@@ -97802,9 +101185,9 @@
         },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2021-28677",
-            "id": "pyup.io-49510",
-            "more_info_path": "/vulnerabilities/CVE-2021-28677/49510",
+            "cve": "CVE-2021-25289",
+            "id": "pyup.io-49514",
+            "more_info_path": "/vulnerabilities/CVE-2021-25289/49514",
             "specs": [
                 "<1.0.6"
             ],
@@ -97812,9 +101195,9 @@
         },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2021-25287",
-            "id": "pyup.io-49512",
-            "more_info_path": "/vulnerabilities/CVE-2021-25287/49512",
+            "cve": "CVE-2022-22816",
+            "id": "pyup.io-49506",
+            "more_info_path": "/vulnerabilities/CVE-2022-22816/49506",
             "specs": [
                 "<1.0.6"
             ],
@@ -97822,9 +101205,19 @@
         },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2021-27923",
-            "id": "pyup.io-49525",
-            "more_info_path": "/vulnerabilities/CVE-2021-27923/49525",
+            "cve": "CVE-2021-25293",
+            "id": "pyup.io-49518",
+            "more_info_path": "/vulnerabilities/CVE-2021-25293/49518",
+            "specs": [
+                "<1.0.6"
+            ],
+            "v": "<1.0.6"
+        },
+        {
+            "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
+            "cve": "CVE-2021-25287",
+            "id": "pyup.io-49512",
+            "more_info_path": "/vulnerabilities/CVE-2021-25287/49512",
             "specs": [
                 "<1.0.6"
             ],
@@ -97842,9 +101235,9 @@
         },
         {
             "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
-            "cve": "CVE-2021-34552",
-            "id": "pyup.io-49508",
-            "more_info_path": "/vulnerabilities/CVE-2021-34552/49508",
+            "cve": "CVE-2021-27923",
+            "id": "pyup.io-49525",
+            "more_info_path": "/vulnerabilities/CVE-2021-27923/49525",
             "specs": [
                 "<1.0.6"
             ],
@@ -97860,6 +101253,16 @@
             ],
             "v": "<1.0.6"
         },
+        {
+            "advisory": "Pdfcropmargins 1.0.6 updates its dependency 'pillow' requirement to '>=9.0.0' to include security fixes.",
+            "cve": "CVE-2021-34552",
+            "id": "pyup.io-49508",
+            "more_info_path": "/vulnerabilities/CVE-2021-34552/49508",
+            "specs": [
+                "<1.0.6"
+            ],
+            "v": "<1.0.6"
+        },
         {
             "advisory": "Pdfcropmargins 1.1.1 updates its dependency 'pillow' requirement to \">=9.3.0\" to include security fixes.",
             "cve": "CVE-2022-30595",
@@ -97906,9 +101309,9 @@
     "pdfreader": [
         {
             "advisory": "Pdfreader 0.1.6 updates its dependency 'pillow' to a version >= 7.1.0 to include security fixes.",
-            "cve": "CVE-2020-10379",
-            "id": "pyup.io-39314",
-            "more_info_path": "/vulnerabilities/CVE-2020-10379/39314",
+            "cve": "CVE-2020-10378",
+            "id": "pyup.io-43477",
+            "more_info_path": "/vulnerabilities/CVE-2020-10378/43477",
             "specs": [
                 "<0.1.6"
             ],
@@ -97916,9 +101319,9 @@
         },
         {
             "advisory": "Pdfreader 0.1.6 updates its dependency 'pillow' to a version >= 7.1.0 to include security fixes.",
-            "cve": "CVE-2020-11538",
-            "id": "pyup.io-43475",
-            "more_info_path": "/vulnerabilities/CVE-2020-11538/43475",
+            "cve": "CVE-2020-10994",
+            "id": "pyup.io-43476",
+            "more_info_path": "/vulnerabilities/CVE-2020-10994/43476",
             "specs": [
                 "<0.1.6"
             ],
@@ -97926,9 +101329,9 @@
         },
         {
             "advisory": "Pdfreader 0.1.6 updates its dependency 'pillow' to a version >= 7.1.0 to include security fixes.",
-            "cve": "CVE-2020-10994",
-            "id": "pyup.io-43476",
-            "more_info_path": "/vulnerabilities/CVE-2020-10994/43476",
+            "cve": "CVE-2020-10379",
+            "id": "pyup.io-39314",
+            "more_info_path": "/vulnerabilities/CVE-2020-10379/39314",
             "specs": [
                 "<0.1.6"
             ],
@@ -97936,9 +101339,9 @@
         },
         {
             "advisory": "Pdfreader 0.1.6 updates its dependency 'pillow' to a version >= 7.1.0 to include security fixes.",
-            "cve": "CVE-2020-10378",
-            "id": "pyup.io-43477",
-            "more_info_path": "/vulnerabilities/CVE-2020-10378/43477",
+            "cve": "CVE-2020-11538",
+            "id": "pyup.io-43475",
+            "more_info_path": "/vulnerabilities/CVE-2020-11538/43475",
             "specs": [
                 "<0.1.6"
             ],
@@ -98481,6 +101884,18 @@
             "v": ">=0,<1.0.6"
         }
     ],
+    "phone-gen": [
+        {
+            "advisory": "Phone-gen version 2.4.4 addresses a security issue where the Black library was vulnerable to Regular Expression Denial of Service (ReDoS), as identified in CVE-2024-21503.",
+            "cve": "CVE-2024-21503",
+            "id": "pyup.io-68048",
+            "more_info_path": "/vulnerabilities/CVE-2024-21503/68048",
+            "specs": [
+                "<2.4.4"
+            ],
+            "v": "<2.4.4"
+        }
+    ],
     "phonenumbers": [
         {
             "advisory": "Phonenumbers 8.3.1 contains a security improvement of the getNationalSignificantNumber function to make it more robust against malicious input.",
@@ -98926,6 +102341,16 @@
             ],
             "v": "<10.2.0"
         },
+        {
+            "advisory": "Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.",
+            "cve": "CVE-2024-28219",
+            "id": "pyup.io-67136",
+            "more_info_path": "/vulnerabilities/CVE-2024-28219/67136",
+            "specs": [
+                "<10.3.0"
+            ],
+            "v": "<10.3.0"
+        },
         {
             "advisory": "pillow before 2.3.1 makes insecure use of tempfile.mktemp (CVE-2014-1932).",
             "cve": "CVE-2014-1932",
@@ -98997,16 +102422,6 @@
             ],
             "v": "<3.1.1"
         },
-        {
-            "advisory": "Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.",
-            "cve": "CVE-2016-0775",
-            "id": "pyup.io-33135",
-            "more_info_path": "/vulnerabilities/CVE-2016-0775/33135",
-            "specs": [
-                "<3.1.1"
-            ],
-            "v": "<3.1.1"
-        },
         {
             "advisory": "Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.",
             "cve": "CVE-2016-2533",
@@ -99027,6 +102442,16 @@
             ],
             "v": "<3.1.1"
         },
+        {
+            "advisory": "Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.",
+            "cve": "CVE-2016-0775",
+            "id": "pyup.io-33135",
+            "more_info_path": "/vulnerabilities/CVE-2016-0775/33135",
+            "specs": [
+                "<3.1.1"
+            ],
+            "v": "<3.1.1"
+        },
         {
             "advisory": "pillow before 3.1.2 is vulnerable to an integer overflow in Jpeg2KEncode.c causing a buffer overflow. CVE-2016-3076.",
             "cve": "CVE-2016-3076",
@@ -99068,10 +102493,10 @@
             "v": "<6.2.0"
         },
         {
-            "advisory": "libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.",
-            "cve": "CVE-2020-5310",
-            "id": "pyup.io-37779",
-            "more_info_path": "/vulnerabilities/CVE-2020-5310/37779",
+            "advisory": "There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer.",
+            "cve": "CVE-2019-19911",
+            "id": "pyup.io-37772",
+            "more_info_path": "/vulnerabilities/CVE-2019-19911/37772",
             "specs": [
                 "<6.2.2"
             ],
@@ -99087,6 +102512,16 @@
             ],
             "v": "<6.2.2"
         },
+        {
+            "advisory": "libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.",
+            "cve": "CVE-2020-5310",
+            "id": "pyup.io-37779",
+            "more_info_path": "/vulnerabilities/CVE-2020-5310/37779",
+            "specs": [
+                "<6.2.2"
+            ],
+            "v": "<6.2.2"
+        },
         {
             "advisory": "libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.",
             "cve": "CVE-2020-5312",
@@ -99108,20 +102543,10 @@
             "v": "<6.2.2"
         },
         {
-            "advisory": "There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer.",
-            "cve": "CVE-2019-19911",
-            "id": "pyup.io-37772",
-            "more_info_path": "/vulnerabilities/CVE-2019-19911/37772",
-            "specs": [
-                "<6.2.2"
-            ],
-            "v": "<6.2.2"
-        },
-        {
-            "advisory": "In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.",
-            "cve": "CVE-2020-10994",
-            "id": "pyup.io-38451",
-            "more_info_path": "/vulnerabilities/CVE-2020-10994/38451",
+            "advisory": "In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.",
+            "cve": "CVE-2020-10379",
+            "id": "pyup.io-38450",
+            "more_info_path": "/vulnerabilities/CVE-2020-10379/38450",
             "specs": [
                 "<7.1.0"
             ],
@@ -99148,10 +102573,10 @@
             "v": "<7.1.0"
         },
         {
-            "advisory": "In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.",
-            "cve": "CVE-2020-10379",
-            "id": "pyup.io-38450",
-            "more_info_path": "/vulnerabilities/CVE-2020-10379/38450",
+            "advisory": "In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.",
+            "cve": "CVE-2020-10994",
+            "id": "pyup.io-38451",
+            "more_info_path": "/vulnerabilities/CVE-2020-10994/38451",
             "specs": [
                 "<7.1.0"
             ],
@@ -99197,6 +102622,16 @@
             ],
             "v": "<8.1.0"
         },
+        {
+            "advisory": "Pillow 8.1.1 includes a fix for CVE-2021-25289: TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654.\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
+            "cve": "CVE-2021-25289",
+            "id": "pyup.io-40274",
+            "more_info_path": "/vulnerabilities/CVE-2021-25289/40274",
+            "specs": [
+                "<8.1.1"
+            ],
+            "v": "<8.1.1"
+        },
         {
             "advisory": "Pillow 8.1.1 includes a fix for CVE-2021-25291: In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries.\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
             "cve": "CVE-2021-25291",
@@ -99218,10 +102653,10 @@
             "v": "<8.1.1"
         },
         {
-            "advisory": "Pillow 8.1.1 includes a fix for CVE-2021-25289: TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654.\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
-            "cve": "CVE-2021-25289",
-            "id": "pyup.io-40274",
-            "more_info_path": "/vulnerabilities/CVE-2021-25289/40274",
+            "advisory": "Pillow 8.1.1 includes a fix for CVE-2021-25290: In TiffDecode.c, there is a negative-offset memcpy with an invalid size.\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
+            "cve": "CVE-2021-25290",
+            "id": "pyup.io-40275",
+            "more_info_path": "/vulnerabilities/CVE-2021-25290/40275",
             "specs": [
                 "<8.1.1"
             ],
@@ -99258,14 +102693,24 @@
             "v": "<8.1.1"
         },
         {
-            "advisory": "Pillow 8.1.1 includes a fix for CVE-2021-25290: In TiffDecode.c, there is a negative-offset memcpy with an invalid size.\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
-            "cve": "CVE-2021-25290",
-            "id": "pyup.io-40275",
-            "more_info_path": "/vulnerabilities/CVE-2021-25290/40275",
+            "advisory": "Pillow version 8.2.0 includes a fix for CVE-2021-28676: For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load.\r\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/\r\nhttps://github.com/python-pillow/Pillow/pull/5377\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28676-fix-fli-dos",
+            "cve": "CVE-2021-28676",
+            "id": "pyup.io-40594",
+            "more_info_path": "/vulnerabilities/CVE-2021-28676/40594",
             "specs": [
-                "<8.1.1"
+                "<8.2.0"
             ],
-            "v": "<8.1.1"
+            "v": "<8.2.0"
+        },
+        {
+            "advisory": "Pillow version 8.2.0 includes a fix for CVE-2021-28678: For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.\r\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/\r\nhttps://github.com/python-pillow/Pillow/pull/5377\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28678-fix-blp-dos",
+            "cve": "CVE-2021-28678",
+            "id": "pyup.io-40596",
+            "more_info_path": "/vulnerabilities/CVE-2021-28678/40596",
+            "specs": [
+                "<8.2.0"
+            ],
+            "v": "<8.2.0"
         },
         {
             "advisory": "Pillow 8.2.0 includes a fix for CVE-2021-25288: There is an out-of-bounds read in J2kDecode, in j2ku_gray_i.\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-25287-cve-2021-25288-fix-oob-read-in-jpeg2kdecode",
@@ -99287,16 +102732,6 @@
             ],
             "v": "<8.2.0"
         },
-        {
-            "advisory": "Pillow version 8.2.0 includes a fix for CVE-2021-28676: For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load.\r\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/\r\nhttps://github.com/python-pillow/Pillow/pull/5377\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28676-fix-fli-dos",
-            "cve": "CVE-2021-28676",
-            "id": "pyup.io-40594",
-            "more_info_path": "/vulnerabilities/CVE-2021-28676/40594",
-            "specs": [
-                "<8.2.0"
-            ],
-            "v": "<8.2.0"
-        },
         {
             "advisory": "Pillow version 8.2.0 includes a fix for CVE-2021-28677: For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \\r and \\n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.\r\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/\r\nhttps://github.com/python-pillow/Pillow/pull/5377\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28677-fix-eps-dos-on-open",
             "cve": "CVE-2021-28677",
@@ -99307,16 +102742,6 @@
             ],
             "v": "<8.2.0"
         },
-        {
-            "advisory": "Pillow version 8.2.0 includes a fix for CVE-2021-28678: For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.\r\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/\r\nhttps://github.com/python-pillow/Pillow/pull/5377\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28678-fix-blp-dos",
-            "cve": "CVE-2021-28678",
-            "id": "pyup.io-40596",
-            "more_info_path": "/vulnerabilities/CVE-2021-28678/40596",
-            "specs": [
-                "<8.2.0"
-            ],
-            "v": "<8.2.0"
-        },
         {
             "advisory": "Pillow 8.3.0 includes a fix for CVE-2021-34552: Pillow through 8.2.0 and PIL (also known as Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/8.3.0.html#buffer-overflow\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/index.html",
             "cve": "CVE-2021-34552",
@@ -99327,16 +102752,6 @@
             ],
             "v": "<8.3.0"
         },
-        {
-            "advisory": "Pillow 9.0.0 excludes carriage return in PDF regex to help prevent ReDoS.\r\nhttps://github.com/python-pillow/Pillow/pull/5912\r\nhttps://github.com/python-pillow/Pillow/commit/43b800d933c996226e4d7df00c33fcbe46d97363",
-            "cve": "PVE-2021-44525",
-            "id": "pyup.io-44525",
-            "more_info_path": "/vulnerabilities/PVE-2021-44525/44525",
-            "specs": [
-                "<9.0.0"
-            ],
-            "v": "<9.0.0"
-        },
         {
             "advisory": "Pillow 9.0.0 ensures JpegImagePlugin stops at the end of a truncated file to avoid Denial of Service attacks.\r\nhttps://github.com/python-pillow/Pillow/pull/5921\r\nhttps://github.com/advisories/GHSA-4fx9-vc88-q2xc",
             "cve": "PVE-2022-44524",
@@ -99348,10 +102763,10 @@
             "v": "<9.0.0"
         },
         {
-            "advisory": "Pillow 9.0.0 includes a fix for CVE-2022-22815: path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fixed-imagepath-path-array-handling",
-            "cve": "CVE-2022-22815",
-            "id": "pyup.io-44485",
-            "more_info_path": "/vulnerabilities/CVE-2022-22815/44485",
+            "advisory": "Pillow 9.0.0 excludes carriage return in PDF regex to help prevent ReDoS.\r\nhttps://github.com/python-pillow/Pillow/pull/5912\r\nhttps://github.com/python-pillow/Pillow/commit/43b800d933c996226e4d7df00c33fcbe46d97363",
+            "cve": "PVE-2021-44525",
+            "id": "pyup.io-44525",
+            "more_info_path": "/vulnerabilities/PVE-2021-44525/44525",
             "specs": [
                 "<9.0.0"
             ],
@@ -99367,6 +102782,16 @@
             ],
             "v": "<9.0.0"
         },
+        {
+            "advisory": "Pillow 9.0.0 includes a fix for CVE-2022-22815: path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.\r\nhttps://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fixed-imagepath-path-array-handling",
+            "cve": "CVE-2022-22815",
+            "id": "pyup.io-44485",
+            "more_info_path": "/vulnerabilities/CVE-2022-22815/44485",
+            "specs": [
+                "<9.0.0"
+            ],
+            "v": "<9.0.0"
+        },
         {
             "advisory": "Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.",
             "cve": "CVE-2022-24303",
@@ -99387,6 +102812,16 @@
             ],
             "v": "<9.0.1"
         },
+        {
+            "advisory": "Pillow 9.1.1 addresses the CVE-2022-30595: libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.",
+            "cve": "CVE-2022-30595",
+            "id": "pyup.io-67137",
+            "more_info_path": "/vulnerabilities/CVE-2022-30595/67137",
+            "specs": [
+                "<9.1.1"
+            ],
+            "v": "<9.1.1"
+        },
         {
             "advisory": "Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).",
             "cve": "CVE-2022-45198",
@@ -99407,6 +102842,16 @@
             ],
             "v": "<=7.0.0"
         },
+        {
+            "advisory": "Certain versions of Pillow are susceptible to a denial of service via memory consumption due to inadequate validation of the reported size of a contained image in a BLP container. This can result in attempts to allocate excessively large amounts of memory. To mitigate or avoid this vulnerability, users should consider updating to a newer version that addresses the issue or following any provided workarounds, such as avoiding the processing of specially crafted invalid image files that may trigger this condition. For additional details and potential updates, users may refer to the CVE-2021-27921 entry or contact the software maintainers through the provided channels.",
+            "cve": "PVE-2024-69615",
+            "id": "pyup.io-69615",
+            "more_info_path": "/vulnerabilities/PVE-2024-69615/69615",
+            "specs": [
+                ">=0,<8.1.2"
+            ],
+            "v": ">=0,<8.1.2"
+        },
         {
             "advisory": "An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a DoS on Image.open prior to Image.load.",
             "cve": "CVE-2021-28675",
@@ -99481,9 +102926,9 @@
     "pillow-heif": [
         {
             "advisory": "Pillow-heif 0.6.1 fixes HEIF decoder's CVEs.",
-            "cve": "CVE-2021-36411",
-            "id": "pyup.io-50717",
-            "more_info_path": "/vulnerabilities/CVE-2021-36411/50717",
+            "cve": "CVE-2022-1253",
+            "id": "pyup.io-50709",
+            "more_info_path": "/vulnerabilities/CVE-2022-1253/50709",
             "specs": [
                 "<0.6.1"
             ],
@@ -99491,9 +102936,9 @@
         },
         {
             "advisory": "Pillow-heif 0.6.1 fixes HEIF decoder's CVEs.",
-            "cve": "CVE-2021-36410",
-            "id": "pyup.io-50716",
-            "more_info_path": "/vulnerabilities/CVE-2021-36410/50716",
+            "cve": "CVE-2021-35452",
+            "id": "pyup.io-50718",
+            "more_info_path": "/vulnerabilities/CVE-2021-35452/50718",
             "specs": [
                 "<0.6.1"
             ],
@@ -99501,9 +102946,9 @@
         },
         {
             "advisory": "Pillow-heif 0.6.1 fixes HEIF decoder's CVEs.",
-            "cve": "CVE-2021-36408",
-            "id": "pyup.io-50715",
-            "more_info_path": "/vulnerabilities/CVE-2021-36408/50715",
+            "cve": "CVE-2021-36410",
+            "id": "pyup.io-50716",
+            "more_info_path": "/vulnerabilities/CVE-2021-36410/50716",
             "specs": [
                 "<0.6.1"
             ],
@@ -99511,9 +102956,9 @@
         },
         {
             "advisory": "Pillow-heif 0.6.1 fixes HEIF decoder's CVEs.",
-            "cve": "CVE-2022-1253",
-            "id": "pyup.io-50709",
-            "more_info_path": "/vulnerabilities/CVE-2022-1253/50709",
+            "cve": "CVE-2021-36411",
+            "id": "pyup.io-50717",
+            "more_info_path": "/vulnerabilities/CVE-2021-36411/50717",
             "specs": [
                 "<0.6.1"
             ],
@@ -99521,9 +102966,9 @@
         },
         {
             "advisory": "Pillow-heif 0.6.1 fixes HEIF decoder's CVEs.",
-            "cve": "CVE-2021-35452",
-            "id": "pyup.io-50718",
-            "more_info_path": "/vulnerabilities/CVE-2021-35452/50718",
+            "cve": "CVE-2021-36408",
+            "id": "pyup.io-50715",
+            "more_info_path": "/vulnerabilities/CVE-2021-36408/50715",
             "specs": [
                 "<0.6.1"
             ],
@@ -99708,6 +103153,28 @@
             "v": "<1.1"
         }
     ],
+    "pinecone-client": [
+        {
+            "advisory": "Pinecone-client 2.2.2  updats its `protobuf` dependency from `3.19.3` to `~=3.19.5` to address [a potential denial-of-service vector] CVE-2022-1941.",
+            "cve": "CVE-2022-1941",
+            "id": "pyup.io-67153",
+            "more_info_path": "/vulnerabilities/CVE-2022-1941/67153",
+            "specs": [
+                "<2.2.2"
+            ],
+            "v": "<2.2.2"
+        },
+        {
+            "advisory": "Pinecone-client 2.2.2 now specifies its numpy dependency to be version 1.22.0 or higher, aiming to rectify a low-severity vulnerability identified as CVE-2021-34141.",
+            "cve": "CVE-2021-34141",
+            "id": "pyup.io-67088",
+            "more_info_path": "/vulnerabilities/CVE-2021-34141/67088",
+            "specs": [
+                "<2.2.2"
+            ],
+            "v": "<2.2.2"
+        }
+    ],
     "pioreactor": [
         {
             "advisory": "Pioreactor 23.11.15rc0 includes a fix for a command injection vulnerability.\r\nhttps://github.com/Pioreactor/pioreactor/commit/c40d2c67a2e49c6d6a395c0789cb35711af2f70d",
@@ -99792,7 +103259,7 @@
             "v": "<21.1"
         },
         {
-            "advisory": "Pip 23.3 includes a fix for CVE-2023-5752: When installing a package from a Mercurial VCS URL (ie \"pip install hg+...\") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the \"hg clone\" call (ie \"--config\"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.\r\nhttps://github.com/pypa/pip/pull/12306",
+            "advisory": "Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie \"pip install hg+...\") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the \"hg clone\" call (ie \"--config\"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.",
             "cve": "CVE-2023-5752",
             "id": "pyup.io-62044",
             "more_info_path": "/vulnerabilities/CVE-2023-5752/62044",
@@ -99820,6 +103287,16 @@
                 "<6.1.0"
             ],
             "v": "<6.1.0"
+        },
+        {
+            "advisory": "** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.",
+            "cve": "CVE-2018-20225",
+            "id": "pyup.io-67599",
+            "more_info_path": "/vulnerabilities/CVE-2018-20225/67599",
+            "specs": [
+                ">=0"
+            ],
+            "v": ">=0"
         }
     ],
     "pipenv": [
@@ -100334,10 +103811,10 @@
             "v": "<4.1.3"
         },
         {
-            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5487: The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.",
-            "cve": "CVE-2012-5487",
-            "id": "pyup.io-35381",
-            "more_info_path": "/vulnerabilities/CVE-2012-5487/35381",
+            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5485: registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.",
+            "cve": "CVE-2012-5485",
+            "id": "pyup.io-35380",
+            "more_info_path": "/vulnerabilities/CVE-2012-5485/35380",
             "specs": [
                 "<4.2.3",
                 ">=4.3a1,<4.3b1"
@@ -100345,10 +103822,10 @@
             "v": "<4.2.3,>=4.3a1,<4.3b1"
         },
         {
-            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5497: membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.",
-            "cve": "CVE-2012-5497",
-            "id": "pyup.io-35389",
-            "more_info_path": "/vulnerabilities/CVE-2012-5497/35389",
+            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5498: queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.",
+            "cve": "CVE-2012-5498",
+            "id": "pyup.io-35390",
+            "more_info_path": "/vulnerabilities/CVE-2012-5498/35390",
             "specs": [
                 "<4.2.3",
                 ">=4.3a1,<4.3b1"
@@ -100356,10 +103833,10 @@
             "v": "<4.2.3,>=4.3a1,<4.3b1"
         },
         {
-            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5498: queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.",
-            "cve": "CVE-2012-5498",
-            "id": "pyup.io-35390",
-            "more_info_path": "/vulnerabilities/CVE-2012-5498/35390",
+            "advisory": "The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG reseeding issue in Zope.",
+            "cve": "CVE-2012-5508",
+            "id": "pyup.io-35398",
+            "more_info_path": "/vulnerabilities/CVE-2012-5508/35398",
             "specs": [
                 "<4.2.3",
                 ">=4.3a1,<4.3b1"
@@ -100367,10 +103844,10 @@
             "v": "<4.2.3,>=4.3a1,<4.3b1"
         },
         {
-            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5502: Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script or HTML via unspecified vectors.",
-            "cve": "CVE-2012-5502",
-            "id": "pyup.io-35394",
-            "more_info_path": "/vulnerabilities/CVE-2012-5502/35394",
+            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5487: The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.",
+            "cve": "CVE-2012-5487",
+            "id": "pyup.io-35381",
+            "more_info_path": "/vulnerabilities/CVE-2012-5487/35381",
             "specs": [
                 "<4.2.3",
                 ">=4.3a1,<4.3b1"
@@ -100378,10 +103855,21 @@
             "v": "<4.2.3,>=4.3a1,<4.3b1"
         },
         {
-            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5485: registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.",
-            "cve": "CVE-2012-5485",
-            "id": "pyup.io-35380",
-            "more_info_path": "/vulnerabilities/CVE-2012-5485/35380",
+            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5497: membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.",
+            "cve": "CVE-2012-5497",
+            "id": "pyup.io-35389",
+            "more_info_path": "/vulnerabilities/CVE-2012-5497/35389",
+            "specs": [
+                "<4.2.3",
+                ">=4.3a1,<4.3b1"
+            ],
+            "v": "<4.2.3,>=4.3a1,<4.3b1"
+        },
+        {
+            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5502: Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script or HTML via unspecified vectors.",
+            "cve": "CVE-2012-5502",
+            "id": "pyup.io-35394",
+            "more_info_path": "/vulnerabilities/CVE-2012-5502/35394",
             "specs": [
                 "<4.2.3",
                 ">=4.3a1,<4.3b1"
@@ -100454,6 +103942,17 @@
             ],
             "v": "<4.2.3,>=4.3a1,<4.3b1"
         },
+        {
+            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5500: The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.",
+            "cve": "CVE-2012-5500",
+            "id": "pyup.io-35392",
+            "more_info_path": "/vulnerabilities/CVE-2012-5500/35392",
+            "specs": [
+                "<4.2.3",
+                ">=4.3a1,<4.3b1"
+            ],
+            "v": "<4.2.3,>=4.3a1,<4.3b1"
+        },
         {
             "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5495: python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to \"go_back.\"",
             "cve": "CVE-2012-5495",
@@ -100476,17 +103975,6 @@
             ],
             "v": "<4.2.3,>=4.3a1,<4.3b1"
         },
-        {
-            "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5500: The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.",
-            "cve": "CVE-2012-5500",
-            "id": "pyup.io-35392",
-            "more_info_path": "/vulnerabilities/CVE-2012-5500/35392",
-            "specs": [
-                "<4.2.3",
-                ">=4.3a1,<4.3b1"
-            ],
-            "v": "<4.2.3,>=4.3a1,<4.3b1"
-        },
         {
             "advisory": "Plone 4.2.3 and 4.3b1 include a fix for CVE-2012-5501: at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs (Files and Images) stored on custom content types via a crafted URL.",
             "cve": "CVE-2012-5501",
@@ -100531,17 +104019,6 @@
             ],
             "v": "<4.2.3,>=4.3a1,<4.3b1"
         },
-        {
-            "advisory": "The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG reseeding issue in Zope.",
-            "cve": "CVE-2012-5508",
-            "id": "pyup.io-35398",
-            "more_info_path": "/vulnerabilities/CVE-2012-5508/35398",
-            "specs": [
-                "<4.2.3",
-                ">=4.3a1,<4.3b1"
-            ],
-            "v": "<4.2.3,>=4.3a1,<4.3b1"
-        },
         {
             "advisory": "ftp.py in Plone before 4.2.3 and 4.3b1 allows remote attackers to read hidden folder contents via unspecified vectors.",
             "cve": "CVE-2012-5503",
@@ -100727,6 +104204,36 @@
             ],
             "v": "<6.0.5"
         },
+        {
+            "advisory": "Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arbitrary groups via the prefs_groups_overview page.",
+            "cve": "CVE-2008-0164",
+            "id": "pyup.io-67964",
+            "more_info_path": "/vulnerabilities/CVE-2008-0164/67964",
+            "specs": [
+                "<=3.0.6"
+            ],
+            "v": "<=3.0.6"
+        },
+        {
+            "advisory": "Plone CMS does not record users' authentication states, and implements the logout feature solely on the client side, which makes it easier for context-dependent attackers to reuse a logged-out session.",
+            "cve": "CVE-2008-1395",
+            "id": "pyup.io-67965",
+            "more_info_path": "/vulnerabilities/CVE-2008-1395/67965",
+            "specs": [
+                "<=3.1.7"
+            ],
+            "v": "<=3.1.7"
+        },
+        {
+            "advisory": "Plone CMS 3.x uses invariant data (a client username and a server secret) when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network.",
+            "cve": "CVE-2008-1396",
+            "id": "pyup.io-67966",
+            "more_info_path": "/vulnerabilities/CVE-2008-1396/67966",
+            "specs": [
+                "<=3.1.7"
+            ],
+            "v": "<=3.1.7"
+        },
         {
             "advisory": "Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a \"highly serious vulnerability.\" NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.",
             "cve": "CVE-2011-2528",
@@ -100752,16 +104259,6 @@
             ],
             "v": "<=3.3.6,>=4.0a1,<=4.0.10,>=4.1a1,<=4.1.6,>=4.2a1,<=4.2.7,>=4.3a1,<4.3.7"
         },
-        {
-            "advisory": "Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.",
-            "cve": "CVE-2021-33511",
-            "id": "pyup.io-40536",
-            "more_info_path": "/vulnerabilities/CVE-2021-33511/40536",
-            "specs": [
-                "<=5.2.4"
-            ],
-            "v": "<=5.2.4"
-        },
         {
             "advisory": "Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.",
             "cve": "CVE-2021-33510",
@@ -100782,6 +104279,26 @@
             ],
             "v": "<=5.2.4"
         },
+        {
+            "advisory": "Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.",
+            "cve": "CVE-2021-33513",
+            "id": "pyup.io-40538",
+            "more_info_path": "/vulnerabilities/CVE-2021-33513/40538",
+            "specs": [
+                "<=5.2.4"
+            ],
+            "v": "<=5.2.4"
+        },
+        {
+            "advisory": "Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.",
+            "cve": "CVE-2021-33511",
+            "id": "pyup.io-40536",
+            "more_info_path": "/vulnerabilities/CVE-2021-33511/40536",
+            "specs": [
+                "<=5.2.4"
+            ],
+            "v": "<=5.2.4"
+        },
         {
             "advisory": "Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.",
             "cve": "CVE-2021-33508",
@@ -100812,16 +104329,6 @@
             ],
             "v": "<=5.2.4"
         },
-        {
-            "advisory": "Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.",
-            "cve": "CVE-2021-33513",
-            "id": "pyup.io-40538",
-            "more_info_path": "/vulnerabilities/CVE-2021-33513/40538",
-            "specs": [
-                "<=5.2.4"
-            ],
-            "v": "<=5.2.4"
-        },
         {
             "advisory": "Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request. See CVE-2024-22889.",
             "cve": "CVE-2024-22889",
@@ -100941,10 +104448,10 @@
             "v": ">=2.1,<4.1,>=4.2a1,<4.2.5,>=4.3a1,<4.3.1"
         },
         {
-            "advisory": "Plone 4.1, 4.2.5 and 4.3.1 include a fix for CVE-2013-4195: (1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) via a large zip archive, which is expanded (decompressed).",
-            "cve": "CVE-2013-4199",
-            "id": "pyup.io-35451",
-            "more_info_path": "/vulnerabilities/CVE-2013-4199/35451",
+            "advisory": "Plone 4.1, 4.2.5 and 4.3.1 include a fix for CVE-2013-4188: traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to \"retrieving information for certain resources.\"",
+            "cve": "CVE-2013-4188",
+            "id": "pyup.io-35440",
+            "more_info_path": "/vulnerabilities/CVE-2013-4188/35440",
             "specs": [
                 ">=2.1,<4.1",
                 ">=4.2a1,<4.2.5",
@@ -100953,10 +104460,10 @@
             "v": ">=2.1,<4.1,>=4.2a1,<4.2.5,>=4.3a1,<4.3.1"
         },
         {
-            "advisory": "Plone 4.1, 4.2.5 and 4.3.1 include a fix for CVE-2013-4188: traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to \"retrieving information for certain resources.\"",
-            "cve": "CVE-2013-4188",
-            "id": "pyup.io-35440",
-            "more_info_path": "/vulnerabilities/CVE-2013-4188/35440",
+            "advisory": "Plone 4.1, 4.2.5 and 4.3.1 include a fix for CVE-2013-4195: (1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) via a large zip archive, which is expanded (decompressed).",
+            "cve": "CVE-2013-4199",
+            "id": "pyup.io-35451",
+            "more_info_path": "/vulnerabilities/CVE-2013-4199/35451",
             "specs": [
                 ">=2.1,<4.1",
                 ">=4.2a1,<4.2.5",
@@ -101001,10 +104508,10 @@
             "v": ">=2.1,<4.1,>=4.2a1,<4.2.5,>=4.3a1,<4.3.1"
         },
         {
-            "advisory": "Plone 4.1, 4.2.5 and 4.3.1 include a fix for CVE-2013-4194: The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message.",
-            "cve": "CVE-2013-4194",
-            "id": "pyup.io-35446",
-            "more_info_path": "/vulnerabilities/CVE-2013-4194/35446",
+            "advisory": "Plone 4.1, 4.2.5 and 4.3.1 include a fix for CVE-2013-4195: Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.",
+            "cve": "CVE-2013-4195",
+            "id": "pyup.io-35447",
+            "more_info_path": "/vulnerabilities/CVE-2013-4195/35447",
             "specs": [
                 ">=2.1,<4.1",
                 ">=4.2a1,<4.2.5",
@@ -101013,10 +104520,10 @@
             "v": ">=2.1,<4.1,>=4.2a1,<4.2.5,>=4.3a1,<4.3.1"
         },
         {
-            "advisory": "Plone 4.1, 4.2.5 and 4.3.1 include a fix for CVE-2013-4195: Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.",
-            "cve": "CVE-2013-4195",
-            "id": "pyup.io-35447",
-            "more_info_path": "/vulnerabilities/CVE-2013-4195/35447",
+            "advisory": "Plone 4.1, 4.2.5 and 4.3.1 include a fix for CVE-2013-4194: The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message.",
+            "cve": "CVE-2013-4194",
+            "id": "pyup.io-35446",
+            "more_info_path": "/vulnerabilities/CVE-2013-4194/35446",
             "specs": [
                 ">=2.1,<4.1",
                 ">=4.2a1,<4.2.5",
@@ -101083,20 +104590,20 @@
             "v": ">=2.5,<4.0"
         },
         {
-            "advisory": "When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter set to the previous url. After you login, you get redirected to the page you tried to view before. An attacker might try to abuse this by letting you click on a specially crafted link. You would login, and get redirected to the site of the attacker, letting you think that you are still on the original Plone site. Or some javascript of the attacker could be executed. Most of these types of attacks are already blocked by Plone, using the 'isURLInPortal' check to make sure we only redirect to a page on the same Plone site. But a few more ways of tricking Plone into accepting a malicious link were discovered, and fixed with this hotfix.\r\nhttps://plone.org/security/hotfix/20171128/open-redirection-on-login-form",
-            "cve": "CVE-2017-1000481",
-            "id": "pyup.io-35701",
-            "more_info_path": "/vulnerabilities/CVE-2017-1000481/35701",
+            "advisory": "A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.\r\nhttps://plone.org/security/hotfix/20171128/xss-using-the-home_page-member-property",
+            "cve": "CVE-2017-1000482",
+            "id": "pyup.io-35702",
+            "more_info_path": "/vulnerabilities/CVE-2017-1000482/35702",
             "specs": [
                 ">=2.5,<=5.1rc1"
             ],
             "v": ">=2.5,<=5.1rc1"
         },
         {
-            "advisory": "A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.\r\nhttps://plone.org/security/hotfix/20171128/xss-using-the-home_page-member-property",
-            "cve": "CVE-2017-1000482",
-            "id": "pyup.io-35702",
-            "more_info_path": "/vulnerabilities/CVE-2017-1000482/35702",
+            "advisory": "When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter set to the previous url. After you login, you get redirected to the page you tried to view before. An attacker might try to abuse this by letting you click on a specially crafted link. You would login, and get redirected to the site of the attacker, letting you think that you are still on the original Plone site. Or some javascript of the attacker could be executed. Most of these types of attacks are already blocked by Plone, using the 'isURLInPortal' check to make sure we only redirect to a page on the same Plone site. But a few more ways of tricking Plone into accepting a malicious link were discovered, and fixed with this hotfix.\r\nhttps://plone.org/security/hotfix/20171128/open-redirection-on-login-form",
+            "cve": "CVE-2017-1000481",
+            "id": "pyup.io-35701",
+            "more_info_path": "/vulnerabilities/CVE-2017-1000481/35701",
             "specs": [
                 ">=2.5,<=5.1rc1"
             ],
@@ -101224,10 +104731,10 @@
             "v": ">=3.3a1,<3.3.6,>=4.0a1,<4.0.10,>=4.1a1,<4.1.6,>=4.2a1,<4.2.7,>=4.3a1,<4.3.6"
         },
         {
-            "advisory": "Plone 3.3.6, 4.3.11 and 5.0.6 include a fix for CVE-2016-7137: Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter to (1) %2b%2bgroupdashboard%2b%2bplone.dashboard1%2bgroup/%2b/portlets.Actions or (2) folder/%2b%2bcontextportlets%2b%2bplone.footerportlets/%2b /portlets.Actions or the (3) came_from parameter to /login_form.",
-            "cve": "CVE-2016-7137",
-            "id": "pyup.io-35685",
-            "more_info_path": "/vulnerabilities/CVE-2016-7137/35685",
+            "advisory": "Plone 3.3.6, 4.3.11 and 5.0.6 include a fix for CVE-2016-7139: Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.\r\nhttps://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone",
+            "cve": "CVE-2016-7139",
+            "id": "pyup.io-35687",
+            "more_info_path": "/vulnerabilities/CVE-2016-7139/35687",
             "specs": [
                 ">=3.3a1,<3.3.6",
                 ">=4.0a1,<4.3.11",
@@ -101236,10 +104743,10 @@
             "v": ">=3.3a1,<3.3.6,>=4.0a1,<4.3.11,>=5.0a1,<5.0.6"
         },
         {
-            "advisory": "Plone 3.3.6, 4.3.11 and 5.0.6 include a fix for CVE-2016-7139: Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.\r\nhttps://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone",
-            "cve": "CVE-2016-7139",
-            "id": "pyup.io-35687",
-            "more_info_path": "/vulnerabilities/CVE-2016-7139/35687",
+            "advisory": "Plone 3.3.6, 4.3.11 and 5.0.6 include a fix for CVE-2016-7137: Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter to (1) %2b%2bgroupdashboard%2b%2bplone.dashboard1%2bgroup/%2b/portlets.Actions or (2) folder/%2b%2bcontextportlets%2b%2bplone.footerportlets/%2b /portlets.Actions or the (3) came_from parameter to /login_form.",
+            "cve": "CVE-2016-7137",
+            "id": "pyup.io-35685",
+            "more_info_path": "/vulnerabilities/CVE-2016-7137/35685",
             "specs": [
                 ">=3.3a1,<3.3.6",
                 ">=4.0a1,<4.3.11",
@@ -101292,20 +104799,20 @@
             "v": ">=4.0,<=5.1a1"
         },
         {
-            "advisory": "An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site. See: CVE-2020-7936.",
-            "cve": "CVE-2020-7936",
-            "id": "pyup.io-37784",
-            "more_info_path": "/vulnerabilities/CVE-2020-7936/37784",
+            "advisory": "SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.) See: CVE-2020-7939.",
+            "cve": "CVE-2020-7939",
+            "id": "pyup.io-37787",
+            "more_info_path": "/vulnerabilities/CVE-2020-7939/37787",
             "specs": [
                 ">=4.0,<=5.2.1"
             ],
             "v": ">=4.0,<=5.2.1"
         },
         {
-            "advisory": "SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.) See: CVE-2020-7939.",
-            "cve": "CVE-2020-7939",
-            "id": "pyup.io-37787",
-            "more_info_path": "/vulnerabilities/CVE-2020-7939/37787",
+            "advisory": "An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site. See: CVE-2020-7936.",
+            "cve": "CVE-2020-7936",
+            "id": "pyup.io-37784",
+            "more_info_path": "/vulnerabilities/CVE-2020-7936/37784",
             "specs": [
                 ">=4.0,<=5.2.1"
             ],
@@ -101838,6 +105345,18 @@
             "v": "<6.0.0b1"
         }
     ],
+    "plone-restapi": [
+        {
+            "advisory": "Some versions of Plone suffer from a stored cross-site scripting (XSS) vulnerability specifically associated with the upload and use of SVG images as user portraits. This flaw doesn't affect pages using SVG images within image tags; the vulnerability only manifests when an attacker uploads a malicious SVG file as a user portrait and then persuades another user to click a link directing to this portrait. While a remedy will be included in a forthcoming update for `plone.restapi`, which applies to certain versions of Plone, for earlier versions not supporting a specific endpoint, there's a related fix linking to a different component. To mitigate the risk temporarily, one option includes removing the portrait field from user profiles and deleting any existing portraits in the database, although this approach may be considered somewhat extreme.",
+            "cve": "PVE-2024-69616",
+            "id": "pyup.io-69616",
+            "more_info_path": "/vulnerabilities/PVE-2024-69616/69616",
+            "specs": [
+                ">=8.0.0,<8.43.3"
+            ],
+            "v": ">=8.0.0,<8.43.3"
+        }
+    ],
     "plone-session": [
         {
             "advisory": "Plone.session 2.1 protects the setupSession call with the ManageUsers permission to fix a possible privilege escalation.\r\nhttps://github.com/plone/plone.session/commit/66b97c7402c10a8ab2131b69b7ba85ab7b4f9592",
@@ -101994,9 +105513,9 @@
         },
         {
             "advisory": "Plotly 1.9.6 includes plotly.js version 1.5.2, which contains security fixes.",
-            "cve": "CVE-2015-8858",
-            "id": "pyup.io-45779",
-            "more_info_path": "/vulnerabilities/CVE-2015-8858/45779",
+            "cve": "CVE-2015-9242",
+            "id": "pyup.io-38545",
+            "more_info_path": "/vulnerabilities/CVE-2015-9242/38545",
             "specs": [
                 "<1.9.6"
             ],
@@ -102004,9 +105523,9 @@
         },
         {
             "advisory": "Plotly 1.9.6 includes plotly.js version 1.5.2, which contains security fixes.",
-            "cve": "CVE-2015-9242",
-            "id": "pyup.io-38545",
-            "more_info_path": "/vulnerabilities/CVE-2015-9242/38545",
+            "cve": "CVE-2015-8858",
+            "id": "pyup.io-45779",
+            "more_info_path": "/vulnerabilities/CVE-2015-8858/45779",
             "specs": [
                 "<1.9.6"
             ],
@@ -102174,9 +105693,9 @@
         },
         {
             "advisory": "Pm4py 2.2.19.1 updates its dependency 'numpy' to v1.22.2 to include security fixes.",
-            "cve": "CVE-2021-41496",
-            "id": "pyup.io-44945",
-            "more_info_path": "/vulnerabilities/CVE-2021-41496/44945",
+            "cve": "CVE-2021-41495",
+            "id": "pyup.io-44946",
+            "more_info_path": "/vulnerabilities/CVE-2021-41495/44946",
             "specs": [
                 "<2.2.19.1"
             ],
@@ -102194,9 +105713,9 @@
         },
         {
             "advisory": "Pm4py 2.2.19.1 updates its dependency 'numpy' to v1.22.2 to include security fixes.",
-            "cve": "CVE-2021-41495",
-            "id": "pyup.io-44946",
-            "more_info_path": "/vulnerabilities/CVE-2021-41495/44946",
+            "cve": "CVE-2021-41496",
+            "id": "pyup.io-44945",
+            "more_info_path": "/vulnerabilities/CVE-2021-41496/44945",
             "specs": [
                 "<2.2.19.1"
             ],
@@ -102373,16 +105892,6 @@
         }
     ],
     "polyaxon": [
-        {
-            "advisory": "Polyaxon 0.4.1 updates its NPM dependency 'bootstrap' to v3.4.1 to include a security fix.",
-            "cve": "CVE-2019-8331",
-            "id": "pyup.io-49097",
-            "more_info_path": "/vulnerabilities/CVE-2019-8331/49097",
-            "specs": [
-                "<0.4.1"
-            ],
-            "v": "<0.4.1"
-        },
         {
             "advisory": "Polyaxon 0.4.1 updates its NPM dependency 'lodash' to v4.17.11 to include security fixes.",
             "cve": "CVE-2018-16487",
@@ -102403,6 +105912,16 @@
             ],
             "v": "<0.4.1"
         },
+        {
+            "advisory": "Polyaxon 0.4.1 updates its NPM dependency 'bootstrap' to v3.4.1 to include a security fix.",
+            "cve": "CVE-2019-8331",
+            "id": "pyup.io-49097",
+            "more_info_path": "/vulnerabilities/CVE-2019-8331/49097",
+            "specs": [
+                "<0.4.1"
+            ],
+            "v": "<0.4.1"
+        },
         {
             "advisory": "Polyaxon 0.5.1 updates its NPM dependency 'lodash' to v4.17.14: vulnerability issue.",
             "cve": "CVE-2019-10744",
@@ -102415,29 +105934,29 @@
         },
         {
             "advisory": "Polyaxon 0.5.5 updates its dependency 'django' to v2.2.4 to include security fixes.",
-            "cve": "CVE-2019-14234",
-            "id": "pyup.io-45019",
-            "more_info_path": "/vulnerabilities/CVE-2019-14234/45019",
+            "cve": "CVE-2019-14232",
+            "id": "pyup.io-45017",
+            "more_info_path": "/vulnerabilities/CVE-2019-14232/45017",
             "specs": [
                 "<0.5.5"
             ],
             "v": "<0.5.5"
         },
         {
-            "advisory": "Polyaxon 0.5.5 updates its dependency 'django' to v2.2.4 to include security fixes.",
-            "cve": "CVE-2019-14235",
-            "id": "pyup.io-45020",
-            "more_info_path": "/vulnerabilities/CVE-2019-14235/45020",
+            "advisory": "Polyaxon 0.5.5 updates its dependency 'djangorestframework' to v3.10.1 to include a security fix.",
+            "cve": "CVE-2020-25626",
+            "id": "pyup.io-38023",
+            "more_info_path": "/vulnerabilities/CVE-2020-25626/38023",
             "specs": [
                 "<0.5.5"
             ],
             "v": "<0.5.5"
         },
         {
-            "advisory": "Polyaxon 0.5.5 updates its dependency 'djangorestframework' to v3.10.1 to include a security fix.",
-            "cve": "CVE-2020-25626",
-            "id": "pyup.io-38023",
-            "more_info_path": "/vulnerabilities/CVE-2020-25626/38023",
+            "advisory": "Polyaxon 0.5.5 updates its dependency 'django' to v2.2.4 to include security fixes.",
+            "cve": "CVE-2019-14235",
+            "id": "pyup.io-45020",
+            "more_info_path": "/vulnerabilities/CVE-2019-14235/45020",
             "specs": [
                 "<0.5.5"
             ],
@@ -102455,9 +105974,9 @@
         },
         {
             "advisory": "Polyaxon 0.5.5 updates its dependency 'django' to v2.2.4 to include security fixes.",
-            "cve": "CVE-2019-14232",
-            "id": "pyup.io-45017",
-            "more_info_path": "/vulnerabilities/CVE-2019-14232/45017",
+            "cve": "CVE-2019-14234",
+            "id": "pyup.io-45019",
+            "more_info_path": "/vulnerabilities/CVE-2019-14234/45019",
             "specs": [
                 "<0.5.5"
             ],
@@ -102529,9 +106048,9 @@
         },
         {
             "advisory": "Polymatheia 0.3.1 updates its dependency 'lxml' to v4.6.3 to include security fixes.",
-            "cve": "CVE-2021-28957",
-            "id": "pyup.io-49782",
-            "more_info_path": "/vulnerabilities/CVE-2021-28957/49782",
+            "cve": "CVE-2020-27783",
+            "id": "pyup.io-49905",
+            "more_info_path": "/vulnerabilities/CVE-2020-27783/49905",
             "specs": [
                 "<0.3.1"
             ],
@@ -102539,9 +106058,9 @@
         },
         {
             "advisory": "Polymatheia 0.3.1 updates its dependency 'lxml' to v4.6.3 to include security fixes.",
-            "cve": "CVE-2020-27783",
-            "id": "pyup.io-49905",
-            "more_info_path": "/vulnerabilities/CVE-2020-27783/49905",
+            "cve": "CVE-2021-28957",
+            "id": "pyup.io-49782",
+            "more_info_path": "/vulnerabilities/CVE-2021-28957/49782",
             "specs": [
                 "<0.3.1"
             ],
@@ -102586,6 +106105,36 @@
                 "<1.0.4"
             ],
             "v": "<1.0.4"
+        },
+        {
+            "advisory": "Polymatheia version 1.0.7 has updated its jinja2  library from version 3.1.2 to 3.1.3 in response to security concerns outlined in CVE-2024-22195.",
+            "cve": "CVE-2024-22195",
+            "id": "pyup.io-67882",
+            "more_info_path": "/vulnerabilities/CVE-2024-22195/67882",
+            "specs": [
+                "<1.0.7"
+            ],
+            "v": "<1.0.7"
+        },
+        {
+            "advisory": "Polymatheia version 1.0.7 has updated its urllib3 library from version 2.0.6 to 2.0.7 in response to security concerns outlined in CVE-2023-45803.",
+            "cve": "CVE-2023-45803",
+            "id": "pyup.io-67879",
+            "more_info_path": "/vulnerabilities/CVE-2023-45803/67879",
+            "specs": [
+                "<1.0.7"
+            ],
+            "v": "<1.0.7"
+        },
+        {
+            "advisory": "Polymatheia version 1.0.8 has upgraded its idna library from version 3.4 to 3.7 to address security vulnerabilities detailed in CVE-2022-45061.",
+            "cve": "CVE-2022-45061",
+            "id": "pyup.io-67878",
+            "more_info_path": "/vulnerabilities/CVE-2022-45061/67878",
+            "specs": [
+                "<1.0.8"
+            ],
+            "v": "<1.0.8"
         }
     ],
     "polyswarm-client": [
@@ -102666,7 +106215,49 @@
             "v": "<2.2.0"
         }
     ],
+    "portabletab": [
+        {
+            "advisory": "Portabletab version 0.3.3.post1 has updated its certifi dependency from version 2022.12.7 to 2024.2 in response to CVE-2023-37920.",
+            "cve": "CVE-2023-37920",
+            "id": "pyup.io-67903",
+            "more_info_path": "/vulnerabilities/CVE-2023-37920/67903",
+            "specs": [
+                "<0.3.3.post1"
+            ],
+            "v": "<0.3.3.post1"
+        },
+        {
+            "advisory": "Portabletab version 0.3.3.post1 has updated its jinja2 dependency from version 3.1.1 to 3.1.2  in response to CVE-2023-37920.",
+            "cve": "CVE-2023-37920",
+            "id": "pyup.io-67910",
+            "more_info_path": "/vulnerabilities/CVE-2023-37920/67910",
+            "specs": [
+                "<0.3.3.post1"
+            ],
+            "v": "<0.3.3.post1"
+        }
+    ],
     "portage": [
+        {
+            "advisory": "The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate.",
+            "cve": "CVE-2013-2100",
+            "id": "pyup.io-67956",
+            "more_info_path": "/vulnerabilities/CVE-2013-2100/67956",
+            "specs": [
+                "<2.1.12"
+            ],
+            "v": "<2.1.12"
+        },
+        {
+            "advisory": "Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners.",
+            "cve": "CVE-2019-20384",
+            "id": "pyup.io-70506",
+            "more_info_path": "/vulnerabilities/CVE-2019-20384/70506",
+            "specs": [
+                "<2.3.84"
+            ],
+            "v": "<2.3.84"
+        },
         {
             "advisory": "In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification. Unless emerge-webrsync is used, Portage is not vulnerable.",
             "cve": "CVE-2016-20021",
@@ -102915,6 +106506,28 @@
             "v": ">0,<0"
         }
     ],
+    "pragy-dl": [
+        {
+            "advisory": "Pragy-dl version 2023.07.06 introduces changes due to CVE-2023-35934: The `--add-header Cookie:` option is deprecated and automatically restricted to the domains of input URLs. Additionally, cookies passed to external downloaders are now scoped, and the `cookies` field has been added to info.json. The `http_headers.Cookie` field is now deprecated to enhance security and compliance.",
+            "cve": "CVE-2023-35934",
+            "id": "pyup.io-67930",
+            "more_info_path": "/vulnerabilities/CVE-2023-35934/67930",
+            "specs": [
+                "<2023.07.06"
+            ],
+            "v": "<2023.07.06"
+        },
+        {
+            "advisory": "Pragy-dl version 2023.09.24 implements security measures to prevent Remote Code Execution (RCE) when using the `--exec` option with `%q`.",
+            "cve": "CVE-2023-40581",
+            "id": "pyup.io-67929",
+            "more_info_path": "/vulnerabilities/CVE-2023-40581/67929",
+            "specs": [
+                "<2023.09.24"
+            ],
+            "v": "<2023.09.24"
+        }
+    ],
     "pre-commit": [
         {
             "advisory": "Pre-commit 1.10.4 replaces 'yaml.load' with safe alternative to avoid a remote code execution vulnerability.\r\nhttps://github.com/pre-commit/pre-commit/commit/6853f4aa4c8d7e411839bacc66876baea443186a",
@@ -103078,6 +106691,16 @@
         }
     ],
     "pretix": [
+        {
+            "advisory": "pretix before 2024.1.1 mishandles file validation.",
+            "cve": "CVE-2023-52228",
+            "id": "pyup.io-68476",
+            "more_info_path": "/vulnerabilities/CVE-2023-52228/68476",
+            "specs": [
+                "<2024.1.1"
+            ],
+            "v": "<2024.1.1"
+        },
         {
             "advisory": "pretix before 2023.7.2 allows Pillow to parse EPS files.",
             "cve": "CVE-2023-44464",
@@ -104058,6 +107681,16 @@
         }
     ],
     "prowler": [
+        {
+            "advisory": "Prowler version 3.16.3 includes a fix that addresses privilege escalation vulnerabilities within its AWS configurations.",
+            "cve": "PVE-2024-69613",
+            "id": "pyup.io-69613",
+            "more_info_path": "/vulnerabilities/PVE-2024-69613/69613",
+            "specs": [
+                "<3.16.3"
+            ],
+            "v": "<3.16.3"
+        },
         {
             "advisory": "Prowler 3.7.2 updates its dependency 'certifi' to version '2023.7.22' include a fix.\r\nhttps://github.com/prowler-cloud/prowler/pull/2623",
             "cve": "CVE-2023-37920",
@@ -104173,10 +107806,10 @@
     ],
     "psd-tools": [
         {
-            "advisory": "libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.",
-            "cve": "CVE-2020-5313",
-            "id": "pyup.io-43471",
-            "more_info_path": "/vulnerabilities/CVE-2020-5313/43471",
+            "advisory": "libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.",
+            "cve": "CVE-2020-5310",
+            "id": "pyup.io-43468",
+            "more_info_path": "/vulnerabilities/CVE-2020-5310/43468",
             "specs": [
                 "<=1.9.18"
             ],
@@ -104193,10 +107826,10 @@
             "v": "<=1.9.18"
         },
         {
-            "advisory": "libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.",
-            "cve": "CVE-2020-5310",
-            "id": "pyup.io-43468",
-            "more_info_path": "/vulnerabilities/CVE-2020-5310/43468",
+            "advisory": "libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.",
+            "cve": "CVE-2020-5313",
+            "id": "pyup.io-43471",
+            "more_info_path": "/vulnerabilities/CVE-2020-5313/43471",
             "specs": [
                 "<=1.9.18"
             ],
@@ -105315,6 +108948,16 @@
             ],
             "v": "<3.6.0"
         },
+        {
+            "advisory": "pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories.",
+            "cve": "CVE-2018-10917",
+            "id": "pyup.io-67600",
+            "more_info_path": "/vulnerabilities/CVE-2018-10917/67600",
+            "specs": [
+                "<=2.16"
+            ],
+            "v": "<=2.16"
+        },
         {
             "advisory": "Pulpcore before 3.15.0 is susceptible to insecure encryption due to utilizing the blake2s hash function for generating a 64-bit lock identifier from UUID. The exploit maturity for this vulnerability is currently unproven.\r\nhttps://github.com/pulp/pulpcore/commit/1d77e5cdf4d03b7edff34f4fc3b60a2f70df3e88",
             "cve": "PVE-2024-99767",
@@ -105518,9 +109161,9 @@
         },
         {
             "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
-            "cve": "CVE-2020-15207",
-            "id": "pyup.io-45008",
-            "more_info_path": "/vulnerabilities/CVE-2020-15207/45008",
+            "cve": "CVE-2020-15194",
+            "id": "pyup.io-44995",
+            "more_info_path": "/vulnerabilities/CVE-2020-15194/44995",
             "specs": [
                 "<0.10.4"
             ],
@@ -105528,9 +109171,9 @@
         },
         {
             "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
-            "cve": "CVE-2020-15214",
-            "id": "pyup.io-45015",
-            "more_info_path": "/vulnerabilities/CVE-2020-15214/45015",
+            "cve": "CVE-2020-15207",
+            "id": "pyup.io-45008",
+            "more_info_path": "/vulnerabilities/CVE-2020-15207/45008",
             "specs": [
                 "<0.10.4"
             ],
@@ -105538,9 +109181,9 @@
         },
         {
             "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
-            "cve": "CVE-2020-15194",
-            "id": "pyup.io-44995",
-            "more_info_path": "/vulnerabilities/CVE-2020-15194/44995",
+            "cve": "CVE-2020-15214",
+            "id": "pyup.io-45015",
+            "more_info_path": "/vulnerabilities/CVE-2020-15214/45015",
             "specs": [
                 "<0.10.4"
             ],
@@ -105566,6 +109209,76 @@
             ],
             "v": "<0.10.4"
         },
+        {
+            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
+            "cve": "CVE-2020-15208",
+            "id": "pyup.io-45009",
+            "more_info_path": "/vulnerabilities/CVE-2020-15208/45009",
+            "specs": [
+                "<0.10.4"
+            ],
+            "v": "<0.10.4"
+        },
+        {
+            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
+            "cve": "CVE-2020-15201",
+            "id": "pyup.io-45002",
+            "more_info_path": "/vulnerabilities/CVE-2020-15201/45002",
+            "specs": [
+                "<0.10.4"
+            ],
+            "v": "<0.10.4"
+        },
+        {
+            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
+            "cve": "CVE-2020-15206",
+            "id": "pyup.io-45007",
+            "more_info_path": "/vulnerabilities/CVE-2020-15206/45007",
+            "specs": [
+                "<0.10.4"
+            ],
+            "v": "<0.10.4"
+        },
+        {
+            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
+            "cve": "CVE-2020-15202",
+            "id": "pyup.io-45003",
+            "more_info_path": "/vulnerabilities/CVE-2020-15202/45003",
+            "specs": [
+                "<0.10.4"
+            ],
+            "v": "<0.10.4"
+        },
+        {
+            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
+            "cve": "CVE-2020-15212",
+            "id": "pyup.io-45013",
+            "more_info_path": "/vulnerabilities/CVE-2020-15212/45013",
+            "specs": [
+                "<0.10.4"
+            ],
+            "v": "<0.10.4"
+        },
+        {
+            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
+            "cve": "CVE-2020-15209",
+            "id": "pyup.io-45010",
+            "more_info_path": "/vulnerabilities/CVE-2020-15209/45010",
+            "specs": [
+                "<0.10.4"
+            ],
+            "v": "<0.10.4"
+        },
+        {
+            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
+            "cve": "CVE-2020-15211",
+            "id": "pyup.io-45012",
+            "more_info_path": "/vulnerabilities/CVE-2020-15211/45012",
+            "specs": [
+                "<0.10.4"
+            ],
+            "v": "<0.10.4"
+        },
         {
             "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
             "cve": "CVE-2020-15198",
@@ -105596,16 +109309,6 @@
             ],
             "v": "<0.10.4"
         },
-        {
-            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
-            "cve": "CVE-2020-15208",
-            "id": "pyup.io-45009",
-            "more_info_path": "/vulnerabilities/CVE-2020-15208/45009",
-            "specs": [
-                "<0.10.4"
-            ],
-            "v": "<0.10.4"
-        },
         {
             "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
             "cve": "CVE-2020-15204",
@@ -105616,16 +109319,6 @@
             ],
             "v": "<0.10.4"
         },
-        {
-            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
-            "cve": "CVE-2020-15201",
-            "id": "pyup.io-45002",
-            "more_info_path": "/vulnerabilities/CVE-2020-15201/45002",
-            "specs": [
-                "<0.10.4"
-            ],
-            "v": "<0.10.4"
-        },
         {
             "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
             "cve": "CVE-2020-15205",
@@ -105656,16 +109349,6 @@
             ],
             "v": "<0.10.4"
         },
-        {
-            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
-            "cve": "CVE-2020-15206",
-            "id": "pyup.io-45007",
-            "more_info_path": "/vulnerabilities/CVE-2020-15206/45007",
-            "specs": [
-                "<0.10.4"
-            ],
-            "v": "<0.10.4"
-        },
         {
             "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
             "cve": "CVE-2020-15213",
@@ -105676,46 +109359,6 @@
             ],
             "v": "<0.10.4"
         },
-        {
-            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
-            "cve": "CVE-2020-15202",
-            "id": "pyup.io-45003",
-            "more_info_path": "/vulnerabilities/CVE-2020-15202/45003",
-            "specs": [
-                "<0.10.4"
-            ],
-            "v": "<0.10.4"
-        },
-        {
-            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
-            "cve": "CVE-2020-15212",
-            "id": "pyup.io-45013",
-            "more_info_path": "/vulnerabilities/CVE-2020-15212/45013",
-            "specs": [
-                "<0.10.4"
-            ],
-            "v": "<0.10.4"
-        },
-        {
-            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
-            "cve": "CVE-2020-15209",
-            "id": "pyup.io-45010",
-            "more_info_path": "/vulnerabilities/CVE-2020-15209/45010",
-            "specs": [
-                "<0.10.4"
-            ],
-            "v": "<0.10.4"
-        },
-        {
-            "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
-            "cve": "CVE-2020-15211",
-            "id": "pyup.io-45012",
-            "more_info_path": "/vulnerabilities/CVE-2020-15211/45012",
-            "specs": [
-                "<0.10.4"
-            ],
-            "v": "<0.10.4"
-        },
         {
             "advisory": "Pupyl 0.10.4 updates its dependency 'tensorflow' to v2.3.1 to include security fixes.",
             "cve": "CVE-2020-15192",
@@ -105768,9 +109411,9 @@
         },
         {
             "advisory": "Pupyl 0.10.5 updates its dependency 'tensorflow' to v2.4.0 to include security fixes.",
-            "cve": "CVE-2020-26266",
-            "id": "pyup.io-44985",
-            "more_info_path": "/vulnerabilities/CVE-2020-26266/44985",
+            "cve": "CVE-2020-26271",
+            "id": "pyup.io-44984",
+            "more_info_path": "/vulnerabilities/CVE-2020-26271/44984",
             "specs": [
                 "<0.10.5"
             ],
@@ -105778,9 +109421,9 @@
         },
         {
             "advisory": "Pupyl 0.10.5 updates its dependency 'tensorflow' to v2.4.0 to include security fixes.",
-            "cve": "CVE-2020-26271",
-            "id": "pyup.io-44984",
-            "more_info_path": "/vulnerabilities/CVE-2020-26271/44984",
+            "cve": "CVE-2020-26268",
+            "id": "pyup.io-44982",
+            "more_info_path": "/vulnerabilities/CVE-2020-26268/44982",
             "specs": [
                 "<0.10.5"
             ],
@@ -105788,9 +109431,9 @@
         },
         {
             "advisory": "Pupyl 0.10.5 updates its dependency 'tensorflow' to v2.4.0 to include security fixes.",
-            "cve": "CVE-2020-26267",
-            "id": "pyup.io-39392",
-            "more_info_path": "/vulnerabilities/CVE-2020-26267/39392",
+            "cve": "CVE-2020-15265",
+            "id": "pyup.io-44990",
+            "more_info_path": "/vulnerabilities/CVE-2020-15265/44990",
             "specs": [
                 "<0.10.5"
             ],
@@ -105798,9 +109441,9 @@
         },
         {
             "advisory": "Pupyl 0.10.5 updates its dependency 'tensorflow' to v2.4.0 to include security fixes.",
-            "cve": "CVE-2020-26268",
-            "id": "pyup.io-44982",
-            "more_info_path": "/vulnerabilities/CVE-2020-26268/44982",
+            "cve": "CVE-2020-26266",
+            "id": "pyup.io-44985",
+            "more_info_path": "/vulnerabilities/CVE-2020-26266/44985",
             "specs": [
                 "<0.10.5"
             ],
@@ -105808,9 +109451,9 @@
         },
         {
             "advisory": "Pupyl 0.10.5 updates its dependency 'tensorflow' to v2.4.0 to include security fixes.",
-            "cve": "CVE-2020-15265",
-            "id": "pyup.io-44990",
-            "more_info_path": "/vulnerabilities/CVE-2020-15265/44990",
+            "cve": "CVE-2020-26267",
+            "id": "pyup.io-39392",
+            "more_info_path": "/vulnerabilities/CVE-2020-26267/39392",
             "specs": [
                 "<0.10.5"
             ],
@@ -105876,26 +109519,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29601",
-            "id": "pyup.io-43923",
-            "more_info_path": "/vulnerabilities/CVE-2021-29601/43923",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29559",
-            "id": "pyup.io-43950",
-            "more_info_path": "/vulnerabilities/CVE-2021-29559/43950",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
             "cve": "CVE-2021-29526",
@@ -105976,6 +109599,16 @@
             ],
             "v": "<0.11.1"
         },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29589",
+            "id": "pyup.io-43882",
+            "more_info_path": "/vulnerabilities/CVE-2021-29589/43882",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
             "cve": "CVE-2021-29545",
@@ -105998,9 +109631,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29589",
-            "id": "pyup.io-43882",
-            "more_info_path": "/vulnerabilities/CVE-2021-29589/43882",
+            "cve": "CVE-2021-29528",
+            "id": "pyup.io-43912",
+            "more_info_path": "/vulnerabilities/CVE-2021-29528/43912",
             "specs": [
                 "<0.11.1"
             ],
@@ -106016,16 +109649,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29528",
-            "id": "pyup.io-43912",
-            "more_info_path": "/vulnerabilities/CVE-2021-29528/43912",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
             "cve": "CVE-2021-29539",
@@ -106156,16 +109779,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29568",
-            "id": "pyup.io-43873",
-            "more_info_path": "/vulnerabilities/CVE-2021-29568/43873",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
             "cve": "CVE-2021-29530",
@@ -106187,10 +109800,10 @@
             "v": "<0.11.1"
         },
         {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
-            "cve": "CVE-2021-29591",
-            "id": "pyup.io-43907",
-            "more_info_path": "/vulnerabilities/CVE-2021-29591/43907",
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29568",
+            "id": "pyup.io-43873",
+            "more_info_path": "/vulnerabilities/CVE-2021-29568/43873",
             "specs": [
                 "<0.11.1"
             ],
@@ -106206,26 +109819,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29570",
-            "id": "pyup.io-43960",
-            "more_info_path": "/vulnerabilities/CVE-2021-29570/43960",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29527",
-            "id": "pyup.io-43910",
-            "more_info_path": "/vulnerabilities/CVE-2021-29527/43910",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
             "cve": "CVE-2021-29576",
@@ -106246,16 +109839,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29615",
-            "id": "pyup.io-43935",
-            "more_info_path": "/vulnerabilities/CVE-2021-29615/43935",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
             "cve": "CVE-2021-29512",
@@ -106326,21 +109909,11 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
-            "cve": "CVE-2021-29575",
-            "id": "pyup.io-43961",
-            "more_info_path": "/vulnerabilities/CVE-2021-29575/43961",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29524",
-            "id": "pyup.io-43860",
-            "more_info_path": "/vulnerabilities/CVE-2021-29524/43860",
+            "cve": "CVE-2021-29601",
+            "id": "pyup.io-43923",
+            "more_info_path": "/vulnerabilities/CVE-2021-29601/43923",
             "specs": [
                 "<0.11.1"
             ],
@@ -106348,19 +109921,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29603",
-            "id": "pyup.io-43925",
-            "more_info_path": "/vulnerabilities/CVE-2021-29603/43925",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
-            "cve": "CVE-2021-29614",
-            "id": "pyup.io-43968",
-            "more_info_path": "/vulnerabilities/CVE-2021-29614/43968",
+            "cve": "CVE-2021-29559",
+            "id": "pyup.io-43950",
+            "more_info_path": "/vulnerabilities/CVE-2021-29559/43950",
             "specs": [
                 "<0.11.1"
             ],
@@ -106368,59 +109931,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
-            "cve": "CVE-2021-29612",
-            "id": "pyup.io-43932",
-            "more_info_path": "/vulnerabilities/CVE-2021-29612/43932",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29584",
-            "id": "pyup.io-43900",
-            "more_info_path": "/vulnerabilities/CVE-2021-29584/43900",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29553",
-            "id": "pyup.io-43939",
-            "more_info_path": "/vulnerabilities/CVE-2021-29553/43939",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29523",
-            "id": "pyup.io-43856",
-            "more_info_path": "/vulnerabilities/CVE-2021-29523/43856",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29586",
-            "id": "pyup.io-43903",
-            "more_info_path": "/vulnerabilities/CVE-2021-29586/43903",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29552",
-            "id": "pyup.io-43940",
-            "more_info_path": "/vulnerabilities/CVE-2021-29552/43940",
+            "cve": "CVE-2021-29591",
+            "id": "pyup.io-43907",
+            "more_info_path": "/vulnerabilities/CVE-2021-29591/43907",
             "specs": [
                 "<0.11.1"
             ],
@@ -106428,9 +109941,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29516",
-            "id": "pyup.io-43955",
-            "more_info_path": "/vulnerabilities/CVE-2021-29516/43955",
+            "cve": "CVE-2021-29570",
+            "id": "pyup.io-43960",
+            "more_info_path": "/vulnerabilities/CVE-2021-29570/43960",
             "specs": [
                 "<0.11.1"
             ],
@@ -106438,9 +109951,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29592",
-            "id": "pyup.io-43906",
-            "more_info_path": "/vulnerabilities/CVE-2021-29592/43906",
+            "cve": "CVE-2021-29527",
+            "id": "pyup.io-43910",
+            "more_info_path": "/vulnerabilities/CVE-2021-29527/43910",
             "specs": [
                 "<0.11.1"
             ],
@@ -106448,9 +109961,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29609",
-            "id": "pyup.io-43929",
-            "more_info_path": "/vulnerabilities/CVE-2021-29609/43929",
+            "cve": "CVE-2021-29615",
+            "id": "pyup.io-43935",
+            "more_info_path": "/vulnerabilities/CVE-2021-29615/43935",
             "specs": [
                 "<0.11.1"
             ],
@@ -106458,19 +109971,19 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29582",
-            "id": "pyup.io-43899",
-            "more_info_path": "/vulnerabilities/CVE-2021-29582/43899",
+            "cve": "CVE-2021-29524",
+            "id": "pyup.io-43860",
+            "more_info_path": "/vulnerabilities/CVE-2021-29524/43860",
             "specs": [
                 "<0.11.1"
             ],
             "v": "<0.11.1"
         },
         {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29588",
-            "id": "pyup.io-43904",
-            "more_info_path": "/vulnerabilities/CVE-2021-29588/43904",
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
+            "cve": "CVE-2021-29612",
+            "id": "pyup.io-43932",
+            "more_info_path": "/vulnerabilities/CVE-2021-29612/43932",
             "specs": [
                 "<0.11.1"
             ],
@@ -106478,9 +109991,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29519",
-            "id": "pyup.io-43858",
-            "more_info_path": "/vulnerabilities/CVE-2021-29519/43858",
+            "cve": "CVE-2021-29584",
+            "id": "pyup.io-43900",
+            "more_info_path": "/vulnerabilities/CVE-2021-29584/43900",
             "specs": [
                 "<0.11.1"
             ],
@@ -106488,9 +110001,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29561",
-            "id": "pyup.io-43959",
-            "more_info_path": "/vulnerabilities/CVE-2021-29561/43959",
+            "cve": "CVE-2021-29553",
+            "id": "pyup.io-43939",
+            "more_info_path": "/vulnerabilities/CVE-2021-29553/43939",
             "specs": [
                 "<0.11.1"
             ],
@@ -106498,19 +110011,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29515",
-            "id": "pyup.io-43963",
-            "more_info_path": "/vulnerabilities/CVE-2021-29515/43963",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
-            "cve": "CVE-2021-29520",
-            "id": "pyup.io-43861",
-            "more_info_path": "/vulnerabilities/CVE-2021-29520/43861",
+            "cve": "CVE-2021-29523",
+            "id": "pyup.io-43856",
+            "more_info_path": "/vulnerabilities/CVE-2021-29523/43856",
             "specs": [
                 "<0.11.1"
             ],
@@ -106518,9 +110021,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29546",
-            "id": "pyup.io-43933",
-            "more_info_path": "/vulnerabilities/CVE-2021-29546/43933",
+            "cve": "CVE-2021-29586",
+            "id": "pyup.io-43903",
+            "more_info_path": "/vulnerabilities/CVE-2021-29586/43903",
             "specs": [
                 "<0.11.1"
             ],
@@ -106528,9 +110031,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29562",
-            "id": "pyup.io-43958",
-            "more_info_path": "/vulnerabilities/CVE-2021-29562/43958",
+            "cve": "CVE-2021-29609",
+            "id": "pyup.io-43929",
+            "more_info_path": "/vulnerabilities/CVE-2021-29609/43929",
             "specs": [
                 "<0.11.1"
             ],
@@ -106546,26 +110049,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29569",
-            "id": "pyup.io-43957",
-            "more_info_path": "/vulnerabilities/CVE-2021-29569/43957",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29564",
-            "id": "pyup.io-43862",
-            "more_info_path": "/vulnerabilities/CVE-2021-29564/43862",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
             "cve": "CVE-2021-29549",
@@ -106596,6 +110079,276 @@
             ],
             "v": "<0.11.1"
         },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29543",
+            "id": "pyup.io-43867",
+            "more_info_path": "/vulnerabilities/CVE-2021-29543/43867",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29533",
+            "id": "pyup.io-43884",
+            "more_info_path": "/vulnerabilities/CVE-2021-29533/43884",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29540",
+            "id": "pyup.io-43889",
+            "more_info_path": "/vulnerabilities/CVE-2021-29540/43889",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29522",
+            "id": "pyup.io-43859",
+            "more_info_path": "/vulnerabilities/CVE-2021-29522/43859",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29566",
+            "id": "pyup.io-43874",
+            "more_info_path": "/vulnerabilities/CVE-2021-29566/43874",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29534",
+            "id": "pyup.io-43870",
+            "more_info_path": "/vulnerabilities/CVE-2021-29534/43870",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29581",
+            "id": "pyup.io-43898",
+            "more_info_path": "/vulnerabilities/CVE-2021-29581/43898",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29596",
+            "id": "pyup.io-43911",
+            "more_info_path": "/vulnerabilities/CVE-2021-29596/43911",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29597",
+            "id": "pyup.io-43914",
+            "more_info_path": "/vulnerabilities/CVE-2021-29597/43914",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29541",
+            "id": "pyup.io-43928",
+            "more_info_path": "/vulnerabilities/CVE-2021-29541/43928",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29619",
+            "id": "pyup.io-43941",
+            "more_info_path": "/vulnerabilities/CVE-2021-29619/43941",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
+            "cve": "CVE-2021-29575",
+            "id": "pyup.io-43961",
+            "more_info_path": "/vulnerabilities/CVE-2021-29575/43961",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29603",
+            "id": "pyup.io-43925",
+            "more_info_path": "/vulnerabilities/CVE-2021-29603/43925",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
+            "cve": "CVE-2021-29614",
+            "id": "pyup.io-43968",
+            "more_info_path": "/vulnerabilities/CVE-2021-29614/43968",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29552",
+            "id": "pyup.io-43940",
+            "more_info_path": "/vulnerabilities/CVE-2021-29552/43940",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29516",
+            "id": "pyup.io-43955",
+            "more_info_path": "/vulnerabilities/CVE-2021-29516/43955",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29592",
+            "id": "pyup.io-43906",
+            "more_info_path": "/vulnerabilities/CVE-2021-29592/43906",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29582",
+            "id": "pyup.io-43899",
+            "more_info_path": "/vulnerabilities/CVE-2021-29582/43899",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29588",
+            "id": "pyup.io-43904",
+            "more_info_path": "/vulnerabilities/CVE-2021-29588/43904",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29519",
+            "id": "pyup.io-43858",
+            "more_info_path": "/vulnerabilities/CVE-2021-29519/43858",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29561",
+            "id": "pyup.io-43959",
+            "more_info_path": "/vulnerabilities/CVE-2021-29561/43959",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29515",
+            "id": "pyup.io-43963",
+            "more_info_path": "/vulnerabilities/CVE-2021-29515/43963",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
+            "cve": "CVE-2021-29520",
+            "id": "pyup.io-43861",
+            "more_info_path": "/vulnerabilities/CVE-2021-29520/43861",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29546",
+            "id": "pyup.io-43933",
+            "more_info_path": "/vulnerabilities/CVE-2021-29546/43933",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29562",
+            "id": "pyup.io-43958",
+            "more_info_path": "/vulnerabilities/CVE-2021-29562/43958",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29569",
+            "id": "pyup.io-43957",
+            "more_info_path": "/vulnerabilities/CVE-2021-29569/43957",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
+        {
+            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
+            "cve": "CVE-2021-29564",
+            "id": "pyup.io-43862",
+            "more_info_path": "/vulnerabilities/CVE-2021-29564/43862",
+            "specs": [
+                "<0.11.1"
+            ],
+            "v": "<0.11.1"
+        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
             "cve": "CVE-2021-29521",
@@ -106666,16 +110419,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29543",
-            "id": "pyup.io-43867",
-            "more_info_path": "/vulnerabilities/CVE-2021-29543/43867",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
             "cve": "CVE-2021-29565",
@@ -106746,16 +110489,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29533",
-            "id": "pyup.io-43884",
-            "more_info_path": "/vulnerabilities/CVE-2021-29533/43884",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
             "cve": "CVE-2021-29556",
@@ -106806,16 +110539,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29540",
-            "id": "pyup.io-43889",
-            "more_info_path": "/vulnerabilities/CVE-2021-29540/43889",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
             "cve": "CVE-2021-29583",
@@ -106838,9 +110561,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29542",
-            "id": "pyup.io-43927",
-            "more_info_path": "/vulnerabilities/CVE-2021-29542/43927",
+            "cve": "CVE-2021-29587",
+            "id": "pyup.io-43872",
+            "more_info_path": "/vulnerabilities/CVE-2021-29587/43872",
             "specs": [
                 "<0.11.1"
             ],
@@ -106848,9 +110571,9 @@
         },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29587",
-            "id": "pyup.io-43872",
-            "more_info_path": "/vulnerabilities/CVE-2021-29587/43872",
+            "cve": "CVE-2021-29542",
+            "id": "pyup.io-43927",
+            "more_info_path": "/vulnerabilities/CVE-2021-29542/43927",
             "specs": [
                 "<0.11.1"
             ],
@@ -106896,66 +110619,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29522",
-            "id": "pyup.io-43859",
-            "more_info_path": "/vulnerabilities/CVE-2021-29522/43859",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29534",
-            "id": "pyup.io-43870",
-            "more_info_path": "/vulnerabilities/CVE-2021-29534/43870",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29566",
-            "id": "pyup.io-43874",
-            "more_info_path": "/vulnerabilities/CVE-2021-29566/43874",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29581",
-            "id": "pyup.io-43898",
-            "more_info_path": "/vulnerabilities/CVE-2021-29581/43898",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29596",
-            "id": "pyup.io-43911",
-            "more_info_path": "/vulnerabilities/CVE-2021-29596/43911",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29597",
-            "id": "pyup.io-43914",
-            "more_info_path": "/vulnerabilities/CVE-2021-29597/43914",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
             "cve": "CVE-2021-29599",
@@ -106966,26 +110629,6 @@
             ],
             "v": "<0.11.1"
         },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29619",
-            "id": "pyup.io-43941",
-            "more_info_path": "/vulnerabilities/CVE-2021-29619/43941",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
-        {
-            "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes",
-            "cve": "CVE-2021-29541",
-            "id": "pyup.io-43928",
-            "more_info_path": "/vulnerabilities/CVE-2021-29541/43928",
-            "specs": [
-                "<0.11.1"
-            ],
-            "v": "<0.11.1"
-        },
         {
             "advisory": "Pupyl 0.11.1 updates 'Tensorflow' to v2.5.0 to include security fixes.",
             "cve": "CVE-2020-8285",
@@ -107018,9 +110661,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37678",
-            "id": "pyup.io-46285",
-            "more_info_path": "/vulnerabilities/CVE-2021-37678/46285",
+            "cve": "CVE-2021-37643",
+            "id": "pyup.io-46250",
+            "more_info_path": "/vulnerabilities/CVE-2021-37643/46250",
             "specs": [
                 "<0.12.1"
             ],
@@ -107028,9 +110671,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37690",
-            "id": "pyup.io-46297",
-            "more_info_path": "/vulnerabilities/CVE-2021-37690/46297",
+            "cve": "CVE-2021-37650",
+            "id": "pyup.io-46257",
+            "more_info_path": "/vulnerabilities/CVE-2021-37650/46257",
             "specs": [
                 "<0.12.1"
             ],
@@ -107038,9 +110681,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37687",
-            "id": "pyup.io-46294",
-            "more_info_path": "/vulnerabilities/CVE-2021-37687/46294",
+            "cve": "CVE-2021-37662",
+            "id": "pyup.io-46269",
+            "more_info_path": "/vulnerabilities/CVE-2021-37662/46269",
             "specs": [
                 "<0.12.1"
             ],
@@ -107048,9 +110691,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37643",
-            "id": "pyup.io-46250",
-            "more_info_path": "/vulnerabilities/CVE-2021-37643/46250",
+            "cve": "CVE-2021-37672",
+            "id": "pyup.io-46279",
+            "more_info_path": "/vulnerabilities/CVE-2021-37672/46279",
             "specs": [
                 "<0.12.1"
             ],
@@ -107058,9 +110701,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37659",
-            "id": "pyup.io-46266",
-            "more_info_path": "/vulnerabilities/CVE-2021-37659/46266",
+            "cve": "CVE-2021-37682",
+            "id": "pyup.io-46289",
+            "more_info_path": "/vulnerabilities/CVE-2021-37682/46289",
             "specs": [
                 "<0.12.1"
             ],
@@ -107068,9 +110711,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37650",
-            "id": "pyup.io-46257",
-            "more_info_path": "/vulnerabilities/CVE-2021-37650/46257",
+            "cve": "CVE-2021-37635",
+            "id": "pyup.io-46242",
+            "more_info_path": "/vulnerabilities/CVE-2021-37635/46242",
             "specs": [
                 "<0.12.1"
             ],
@@ -107078,9 +110721,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37662",
-            "id": "pyup.io-46269",
-            "more_info_path": "/vulnerabilities/CVE-2021-37662/46269",
+            "cve": "CVE-2021-37657",
+            "id": "pyup.io-46264",
+            "more_info_path": "/vulnerabilities/CVE-2021-37657/46264",
             "specs": [
                 "<0.12.1"
             ],
@@ -107088,9 +110731,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37672",
-            "id": "pyup.io-46279",
-            "more_info_path": "/vulnerabilities/CVE-2021-37672/46279",
+            "cve": "CVE-2021-37664",
+            "id": "pyup.io-46271",
+            "more_info_path": "/vulnerabilities/CVE-2021-37664/46271",
             "specs": [
                 "<0.12.1"
             ],
@@ -107098,9 +110741,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37682",
-            "id": "pyup.io-46289",
-            "more_info_path": "/vulnerabilities/CVE-2021-37682/46289",
+            "cve": "CVE-2021-37686",
+            "id": "pyup.io-46293",
+            "more_info_path": "/vulnerabilities/CVE-2021-37686/46293",
             "specs": [
                 "<0.12.1"
             ],
@@ -107108,9 +110751,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37638",
-            "id": "pyup.io-46245",
-            "more_info_path": "/vulnerabilities/CVE-2021-37638/46245",
+            "cve": "CVE-2021-37679",
+            "id": "pyup.io-46286",
+            "more_info_path": "/vulnerabilities/CVE-2021-37679/46286",
             "specs": [
                 "<0.12.1"
             ],
@@ -107118,9 +110761,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37635",
-            "id": "pyup.io-46242",
-            "more_info_path": "/vulnerabilities/CVE-2021-37635/46242",
+            "cve": "CVE-2021-37678",
+            "id": "pyup.io-46285",
+            "more_info_path": "/vulnerabilities/CVE-2021-37678/46285",
             "specs": [
                 "<0.12.1"
             ],
@@ -107128,9 +110771,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37657",
-            "id": "pyup.io-46264",
-            "more_info_path": "/vulnerabilities/CVE-2021-37657/46264",
+            "cve": "CVE-2021-37690",
+            "id": "pyup.io-46297",
+            "more_info_path": "/vulnerabilities/CVE-2021-37690/46297",
             "specs": [
                 "<0.12.1"
             ],
@@ -107138,9 +110781,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37664",
-            "id": "pyup.io-46271",
-            "more_info_path": "/vulnerabilities/CVE-2021-37664/46271",
+            "cve": "CVE-2021-37687",
+            "id": "pyup.io-46294",
+            "more_info_path": "/vulnerabilities/CVE-2021-37687/46294",
             "specs": [
                 "<0.12.1"
             ],
@@ -107148,9 +110791,19 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37686",
-            "id": "pyup.io-46293",
-            "more_info_path": "/vulnerabilities/CVE-2021-37686/46293",
+            "cve": "CVE-2021-37659",
+            "id": "pyup.io-46266",
+            "more_info_path": "/vulnerabilities/CVE-2021-37659/46266",
+            "specs": [
+                "<0.12.1"
+            ],
+            "v": "<0.12.1"
+        },
+        {
+            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
+            "cve": "CVE-2021-37638",
+            "id": "pyup.io-46245",
+            "more_info_path": "/vulnerabilities/CVE-2021-37638/46245",
             "specs": [
                 "<0.12.1"
             ],
@@ -107178,9 +110831,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37679",
-            "id": "pyup.io-46286",
-            "more_info_path": "/vulnerabilities/CVE-2021-37679/46286",
+            "cve": "CVE-2021-37688",
+            "id": "pyup.io-46295",
+            "more_info_path": "/vulnerabilities/CVE-2021-37688/46295",
             "specs": [
                 "<0.12.1"
             ],
@@ -107188,9 +110841,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-22898",
-            "id": "pyup.io-46240",
-            "more_info_path": "/vulnerabilities/CVE-2021-22898/46240",
+            "cve": "CVE-2021-37645",
+            "id": "pyup.io-46252",
+            "more_info_path": "/vulnerabilities/CVE-2021-37645/46252",
             "specs": [
                 "<0.12.1"
             ],
@@ -107198,9 +110851,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37667",
-            "id": "pyup.io-46274",
-            "more_info_path": "/vulnerabilities/CVE-2021-37667/46274",
+            "cve": "CVE-2021-37669",
+            "id": "pyup.io-46276",
+            "more_info_path": "/vulnerabilities/CVE-2021-37669/46276",
             "specs": [
                 "<0.12.1"
             ],
@@ -107208,9 +110861,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37644",
-            "id": "pyup.io-46251",
-            "more_info_path": "/vulnerabilities/CVE-2021-37644/46251",
+            "cve": "CVE-2021-37668",
+            "id": "pyup.io-46275",
+            "more_info_path": "/vulnerabilities/CVE-2021-37668/46275",
             "specs": [
                 "<0.12.1"
             ],
@@ -107218,9 +110871,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37688",
-            "id": "pyup.io-46295",
-            "more_info_path": "/vulnerabilities/CVE-2021-37688/46295",
+            "cve": "CVE-2021-37636",
+            "id": "pyup.io-46243",
+            "more_info_path": "/vulnerabilities/CVE-2021-37636/46243",
             "specs": [
                 "<0.12.1"
             ],
@@ -107228,9 +110881,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37645",
-            "id": "pyup.io-46252",
-            "more_info_path": "/vulnerabilities/CVE-2021-37645/46252",
+            "cve": "CVE-2021-37673",
+            "id": "pyup.io-46280",
+            "more_info_path": "/vulnerabilities/CVE-2021-37673/46280",
             "specs": [
                 "<0.12.1"
             ],
@@ -107238,9 +110891,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37692",
-            "id": "pyup.io-46299",
-            "more_info_path": "/vulnerabilities/CVE-2021-37692/46299",
+            "cve": "CVE-2021-37675",
+            "id": "pyup.io-46282",
+            "more_info_path": "/vulnerabilities/CVE-2021-37675/46282",
             "specs": [
                 "<0.12.1"
             ],
@@ -107248,9 +110901,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37683",
-            "id": "pyup.io-46290",
-            "more_info_path": "/vulnerabilities/CVE-2021-37683/46290",
+            "cve": "CVE-2021-37666",
+            "id": "pyup.io-46273",
+            "more_info_path": "/vulnerabilities/CVE-2021-37666/46273",
             "specs": [
                 "<0.12.1"
             ],
@@ -107258,9 +110911,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37680",
-            "id": "pyup.io-46287",
-            "more_info_path": "/vulnerabilities/CVE-2021-37680/46287",
+            "cve": "CVE-2021-37656",
+            "id": "pyup.io-46263",
+            "more_info_path": "/vulnerabilities/CVE-2021-37656/46263",
             "specs": [
                 "<0.12.1"
             ],
@@ -107268,9 +110921,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37641",
-            "id": "pyup.io-46248",
-            "more_info_path": "/vulnerabilities/CVE-2021-37641/46248",
+            "cve": "CVE-2021-37660",
+            "id": "pyup.io-46267",
+            "more_info_path": "/vulnerabilities/CVE-2021-37660/46267",
             "specs": [
                 "<0.12.1"
             ],
@@ -107278,9 +110931,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37661",
-            "id": "pyup.io-46268",
-            "more_info_path": "/vulnerabilities/CVE-2021-37661/46268",
+            "cve": "CVE-2021-37681",
+            "id": "pyup.io-46288",
+            "more_info_path": "/vulnerabilities/CVE-2021-37681/46288",
             "specs": [
                 "<0.12.1"
             ],
@@ -107288,9 +110941,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37669",
-            "id": "pyup.io-46276",
-            "more_info_path": "/vulnerabilities/CVE-2021-37669/46276",
+            "cve": "CVE-2021-22898",
+            "id": "pyup.io-46240",
+            "more_info_path": "/vulnerabilities/CVE-2021-22898/46240",
             "specs": [
                 "<0.12.1"
             ],
@@ -107298,9 +110951,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37668",
-            "id": "pyup.io-46275",
-            "more_info_path": "/vulnerabilities/CVE-2021-37668/46275",
+            "cve": "CVE-2021-37667",
+            "id": "pyup.io-46274",
+            "more_info_path": "/vulnerabilities/CVE-2021-37667/46274",
             "specs": [
                 "<0.12.1"
             ],
@@ -107308,9 +110961,59 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37636",
-            "id": "pyup.io-46243",
-            "more_info_path": "/vulnerabilities/CVE-2021-37636/46243",
+            "cve": "CVE-2021-37644",
+            "id": "pyup.io-46251",
+            "more_info_path": "/vulnerabilities/CVE-2021-37644/46251",
+            "specs": [
+                "<0.12.1"
+            ],
+            "v": "<0.12.1"
+        },
+        {
+            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
+            "cve": "CVE-2021-37683",
+            "id": "pyup.io-46290",
+            "more_info_path": "/vulnerabilities/CVE-2021-37683/46290",
+            "specs": [
+                "<0.12.1"
+            ],
+            "v": "<0.12.1"
+        },
+        {
+            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
+            "cve": "CVE-2021-37680",
+            "id": "pyup.io-46287",
+            "more_info_path": "/vulnerabilities/CVE-2021-37680/46287",
+            "specs": [
+                "<0.12.1"
+            ],
+            "v": "<0.12.1"
+        },
+        {
+            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
+            "cve": "CVE-2021-37692",
+            "id": "pyup.io-46299",
+            "more_info_path": "/vulnerabilities/CVE-2021-37692/46299",
+            "specs": [
+                "<0.12.1"
+            ],
+            "v": "<0.12.1"
+        },
+        {
+            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
+            "cve": "CVE-2021-37641",
+            "id": "pyup.io-46248",
+            "more_info_path": "/vulnerabilities/CVE-2021-37641/46248",
+            "specs": [
+                "<0.12.1"
+            ],
+            "v": "<0.12.1"
+        },
+        {
+            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
+            "cve": "CVE-2021-37661",
+            "id": "pyup.io-46268",
+            "more_info_path": "/vulnerabilities/CVE-2021-37661/46268",
             "specs": [
                 "<0.12.1"
             ],
@@ -107356,16 +111059,6 @@
             ],
             "v": "<0.12.1"
         },
-        {
-            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37673",
-            "id": "pyup.io-46280",
-            "more_info_path": "/vulnerabilities/CVE-2021-37673/46280",
-            "specs": [
-                "<0.12.1"
-            ],
-            "v": "<0.12.1"
-        },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
             "cve": "CVE-2021-37676",
@@ -107376,16 +111069,6 @@
             ],
             "v": "<0.12.1"
         },
-        {
-            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37675",
-            "id": "pyup.io-46282",
-            "more_info_path": "/vulnerabilities/CVE-2021-37675/46282",
-            "specs": [
-                "<0.12.1"
-            ],
-            "v": "<0.12.1"
-        },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
             "cve": "CVE-2021-37689",
@@ -107448,9 +111131,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37655",
-            "id": "pyup.io-46262",
-            "more_info_path": "/vulnerabilities/CVE-2021-37655/46262",
+            "cve": "CVE-2021-37665",
+            "id": "pyup.io-46272",
+            "more_info_path": "/vulnerabilities/CVE-2021-37665/46272",
             "specs": [
                 "<0.12.1"
             ],
@@ -107458,9 +111141,9 @@
         },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37665",
-            "id": "pyup.io-46272",
-            "more_info_path": "/vulnerabilities/CVE-2021-37665/46272",
+            "cve": "CVE-2021-37655",
+            "id": "pyup.io-46262",
+            "more_info_path": "/vulnerabilities/CVE-2021-37655/46262",
             "specs": [
                 "<0.12.1"
             ],
@@ -107536,16 +111219,6 @@
             ],
             "v": "<0.12.1"
         },
-        {
-            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37666",
-            "id": "pyup.io-46273",
-            "more_info_path": "/vulnerabilities/CVE-2021-37666/46273",
-            "specs": [
-                "<0.12.1"
-            ],
-            "v": "<0.12.1"
-        },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
             "cve": "CVE-2021-37684",
@@ -107556,26 +111229,6 @@
             ],
             "v": "<0.12.1"
         },
-        {
-            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37656",
-            "id": "pyup.io-46263",
-            "more_info_path": "/vulnerabilities/CVE-2021-37656/46263",
-            "specs": [
-                "<0.12.1"
-            ],
-            "v": "<0.12.1"
-        },
-        {
-            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37660",
-            "id": "pyup.io-46267",
-            "more_info_path": "/vulnerabilities/CVE-2021-37660/46267",
-            "specs": [
-                "<0.12.1"
-            ],
-            "v": "<0.12.1"
-        },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
             "cve": "CVE-2021-37653",
@@ -107586,16 +111239,6 @@
             ],
             "v": "<0.12.1"
         },
-        {
-            "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
-            "cve": "CVE-2021-37681",
-            "id": "pyup.io-46288",
-            "more_info_path": "/vulnerabilities/CVE-2021-37681/46288",
-            "specs": [
-                "<0.12.1"
-            ],
-            "v": "<0.12.1"
-        },
         {
             "advisory": "Pupyl 0.12.1 updates its dependency 'TensorFlow' to v2.6.0 to include security fixes.",
             "cve": "CVE-2021-22876",
@@ -107626,16 +111269,6 @@
             ],
             "v": "<0.12.1"
         },
-        {
-            "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41219",
-            "id": "pyup.io-46330",
-            "more_info_path": "/vulnerabilities/CVE-2021-41219/46330",
-            "specs": [
-                "<0.12.4"
-            ],
-            "v": "<0.12.4"
-        },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
             "cve": "CVE-2021-41222",
@@ -107646,16 +111279,6 @@
             ],
             "v": "<0.12.4"
         },
-        {
-            "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41205",
-            "id": "pyup.io-46316",
-            "more_info_path": "/vulnerabilities/CVE-2021-41205/46316",
-            "specs": [
-                "<0.12.4"
-            ],
-            "v": "<0.12.4"
-        },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
             "cve": "CVE-2021-41220",
@@ -107696,6 +111319,26 @@
             ],
             "v": "<0.12.4"
         },
+        {
+            "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
+            "cve": "CVE-2021-41219",
+            "id": "pyup.io-46330",
+            "more_info_path": "/vulnerabilities/CVE-2021-41219/46330",
+            "specs": [
+                "<0.12.4"
+            ],
+            "v": "<0.12.4"
+        },
+        {
+            "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
+            "cve": "CVE-2021-41205",
+            "id": "pyup.io-46316",
+            "more_info_path": "/vulnerabilities/CVE-2021-41205/46316",
+            "specs": [
+                "<0.12.4"
+            ],
+            "v": "<0.12.4"
+        },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
             "cve": "CVE-2021-22923",
@@ -107708,9 +111351,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41207",
-            "id": "pyup.io-46318",
-            "more_info_path": "/vulnerabilities/CVE-2021-41207/46318",
+            "cve": "CVE-2021-41209",
+            "id": "pyup.io-46320",
+            "more_info_path": "/vulnerabilities/CVE-2021-41209/46320",
             "specs": [
                 "<0.12.4"
             ],
@@ -107718,9 +111361,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41198",
-            "id": "pyup.io-46309",
-            "more_info_path": "/vulnerabilities/CVE-2021-41198/46309",
+            "cve": "CVE-2021-41201",
+            "id": "pyup.io-46312",
+            "more_info_path": "/vulnerabilities/CVE-2021-41201/46312",
             "specs": [
                 "<0.12.4"
             ],
@@ -107728,9 +111371,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41202",
-            "id": "pyup.io-46313",
-            "more_info_path": "/vulnerabilities/CVE-2021-41202/46313",
+            "cve": "CVE-2021-41214",
+            "id": "pyup.io-46325",
+            "more_info_path": "/vulnerabilities/CVE-2021-41214/46325",
             "specs": [
                 "<0.12.4"
             ],
@@ -107738,9 +111381,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41209",
-            "id": "pyup.io-46320",
-            "more_info_path": "/vulnerabilities/CVE-2021-41209/46320",
+            "cve": "CVE-2021-41203",
+            "id": "pyup.io-46314",
+            "more_info_path": "/vulnerabilities/CVE-2021-41203/46314",
             "specs": [
                 "<0.12.4"
             ],
@@ -107748,9 +111391,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41206",
-            "id": "pyup.io-46317",
-            "more_info_path": "/vulnerabilities/CVE-2021-41206/46317",
+            "cve": "CVE-2021-41204",
+            "id": "pyup.io-46315",
+            "more_info_path": "/vulnerabilities/CVE-2021-41204/46315",
             "specs": [
                 "<0.12.4"
             ],
@@ -107758,9 +111401,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41223",
-            "id": "pyup.io-46334",
-            "more_info_path": "/vulnerabilities/CVE-2021-41223/46334",
+            "cve": "CVE-2021-41228",
+            "id": "pyup.io-46339",
+            "more_info_path": "/vulnerabilities/CVE-2021-41228/46339",
             "specs": [
                 "<0.12.4"
             ],
@@ -107768,9 +111411,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41199",
-            "id": "pyup.io-46310",
-            "more_info_path": "/vulnerabilities/CVE-2021-41199/46310",
+            "cve": "CVE-2021-22926",
+            "id": "pyup.io-46305",
+            "more_info_path": "/vulnerabilities/CVE-2021-22926/46305",
             "specs": [
                 "<0.12.4"
             ],
@@ -107778,9 +111421,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41210",
-            "id": "pyup.io-46321",
-            "more_info_path": "/vulnerabilities/CVE-2021-41210/46321",
+            "cve": "CVE-2021-41207",
+            "id": "pyup.io-46318",
+            "more_info_path": "/vulnerabilities/CVE-2021-41207/46318",
             "specs": [
                 "<0.12.4"
             ],
@@ -107788,9 +111431,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41227",
-            "id": "pyup.io-46338",
-            "more_info_path": "/vulnerabilities/CVE-2021-41227/46338",
+            "cve": "CVE-2021-41198",
+            "id": "pyup.io-46309",
+            "more_info_path": "/vulnerabilities/CVE-2021-41198/46309",
             "specs": [
                 "<0.12.4"
             ],
@@ -107798,9 +111441,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41200",
-            "id": "pyup.io-46311",
-            "more_info_path": "/vulnerabilities/CVE-2021-41200/46311",
+            "cve": "CVE-2021-41202",
+            "id": "pyup.io-46313",
+            "more_info_path": "/vulnerabilities/CVE-2021-41202/46313",
             "specs": [
                 "<0.12.4"
             ],
@@ -107808,9 +111451,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41201",
-            "id": "pyup.io-46312",
-            "more_info_path": "/vulnerabilities/CVE-2021-41201/46312",
+            "cve": "CVE-2021-41206",
+            "id": "pyup.io-46317",
+            "more_info_path": "/vulnerabilities/CVE-2021-41206/46317",
             "specs": [
                 "<0.12.4"
             ],
@@ -107818,9 +111461,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41214",
-            "id": "pyup.io-46325",
-            "more_info_path": "/vulnerabilities/CVE-2021-41214/46325",
+            "cve": "CVE-2021-41223",
+            "id": "pyup.io-46334",
+            "more_info_path": "/vulnerabilities/CVE-2021-41223/46334",
             "specs": [
                 "<0.12.4"
             ],
@@ -107828,9 +111471,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41217",
-            "id": "pyup.io-46328",
-            "more_info_path": "/vulnerabilities/CVE-2021-41217/46328",
+            "cve": "CVE-2021-41199",
+            "id": "pyup.io-46310",
+            "more_info_path": "/vulnerabilities/CVE-2021-41199/46310",
             "specs": [
                 "<0.12.4"
             ],
@@ -107838,9 +111481,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41203",
-            "id": "pyup.io-46314",
-            "more_info_path": "/vulnerabilities/CVE-2021-41203/46314",
+            "cve": "CVE-2021-41210",
+            "id": "pyup.io-46321",
+            "more_info_path": "/vulnerabilities/CVE-2021-41210/46321",
             "specs": [
                 "<0.12.4"
             ],
@@ -107848,9 +111491,29 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41204",
-            "id": "pyup.io-46315",
-            "more_info_path": "/vulnerabilities/CVE-2021-41204/46315",
+            "cve": "CVE-2021-41227",
+            "id": "pyup.io-46338",
+            "more_info_path": "/vulnerabilities/CVE-2021-41227/46338",
+            "specs": [
+                "<0.12.4"
+            ],
+            "v": "<0.12.4"
+        },
+        {
+            "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
+            "cve": "CVE-2021-41200",
+            "id": "pyup.io-46311",
+            "more_info_path": "/vulnerabilities/CVE-2021-41200/46311",
+            "specs": [
+                "<0.12.4"
+            ],
+            "v": "<0.12.4"
+        },
+        {
+            "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
+            "cve": "CVE-2021-41217",
+            "id": "pyup.io-46328",
+            "more_info_path": "/vulnerabilities/CVE-2021-41217/46328",
             "specs": [
                 "<0.12.4"
             ],
@@ -107878,9 +111541,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41195",
-            "id": "pyup.io-46306",
-            "more_info_path": "/vulnerabilities/CVE-2021-41195/46306",
+            "cve": "CVE-2021-41196",
+            "id": "pyup.io-46307",
+            "more_info_path": "/vulnerabilities/CVE-2021-41196/46307",
             "specs": [
                 "<0.12.4"
             ],
@@ -107888,9 +111551,9 @@
         },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41196",
-            "id": "pyup.io-46307",
-            "more_info_path": "/vulnerabilities/CVE-2021-41196/46307",
+            "cve": "CVE-2021-41195",
+            "id": "pyup.io-46306",
+            "more_info_path": "/vulnerabilities/CVE-2021-41195/46306",
             "specs": [
                 "<0.12.4"
             ],
@@ -107966,26 +111629,6 @@
             ],
             "v": "<0.12.4"
         },
-        {
-            "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-41228",
-            "id": "pyup.io-46339",
-            "more_info_path": "/vulnerabilities/CVE-2021-41228/46339",
-            "specs": [
-                "<0.12.4"
-            ],
-            "v": "<0.12.4"
-        },
-        {
-            "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
-            "cve": "CVE-2021-22926",
-            "id": "pyup.io-46305",
-            "more_info_path": "/vulnerabilities/CVE-2021-22926/46305",
-            "specs": [
-                "<0.12.4"
-            ],
-            "v": "<0.12.4"
-        },
         {
             "advisory": "Pupyl 0.12.4 updates its dependency 'TensorFlow' to v2.6.1 to include security fixes.",
             "cve": "CVE-2021-22925",
@@ -108038,9 +111681,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23594",
-            "id": "pyup.io-46395",
-            "more_info_path": "/vulnerabilities/CVE-2022-23594/46395",
+            "cve": "CVE-2022-23563",
+            "id": "pyup.io-46364",
+            "more_info_path": "/vulnerabilities/CVE-2022-23563/46364",
             "specs": [
                 "<0.13.2"
             ],
@@ -108048,9 +111691,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23591",
-            "id": "pyup.io-46392",
-            "more_info_path": "/vulnerabilities/CVE-2022-23591/46392",
+            "cve": "CVE-2022-23576",
+            "id": "pyup.io-46377",
+            "more_info_path": "/vulnerabilities/CVE-2022-23576/46377",
             "specs": [
                 "<0.13.2"
             ],
@@ -108058,9 +111701,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23582",
-            "id": "pyup.io-46383",
-            "more_info_path": "/vulnerabilities/CVE-2022-23582/46383",
+            "cve": "CVE-2022-23586",
+            "id": "pyup.io-46387",
+            "more_info_path": "/vulnerabilities/CVE-2022-23586/46387",
             "specs": [
                 "<0.13.2"
             ],
@@ -108068,9 +111711,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23563",
-            "id": "pyup.io-46364",
-            "more_info_path": "/vulnerabilities/CVE-2022-23563/46364",
+            "cve": "CVE-2022-21732",
+            "id": "pyup.io-46348",
+            "more_info_path": "/vulnerabilities/CVE-2022-21732/46348",
             "specs": [
                 "<0.13.2"
             ],
@@ -108078,9 +111721,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23586",
-            "id": "pyup.io-46387",
-            "more_info_path": "/vulnerabilities/CVE-2022-23586/46387",
+            "cve": "CVE-2022-23578",
+            "id": "pyup.io-46379",
+            "more_info_path": "/vulnerabilities/CVE-2022-23578/46379",
             "specs": [
                 "<0.13.2"
             ],
@@ -108088,9 +111731,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23578",
-            "id": "pyup.io-46379",
-            "more_info_path": "/vulnerabilities/CVE-2022-23578/46379",
+            "cve": "CVE-2022-23565",
+            "id": "pyup.io-46366",
+            "more_info_path": "/vulnerabilities/CVE-2022-23565/46366",
             "specs": [
                 "<0.13.2"
             ],
@@ -108098,9 +111741,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23576",
-            "id": "pyup.io-46377",
-            "more_info_path": "/vulnerabilities/CVE-2022-23576/46377",
+            "cve": "CVE-2022-23595",
+            "id": "pyup.io-46396",
+            "more_info_path": "/vulnerabilities/CVE-2022-23595/46396",
             "specs": [
                 "<0.13.2"
             ],
@@ -108108,9 +111751,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-21732",
-            "id": "pyup.io-46348",
-            "more_info_path": "/vulnerabilities/CVE-2022-21732/46348",
+            "cve": "CVE-2022-23559",
+            "id": "pyup.io-46360",
+            "more_info_path": "/vulnerabilities/CVE-2022-23559/46360",
             "specs": [
                 "<0.13.2"
             ],
@@ -108118,9 +111761,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23565",
-            "id": "pyup.io-46366",
-            "more_info_path": "/vulnerabilities/CVE-2022-23565/46366",
+            "cve": "CVE-2022-23589",
+            "id": "pyup.io-46390",
+            "more_info_path": "/vulnerabilities/CVE-2022-23589/46390",
             "specs": [
                 "<0.13.2"
             ],
@@ -108128,9 +111771,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23559",
-            "id": "pyup.io-46360",
-            "more_info_path": "/vulnerabilities/CVE-2022-23559/46360",
+            "cve": "CVE-2022-23585",
+            "id": "pyup.io-46386",
+            "more_info_path": "/vulnerabilities/CVE-2022-23585/46386",
             "specs": [
                 "<0.13.2"
             ],
@@ -108138,9 +111781,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23595",
-            "id": "pyup.io-46396",
-            "more_info_path": "/vulnerabilities/CVE-2022-23595/46396",
+            "cve": "CVE-2020-10531",
+            "id": "pyup.io-46340",
+            "more_info_path": "/vulnerabilities/CVE-2020-10531/46340",
             "specs": [
                 "<0.13.2"
             ],
@@ -108148,9 +111791,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23589",
-            "id": "pyup.io-46390",
-            "more_info_path": "/vulnerabilities/CVE-2022-23589/46390",
+            "cve": "CVE-2022-23591",
+            "id": "pyup.io-46392",
+            "more_info_path": "/vulnerabilities/CVE-2022-23591/46392",
             "specs": [
                 "<0.13.2"
             ],
@@ -108158,9 +111801,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-21734",
-            "id": "pyup.io-46350",
-            "more_info_path": "/vulnerabilities/CVE-2022-21734/46350",
+            "cve": "CVE-2022-23594",
+            "id": "pyup.io-46395",
+            "more_info_path": "/vulnerabilities/CVE-2022-23594/46395",
             "specs": [
                 "<0.13.2"
             ],
@@ -108168,9 +111811,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23569",
-            "id": "pyup.io-46370",
-            "more_info_path": "/vulnerabilities/CVE-2022-23569/46370",
+            "cve": "CVE-2022-23582",
+            "id": "pyup.io-46383",
+            "more_info_path": "/vulnerabilities/CVE-2022-23582/46383",
             "specs": [
                 "<0.13.2"
             ],
@@ -108178,9 +111821,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23585",
-            "id": "pyup.io-46386",
-            "more_info_path": "/vulnerabilities/CVE-2022-23585/46386",
+            "cve": "CVE-2022-21734",
+            "id": "pyup.io-46350",
+            "more_info_path": "/vulnerabilities/CVE-2022-21734/46350",
             "specs": [
                 "<0.13.2"
             ],
@@ -108188,9 +111831,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2020-10531",
-            "id": "pyup.io-46340",
-            "more_info_path": "/vulnerabilities/CVE-2020-10531/46340",
+            "cve": "CVE-2022-23569",
+            "id": "pyup.io-46370",
+            "more_info_path": "/vulnerabilities/CVE-2022-23569/46370",
             "specs": [
                 "<0.13.2"
             ],
@@ -108228,9 +111871,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-21730",
-            "id": "pyup.io-46346",
-            "more_info_path": "/vulnerabilities/CVE-2022-21730/46346",
+            "cve": "CVE-2022-23579",
+            "id": "pyup.io-46380",
+            "more_info_path": "/vulnerabilities/CVE-2022-23579/46380",
             "specs": [
                 "<0.13.2"
             ],
@@ -108238,9 +111881,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23579",
-            "id": "pyup.io-46380",
-            "more_info_path": "/vulnerabilities/CVE-2022-23579/46380",
+            "cve": "CVE-2022-21740",
+            "id": "pyup.io-46356",
+            "more_info_path": "/vulnerabilities/CVE-2022-21740/46356",
             "specs": [
                 "<0.13.2"
             ],
@@ -108248,9 +111891,49 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-21740",
-            "id": "pyup.io-46356",
-            "more_info_path": "/vulnerabilities/CVE-2022-21740/46356",
+            "cve": "CVE-2022-23561",
+            "id": "pyup.io-46362",
+            "more_info_path": "/vulnerabilities/CVE-2022-23561/46362",
+            "specs": [
+                "<0.13.2"
+            ],
+            "v": "<0.13.2"
+        },
+        {
+            "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
+            "cve": "CVE-2022-21731",
+            "id": "pyup.io-46347",
+            "more_info_path": "/vulnerabilities/CVE-2022-21731/46347",
+            "specs": [
+                "<0.13.2"
+            ],
+            "v": "<0.13.2"
+        },
+        {
+            "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
+            "cve": "CVE-2022-21729",
+            "id": "pyup.io-46345",
+            "more_info_path": "/vulnerabilities/CVE-2022-21729/46345",
+            "specs": [
+                "<0.13.2"
+            ],
+            "v": "<0.13.2"
+        },
+        {
+            "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
+            "cve": "CVE-2022-23570",
+            "id": "pyup.io-46371",
+            "more_info_path": "/vulnerabilities/CVE-2022-23570/46371",
+            "specs": [
+                "<0.13.2"
+            ],
+            "v": "<0.13.2"
+        },
+        {
+            "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
+            "cve": "CVE-2022-21730",
+            "id": "pyup.io-46346",
+            "more_info_path": "/vulnerabilities/CVE-2022-21730/46346",
             "specs": [
                 "<0.13.2"
             ],
@@ -108306,16 +111989,6 @@
             ],
             "v": "<0.13.2"
         },
-        {
-            "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23561",
-            "id": "pyup.io-46362",
-            "more_info_path": "/vulnerabilities/CVE-2022-23561/46362",
-            "specs": [
-                "<0.13.2"
-            ],
-            "v": "<0.13.2"
-        },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
             "cve": "CVE-2022-21739",
@@ -108336,16 +112009,6 @@
             ],
             "v": "<0.13.2"
         },
-        {
-            "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-21731",
-            "id": "pyup.io-46347",
-            "more_info_path": "/vulnerabilities/CVE-2022-21731/46347",
-            "specs": [
-                "<0.13.2"
-            ],
-            "v": "<0.13.2"
-        },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
             "cve": "CVE-2022-23590",
@@ -108396,16 +112059,6 @@
             ],
             "v": "<0.13.2"
         },
-        {
-            "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-21729",
-            "id": "pyup.io-46345",
-            "more_info_path": "/vulnerabilities/CVE-2022-21729/46345",
-            "specs": [
-                "<0.13.2"
-            ],
-            "v": "<0.13.2"
-        },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
             "cve": "CVE-2022-21737",
@@ -108516,16 +112169,6 @@
             ],
             "v": "<0.13.2"
         },
-        {
-            "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23580",
-            "id": "pyup.io-46381",
-            "more_info_path": "/vulnerabilities/CVE-2022-23580/46381",
-            "specs": [
-                "<0.13.2"
-            ],
-            "v": "<0.13.2"
-        },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
             "cve": "CVE-2022-23583",
@@ -108538,9 +112181,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-21725",
-            "id": "pyup.io-46341",
-            "more_info_path": "/vulnerabilities/CVE-2022-21725/46341",
+            "cve": "CVE-2022-23580",
+            "id": "pyup.io-46381",
+            "more_info_path": "/vulnerabilities/CVE-2022-23580/46381",
             "specs": [
                 "<0.13.2"
             ],
@@ -108548,9 +112191,9 @@
         },
         {
             "advisory": "Pupyl 0.13.2 updates its dependency 'TensorFlow' to v2.8.0 to include security fixes.",
-            "cve": "CVE-2022-23570",
-            "id": "pyup.io-46371",
-            "more_info_path": "/vulnerabilities/CVE-2022-23570/46371",
+            "cve": "CVE-2022-21725",
+            "id": "pyup.io-46341",
+            "more_info_path": "/vulnerabilities/CVE-2022-21725/46341",
             "specs": [
                 "<0.13.2"
             ],
@@ -108856,16 +112499,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Py-quantaq 1.2.0a0 updates its dependency 'numpy' to v1.23.2 to include security fixes.",
-            "cve": "CVE-2021-41496",
-            "id": "pyup.io-50904",
-            "more_info_path": "/vulnerabilities/CVE-2021-41496/50904",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Py-quantaq 1.2.0a0 updates its dependency 'urllib3' to v1.26.12 to include security fixes.",
             "cve": "CVE-2018-20060",
@@ -108926,6 +112559,16 @@
             ],
             "v": "<1.2.0a0"
         },
+        {
+            "advisory": "Py-quantaq 1.2.0a0 updates its dependency 'numpy' to v1.23.2 to include security fixes.",
+            "cve": "CVE-2021-41496",
+            "id": "pyup.io-50904",
+            "more_info_path": "/vulnerabilities/CVE-2021-41496/50904",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
         {
             "advisory": "Py-quantaq 1.3.0 updates its dependency 'urllib3' to v1.26.12 to include security fixes.",
             "cve": "CVE-2020-26137",
@@ -109177,6 +112820,18 @@
             "v": "<1.1.0"
         }
     ],
+    "py-trello-api": [
+        {
+            "advisory": "Py-trello-api 0.4.2 introduces an optional PyOpenSSL import for versions of Python older than 2.7.9 and 3.2, aiming to address security concerns related to OpenSSL as highlighted by CVE-2023-6129.",
+            "cve": "CVE-2023-6129",
+            "id": "pyup.io-67416",
+            "more_info_path": "/vulnerabilities/CVE-2023-6129/67416",
+            "specs": [
+                "<0.4.2"
+            ],
+            "v": "<0.4.2"
+        }
+    ],
     "py-xml": [
         {
             "advisory": "py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.",
@@ -109238,19 +112893,19 @@
         },
         {
             "advisory": "Py42 drops support for Python versions 2.7 and 3.5, that no longer receive security updates.",
-            "cve": "CVE-2021-3177",
-            "id": "pyup.io-43359",
-            "more_info_path": "/vulnerabilities/CVE-2021-3177/43359",
+            "cve": "CVE-2020-27619",
+            "id": "pyup.io-43361",
+            "more_info_path": "/vulnerabilities/CVE-2020-27619/43361",
             "specs": [
                 "<1.17.0"
             ],
             "v": "<1.17.0"
         },
         {
-            "advisory": "Py42 drops support for Python versions 2.7 and 3.5, that no longer receive security updates.",
-            "cve": "CVE-2020-27619",
-            "id": "pyup.io-43361",
-            "more_info_path": "/vulnerabilities/CVE-2020-27619/43361",
+            "advisory": "Py42 1.17.0 drops support for Python versions 2.7 and 3.5, that no longer receive security updates.",
+            "cve": "CVE-2021-3737",
+            "id": "pyup.io-43362",
+            "more_info_path": "/vulnerabilities/CVE-2021-3737/43362",
             "specs": [
                 "<1.17.0"
             ],
@@ -109267,10 +112922,10 @@
             "v": "<1.17.0"
         },
         {
-            "advisory": "Py42 1.17.0 drops support for Python versions 2.7 and 3.5, that no longer receive security updates.",
-            "cve": "CVE-2021-3737",
-            "id": "pyup.io-43362",
-            "more_info_path": "/vulnerabilities/CVE-2021-3737/43362",
+            "advisory": "Py42 drops support for Python versions 2.7 and 3.5, that no longer receive security updates.",
+            "cve": "CVE-2021-3177",
+            "id": "pyup.io-43359",
+            "more_info_path": "/vulnerabilities/CVE-2021-3177/43359",
             "specs": [
                 "<1.17.0"
             ],
@@ -109739,20 +113394,20 @@
     ],
     "pybotx": [
         {
-            "advisory": "Pybotx 0.55.3 updates its dependency 'requests' to v2.31.0 to include a security fix.",
-            "cve": "CVE-2023-32681",
-            "id": "pyup.io-58908",
-            "more_info_path": "/vulnerabilities/CVE-2023-32681/58908",
+            "advisory": "Pybotx 0.55.3 updates its dependency 'fastapy' to v0.95.2 to include a security fix.",
+            "cve": "PVE-2023-58713",
+            "id": "pyup.io-58906",
+            "more_info_path": "/vulnerabilities/PVE-2023-58713/58906",
             "specs": [
                 "<0.55.3"
             ],
             "v": "<0.55.3"
         },
         {
-            "advisory": "Pybotx 0.55.3 updates its dependency 'fastapy' to v0.95.2 to include a security fix.",
-            "cve": "PVE-2023-58713",
-            "id": "pyup.io-58906",
-            "more_info_path": "/vulnerabilities/PVE-2023-58713/58906",
+            "advisory": "Pybotx 0.55.3 updates its dependency 'requests' to v2.31.0 to include a security fix.",
+            "cve": "CVE-2023-32681",
+            "id": "pyup.io-58908",
+            "more_info_path": "/vulnerabilities/CVE-2023-32681/58908",
             "specs": [
                 "<0.55.3"
             ],
@@ -111238,6 +114893,16 @@
             ],
             "v": "<0.5.0b3.dev31"
         },
+        {
+            "advisory": "Pyload-ng versions before 0.5.0b3.dev77 are vulnerable to Log Injection, allowing any unauthenticated actor to inject arbitrary messages into the logs gathered by 'pyload'. Forged or otherwise, corrupted log files can be used to cover an attacker\u2019s tracks or even to implicate another party in the commission of a malicious act.",
+            "cve": "CVE-2024-21645",
+            "id": "pyup.io-63602",
+            "more_info_path": "/vulnerabilities/CVE-2024-21645/63602",
+            "specs": [
+                "<0.5.0b3.dev77"
+            ],
+            "v": "<0.5.0b3.dev77"
+        },
         {
             "advisory": "The pyload API, which supports making API calls through GET requests, was vulnerable to significant security risks due to the session cookie not being set to SameSite: strict. This vulnerability exposed the library to potential Cross-Site Request Forgery (CSRF) attacks, enabling unauthenticated users to make any API call through such an attack. This security concern has been resolved in the release 0.5.0b3.dev78.\r\nhttps://github.com/pyload/pyload/security/advisories/GHSA-pgpj-v85q-h5fm",
             "cve": "CVE-2024-22416",
@@ -111258,16 +114923,6 @@
             ],
             "v": "<0.5.0b3.dev77"
         },
-        {
-            "advisory": "Pyload-ng versions before 0.5.0b3.dev77 are vulnerable to Log Injection, allowing any unauthenticated actor to inject arbitrary messages into the logs gathered by 'pyload'. Forged or otherwise, corrupted log files can be used to cover an attacker\u2019s tracks or even to implicate another party in the commission of a malicious act.",
-            "cve": "CVE-2024-21645",
-            "id": "pyup.io-63602",
-            "more_info_path": "/vulnerabilities/CVE-2024-21645/63602",
-            "specs": [
-                "<0.5.0b3.dev77"
-            ],
-            "v": "<0.5.0b3.dev77"
-        },
         {
             "advisory": "pyLoad 0.5.0 is vulnerable to Unrestricted File Upload.",
             "cve": "CVE-2023-47890",
@@ -111329,20 +114984,20 @@
             "v": ">=0,<0.5.0b3.dev40"
         },
         {
-            "advisory": "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype.",
-            "cve": "CVE-2021-20088",
-            "id": "pyup.io-65843",
-            "more_info_path": "/vulnerabilities/CVE-2021-20088/65843",
+            "advisory": "Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.",
+            "cve": "CVE-2023-0435",
+            "id": "pyup.io-54622",
+            "more_info_path": "/vulnerabilities/CVE-2023-0435/54622",
             "specs": [
                 ">=0,<0.5.0b3.dev41"
             ],
             "v": ">=0,<0.5.0b3.dev41"
         },
         {
-            "advisory": "Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.",
-            "cve": "CVE-2023-0435",
-            "id": "pyup.io-54622",
-            "more_info_path": "/vulnerabilities/CVE-2023-0435/54622",
+            "advisory": "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype.",
+            "cve": "CVE-2021-20088",
+            "id": "pyup.io-65843",
+            "more_info_path": "/vulnerabilities/CVE-2021-20088/65843",
             "specs": [
                 ">=0,<0.5.0b3.dev41"
             ],
@@ -111818,9 +115473,9 @@
     "pyoes": [
         {
             "advisory": "Pyoes 0.9.0 updates its dependency 'pyramid' to 1.10.4 to include security fixes.",
-            "cve": "CVE-2014-4671",
-            "id": "pyup.io-49087",
-            "more_info_path": "/vulnerabilities/CVE-2014-4671/49087",
+            "cve": "PVE-2021-32203",
+            "id": "pyup.io-49088",
+            "more_info_path": "/vulnerabilities/PVE-2021-32203/49088",
             "specs": [
                 "<0.9.0"
             ],
@@ -111828,9 +115483,9 @@
         },
         {
             "advisory": "Pyoes 0.9.0 updates its dependency 'pyramid' to 1.10.4 to include security fixes.",
-            "cve": "PVE-2021-32203",
-            "id": "pyup.io-49088",
-            "more_info_path": "/vulnerabilities/PVE-2021-32203/49088",
+            "cve": "CVE-2014-4671",
+            "id": "pyup.io-49087",
+            "more_info_path": "/vulnerabilities/CVE-2014-4671/49087",
             "specs": [
                 "<0.9.0"
             ],
@@ -111869,7 +115524,7 @@
     ],
     "pyogrio": [
         {
-            "advisory": "Pyogrio 0.7.2 and prior releases for Windows ship with a version of 'libcurl' (8.2.1) that has a high-severity vulnerability.\r\nhttps://inspector.pypi.io/project/pyogrio/0.7.2/packages/1f/0a/5ba2bb95d0f959dfc073b0e0d7267598acb84f863825c4219435ae41d964/pyogrio-0.7.2-cp310-cp310-win_amd64.whl",
+            "advisory": "Pyogrio 0.7.2 and prior releases for Windows ship with a version of 'libcurl' (8.2.1) that has a high-severity vulnerability.\r\n#It only affects Windows users",
             "cve": "CVE-2023-38545",
             "id": "pyup.io-61775",
             "more_info_path": "/vulnerabilities/CVE-2023-38545/61775",
@@ -112163,20 +115818,20 @@
             "v": "<0.7.0"
         },
         {
-            "advisory": "Pyplanet 0.7.0 updates its dependency 'urllib3' to v1.25.3 to include security fixes.",
-            "cve": "CVE-2019-11324",
-            "id": "pyup.io-49092",
-            "more_info_path": "/vulnerabilities/CVE-2019-11324/49092",
+            "advisory": "Pyplanet 0.7.0 updates its dependency 'pyyaml' to v5.1.2 to include a security fix.",
+            "cve": "CVE-2017-18342",
+            "id": "pyup.io-49095",
+            "more_info_path": "/vulnerabilities/CVE-2017-18342/49095",
             "specs": [
                 "<0.7.0"
             ],
             "v": "<0.7.0"
         },
         {
-            "advisory": "Pyplanet 0.7.0 updates its dependency 'pyyaml' to v5.1.2 to include a security fix.",
-            "cve": "CVE-2017-18342",
-            "id": "pyup.io-49095",
-            "more_info_path": "/vulnerabilities/CVE-2017-18342/49095",
+            "advisory": "Pyplanet 0.7.0 updates its dependency 'urllib3' to v1.25.3 to include security fixes.",
+            "cve": "CVE-2019-11324",
+            "id": "pyup.io-49092",
+            "more_info_path": "/vulnerabilities/CVE-2019-11324/49092",
             "specs": [
                 "<0.7.0"
             ],
@@ -112193,6 +115848,30 @@
             "v": "<0.7.0"
         }
     ],
+    "pypolicyd-spf": [
+        {
+            "advisory": "OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field.",
+            "cve": "CVE-2019-20790",
+            "id": "pyup.io-70574",
+            "more_info_path": "/vulnerabilities/CVE-2019-20790/70574",
+            "specs": [
+                "<=2.0.2"
+            ],
+            "v": "<=2.0.2"
+        }
+    ],
+    "pypop-genomics": [
+        {
+            "advisory": "A vulnerability in PyPop before 1.0.2 involves improper function calls, such as missing or incorrectly typed arguments, and the use of redundant null pointers. Users are advised to upgrade their installation to mitigate the vulnerability, following specific upgrade instructions. There are no alternative workarounds mentioned for this issue.",
+            "cve": "PVE-2024-68473",
+            "id": "pyup.io-68473",
+            "more_info_path": "/vulnerabilities/PVE-2024-68473/68473",
+            "specs": [
+                "<1.0.2"
+            ],
+            "v": "<1.0.2"
+        }
+    ],
     "pypostalcode": [
         {
             "advisory": "Pypostalcode 0.3.5 fixes an SQL injection vulnerability (passing user input FSA codes could delete your FSA code database).\r\nhttps://github.com/inkjet/pypostalcode/commit/fccd60a84e8dcd8d7d6b7480ed19d05f969e7190",
@@ -112205,6 +115884,18 @@
             "v": "<0.3.5"
         }
     ],
+    "pypqc": [
+        {
+            "advisory": "An attacker capable of submitting numerous ciphertexts to a single private key and obtaining real-time responses can exploit a vulnerability, known as KyberSlash, to recover the private key. This issue affects select versions of PyPQC and is addressed in version 0.0.6.1 onwards. There are no workarounds for this vulnerability; however, updating from 0.0.6 to 0.0.6.1 is advised as it is intended to be a simple drop-in replacement without known breaking changes.",
+            "cve": "PVE-2024-68093",
+            "id": "pyup.io-68093",
+            "more_info_path": "/vulnerabilities/PVE-2024-68093/68093",
+            "specs": [
+                "<0.0.6.1"
+            ],
+            "v": "<0.0.6.1"
+        }
+    ],
     "pyproj": [
         {
             "advisory": "Pyproj 3.6.1 updates its bundled dependency 'libwebp' to include a fix for a high risk vulnerability. Only mac OS X wheels on PyPI were affected.",
@@ -112926,9 +116617,9 @@
     "pyserini": [
         {
             "advisory": "Pyserini 0.11.0.0 and prior includes a version of Anserini affected by critical and severe vulnerabilities, related to log4j.",
-            "cve": "CVE-2021-45105",
-            "id": "pyup.io-43608",
-            "more_info_path": "/vulnerabilities/CVE-2021-45105/43608",
+            "cve": "CVE-2021-45046",
+            "id": "pyup.io-43607",
+            "more_info_path": "/vulnerabilities/CVE-2021-45046/43607",
             "specs": [
                 "<=0.11.0.0"
             ],
@@ -112936,9 +116627,9 @@
         },
         {
             "advisory": "Pyserini 0.11.0.0 and prior includes a version of Anserini affected by critical and severe vulnerabilities, related to log4j.",
-            "cve": "CVE-2021-45046",
-            "id": "pyup.io-43607",
-            "more_info_path": "/vulnerabilities/CVE-2021-45046/43607",
+            "cve": "CVE-2021-45105",
+            "id": "pyup.io-43608",
+            "more_info_path": "/vulnerabilities/CVE-2021-45105/43608",
             "specs": [
                 "<=0.11.0.0"
             ],
@@ -112946,9 +116637,9 @@
         },
         {
             "advisory": "Pyserini 0.11.0.0 and prior includes a version of Anserini affected by critical and severe vulnerabilities, related to log4j.",
-            "cve": "CVE-2021-44228",
-            "id": "pyup.io-43606",
-            "more_info_path": "/vulnerabilities/CVE-2021-44228/43606",
+            "cve": "CVE-2021-44832",
+            "id": "pyup.io-44462",
+            "more_info_path": "/vulnerabilities/CVE-2021-44832/44462",
             "specs": [
                 "<=0.11.0.0"
             ],
@@ -112956,9 +116647,9 @@
         },
         {
             "advisory": "Pyserini 0.11.0.0 and prior includes a version of Anserini affected by critical and severe vulnerabilities, related to log4j.",
-            "cve": "CVE-2021-44832",
-            "id": "pyup.io-44462",
-            "more_info_path": "/vulnerabilities/CVE-2021-44832/44462",
+            "cve": "CVE-2021-44228",
+            "id": "pyup.io-43606",
+            "more_info_path": "/vulnerabilities/CVE-2021-44228/43606",
             "specs": [
                 "<=0.11.0.0"
             ],
@@ -113059,6 +116750,28 @@
             "v": "<0.1.3"
         }
     ],
+    "pysnc": [
+        {
+            "advisory": "Pysnc version 1.1.6 upgrades its pip requirement to \"^23.3.1\" to address the security concerns outlined in CVE-2023-5752.",
+            "cve": "CVE-2023-5752",
+            "id": "pyup.io-66998",
+            "more_info_path": "/vulnerabilities/CVE-2023-5752/66998",
+            "specs": [
+                "<1.1.6"
+            ],
+            "v": "<1.1.6"
+        },
+        {
+            "advisory": "Pysnc version 1.1.6 has updated its urllib3 dependency to version \"^2.0.7\" in response to security vulnerability CVE-2023-45803.",
+            "cve": "CVE-2023-45803",
+            "id": "pyup.io-67143",
+            "more_info_path": "/vulnerabilities/CVE-2023-45803/67143",
+            "specs": [
+                "<1.1.6"
+            ],
+            "v": "<1.1.6"
+        }
+    ],
     "pysnyk": [
         {
             "advisory": "Pysnyk 0.7.0 updates its dependency 'urllib3' to v1.26.8 to include security fixes.",
@@ -113921,6 +117634,16 @@
             ],
             "v": "<2.17.14"
         },
+        {
+            "advisory": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
+            "cve": "CVE-2019-15903",
+            "id": "pyup.io-70596",
+            "more_info_path": "/vulnerabilities/CVE-2019-15903/70596",
+            "specs": [
+                "<2.2.8"
+            ],
+            "v": "<2.2.8"
+        },
         {
             "advisory": "Python versions 2.4.6 and 2.5.2 include a fix for CVE-2008-5031: Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c.  NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.\r\nhttps://bugs.python.org/issue4469",
             "cve": "CVE-2008-5031",
@@ -114431,6 +118154,20 @@
             ],
             "v": "<2.7.17,>=3.0.0a0,<3.5.8,>=3.6.0a0,<3.6.9,>=3.7.0a0,<3.7.4"
         },
+        {
+            "advisory": "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
+            "cve": "CVE-2019-12900",
+            "id": "pyup.io-70532",
+            "more_info_path": "/vulnerabilities/CVE-2019-12900/70532",
+            "specs": [
+                "<2.7.18rc1",
+                ">=3.0.0a0,<3.5.10rc1",
+                ">=3.6.0a0,<3.6.11rc1",
+                ">=3.7.0a0,<3.7.8rc1",
+                ">=3.8.0a0,<3.8.3rc1"
+            ],
+            "v": "<2.7.18rc1,>=3.0.0a0,<3.5.10rc1,>=3.6.0a0,<3.6.11rc1,>=3.7.0a0,<3.7.8rc1,>=3.8.0a0,<3.8.3rc1"
+        },
         {
             "advisory": "Python 2.7.18rc1, 3.5.10rc1, 3.6.11rc1, 3.7.8rc1 and 3.8.3rc1 include a fix for CVE-2019-18348: An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.).\r\nhttps://bugs.python.org/issue30458#msg347282",
             "cve": "CVE-2019-18348",
@@ -114566,6 +118303,16 @@
             ],
             "v": "<2.7.9,>=3.2.0a0,<3.2.6,>=3.3.0a0,<3.3.6,>=3.4.0a0,<3.4.3"
         },
+        {
+            "advisory": "An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases.\r\n\r\nWhen using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list.\r\n\r\nThis issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).",
+            "cve": "CVE-2023-6507",
+            "id": "pyup.io-70382",
+            "more_info_path": "/vulnerabilities/CVE-2023-6507/70382",
+            "specs": [
+                "<3.12.1"
+            ],
+            "v": "<3.12.1"
+        },
         {
             "advisory": "Python version 3.4 includes a fix for CVE-2013-7040: Python before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1150.\r\nhttps://bugs.python.org/issue14621",
             "cve": "CVE-2013-7040",
@@ -114765,6 +118512,16 @@
             ],
             "v": "<3.6.15,>=3.7.0a0,<3.7.12,>=3.8.0a0,<3.8.12,>=3.9.0a0,<3.9.7,>=3.10.0a0,<3.10.0rc2"
         },
+        {
+            "advisory": "An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.",
+            "cve": "CVE-2016-9063",
+            "id": "pyup.io-70521",
+            "more_info_path": "/vulnerabilities/CVE-2016-9063/70521",
+            "specs": [
+                "<3.6.2"
+            ],
+            "v": "<3.6.2"
+        },
         {
             "advisory": "Python versions 3.6.7 and 3.7.1 disable external entities in SAX parser to patch XML vulnerabilities.\r\nhttps://bugs.python.org/issue17239",
             "cve": "PVE-2021-42398",
@@ -114985,7 +118742,7 @@
             "v": "<3.7.13,>=3.8.0a0,<3.8.13,>=3.9.0a0,<3.9.11,>=3.10.0a0,<3.10.3"
         },
         {
-            "advisory": "Python 3.7.14, 3.8.14, 3.9.14 and 3.10.6 include a fix for CVE-2021-28861: Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. \r\nNOTE: this is disputed by a third party because the http.server.html documentation page states \"Warning: http.server is not recommended for production. It only implements basic security checks.\"",
+            "advisory": "** Disputed** Python 3.7.14, 3.8.14, 3.9.14 and 3.10.6 include a fix for CVE-2021-28861: Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may lead to information disclosure. \r\nNOTE: this is disputed by a third party because the http.server.html documentation page states \"Warning: http.server is not recommended for production. It only implements basic security checks.\"",
             "cve": "CVE-2021-28861",
             "id": "pyup.io-50732",
             "more_info_path": "/vulnerabilities/CVE-2021-28861/50732",
@@ -115144,6 +118901,17 @@
             ],
             "v": "<=2.6.6,>=3.1.0,<3.1.3"
         },
+        {
+            "advisory": "** DISPUTED ** The MSI installer for Python through 2.7.16 on Windows defaults to the C:\\Python27 directory, which makes it easier for local users to deploy Trojan horse code. (This also affects old 3.x releases before 3.5.) NOTE: the vendor's position is that it is the user's responsibility to ensure C:\\Python27 access control or choose a different directory, because backwards compatibility requires that C:\\Python27 remain the default for 2.7.x.",
+            "cve": "CVE-2019-13404",
+            "id": "pyup.io-70573",
+            "more_info_path": "/vulnerabilities/CVE-2019-13404/70573",
+            "specs": [
+                "<=2.7.16",
+                ">=3.0.0,<3.5.0"
+            ],
+            "v": "<=2.7.16,>=3.0.0,<3.5.0"
+        },
         {
             "advisory": "The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger \"RecursionError: maximum recursion depth exceeded while calling a Python object\" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed to contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the documentation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser class. NOTE: the vendor's perspective is that this is neither a vulnerability nor a bug. The email package is intended to have size limits and to throw an exception when limits are exceeded; they were exceeded by the example demonstration code.",
             "cve": "CVE-2023-36632",
@@ -115154,6 +118922,46 @@
             ],
             "v": "<=3.11.4"
         },
+        {
+            "advisory": "** Disputed ** An issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the _asyncio._swap_current_task component. NOTE: this is disputed by the vendor because (1) neither 3.7 nor any other release is affected (it is a bug in some 3.12 pre-releases); (2) there are no common scenarios in which an adversary can call _asyncio._swap_current_task but does not already have the ability to call arbitrary functions; and (3) there are no common scenarios in which sensitive information, which is not already accessible to an adversary, becomes accessible through this bug.",
+            "cve": "CVE-2023-38898",
+            "id": "pyup.io-65052",
+            "more_info_path": "/vulnerabilities/CVE-2023-38898/65052",
+            "specs": [
+                "<=3.13.0"
+            ],
+            "v": "<=3.13.0"
+        },
+        {
+            "advisory": "Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current working directory.  NOTE: the vendor says \"It was determined that this is a longtime behavior of Python that cannot really be altered at this point.\"",
+            "cve": "CVE-2015-5652",
+            "id": "pyup.io-70413",
+            "more_info_path": "/vulnerabilities/CVE-2015-5652/70413",
+            "specs": [
+                "<=3.5.0"
+            ],
+            "v": "<=3.5.0"
+        },
+        {
+            "advisory": "** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=false setting.",
+            "cve": "CVE-2017-17522",
+            "id": "pyup.io-67539",
+            "more_info_path": "/vulnerabilities/CVE-2017-17522/67539",
+            "specs": [
+                "<=3.6.3"
+            ],
+            "v": "<=3.6.3"
+        },
+        {
+            "advisory": "** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications \"need to be prepared to handle a wide variety of exceptions.\"",
+            "cve": "CVE-2017-18207",
+            "id": "pyup.io-67441",
+            "more_info_path": "/vulnerabilities/CVE-2017-18207/67441",
+            "specs": [
+                "<=3.6.4"
+            ],
+            "v": "<=3.6.4"
+        },
         {
             "advisory": "Stack-based buffer overflow in the file_compress function in minigzip (Modules/zlib) in Python 2.5 allows context-dependent attackers to execute arbitrary code via a long file argument.",
             "cve": "CVE-2007-1657",
@@ -115174,16 +118982,6 @@
             ],
             "v": "==3.12.0a7"
         },
-        {
-            "advisory": "An issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the _asyncio._swap_current_task component. NOTE: this is disputed by the vendor because (1) neither 3.7 nor any other release is affected (it is a bug in some 3.12 pre-releases); (2) there are no common scenarios in which an adversary can call _asyncio._swap_current_task but does not already have the ability to call arbitrary functions; and (3) there are no common scenarios in which sensitive information, which is not already accessible to an adversary, becomes accessible through this bug.",
-            "cve": "CVE-2023-38898",
-            "id": "pyup.io-65052",
-            "more_info_path": "/vulnerabilities/CVE-2023-38898/65052",
-            "specs": [
-                "==3.13.0"
-            ],
-            "v": "==3.13.0"
-        },
         {
             "advisory": "This is a dummy vulnerability only.",
             "cve": "CVE-2023-0593",
@@ -115290,6 +119088,19 @@
             ],
             "v": ">=2.6,<2.6.7,<2.5.6c1,>=2.7,<2.7.2,>=3.0.0a0,<3.2.4,>=3.3.0a0,<3.3.1"
         },
+        {
+            "advisory": "The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.",
+            "cve": "CVE-2012-0876",
+            "id": "pyup.io-70616",
+            "more_info_path": "/vulnerabilities/CVE-2012-0876/70616",
+            "specs": [
+                ">=2.6.0,<2.6.8",
+                ">=2.7.0,<2.7.3",
+                ">=3.1.0,<3.1.5",
+                ">=3.2.0,<3.2.3"
+            ],
+            "v": ">=2.6.0,<2.6.8,>=2.7.0,<2.7.3,>=3.1.0,<3.1.5,>=3.2.0,<3.2.3"
+        },
         {
             "advisory": "Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file. See CVE-2011-4944.",
             "cve": "CVE-2011-4944",
@@ -115327,6 +119138,30 @@
             ],
             "v": ">=2.7,<2.7.3,>=3.2,<3.2.3,>=3.1,<3.1.5,<2.6.8"
         },
+        {
+            "advisory": "Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.",
+            "cve": "CVE-2015-1283",
+            "id": "pyup.io-70615",
+            "more_info_path": "/vulnerabilities/CVE-2015-1283/70615",
+            "specs": [
+                ">=2.7.0,<2.7.12",
+                ">=3.3.0,<3.3.7",
+                ">=3.4.0,<3.4.5",
+                ">=3.5.0,<3.5.2"
+            ],
+            "v": ">=2.7.0,<2.7.12,>=3.3.0,<3.3.7,>=3.4.0,<3.4.5,>=3.5.0,<3.5.2"
+        },
+        {
+            "advisory": "OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability.",
+            "cve": "CVE-2014-0224",
+            "id": "pyup.io-70622",
+            "more_info_path": "/vulnerabilities/CVE-2014-0224/70622",
+            "specs": [
+                ">=2.7.0,<2.7.8",
+                ">=3.4.0,<3.4.2"
+            ],
+            "v": ">=2.7.0,<2.7.8,>=3.4.0,<3.4.2"
+        },
         {
             "advisory": "Python 3.3.4rc1 includes a fix for CVE-2013-7338: Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function.\r\nhttps://bugs.python.org/issue20078",
             "cve": "CVE-2013-7338",
@@ -115387,6 +119222,19 @@
             ],
             "v": ">=3.1,<3.4"
         },
+        {
+            "advisory": "Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.",
+            "cve": "CVE-2016-3189",
+            "id": "pyup.io-70617",
+            "more_info_path": "/vulnerabilities/CVE-2016-3189/70617",
+            "specs": [
+                ">=3.10.0,<3.10.3",
+                ">=3.7.0,<3.7.13",
+                ">=3.8.0,<3.8.13",
+                ">=3.9.0,<3.9.11"
+            ],
+            "v": ">=3.10.0,<3.10.3,>=3.7.0,<3.7.13,>=3.8.0,<3.8.13,>=3.9.0,<3.9.11"
+        },
         {
             "advisory": "Python 3.8.12, 3.9.5 and 3.10.0 include a fix for CVE-2021-29921: In Python before 3.9.5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.\r\nhttps://python-security.readthedocs.io/vuln/ipaddress-ipv4-leading-zeros.html",
             "cve": "CVE-2021-29921",
@@ -115452,7 +119300,7 @@
             "v": ">=3.12.0a1,<=3.12.0rc1,>=3.11.0a1,<3.11.5,>=3.10.0a1,<3.10.13,>=3.9.0a1,<3.9.18,<3.8.18"
         },
         {
-            "advisory": "An issue was found in the CPython `zipfile` module affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to \u201cquoted-overlap\u201d zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive. See CVE-2024-0450.",
+            "advisory": "An issue was found in the CPython `zipfile` module affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to \u201cquoted-overlap\u201d zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.",
             "cve": "CVE-2024-0450",
             "id": "pyup.io-66951",
             "more_info_path": "/vulnerabilities/CVE-2024-0450/66951",
@@ -115466,7 +119314,7 @@
             "v": ">=3.12.0a1,<=3.12.2,>=3.11.0a1,<=3.11.8,>=3.10.0a1,<=3.10.13,>=3.9.0a1,<=3.9.18,>=0,<=3.8.18"
         },
         {
-            "advisory": "An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances. See CVE-2023-6597.",
+            "advisory": "An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.",
             "cve": "CVE-2023-6597",
             "id": "pyup.io-66949",
             "more_info_path": "/vulnerabilities/CVE-2023-6597/66949",
@@ -115528,6 +119376,31 @@
             ],
             "v": ">=3.6.0,<3.6.13,>=3.7.0,<3.7.10,>=3.8.0,<3.8.9,>=3.9.0,<3.9.3,>=3.10.0,<3.10.0a7"
         },
+        {
+            "advisory": "expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE.",
+            "cve": "CVE-2013-0340",
+            "id": "pyup.io-70601",
+            "more_info_path": "/vulnerabilities/CVE-2013-0340/70601",
+            "specs": [
+                ">=3.6.0,<3.6.15",
+                ">=3.7.0,<3.7.12",
+                ">=3.8.0,<3.8.12",
+                ">=3.9.0,<3.9.7"
+            ],
+            "v": ">=3.6.0,<3.6.15,>=3.7.0,<3.7.12,>=3.8.0,<3.8.12,>=3.9.0,<3.9.7"
+        },
+        {
+            "advisory": "In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected.",
+            "cve": "CVE-2020-8315",
+            "id": "pyup.io-70586",
+            "more_info_path": "/vulnerabilities/CVE-2020-8315/70586",
+            "specs": [
+                ">=3.6.0,<=3.6.10",
+                ">=3.7.0,<=3.7.6",
+                ">=3.8.0,<=3.8.1"
+            ],
+            "v": ">=3.6.0,<=3.6.10,>=3.7.0,<=3.7.6,>=3.8.0,<=3.8.1"
+        },
         {
             "advisory": "Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.",
             "cve": "CVE-2020-8492",
@@ -116453,6 +120326,18 @@
             "v": ">0,<0"
         }
     ],
+    "python-ndev-blizzardapi": [
+        {
+            "advisory": "Python-ndev-blizzardapi version 0.1.2 has been upgraded to Python 3.12 and includes minor security adjustments in response to CVE-2023-40217.",
+            "cve": "CVE-2023-40217",
+            "id": "pyup.io-70410",
+            "more_info_path": "/vulnerabilities/CVE-2023-40217/70410",
+            "specs": [
+                "<0.1.2"
+            ],
+            "v": "<0.1.2"
+        }
+    ],
     "python-nomad": [
         {
             "advisory": "Python-nomad 1.0.1 updates 'requests` to v2.20.0 to include a security fix.",
@@ -116768,6 +120653,18 @@
             "v": "<21.6.0"
         }
     ],
+    "python-semantic-release": [
+        {
+            "advisory": "Versions of Python-semantic-release prior to 9.4.2 are capable of establishing HTTP connections if so configured, potentially exposing the connection to security risks due .",
+            "cve": "PVE-2024-67892",
+            "id": "pyup.io-67892",
+            "more_info_path": "/vulnerabilities/PVE-2024-67892/67892",
+            "specs": [
+                "<9.4.2"
+            ],
+            "v": "<9.4.2"
+        }
+    ],
     "python-smooch": [
         {
             "advisory": "Python-smooch 1.0.4 updates 'requests' to resolve a potential vulnerability in HTTP connections handling.",
@@ -117361,20 +121258,20 @@
     ],
     "pywbem": [
         {
-            "advisory": "Pywbem 0.13.0 updates its dependency 'mistune' to v0.8.1 to include security fixes.",
-            "cve": "CVE-2017-16876",
-            "id": "pyup.io-44955",
-            "more_info_path": "/vulnerabilities/CVE-2017-16876/44955",
+            "advisory": "Pywbem 0.13.0 updates its dependency 'html5lib' to v0.999999999 to include security fixes.",
+            "cve": "CVE-2016-9910",
+            "id": "pyup.io-44954",
+            "more_info_path": "/vulnerabilities/CVE-2016-9910/44954",
             "specs": [
                 "<0.13.0"
             ],
             "v": "<0.13.0"
         },
         {
-            "advisory": "Pywbem 0.13.0 updates its dependency 'html5lib' to v0.999999999 to include security fixes.",
-            "cve": "CVE-2016-9910",
-            "id": "pyup.io-44954",
-            "more_info_path": "/vulnerabilities/CVE-2016-9910/44954",
+            "advisory": "Pywbem 0.13.0 updates its dependency 'mistune' to v0.8.1 to include security fixes.",
+            "cve": "CVE-2017-16876",
+            "id": "pyup.io-44955",
+            "more_info_path": "/vulnerabilities/CVE-2017-16876/44955",
             "specs": [
                 "<0.13.0"
             ],
@@ -117420,6 +121317,16 @@
             ],
             "v": "<0.14.3"
         },
+        {
+            "advisory": "Pywbem 0.14.3 updates its dependency 'urllib3' to v1.23 to include a security fix.",
+            "cve": "CVE-2018-20060",
+            "id": "pyup.io-42685",
+            "more_info_path": "/vulnerabilities/CVE-2018-20060/42685",
+            "specs": [
+                "<0.14.3"
+            ],
+            "v": "<0.14.3"
+        },
         {
             "advisory": "Pywbem 0.14.3 updates its dependency 'requests' to v2.20.1 to include a security fix.",
             "cve": "CVE-2018-18074",
@@ -117440,16 +121347,6 @@
             ],
             "v": "<0.14.3"
         },
-        {
-            "advisory": "Pywbem 0.14.3 updates its dependency 'urllib3' to v1.23 to include a security fix.",
-            "cve": "CVE-2018-20060",
-            "id": "pyup.io-42685",
-            "more_info_path": "/vulnerabilities/CVE-2018-20060/42685",
-            "specs": [
-                "<0.14.3"
-            ],
-            "v": "<0.14.3"
-        },
         {
             "advisory": "Pywbem 0.14.3 updates its dependency 'requests' to v2.20.0 to include a security fix.",
             "cve": "CVE-2018-18074",
@@ -117630,9 +121527,9 @@
         },
         {
             "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
-            "cve": "CVE-2021-27923",
-            "id": "pyup.io-46451",
-            "more_info_path": "/vulnerabilities/CVE-2021-27923/46451",
+            "cve": "CVE-2020-35654",
+            "id": "pyup.io-46447",
+            "more_info_path": "/vulnerabilities/CVE-2020-35654/46447",
             "specs": [
                 "<6.1.0"
             ],
@@ -117640,9 +121537,9 @@
         },
         {
             "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
-            "cve": "CVE-2020-35654",
-            "id": "pyup.io-46447",
-            "more_info_path": "/vulnerabilities/CVE-2020-35654/46447",
+            "cve": "CVE-2021-25293",
+            "id": "pyup.io-46442",
+            "more_info_path": "/vulnerabilities/CVE-2021-25293/46442",
             "specs": [
                 "<6.1.0"
             ],
@@ -117650,9 +121547,9 @@
         },
         {
             "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
-            "cve": "CVE-2020-11538",
-            "id": "pyup.io-46450",
-            "more_info_path": "/vulnerabilities/CVE-2020-11538/46450",
+            "cve": "CVE-2021-25291",
+            "id": "pyup.io-46440",
+            "more_info_path": "/vulnerabilities/CVE-2021-25291/46440",
             "specs": [
                 "<6.1.0"
             ],
@@ -117660,9 +121557,29 @@
         },
         {
             "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
-            "cve": "CVE-2021-25293",
-            "id": "pyup.io-46442",
-            "more_info_path": "/vulnerabilities/CVE-2021-25293/46442",
+            "cve": "CVE-2020-35655",
+            "id": "pyup.io-46448",
+            "more_info_path": "/vulnerabilities/CVE-2020-35655/46448",
+            "specs": [
+                "<6.1.0"
+            ],
+            "v": "<6.1.0"
+        },
+        {
+            "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
+            "cve": "CVE-2020-10994",
+            "id": "pyup.io-46449",
+            "more_info_path": "/vulnerabilities/CVE-2020-10994/46449",
+            "specs": [
+                "<6.1.0"
+            ],
+            "v": "<6.1.0"
+        },
+        {
+            "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
+            "cve": "CVE-2021-27923",
+            "id": "pyup.io-46451",
+            "more_info_path": "/vulnerabilities/CVE-2021-27923/46451",
             "specs": [
                 "<6.1.0"
             ],
@@ -117690,9 +121607,9 @@
         },
         {
             "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
-            "cve": "CVE-2020-10378",
-            "id": "pyup.io-46437",
-            "more_info_path": "/vulnerabilities/CVE-2020-10378/46437",
+            "cve": "CVE-2020-11538",
+            "id": "pyup.io-46450",
+            "more_info_path": "/vulnerabilities/CVE-2020-11538/46450",
             "specs": [
                 "<6.1.0"
             ],
@@ -117710,9 +121627,9 @@
         },
         {
             "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
-            "cve": "CVE-2021-25291",
-            "id": "pyup.io-46440",
-            "more_info_path": "/vulnerabilities/CVE-2021-25291/46440",
+            "cve": "CVE-2020-10378",
+            "id": "pyup.io-46437",
+            "more_info_path": "/vulnerabilities/CVE-2020-10378/46437",
             "specs": [
                 "<6.1.0"
             ],
@@ -117728,16 +121645,6 @@
             ],
             "v": "<6.1.0"
         },
-        {
-            "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
-            "cve": "CVE-2020-35655",
-            "id": "pyup.io-46448",
-            "more_info_path": "/vulnerabilities/CVE-2020-35655/46448",
-            "specs": [
-                "<6.1.0"
-            ],
-            "v": "<6.1.0"
-        },
         {
             "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
             "cve": "CVE-2021-25292",
@@ -117768,16 +121675,6 @@
             ],
             "v": "<6.1.0"
         },
-        {
-            "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
-            "cve": "CVE-2020-10994",
-            "id": "pyup.io-46449",
-            "more_info_path": "/vulnerabilities/CVE-2020-10994/46449",
-            "specs": [
-                "<6.1.0"
-            ],
-            "v": "<6.1.0"
-        },
         {
             "advisory": "Pywikibot 6.1.0 updates its dependency 'Pillow' to versions >=8.1.1 to include security fixes.",
             "cve": "CVE-2021-23437",
@@ -118154,6 +122051,16 @@
         }
     ],
     "qoqo-qryd": [
+        {
+            "advisory": "Qoqo-qryd 0.15.1 has updated its h2 dependency to version 0.3.26 from 0.3.24 to address a Denial of Service (DoS) vulnerability identified in versions older than 0.3.24.",
+            "cve": "PVE-2024-67534",
+            "id": "pyup.io-67534",
+            "more_info_path": "/vulnerabilities/PVE-2024-67534/67534",
+            "specs": [
+                "<0.15.1"
+            ],
+            "v": "<0.15.1"
+        },
         {
             "advisory": "Qoqo-qryd 0.8.4 updates its CARGO dependency 'openssl' to v0.10.48 to include security fixes.\r\nhttps://rustsec.org/advisories/RUSTSEC-2023-0024.html",
             "cve": "PVE-2023-53900",
@@ -118239,6 +122146,18 @@
             "v": "<0.2.1"
         }
     ],
+    "quark": [
+        {
+            "advisory": "comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory.",
+            "cve": "CVE-2019-15520",
+            "id": "pyup.io-70504",
+            "more_info_path": "/vulnerabilities/CVE-2019-15520/70504",
+            "specs": [
+                ">2019,<2019-03-26"
+            ],
+            "v": ">2019,<2019-03-26"
+        }
+    ],
     "quart": [
         {
             "advisory": "Quart 0.4.0 allows the request to be limited to prevent DOS attacks.",
@@ -118651,6 +122570,16 @@
                 "<3.0.0"
             ],
             "v": "<3.0.0"
+        },
+        {
+            "advisory": "Qweb 3.2.1 updates its Pillow dependency range to \">=10.3.0,<11\" from \">=10.0.2,<11\" to address security concerns highlighted by CVE-2024-28219.",
+            "cve": "CVE-2024-28219",
+            "id": "pyup.io-67531",
+            "more_info_path": "/vulnerabilities/CVE-2024-28219/67531",
+            "specs": [
+                "<3.2.1"
+            ],
+            "v": "<3.2.1"
         }
     ],
     "r2connect": [
@@ -118822,9 +122751,9 @@
     "rapidtide": [
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2019-19645",
-            "id": "pyup.io-48349",
-            "more_info_path": "/vulnerabilities/CVE-2019-19645/48349",
+            "cve": "CVE-2020-5215",
+            "id": "pyup.io-48384",
+            "more_info_path": "/vulnerabilities/CVE-2020-5215/48384",
             "specs": [
                 "<2.0.2"
             ],
@@ -118832,9 +122761,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2019-13960",
-            "id": "pyup.io-48345",
-            "more_info_path": "/vulnerabilities/CVE-2019-13960/48345",
+            "cve": "CVE-2020-15195",
+            "id": "pyup.io-48366",
+            "more_info_path": "/vulnerabilities/CVE-2020-15195/48366",
             "specs": [
                 "<2.0.2"
             ],
@@ -118842,9 +122771,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-14155",
-            "id": "pyup.io-48363",
-            "more_info_path": "/vulnerabilities/CVE-2020-14155/48363",
+            "cve": "CVE-2020-15203",
+            "id": "pyup.io-48368",
+            "more_info_path": "/vulnerabilities/CVE-2020-15203/48368",
             "specs": [
                 "<2.0.2"
             ],
@@ -118852,9 +122781,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-13790",
-            "id": "pyup.io-48361",
-            "more_info_path": "/vulnerabilities/CVE-2020-13790/48361",
+            "cve": "CVE-2018-11770",
+            "id": "pyup.io-40991",
+            "more_info_path": "/vulnerabilities/CVE-2018-11770/40991",
             "specs": [
                 "<2.0.2"
             ],
@@ -118862,9 +122791,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15206",
-            "id": "pyup.io-48371",
-            "more_info_path": "/vulnerabilities/CVE-2020-15206/48371",
+            "cve": "CVE-2019-20838",
+            "id": "pyup.io-48352",
+            "more_info_path": "/vulnerabilities/CVE-2019-20838/48352",
             "specs": [
                 "<2.0.2"
             ],
@@ -118872,9 +122801,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-26266",
-            "id": "pyup.io-48379",
-            "more_info_path": "/vulnerabilities/CVE-2020-26266/48379",
+            "cve": "CVE-2020-15204",
+            "id": "pyup.io-48369",
+            "more_info_path": "/vulnerabilities/CVE-2020-15204/48369",
             "specs": [
                 "<2.0.2"
             ],
@@ -118882,9 +122811,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-13871",
-            "id": "pyup.io-48362",
-            "more_info_path": "/vulnerabilities/CVE-2020-13871/48362",
+            "cve": "CVE-2020-13435",
+            "id": "pyup.io-48358",
+            "more_info_path": "/vulnerabilities/CVE-2020-13435/48358",
             "specs": [
                 "<2.0.2"
             ],
@@ -118892,9 +122821,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2019-19244",
-            "id": "pyup.io-48348",
-            "more_info_path": "/vulnerabilities/CVE-2019-19244/48348",
+            "cve": "CVE-2020-15210",
+            "id": "pyup.io-48375",
+            "more_info_path": "/vulnerabilities/CVE-2020-15210/48375",
             "specs": [
                 "<2.0.2"
             ],
@@ -118902,9 +122831,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2018-17190",
-            "id": "pyup.io-48341",
-            "more_info_path": "/vulnerabilities/CVE-2018-17190/48341",
+            "cve": "CVE-2020-26271",
+            "id": "pyup.io-48383",
+            "more_info_path": "/vulnerabilities/CVE-2020-26271/48383",
             "specs": [
                 "<2.0.2"
             ],
@@ -118912,9 +122841,19 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-11656",
-            "id": "pyup.io-48356",
-            "more_info_path": "/vulnerabilities/CVE-2020-11656/48356",
+            "cve": "CVE-2019-19645",
+            "id": "pyup.io-48349",
+            "more_info_path": "/vulnerabilities/CVE-2019-19645/48349",
+            "specs": [
+                "<2.0.2"
+            ],
+            "v": "<2.0.2"
+        },
+        {
+            "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
+            "cve": "CVE-2020-26266",
+            "id": "pyup.io-48379",
+            "more_info_path": "/vulnerabilities/CVE-2020-26266/48379",
             "specs": [
                 "<2.0.2"
             ],
@@ -118942,9 +122881,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-26268",
-            "id": "pyup.io-48381",
-            "more_info_path": "/vulnerabilities/CVE-2020-26268/48381",
+            "cve": "CVE-2018-17190",
+            "id": "pyup.io-48341",
+            "more_info_path": "/vulnerabilities/CVE-2018-17190/48341",
             "specs": [
                 "<2.0.2"
             ],
@@ -118952,9 +122891,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2019-19880",
-            "id": "pyup.io-48351",
-            "more_info_path": "/vulnerabilities/CVE-2019-19880/48351",
+            "cve": "CVE-2020-15207",
+            "id": "pyup.io-48372",
+            "more_info_path": "/vulnerabilities/CVE-2020-15207/48372",
             "specs": [
                 "<2.0.2"
             ],
@@ -118962,9 +122901,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2019-20838",
-            "id": "pyup.io-48352",
-            "more_info_path": "/vulnerabilities/CVE-2019-20838/48352",
+            "cve": "CVE-2020-15205",
+            "id": "pyup.io-48370",
+            "more_info_path": "/vulnerabilities/CVE-2020-15205/48370",
             "specs": [
                 "<2.0.2"
             ],
@@ -118972,9 +122911,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-13630",
-            "id": "pyup.io-48359",
-            "more_info_path": "/vulnerabilities/CVE-2020-13630/48359",
+            "cve": "CVE-2020-13434",
+            "id": "pyup.io-48357",
+            "more_info_path": "/vulnerabilities/CVE-2020-13434/48357",
             "specs": [
                 "<2.0.2"
             ],
@@ -118982,9 +122921,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15204",
-            "id": "pyup.io-48369",
-            "more_info_path": "/vulnerabilities/CVE-2020-15204/48369",
+            "cve": "CVE-2019-16168",
+            "id": "pyup.io-48347",
+            "more_info_path": "/vulnerabilities/CVE-2019-16168/48347",
             "specs": [
                 "<2.0.2"
             ],
@@ -118992,9 +122931,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15208",
-            "id": "pyup.io-48373",
-            "more_info_path": "/vulnerabilities/CVE-2020-15208/48373",
+            "cve": "CVE-2020-26270",
+            "id": "pyup.io-48382",
+            "more_info_path": "/vulnerabilities/CVE-2020-26270/48382",
             "specs": [
                 "<2.0.2"
             ],
@@ -119002,9 +122941,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-13435",
-            "id": "pyup.io-48358",
-            "more_info_path": "/vulnerabilities/CVE-2020-13435/48358",
+            "cve": "CVE-2020-15358",
+            "id": "pyup.io-48378",
+            "more_info_path": "/vulnerabilities/CVE-2020-15358/48378",
             "specs": [
                 "<2.0.2"
             ],
@@ -119012,9 +122951,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2019-5481",
-            "id": "pyup.io-48353",
-            "more_info_path": "/vulnerabilities/CVE-2019-5481/48353",
+            "cve": "CVE-2020-14155",
+            "id": "pyup.io-48363",
+            "more_info_path": "/vulnerabilities/CVE-2020-14155/48363",
             "specs": [
                 "<2.0.2"
             ],
@@ -119022,9 +122961,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15210",
-            "id": "pyup.io-48375",
-            "more_info_path": "/vulnerabilities/CVE-2020-15210/48375",
+            "cve": "CVE-2020-13790",
+            "id": "pyup.io-48361",
+            "more_info_path": "/vulnerabilities/CVE-2020-13790/48361",
             "specs": [
                 "<2.0.2"
             ],
@@ -119032,9 +122971,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15211",
-            "id": "pyup.io-48376",
-            "more_info_path": "/vulnerabilities/CVE-2020-15211/48376",
+            "cve": "CVE-2020-15206",
+            "id": "pyup.io-48371",
+            "more_info_path": "/vulnerabilities/CVE-2020-15206/48371",
             "specs": [
                 "<2.0.2"
             ],
@@ -119042,9 +122981,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-26267",
-            "id": "pyup.io-48380",
-            "more_info_path": "/vulnerabilities/CVE-2020-26267/48380",
+            "cve": "CVE-2020-13871",
+            "id": "pyup.io-48362",
+            "more_info_path": "/vulnerabilities/CVE-2020-13871/48362",
             "specs": [
                 "<2.0.2"
             ],
@@ -119052,9 +122991,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15190",
-            "id": "pyup.io-48364",
-            "more_info_path": "/vulnerabilities/CVE-2020-15190/48364",
+            "cve": "CVE-2019-19244",
+            "id": "pyup.io-48348",
+            "more_info_path": "/vulnerabilities/CVE-2019-19244/48348",
             "specs": [
                 "<2.0.2"
             ],
@@ -119062,9 +123001,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15195",
-            "id": "pyup.io-48366",
-            "more_info_path": "/vulnerabilities/CVE-2020-15195/48366",
+            "cve": "CVE-2019-13960",
+            "id": "pyup.io-48345",
+            "more_info_path": "/vulnerabilities/CVE-2019-13960/48345",
             "specs": [
                 "<2.0.2"
             ],
@@ -119072,9 +123011,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-26271",
-            "id": "pyup.io-48383",
-            "more_info_path": "/vulnerabilities/CVE-2020-26271/48383",
+            "cve": "CVE-2020-11656",
+            "id": "pyup.io-48356",
+            "more_info_path": "/vulnerabilities/CVE-2020-11656/48356",
             "specs": [
                 "<2.0.2"
             ],
@@ -119082,9 +123021,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-5215",
-            "id": "pyup.io-48384",
-            "more_info_path": "/vulnerabilities/CVE-2020-5215/48384",
+            "cve": "CVE-2020-26268",
+            "id": "pyup.io-48381",
+            "more_info_path": "/vulnerabilities/CVE-2020-26268/48381",
             "specs": [
                 "<2.0.2"
             ],
@@ -119092,9 +123031,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15203",
-            "id": "pyup.io-48368",
-            "more_info_path": "/vulnerabilities/CVE-2020-15203/48368",
+            "cve": "CVE-2019-19880",
+            "id": "pyup.io-48351",
+            "more_info_path": "/vulnerabilities/CVE-2019-19880/48351",
             "specs": [
                 "<2.0.2"
             ],
@@ -119102,9 +123041,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2018-19664",
-            "id": "pyup.io-48342",
-            "more_info_path": "/vulnerabilities/CVE-2018-19664/48342",
+            "cve": "CVE-2020-13630",
+            "id": "pyup.io-48359",
+            "more_info_path": "/vulnerabilities/CVE-2020-13630/48359",
             "specs": [
                 "<2.0.2"
             ],
@@ -119112,9 +123051,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15194",
-            "id": "pyup.io-48365",
-            "more_info_path": "/vulnerabilities/CVE-2020-15194/48365",
+            "cve": "CVE-2020-15208",
+            "id": "pyup.io-48373",
+            "more_info_path": "/vulnerabilities/CVE-2020-15208/48373",
             "specs": [
                 "<2.0.2"
             ],
@@ -119122,9 +123061,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2019-5482",
-            "id": "pyup.io-48354",
-            "more_info_path": "/vulnerabilities/CVE-2019-5482/48354",
+            "cve": "CVE-2020-26267",
+            "id": "pyup.io-48380",
+            "more_info_path": "/vulnerabilities/CVE-2020-26267/48380",
             "specs": [
                 "<2.0.2"
             ],
@@ -119132,9 +123071,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-11655",
-            "id": "pyup.io-48355",
-            "more_info_path": "/vulnerabilities/CVE-2020-11655/48355",
+            "cve": "CVE-2020-15211",
+            "id": "pyup.io-48376",
+            "more_info_path": "/vulnerabilities/CVE-2020-15211/48376",
             "specs": [
                 "<2.0.2"
             ],
@@ -119142,9 +123081,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2019-10099",
-            "id": "pyup.io-48344",
-            "more_info_path": "/vulnerabilities/CVE-2019-10099/48344",
+            "cve": "CVE-2020-13631",
+            "id": "pyup.io-48360",
+            "more_info_path": "/vulnerabilities/CVE-2020-13631/48360",
             "specs": [
                 "<2.0.2"
             ],
@@ -119152,9 +123091,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2018-11770",
-            "id": "pyup.io-40991",
-            "more_info_path": "/vulnerabilities/CVE-2018-11770/40991",
+            "cve": "CVE-2019-5481",
+            "id": "pyup.io-48353",
+            "more_info_path": "/vulnerabilities/CVE-2019-5481/48353",
             "specs": [
                 "<2.0.2"
             ],
@@ -119162,9 +123101,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2019-16168",
-            "id": "pyup.io-48347",
-            "more_info_path": "/vulnerabilities/CVE-2019-16168/48347",
+            "cve": "CVE-2020-15190",
+            "id": "pyup.io-48364",
+            "more_info_path": "/vulnerabilities/CVE-2020-15190/48364",
             "specs": [
                 "<2.0.2"
             ],
@@ -119172,9 +123111,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-26270",
-            "id": "pyup.io-48382",
-            "more_info_path": "/vulnerabilities/CVE-2020-26270/48382",
+            "cve": "CVE-2020-15194",
+            "id": "pyup.io-48365",
+            "more_info_path": "/vulnerabilities/CVE-2020-15194/48365",
             "specs": [
                 "<2.0.2"
             ],
@@ -119182,9 +123121,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2018-20330",
-            "id": "pyup.io-48343",
-            "more_info_path": "/vulnerabilities/CVE-2018-20330/48343",
+            "cve": "CVE-2019-5482",
+            "id": "pyup.io-48354",
+            "more_info_path": "/vulnerabilities/CVE-2019-5482/48354",
             "specs": [
                 "<2.0.2"
             ],
@@ -119192,9 +123131,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15207",
-            "id": "pyup.io-48372",
-            "more_info_path": "/vulnerabilities/CVE-2020-15207/48372",
+            "cve": "CVE-2018-19664",
+            "id": "pyup.io-48342",
+            "more_info_path": "/vulnerabilities/CVE-2018-19664/48342",
             "specs": [
                 "<2.0.2"
             ],
@@ -119202,9 +123141,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-13631",
-            "id": "pyup.io-48360",
-            "more_info_path": "/vulnerabilities/CVE-2020-13631/48360",
+            "cve": "CVE-2020-9327",
+            "id": "pyup.io-48385",
+            "more_info_path": "/vulnerabilities/CVE-2020-9327/48385",
             "specs": [
                 "<2.0.2"
             ],
@@ -119212,9 +123151,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-9327",
-            "id": "pyup.io-48385",
-            "more_info_path": "/vulnerabilities/CVE-2020-9327/48385",
+            "cve": "CVE-2018-20330",
+            "id": "pyup.io-48343",
+            "more_info_path": "/vulnerabilities/CVE-2018-20330/48343",
             "specs": [
                 "<2.0.2"
             ],
@@ -119222,9 +123161,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15205",
-            "id": "pyup.io-48370",
-            "more_info_path": "/vulnerabilities/CVE-2020-15205/48370",
+            "cve": "CVE-2019-19646",
+            "id": "pyup.io-48350",
+            "more_info_path": "/vulnerabilities/CVE-2019-19646/48350",
             "specs": [
                 "<2.0.2"
             ],
@@ -119242,9 +123181,9 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-13434",
-            "id": "pyup.io-48357",
-            "more_info_path": "/vulnerabilities/CVE-2020-13434/48357",
+            "cve": "CVE-2019-10099",
+            "id": "pyup.io-48344",
+            "more_info_path": "/vulnerabilities/CVE-2019-10099/48344",
             "specs": [
                 "<2.0.2"
             ],
@@ -119252,23 +123191,23 @@
         },
         {
             "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2019-19646",
-            "id": "pyup.io-48350",
-            "more_info_path": "/vulnerabilities/CVE-2019-19646/48350",
+            "cve": "CVE-2020-11655",
+            "id": "pyup.io-48355",
+            "more_info_path": "/vulnerabilities/CVE-2020-11655/48355",
             "specs": [
                 "<2.0.2"
             ],
             "v": "<2.0.2"
         },
         {
-            "advisory": "Rapidtide 2.0.2 starts to require the 'Tensorflow' 2.4.0 or above to address security issues.",
-            "cve": "CVE-2020-15358",
-            "id": "pyup.io-48378",
-            "more_info_path": "/vulnerabilities/CVE-2020-15358/48378",
+            "advisory": "Rapidtide 2.6.5 updates its dependency 'urllib3' to v2.0.6 to include a security fix.",
+            "cve": "CVE-2023-43804",
+            "id": "pyup.io-61598",
+            "more_info_path": "/vulnerabilities/CVE-2023-43804/61598",
             "specs": [
-                "<2.0.2"
+                "<2.6.5"
             ],
-            "v": "<2.0.2"
+            "v": "<2.6.5"
         },
         {
             "advisory": "Rapidtide 2.6.5 updates its dependency 'pillow' to v10.0.1 to include a security fix.",
@@ -119280,16 +123219,6 @@
             ],
             "v": "<2.6.5"
         },
-        {
-            "advisory": "Rapidtide 2.6.5 updates its dependency 'urllib3' to v2.0.6 to include a security fix.",
-            "cve": "CVE-2023-43804",
-            "id": "pyup.io-61598",
-            "more_info_path": "/vulnerabilities/CVE-2023-43804/61598",
-            "specs": [
-                "<2.6.5"
-            ],
-            "v": "<2.6.5"
-        },
         {
             "advisory": "Rapidtide 2.7.5 updates its dependency on Jinja2, moving from version 3.1.2 to 3.1.3, in response to the security vulnerability identified as CVE-2024-22195.\r\nhttps://github.com/bbfrederick/rapidtide/commit/8ef1d37b15f96a739582781123e3ee239d0d0b18",
             "cve": "CVE-2024-22195",
@@ -119388,9 +123317,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-22923",
-            "id": "pyup.io-46921",
-            "more_info_path": "/vulnerabilities/CVE-2021-22923/46921",
+            "cve": "CVE-2021-22922",
+            "id": "pyup.io-46882",
+            "more_info_path": "/vulnerabilities/CVE-2021-22922/46882",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119399,9 +123328,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-22922",
-            "id": "pyup.io-46882",
-            "more_info_path": "/vulnerabilities/CVE-2021-22922/46882",
+            "cve": "CVE-2021-41228",
+            "id": "pyup.io-46958",
+            "more_info_path": "/vulnerabilities/CVE-2021-41228/46958",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119410,9 +123339,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41197",
-            "id": "pyup.io-46927",
-            "more_info_path": "/vulnerabilities/CVE-2021-41197/46927",
+            "cve": "CVE-2021-41215",
+            "id": "pyup.io-46945",
+            "more_info_path": "/vulnerabilities/CVE-2021-41215/46945",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119421,9 +123350,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41209",
-            "id": "pyup.io-46939",
-            "more_info_path": "/vulnerabilities/CVE-2021-41209/46939",
+            "cve": "CVE-2021-41203",
+            "id": "pyup.io-46933",
+            "more_info_path": "/vulnerabilities/CVE-2021-41203/46933",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119432,9 +123361,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41228",
-            "id": "pyup.io-46958",
-            "more_info_path": "/vulnerabilities/CVE-2021-41228/46958",
+            "cve": "CVE-2021-41224",
+            "id": "pyup.io-46954",
+            "more_info_path": "/vulnerabilities/CVE-2021-41224/46954",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119443,9 +123372,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41196",
-            "id": "pyup.io-46926",
-            "more_info_path": "/vulnerabilities/CVE-2021-41196/46926",
+            "cve": "CVE-2021-41226",
+            "id": "pyup.io-46956",
+            "more_info_path": "/vulnerabilities/CVE-2021-41226/46956",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119454,9 +123383,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41212",
-            "id": "pyup.io-46942",
-            "more_info_path": "/vulnerabilities/CVE-2021-41212/46942",
+            "cve": "CVE-2021-41199",
+            "id": "pyup.io-46929",
+            "more_info_path": "/vulnerabilities/CVE-2021-41199/46929",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119465,9 +123394,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41215",
-            "id": "pyup.io-46945",
-            "more_info_path": "/vulnerabilities/CVE-2021-41215/46945",
+            "cve": "CVE-2021-41217",
+            "id": "pyup.io-46947",
+            "more_info_path": "/vulnerabilities/CVE-2021-41217/46947",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119476,9 +123405,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41214",
-            "id": "pyup.io-46944",
-            "more_info_path": "/vulnerabilities/CVE-2021-41214/46944",
+            "cve": "CVE-2021-41205",
+            "id": "pyup.io-46935",
+            "more_info_path": "/vulnerabilities/CVE-2021-41205/46935",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119487,9 +123416,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41203",
-            "id": "pyup.io-46933",
-            "more_info_path": "/vulnerabilities/CVE-2021-41203/46933",
+            "cve": "CVE-2021-41202",
+            "id": "pyup.io-46932",
+            "more_info_path": "/vulnerabilities/CVE-2021-41202/46932",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119498,9 +123427,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41204",
-            "id": "pyup.io-46934",
-            "more_info_path": "/vulnerabilities/CVE-2021-41204/46934",
+            "cve": "CVE-2021-41225",
+            "id": "pyup.io-46955",
+            "more_info_path": "/vulnerabilities/CVE-2021-41225/46955",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119509,9 +123438,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41219",
-            "id": "pyup.io-46949",
-            "more_info_path": "/vulnerabilities/CVE-2021-41219/46949",
+            "cve": "CVE-2021-22926",
+            "id": "pyup.io-46924",
+            "more_info_path": "/vulnerabilities/CVE-2021-22926/46924",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119520,9 +123449,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41224",
-            "id": "pyup.io-46954",
-            "more_info_path": "/vulnerabilities/CVE-2021-41224/46954",
+            "cve": "CVE-2021-22925",
+            "id": "pyup.io-46923",
+            "more_info_path": "/vulnerabilities/CVE-2021-22925/46923",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119531,9 +123460,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41208",
-            "id": "pyup.io-46938",
-            "more_info_path": "/vulnerabilities/CVE-2021-41208/46938",
+            "cve": "CVE-2021-22923",
+            "id": "pyup.io-46921",
+            "more_info_path": "/vulnerabilities/CVE-2021-22923/46921",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119542,9 +123471,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41213",
-            "id": "pyup.io-46943",
-            "more_info_path": "/vulnerabilities/CVE-2021-41213/46943",
+            "cve": "CVE-2021-41197",
+            "id": "pyup.io-46927",
+            "more_info_path": "/vulnerabilities/CVE-2021-41197/46927",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119553,9 +123482,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41223",
-            "id": "pyup.io-46953",
-            "more_info_path": "/vulnerabilities/CVE-2021-41223/46953",
+            "cve": "CVE-2021-41209",
+            "id": "pyup.io-46939",
+            "more_info_path": "/vulnerabilities/CVE-2021-41209/46939",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119564,9 +123493,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41210",
-            "id": "pyup.io-46940",
-            "more_info_path": "/vulnerabilities/CVE-2021-41210/46940",
+            "cve": "CVE-2021-41196",
+            "id": "pyup.io-46926",
+            "more_info_path": "/vulnerabilities/CVE-2021-41196/46926",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119575,9 +123504,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41227",
-            "id": "pyup.io-46957",
-            "more_info_path": "/vulnerabilities/CVE-2021-41227/46957",
+            "cve": "CVE-2021-41212",
+            "id": "pyup.io-46942",
+            "more_info_path": "/vulnerabilities/CVE-2021-41212/46942",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119586,9 +123515,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41206",
-            "id": "pyup.io-46936",
-            "more_info_path": "/vulnerabilities/CVE-2021-41206/46936",
+            "cve": "CVE-2021-41214",
+            "id": "pyup.io-46944",
+            "more_info_path": "/vulnerabilities/CVE-2021-41214/46944",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119597,9 +123526,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41216",
-            "id": "pyup.io-46946",
-            "more_info_path": "/vulnerabilities/CVE-2021-41216/46946",
+            "cve": "CVE-2021-41204",
+            "id": "pyup.io-46934",
+            "more_info_path": "/vulnerabilities/CVE-2021-41204/46934",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119608,9 +123537,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41207",
-            "id": "pyup.io-46937",
-            "more_info_path": "/vulnerabilities/CVE-2021-41207/46937",
+            "cve": "CVE-2021-41219",
+            "id": "pyup.io-46949",
+            "more_info_path": "/vulnerabilities/CVE-2021-41219/46949",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119619,9 +123548,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41198",
-            "id": "pyup.io-46928",
-            "more_info_path": "/vulnerabilities/CVE-2021-41198/46928",
+            "cve": "CVE-2021-41208",
+            "id": "pyup.io-46938",
+            "more_info_path": "/vulnerabilities/CVE-2021-41208/46938",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119630,9 +123559,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41226",
-            "id": "pyup.io-46956",
-            "more_info_path": "/vulnerabilities/CVE-2021-41226/46956",
+            "cve": "CVE-2021-41213",
+            "id": "pyup.io-46943",
+            "more_info_path": "/vulnerabilities/CVE-2021-41213/46943",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119641,9 +123570,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41199",
-            "id": "pyup.io-46929",
-            "more_info_path": "/vulnerabilities/CVE-2021-41199/46929",
+            "cve": "CVE-2021-41223",
+            "id": "pyup.io-46953",
+            "more_info_path": "/vulnerabilities/CVE-2021-41223/46953",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119652,9 +123581,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41211",
-            "id": "pyup.io-46941",
-            "more_info_path": "/vulnerabilities/CVE-2021-41211/46941",
+            "cve": "CVE-2021-41210",
+            "id": "pyup.io-46940",
+            "more_info_path": "/vulnerabilities/CVE-2021-41210/46940",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119663,9 +123592,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41220",
-            "id": "pyup.io-46950",
-            "more_info_path": "/vulnerabilities/CVE-2021-41220/46950",
+            "cve": "CVE-2021-41227",
+            "id": "pyup.io-46957",
+            "more_info_path": "/vulnerabilities/CVE-2021-41227/46957",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119674,9 +123603,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41217",
-            "id": "pyup.io-46947",
-            "more_info_path": "/vulnerabilities/CVE-2021-41217/46947",
+            "cve": "CVE-2021-41206",
+            "id": "pyup.io-46936",
+            "more_info_path": "/vulnerabilities/CVE-2021-41206/46936",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119685,9 +123614,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41221",
-            "id": "pyup.io-46951",
-            "more_info_path": "/vulnerabilities/CVE-2021-41221/46951",
+            "cve": "CVE-2021-41216",
+            "id": "pyup.io-46946",
+            "more_info_path": "/vulnerabilities/CVE-2021-41216/46946",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119696,9 +123625,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41200",
-            "id": "pyup.io-46930",
-            "more_info_path": "/vulnerabilities/CVE-2021-41200/46930",
+            "cve": "CVE-2021-41207",
+            "id": "pyup.io-46937",
+            "more_info_path": "/vulnerabilities/CVE-2021-41207/46937",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119707,9 +123636,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41222",
-            "id": "pyup.io-46952",
-            "more_info_path": "/vulnerabilities/CVE-2021-41222/46952",
+            "cve": "CVE-2021-41198",
+            "id": "pyup.io-46928",
+            "more_info_path": "/vulnerabilities/CVE-2021-41198/46928",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119718,9 +123647,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41205",
-            "id": "pyup.io-46935",
-            "more_info_path": "/vulnerabilities/CVE-2021-41205/46935",
+            "cve": "CVE-2021-41211",
+            "id": "pyup.io-46941",
+            "more_info_path": "/vulnerabilities/CVE-2021-41211/46941",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119729,9 +123658,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41202",
-            "id": "pyup.io-46932",
-            "more_info_path": "/vulnerabilities/CVE-2021-41202/46932",
+            "cve": "CVE-2021-41220",
+            "id": "pyup.io-46950",
+            "more_info_path": "/vulnerabilities/CVE-2021-41220/46950",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119740,9 +123669,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-41225",
-            "id": "pyup.io-46955",
-            "more_info_path": "/vulnerabilities/CVE-2021-41225/46955",
+            "cve": "CVE-2021-41221",
+            "id": "pyup.io-46951",
+            "more_info_path": "/vulnerabilities/CVE-2021-41221/46951",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119751,9 +123680,9 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-22926",
-            "id": "pyup.io-46924",
-            "more_info_path": "/vulnerabilities/CVE-2021-22926/46924",
+            "cve": "CVE-2021-41200",
+            "id": "pyup.io-46930",
+            "more_info_path": "/vulnerabilities/CVE-2021-41200/46930",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
@@ -119762,25 +123691,15 @@
         },
         {
             "advisory": "Rasa 2.8.13 and 3.0.0rc2 update its dependency 'Tensorflow' to v2.6.2 and v2.6.1 respectively to include security fixes.",
-            "cve": "CVE-2021-22925",
-            "id": "pyup.io-46923",
-            "more_info_path": "/vulnerabilities/CVE-2021-22925/46923",
+            "cve": "CVE-2021-41222",
+            "id": "pyup.io-46952",
+            "more_info_path": "/vulnerabilities/CVE-2021-41222/46952",
             "specs": [
                 "<2.8.13",
                 ">=3.0.0rc1,<3.0.0rc2"
             ],
             "v": "<2.8.13,>=3.0.0rc1,<3.0.0rc2"
         },
-        {
-            "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37683",
-            "id": "pyup.io-44055",
-            "more_info_path": "/vulnerabilities/CVE-2021-37683/44055",
-            "specs": [
-                "<2.8.5"
-            ],
-            "v": "<2.8.5"
-        },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
             "cve": "CVE-2021-37661",
@@ -119791,16 +123710,6 @@
             ],
             "v": "<2.8.5"
         },
-        {
-            "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37657",
-            "id": "pyup.io-44026",
-            "more_info_path": "/vulnerabilities/CVE-2021-37657/44026",
-            "specs": [
-                "<2.8.5"
-            ],
-            "v": "<2.8.5"
-        },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
             "cve": "CVE-2021-37667",
@@ -119841,6 +123750,26 @@
             ],
             "v": "<2.8.5"
         },
+        {
+            "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
+            "cve": "CVE-2021-37683",
+            "id": "pyup.io-44055",
+            "more_info_path": "/vulnerabilities/CVE-2021-37683/44055",
+            "specs": [
+                "<2.8.5"
+            ],
+            "v": "<2.8.5"
+        },
+        {
+            "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
+            "cve": "CVE-2021-37657",
+            "id": "pyup.io-44026",
+            "more_info_path": "/vulnerabilities/CVE-2021-37657/44026",
+            "specs": [
+                "<2.8.5"
+            ],
+            "v": "<2.8.5"
+        },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
             "cve": "CVE-2021-37669",
@@ -119853,9 +123782,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-22897",
-            "id": "pyup.io-44004",
-            "more_info_path": "/vulnerabilities/CVE-2021-22897/44004",
+            "cve": "CVE-2021-37684",
+            "id": "pyup.io-44041",
+            "more_info_path": "/vulnerabilities/CVE-2021-37684/44041",
             "specs": [
                 "<2.8.5"
             ],
@@ -119863,9 +123792,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-22901",
-            "id": "pyup.io-44003",
-            "more_info_path": "/vulnerabilities/CVE-2021-22901/44003",
+            "cve": "CVE-2021-37671",
+            "id": "pyup.io-44059",
+            "more_info_path": "/vulnerabilities/CVE-2021-37671/44059",
             "specs": [
                 "<2.8.5"
             ],
@@ -119873,9 +123802,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37664",
-            "id": "pyup.io-44045",
-            "more_info_path": "/vulnerabilities/CVE-2021-37664/44045",
+            "cve": "CVE-2021-37675",
+            "id": "pyup.io-44038",
+            "more_info_path": "/vulnerabilities/CVE-2021-37675/44038",
             "specs": [
                 "<2.8.5"
             ],
@@ -119883,9 +123812,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37650",
-            "id": "pyup.io-44035",
-            "more_info_path": "/vulnerabilities/CVE-2021-37650/44035",
+            "cve": "CVE-2021-37648",
+            "id": "pyup.io-44057",
+            "more_info_path": "/vulnerabilities/CVE-2021-37648/44057",
             "specs": [
                 "<2.8.5"
             ],
@@ -119893,9 +123822,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37691",
-            "id": "pyup.io-44022",
-            "more_info_path": "/vulnerabilities/CVE-2021-37691/44022",
+            "cve": "CVE-2021-37682",
+            "id": "pyup.io-44028",
+            "more_info_path": "/vulnerabilities/CVE-2021-37682/44028",
             "specs": [
                 "<2.8.5"
             ],
@@ -119903,9 +123832,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37684",
-            "id": "pyup.io-44041",
-            "more_info_path": "/vulnerabilities/CVE-2021-37684/44041",
+            "cve": "CVE-2021-37673",
+            "id": "pyup.io-44016",
+            "more_info_path": "/vulnerabilities/CVE-2021-37673/44016",
             "specs": [
                 "<2.8.5"
             ],
@@ -119913,9 +123842,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37659",
-            "id": "pyup.io-44034",
-            "more_info_path": "/vulnerabilities/CVE-2021-37659/44034",
+            "cve": "CVE-2021-37689",
+            "id": "pyup.io-44056",
+            "more_info_path": "/vulnerabilities/CVE-2021-37689/44056",
             "specs": [
                 "<2.8.5"
             ],
@@ -119923,9 +123852,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37671",
-            "id": "pyup.io-44059",
-            "more_info_path": "/vulnerabilities/CVE-2021-37671/44059",
+            "cve": "CVE-2021-37654",
+            "id": "pyup.io-44049",
+            "more_info_path": "/vulnerabilities/CVE-2021-37654/44049",
             "specs": [
                 "<2.8.5"
             ],
@@ -119933,9 +123862,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37675",
-            "id": "pyup.io-44038",
-            "more_info_path": "/vulnerabilities/CVE-2021-37675/44038",
+            "cve": "CVE-2021-37685",
+            "id": "pyup.io-44008",
+            "more_info_path": "/vulnerabilities/CVE-2021-37685/44008",
             "specs": [
                 "<2.8.5"
             ],
@@ -119943,9 +123872,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37678",
-            "id": "pyup.io-44060",
-            "more_info_path": "/vulnerabilities/CVE-2021-37678/44060",
+            "cve": "CVE-2021-37656",
+            "id": "pyup.io-44048",
+            "more_info_path": "/vulnerabilities/CVE-2021-37656/44048",
             "specs": [
                 "<2.8.5"
             ],
@@ -119953,9 +123882,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37648",
-            "id": "pyup.io-44057",
-            "more_info_path": "/vulnerabilities/CVE-2021-37648/44057",
+            "cve": "CVE-2021-37655",
+            "id": "pyup.io-44009",
+            "more_info_path": "/vulnerabilities/CVE-2021-37655/44009",
             "specs": [
                 "<2.8.5"
             ],
@@ -119963,9 +123892,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37682",
-            "id": "pyup.io-44028",
-            "more_info_path": "/vulnerabilities/CVE-2021-37682/44028",
+            "cve": "CVE-2021-37653",
+            "id": "pyup.io-44027",
+            "more_info_path": "/vulnerabilities/CVE-2021-37653/44027",
             "specs": [
                 "<2.8.5"
             ],
@@ -119973,9 +123902,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37673",
-            "id": "pyup.io-44016",
-            "more_info_path": "/vulnerabilities/CVE-2021-37673/44016",
+            "cve": "CVE-2021-37646",
+            "id": "pyup.io-44029",
+            "more_info_path": "/vulnerabilities/CVE-2021-37646/44029",
             "specs": [
                 "<2.8.5"
             ],
@@ -119983,9 +123912,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37689",
-            "id": "pyup.io-44056",
-            "more_info_path": "/vulnerabilities/CVE-2021-37689/44056",
+            "cve": "CVE-2021-37687",
+            "id": "pyup.io-44007",
+            "more_info_path": "/vulnerabilities/CVE-2021-37687/44007",
             "specs": [
                 "<2.8.5"
             ],
@@ -119993,9 +123922,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37645",
-            "id": "pyup.io-44006",
-            "more_info_path": "/vulnerabilities/CVE-2021-37645/44006",
+            "cve": "CVE-2021-37688",
+            "id": "pyup.io-44036",
+            "more_info_path": "/vulnerabilities/CVE-2021-37688/44036",
             "specs": [
                 "<2.8.5"
             ],
@@ -120003,9 +123932,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37654",
-            "id": "pyup.io-44049",
-            "more_info_path": "/vulnerabilities/CVE-2021-37654/44049",
+            "cve": "CVE-2021-37680",
+            "id": "pyup.io-44058",
+            "more_info_path": "/vulnerabilities/CVE-2021-37680/44058",
             "specs": [
                 "<2.8.5"
             ],
@@ -120013,9 +123942,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37685",
-            "id": "pyup.io-44008",
-            "more_info_path": "/vulnerabilities/CVE-2021-37685/44008",
+            "cve": "CVE-2021-37663",
+            "id": "pyup.io-44019",
+            "more_info_path": "/vulnerabilities/CVE-2021-37663/44019",
             "specs": [
                 "<2.8.5"
             ],
@@ -120023,9 +123952,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37635",
-            "id": "pyup.io-44047",
-            "more_info_path": "/vulnerabilities/CVE-2021-37635/44047",
+            "cve": "CVE-2021-37644",
+            "id": "pyup.io-44010",
+            "more_info_path": "/vulnerabilities/CVE-2021-37644/44010",
             "specs": [
                 "<2.8.5"
             ],
@@ -120033,9 +123962,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37638",
-            "id": "pyup.io-44052",
-            "more_info_path": "/vulnerabilities/CVE-2021-37638/44052",
+            "cve": "CVE-2021-37690",
+            "id": "pyup.io-44020",
+            "more_info_path": "/vulnerabilities/CVE-2021-37690/44020",
             "specs": [
                 "<2.8.5"
             ],
@@ -120043,9 +123972,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37681",
-            "id": "pyup.io-44021",
-            "more_info_path": "/vulnerabilities/CVE-2021-37681/44021",
+            "cve": "CVE-2021-37679",
+            "id": "pyup.io-44015",
+            "more_info_path": "/vulnerabilities/CVE-2021-37679/44015",
             "specs": [
                 "<2.8.5"
             ],
@@ -120053,9 +123982,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37656",
-            "id": "pyup.io-44048",
-            "more_info_path": "/vulnerabilities/CVE-2021-37656/44048",
+            "cve": "CVE-2021-37643",
+            "id": "pyup.io-44039",
+            "more_info_path": "/vulnerabilities/CVE-2021-37643/44039",
             "specs": [
                 "<2.8.5"
             ],
@@ -120063,9 +123992,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37666",
-            "id": "pyup.io-44033",
-            "more_info_path": "/vulnerabilities/CVE-2021-37666/44033",
+            "cve": "CVE-2021-37651",
+            "id": "pyup.io-44040",
+            "more_info_path": "/vulnerabilities/CVE-2021-37651/44040",
             "specs": [
                 "<2.8.5"
             ],
@@ -120073,9 +124002,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37662",
-            "id": "pyup.io-44031",
-            "more_info_path": "/vulnerabilities/CVE-2021-37662/44031",
+            "cve": "CVE-2021-37658",
+            "id": "pyup.io-44043",
+            "more_info_path": "/vulnerabilities/CVE-2021-37658/44043",
             "specs": [
                 "<2.8.5"
             ],
@@ -120083,9 +124012,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37636",
-            "id": "pyup.io-44053",
-            "more_info_path": "/vulnerabilities/CVE-2021-37636/44053",
+            "cve": "CVE-2021-37670",
+            "id": "pyup.io-44013",
+            "more_info_path": "/vulnerabilities/CVE-2021-37670/44013",
             "specs": [
                 "<2.8.5"
             ],
@@ -120093,9 +124022,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37674",
-            "id": "pyup.io-44018",
-            "more_info_path": "/vulnerabilities/CVE-2021-37674/44018",
+            "cve": "CVE-2021-37676",
+            "id": "pyup.io-44037",
+            "more_info_path": "/vulnerabilities/CVE-2021-37676/44037",
             "specs": [
                 "<2.8.5"
             ],
@@ -120103,9 +124032,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37672",
-            "id": "pyup.io-44012",
-            "more_info_path": "/vulnerabilities/CVE-2021-37672/44012",
+            "cve": "CVE-2021-22876",
+            "id": "pyup.io-44005",
+            "more_info_path": "/vulnerabilities/CVE-2021-22876/44005",
             "specs": [
                 "<2.8.5"
             ],
@@ -120113,9 +124042,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37637",
-            "id": "pyup.io-44023",
-            "more_info_path": "/vulnerabilities/CVE-2021-37637/44023",
+            "cve": "CVE-2021-22897",
+            "id": "pyup.io-44004",
+            "more_info_path": "/vulnerabilities/CVE-2021-22897/44004",
             "specs": [
                 "<2.8.5"
             ],
@@ -120123,9 +124052,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37655",
-            "id": "pyup.io-44009",
-            "more_info_path": "/vulnerabilities/CVE-2021-37655/44009",
+            "cve": "CVE-2021-22901",
+            "id": "pyup.io-44003",
+            "more_info_path": "/vulnerabilities/CVE-2021-22901/44003",
             "specs": [
                 "<2.8.5"
             ],
@@ -120133,9 +124062,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37653",
-            "id": "pyup.io-44027",
-            "more_info_path": "/vulnerabilities/CVE-2021-37653/44027",
+            "cve": "CVE-2021-37664",
+            "id": "pyup.io-44045",
+            "more_info_path": "/vulnerabilities/CVE-2021-37664/44045",
             "specs": [
                 "<2.8.5"
             ],
@@ -120143,9 +124072,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37677",
-            "id": "pyup.io-44014",
-            "more_info_path": "/vulnerabilities/CVE-2021-37677/44014",
+            "cve": "CVE-2021-37650",
+            "id": "pyup.io-44035",
+            "more_info_path": "/vulnerabilities/CVE-2021-37650/44035",
             "specs": [
                 "<2.8.5"
             ],
@@ -120153,9 +124082,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37646",
-            "id": "pyup.io-44029",
-            "more_info_path": "/vulnerabilities/CVE-2021-37646/44029",
+            "cve": "CVE-2021-37691",
+            "id": "pyup.io-44022",
+            "more_info_path": "/vulnerabilities/CVE-2021-37691/44022",
             "specs": [
                 "<2.8.5"
             ],
@@ -120163,9 +124092,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37687",
-            "id": "pyup.io-44007",
-            "more_info_path": "/vulnerabilities/CVE-2021-37687/44007",
+            "cve": "CVE-2021-37659",
+            "id": "pyup.io-44034",
+            "more_info_path": "/vulnerabilities/CVE-2021-37659/44034",
             "specs": [
                 "<2.8.5"
             ],
@@ -120173,9 +124102,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37688",
-            "id": "pyup.io-44036",
-            "more_info_path": "/vulnerabilities/CVE-2021-37688/44036",
+            "cve": "CVE-2021-37678",
+            "id": "pyup.io-44060",
+            "more_info_path": "/vulnerabilities/CVE-2021-37678/44060",
             "specs": [
                 "<2.8.5"
             ],
@@ -120183,9 +124112,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37649",
-            "id": "pyup.io-44046",
-            "more_info_path": "/vulnerabilities/CVE-2021-37649/44046",
+            "cve": "CVE-2021-37645",
+            "id": "pyup.io-44006",
+            "more_info_path": "/vulnerabilities/CVE-2021-37645/44006",
             "specs": [
                 "<2.8.5"
             ],
@@ -120193,9 +124122,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37680",
-            "id": "pyup.io-44058",
-            "more_info_path": "/vulnerabilities/CVE-2021-37680/44058",
+            "cve": "CVE-2021-37635",
+            "id": "pyup.io-44047",
+            "more_info_path": "/vulnerabilities/CVE-2021-37635/44047",
             "specs": [
                 "<2.8.5"
             ],
@@ -120203,9 +124132,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37660",
-            "id": "pyup.io-44025",
-            "more_info_path": "/vulnerabilities/CVE-2021-37660/44025",
+            "cve": "CVE-2021-37638",
+            "id": "pyup.io-44052",
+            "more_info_path": "/vulnerabilities/CVE-2021-37638/44052",
             "specs": [
                 "<2.8.5"
             ],
@@ -120213,9 +124142,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37665",
-            "id": "pyup.io-44017",
-            "more_info_path": "/vulnerabilities/CVE-2021-37665/44017",
+            "cve": "CVE-2021-37681",
+            "id": "pyup.io-44021",
+            "more_info_path": "/vulnerabilities/CVE-2021-37681/44021",
             "specs": [
                 "<2.8.5"
             ],
@@ -120223,9 +124152,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37642",
-            "id": "pyup.io-44054",
-            "more_info_path": "/vulnerabilities/CVE-2021-37642/44054",
+            "cve": "CVE-2021-37666",
+            "id": "pyup.io-44033",
+            "more_info_path": "/vulnerabilities/CVE-2021-37666/44033",
             "specs": [
                 "<2.8.5"
             ],
@@ -120233,9 +124162,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37652",
-            "id": "pyup.io-44032",
-            "more_info_path": "/vulnerabilities/CVE-2021-37652/44032",
+            "cve": "CVE-2021-37662",
+            "id": "pyup.io-44031",
+            "more_info_path": "/vulnerabilities/CVE-2021-37662/44031",
             "specs": [
                 "<2.8.5"
             ],
@@ -120243,9 +124172,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37663",
-            "id": "pyup.io-44019",
-            "more_info_path": "/vulnerabilities/CVE-2021-37663/44019",
+            "cve": "CVE-2021-37636",
+            "id": "pyup.io-44053",
+            "more_info_path": "/vulnerabilities/CVE-2021-37636/44053",
             "specs": [
                 "<2.8.5"
             ],
@@ -120253,9 +124182,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37644",
-            "id": "pyup.io-44010",
-            "more_info_path": "/vulnerabilities/CVE-2021-37644/44010",
+            "cve": "CVE-2021-37674",
+            "id": "pyup.io-44018",
+            "more_info_path": "/vulnerabilities/CVE-2021-37674/44018",
             "specs": [
                 "<2.8.5"
             ],
@@ -120263,9 +124192,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37679",
-            "id": "pyup.io-44015",
-            "more_info_path": "/vulnerabilities/CVE-2021-37679/44015",
+            "cve": "CVE-2021-37637",
+            "id": "pyup.io-44023",
+            "more_info_path": "/vulnerabilities/CVE-2021-37637/44023",
             "specs": [
                 "<2.8.5"
             ],
@@ -120273,9 +124202,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37690",
-            "id": "pyup.io-44020",
-            "more_info_path": "/vulnerabilities/CVE-2021-37690/44020",
+            "cve": "CVE-2021-37672",
+            "id": "pyup.io-44012",
+            "more_info_path": "/vulnerabilities/CVE-2021-37672/44012",
             "specs": [
                 "<2.8.5"
             ],
@@ -120283,9 +124212,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37643",
-            "id": "pyup.io-44039",
-            "more_info_path": "/vulnerabilities/CVE-2021-37643/44039",
+            "cve": "CVE-2021-37677",
+            "id": "pyup.io-44014",
+            "more_info_path": "/vulnerabilities/CVE-2021-37677/44014",
             "specs": [
                 "<2.8.5"
             ],
@@ -120293,9 +124222,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37651",
-            "id": "pyup.io-44040",
-            "more_info_path": "/vulnerabilities/CVE-2021-37651/44040",
+            "cve": "CVE-2021-37649",
+            "id": "pyup.io-44046",
+            "more_info_path": "/vulnerabilities/CVE-2021-37649/44046",
             "specs": [
                 "<2.8.5"
             ],
@@ -120303,9 +124232,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37658",
-            "id": "pyup.io-44043",
-            "more_info_path": "/vulnerabilities/CVE-2021-37658/44043",
+            "cve": "CVE-2021-37660",
+            "id": "pyup.io-44025",
+            "more_info_path": "/vulnerabilities/CVE-2021-37660/44025",
             "specs": [
                 "<2.8.5"
             ],
@@ -120313,9 +124242,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37670",
-            "id": "pyup.io-44013",
-            "more_info_path": "/vulnerabilities/CVE-2021-37670/44013",
+            "cve": "CVE-2021-37665",
+            "id": "pyup.io-44017",
+            "more_info_path": "/vulnerabilities/CVE-2021-37665/44017",
             "specs": [
                 "<2.8.5"
             ],
@@ -120323,9 +124252,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37676",
-            "id": "pyup.io-44037",
-            "more_info_path": "/vulnerabilities/CVE-2021-37676/44037",
+            "cve": "CVE-2021-37642",
+            "id": "pyup.io-44054",
+            "more_info_path": "/vulnerabilities/CVE-2021-37642/44054",
             "specs": [
                 "<2.8.5"
             ],
@@ -120333,9 +124262,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-37639",
-            "id": "pyup.io-44050",
-            "more_info_path": "/vulnerabilities/CVE-2021-37639/44050",
+            "cve": "CVE-2021-37652",
+            "id": "pyup.io-44032",
+            "more_info_path": "/vulnerabilities/CVE-2021-37652/44032",
             "specs": [
                 "<2.8.5"
             ],
@@ -120343,9 +124272,9 @@
         },
         {
             "advisory": "Rasa 2.8.5 updates tensorflow to v2.3.4 to address security vulnerabilities.",
-            "cve": "CVE-2021-22876",
-            "id": "pyup.io-44005",
-            "more_info_path": "/vulnerabilities/CVE-2021-22876/44005",
+            "cve": "CVE-2021-37639",
+            "id": "pyup.io-44050",
+            "more_info_path": "/vulnerabilities/CVE-2021-37639/44050",
             "specs": [
                 "<2.8.5"
             ],
@@ -120363,9 +124292,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41209",
-            "id": "pyup.io-42651",
-            "more_info_path": "/vulnerabilities/CVE-2021-41209/42651",
+            "cve": "CVE-2021-41202",
+            "id": "pyup.io-42665",
+            "more_info_path": "/vulnerabilities/CVE-2021-41202/42665",
             "specs": [
                 "<2.8.9"
             ],
@@ -120373,9 +124302,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41202",
-            "id": "pyup.io-42665",
-            "more_info_path": "/vulnerabilities/CVE-2021-41202/42665",
+            "cve": "CVE-2021-41206",
+            "id": "pyup.io-42660",
+            "more_info_path": "/vulnerabilities/CVE-2021-41206/42660",
             "specs": [
                 "<2.8.9"
             ],
@@ -120383,9 +124312,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41217",
-            "id": "pyup.io-42644",
-            "more_info_path": "/vulnerabilities/CVE-2021-41217/42644",
+            "cve": "CVE-2021-41196",
+            "id": "pyup.io-42641",
+            "more_info_path": "/vulnerabilities/CVE-2021-41196/42641",
             "specs": [
                 "<2.8.9"
             ],
@@ -120393,9 +124322,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41218",
-            "id": "pyup.io-42656",
-            "more_info_path": "/vulnerabilities/CVE-2021-41218/42656",
+            "cve": "CVE-2021-41208",
+            "id": "pyup.io-42659",
+            "more_info_path": "/vulnerabilities/CVE-2021-41208/42659",
             "specs": [
                 "<2.8.9"
             ],
@@ -120403,9 +124332,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41206",
-            "id": "pyup.io-42660",
-            "more_info_path": "/vulnerabilities/CVE-2021-41206/42660",
+            "cve": "CVE-2021-41209",
+            "id": "pyup.io-42651",
+            "more_info_path": "/vulnerabilities/CVE-2021-41209/42651",
             "specs": [
                 "<2.8.9"
             ],
@@ -120413,9 +124342,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41207",
-            "id": "pyup.io-42664",
-            "more_info_path": "/vulnerabilities/CVE-2021-41207/42664",
+            "cve": "CVE-2021-41217",
+            "id": "pyup.io-42644",
+            "more_info_path": "/vulnerabilities/CVE-2021-41217/42644",
             "specs": [
                 "<2.8.9"
             ],
@@ -120423,9 +124352,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41200",
-            "id": "pyup.io-42643",
-            "more_info_path": "/vulnerabilities/CVE-2021-41200/42643",
+            "cve": "CVE-2021-41218",
+            "id": "pyup.io-42656",
+            "more_info_path": "/vulnerabilities/CVE-2021-41218/42656",
             "specs": [
                 "<2.8.9"
             ],
@@ -120433,9 +124362,19 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41196",
-            "id": "pyup.io-42641",
-            "more_info_path": "/vulnerabilities/CVE-2021-41196/42641",
+            "cve": "CVE-2021-41207",
+            "id": "pyup.io-42664",
+            "more_info_path": "/vulnerabilities/CVE-2021-41207/42664",
+            "specs": [
+                "<2.8.9"
+            ],
+            "v": "<2.8.9"
+        },
+        {
+            "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
+            "cve": "CVE-2021-41200",
+            "id": "pyup.io-42643",
+            "more_info_path": "/vulnerabilities/CVE-2021-41200/42643",
             "specs": [
                 "<2.8.9"
             ],
@@ -120463,9 +124402,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41208",
-            "id": "pyup.io-42659",
-            "more_info_path": "/vulnerabilities/CVE-2021-41208/42659",
+            "cve": "CVE-2021-41212",
+            "id": "pyup.io-42662",
+            "more_info_path": "/vulnerabilities/CVE-2021-41212/42662",
             "specs": [
                 "<2.8.9"
             ],
@@ -120473,9 +124412,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41201",
-            "id": "pyup.io-42666",
-            "more_info_path": "/vulnerabilities/CVE-2021-41201/42666",
+            "cve": "CVE-2021-41199",
+            "id": "pyup.io-42437",
+            "more_info_path": "/vulnerabilities/CVE-2021-41199/42437",
             "specs": [
                 "<2.8.9"
             ],
@@ -120483,9 +124422,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41228",
-            "id": "pyup.io-42653",
-            "more_info_path": "/vulnerabilities/CVE-2021-41228/42653",
+            "cve": "CVE-2021-41227",
+            "id": "pyup.io-42648",
+            "more_info_path": "/vulnerabilities/CVE-2021-41227/42648",
             "specs": [
                 "<2.8.9"
             ],
@@ -120493,9 +124432,9 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41212",
-            "id": "pyup.io-42662",
-            "more_info_path": "/vulnerabilities/CVE-2021-41212/42662",
+            "cve": "CVE-2021-41205",
+            "id": "pyup.io-42661",
+            "more_info_path": "/vulnerabilities/CVE-2021-41205/42661",
             "specs": [
                 "<2.8.9"
             ],
@@ -120503,9 +124442,19 @@
         },
         {
             "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41199",
-            "id": "pyup.io-42437",
-            "more_info_path": "/vulnerabilities/CVE-2021-41199/42437",
+            "cve": "CVE-2021-41201",
+            "id": "pyup.io-42666",
+            "more_info_path": "/vulnerabilities/CVE-2021-41201/42666",
+            "specs": [
+                "<2.8.9"
+            ],
+            "v": "<2.8.9"
+        },
+        {
+            "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
+            "cve": "CVE-2021-41228",
+            "id": "pyup.io-42653",
+            "more_info_path": "/vulnerabilities/CVE-2021-41228/42653",
             "specs": [
                 "<2.8.9"
             ],
@@ -120661,26 +124610,6 @@
             ],
             "v": "<2.8.9"
         },
-        {
-            "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41227",
-            "id": "pyup.io-42648",
-            "more_info_path": "/vulnerabilities/CVE-2021-41227/42648",
-            "specs": [
-                "<2.8.9"
-            ],
-            "v": "<2.8.9"
-        },
-        {
-            "advisory": "Rasa 2.8.9 updates its dependency 'tensorflow' to v2.6 to include several security fixes.\r\nhttps://github.com/RasaHQ/rasa/commit/c57dbd466dc153126f1486aafb60b8f19fb911e4",
-            "cve": "CVE-2021-41205",
-            "id": "pyup.io-42661",
-            "more_info_path": "/vulnerabilities/CVE-2021-41205/42661",
-            "specs": [
-                "<2.8.9"
-            ],
-            "v": "<2.8.9"
-        },
         {
             "advisory": "Rasa 3.0.0 includes a version of 'rasa-sdk' that drops support for Python 3.6, as it is arriving to end of life on Dec 23rd 2021.\r\nhttps://github.com/rasahq/rasa/issues/8569",
             "cve": "CVE-2022-26488",
@@ -120775,9 +124704,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-27775",
-            "id": "pyup.io-49593",
-            "more_info_path": "/vulnerabilities/CVE-2022-27775/49593",
+            "cve": "CVE-2022-22576",
+            "id": "pyup.io-49591",
+            "more_info_path": "/vulnerabilities/CVE-2022-22576/49591",
             "specs": [
                 "<3.1.4"
             ],
@@ -120785,9 +124714,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-27774",
-            "id": "pyup.io-49592",
-            "more_info_path": "/vulnerabilities/CVE-2022-27774/49592",
+            "cve": "CVE-2022-27776",
+            "id": "pyup.io-49594",
+            "more_info_path": "/vulnerabilities/CVE-2022-27776/49594",
             "specs": [
                 "<3.1.4"
             ],
@@ -120795,9 +124724,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-22576",
-            "id": "pyup.io-49591",
-            "more_info_path": "/vulnerabilities/CVE-2022-22576/49591",
+            "cve": "CVE-2022-29202",
+            "id": "pyup.io-49611",
+            "more_info_path": "/vulnerabilities/CVE-2022-29202/49611",
             "specs": [
                 "<3.1.4"
             ],
@@ -120805,9 +124734,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29195",
-            "id": "pyup.io-49604",
-            "more_info_path": "/vulnerabilities/CVE-2022-29195/49604",
+            "cve": "CVE-2022-29216",
+            "id": "pyup.io-49622",
+            "more_info_path": "/vulnerabilities/CVE-2022-29216/49622",
             "specs": [
                 "<3.1.4"
             ],
@@ -120815,9 +124744,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-27776",
-            "id": "pyup.io-49594",
-            "more_info_path": "/vulnerabilities/CVE-2022-27776/49594",
+            "cve": "CVE-2022-29213",
+            "id": "pyup.io-49621",
+            "more_info_path": "/vulnerabilities/CVE-2022-29213/49621",
             "specs": [
                 "<3.1.4"
             ],
@@ -120825,9 +124754,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29202",
-            "id": "pyup.io-49611",
-            "more_info_path": "/vulnerabilities/CVE-2022-29202/49611",
+            "cve": "CVE-2022-29199",
+            "id": "pyup.io-49608",
+            "more_info_path": "/vulnerabilities/CVE-2022-29199/49608",
             "specs": [
                 "<3.1.4"
             ],
@@ -120835,9 +124764,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29212",
-            "id": "pyup.io-49620",
-            "more_info_path": "/vulnerabilities/CVE-2022-29212/49620",
+            "cve": "CVE-2022-27781",
+            "id": "pyup.io-49598",
+            "more_info_path": "/vulnerabilities/CVE-2022-27781/49598",
             "specs": [
                 "<3.1.4"
             ],
@@ -120845,9 +124774,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29216",
-            "id": "pyup.io-49622",
-            "more_info_path": "/vulnerabilities/CVE-2022-29216/49622",
+            "cve": "CVE-2022-29206",
+            "id": "pyup.io-49615",
+            "more_info_path": "/vulnerabilities/CVE-2022-29206/49615",
             "specs": [
                 "<3.1.4"
             ],
@@ -120855,9 +124784,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29213",
-            "id": "pyup.io-49621",
-            "more_info_path": "/vulnerabilities/CVE-2022-29213/49621",
+            "cve": "CVE-2022-29204",
+            "id": "pyup.io-49613",
+            "more_info_path": "/vulnerabilities/CVE-2022-29204/49613",
             "specs": [
                 "<3.1.4"
             ],
@@ -120865,9 +124794,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-27779",
-            "id": "pyup.io-49596",
-            "more_info_path": "/vulnerabilities/CVE-2022-27779/49596",
+            "cve": "CVE-2022-29211",
+            "id": "pyup.io-49619",
+            "more_info_path": "/vulnerabilities/CVE-2022-29211/49619",
             "specs": [
                 "<3.1.4"
             ],
@@ -120875,9 +124804,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29199",
-            "id": "pyup.io-49608",
-            "more_info_path": "/vulnerabilities/CVE-2022-29199/49608",
+            "cve": "CVE-2022-29192",
+            "id": "pyup.io-49601",
+            "more_info_path": "/vulnerabilities/CVE-2022-29192/49601",
             "specs": [
                 "<3.1.4"
             ],
@@ -120885,9 +124814,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-27781",
-            "id": "pyup.io-49598",
-            "more_info_path": "/vulnerabilities/CVE-2022-27781/49598",
+            "cve": "CVE-2022-29207",
+            "id": "pyup.io-49616",
+            "more_info_path": "/vulnerabilities/CVE-2022-29207/49616",
             "specs": [
                 "<3.1.4"
             ],
@@ -120895,9 +124824,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29194",
-            "id": "pyup.io-49603",
-            "more_info_path": "/vulnerabilities/CVE-2022-29194/49603",
+            "cve": "CVE-2022-29205",
+            "id": "pyup.io-49614",
+            "more_info_path": "/vulnerabilities/CVE-2022-29205/49614",
             "specs": [
                 "<3.1.4"
             ],
@@ -120905,9 +124834,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29206",
-            "id": "pyup.io-49615",
-            "more_info_path": "/vulnerabilities/CVE-2022-29206/49615",
+            "cve": "CVE-2022-29193",
+            "id": "pyup.io-49602",
+            "more_info_path": "/vulnerabilities/CVE-2022-29193/49602",
             "specs": [
                 "<3.1.4"
             ],
@@ -120915,9 +124844,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29201",
-            "id": "pyup.io-49610",
-            "more_info_path": "/vulnerabilities/CVE-2022-29201/49610",
+            "cve": "CVE-2022-27775",
+            "id": "pyup.io-49593",
+            "more_info_path": "/vulnerabilities/CVE-2022-27775/49593",
             "specs": [
                 "<3.1.4"
             ],
@@ -120925,9 +124854,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29204",
-            "id": "pyup.io-49613",
-            "more_info_path": "/vulnerabilities/CVE-2022-29204/49613",
+            "cve": "CVE-2022-27774",
+            "id": "pyup.io-49592",
+            "more_info_path": "/vulnerabilities/CVE-2022-27774/49592",
             "specs": [
                 "<3.1.4"
             ],
@@ -120935,9 +124864,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-27782",
-            "id": "pyup.io-49599",
-            "more_info_path": "/vulnerabilities/CVE-2022-27782/49599",
+            "cve": "CVE-2022-27780",
+            "id": "pyup.io-49597",
+            "more_info_path": "/vulnerabilities/CVE-2022-27780/49597",
             "specs": [
                 "<3.1.4"
             ],
@@ -120945,9 +124874,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29203",
-            "id": "pyup.io-49612",
-            "more_info_path": "/vulnerabilities/CVE-2022-29203/49612",
+            "cve": "CVE-2022-27778",
+            "id": "pyup.io-49595",
+            "more_info_path": "/vulnerabilities/CVE-2022-27778/49595",
             "specs": [
                 "<3.1.4"
             ],
@@ -120955,9 +124884,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29197",
-            "id": "pyup.io-49606",
-            "more_info_path": "/vulnerabilities/CVE-2022-29197/49606",
+            "cve": "CVE-2022-29195",
+            "id": "pyup.io-49604",
+            "more_info_path": "/vulnerabilities/CVE-2022-29195/49604",
             "specs": [
                 "<3.1.4"
             ],
@@ -120965,9 +124894,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29211",
-            "id": "pyup.io-49619",
-            "more_info_path": "/vulnerabilities/CVE-2022-29211/49619",
+            "cve": "CVE-2022-29212",
+            "id": "pyup.io-49620",
+            "more_info_path": "/vulnerabilities/CVE-2022-29212/49620",
             "specs": [
                 "<3.1.4"
             ],
@@ -120975,9 +124904,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29196",
-            "id": "pyup.io-49605",
-            "more_info_path": "/vulnerabilities/CVE-2022-29196/49605",
+            "cve": "CVE-2022-27779",
+            "id": "pyup.io-49596",
+            "more_info_path": "/vulnerabilities/CVE-2022-27779/49596",
             "specs": [
                 "<3.1.4"
             ],
@@ -120985,9 +124914,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2018-25032",
-            "id": "pyup.io-49581",
-            "more_info_path": "/vulnerabilities/CVE-2018-25032/49581",
+            "cve": "CVE-2022-29194",
+            "id": "pyup.io-49603",
+            "more_info_path": "/vulnerabilities/CVE-2022-29194/49603",
             "specs": [
                 "<3.1.4"
             ],
@@ -120995,9 +124924,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29192",
-            "id": "pyup.io-49601",
-            "more_info_path": "/vulnerabilities/CVE-2022-29192/49601",
+            "cve": "CVE-2022-29201",
+            "id": "pyup.io-49610",
+            "more_info_path": "/vulnerabilities/CVE-2022-29201/49610",
             "specs": [
                 "<3.1.4"
             ],
@@ -121005,9 +124934,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29208",
-            "id": "pyup.io-49617",
-            "more_info_path": "/vulnerabilities/CVE-2022-29208/49617",
+            "cve": "CVE-2022-27782",
+            "id": "pyup.io-49599",
+            "more_info_path": "/vulnerabilities/CVE-2022-27782/49599",
             "specs": [
                 "<3.1.4"
             ],
@@ -121015,9 +124944,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29207",
-            "id": "pyup.io-49616",
-            "more_info_path": "/vulnerabilities/CVE-2022-29207/49616",
+            "cve": "CVE-2022-29203",
+            "id": "pyup.io-49612",
+            "more_info_path": "/vulnerabilities/CVE-2022-29203/49612",
             "specs": [
                 "<3.1.4"
             ],
@@ -121025,9 +124954,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29205",
-            "id": "pyup.io-49614",
-            "more_info_path": "/vulnerabilities/CVE-2022-29205/49614",
+            "cve": "CVE-2022-29197",
+            "id": "pyup.io-49606",
+            "more_info_path": "/vulnerabilities/CVE-2022-29197/49606",
             "specs": [
                 "<3.1.4"
             ],
@@ -121035,9 +124964,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-29193",
-            "id": "pyup.io-49602",
-            "more_info_path": "/vulnerabilities/CVE-2022-29193/49602",
+            "cve": "CVE-2022-29196",
+            "id": "pyup.io-49605",
+            "more_info_path": "/vulnerabilities/CVE-2022-29196/49605",
             "specs": [
                 "<3.1.4"
             ],
@@ -121045,9 +124974,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-27780",
-            "id": "pyup.io-49597",
-            "more_info_path": "/vulnerabilities/CVE-2022-27780/49597",
+            "cve": "CVE-2018-25032",
+            "id": "pyup.io-49581",
+            "more_info_path": "/vulnerabilities/CVE-2018-25032/49581",
             "specs": [
                 "<3.1.4"
             ],
@@ -121055,9 +124984,9 @@
         },
         {
             "advisory": "Rasa 3.1.4 updates its dependency 'tensorflow' to v2.7.3 to include security fixes.",
-            "cve": "CVE-2022-27778",
-            "id": "pyup.io-49595",
-            "more_info_path": "/vulnerabilities/CVE-2022-27778/49595",
+            "cve": "CVE-2022-29208",
+            "id": "pyup.io-49617",
+            "more_info_path": "/vulnerabilities/CVE-2022-29208/49617",
             "specs": [
                 "<3.1.4"
             ],
@@ -121065,9 +124994,9 @@
         },
         {
             "advisory": "Rasa 3.3.1 updates its dependency 'numpy' to v1.23.4 to include security fixes.",
-            "cve": "CVE-2021-34141",
-            "id": "pyup.io-51877",
-            "more_info_path": "/vulnerabilities/CVE-2021-34141/51877",
+            "cve": "CVE-2021-33430",
+            "id": "pyup.io-51878",
+            "more_info_path": "/vulnerabilities/CVE-2021-33430/51878",
             "specs": [
                 "<3.3.1"
             ],
@@ -121075,9 +125004,9 @@
         },
         {
             "advisory": "Rasa 3.3.1 updates its dependency 'numpy' to v1.23.4 to include security fixes.",
-            "cve": "CVE-2021-33430",
-            "id": "pyup.io-51878",
-            "more_info_path": "/vulnerabilities/CVE-2021-33430/51878",
+            "cve": "CVE-2021-34141",
+            "id": "pyup.io-51877",
+            "more_info_path": "/vulnerabilities/CVE-2021-34141/51877",
             "specs": [
                 "<3.3.1"
             ],
@@ -121173,16 +125102,6 @@
             ],
             "v": "<3.6.7"
         },
-        {
-            "advisory": "Rasa 3.6.7 updates its dependency 'certifi' to version '2023.7.22' to include a fix for a vulnerability.\r\nhttps://github.com/RasaHQ/rasa/pull/12768",
-            "cve": "CVE-2023-37920",
-            "id": "pyup.io-60788",
-            "more_info_path": "/vulnerabilities/CVE-2023-37920/60788",
-            "specs": [
-                "<3.6.7"
-            ],
-            "v": "<3.6.7"
-        },
         {
             "advisory": "Rasa 3.6.7 updates its dependency 'cryptography' to version '41.0.3' to include a fix for a vulnerability.\r\nhttps://github.com/RasaHQ/rasa/pull/12768",
             "cve": "PVE-2023-60809",
@@ -121203,6 +125122,60 @@
             ],
             "v": "<3.6.7"
         },
+        {
+            "advisory": "Rasa 3.6.7 updates its dependency 'certifi' to version '2023.7.22' to include a fix for a vulnerability.\r\nhttps://github.com/RasaHQ/rasa/pull/12768",
+            "cve": "CVE-2023-37920",
+            "id": "pyup.io-60788",
+            "more_info_path": "/vulnerabilities/CVE-2023-37920/60788",
+            "specs": [
+                "<3.6.7"
+            ],
+            "v": "<3.6.7"
+        },
+        {
+            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
+            "cve": "CVE-2022-23584",
+            "id": "pyup.io-47004",
+            "more_info_path": "/vulnerabilities/CVE-2022-23584/47004",
+            "specs": [
+                "<=2.8.26",
+                ">=3.0.0rc1,<=3.0.9"
+            ],
+            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
+        },
+        {
+            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
+            "cve": "CVE-2022-23577",
+            "id": "pyup.io-46997",
+            "more_info_path": "/vulnerabilities/CVE-2022-23577/46997",
+            "specs": [
+                "<=2.8.26",
+                ">=3.0.0rc1,<=3.0.9"
+            ],
+            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
+        },
+        {
+            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
+            "cve": "CVE-2022-23595",
+            "id": "pyup.io-47011",
+            "more_info_path": "/vulnerabilities/CVE-2022-23595/47011",
+            "specs": [
+                "<=2.8.26",
+                ">=3.0.0rc1,<=3.0.9"
+            ],
+            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
+        },
+        {
+            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
+            "cve": "CVE-2022-23574",
+            "id": "pyup.io-46994",
+            "more_info_path": "/vulnerabilities/CVE-2022-23574/46994",
+            "specs": [
+                "<=2.8.26",
+                ">=3.0.0rc1,<=3.0.9"
+            ],
+            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
+        },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
             "cve": "CVE-2022-23561",
@@ -121249,9 +125222,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23584",
-            "id": "pyup.io-47004",
-            "more_info_path": "/vulnerabilities/CVE-2022-23584/47004",
+            "cve": "CVE-2022-23562",
+            "id": "pyup.io-46982",
+            "more_info_path": "/vulnerabilities/CVE-2022-23562/46982",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121260,9 +125233,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23577",
-            "id": "pyup.io-46997",
-            "more_info_path": "/vulnerabilities/CVE-2022-23577/46997",
+            "cve": "CVE-2022-21736",
+            "id": "pyup.io-46971",
+            "more_info_path": "/vulnerabilities/CVE-2022-21736/46971",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121271,9 +125244,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23562",
-            "id": "pyup.io-46982",
-            "more_info_path": "/vulnerabilities/CVE-2022-23562/46982",
+            "cve": "CVE-2022-21727",
+            "id": "pyup.io-46962",
+            "more_info_path": "/vulnerabilities/CVE-2022-21727/46962",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121282,9 +125255,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23595",
-            "id": "pyup.io-47011",
-            "more_info_path": "/vulnerabilities/CVE-2022-23595/47011",
+            "cve": "CVE-2022-21725",
+            "id": "pyup.io-46960",
+            "more_info_path": "/vulnerabilities/CVE-2022-21725/46960",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121293,9 +125266,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23574",
-            "id": "pyup.io-46994",
-            "more_info_path": "/vulnerabilities/CVE-2022-23574/46994",
+            "cve": "CVE-2022-21734",
+            "id": "pyup.io-46969",
+            "more_info_path": "/vulnerabilities/CVE-2022-21734/46969",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121304,9 +125277,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-21736",
-            "id": "pyup.io-46971",
-            "more_info_path": "/vulnerabilities/CVE-2022-21736/46971",
+            "cve": "CVE-2022-23565",
+            "id": "pyup.io-46985",
+            "more_info_path": "/vulnerabilities/CVE-2022-23565/46985",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121315,9 +125288,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-21727",
-            "id": "pyup.io-46962",
-            "more_info_path": "/vulnerabilities/CVE-2022-21727/46962",
+            "cve": "CVE-2022-23578",
+            "id": "pyup.io-46998",
+            "more_info_path": "/vulnerabilities/CVE-2022-23578/46998",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121326,9 +125299,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-21725",
-            "id": "pyup.io-46960",
-            "more_info_path": "/vulnerabilities/CVE-2022-21725/46960",
+            "cve": "CVE-2022-23591",
+            "id": "pyup.io-47010",
+            "more_info_path": "/vulnerabilities/CVE-2022-23591/47010",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121337,9 +125310,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23558",
-            "id": "pyup.io-46978",
-            "more_info_path": "/vulnerabilities/CVE-2022-23558/46978",
+            "cve": "CVE-2022-21733",
+            "id": "pyup.io-46968",
+            "more_info_path": "/vulnerabilities/CVE-2022-21733/46968",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121348,9 +125321,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-21734",
-            "id": "pyup.io-46969",
-            "more_info_path": "/vulnerabilities/CVE-2022-21734/46969",
+            "cve": "CVE-2022-21728",
+            "id": "pyup.io-46963",
+            "more_info_path": "/vulnerabilities/CVE-2022-21728/46963",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121359,9 +125332,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23580",
-            "id": "pyup.io-47000",
-            "more_info_path": "/vulnerabilities/CVE-2022-23580/47000",
+            "cve": "CVE-2022-23575",
+            "id": "pyup.io-46995",
+            "more_info_path": "/vulnerabilities/CVE-2022-23575/46995",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121370,9 +125343,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23569",
-            "id": "pyup.io-46989",
-            "more_info_path": "/vulnerabilities/CVE-2022-23569/46989",
+            "cve": "CVE-2022-23581",
+            "id": "pyup.io-47001",
+            "more_info_path": "/vulnerabilities/CVE-2022-23581/47001",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121381,9 +125354,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23565",
-            "id": "pyup.io-46985",
-            "more_info_path": "/vulnerabilities/CVE-2022-23565/46985",
+            "cve": "CVE-2022-21737",
+            "id": "pyup.io-46972",
+            "more_info_path": "/vulnerabilities/CVE-2022-21737/46972",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121392,9 +125365,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23587",
-            "id": "pyup.io-47007",
-            "more_info_path": "/vulnerabilities/CVE-2022-23587/47007",
+            "cve": "CVE-2022-23566",
+            "id": "pyup.io-46986",
+            "more_info_path": "/vulnerabilities/CVE-2022-23566/46986",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121403,9 +125376,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23564",
-            "id": "pyup.io-46984",
-            "more_info_path": "/vulnerabilities/CVE-2022-23564/46984",
+            "cve": "CVE-2022-23579",
+            "id": "pyup.io-46999",
+            "more_info_path": "/vulnerabilities/CVE-2022-23579/46999",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121414,9 +125387,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23578",
-            "id": "pyup.io-46998",
-            "more_info_path": "/vulnerabilities/CVE-2022-23578/46998",
+            "cve": "CVE-2022-23567",
+            "id": "pyup.io-46987",
+            "more_info_path": "/vulnerabilities/CVE-2022-23567/46987",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121425,9 +125398,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23591",
-            "id": "pyup.io-47010",
-            "more_info_path": "/vulnerabilities/CVE-2022-23591/47010",
+            "cve": "CVE-2022-23576",
+            "id": "pyup.io-46996",
+            "more_info_path": "/vulnerabilities/CVE-2022-23576/46996",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121436,9 +125409,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23559",
-            "id": "pyup.io-46979",
-            "more_info_path": "/vulnerabilities/CVE-2022-23559/46979",
+            "cve": "CVE-2022-23558",
+            "id": "pyup.io-46978",
+            "more_info_path": "/vulnerabilities/CVE-2022-23558/46978",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121447,9 +125420,9 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-21730",
-            "id": "pyup.io-46965",
-            "more_info_path": "/vulnerabilities/CVE-2022-21730/46965",
+            "cve": "CVE-2022-23580",
+            "id": "pyup.io-47000",
+            "more_info_path": "/vulnerabilities/CVE-2022-23580/47000",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121458,9 +125431,53 @@
         },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-21733",
-            "id": "pyup.io-46968",
-            "more_info_path": "/vulnerabilities/CVE-2022-21733/46968",
+            "cve": "CVE-2022-23569",
+            "id": "pyup.io-46989",
+            "more_info_path": "/vulnerabilities/CVE-2022-23569/46989",
+            "specs": [
+                "<=2.8.26",
+                ">=3.0.0rc1,<=3.0.9"
+            ],
+            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
+        },
+        {
+            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
+            "cve": "CVE-2022-23587",
+            "id": "pyup.io-47007",
+            "more_info_path": "/vulnerabilities/CVE-2022-23587/47007",
+            "specs": [
+                "<=2.8.26",
+                ">=3.0.0rc1,<=3.0.9"
+            ],
+            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
+        },
+        {
+            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
+            "cve": "CVE-2022-23564",
+            "id": "pyup.io-46984",
+            "more_info_path": "/vulnerabilities/CVE-2022-23564/46984",
+            "specs": [
+                "<=2.8.26",
+                ">=3.0.0rc1,<=3.0.9"
+            ],
+            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
+        },
+        {
+            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
+            "cve": "CVE-2022-23559",
+            "id": "pyup.io-46979",
+            "more_info_path": "/vulnerabilities/CVE-2022-23559/46979",
+            "specs": [
+                "<=2.8.26",
+                ">=3.0.0rc1,<=3.0.9"
+            ],
+            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
+        },
+        {
+            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
+            "cve": "CVE-2022-21730",
+            "id": "pyup.io-46965",
+            "more_info_path": "/vulnerabilities/CVE-2022-21730/46965",
             "specs": [
                 "<=2.8.26",
                 ">=3.0.0rc1,<=3.0.9"
@@ -121489,17 +125506,6 @@
             ],
             "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
         },
-        {
-            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-21728",
-            "id": "pyup.io-46963",
-            "more_info_path": "/vulnerabilities/CVE-2022-21728/46963",
-            "specs": [
-                "<=2.8.26",
-                ">=3.0.0rc1,<=3.0.9"
-            ],
-            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
-        },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
             "cve": "CVE-2022-21740",
@@ -121522,17 +125528,6 @@
             ],
             "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
         },
-        {
-            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23575",
-            "id": "pyup.io-46995",
-            "more_info_path": "/vulnerabilities/CVE-2022-23575/46995",
-            "specs": [
-                "<=2.8.26",
-                ">=3.0.0rc1,<=3.0.9"
-            ],
-            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
-        },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
             "cve": "CVE-2022-23570",
@@ -121599,17 +125594,6 @@
             ],
             "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
         },
-        {
-            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23581",
-            "id": "pyup.io-47001",
-            "more_info_path": "/vulnerabilities/CVE-2022-23581/47001",
-            "specs": [
-                "<=2.8.26",
-                ">=3.0.0rc1,<=3.0.9"
-            ],
-            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
-        },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
             "cve": "CVE-2022-23585",
@@ -121632,17 +125616,6 @@
             ],
             "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
         },
-        {
-            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-21737",
-            "id": "pyup.io-46972",
-            "more_info_path": "/vulnerabilities/CVE-2022-21737/46972",
-            "specs": [
-                "<=2.8.26",
-                ">=3.0.0rc1,<=3.0.9"
-            ],
-            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
-        },
         {
             "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
             "cve": "CVE-2022-23583",
@@ -121741,50 +125714,6 @@
                 ">=3.0.0rc1,<=3.0.9"
             ],
             "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
-        },
-        {
-            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23566",
-            "id": "pyup.io-46986",
-            "more_info_path": "/vulnerabilities/CVE-2022-23566/46986",
-            "specs": [
-                "<=2.8.26",
-                ">=3.0.0rc1,<=3.0.9"
-            ],
-            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
-        },
-        {
-            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23579",
-            "id": "pyup.io-46999",
-            "more_info_path": "/vulnerabilities/CVE-2022-23579/46999",
-            "specs": [
-                "<=2.8.26",
-                ">=3.0.0rc1,<=3.0.9"
-            ],
-            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
-        },
-        {
-            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23567",
-            "id": "pyup.io-46987",
-            "more_info_path": "/vulnerabilities/CVE-2022-23567/46987",
-            "specs": [
-                "<=2.8.26",
-                ">=3.0.0rc1,<=3.0.9"
-            ],
-            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
-        },
-        {
-            "advisory": "Rasa 3.0.x <= 3.0.9 and <=2.8.26 require versions of TensorFlow (2.6.1/2.6.2) that have known vulnerabilities.",
-            "cve": "CVE-2022-23576",
-            "id": "pyup.io-46996",
-            "more_info_path": "/vulnerabilities/CVE-2022-23576/46996",
-            "specs": [
-                "<=2.8.26",
-                ">=3.0.0rc1,<=3.0.9"
-            ],
-            "v": "<=2.8.26,>=3.0.0rc1,<=3.0.9"
         }
     ],
     "rasa-sdk": [
@@ -121822,19 +125751,9 @@
     "rasterio": [
         {
             "advisory": "Rasterio 1.3.0 updates its C dependency 'hdf5' to include security fixes.\r\nhttps://github.com/rasterio/rasterio-wheels/issues/81",
-            "cve": "CVE-2020-10811",
-            "id": "pyup.io-51985",
-            "more_info_path": "/vulnerabilities/CVE-2020-10811/51985",
-            "specs": [
-                "<1.3.0"
-            ],
-            "v": "<1.3.0"
-        },
-        {
-            "advisory": "Rasterio 1.3.0 updates its C dependency 'hdf5' to include security fixes.\r\nhttps://github.com/rasterio/rasterio-wheels/issues/81",
-            "cve": "CVE-2020-10809",
-            "id": "pyup.io-51988",
-            "more_info_path": "/vulnerabilities/CVE-2020-10809/51988",
+            "cve": "CVE-2020-10812",
+            "id": "pyup.io-51987",
+            "more_info_path": "/vulnerabilities/CVE-2020-10812/51987",
             "specs": [
                 "<1.3.0"
             ],
@@ -121862,23 +125781,23 @@
         },
         {
             "advisory": "Rasterio 1.3.0 updates its C dependency 'hdf5' to include security fixes.\r\nhttps://github.com/rasterio/rasterio-wheels/issues/81",
-            "cve": "CVE-2020-10812",
-            "id": "pyup.io-51987",
-            "more_info_path": "/vulnerabilities/CVE-2020-10812/51987",
+            "cve": "CVE-2020-10809",
+            "id": "pyup.io-51988",
+            "more_info_path": "/vulnerabilities/CVE-2020-10809/51988",
             "specs": [
                 "<1.3.0"
             ],
             "v": "<1.3.0"
         },
         {
-            "advisory": "Rasterio 1.3.8.post2 updates its bundled dependency 'libcurl' to v8.4.0 to include a security fix.\r\nhttps://github.com/rasterio/rasterio-wheels/issues/112",
-            "cve": "CVE-2023-38545",
-            "id": "pyup.io-61769",
-            "more_info_path": "/vulnerabilities/CVE-2023-38545/61769",
+            "advisory": "Rasterio 1.3.0 updates its C dependency 'hdf5' to include security fixes.\r\nhttps://github.com/rasterio/rasterio-wheels/issues/81",
+            "cve": "CVE-2020-10811",
+            "id": "pyup.io-51985",
+            "more_info_path": "/vulnerabilities/CVE-2020-10811/51985",
             "specs": [
-                "<1.3.8.post2"
+                "<1.3.0"
             ],
-            "v": "<1.3.8.post2"
+            "v": "<1.3.0"
         },
         {
             "advisory": "Rasterio 1.3.8.post2 updates its bundled dependency 'libcurl' to v8.4.0 to include a security fix.\r\nhttps://github.com/rasterio/rasterio-wheels/issues/112",
@@ -121890,6 +125809,16 @@
             ],
             "v": "<1.3.8.post2"
         },
+        {
+            "advisory": "Rasterio 1.3.8.post2 updates its bundled dependency 'libcurl' to v8.4.0 to include a security fix.",
+            "cve": "CVE-2023-38545",
+            "id": "pyup.io-61769",
+            "more_info_path": "/vulnerabilities/CVE-2023-38545/61769",
+            "specs": [
+                "<1.3.8.post2"
+            ],
+            "v": "<1.3.8.post2"
+        },
         {
             "advisory": "Rasterio 1.3.8.post1 updates its C dependency 'libwebp' to v1.3.2 to include a fix for a high-risk vulnerability.\r\nhttps://github.com/rasterio/rasterio/discussions/2924",
             "cve": "CVE-2023-4863",
@@ -121948,9 +125877,9 @@
         },
         {
             "advisory": "Ray 1.9.1 updates its dependency 'log4j' to v2.16.0 to include security fixes.\r\nhttps://github.com/ray-project/ray/commit/2cdbf974ea63caf4323aacbccaef2394a14a8562",
-            "cve": "CVE-2021-44228",
-            "id": "pyup.io-43413",
-            "more_info_path": "/vulnerabilities/CVE-2021-44228/43413",
+            "cve": "CVE-2021-45046",
+            "id": "pyup.io-43415",
+            "more_info_path": "/vulnerabilities/CVE-2021-45046/43415",
             "specs": [
                 "<1.9.1"
             ],
@@ -121958,9 +125887,9 @@
         },
         {
             "advisory": "Ray 1.9.1 updates its dependency 'log4j' to v2.16.0 to include security fixes.\r\nhttps://github.com/ray-project/ray/commit/2cdbf974ea63caf4323aacbccaef2394a14a8562",
-            "cve": "CVE-2021-45046",
-            "id": "pyup.io-43415",
-            "more_info_path": "/vulnerabilities/CVE-2021-45046/43415",
+            "cve": "CVE-2021-44228",
+            "id": "pyup.io-43413",
+            "more_info_path": "/vulnerabilities/CVE-2021-44228/43413",
             "specs": [
                 "<1.9.1"
             ],
@@ -121976,6 +125905,16 @@
             ],
             "v": "<1.9.2"
         },
+        {
+            "advisory": "Ray version 2.11.0 includes a fix for a race condition issue that occurred during the creation of actors in multi-threaded environments.",
+            "cve": "PVE-2024-70485",
+            "id": "pyup.io-70485",
+            "more_info_path": "/vulnerabilities/PVE-2024-70485/70485",
+            "specs": [
+                "<2.11.0"
+            ],
+            "v": "<2.11.0"
+        },
         {
             "advisory": "Ray 2.8.1 includes a fix for CVE-2023-6021: LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication.\r\nhttps://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023",
             "cve": "CVE-2023-6021",
@@ -121987,20 +125926,20 @@
             "v": "<2.8.1"
         },
         {
-            "advisory": "Ray 2.8.1 includes a fix for CVE-2023-48023: Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment\r\nhttps://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023",
-            "cve": "CVE-2023-48023",
-            "id": "pyup.io-62651",
-            "more_info_path": "/vulnerabilities/CVE-2023-48023/62651",
+            "advisory": "Ray 2.8.1 includes a fix for CVE-2023-6019: A command injection exists in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication.\r\nhttps://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023",
+            "cve": "CVE-2023-6019",
+            "id": "pyup.io-62632",
+            "more_info_path": "/vulnerabilities/CVE-2023-6019/62632",
             "specs": [
                 "<2.8.1"
             ],
             "v": "<2.8.1"
         },
         {
-            "advisory": "Ray 2.8.1 includes a fix for CVE-2023-6019: A command injection exists in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication.\r\nhttps://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023",
-            "cve": "CVE-2023-6019",
-            "id": "pyup.io-62632",
-            "more_info_path": "/vulnerabilities/CVE-2023-6019/62632",
+            "advisory": "Ray 2.8.1 includes a fix for CVE-2023-48023: Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment\r\nhttps://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023",
+            "cve": "CVE-2023-48023",
+            "id": "pyup.io-62651",
+            "more_info_path": "/vulnerabilities/CVE-2023-48023/62651",
             "specs": [
                 "<2.8.1"
             ],
@@ -122027,14 +125966,14 @@
             "v": "<2.9.0"
         },
         {
-            "advisory": "Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment",
+            "advisory": "** Disputed ** Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment.",
             "cve": "CVE-2023-48022",
             "id": "pyup.io-65189",
             "more_info_path": "/vulnerabilities/CVE-2023-48022/65189",
             "specs": [
-                "==2.6.3,==2.8.0"
+                "<=2.8.0"
             ],
-            "v": "==2.6.3,==2.8.0"
+            "v": "<=2.8.0"
         }
     ],
     "ray-on-aml": [
@@ -122252,20 +126191,20 @@
             "v": ">=0,<2.4.10"
         },
         {
-            "advisory": "Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.",
-            "cve": "CVE-2022-3175",
-            "id": "pyup.io-54515",
-            "more_info_path": "/vulnerabilities/CVE-2022-3175/54515",
+            "advisory": "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.",
+            "cve": "CVE-2022-3174",
+            "id": "pyup.io-54513",
+            "more_info_path": "/vulnerabilities/CVE-2022-3174/54513",
             "specs": [
                 ">=0,<2.4.2"
             ],
             "v": ">=0,<2.4.2"
         },
         {
-            "advisory": "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.",
-            "cve": "CVE-2022-3174",
-            "id": "pyup.io-54513",
-            "more_info_path": "/vulnerabilities/CVE-2022-3174/54513",
+            "advisory": "Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.",
+            "cve": "CVE-2022-3175",
+            "id": "pyup.io-54515",
+            "more_info_path": "/vulnerabilities/CVE-2022-3175/54515",
             "specs": [
                 ">=0,<2.4.2"
             ],
@@ -122362,20 +126301,20 @@
             "v": ">=0,<2.4.8"
         },
         {
-            "advisory": "rdiffweb prior to 2.4.8 has no limit in length of root directory names. Allowing users to enter long strings may result in a DOS attack or memory corruption. Version 2.4.8 defines a field limit for username, email, and root directory.",
-            "cve": "CVE-2022-3295",
-            "id": "pyup.io-54477",
-            "more_info_path": "/vulnerabilities/CVE-2022-3295/54477",
+            "advisory": "rdiffweb prior to version 2.4.8 is vulnerable to Improper Cleanup on Thrown Exception. This could allow an attacker to display a message of their choice onto a web page. Version 2.4.8 contains a fix for this issue.",
+            "cve": "CVE-2022-3301",
+            "id": "pyup.io-54475",
+            "more_info_path": "/vulnerabilities/CVE-2022-3301/54475",
             "specs": [
                 ">=0,<2.4.8"
             ],
             "v": ">=0,<2.4.8"
         },
         {
-            "advisory": "rdiffweb prior to version 2.4.8 is vulnerable to Improper Cleanup on Thrown Exception. This could allow an attacker to display a message of their choice onto a web page. Version 2.4.8 contains a fix for this issue.",
-            "cve": "CVE-2022-3301",
-            "id": "pyup.io-54475",
-            "more_info_path": "/vulnerabilities/CVE-2022-3301/54475",
+            "advisory": "rdiffweb prior to 2.4.8 has no limit in length of root directory names. Allowing users to enter long strings may result in a DOS attack or memory corruption. Version 2.4.8 defines a field limit for username, email, and root directory.",
+            "cve": "CVE-2022-3295",
+            "id": "pyup.io-54477",
+            "more_info_path": "/vulnerabilities/CVE-2022-3295/54477",
             "specs": [
                 ">=0,<2.4.8"
             ],
@@ -122431,16 +126370,6 @@
             ],
             "v": ">=0,<2.5.0"
         },
-        {
-            "advisory": "rdiffweb prior to 2.5.0a4 does not have a rate limit to prevent attackers attempting brute force attacks to guess passwords. Version 2.5.0a4 limits the number of incorrect password attempts.",
-            "cve": "CVE-2022-3273",
-            "id": "pyup.io-54506",
-            "more_info_path": "/vulnerabilities/CVE-2022-3273/54506",
-            "specs": [
-                ">=0,<2.5.0"
-            ],
-            "v": ">=0,<2.5.0"
-        },
         {
             "advisory": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.",
             "cve": "CVE-2022-3456",
@@ -122461,6 +126390,16 @@
             ],
             "v": ">=0,<2.5.0"
         },
+        {
+            "advisory": "rdiffweb prior to 2.5.0a4 does not have a rate limit to prevent attackers attempting brute force attacks to guess passwords. Version 2.5.0a4 limits the number of incorrect password attempts.",
+            "cve": "CVE-2022-3273",
+            "id": "pyup.io-54506",
+            "more_info_path": "/vulnerabilities/CVE-2022-3273/54506",
+            "specs": [
+                ">=0,<2.5.0"
+            ],
+            "v": ">=0,<2.5.0"
+        },
         {
             "advisory": "rdiffweb prior to 2.5.0a4 allows users to set their new password to be the same as the old password during a password reset. Version 2.5.0a4 enforces a password policy in which a new password cannot be the same as the old one.",
             "cve": "CVE-2022-3376",
@@ -122571,26 +126510,6 @@
             ],
             "v": ">=0,<2.5.4"
         },
-        {
-            "advisory": "rdiffweb prior to 2.5.5 has no rate limit on the \"resend email feature\" while enable or disable 2FA from `/prefs/mfa` endpoint .",
-            "cve": "CVE-2022-4723",
-            "id": "pyup.io-54631",
-            "more_info_path": "/vulnerabilities/CVE-2022-4723/54631",
-            "specs": [
-                ">=0,<2.5.5"
-            ],
-            "v": ">=0,<2.5.5"
-        },
-        {
-            "advisory": "Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.",
-            "cve": "CVE-2022-4722",
-            "id": "pyup.io-54632",
-            "more_info_path": "/vulnerabilities/CVE-2022-4722/54632",
-            "specs": [
-                ">=0,<2.5.5"
-            ],
-            "v": ">=0,<2.5.5"
-        },
         {
             "advisory": "Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.",
             "cve": "CVE-2022-4724",
@@ -122621,6 +126540,26 @@
             ],
             "v": ">=0,<2.5.5"
         },
+        {
+            "advisory": "rdiffweb prior to 2.5.5 has no rate limit on the \"resend email feature\" while enable or disable 2FA from `/prefs/mfa` endpoint .",
+            "cve": "CVE-2022-4723",
+            "id": "pyup.io-54631",
+            "more_info_path": "/vulnerabilities/CVE-2022-4723/54631",
+            "specs": [
+                ">=0,<2.5.5"
+            ],
+            "v": ">=0,<2.5.5"
+        },
+        {
+            "advisory": "Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.",
+            "cve": "CVE-2022-4722",
+            "id": "pyup.io-54632",
+            "more_info_path": "/vulnerabilities/CVE-2022-4722/54632",
+            "specs": [
+                ">=0,<2.5.5"
+            ],
+            "v": ">=0,<2.5.5"
+        },
         {
             "advisory": "Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.",
             "cve": "CVE-2022-4720",
@@ -122919,6 +126858,56 @@
         }
     ],
     "red-discordbot": [
+        {
+            "advisory": "Red-discordbot 3.0.0rc3 addresses a race condition issue, ensuring stability by preventing changes to dictionaries during serialization, thus safeguarding against data corruption or errors during this process.",
+            "cve": "PVE-2024-67132",
+            "id": "pyup.io-67132",
+            "more_info_path": "/vulnerabilities/PVE-2024-67132/67132",
+            "specs": [
+                "<3.0.0rc3"
+            ],
+            "v": "<3.0.0rc3"
+        },
+        {
+            "advisory": "Red-discordbot 3.3.11 resolves a severe security issue, CVE-2020-15140, in its Trivia module, preventing remote code execution. This vulnerability involved specially crafted usernames that could manipulate the leaderboard command, enabling unauthorized actions or data access. Red-discordbot 3.3.11 resolves a severe security issue, CVE-2020-15140, in its Trivia module, preventing remote code execution. This vulnerability involved specially crafted usernames that could manipulate the leaderboard command, enabling unauthorized actions or data access.",
+            "cve": "CVE-2020-15140",
+            "id": "pyup.io-67129",
+            "more_info_path": "/vulnerabilities/CVE-2020-15140/67129",
+            "specs": [
+                "<3.3.11"
+            ],
+            "v": "<3.3.11"
+        },
+        {
+            "advisory": "Red-discordbot 3.3.12 addresses a critical security flaw, CVE-2020-15147, within its Streams module that permitted remote code execution. This vulnerability exploited \"going live\" messages, allowing malicious Discord users to inject code and potentially perform harmful actions or access confidential data.",
+            "cve": "CVE-2020-15147",
+            "id": "pyup.io-67128",
+            "more_info_path": "/vulnerabilities/CVE-2020-15147/67128",
+            "specs": [
+                "<3.3.12"
+            ],
+            "v": "<3.3.12"
+        },
+        {
+            "advisory": "Red-discordbot 3.3.9 updates ensure that neither global nor server rules restrict guild owners from using commands to modify server rules. While bot owners retain the ability to disable any command in the Permissions cog using [p]command disable, this change prioritizes access for guild owners, maintaining command functionality and administrative control.",
+            "cve": "PVE-2024-67130",
+            "id": "pyup.io-67130",
+            "more_info_path": "/vulnerabilities/PVE-2024-67130/67130",
+            "specs": [
+                "<3.3.9"
+            ],
+            "v": "<3.3.9"
+        },
+        {
+            "advisory": "Red-discordbot 3.4.1 fixes the CVE-2020-15278: An unauthorized privilege escalation exploit has been discovered in the Mod module \u2014 this exploit allows Discord users with a high privilege level within the guild to bypass hierarchy checks when the application is in a specific condition that is beyond that user's control. By abusing this exploit, it's possible to perform destructive actions within the guild the user has high privileges.",
+            "cve": "CVE-2020-15278",
+            "id": "pyup.io-67126",
+            "more_info_path": "/vulnerabilities/CVE-2020-15278/67126",
+            "specs": [
+                "<3.4.1"
+            ],
+            "v": "<3.4.1"
+        },
         {
             "advisory": "### Impact\nA RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive actions and/or access sensitive information.\n\n### Patches\nThis critical exploit has been fixed on version 3.3.11.\n\n### Workarounds\nUnloading the Trivia module with ``unload trivia`` can render this exploit not accessible. We still highly recommend updating to 3.3.11 to completely patch this issue.\n\n### References\nhttps://github.com/Cog-Creators/Red-DiscordBot/pull/4175\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [Cog-Creators/Red-DiscordBot](https://github.com/Cog-Creators/Red-DiscordBot)\n* Over on our [Discord server](https://discord.gg/red)",
             "cve": "CVE-2020-15140",
@@ -122998,6 +126987,16 @@
         }
     ],
     "redisgraph": [
+        {
+            "advisory": "RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias that has not yet been introduced.",
+            "cve": "CVE-2020-35668",
+            "id": "pyup.io-70592",
+            "more_info_path": "/vulnerabilities/CVE-2020-35668/70592",
+            "specs": [
+                "<2.4.0"
+            ],
+            "v": "<2.4.0"
+        },
         {
             "advisory": "Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code via the code logic after valid authentication.",
             "cve": "CVE-2023-47004",
@@ -123281,20 +127280,20 @@
     ],
     "renku": [
         {
-            "advisory": "Renku version 0.4.0 updates its dependency \"PyYAML\", which was affected by CVE-2017-18342.",
+            "advisory": "Renku version 0.4.0 fixes CVE-2017-18342.",
             "cve": "CVE-2017-18342",
-            "id": "pyup.io-41665",
-            "more_info_path": "/vulnerabilities/CVE-2017-18342/41665",
+            "id": "pyup.io-38552",
+            "more_info_path": "/vulnerabilities/CVE-2017-18342/38552",
             "specs": [
                 "<0.4.0"
             ],
             "v": "<0.4.0"
         },
         {
-            "advisory": "Renku version 0.4.0 fixes CVE-2017-18342.",
+            "advisory": "Renku version 0.4.0 updates its dependency \"PyYAML\", which was affected by CVE-2017-18342.",
             "cve": "CVE-2017-18342",
-            "id": "pyup.io-38552",
-            "more_info_path": "/vulnerabilities/CVE-2017-18342/38552",
+            "id": "pyup.io-41665",
+            "more_info_path": "/vulnerabilities/CVE-2017-18342/41665",
             "specs": [
                 "<0.4.0"
             ],
@@ -124185,6 +128184,28 @@
                 ">3.0.25,<=4.0rc1"
             ],
             "v": "<=3.0.20,>3.0.25,<=4.0rc1"
+        },
+        {
+            "advisory": "Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file.",
+            "cve": "CVE-2013-4519",
+            "id": "pyup.io-67967",
+            "more_info_path": "/vulnerabilities/CVE-2013-4519/67967",
+            "specs": [
+                ">=1.6,<1.6.21",
+                ">=1.7,<1.7.17"
+            ],
+            "v": ">=1.6,<1.6.21,>=1.7,<1.7.17"
+        },
+        {
+            "advisory": "Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name.",
+            "cve": "CVE-2013-4795",
+            "id": "pyup.io-67969",
+            "more_info_path": "/vulnerabilities/CVE-2013-4795/67969",
+            "specs": [
+                ">=1.6,<1.6.21",
+                ">=1.7,<1.7.17"
+            ],
+            "v": ">=1.6,<1.6.21,>=1.7,<1.7.17"
         }
     ],
     "rewuests": [
@@ -125311,6 +129332,16 @@
             ],
             "v": "<1.12.1"
         },
+        {
+            "advisory": "scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.",
+            "cve": "CVE-2017-17516",
+            "id": "pyup.io-67430",
+            "more_info_path": "/vulnerabilities/CVE-2017-17516/67430",
+            "specs": [
+                "<=1.19.0"
+            ],
+            "v": "<=1.19.0"
+        },
         {
             "advisory": "Versions of rtv, a terminal viewer for Reddit, are susceptible to arbitrary code execution attacks. This vulnerability allows attackers to execute code arbitrarily on the system hosting the affected software.",
             "cve": "PVE-2024-99880",
@@ -125322,6 +129353,18 @@
             "v": ">=0,<1.12.1"
         }
     ],
+    "ruamel-yaml": [
+        {
+            "advisory": "In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.",
+            "cve": "CVE-2019-20478",
+            "id": "pyup.io-70598",
+            "more_info_path": "/vulnerabilities/CVE-2019-20478/70598",
+            "specs": [
+                "<0.16.7"
+            ],
+            "v": "<0.16.7"
+        }
+    ],
     "rubicon-ml": [
         {
             "advisory": "Rubicon-ml 0.2.6 includes a fix to address a whitesource vulnerability.",
@@ -125428,20 +129471,20 @@
             "v": "<1.19.0.post2"
         },
         {
-            "advisory": "Rucio 1.20.0 has updated its urllib3 dependency, moving from the previous version range of >=1.23,<1.24 to a new range of 2.20.0,<2.22.0. This change is a response to the security vulnerability identified as CVE-2019-11324.\r\nhttps://github.com/rucio/rucio/pull/2506/commits/15b73d85776c07e51ecc4fd0481638228532fc2b",
-            "cve": "CVE-2019-11324",
-            "id": "pyup.io-64262",
-            "more_info_path": "/vulnerabilities/CVE-2019-11324/64262",
+            "advisory": "Rucio 1.20.0 updates its SQLAlchemy dependency from version 1.2.16 to 1.3.3, in response to the security vulnerability identified as CVE-2019-7164.\r\nhttps://github.com/rucio/rucio/commit/122fd9cdc59c2e3e058a2b4fecef328d4d80029b",
+            "cve": "CVE-2019-7164",
+            "id": "pyup.io-64142",
+            "more_info_path": "/vulnerabilities/CVE-2019-7164/64142",
             "specs": [
                 "<1.20.0"
             ],
             "v": "<1.20.0"
         },
         {
-            "advisory": "Rucio 1.20.0 updates its SQLAlchemy dependency from version 1.2.16 to 1.3.3, in response to the security vulnerability identified as CVE-2019-7164.\r\nhttps://github.com/rucio/rucio/commit/122fd9cdc59c2e3e058a2b4fecef328d4d80029b",
-            "cve": "CVE-2019-7164",
-            "id": "pyup.io-64142",
-            "more_info_path": "/vulnerabilities/CVE-2019-7164/64142",
+            "advisory": "Rucio 1.20.0 has updated its urllib3 dependency, moving from the previous version range of >=1.23,<1.24 to a new range of 2.20.0,<2.22.0. This change is a response to the security vulnerability identified as CVE-2019-11324.\r\nhttps://github.com/rucio/rucio/pull/2506/commits/15b73d85776c07e51ecc4fd0481638228532fc2b",
+            "cve": "CVE-2019-11324",
+            "id": "pyup.io-64262",
+            "more_info_path": "/vulnerabilities/CVE-2019-11324/64262",
             "specs": [
                 "<1.20.0"
             ],
@@ -125479,16 +129522,6 @@
         }
     ],
     "rucio-webui": [
-        {
-            "advisory": "Versions of Rucio are susceptible to an authentication bypass vulnerability due to a potential leak of authentication tokens through cookies to other sessions within a wsgi container. This flaw allows users to access the web interface and escalate privileges by using authentication tokens leaked to users who access the webui closely in time.",
-            "cve": "PVE-2024-99879",
-            "id": "pyup.io-65540",
-            "more_info_path": "/vulnerabilities/PVE-2024-99879/65540",
-            "specs": [
-                ">=1.26.0,<1.26.7"
-            ],
-            "v": ">=1.26.0,<1.26.7"
-        },
         {
             "advisory": "Rucio-webui 1.26.7 includes a security fix: Potentially leak of the contents of cookies to other sessions within a wsgi container. Impact is that Rucio authentication tokens are leaked to other users accessing the 'webui' within a close timeframe, thus allowing users to access the `webui` with the leaked authentication token. Privileges are therefore also escalated. Rucio server / daemons are not affected by this issue, it is isolated to the webui.\r\nhttps://github.com/rucio/rucio/issues/4928",
             "cve": "PVE-2023-55207",
@@ -125703,16 +129736,6 @@
             ],
             "v": "<1.2"
         },
-        {
-            "advisory": "The blocklist for hostnames in SafeURL-Python does not restrict Fully Qualified Domain Names (FQDNs).",
-            "cve": "PVE-2023-99949",
-            "id": "pyup.io-60915",
-            "more_info_path": "/vulnerabilities/PVE-2023-99949/60915",
-            "specs": [
-                "<1.3"
-            ],
-            "v": "<1.3"
-        },
         {
             "advisory": "Versions of the safeurl-python library are susceptible to an Access Control Bypass vulnerability because they fail to block fully qualified domain names (FQDNs). This flaw allows attackers to bypass hostname blacklists by appending a dot to the end of the blacklisted hostname, potentially leading to server-side request forgery (SSRF) incidents.",
             "cve": "PVE-2024-99878",
@@ -125821,6 +129844,26 @@
         }
     ],
     "saleor": [
+        {
+            "advisory": "In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the browser's local storage mechanism, including credentials. A malicious user with direct access to the browser could extract the email and password. In versions prior to 2.10.0 persisted the cache even after the user logged out. This is fixed in version 2.10.3. A workaround is to manually clear application data (browser's local storage) after logging into Saleor Storefront.",
+            "cve": "CVE-2020-15085",
+            "id": "pyup.io-70595",
+            "more_info_path": "/vulnerabilities/CVE-2020-15085/70595",
+            "specs": [
+                "<2.10.3"
+            ],
+            "v": "<2.10.3"
+        },
+        {
+            "advisory": "Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is affected by: Incorrect Access Control. The impact is: Important. The component is: ProductVariant type in GraphQL API. The attack vector is: Unauthenticated user can access the GraphQL API (which is by default publicly exposed under `/graphql/` URL) and fetch products data which may include admin-restricted shop's revenue data. The fixed version is: 2.3.1.",
+            "cve": "CVE-2019-1010304",
+            "id": "pyup.io-70594",
+            "more_info_path": "/vulnerabilities/CVE-2019-1010304/70594",
+            "specs": [
+                "<2.3.1"
+            ],
+            "v": "<2.3.1"
+        },
         {
             "advisory": "Saleor 3.7.17, 3.6.18, 3.5.23, 3.4.24, 3.3.26, 3.2.14 and 3.1.24 include a fix for CVE-2022-39275: Improper object type validation in mutations leading to unauthorized access.\r\nSafe versions aren't in PyPi but on Saleor Github repository.\r\nhttps://github.com/saleor/saleor/security/advisories/GHSA-xhq8-8c5v-w8ff",
             "cve": "CVE-2022-39275",
@@ -125902,14 +129945,34 @@
                 ">=3.9.0,<3.9.49"
             ],
             "v": ">=2.11.0,<3.7.68,>=3.10.0,<3.10.36,>=3.11.0,<3.11.35,>=3.12.0,<3.12.25,>=3.13.0,<3.13.16,>=3.8.0,<3.8.40,>=3.9.0,<3.9.49"
+        },
+        {
+            "advisory": "In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server.",
+            "cve": "CVE-2019-13594",
+            "id": "pyup.io-70563",
+            "more_info_path": "/vulnerabilities/CVE-2019-13594/70563",
+            "specs": [
+                ">=2.7.0,<2.8.0"
+            ],
+            "v": ">=2.7.0,<2.8.0"
         }
     ],
     "salt": [
         {
-            "advisory": "Salt versions 3002.5, 3001.4, 3000.6, 2019.2.8, 2019.2.5, 2018.3.5, 2017.7.8, 2016.11.10, 2016.11.6, 2016.11.5, 2016.11.3, 2016.3.8, 2016.3.6, 2016.3.4, 2015.8.13 and 2015.8.10 include a fix for CVE-2021-3197: An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.\r\nhttps://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
-            "cve": "CVE-2021-3197",
-            "id": "pyup.io-41952",
-            "more_info_path": "/vulnerabilities/CVE-2021-3197/41952",
+            "advisory": "SaltStack RSA Key Generation allows remote users to decrypt communications",
+            "cve": "CVE-2013-2228",
+            "id": "pyup.io-67957",
+            "more_info_path": "/vulnerabilities/CVE-2013-2228/67957",
+            "specs": [
+                "<0.15.0"
+            ],
+            "v": "<0.15.0"
+        },
+        {
+            "advisory": "An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks. Several Salt versions were patched. See: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
+            "cve": "CVE-2021-25283",
+            "id": "pyup.io-41948",
+            "more_info_path": "/vulnerabilities/CVE-2021-25283/41948",
             "specs": [
                 "<2015.8.10",
                 ">=2015.8.11,<2015.8.13",
@@ -125930,10 +129993,10 @@
             "v": "<2015.8.10,>=2015.8.11,<2015.8.13,>=2016.3.0rc0,<2016.3.4,==2016.3.5,==2016.3.7,>=2016.3.9,<2016.11.3,==2016.11.4,>=2016.11.7,<2016.11.10,>=2017.5.0,<2017.7.8,>=2018.2.0,<=2018.3.5,>=2019.2.0rc0,<2019.2.5,>=2019.2.6,<2019.2.8,>=3000.0.0rc0,<3000.6,>=3001rc1,<3001.4,>=3002rc0,<3002.5"
         },
         {
-            "advisory": "An issue was discovered in through SaltStack Salt before 3002.5. Salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master. Several Salt versions were patched. See: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
-            "cve": "CVE-2021-25281",
-            "id": "pyup.io-41946",
-            "more_info_path": "/vulnerabilities/CVE-2021-25281/41946",
+            "advisory": "Salt versions 3002.5, 3001.4, 3000.6, 2019.2.8, 2019.2.5, 2018.3.5, 2017.7.8, 2016.11.10, 2016.11.6, 2016.11.5, 2016.11.3, 2016.3.8, 2016.3.6, 2016.3.4, 2015.8.13 and 2015.8.10 include a fix for CVE-2021-3197: An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.\r\nhttps://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
+            "cve": "CVE-2021-3197",
+            "id": "pyup.io-41952",
+            "more_info_path": "/vulnerabilities/CVE-2021-3197/41952",
             "specs": [
                 "<2015.8.10",
                 ">=2015.8.11,<2015.8.13",
@@ -125954,10 +130017,10 @@
             "v": "<2015.8.10,>=2015.8.11,<2015.8.13,>=2016.3.0rc0,<2016.3.4,==2016.3.5,==2016.3.7,>=2016.3.9,<2016.11.3,==2016.11.4,>=2016.11.7,<2016.11.10,>=2017.5.0,<2017.7.8,>=2018.2.0,<=2018.3.5,>=2019.2.0rc0,<2019.2.5,>=2019.2.6,<2019.2.8,>=3000.0.0rc0,<3000.6,>=3001rc1,<3001.4,>=3002rc0,<3002.5"
         },
         {
-            "advisory": "An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks. Several Salt versions were patched. See: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
-            "cve": "CVE-2021-25283",
-            "id": "pyup.io-41948",
-            "more_info_path": "/vulnerabilities/CVE-2021-25283/41948",
+            "advisory": "An issue was discovered in through SaltStack Salt before 3002.5. Salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master. Several Salt versions were patched. See: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
+            "cve": "CVE-2021-25281",
+            "id": "pyup.io-41946",
+            "more_info_path": "/vulnerabilities/CVE-2021-25281/41946",
             "specs": [
                 "<2015.8.10",
                 ">=2015.8.11,<2015.8.13",
@@ -126221,10 +130284,10 @@
             "v": "<3002.8,>=3003rc0,<3003.4,>=3004rc0,<3004.1"
         },
         {
-            "advisory": "Salt 3002.8, 3003.4 and 3004.1 include a fix for CVE-2022-22941: When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.",
-            "cve": "CVE-2022-22941",
-            "id": "pyup.io-49628",
-            "more_info_path": "/vulnerabilities/CVE-2022-22941/49628",
+            "advisory": "Salt 3002.8, 3003.4 and 3004.1 include a fix for CVE-2022-22934: Salt Masters do not sign pillar data with the minion\u2019s public key, which can result in attackers substituting arbitrary pillar data.",
+            "cve": "CVE-2022-22934",
+            "id": "pyup.io-49570",
+            "more_info_path": "/vulnerabilities/CVE-2022-22934/49570",
             "specs": [
                 "<3002.8",
                 ">=3003rc0,<3003.4",
@@ -126233,10 +130296,10 @@
             "v": "<3002.8,>=3003rc0,<3003.4,>=3004rc0,<3004.1"
         },
         {
-            "advisory": "Salt 3002.8, 3003.4 and 3004.1 include a fix for CVE-2022-22934: Salt Masters do not sign pillar data with the minion\u2019s public key, which can result in attackers substituting arbitrary pillar data.",
-            "cve": "CVE-2022-22934",
-            "id": "pyup.io-49570",
-            "more_info_path": "/vulnerabilities/CVE-2022-22934/49570",
+            "advisory": "Salt 3002.8, 3003.4 and 3004.1 include a fix for CVE-2022-22941: When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.",
+            "cve": "CVE-2022-22941",
+            "id": "pyup.io-49628",
+            "more_info_path": "/vulnerabilities/CVE-2022-22941/49628",
             "specs": [
                 "<3002.8",
                 ">=3003rc0,<3003.4",
@@ -126300,17 +130363,6 @@
             ],
             "v": "<3005.2,>=3006.0rc1,<3006.2"
         },
-        {
-            "advisory": "Salt 3005.2 and 3006.2 update its dependency 'cryptography' to v41.0.3 to include security fixes.",
-            "cve": "CVE-2023-3446",
-            "id": "pyup.io-61047",
-            "more_info_path": "/vulnerabilities/CVE-2023-3446/61047",
-            "specs": [
-                "<3005.2",
-                ">=3006.0rc1,<3006.2"
-            ],
-            "v": "<3005.2,>=3006.0rc1,<3006.2"
-        },
         {
             "advisory": "Salt 3005.2 and 3006.2 update its dependency 'certifi' to v2023.07.22 to include a security fix.",
             "cve": "CVE-2023-37920",
@@ -126333,6 +130385,17 @@
             ],
             "v": "<3005.2,>=3006.0rc1,<3006.2"
         },
+        {
+            "advisory": "Salt 3005.2 and 3006.2 update its dependency 'cryptography' to v41.0.3 to include security fixes.",
+            "cve": "CVE-2023-3446",
+            "id": "pyup.io-61047",
+            "more_info_path": "/vulnerabilities/CVE-2023-3446/61047",
+            "specs": [
+                "<3005.2",
+                ">=3006.0rc1,<3006.2"
+            ],
+            "v": "<3005.2,>=3006.0rc1,<3006.2"
+        },
         {
             "advisory": "Salt 3005.2 and 3006.2 include a fix for CVE-2023-20898: Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.\r\nhttps://saltproject.io/security-announcements/2023-08-10-advisory",
             "cve": "CVE-2023-20898",
@@ -126726,10 +130789,10 @@
             "v": ">=0,<2019.2.1"
         },
         {
-            "advisory": "An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.",
-            "cve": "CVE-2020-11652",
-            "id": "pyup.io-54173",
-            "more_info_path": "/vulnerabilities/CVE-2020-11652/54173",
+            "advisory": "An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.",
+            "cve": "CVE-2020-11651",
+            "id": "pyup.io-54437",
+            "more_info_path": "/vulnerabilities/CVE-2020-11651/54437",
             "specs": [
                 ">=0,<2019.2.4",
                 ">=3000,<3000.2"
@@ -126737,10 +130800,10 @@
             "v": ">=0,<2019.2.4,>=3000,<3000.2"
         },
         {
-            "advisory": "An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.",
-            "cve": "CVE-2020-11651",
-            "id": "pyup.io-54437",
-            "more_info_path": "/vulnerabilities/CVE-2020-11651/54437",
+            "advisory": "An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.",
+            "cve": "CVE-2020-11652",
+            "id": "pyup.io-54173",
+            "more_info_path": "/vulnerabilities/CVE-2020-11652/54173",
             "specs": [
                 ">=0,<2019.2.4",
                 ">=3000,<3000.2"
@@ -127357,6 +131420,16 @@
                 "<32.5.2"
             ],
             "v": "<32.5.2"
+        },
+        {
+            "advisory": "Scancodeio 34.4.0 updates its dependency 'gunicorn' to v22.0.0 to include a security fix.",
+            "cve": "CVE-2024-1135",
+            "id": "pyup.io-68075",
+            "more_info_path": "/vulnerabilities/CVE-2024-1135/68075",
+            "specs": [
+                "<34.4.0"
+            ],
+            "v": "<34.4.0"
         }
     ],
     "scandeval": [
@@ -127597,20 +131670,20 @@
     ],
     "scml": [
         {
-            "advisory": "Scml 0.5.1 pins a transitive dependency (ipython>=7.16.3) to include a security fix.",
-            "cve": "CVE-2022-21699",
-            "id": "pyup.io-45839",
-            "more_info_path": "/vulnerabilities/CVE-2022-21699/45839",
+            "advisory": "Scml 0.5.1 pins a transitive dependency (mistune>=2.0.1) to include a fix for an XSS vulnerability.",
+            "cve": "CVE-2017-16876",
+            "id": "pyup.io-45819",
+            "more_info_path": "/vulnerabilities/CVE-2017-16876/45819",
             "specs": [
                 "<0.5.1"
             ],
             "v": "<0.5.1"
         },
         {
-            "advisory": "Scml 0.5.1 pins a transitive dependency (mistune>=2.0.1) to include a fix for an XSS vulnerability.",
-            "cve": "CVE-2017-16876",
-            "id": "pyup.io-45819",
-            "more_info_path": "/vulnerabilities/CVE-2017-16876/45819",
+            "advisory": "Scml 0.5.1 pins a transitive dependency (ipython>=7.16.3) to include a security fix.",
+            "cve": "CVE-2022-21699",
+            "id": "pyup.io-45839",
+            "more_info_path": "/vulnerabilities/CVE-2022-21699/45839",
             "specs": [
                 "<0.5.1"
             ],
@@ -127763,6 +131836,17 @@
             ],
             "v": "<1.8.3,>=2.0.0,<2.6.2"
         },
+        {
+            "advisory": "Scrapy's redirect middleware improperly retains the `Authorization` header when redirecting requests to a different domain, leading to potential credential leakage. This occurs when an initial request with an `Authorization` header is redirected by a server to another domain, contrary to recommendations that suggest such headers should be dropped during cross-domain redirects. The vulnerability has been detected in versions of Scrapy. Users unable to upgrade to newer versions should avoid using the `Authorization` header or implement workarounds like disabling redirects for certain requests or ensuring the trustworthiness of redirect destinations to prevent credentials from being exposed to unintended third parties.",
+            "cve": "PVE-2024-68088",
+            "id": "pyup.io-68088",
+            "more_info_path": "/vulnerabilities/PVE-2024-68088/68088",
+            "specs": [
+                "<1.8.4",
+                ">=2,<2.11.1"
+            ],
+            "v": "<1.8.4,>=2,<2.11.1"
+        },
         {
             "advisory": "Scrapy, a web crawling framework, is susceptible to an XML External Entity (XXE) Injection vulnerability involving a limited set of versions. This vulnerability specifically arises within the sitemap reader component, where parsing XML input allows for external entities to be specified. Exploits could enable attackers to disclose sensitive local files or data, such as passwords, by using external entities within the XML document to access local or remote content. This could potentially compromise data confidentiality or lead to a Denial of Service by overwhelming resources with requests.",
             "cve": "PVE-2024-99877",
@@ -127812,9 +131896,20 @@
             "id": "pyup.io-54672",
             "more_info_path": "/vulnerabilities/CVE-2017-14158/54672",
             "specs": [
-                ">=0.7"
+                ">=0.7,<=2.11.1"
+            ],
+            "v": ">=0.7,<=2.11.1"
+        },
+        {
+            "advisory": "When utilizing the built-in HTTP proxy downloader middleware in Scrapy, if a request is processed with proxy credentials included, the middleware sets a Proxy-Authentication header unless it's already present. However, issues arise with third-party proxy-rotation middleware, which may update the proxy metadata for each request without clearing the previous Proxy-Authentication header. This mismatch can lead to proxy credentials being sent to an unintended proxy. Especially problematic during request retries and redirects, this error could expose sensitive proxy credentials if different proxies require them. Users leveraging third-party proxy-rotation middleware need to ensure these are patched alongside Scrapy to prevent data leaks.",
+            "cve": "PVE-2024-70412",
+            "id": "pyup.io-70412",
+            "more_info_path": "/vulnerabilities/PVE-2024-70412/70412",
+            "specs": [
+                ">=2,<2.6.2",
+                "<1.8.3"
             ],
-            "v": ">=0.7"
+            "v": ">=2,<2.6.2,<1.8.3"
         }
     ],
     "scrapy-splash": [
@@ -129094,16 +133189,6 @@
             ],
             "v": "<=2.1.4"
         },
-        {
-            "advisory": "Scvae versions 2.1.4 and prior require as minimum dependency TensorFlow v1.15.2 or lower, that have several known vulnerabilities.",
-            "cve": "CVE-2019-13960",
-            "id": "pyup.io-46662",
-            "more_info_path": "/vulnerabilities/CVE-2019-13960/46662",
-            "specs": [
-                "<=2.1.4"
-            ],
-            "v": "<=2.1.4"
-        },
         {
             "advisory": "Scvae versions 2.1.4 and prior require as minimum dependency TensorFlow v1.15.2 or lower, that have several known vulnerabilities.",
             "cve": "CVE-2020-13871",
@@ -129224,6 +133309,16 @@
             ],
             "v": "<=2.1.4"
         },
+        {
+            "advisory": "Scvae versions 2.1.4 and prior require as minimum dependency TensorFlow v1.15.2 or lower, that have several known vulnerabilities.",
+            "cve": "CVE-2019-13960",
+            "id": "pyup.io-46662",
+            "more_info_path": "/vulnerabilities/CVE-2019-13960/46662",
+            "specs": [
+                "<=2.1.4"
+            ],
+            "v": "<=2.1.4"
+        },
         {
             "advisory": "Scvae versions 2.1.4 and prior require as minimum dependency TensorFlow v1.15.2 or lower, that have several known vulnerabilities.",
             "cve": "CVE-2021-22922",
@@ -129397,6 +133492,28 @@
             "v": ">0,<0"
         }
     ],
+    "secsend": [
+        {
+            "advisory": "Secsend 1.1.0 updates the NPM package word-wrap to version 1.2.5 to address CVE-2023-26115.",
+            "cve": "CVE-2023-26115",
+            "id": "pyup.io-67140",
+            "more_info_path": "/vulnerabilities/CVE-2023-26115/67140",
+            "specs": [
+                "<1.1.0"
+            ],
+            "v": "<1.1.0"
+        },
+        {
+            "advisory": "Secsend 1.1.0 enhances security by updating semver to version 7.6.0 due to CVE-2023-2613.",
+            "cve": "CVE-2022-25883",
+            "id": "pyup.io-67154",
+            "more_info_path": "/vulnerabilities/CVE-2022-25883/67154",
+            "specs": [
+                "<1.1.0"
+            ],
+            "v": "<1.1.0"
+        }
+    ],
     "securesystemslib": [
         {
             "advisory": "Securesystemslib 0.20.1 drops support for Python 2.7, as it arrived to EOL in January 2020.",
@@ -131307,6 +135424,18 @@
             "v": "<=0.10.0"
         }
     ],
+    "shopyo": [
+        {
+            "advisory": "Affected versions of Shopyo are vulnerable to a Improper Authorization flaw.",
+            "cve": "PVE-2024-67520",
+            "id": "pyup.io-67520",
+            "more_info_path": "/vulnerabilities/PVE-2024-67520/67520",
+            "specs": [
+                "<4.9.1"
+            ],
+            "v": "<4.9.1"
+        }
+    ],
     "shub": [
         {
             "advisory": "Shub 2.10.0 upgrades its pyyaml dependency from version 3.12 to 5.1.1, addressing the security vulnerability CVE-2018-18074.\r\nhttps://github.com/scrapinghub/shub/pull/353/commits/0ba5d4aeefe11044f5d218ddcf85511fcde29633",
@@ -131757,16 +135886,6 @@
         }
     ],
     "sleap": [
-        {
-            "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-15204",
-            "id": "pyup.io-43794",
-            "more_info_path": "/vulnerabilities/CVE-2020-15204/43794",
-            "specs": [
-                "<1.0.10"
-            ],
-            "v": "<1.0.10"
-        },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
             "cve": "CVE-2020-15202",
@@ -131789,9 +135908,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2019-13960",
-            "id": "pyup.io-43823",
-            "more_info_path": "/vulnerabilities/CVE-2019-13960/43823",
+            "cve": "CVE-2018-17190",
+            "id": "pyup.io-43816",
+            "more_info_path": "/vulnerabilities/CVE-2018-17190/43816",
             "specs": [
                 "<1.0.10"
             ],
@@ -131799,9 +135918,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2018-17190",
-            "id": "pyup.io-43816",
-            "more_info_path": "/vulnerabilities/CVE-2018-17190/43816",
+            "cve": "CVE-2020-15204",
+            "id": "pyup.io-43794",
+            "more_info_path": "/vulnerabilities/CVE-2020-15204/43794",
             "specs": [
                 "<1.0.10"
             ],
@@ -131839,9 +135958,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-15210",
-            "id": "pyup.io-43813",
-            "more_info_path": "/vulnerabilities/CVE-2020-15210/43813",
+            "cve": "CVE-2019-19244",
+            "id": "pyup.io-43818",
+            "more_info_path": "/vulnerabilities/CVE-2019-19244/43818",
             "specs": [
                 "<1.0.10"
             ],
@@ -131849,9 +135968,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2019-19244",
-            "id": "pyup.io-43818",
-            "more_info_path": "/vulnerabilities/CVE-2019-19244/43818",
+            "cve": "CVE-2019-19880",
+            "id": "pyup.io-43819",
+            "more_info_path": "/vulnerabilities/CVE-2019-19880/43819",
             "specs": [
                 "<1.0.10"
             ],
@@ -131859,9 +135978,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2019-19880",
-            "id": "pyup.io-43819",
-            "more_info_path": "/vulnerabilities/CVE-2019-19880/43819",
+            "cve": "CVE-2020-15211",
+            "id": "pyup.io-39680",
+            "more_info_path": "/vulnerabilities/CVE-2020-15211/39680",
             "specs": [
                 "<1.0.10"
             ],
@@ -131869,9 +135988,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2018-20330",
-            "id": "pyup.io-43820",
-            "more_info_path": "/vulnerabilities/CVE-2018-20330/43820",
+            "cve": "CVE-2020-15358",
+            "id": "pyup.io-43805",
+            "more_info_path": "/vulnerabilities/CVE-2020-15358/43805",
             "specs": [
                 "<1.0.10"
             ],
@@ -131879,9 +135998,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-15195",
-            "id": "pyup.io-43800",
-            "more_info_path": "/vulnerabilities/CVE-2020-15195/43800",
+            "cve": "CVE-2020-15190",
+            "id": "pyup.io-43802",
+            "more_info_path": "/vulnerabilities/CVE-2020-15190/43802",
             "specs": [
                 "<1.0.10"
             ],
@@ -131889,9 +136008,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-15211",
-            "id": "pyup.io-39680",
-            "more_info_path": "/vulnerabilities/CVE-2020-15211/39680",
+            "cve": "CVE-2018-19664",
+            "id": "pyup.io-43815",
+            "more_info_path": "/vulnerabilities/CVE-2018-19664/43815",
             "specs": [
                 "<1.0.10"
             ],
@@ -131899,9 +136018,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-15206",
-            "id": "pyup.io-43797",
-            "more_info_path": "/vulnerabilities/CVE-2020-15206/43797",
+            "cve": "CVE-2018-11770",
+            "id": "pyup.io-43822",
+            "more_info_path": "/vulnerabilities/CVE-2018-11770/43822",
             "specs": [
                 "<1.0.10"
             ],
@@ -131909,9 +136028,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-15358",
-            "id": "pyup.io-43805",
-            "more_info_path": "/vulnerabilities/CVE-2020-15358/43805",
+            "cve": "CVE-2020-15208",
+            "id": "pyup.io-43798",
+            "more_info_path": "/vulnerabilities/CVE-2020-15208/43798",
             "specs": [
                 "<1.0.10"
             ],
@@ -131919,9 +136038,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-15190",
-            "id": "pyup.io-43802",
-            "more_info_path": "/vulnerabilities/CVE-2020-15190/43802",
+            "cve": "CVE-2020-13871",
+            "id": "pyup.io-43810",
+            "more_info_path": "/vulnerabilities/CVE-2020-13871/43810",
             "specs": [
                 "<1.0.10"
             ],
@@ -131929,9 +136048,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-15205",
-            "id": "pyup.io-43795",
-            "more_info_path": "/vulnerabilities/CVE-2020-15205/43795",
+            "cve": "CVE-2020-13631",
+            "id": "pyup.io-43811",
+            "more_info_path": "/vulnerabilities/CVE-2020-13631/43811",
             "specs": [
                 "<1.0.10"
             ],
@@ -131939,9 +136058,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2018-19664",
-            "id": "pyup.io-43815",
-            "more_info_path": "/vulnerabilities/CVE-2018-19664/43815",
+            "cve": "CVE-2020-15210",
+            "id": "pyup.io-43813",
+            "more_info_path": "/vulnerabilities/CVE-2020-15210/43813",
             "specs": [
                 "<1.0.10"
             ],
@@ -131949,9 +136068,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2019-19645",
-            "id": "pyup.io-43817",
-            "more_info_path": "/vulnerabilities/CVE-2019-19645/43817",
+            "cve": "CVE-2018-20330",
+            "id": "pyup.io-43820",
+            "more_info_path": "/vulnerabilities/CVE-2018-20330/43820",
             "specs": [
                 "<1.0.10"
             ],
@@ -131959,9 +136078,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2018-11770",
-            "id": "pyup.io-43822",
-            "more_info_path": "/vulnerabilities/CVE-2018-11770/43822",
+            "cve": "CVE-2020-15195",
+            "id": "pyup.io-43800",
+            "more_info_path": "/vulnerabilities/CVE-2020-15195/43800",
             "specs": [
                 "<1.0.10"
             ],
@@ -131969,9 +136088,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-15208",
-            "id": "pyup.io-43798",
-            "more_info_path": "/vulnerabilities/CVE-2020-15208/43798",
+            "cve": "CVE-2020-15206",
+            "id": "pyup.io-43797",
+            "more_info_path": "/vulnerabilities/CVE-2020-15206/43797",
             "specs": [
                 "<1.0.10"
             ],
@@ -131979,9 +136098,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-11656",
-            "id": "pyup.io-43806",
-            "more_info_path": "/vulnerabilities/CVE-2020-11656/43806",
+            "cve": "CVE-2020-15205",
+            "id": "pyup.io-43795",
+            "more_info_path": "/vulnerabilities/CVE-2020-15205/43795",
             "specs": [
                 "<1.0.10"
             ],
@@ -131989,9 +136108,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-9327",
-            "id": "pyup.io-43812",
-            "more_info_path": "/vulnerabilities/CVE-2020-9327/43812",
+            "cve": "CVE-2019-19645",
+            "id": "pyup.io-43817",
+            "more_info_path": "/vulnerabilities/CVE-2019-19645/43817",
             "specs": [
                 "<1.0.10"
             ],
@@ -131999,9 +136118,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-15209",
-            "id": "pyup.io-43799",
-            "more_info_path": "/vulnerabilities/CVE-2020-15209/43799",
+            "cve": "CVE-2020-11656",
+            "id": "pyup.io-43806",
+            "more_info_path": "/vulnerabilities/CVE-2020-11656/43806",
             "specs": [
                 "<1.0.10"
             ],
@@ -132009,9 +136128,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-13871",
-            "id": "pyup.io-43810",
-            "more_info_path": "/vulnerabilities/CVE-2020-13871/43810",
+            "cve": "CVE-2020-9327",
+            "id": "pyup.io-43812",
+            "more_info_path": "/vulnerabilities/CVE-2020-9327/43812",
             "specs": [
                 "<1.0.10"
             ],
@@ -132019,9 +136138,9 @@
         },
         {
             "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
-            "cve": "CVE-2020-13631",
-            "id": "pyup.io-43811",
-            "more_info_path": "/vulnerabilities/CVE-2020-13631/43811",
+            "cve": "CVE-2020-15209",
+            "id": "pyup.io-43799",
+            "more_info_path": "/vulnerabilities/CVE-2020-15209/43799",
             "specs": [
                 "<1.0.10"
             ],
@@ -132057,6 +136176,16 @@
             ],
             "v": "<1.0.10"
         },
+        {
+            "advisory": "Sleap 1.0.10 updates TensorFlow to v2.1.2 for security reasons.",
+            "cve": "CVE-2019-13960",
+            "id": "pyup.io-43823",
+            "more_info_path": "/vulnerabilities/CVE-2019-13960/43823",
+            "specs": [
+                "<1.0.10"
+            ],
+            "v": "<1.0.10"
+        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2021-29579",
@@ -132067,6 +136196,16 @@
             ],
             "v": "<1.2.0a0"
         },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29528",
+            "id": "pyup.io-46112",
+            "more_info_path": "/vulnerabilities/CVE-2021-29528/46112",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2020-26267",
@@ -132079,9 +136218,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29528",
-            "id": "pyup.io-46112",
-            "more_info_path": "/vulnerabilities/CVE-2021-29528/46112",
+            "cve": "CVE-2021-29585",
+            "id": "pyup.io-46169",
+            "more_info_path": "/vulnerabilities/CVE-2021-29585/46169",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132089,9 +136228,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-26271",
-            "id": "pyup.io-46084",
-            "more_info_path": "/vulnerabilities/CVE-2020-26271/46084",
+            "cve": "CVE-2021-29521",
+            "id": "pyup.io-46105",
+            "more_info_path": "/vulnerabilities/CVE-2021-29521/46105",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132099,9 +136238,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29513",
-            "id": "pyup.io-46097",
-            "more_info_path": "/vulnerabilities/CVE-2021-29513/46097",
+            "cve": "CVE-2021-41227",
+            "id": "pyup.io-46236",
+            "more_info_path": "/vulnerabilities/CVE-2021-41227/46236",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132109,9 +136248,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29585",
-            "id": "pyup.io-46169",
-            "more_info_path": "/vulnerabilities/CVE-2021-29585/46169",
+            "cve": "CVE-2021-29543",
+            "id": "pyup.io-46127",
+            "more_info_path": "/vulnerabilities/CVE-2021-29543/46127",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132119,9 +136258,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29610",
-            "id": "pyup.io-46194",
-            "more_info_path": "/vulnerabilities/CVE-2021-29610/46194",
+            "cve": "CVE-2021-29609",
+            "id": "pyup.io-46193",
+            "more_info_path": "/vulnerabilities/CVE-2021-29609/46193",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132129,9 +136268,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29521",
-            "id": "pyup.io-46105",
-            "more_info_path": "/vulnerabilities/CVE-2021-29521/46105",
+            "cve": "CVE-2021-29537",
+            "id": "pyup.io-46121",
+            "more_info_path": "/vulnerabilities/CVE-2021-29537/46121",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132139,9 +136278,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-15266",
-            "id": "pyup.io-46079",
-            "more_info_path": "/vulnerabilities/CVE-2020-15266/46079",
+            "cve": "CVE-2021-29538",
+            "id": "pyup.io-46122",
+            "more_info_path": "/vulnerabilities/CVE-2021-29538/46122",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132149,9 +136288,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41227",
-            "id": "pyup.io-46236",
-            "more_info_path": "/vulnerabilities/CVE-2021-41227/46236",
+            "cve": "CVE-2021-41212",
+            "id": "pyup.io-46222",
+            "more_info_path": "/vulnerabilities/CVE-2021-41212/46222",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132159,9 +136298,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29609",
-            "id": "pyup.io-46193",
-            "more_info_path": "/vulnerabilities/CVE-2021-29609/46193",
+            "cve": "CVE-2021-29527",
+            "id": "pyup.io-46111",
+            "more_info_path": "/vulnerabilities/CVE-2021-29527/46111",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132169,9 +136308,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29543",
-            "id": "pyup.io-46127",
-            "more_info_path": "/vulnerabilities/CVE-2021-29543/46127",
+            "cve": "CVE-2021-41207",
+            "id": "pyup.io-46217",
+            "more_info_path": "/vulnerabilities/CVE-2021-41207/46217",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132179,9 +136318,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29538",
-            "id": "pyup.io-46122",
-            "more_info_path": "/vulnerabilities/CVE-2021-29538/46122",
+            "cve": "CVE-2021-41195",
+            "id": "pyup.io-46205",
+            "more_info_path": "/vulnerabilities/CVE-2021-41195/46205",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132189,9 +136328,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29537",
-            "id": "pyup.io-46121",
-            "more_info_path": "/vulnerabilities/CVE-2021-29537/46121",
+            "cve": "CVE-2021-29602",
+            "id": "pyup.io-46186",
+            "more_info_path": "/vulnerabilities/CVE-2021-29602/46186",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132199,9 +136338,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41212",
-            "id": "pyup.io-46222",
-            "more_info_path": "/vulnerabilities/CVE-2021-41212/46222",
+            "cve": "CVE-2021-29603",
+            "id": "pyup.io-46187",
+            "more_info_path": "/vulnerabilities/CVE-2021-29603/46187",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132209,9 +136348,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29522",
-            "id": "pyup.io-46106",
-            "more_info_path": "/vulnerabilities/CVE-2021-29522/46106",
+            "cve": "CVE-2021-29605",
+            "id": "pyup.io-46189",
+            "more_info_path": "/vulnerabilities/CVE-2021-29605/46189",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132219,9 +136358,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29580",
-            "id": "pyup.io-46164",
-            "more_info_path": "/vulnerabilities/CVE-2021-29580/46164",
+            "cve": "CVE-2021-41205",
+            "id": "pyup.io-46215",
+            "more_info_path": "/vulnerabilities/CVE-2021-41205/46215",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132229,9 +136368,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29527",
-            "id": "pyup.io-46111",
-            "more_info_path": "/vulnerabilities/CVE-2021-29527/46111",
+            "cve": "CVE-2021-29596",
+            "id": "pyup.io-46180",
+            "more_info_path": "/vulnerabilities/CVE-2021-29596/46180",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132239,9 +136378,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41207",
-            "id": "pyup.io-46217",
-            "more_info_path": "/vulnerabilities/CVE-2021-41207/46217",
+            "cve": "CVE-2021-41221",
+            "id": "pyup.io-46230",
+            "more_info_path": "/vulnerabilities/CVE-2021-41221/46230",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132249,9 +136388,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41195",
-            "id": "pyup.io-46205",
-            "more_info_path": "/vulnerabilities/CVE-2021-41195/46205",
+            "cve": "CVE-2021-29576",
+            "id": "pyup.io-46160",
+            "more_info_path": "/vulnerabilities/CVE-2021-29576/46160",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132259,9 +136398,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29602",
-            "id": "pyup.io-46186",
-            "more_info_path": "/vulnerabilities/CVE-2021-29602/46186",
+            "cve": "CVE-2021-29569",
+            "id": "pyup.io-46153",
+            "more_info_path": "/vulnerabilities/CVE-2021-29569/46153",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132269,9 +136408,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29603",
-            "id": "pyup.io-46187",
-            "more_info_path": "/vulnerabilities/CVE-2021-29603/46187",
+            "cve": "CVE-2021-29564",
+            "id": "pyup.io-46148",
+            "more_info_path": "/vulnerabilities/CVE-2021-29564/46148",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132279,9 +136418,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29577",
-            "id": "pyup.io-46161",
-            "more_info_path": "/vulnerabilities/CVE-2021-29577/46161",
+            "cve": "CVE-2021-41198",
+            "id": "pyup.io-46208",
+            "more_info_path": "/vulnerabilities/CVE-2021-41198/46208",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132289,9 +136428,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29512",
-            "id": "pyup.io-46096",
-            "more_info_path": "/vulnerabilities/CVE-2021-29512/46096",
+            "cve": "CVE-2021-29533",
+            "id": "pyup.io-46117",
+            "more_info_path": "/vulnerabilities/CVE-2021-29533/46117",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132299,9 +136438,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29605",
-            "id": "pyup.io-46189",
-            "more_info_path": "/vulnerabilities/CVE-2021-29605/46189",
+            "cve": "CVE-2021-29587",
+            "id": "pyup.io-46171",
+            "more_info_path": "/vulnerabilities/CVE-2021-29587/46171",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132309,9 +136448,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29596",
-            "id": "pyup.io-46180",
-            "more_info_path": "/vulnerabilities/CVE-2021-29596/46180",
+            "cve": "CVE-2021-41209",
+            "id": "pyup.io-46219",
+            "more_info_path": "/vulnerabilities/CVE-2021-41209/46219",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132319,9 +136458,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41205",
-            "id": "pyup.io-46215",
-            "more_info_path": "/vulnerabilities/CVE-2021-41205/46215",
+            "cve": "CVE-2021-41224",
+            "id": "pyup.io-46233",
+            "more_info_path": "/vulnerabilities/CVE-2021-41224/46233",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132329,9 +136468,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41221",
-            "id": "pyup.io-46230",
-            "more_info_path": "/vulnerabilities/CVE-2021-41221/46230",
+            "cve": "CVE-2021-29541",
+            "id": "pyup.io-46125",
+            "more_info_path": "/vulnerabilities/CVE-2021-29541/46125",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132339,9 +136478,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29576",
-            "id": "pyup.io-46160",
-            "more_info_path": "/vulnerabilities/CVE-2021-29576/46160",
+            "cve": "CVE-2021-29613",
+            "id": "pyup.io-46198",
+            "more_info_path": "/vulnerabilities/CVE-2021-29613/46198",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132349,9 +136488,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29569",
-            "id": "pyup.io-46153",
-            "more_info_path": "/vulnerabilities/CVE-2021-29569/46153",
+            "cve": "CVE-2021-29524",
+            "id": "pyup.io-46108",
+            "more_info_path": "/vulnerabilities/CVE-2021-29524/46108",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132359,9 +136498,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29564",
-            "id": "pyup.io-46148",
-            "more_info_path": "/vulnerabilities/CVE-2021-29564/46148",
+            "cve": "CVE-2021-41215",
+            "id": "pyup.io-46225",
+            "more_info_path": "/vulnerabilities/CVE-2021-41215/46225",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132369,9 +136508,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29547",
-            "id": "pyup.io-46131",
-            "more_info_path": "/vulnerabilities/CVE-2021-29547/46131",
+            "cve": "CVE-2021-41216",
+            "id": "pyup.io-46226",
+            "more_info_path": "/vulnerabilities/CVE-2021-41216/46226",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132379,9 +136518,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41198",
-            "id": "pyup.io-46208",
-            "more_info_path": "/vulnerabilities/CVE-2021-41198/46208",
+            "cve": "CVE-2021-29535",
+            "id": "pyup.io-46119",
+            "more_info_path": "/vulnerabilities/CVE-2021-29535/46119",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132389,9 +136528,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-26266",
-            "id": "pyup.io-46080",
-            "more_info_path": "/vulnerabilities/CVE-2020-26266/46080",
+            "cve": "CVE-2019-20838",
+            "id": "pyup.io-46074",
+            "more_info_path": "/vulnerabilities/CVE-2019-20838/46074",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132399,9 +136538,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29599",
-            "id": "pyup.io-46183",
-            "more_info_path": "/vulnerabilities/CVE-2021-29599/46183",
+            "cve": "CVE-2021-29584",
+            "id": "pyup.io-46168",
+            "more_info_path": "/vulnerabilities/CVE-2021-29584/46168",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132409,9 +136548,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29540",
-            "id": "pyup.io-46124",
-            "more_info_path": "/vulnerabilities/CVE-2021-29540/46124",
+            "cve": "CVE-2021-29552",
+            "id": "pyup.io-46136",
+            "more_info_path": "/vulnerabilities/CVE-2021-29552/46136",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132419,9 +136558,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29615",
-            "id": "pyup.io-46200",
-            "more_info_path": "/vulnerabilities/CVE-2021-29615/46200",
+            "cve": "CVE-2021-29562",
+            "id": "pyup.io-46146",
+            "more_info_path": "/vulnerabilities/CVE-2021-29562/46146",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132429,9 +136568,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29587",
-            "id": "pyup.io-46171",
-            "more_info_path": "/vulnerabilities/CVE-2021-29587/46171",
+            "cve": "CVE-2021-29558",
+            "id": "pyup.io-46142",
+            "more_info_path": "/vulnerabilities/CVE-2021-29558/46142",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132439,9 +136578,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29533",
-            "id": "pyup.io-46117",
-            "more_info_path": "/vulnerabilities/CVE-2021-29533/46117",
+            "cve": "CVE-2021-29551",
+            "id": "pyup.io-46135",
+            "more_info_path": "/vulnerabilities/CVE-2021-29551/46135",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132449,9 +136588,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41209",
-            "id": "pyup.io-46219",
-            "more_info_path": "/vulnerabilities/CVE-2021-41209/46219",
+            "cve": "CVE-2021-29592",
+            "id": "pyup.io-46176",
+            "more_info_path": "/vulnerabilities/CVE-2021-29592/46176",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132459,9 +136598,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41224",
-            "id": "pyup.io-46233",
-            "more_info_path": "/vulnerabilities/CVE-2021-41224/46233",
+            "cve": "CVE-2020-8177",
+            "id": "pyup.io-46086",
+            "more_info_path": "/vulnerabilities/CVE-2020-8177/46086",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132469,9 +136608,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29541",
-            "id": "pyup.io-46125",
-            "more_info_path": "/vulnerabilities/CVE-2021-29541/46125",
+            "cve": "CVE-2020-14155",
+            "id": "pyup.io-46076",
+            "more_info_path": "/vulnerabilities/CVE-2020-14155/46076",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132479,9 +136618,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29613",
-            "id": "pyup.io-46198",
-            "more_info_path": "/vulnerabilities/CVE-2021-29613/46198",
+            "cve": "CVE-2021-29588",
+            "id": "pyup.io-46172",
+            "more_info_path": "/vulnerabilities/CVE-2021-29588/46172",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132489,9 +136628,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29524",
-            "id": "pyup.io-46108",
-            "more_info_path": "/vulnerabilities/CVE-2021-29524/46108",
+            "cve": "CVE-2021-29573",
+            "id": "pyup.io-46157",
+            "more_info_path": "/vulnerabilities/CVE-2021-29573/46157",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132499,9 +136638,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41215",
-            "id": "pyup.io-46225",
-            "more_info_path": "/vulnerabilities/CVE-2021-41215/46225",
+            "cve": "CVE-2021-29598",
+            "id": "pyup.io-46182",
+            "more_info_path": "/vulnerabilities/CVE-2021-29598/46182",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132509,9 +136648,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41216",
-            "id": "pyup.io-46226",
-            "more_info_path": "/vulnerabilities/CVE-2021-41216/46226",
+            "cve": "CVE-2021-29581",
+            "id": "pyup.io-46165",
+            "more_info_path": "/vulnerabilities/CVE-2021-29581/46165",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132519,9 +136658,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41217",
-            "id": "pyup.io-46227",
-            "more_info_path": "/vulnerabilities/CVE-2021-41217/46227",
+            "cve": "CVE-2020-15265",
+            "id": "pyup.io-46078",
+            "more_info_path": "/vulnerabilities/CVE-2020-15265/46078",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132529,9 +136668,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29535",
-            "id": "pyup.io-46119",
-            "more_info_path": "/vulnerabilities/CVE-2021-29535/46119",
+            "cve": "CVE-2021-41213",
+            "id": "pyup.io-46223",
+            "more_info_path": "/vulnerabilities/CVE-2021-41213/46223",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132539,9 +136678,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2019-20838",
-            "id": "pyup.io-46074",
-            "more_info_path": "/vulnerabilities/CVE-2019-20838/46074",
+            "cve": "CVE-2021-29546",
+            "id": "pyup.io-46130",
+            "more_info_path": "/vulnerabilities/CVE-2021-29546/46130",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132549,9 +136688,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29584",
-            "id": "pyup.io-46168",
-            "more_info_path": "/vulnerabilities/CVE-2021-29584/46168",
+            "cve": "CVE-2021-41201",
+            "id": "pyup.io-46211",
+            "more_info_path": "/vulnerabilities/CVE-2021-41201/46211",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132559,9 +136698,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29549",
-            "id": "pyup.io-46133",
-            "more_info_path": "/vulnerabilities/CVE-2021-29549/46133",
+            "cve": "CVE-2021-29611",
+            "id": "pyup.io-46196",
+            "more_info_path": "/vulnerabilities/CVE-2021-29611/46196",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132569,9 +136708,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29552",
-            "id": "pyup.io-46136",
-            "more_info_path": "/vulnerabilities/CVE-2021-29552/46136",
+            "cve": "CVE-2021-41196",
+            "id": "pyup.io-46206",
+            "more_info_path": "/vulnerabilities/CVE-2021-41196/46206",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132579,9 +136718,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29562",
-            "id": "pyup.io-46146",
-            "more_info_path": "/vulnerabilities/CVE-2021-29562/46146",
+            "cve": "CVE-2021-41223",
+            "id": "pyup.io-46232",
+            "more_info_path": "/vulnerabilities/CVE-2021-41223/46232",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132589,9 +136728,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29558",
-            "id": "pyup.io-46142",
-            "more_info_path": "/vulnerabilities/CVE-2021-29558/46142",
+            "cve": "CVE-2021-29600",
+            "id": "pyup.io-46184",
+            "more_info_path": "/vulnerabilities/CVE-2021-29600/46184",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132599,9 +136738,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29559",
-            "id": "pyup.io-46143",
-            "more_info_path": "/vulnerabilities/CVE-2021-29559/46143",
+            "cve": "CVE-2021-29553",
+            "id": "pyup.io-46137",
+            "more_info_path": "/vulnerabilities/CVE-2021-29553/46137",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132609,9 +136748,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29551",
-            "id": "pyup.io-46135",
-            "more_info_path": "/vulnerabilities/CVE-2021-29551/46135",
+            "cve": "CVE-2021-29516",
+            "id": "pyup.io-46100",
+            "more_info_path": "/vulnerabilities/CVE-2021-29516/46100",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132619,9 +136758,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29597",
-            "id": "pyup.io-46181",
-            "more_info_path": "/vulnerabilities/CVE-2021-29597/46181",
+            "cve": "CVE-2021-29619",
+            "id": "pyup.io-46204",
+            "more_info_path": "/vulnerabilities/CVE-2021-29619/46204",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132629,9 +136768,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29592",
-            "id": "pyup.io-46176",
-            "more_info_path": "/vulnerabilities/CVE-2021-29592/46176",
+            "cve": "CVE-2021-41197",
+            "id": "pyup.io-46207",
+            "more_info_path": "/vulnerabilities/CVE-2021-41197/46207",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132639,9 +136778,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-22923",
-            "id": "pyup.io-46092",
-            "more_info_path": "/vulnerabilities/CVE-2021-22923/46092",
+            "cve": "CVE-2021-29517",
+            "id": "pyup.io-46101",
+            "more_info_path": "/vulnerabilities/CVE-2021-29517/46101",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132649,9 +136788,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-22922",
-            "id": "pyup.io-46091",
-            "more_info_path": "/vulnerabilities/CVE-2021-22922/46091",
+            "cve": "CVE-2021-29591",
+            "id": "pyup.io-46175",
+            "more_info_path": "/vulnerabilities/CVE-2021-29591/46175",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132659,9 +136798,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-8177",
-            "id": "pyup.io-46086",
-            "more_info_path": "/vulnerabilities/CVE-2020-8177/46086",
+            "cve": "CVE-2021-29590",
+            "id": "pyup.io-46174",
+            "more_info_path": "/vulnerabilities/CVE-2021-29590/46174",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132669,9 +136808,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-8169",
-            "id": "pyup.io-46085",
-            "more_info_path": "/vulnerabilities/CVE-2020-8169/46085",
+            "cve": "CVE-2021-41214",
+            "id": "pyup.io-46224",
+            "more_info_path": "/vulnerabilities/CVE-2021-41214/46224",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132679,9 +136818,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-14155",
-            "id": "pyup.io-46076",
-            "more_info_path": "/vulnerabilities/CVE-2020-14155/46076",
+            "cve": "CVE-2021-41204",
+            "id": "pyup.io-46214",
+            "more_info_path": "/vulnerabilities/CVE-2021-41204/46214",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132689,9 +136828,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29566",
-            "id": "pyup.io-46150",
-            "more_info_path": "/vulnerabilities/CVE-2021-29566/46150",
+            "cve": "CVE-2021-29548",
+            "id": "pyup.io-46132",
+            "more_info_path": "/vulnerabilities/CVE-2021-29548/46132",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132699,9 +136838,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29588",
-            "id": "pyup.io-46172",
-            "more_info_path": "/vulnerabilities/CVE-2021-29588/46172",
+            "cve": "CVE-2021-29519",
+            "id": "pyup.io-46103",
+            "more_info_path": "/vulnerabilities/CVE-2021-29519/46103",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132709,9 +136848,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41226",
-            "id": "pyup.io-46235",
-            "more_info_path": "/vulnerabilities/CVE-2021-41226/46235",
+            "cve": "CVE-2020-26271",
+            "id": "pyup.io-46084",
+            "more_info_path": "/vulnerabilities/CVE-2020-26271/46084",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132719,9 +136858,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29573",
-            "id": "pyup.io-46157",
-            "more_info_path": "/vulnerabilities/CVE-2021-29573/46157",
+            "cve": "CVE-2021-29513",
+            "id": "pyup.io-46097",
+            "more_info_path": "/vulnerabilities/CVE-2021-29513/46097",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132729,9 +136868,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29598",
-            "id": "pyup.io-46182",
-            "more_info_path": "/vulnerabilities/CVE-2021-29598/46182",
+            "cve": "CVE-2021-29610",
+            "id": "pyup.io-46194",
+            "more_info_path": "/vulnerabilities/CVE-2021-29610/46194",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132739,9 +136878,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29581",
-            "id": "pyup.io-46165",
-            "more_info_path": "/vulnerabilities/CVE-2021-29581/46165",
+            "cve": "CVE-2020-15266",
+            "id": "pyup.io-46079",
+            "more_info_path": "/vulnerabilities/CVE-2020-15266/46079",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132749,9 +136888,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29546",
-            "id": "pyup.io-46130",
-            "more_info_path": "/vulnerabilities/CVE-2021-29546/46130",
+            "cve": "CVE-2021-29522",
+            "id": "pyup.io-46106",
+            "more_info_path": "/vulnerabilities/CVE-2021-29522/46106",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132759,9 +136898,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-15265",
-            "id": "pyup.io-46078",
-            "more_info_path": "/vulnerabilities/CVE-2020-15265/46078",
+            "cve": "CVE-2021-29580",
+            "id": "pyup.io-46164",
+            "more_info_path": "/vulnerabilities/CVE-2021-29580/46164",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132769,9 +136908,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41213",
-            "id": "pyup.io-46223",
-            "more_info_path": "/vulnerabilities/CVE-2021-41213/46223",
+            "cve": "CVE-2021-29577",
+            "id": "pyup.io-46161",
+            "more_info_path": "/vulnerabilities/CVE-2021-29577/46161",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132779,9 +136918,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41201",
-            "id": "pyup.io-46211",
-            "more_info_path": "/vulnerabilities/CVE-2021-41201/46211",
+            "cve": "CVE-2021-29512",
+            "id": "pyup.io-46096",
+            "more_info_path": "/vulnerabilities/CVE-2021-29512/46096",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132789,9 +136928,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29600",
-            "id": "pyup.io-46184",
-            "more_info_path": "/vulnerabilities/CVE-2021-29600/46184",
+            "cve": "CVE-2021-29547",
+            "id": "pyup.io-46131",
+            "more_info_path": "/vulnerabilities/CVE-2021-29547/46131",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132799,9 +136938,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29611",
-            "id": "pyup.io-46196",
-            "more_info_path": "/vulnerabilities/CVE-2021-29611/46196",
+            "cve": "CVE-2020-26266",
+            "id": "pyup.io-46080",
+            "more_info_path": "/vulnerabilities/CVE-2020-26266/46080",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132809,9 +136948,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41196",
-            "id": "pyup.io-46206",
-            "more_info_path": "/vulnerabilities/CVE-2021-41196/46206",
+            "cve": "CVE-2021-29599",
+            "id": "pyup.io-46183",
+            "more_info_path": "/vulnerabilities/CVE-2021-29599/46183",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132819,9 +136958,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41223",
-            "id": "pyup.io-46232",
-            "more_info_path": "/vulnerabilities/CVE-2021-41223/46232",
+            "cve": "CVE-2021-29540",
+            "id": "pyup.io-46124",
+            "more_info_path": "/vulnerabilities/CVE-2021-29540/46124",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132829,9 +136968,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29553",
-            "id": "pyup.io-46137",
-            "more_info_path": "/vulnerabilities/CVE-2021-29553/46137",
+            "cve": "CVE-2021-29615",
+            "id": "pyup.io-46200",
+            "more_info_path": "/vulnerabilities/CVE-2021-29615/46200",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132839,9 +136978,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29516",
-            "id": "pyup.io-46100",
-            "more_info_path": "/vulnerabilities/CVE-2021-29516/46100",
+            "cve": "CVE-2021-41217",
+            "id": "pyup.io-46227",
+            "more_info_path": "/vulnerabilities/CVE-2021-41217/46227",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132849,9 +136988,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29619",
-            "id": "pyup.io-46204",
-            "more_info_path": "/vulnerabilities/CVE-2021-29619/46204",
+            "cve": "CVE-2021-29549",
+            "id": "pyup.io-46133",
+            "more_info_path": "/vulnerabilities/CVE-2021-29549/46133",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132859,9 +136998,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41197",
-            "id": "pyup.io-46207",
-            "more_info_path": "/vulnerabilities/CVE-2021-41197/46207",
+            "cve": "CVE-2021-29559",
+            "id": "pyup.io-46143",
+            "more_info_path": "/vulnerabilities/CVE-2021-29559/46143",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132869,9 +137008,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29591",
-            "id": "pyup.io-46175",
-            "more_info_path": "/vulnerabilities/CVE-2021-29591/46175",
+            "cve": "CVE-2021-29597",
+            "id": "pyup.io-46181",
+            "more_info_path": "/vulnerabilities/CVE-2021-29597/46181",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132879,9 +137018,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29590",
-            "id": "pyup.io-46174",
-            "more_info_path": "/vulnerabilities/CVE-2021-29590/46174",
+            "cve": "CVE-2021-22923",
+            "id": "pyup.io-46092",
+            "more_info_path": "/vulnerabilities/CVE-2021-22923/46092",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132889,9 +137028,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41228",
-            "id": "pyup.io-46237",
-            "more_info_path": "/vulnerabilities/CVE-2021-41228/46237",
+            "cve": "CVE-2021-22922",
+            "id": "pyup.io-46091",
+            "more_info_path": "/vulnerabilities/CVE-2021-22922/46091",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132899,9 +137038,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29517",
-            "id": "pyup.io-46101",
-            "more_info_path": "/vulnerabilities/CVE-2021-29517/46101",
+            "cve": "CVE-2020-8169",
+            "id": "pyup.io-46085",
+            "more_info_path": "/vulnerabilities/CVE-2020-8169/46085",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132909,9 +137048,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41214",
-            "id": "pyup.io-46224",
-            "more_info_path": "/vulnerabilities/CVE-2021-41214/46224",
+            "cve": "CVE-2021-29566",
+            "id": "pyup.io-46150",
+            "more_info_path": "/vulnerabilities/CVE-2021-29566/46150",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132919,9 +137058,19 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41204",
-            "id": "pyup.io-46214",
-            "more_info_path": "/vulnerabilities/CVE-2021-41204/46214",
+            "cve": "CVE-2021-41226",
+            "id": "pyup.io-46235",
+            "more_info_path": "/vulnerabilities/CVE-2021-41226/46235",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-41228",
+            "id": "pyup.io-46237",
+            "more_info_path": "/vulnerabilities/CVE-2021-41228/46237",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132959,9 +137108,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29548",
-            "id": "pyup.io-46132",
-            "more_info_path": "/vulnerabilities/CVE-2021-29548/46132",
+            "cve": "CVE-2021-29606",
+            "id": "pyup.io-46190",
+            "more_info_path": "/vulnerabilities/CVE-2021-29606/46190",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132969,9 +137118,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29606",
-            "id": "pyup.io-46190",
-            "more_info_path": "/vulnerabilities/CVE-2021-29606/46190",
+            "cve": "CVE-2021-29574",
+            "id": "pyup.io-46158",
+            "more_info_path": "/vulnerabilities/CVE-2021-29574/46158",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132979,9 +137128,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29574",
-            "id": "pyup.io-46158",
-            "more_info_path": "/vulnerabilities/CVE-2021-29574/46158",
+            "cve": "CVE-2021-29536",
+            "id": "pyup.io-46120",
+            "more_info_path": "/vulnerabilities/CVE-2021-29536/46120",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132989,9 +137138,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29519",
-            "id": "pyup.io-46103",
-            "more_info_path": "/vulnerabilities/CVE-2021-29519/46103",
+            "cve": "CVE-2021-29555",
+            "id": "pyup.io-46139",
+            "more_info_path": "/vulnerabilities/CVE-2021-29555/46139",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -132999,9 +137148,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41206",
-            "id": "pyup.io-46216",
-            "more_info_path": "/vulnerabilities/CVE-2021-41206/46216",
+            "cve": "CVE-2021-29560",
+            "id": "pyup.io-46144",
+            "more_info_path": "/vulnerabilities/CVE-2021-29560/46144",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133009,9 +137158,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29583",
-            "id": "pyup.io-46167",
-            "more_info_path": "/vulnerabilities/CVE-2021-29583/46167",
+            "cve": "CVE-2021-29614",
+            "id": "pyup.io-46199",
+            "more_info_path": "/vulnerabilities/CVE-2021-29614/46199",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133019,9 +137168,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29536",
-            "id": "pyup.io-46120",
-            "more_info_path": "/vulnerabilities/CVE-2021-29536/46120",
+            "cve": "CVE-2021-29526",
+            "id": "pyup.io-46110",
+            "more_info_path": "/vulnerabilities/CVE-2021-29526/46110",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133029,9 +137178,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29555",
-            "id": "pyup.io-46139",
-            "more_info_path": "/vulnerabilities/CVE-2021-29555/46139",
+            "cve": "CVE-2021-29608",
+            "id": "pyup.io-46192",
+            "more_info_path": "/vulnerabilities/CVE-2021-29608/46192",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133039,9 +137188,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29560",
-            "id": "pyup.io-46144",
-            "more_info_path": "/vulnerabilities/CVE-2021-29560/46144",
+            "cve": "CVE-2021-29531",
+            "id": "pyup.io-46115",
+            "more_info_path": "/vulnerabilities/CVE-2021-29531/46115",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133049,9 +137198,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29534",
-            "id": "pyup.io-46118",
-            "more_info_path": "/vulnerabilities/CVE-2021-29534/46118",
+            "cve": "CVE-2021-29612",
+            "id": "pyup.io-46197",
+            "more_info_path": "/vulnerabilities/CVE-2021-29612/46197",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133059,9 +137208,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29604",
-            "id": "pyup.io-46188",
-            "more_info_path": "/vulnerabilities/CVE-2021-29604/46188",
+            "cve": "CVE-2021-29617",
+            "id": "pyup.io-46202",
+            "more_info_path": "/vulnerabilities/CVE-2021-29617/46202",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133069,9 +137218,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29557",
-            "id": "pyup.io-46141",
-            "more_info_path": "/vulnerabilities/CVE-2021-29557/46141",
+            "cve": "CVE-2021-29545",
+            "id": "pyup.io-46129",
+            "more_info_path": "/vulnerabilities/CVE-2021-29545/46129",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133079,9 +137228,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29614",
-            "id": "pyup.io-46199",
-            "more_info_path": "/vulnerabilities/CVE-2021-29614/46199",
+            "cve": "CVE-2021-29618",
+            "id": "pyup.io-46203",
+            "more_info_path": "/vulnerabilities/CVE-2021-29618/46203",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133089,9 +137238,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29526",
-            "id": "pyup.io-46110",
-            "more_info_path": "/vulnerabilities/CVE-2021-29526/46110",
+            "cve": "CVE-2020-8285",
+            "id": "pyup.io-46089",
+            "more_info_path": "/vulnerabilities/CVE-2020-8285/46089",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133099,9 +137248,149 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29518",
-            "id": "pyup.io-46102",
-            "more_info_path": "/vulnerabilities/CVE-2021-29518/46102",
+            "cve": "CVE-2021-29578",
+            "id": "pyup.io-46162",
+            "more_info_path": "/vulnerabilities/CVE-2021-29578/46162",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29525",
+            "id": "pyup.io-46109",
+            "more_info_path": "/vulnerabilities/CVE-2021-29525/46109",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-41200",
+            "id": "pyup.io-46210",
+            "more_info_path": "/vulnerabilities/CVE-2021-41200/46210",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-41199",
+            "id": "pyup.io-46209",
+            "more_info_path": "/vulnerabilities/CVE-2021-41199/46209",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29550",
+            "id": "pyup.io-46134",
+            "more_info_path": "/vulnerabilities/CVE-2021-29550/46134",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29568",
+            "id": "pyup.io-46152",
+            "more_info_path": "/vulnerabilities/CVE-2021-29568/46152",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29586",
+            "id": "pyup.io-46170",
+            "more_info_path": "/vulnerabilities/CVE-2021-29586/46170",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29561",
+            "id": "pyup.io-46145",
+            "more_info_path": "/vulnerabilities/CVE-2021-29561/46145",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29572",
+            "id": "pyup.io-46156",
+            "more_info_path": "/vulnerabilities/CVE-2021-29572/46156",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-22924",
+            "id": "pyup.io-46093",
+            "more_info_path": "/vulnerabilities/CVE-2021-22924/46093",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-41206",
+            "id": "pyup.io-46216",
+            "more_info_path": "/vulnerabilities/CVE-2021-41206/46216",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29583",
+            "id": "pyup.io-46167",
+            "more_info_path": "/vulnerabilities/CVE-2021-29583/46167",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29534",
+            "id": "pyup.io-46118",
+            "more_info_path": "/vulnerabilities/CVE-2021-29534/46118",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29604",
+            "id": "pyup.io-46188",
+            "more_info_path": "/vulnerabilities/CVE-2021-29604/46188",
+            "specs": [
+                "<1.2.0a0"
+            ],
+            "v": "<1.2.0a0"
+        },
+        {
+            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
+            "cve": "CVE-2021-29557",
+            "id": "pyup.io-46141",
+            "more_info_path": "/vulnerabilities/CVE-2021-29557/46141",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133119,9 +137408,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29608",
-            "id": "pyup.io-46192",
-            "more_info_path": "/vulnerabilities/CVE-2021-29608/46192",
+            "cve": "CVE-2021-29518",
+            "id": "pyup.io-46102",
+            "more_info_path": "/vulnerabilities/CVE-2021-29518/46102",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133147,16 +137436,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29531",
-            "id": "pyup.io-46115",
-            "more_info_path": "/vulnerabilities/CVE-2021-29531/46115",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2021-29589",
@@ -133277,16 +137556,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29612",
-            "id": "pyup.io-46197",
-            "more_info_path": "/vulnerabilities/CVE-2021-29612/46197",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2021-29542",
@@ -133317,16 +137586,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29617",
-            "id": "pyup.io-46202",
-            "more_info_path": "/vulnerabilities/CVE-2021-29617/46202",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2020-26268",
@@ -133377,16 +137636,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29545",
-            "id": "pyup.io-46129",
-            "more_info_path": "/vulnerabilities/CVE-2021-29545/46129",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2021-41203",
@@ -133397,16 +137646,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29618",
-            "id": "pyup.io-46203",
-            "more_info_path": "/vulnerabilities/CVE-2021-29618/46203",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2021-29556",
@@ -133417,46 +137656,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-8284",
-            "id": "pyup.io-46088",
-            "more_info_path": "/vulnerabilities/CVE-2020-8284/46088",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-8285",
-            "id": "pyup.io-46089",
-            "more_info_path": "/vulnerabilities/CVE-2020-8285/46089",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29578",
-            "id": "pyup.io-46162",
-            "more_info_path": "/vulnerabilities/CVE-2021-29578/46162",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29525",
-            "id": "pyup.io-46109",
-            "more_info_path": "/vulnerabilities/CVE-2021-29525/46109",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2021-29594",
@@ -133487,16 +137686,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41200",
-            "id": "pyup.io-46210",
-            "more_info_path": "/vulnerabilities/CVE-2021-41200/46210",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2021-29563",
@@ -133507,16 +137696,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-41199",
-            "id": "pyup.io-46209",
-            "more_info_path": "/vulnerabilities/CVE-2021-41199/46209",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2021-29515",
@@ -133557,16 +137736,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29550",
-            "id": "pyup.io-46134",
-            "more_info_path": "/vulnerabilities/CVE-2021-29550/46134",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2021-29571",
@@ -133577,16 +137746,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29568",
-            "id": "pyup.io-46152",
-            "more_info_path": "/vulnerabilities/CVE-2021-29568/46152",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
             "cve": "CVE-2021-29544",
@@ -133599,29 +137758,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29586",
-            "id": "pyup.io-46170",
-            "more_info_path": "/vulnerabilities/CVE-2021-29586/46170",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29561",
-            "id": "pyup.io-46145",
-            "more_info_path": "/vulnerabilities/CVE-2021-29561/46145",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-29572",
-            "id": "pyup.io-46156",
-            "more_info_path": "/vulnerabilities/CVE-2021-29572/46156",
+            "cve": "CVE-2020-8231",
+            "id": "pyup.io-46087",
+            "more_info_path": "/vulnerabilities/CVE-2020-8231/46087",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133629,9 +137768,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-8231",
-            "id": "pyup.io-46087",
-            "more_info_path": "/vulnerabilities/CVE-2020-8231/46087",
+            "cve": "CVE-2020-15250",
+            "id": "pyup.io-46077",
+            "more_info_path": "/vulnerabilities/CVE-2020-15250/46077",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133639,9 +137778,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2020-15250",
-            "id": "pyup.io-46077",
-            "more_info_path": "/vulnerabilities/CVE-2020-15250/46077",
+            "cve": "CVE-2020-8284",
+            "id": "pyup.io-46088",
+            "more_info_path": "/vulnerabilities/CVE-2020-8284/46088",
             "specs": [
                 "<1.2.0a0"
             ],
@@ -133687,16 +137826,6 @@
             ],
             "v": "<1.2.0a0"
         },
-        {
-            "advisory": "Sleap 1.2.0a0 updates its dependency 'TensorFlow' to v2.7.0 to include security fixes.",
-            "cve": "CVE-2021-22924",
-            "id": "pyup.io-46093",
-            "more_info_path": "/vulnerabilities/CVE-2021-22924/46093",
-            "specs": [
-                "<1.2.0a0"
-            ],
-            "v": "<1.2.0a0"
-        },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
             "cve": "CVE-2022-21733",
@@ -133739,9 +137868,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23594",
-            "id": "pyup.io-46555",
-            "more_info_path": "/vulnerabilities/CVE-2022-23594/46555",
+            "cve": "CVE-2022-23571",
+            "id": "pyup.io-46534",
+            "more_info_path": "/vulnerabilities/CVE-2022-23571/46534",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133749,9 +137878,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23589",
-            "id": "pyup.io-46552",
-            "more_info_path": "/vulnerabilities/CVE-2022-23589/46552",
+            "cve": "CVE-2022-23565",
+            "id": "pyup.io-46528",
+            "more_info_path": "/vulnerabilities/CVE-2022-23565/46528",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133759,9 +137888,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23582",
-            "id": "pyup.io-46545",
-            "more_info_path": "/vulnerabilities/CVE-2022-23582/46545",
+            "cve": "CVE-2022-23587",
+            "id": "pyup.io-46550",
+            "more_info_path": "/vulnerabilities/CVE-2022-23587/46550",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133769,9 +137898,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23566",
-            "id": "pyup.io-46529",
-            "more_info_path": "/vulnerabilities/CVE-2022-23566/46529",
+            "cve": "CVE-2022-21737",
+            "id": "pyup.io-46515",
+            "more_info_path": "/vulnerabilities/CVE-2022-21737/46515",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133779,9 +137908,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23571",
-            "id": "pyup.io-46534",
-            "more_info_path": "/vulnerabilities/CVE-2022-23571/46534",
+            "cve": "CVE-2022-23573",
+            "id": "pyup.io-46536",
+            "more_info_path": "/vulnerabilities/CVE-2022-23573/46536",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133789,9 +137918,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23565",
-            "id": "pyup.io-46528",
-            "more_info_path": "/vulnerabilities/CVE-2022-23565/46528",
+            "cve": "CVE-2022-21739",
+            "id": "pyup.io-46517",
+            "more_info_path": "/vulnerabilities/CVE-2022-21739/46517",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133799,9 +137928,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23587",
-            "id": "pyup.io-46550",
-            "more_info_path": "/vulnerabilities/CVE-2022-23587/46550",
+            "cve": "CVE-2022-21727",
+            "id": "pyup.io-46505",
+            "more_info_path": "/vulnerabilities/CVE-2022-21727/46505",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133809,9 +137938,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23564",
-            "id": "pyup.io-46527",
-            "more_info_path": "/vulnerabilities/CVE-2022-23564/46527",
+            "cve": "CVE-2022-21725",
+            "id": "pyup.io-46503",
+            "more_info_path": "/vulnerabilities/CVE-2022-21725/46503",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133819,9 +137948,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21737",
-            "id": "pyup.io-46515",
-            "more_info_path": "/vulnerabilities/CVE-2022-21737/46515",
+            "cve": "CVE-2022-23585",
+            "id": "pyup.io-46548",
+            "more_info_path": "/vulnerabilities/CVE-2022-23585/46548",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133829,9 +137958,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23575",
-            "id": "pyup.io-46538",
-            "more_info_path": "/vulnerabilities/CVE-2022-23575/46538",
+            "cve": "CVE-2022-21728",
+            "id": "pyup.io-46506",
+            "more_info_path": "/vulnerabilities/CVE-2022-21728/46506",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133839,9 +137968,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23573",
-            "id": "pyup.io-46536",
-            "more_info_path": "/vulnerabilities/CVE-2022-23573/46536",
+            "cve": "CVE-2022-23574",
+            "id": "pyup.io-46537",
+            "more_info_path": "/vulnerabilities/CVE-2022-23574/46537",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133849,9 +137978,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21739",
-            "id": "pyup.io-46517",
-            "more_info_path": "/vulnerabilities/CVE-2022-21739/46517",
+            "cve": "CVE-2022-21726",
+            "id": "pyup.io-46504",
+            "more_info_path": "/vulnerabilities/CVE-2022-21726/46504",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133859,9 +137988,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21727",
-            "id": "pyup.io-46505",
-            "more_info_path": "/vulnerabilities/CVE-2022-21727/46505",
+            "cve": "CVE-2022-23590",
+            "id": "pyup.io-46553",
+            "more_info_path": "/vulnerabilities/CVE-2022-23590/46553",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133869,9 +137998,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21735",
-            "id": "pyup.io-46513",
-            "more_info_path": "/vulnerabilities/CVE-2022-21735/46513",
+            "cve": "CVE-2022-21734",
+            "id": "pyup.io-46512",
+            "more_info_path": "/vulnerabilities/CVE-2022-21734/46512",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133879,9 +138008,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21725",
-            "id": "pyup.io-46503",
-            "more_info_path": "/vulnerabilities/CVE-2022-21725/46503",
+            "cve": "CVE-2022-21740",
+            "id": "pyup.io-46518",
+            "more_info_path": "/vulnerabilities/CVE-2022-21740/46518",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133889,9 +138018,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21728",
-            "id": "pyup.io-46506",
-            "more_info_path": "/vulnerabilities/CVE-2022-21728/46506",
+            "cve": "CVE-2022-23576",
+            "id": "pyup.io-46539",
+            "more_info_path": "/vulnerabilities/CVE-2022-23576/46539",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133899,9 +138028,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23585",
-            "id": "pyup.io-46548",
-            "more_info_path": "/vulnerabilities/CVE-2022-23585/46548",
+            "cve": "CVE-2022-21741",
+            "id": "pyup.io-46519",
+            "more_info_path": "/vulnerabilities/CVE-2022-21741/46519",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133909,9 +138038,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21738",
-            "id": "pyup.io-46516",
-            "more_info_path": "/vulnerabilities/CVE-2022-21738/46516",
+            "cve": "CVE-2022-23594",
+            "id": "pyup.io-46555",
+            "more_info_path": "/vulnerabilities/CVE-2022-23594/46555",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133919,9 +138048,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23574",
-            "id": "pyup.io-46537",
-            "more_info_path": "/vulnerabilities/CVE-2022-23574/46537",
+            "cve": "CVE-2022-23589",
+            "id": "pyup.io-46552",
+            "more_info_path": "/vulnerabilities/CVE-2022-23589/46552",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133929,9 +138058,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21726",
-            "id": "pyup.io-46504",
-            "more_info_path": "/vulnerabilities/CVE-2022-21726/46504",
+            "cve": "CVE-2022-23582",
+            "id": "pyup.io-46545",
+            "more_info_path": "/vulnerabilities/CVE-2022-23582/46545",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133939,9 +138068,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21734",
-            "id": "pyup.io-46512",
-            "more_info_path": "/vulnerabilities/CVE-2022-21734/46512",
+            "cve": "CVE-2022-23566",
+            "id": "pyup.io-46529",
+            "more_info_path": "/vulnerabilities/CVE-2022-23566/46529",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133949,9 +138078,39 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23590",
-            "id": "pyup.io-46553",
-            "more_info_path": "/vulnerabilities/CVE-2022-23590/46553",
+            "cve": "CVE-2022-23564",
+            "id": "pyup.io-46527",
+            "more_info_path": "/vulnerabilities/CVE-2022-23564/46527",
+            "specs": [
+                "<1.2.0a6"
+            ],
+            "v": "<1.2.0a6"
+        },
+        {
+            "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
+            "cve": "CVE-2022-23575",
+            "id": "pyup.io-46538",
+            "more_info_path": "/vulnerabilities/CVE-2022-23575/46538",
+            "specs": [
+                "<1.2.0a6"
+            ],
+            "v": "<1.2.0a6"
+        },
+        {
+            "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
+            "cve": "CVE-2022-21735",
+            "id": "pyup.io-46513",
+            "more_info_path": "/vulnerabilities/CVE-2022-21735/46513",
+            "specs": [
+                "<1.2.0a6"
+            ],
+            "v": "<1.2.0a6"
+        },
+        {
+            "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
+            "cve": "CVE-2022-21738",
+            "id": "pyup.io-46516",
+            "more_info_path": "/vulnerabilities/CVE-2022-21738/46516",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133969,9 +138128,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21741",
-            "id": "pyup.io-46519",
-            "more_info_path": "/vulnerabilities/CVE-2022-21741/46519",
+            "cve": "CVE-2022-23581",
+            "id": "pyup.io-46544",
+            "more_info_path": "/vulnerabilities/CVE-2022-23581/46544",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133979,9 +138138,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21740",
-            "id": "pyup.io-46518",
-            "more_info_path": "/vulnerabilities/CVE-2022-21740/46518",
+            "cve": "CVE-2022-23591",
+            "id": "pyup.io-46554",
+            "more_info_path": "/vulnerabilities/CVE-2022-23591/46554",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -133989,9 +138148,29 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23576",
-            "id": "pyup.io-46539",
-            "more_info_path": "/vulnerabilities/CVE-2022-23576/46539",
+            "cve": "CVE-2022-21731",
+            "id": "pyup.io-46509",
+            "more_info_path": "/vulnerabilities/CVE-2022-21731/46509",
+            "specs": [
+                "<1.2.0a6"
+            ],
+            "v": "<1.2.0a6"
+        },
+        {
+            "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
+            "cve": "CVE-2022-23578",
+            "id": "pyup.io-46541",
+            "more_info_path": "/vulnerabilities/CVE-2022-23578/46541",
+            "specs": [
+                "<1.2.0a6"
+            ],
+            "v": "<1.2.0a6"
+        },
+        {
+            "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
+            "cve": "CVE-2022-23595",
+            "id": "pyup.io-46556",
+            "more_info_path": "/vulnerabilities/CVE-2022-23595/46556",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -134027,16 +138206,6 @@
             ],
             "v": "<1.2.0a6"
         },
-        {
-            "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23581",
-            "id": "pyup.io-46544",
-            "more_info_path": "/vulnerabilities/CVE-2022-23581/46544",
-            "specs": [
-                "<1.2.0a6"
-            ],
-            "v": "<1.2.0a6"
-        },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
             "cve": "CVE-2022-23586",
@@ -134087,16 +138256,6 @@
             ],
             "v": "<1.2.0a6"
         },
-        {
-            "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23591",
-            "id": "pyup.io-46554",
-            "more_info_path": "/vulnerabilities/CVE-2022-23591/46554",
-            "specs": [
-                "<1.2.0a6"
-            ],
-            "v": "<1.2.0a6"
-        },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
             "cve": "CVE-2022-23569",
@@ -134127,26 +138286,6 @@
             ],
             "v": "<1.2.0a6"
         },
-        {
-            "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-21731",
-            "id": "pyup.io-46509",
-            "more_info_path": "/vulnerabilities/CVE-2022-21731/46509",
-            "specs": [
-                "<1.2.0a6"
-            ],
-            "v": "<1.2.0a6"
-        },
-        {
-            "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23578",
-            "id": "pyup.io-46541",
-            "more_info_path": "/vulnerabilities/CVE-2022-23578/46541",
-            "specs": [
-                "<1.2.0a6"
-            ],
-            "v": "<1.2.0a6"
-        },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
             "cve": "CVE-2022-23557",
@@ -134157,16 +138296,6 @@
             ],
             "v": "<1.2.0a6"
         },
-        {
-            "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23579",
-            "id": "pyup.io-46542",
-            "more_info_path": "/vulnerabilities/CVE-2022-23579/46542",
-            "specs": [
-                "<1.2.0a6"
-            ],
-            "v": "<1.2.0a6"
-        },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
             "cve": "CVE-2022-23583",
@@ -134179,9 +138308,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23568",
-            "id": "pyup.io-46531",
-            "more_info_path": "/vulnerabilities/CVE-2022-23568/46531",
+            "cve": "CVE-2022-23579",
+            "id": "pyup.io-46542",
+            "more_info_path": "/vulnerabilities/CVE-2022-23579/46542",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -134189,9 +138318,9 @@
         },
         {
             "advisory": "Sleap 1.2.0a6 requires Tensorflow v2.6.3 to include security fixes.",
-            "cve": "CVE-2022-23595",
-            "id": "pyup.io-46556",
-            "more_info_path": "/vulnerabilities/CVE-2022-23595/46556",
+            "cve": "CVE-2022-23568",
+            "id": "pyup.io-46531",
+            "more_info_path": "/vulnerabilities/CVE-2022-23568/46531",
             "specs": [
                 "<1.2.0a6"
             ],
@@ -134808,6 +138937,86 @@
                 "<0.4.2"
             ],
             "v": "<0.4.2"
+        },
+        {
+            "advisory": "Snyk-tags version 2.2.4 updates its dependency on the cryptography library to version 42.0.4. This change is made to address the security issue identified as CVE-2023-5678.",
+            "cve": "CVE-2023-5678",
+            "id": "pyup.io-67575",
+            "more_info_path": "/vulnerabilities/CVE-2023-5678/67575",
+            "specs": [
+                "<2.2.4"
+            ],
+            "v": "<2.2.4"
+        },
+        {
+            "advisory": "Snyk-tags version 2.2.4 updates its dependency on the cryptography library to version 42.0.4. This change is made to address the security issue identified as CVE-2023-5363.",
+            "cve": "CVE-2023-5363",
+            "id": "pyup.io-67567",
+            "more_info_path": "/vulnerabilities/CVE-2023-5363/67567",
+            "specs": [
+                "<2.2.4"
+            ],
+            "v": "<2.2.4"
+        },
+        {
+            "advisory": "Snyk-tags version 2.2.4 updates its dependency on the cryptography library to version 42.0.4. This change is made to address the security issue identified as CVE-2024-26130.",
+            "cve": "CVE-2024-26130",
+            "id": "pyup.io-67579",
+            "more_info_path": "/vulnerabilities/CVE-2024-26130/67579",
+            "specs": [
+                "<2.2.4"
+            ],
+            "v": "<2.2.4"
+        },
+        {
+            "advisory": "Snyk-tags version 2.2.4 updates its dependency on the cryptography library to version 42.0.4. This change is made to address the security issue identified as CVE-2024-0727.",
+            "cve": "CVE-2024-0727",
+            "id": "pyup.io-67576",
+            "more_info_path": "/vulnerabilities/CVE-2024-0727/67576",
+            "specs": [
+                "<2.2.4"
+            ],
+            "v": "<2.2.4"
+        },
+        {
+            "advisory": "Snyk-tags version 2.2.4 updates its dependency on the cryptography library to version 42.0.4. This change is made to address the security issue identified as CVE-2023-50782.",
+            "cve": "CVE-2023-50782",
+            "id": "pyup.io-67580",
+            "more_info_path": "/vulnerabilities/CVE-2023-50782/67580",
+            "specs": [
+                "<2.2.4"
+            ],
+            "v": "<2.2.4"
+        },
+        {
+            "advisory": "Snyk-tags version 2.2.4 updates its dependency on the cryptography library to version 42.0.4. This change is made to address the security issue identified asCVE-2023-49083.",
+            "cve": "CVE-2023-49083",
+            "id": "pyup.io-67581",
+            "more_info_path": "/vulnerabilities/CVE-2023-49083/67581",
+            "specs": [
+                "<2.2.4"
+            ],
+            "v": "<2.2.4"
+        },
+        {
+            "advisory": "Snyk-tags version 2.2.4 updates its dependency on the cryptography library to version 42.0.4. This change is made to address the security issue identified as CVE-2023-6237.",
+            "cve": "CVE-2023-6237",
+            "id": "pyup.io-67577",
+            "more_info_path": "/vulnerabilities/CVE-2023-6237/67577",
+            "specs": [
+                "<2.2.4"
+            ],
+            "v": "<2.2.4"
+        },
+        {
+            "advisory": "Snyk-tags version 2.2.4 updates its dependency on the cryptography library to version 42.0.4. This change is made to address the security issue identified as CVE-2023-6129.",
+            "cve": "CVE-2023-6129",
+            "id": "pyup.io-67578",
+            "more_info_path": "/vulnerabilities/CVE-2023-6129/67578",
+            "specs": [
+                "<2.2.4"
+            ],
+            "v": "<2.2.4"
         }
     ],
     "soapfish": [
@@ -135094,6 +139303,16 @@
         }
     ],
     "spark-on-k8s": [
+        {
+            "advisory": "Version 0.2.0 of Spark-on-k8s updates its `aiohttp` dependency to require version 3.9.2 or newer. This change aims to protect against the potential security risks outlined in CVE-2024-23829.",
+            "cve": "CVE-2024-23829",
+            "id": "pyup.io-65465",
+            "more_info_path": "/vulnerabilities/CVE-2024-23829/65465",
+            "specs": [
+                "<0.2.0"
+            ],
+            "v": "<0.2.0"
+        },
         {
             "advisory": "Spark-on-k8s version 0.2.0 updates its dependencies on `FastAPI` to version ^0.109.1. This upgrade addresses security concerns detailed in CVE-2024-24762.",
             "cve": "CVE-2024-24762",
@@ -135114,16 +139333,6 @@
             ],
             "v": "<0.2.0"
         },
-        {
-            "advisory": "Version 0.2.0 of Spark-on-k8s updates its `aiohttp` dependency to require version 3.9.2 or newer. This change aims to protect against the potential security risks outlined in CVE-2024-23829.",
-            "cve": "CVE-2024-23829",
-            "id": "pyup.io-65465",
-            "more_info_path": "/vulnerabilities/CVE-2024-23829/65465",
-            "specs": [
-                "<0.2.0"
-            ],
-            "v": "<0.2.0"
-        },
         {
             "advisory": "Spark-on-k8s version 0.2.1 updates its cryptography dependency to 42.0.4 from 42.0.2, addressing the security vulnerability CVE-2024-26130.\r\nhttps://github.com/hussein-awala/spark-on-k8s/pull/2/commits/346c64cfb775d0ca9970239bc3114d4bc555aa47",
             "cve": "CVE-2024-26130",
@@ -135153,6 +139362,26 @@
                 "<0.4.0"
             ],
             "v": "<0.4.0"
+        },
+        {
+            "advisory": "Spark-on-k8s version 0.5.0 has updated its idna dependency from version 3.6 to 3.7 to address the security vulnerability detailed in CVE-2024-3651.",
+            "cve": "CVE-2024-3651",
+            "id": "pyup.io-70493",
+            "more_info_path": "/vulnerabilities/CVE-2024-3651/70493",
+            "specs": [
+                "<0.5.0"
+            ],
+            "v": "<0.5.0"
+        },
+        {
+            "advisory": "Spark-on-k8s version 0.5.0 includes a security update to address CVE-2024-29735 by upgrading the Apache Airflow dependency to a more secure version.",
+            "cve": "CVE-2024-29735",
+            "id": "pyup.io-70484",
+            "more_info_path": "/vulnerabilities/CVE-2024-29735/70484",
+            "specs": [
+                "<0.5.0"
+            ],
+            "v": "<0.5.0"
         }
     ],
     "sparkpipelineframework": [
@@ -135594,9 +139823,9 @@
     "sphinx": [
         {
             "advisory": "Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.",
-            "cve": "CVE-2020-11023",
-            "id": "pyup.io-45775",
-            "more_info_path": "/vulnerabilities/CVE-2020-11023/45775",
+            "cve": "CVE-2020-11022",
+            "id": "pyup.io-38330",
+            "more_info_path": "/vulnerabilities/CVE-2020-11022/38330",
             "specs": [
                 "<3.0.4"
             ],
@@ -135604,9 +139833,9 @@
         },
         {
             "advisory": "Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.",
-            "cve": "CVE-2020-11022",
-            "id": "pyup.io-38330",
-            "more_info_path": "/vulnerabilities/CVE-2020-11022/38330",
+            "cve": "CVE-2020-11023",
+            "id": "pyup.io-45775",
+            "more_info_path": "/vulnerabilities/CVE-2020-11023/45775",
             "specs": [
                 "<3.0.4"
             ],
@@ -135836,9 +140065,9 @@
     "splitio-client": [
         {
             "advisory": "Splitio-client 9.1.2 updates its dependency 'pyyaml' minimum requirement to v5.4 to include security fixes.",
-            "cve": "CVE-2019-20477",
-            "id": "pyup.io-48016",
-            "more_info_path": "/vulnerabilities/CVE-2019-20477/48016",
+            "cve": "CVE-2020-1747",
+            "id": "pyup.io-48015",
+            "more_info_path": "/vulnerabilities/CVE-2020-1747/48015",
             "specs": [
                 "<9.1.2"
             ],
@@ -135846,9 +140075,9 @@
         },
         {
             "advisory": "Splitio-client 9.1.2 updates its dependency 'pyyaml' minimum requirement to v5.4 to include security fixes.",
-            "cve": "CVE-2020-1747",
-            "id": "pyup.io-48015",
-            "more_info_path": "/vulnerabilities/CVE-2020-1747/48015",
+            "cve": "CVE-2019-20477",
+            "id": "pyup.io-48016",
+            "more_info_path": "/vulnerabilities/CVE-2019-20477/48016",
             "specs": [
                 "<9.1.2"
             ],
@@ -136078,16 +140307,6 @@
                 ">=1.3.0b1,<=1.3.0b2"
             ],
             "v": "<=1.2.17,>=1.3.0b1,<=1.3.0b2"
-        },
-        {
-            "advisory": "SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.\r\nhttps://github.com/sqlalchemy/sqlalchemy/issues/4481#issuecomment-461204518",
-            "cve": "CVE-2019-7548",
-            "id": "pyup.io-38496",
-            "more_info_path": "/vulnerabilities/CVE-2019-7548/38496",
-            "specs": [
-                "==1.2.17"
-            ],
-            "v": "==1.2.17"
         }
     ],
     "sqlalchemy-cockroachdb": [
@@ -136207,6 +140426,16 @@
         }
     ],
     "sqlparse": [
+        {
+            "advisory": "Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.",
+            "cve": "PVE-2024-67887",
+            "id": "pyup.io-67887",
+            "more_info_path": "/vulnerabilities/PVE-2024-67887/67887",
+            "specs": [
+                "<0.5.0"
+            ],
+            "v": "<0.5.0"
+        },
         {
             "advisory": "Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service).\r\nhttps://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2",
             "cve": "CVE-2023-30608",
@@ -136284,6 +140513,16 @@
                 "<2.2.0"
             ],
             "v": "<2.2.0"
+        },
+        {
+            "advisory": "Ssh-audit version 3.2.0 now includes an option to simulate the DHEat denial-of-service attack. This feature, accessible via the `--dheat` command, addresses vulnerabilities detailed in CVE-2002-20001.",
+            "cve": "CVE-2002-20001",
+            "id": "pyup.io-68096",
+            "more_info_path": "/vulnerabilities/CVE-2002-20001/68096",
+            "specs": [
+                "<3.2.0"
+            ],
+            "v": "<3.2.0"
         }
     ],
     "ssh-decorate": [
@@ -136415,6 +140654,16 @@
             ],
             "v": "<0.25.0"
         },
+        {
+            "advisory": "When using form data, `python-multipart` employs a Regular Expression to parse the HTTP `Content-Type` header. This creates a vulnerability where an attacker can send a specially crafted `Content-Type` option, causing significant CPU resource consumption and indefinitely stalling the server by locking the main event loop, rendering the server unable to process further requests. This issue particularly affects FastAPI servers parsing form data, leading to a Denial of Service (DoS) condition when the number of malicious requests exceeds the number of available server workers. However, this vulnerability does not impact the processing of JSON data through the `/submit_json` endpoint. It is specific to a defined set of versions of FastAPI and `python-multipart` when handling form data.",
+            "cve": "PVE-2024-68094",
+            "id": "pyup.io-68094",
+            "more_info_path": "/vulnerabilities/PVE-2024-68094/68094",
+            "specs": [
+                "<=0.36.1"
+            ],
+            "v": "<=0.36.1"
+        },
         {
             "advisory": "Starlette 0.27.0 fixes a vulnerability: Path traversal vulnerability in StaticFiles.\r\nhttps://github.com/encode/starlette/security/advisories/GHSA-v5gw-mw7f-84px",
             "cve": "CVE-2023-29159",
@@ -136574,7 +140823,7 @@
     ],
     "stomp-py": [
         {
-            "advisory": "Stomp.py 4.1.22 reduces verbosity in logging to not include headers unless debug level is turned on. This was a potential security issue as per: <https://github.com/jasonrbriggs/stomp.py/issues/226>.",
+            "advisory": "Stomp.py 4.1.22 reduces verbosity in logging to not include headers unless debug level is turned on. This is a potential Information Disclosure vulnerability.",
             "cve": "PVE-2021-37046",
             "id": "pyup.io-37046",
             "more_info_path": "/vulnerabilities/PVE-2021-37046/37046",
@@ -136582,6 +140831,26 @@
                 "<4.1.22"
             ],
             "v": "<4.1.22"
+        },
+        {
+            "advisory": "Stomp-py version 8.1.1 updates its Dockerfile to use Debian 11, addressing the security issues highlighted in CVE-2023-29491.",
+            "cve": "CVE-2023-29491",
+            "id": "pyup.io-67884",
+            "more_info_path": "/vulnerabilities/CVE-2023-29491/67884",
+            "specs": [
+                "<8.1.1"
+            ],
+            "v": "<8.1.1"
+        },
+        {
+            "advisory": "Stomp-py version 8.1.1 updates its Dockerfile to use Debian 11, addressing the security issues highlighted in CVE-2022-29458.",
+            "cve": "CVE-2022-29458",
+            "id": "pyup.io-67894",
+            "more_info_path": "/vulnerabilities/CVE-2022-29458/67894",
+            "specs": [
+                "<8.1.1"
+            ],
+            "v": "<8.1.1"
         }
     ],
     "storey": [
@@ -137029,6 +141298,18 @@
             "v": "<0.7.1"
         }
     ],
+    "super-gradients": [
+        {
+            "advisory": "Super-gradients 3.6.1 updates its ONNX dependency to version 1.16 to address a directory traversal vulnerability found in versions up to 1.15.0. This vulnerability allowed unauthorized access to files outside the intended directories due to an exploitable external_data field in tensor proto, circumventing previous fixes made for CVE-2022-25882.",
+            "cve": "CVE-2022-25882",
+            "id": "pyup.io-67144",
+            "more_info_path": "/vulnerabilities/CVE-2022-25882/67144",
+            "specs": [
+                "<3.6.1"
+            ],
+            "v": "<3.6.1"
+        }
+    ],
     "superdesk-planning": [
         {
             "advisory": "Superdesk-planning 2.0.2 includes a security patch which requires authentication for all API endpoints.",
@@ -137316,6 +141597,16 @@
         }
     ],
     "supervisor": [
+        {
+            "advisory": "A vulnerability in Supervisor up to version 4.0.2 allows an unauthenticated user to read log files or restart a service when the inet_http_server component is enabled without a password. While this component is not activated by default, failure to secure it with a password, despite logged warnings and documentation advisories, exposes the system to unauthorized access.",
+            "cve": "CVE-2019-12105",
+            "id": "pyup.io-70372",
+            "more_info_path": "/vulnerabilities/CVE-2019-12105/70372",
+            "specs": [
+                ">=0,<4.0.3"
+            ],
+            "v": ">=0,<4.0.3"
+        },
         {
             "advisory": "Supervisor versions 3.0.1, 3.1.4, 3.2.4 and 3.3.3 include a fix for CVE-2017-11610: The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.",
             "cve": "CVE-2017-11610",
@@ -137658,6 +141949,16 @@
                 "<1.3.1"
             ],
             "v": "<1.3.1"
+        },
+        {
+            "advisory": "Sw360 version 1.5.0 has updated its dependency on the idna library to version 3.7 in order to address the security vulnerabilities detailed in CVE-2024-3651.",
+            "cve": "CVE-2024-3651",
+            "id": "pyup.io-68051",
+            "more_info_path": "/vulnerabilities/CVE-2024-3651/68051",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
         }
     ],
     "swauth": [
@@ -137680,6 +141981,16 @@
                 "<1.3.0"
             ],
             "v": "<1.3.0"
+        },
+        {
+            "advisory": "Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header.",
+            "cve": "CVE-2015-8466",
+            "id": "pyup.io-70416",
+            "more_info_path": "/vulnerabilities/CVE-2015-8466/70416",
+            "specs": [
+                "<1.9"
+            ],
+            "v": "<1.9"
         }
     ],
     "swift": [
@@ -137693,6 +142004,26 @@
             ],
             "v": "<1.7.0"
         },
+        {
+            "advisory": "OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service (\"superfluous\" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.",
+            "cve": "CVE-2013-4155",
+            "id": "pyup.io-67987",
+            "more_info_path": "/vulnerabilities/CVE-2013-4155/67987",
+            "specs": [
+                "<1.9.1"
+            ],
+            "v": "<1.9.1"
+        },
+        {
+            "advisory": "OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.",
+            "cve": "CVE-2014-7960",
+            "id": "pyup.io-70435",
+            "more_info_path": "/vulnerabilities/CVE-2014-7960/70435",
+            "specs": [
+                "<2.2.0"
+            ],
+            "v": "<2.2.0"
+        },
         {
             "advisory": "Swift 2.28.1 and 2.29.2 include a fix for CVE-2022-47950: An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2 and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).\r\nhttps://security.openstack.org/ossa/OSSA-2023-001.html",
             "cve": "CVE-2022-47950",
@@ -137705,6 +142036,16 @@
             ],
             "v": "<2.28.1,>=2.29.0,<2.29.2,==2.30.0"
         },
+        {
+            "advisory": "OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.",
+            "cve": "CVE-2015-1856",
+            "id": "pyup.io-70434",
+            "more_info_path": "/vulnerabilities/CVE-2015-1856/70434",
+            "specs": [
+                "<2.3.0rc1"
+            ],
+            "v": "<2.3.0rc1"
+        },
         {
             "advisory": "OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.",
             "cve": "CVE-2016-0737",
@@ -137715,6 +142056,16 @@
             ],
             "v": "<2.4.0"
         },
+        {
+            "advisory": "OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container.",
+            "cve": "CVE-2015-5223",
+            "id": "pyup.io-70415",
+            "more_info_path": "/vulnerabilities/CVE-2015-5223/70415",
+            "specs": [
+                "<2.4.0"
+            ],
+            "v": "<2.4.0"
+        },
         {
             "advisory": "Swift before 2.6.0 is vulnerable to an attack where an unfinished read of a large object would leak a socket file descriptor and a small amount of memory: CVE-2016-0738.",
             "cve": "CVE-2016-0738",
@@ -137856,30 +142207,30 @@
             "v": "<0.8.2b40"
         },
         {
-            "advisory": "Syft 0.8.4b4 updates its dependency 'pygments' to 2.15.0 to include a security fix on the CVE-2021-27291.\r\nhttps://github.com/OpenMined/PySyft/pull/8356",
-            "cve": "CVE-2021-27291",
-            "id": "pyup.io-63097",
-            "more_info_path": "/vulnerabilities/CVE-2021-27291/63097",
+            "advisory": "Syft 0.8.4b4 updates its dependency 'pygments' to 2.15.0 to include a security fix on the CVE-2022-40896.\r\nhttps://github.com/OpenMined/PySyft/pull/8356",
+            "cve": "CVE-2022-40896",
+            "id": "pyup.io-63099",
+            "more_info_path": "/vulnerabilities/CVE-2022-40896/63099",
             "specs": [
                 "<0.8.4b4"
             ],
             "v": "<0.8.4b4"
         },
         {
-            "advisory": "Syft 0.8.4b4 updates its dependency 'pygments' to 2.15.0 to include a security fix on the CVE-2021-20270.\r\nhttps://github.com/OpenMined/PySyft/pull/8356",
-            "cve": "CVE-2021-20270",
-            "id": "pyup.io-63098",
-            "more_info_path": "/vulnerabilities/CVE-2021-20270/63098",
+            "advisory": "Syft 0.8.4b4 updates its dependency 'pygments' to 2.15.0 to include a security fix on the CVE-2021-27291.\r\nhttps://github.com/OpenMined/PySyft/pull/8356",
+            "cve": "CVE-2021-27291",
+            "id": "pyup.io-63097",
+            "more_info_path": "/vulnerabilities/CVE-2021-27291/63097",
             "specs": [
                 "<0.8.4b4"
             ],
             "v": "<0.8.4b4"
         },
         {
-            "advisory": "Syft 0.8.4b4 updates its dependency 'pygments' to 2.15.0 to include a security fix on the CVE-2022-40896.\r\nhttps://github.com/OpenMined/PySyft/pull/8356",
-            "cve": "CVE-2022-40896",
-            "id": "pyup.io-63099",
-            "more_info_path": "/vulnerabilities/CVE-2022-40896/63099",
+            "advisory": "Syft 0.8.4b4 updates its dependency 'certifi' to 2023.7.22 to include a security fix on the CVE-2023-37920.\r\nhttps://github.com/OpenMined/PySyft/pull/8356",
+            "cve": "CVE-2023-37920",
+            "id": "pyup.io-63096",
+            "more_info_path": "/vulnerabilities/CVE-2023-37920/63096",
             "specs": [
                 "<0.8.4b4"
             ],
@@ -137895,6 +142246,16 @@
             ],
             "v": "<0.8.4b4"
         },
+        {
+            "advisory": "Syft 0.8.4b4 updates its dependency 'pygments' to 2.15.0 to include a security fix on the CVE-2021-20270.\r\nhttps://github.com/OpenMined/PySyft/pull/8356",
+            "cve": "CVE-2021-20270",
+            "id": "pyup.io-63098",
+            "more_info_path": "/vulnerabilities/CVE-2021-20270/63098",
+            "specs": [
+                "<0.8.4b4"
+            ],
+            "v": "<0.8.4b4"
+        },
         {
             "advisory": "Syft 0.8.4b4 updates its dependency 'requests' to 2.31.0 to include a security fix on the CVE-2023-32681.\r\nhttps://github.com/OpenMined/PySyft/pull/8356",
             "cve": "CVE-2023-32681",
@@ -137915,16 +142276,6 @@
             ],
             "v": "<0.8.4b4"
         },
-        {
-            "advisory": "Syft 0.8.4b4 updates its dependency 'certifi' to 2023.7.22 to include a security fix on the CVE-2023-37920.\r\nhttps://github.com/OpenMined/PySyft/pull/8356",
-            "cve": "CVE-2023-37920",
-            "id": "pyup.io-63096",
-            "more_info_path": "/vulnerabilities/CVE-2023-37920/63096",
-            "specs": [
-                "<0.8.4b4"
-            ],
-            "v": "<0.8.4b4"
-        },
         {
             "advisory": "Syft version 0.8.5 updates its setuptools requirement to version 65.5.1 from the prior 39.0.1 to address the security vulnerability identified as CVE-2022-40897.",
             "cve": "CVE-2022-40897",
@@ -138078,16 +142429,6 @@
         }
     ],
     "synapseml": [
-        {
-            "advisory": "Synapseml 0.10.0 updates its NPM dependency 'prismjs' to v1.27.0 to include a security fix.",
-            "cve": "CVE-2022-23647",
-            "id": "pyup.io-50835",
-            "more_info_path": "/vulnerabilities/CVE-2022-23647/50835",
-            "specs": [
-                "<0.10.0"
-            ],
-            "v": "<0.10.0"
-        },
         {
             "advisory": "Synapseml 0.10.0 updates its NPM dependency 'shelljs' to v0.8.5 to include a security fix.",
             "cve": "CVE-2022-0144",
@@ -138129,10 +142470,10 @@
             "v": "<0.10.0"
         },
         {
-            "advisory": "Synapseml 0.10.0 fixes a vulnerability in Docker.\r\nhttps://github.com/microsoft/SynapseML/pull/1561",
-            "cve": "PVE-2022-50727",
-            "id": "pyup.io-50727",
-            "more_info_path": "/vulnerabilities/PVE-2022-50727/50727",
+            "advisory": "Synapseml 0.10.0 updates its NPM dependency 'prismjs' to v1.27.0 to include a security fix.",
+            "cve": "CVE-2022-23647",
+            "id": "pyup.io-50835",
+            "more_info_path": "/vulnerabilities/CVE-2022-23647/50835",
             "specs": [
                 "<0.10.0"
             ],
@@ -138148,6 +142489,16 @@
             ],
             "v": "<0.10.0"
         },
+        {
+            "advisory": "Synapseml 0.10.0 fixes a vulnerability in Docker.\r\nhttps://github.com/microsoft/SynapseML/pull/1561",
+            "cve": "PVE-2022-50727",
+            "id": "pyup.io-50727",
+            "more_info_path": "/vulnerabilities/PVE-2022-50727/50727",
+            "specs": [
+                "<0.10.0"
+            ],
+            "v": "<0.10.0"
+        },
         {
             "advisory": "Synapseml 0.10.0 updates its NPM dependency 'async' to v2.6.4 to include a security fix.",
             "cve": "CVE-2021-43138",
@@ -138220,9 +142571,9 @@
         },
         {
             "advisory": "Synapseml 0.9.0 updates its dependency 'openjdk' to include several security fixes.\r\nhttps://github.com/microsoft/SynapseML/commit/de4b47b8b6643575eb8dec470dec0dadfd1d836b",
-            "cve": "CVE-2019-12290",
-            "id": "pyup.io-54955",
-            "more_info_path": "/vulnerabilities/CVE-2019-12290/54955",
+            "cve": "CVE-2020-11655",
+            "id": "pyup.io-54954",
+            "more_info_path": "/vulnerabilities/CVE-2020-11655/54954",
             "specs": [
                 "<0.9.0"
             ],
@@ -138230,9 +142581,9 @@
         },
         {
             "advisory": "Synapseml 0.9.0 updates its dependency 'openjdk' to include several security fixes.\r\nhttps://github.com/microsoft/SynapseML/commit/de4b47b8b6643575eb8dec470dec0dadfd1d836b",
-            "cve": "CVE-2020-1967",
-            "id": "pyup.io-54958",
-            "more_info_path": "/vulnerabilities/CVE-2020-1967/54958",
+            "cve": "CVE-2019-3844",
+            "id": "pyup.io-54956",
+            "more_info_path": "/vulnerabilities/CVE-2019-3844/54956",
             "specs": [
                 "<0.9.0"
             ],
@@ -138240,9 +142591,9 @@
         },
         {
             "advisory": "Synapseml 0.9.0 updates its dependency 'openjdk' to include several security fixes.\r\nhttps://github.com/microsoft/SynapseML/commit/de4b47b8b6643575eb8dec470dec0dadfd1d836b",
-            "cve": "CVE-2019-3844",
-            "id": "pyup.io-54956",
-            "more_info_path": "/vulnerabilities/CVE-2019-3844/54956",
+            "cve": "CVE-2020-1967",
+            "id": "pyup.io-54958",
+            "more_info_path": "/vulnerabilities/CVE-2020-1967/54958",
             "specs": [
                 "<0.9.0"
             ],
@@ -138250,9 +142601,9 @@
         },
         {
             "advisory": "Synapseml 0.9.0 updates its dependency 'openjdk' to include several security fixes.\r\nhttps://github.com/microsoft/SynapseML/commit/de4b47b8b6643575eb8dec470dec0dadfd1d836b",
-            "cve": "CVE-2020-11655",
-            "id": "pyup.io-54954",
-            "more_info_path": "/vulnerabilities/CVE-2020-11655/54954",
+            "cve": "CVE-2019-8457",
+            "id": "pyup.io-54960",
+            "more_info_path": "/vulnerabilities/CVE-2019-8457/54960",
             "specs": [
                 "<0.9.0"
             ],
@@ -138260,9 +142611,9 @@
         },
         {
             "advisory": "Synapseml 0.9.0 updates its dependency 'openjdk' to include several security fixes.\r\nhttps://github.com/microsoft/SynapseML/commit/de4b47b8b6643575eb8dec470dec0dadfd1d836b",
-            "cve": "CVE-2019-3843",
-            "id": "pyup.io-54957",
-            "more_info_path": "/vulnerabilities/CVE-2019-3843/54957",
+            "cve": "CVE-2019-12290",
+            "id": "pyup.io-54955",
+            "more_info_path": "/vulnerabilities/CVE-2019-12290/54955",
             "specs": [
                 "<0.9.0"
             ],
@@ -138270,9 +142621,9 @@
         },
         {
             "advisory": "Synapseml 0.9.0 updates its dependency 'openjdk' to include several security fixes.\r\nhttps://github.com/microsoft/SynapseML/commit/de4b47b8b6643575eb8dec470dec0dadfd1d836b",
-            "cve": "CVE-2019-8457",
-            "id": "pyup.io-54960",
-            "more_info_path": "/vulnerabilities/CVE-2019-8457/54960",
+            "cve": "CVE-2019-3843",
+            "id": "pyup.io-54957",
+            "more_info_path": "/vulnerabilities/CVE-2019-3843/54957",
             "specs": [
                 "<0.9.0"
             ],
@@ -138289,6 +142640,26 @@
                 "<0.5.0"
             ],
             "v": "<0.5.0"
+        },
+        {
+            "advisory": "Syngen version 0.7.16 upgrades its mlflow dependency to version 2.10.* from 2.9.2 in response to the security vulnerability CVE-2023-6977.",
+            "cve": "CVE-2023-6977",
+            "id": "pyup.io-67017",
+            "more_info_path": "/vulnerabilities/CVE-2023-6977/67017",
+            "specs": [
+                "<0.7.16"
+            ],
+            "v": "<0.7.16"
+        },
+        {
+            "advisory": "Syngen version 0.7.16 upgrades its mlflow dependency to version 2.10.* from 2.9.2 in response to the security vulnerability CVE-2023-50447.",
+            "cve": "CVE-2023-50447",
+            "id": "pyup.io-67145",
+            "more_info_path": "/vulnerabilities/CVE-2023-50447/67145",
+            "specs": [
+                "<0.7.16"
+            ],
+            "v": "<0.7.16"
         }
     ],
     "synology-api": [
@@ -138542,6 +142913,16 @@
             ],
             "v": "<1.8.3"
         },
+        {
+            "advisory": "Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.",
+            "cve": "CVE-2012-0051",
+            "id": "pyup.io-67953",
+            "more_info_path": "/vulnerabilities/CVE-2012-0051/67953",
+            "specs": [
+                "<1.9.0"
+            ],
+            "v": "<1.9.0"
+        },
         {
             "advisory": "tahoe-lafs before 1.9.1 has a flaw that would allow servers to cause undetected corruption when\r\n  retrieving the contents of mutable files (both SDMF and MDMF).",
             "cve": "PVE-2021-26155",
@@ -138563,6 +142944,18 @@
             "v": ">=1.3.0,<=1.8.2"
         }
     ],
+    "tahrir": [
+        {
+            "advisory": "Affected versions of Tahrir are vulnerable to Cross-Site Request Forgery (CSRF) in several views.",
+            "cve": "PVE-2024-68079",
+            "id": "pyup.io-68079",
+            "more_info_path": "/vulnerabilities/PVE-2024-68079/68079",
+            "specs": [
+                "<0.8.0"
+            ],
+            "v": "<0.8.0"
+        }
+    ],
     "tair": [
         {
             "advisory": "Tair 1.3.3 updates its dependency 'redis' to version '4.4.4' to fix a Race Condition vulnerability.\r\nhttps://github.com/tair-opensource/tair-py/commit/9640ee7b29faba60c06e9b63bf13484b2814c29d",
@@ -138599,20 +142992,20 @@
     ],
     "tap-rest-api-msdk": [
         {
-            "advisory": "Tap-rest-api-msdk 1.3.2 updates its dependency 'cryptography' to version '41.0.3' to include a fix for an Insufficient Verification of Data Authenticity vulnerability.",
-            "cve": "CVE-2023-2975",
-            "id": "pyup.io-60222",
-            "more_info_path": "/vulnerabilities/CVE-2023-2975/60222",
+            "advisory": "Tap-rest-api-msdk 1.3.2 updates its dependency 'cryptography' to version '41.0.3' to include a fix for a Denial of Service vulnerability.\r\nhttps://github.com/Widen/tap-rest-api-msdk/pull/38",
+            "cve": "CVE-2023-3817",
+            "id": "pyup.io-60210",
+            "more_info_path": "/vulnerabilities/CVE-2023-3817/60210",
             "specs": [
                 "<1.3.2"
             ],
             "v": "<1.3.2"
         },
         {
-            "advisory": "Tap-rest-api-msdk 1.3.2 updates its dependency 'cryptography' to version '41.0.3' to include a fix for a Denial of Service vulnerability.\r\nhttps://github.com/Widen/tap-rest-api-msdk/pull/38",
-            "cve": "CVE-2023-3817",
-            "id": "pyup.io-60210",
-            "more_info_path": "/vulnerabilities/CVE-2023-3817/60210",
+            "advisory": "Tap-rest-api-msdk 1.3.2 updates its dependency 'cryptography' to version '41.0.3' to include a fix for an Insufficient Verification of Data Authenticity vulnerability.",
+            "cve": "CVE-2023-2975",
+            "id": "pyup.io-60222",
+            "more_info_path": "/vulnerabilities/CVE-2023-2975/60222",
             "specs": [
                 "<1.3.2"
             ],
@@ -139408,18 +143801,6 @@
             ],
             "v": "<1.15.3,>=2.0.0a0,<2.0.2,>=2.1.0rc0,<2.1.1"
         },
-        {
-            "advisory": "Tensorflow versions 1.15.3, 2.0.2 and 2.1.1 updates its dependency \"libjpeg-turbo\" to handle CVE-2019-13960.",
-            "cve": "CVE-2019-13960",
-            "id": "pyup.io-39823",
-            "more_info_path": "/vulnerabilities/CVE-2019-13960/39823",
-            "specs": [
-                "<1.15.3",
-                ">=2.0.0a0,<2.0.2",
-                ">=2.1.0rc0,<2.1.1"
-            ],
-            "v": "<1.15.3,>=2.0.0a0,<2.0.2,>=2.1.0rc0,<2.1.1"
-        },
         {
             "advisory": "Tensorflow versions 1.15.3, 2.0.2 and 2.1.1 updates its dependency \"SQLite3\" to handle CVE-2019-19244.",
             "cve": "CVE-2019-19244",
@@ -139492,6 +143873,18 @@
             ],
             "v": "<1.15.3,>=2.0.0a0,<2.0.2,>=2.1.0rc0,<2.1.1"
         },
+        {
+            "advisory": "Tensorflow versions 1.15.3, 2.0.2 and 2.1.1 updates its dependency \"libjpeg-turbo\" to handle CVE-2019-13960.",
+            "cve": "CVE-2019-13960",
+            "id": "pyup.io-39823",
+            "more_info_path": "/vulnerabilities/CVE-2019-13960/39823",
+            "specs": [
+                "<1.15.3",
+                ">=2.0.0a0,<2.0.2",
+                ">=2.1.0rc0,<2.1.1"
+            ],
+            "v": "<1.15.3,>=2.0.0a0,<2.0.2,>=2.1.0rc0,<2.1.1"
+        },
         {
             "advisory": "Tensorflow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 include a fix for CVE-2020-15205: In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the 'data_splits' argument of 'tf.raw_ops.StringNGrams' lacks validation. This allows a user to pass values that can cause heap overflow errors and even leak contents of memory In the linked code snippet, all the binary strings after 'ee ff' are contents from the memory stack. Since these can contain return addresses, this data leak can be used to defeat ASLR.\r\nhttps://github.com/tensorflow/tensorflow/security/advisories/GHSA-g7p5-5759-qv46",
             "cve": "CVE-2020-15205",
@@ -154242,16 +158635,6 @@
             ],
             "v": "<1.15.3"
         },
-        {
-            "advisory": "Tensorflow-directml 1.15.3 updates libjpeg-turbo to 2.0.4 to handle CVE-2018-19664, CVE-2018-20330 and CVE-2019-13960.",
-            "cve": "CVE-2019-13960",
-            "id": "pyup.io-39830",
-            "more_info_path": "/vulnerabilities/CVE-2019-13960/39830",
-            "specs": [
-                "<1.15.3"
-            ],
-            "v": "<1.15.3"
-        },
         {
             "advisory": "Tensorflow-directml 1.15.3 updates Apache Spark to 2.4.5 to handle CVE-2019-10099, CVE-2018-17190 and CVE-2018-11770.",
             "cve": "CVE-2018-17190",
@@ -154272,6 +158655,16 @@
             ],
             "v": "<1.15.3"
         },
+        {
+            "advisory": "Tensorflow-directml 1.15.3 updates libjpeg-turbo to 2.0.4 to handle CVE-2018-19664, CVE-2018-20330 and CVE-2019-13960.",
+            "cve": "CVE-2019-13960",
+            "id": "pyup.io-39830",
+            "more_info_path": "/vulnerabilities/CVE-2019-13960/39830",
+            "specs": [
+                "<1.15.3"
+            ],
+            "v": "<1.15.3"
+        },
         {
             "advisory": "Tensorflow-directml 1.15.4 updates its dependency \"SQlite3\" to v3.33.0 to include security fixes.",
             "cve": "CVE-2020-9327",
@@ -154628,9 +159021,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29216",
-            "id": "pyup.io-49295",
-            "more_info_path": "/vulnerabilities/CVE-2022-29216/49295",
+            "cve": "CVE-2022-29212",
+            "id": "pyup.io-49293",
+            "more_info_path": "/vulnerabilities/CVE-2022-29212/49293",
             "specs": [
                 "<0.25.0"
             ],
@@ -154638,9 +159031,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29197",
-            "id": "pyup.io-49278",
-            "more_info_path": "/vulnerabilities/CVE-2022-29197/49278",
+            "cve": "CVE-2022-29210",
+            "id": "pyup.io-49291",
+            "more_info_path": "/vulnerabilities/CVE-2022-29210/49291",
             "specs": [
                 "<0.25.0"
             ],
@@ -154648,9 +159041,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29202",
-            "id": "pyup.io-49283",
-            "more_info_path": "/vulnerabilities/CVE-2022-29202/49283",
+            "cve": "CVE-2022-29196",
+            "id": "pyup.io-49277",
+            "more_info_path": "/vulnerabilities/CVE-2022-29196/49277",
             "specs": [
                 "<0.25.0"
             ],
@@ -154658,9 +159051,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29201",
-            "id": "pyup.io-49282",
-            "more_info_path": "/vulnerabilities/CVE-2022-29201/49282",
+            "cve": "CVE-2022-29211",
+            "id": "pyup.io-49292",
+            "more_info_path": "/vulnerabilities/CVE-2022-29211/49292",
             "specs": [
                 "<0.25.0"
             ],
@@ -154668,9 +159061,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29212",
-            "id": "pyup.io-49293",
-            "more_info_path": "/vulnerabilities/CVE-2022-29212/49293",
+            "cve": "CVE-2022-29206",
+            "id": "pyup.io-49287",
+            "more_info_path": "/vulnerabilities/CVE-2022-29206/49287",
             "specs": [
                 "<0.25.0"
             ],
@@ -154678,9 +159071,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29194",
-            "id": "pyup.io-49275",
-            "more_info_path": "/vulnerabilities/CVE-2022-29194/49275",
+            "cve": "CVE-2022-29207",
+            "id": "pyup.io-49288",
+            "more_info_path": "/vulnerabilities/CVE-2022-29207/49288",
             "specs": [
                 "<0.25.0"
             ],
@@ -154688,9 +159081,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29213",
-            "id": "pyup.io-49294",
-            "more_info_path": "/vulnerabilities/CVE-2022-29213/49294",
+            "cve": "CVE-2022-29198",
+            "id": "pyup.io-49279",
+            "more_info_path": "/vulnerabilities/CVE-2022-29198/49279",
             "specs": [
                 "<0.25.0"
             ],
@@ -154698,9 +159091,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29208",
-            "id": "pyup.io-49289",
-            "more_info_path": "/vulnerabilities/CVE-2022-29208/49289",
+            "cve": "CVE-2022-27775",
+            "id": "pyup.io-49265",
+            "more_info_path": "/vulnerabilities/CVE-2022-27775/49265",
             "specs": [
                 "<0.25.0"
             ],
@@ -154708,9 +159101,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29209",
-            "id": "pyup.io-49290",
-            "more_info_path": "/vulnerabilities/CVE-2022-29209/49290",
+            "cve": "CVE-2022-22576",
+            "id": "pyup.io-49263",
+            "more_info_path": "/vulnerabilities/CVE-2022-22576/49263",
             "specs": [
                 "<0.25.0"
             ],
@@ -154718,9 +159111,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29210",
-            "id": "pyup.io-49291",
-            "more_info_path": "/vulnerabilities/CVE-2022-29210/49291",
+            "cve": "CVE-2022-29216",
+            "id": "pyup.io-49295",
+            "more_info_path": "/vulnerabilities/CVE-2022-29216/49295",
             "specs": [
                 "<0.25.0"
             ],
@@ -154728,9 +159121,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29196",
-            "id": "pyup.io-49277",
-            "more_info_path": "/vulnerabilities/CVE-2022-29196/49277",
+            "cve": "CVE-2022-29201",
+            "id": "pyup.io-49282",
+            "more_info_path": "/vulnerabilities/CVE-2022-29201/49282",
             "specs": [
                 "<0.25.0"
             ],
@@ -154738,9 +159131,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29211",
-            "id": "pyup.io-49292",
-            "more_info_path": "/vulnerabilities/CVE-2022-29211/49292",
+            "cve": "CVE-2022-29194",
+            "id": "pyup.io-49275",
+            "more_info_path": "/vulnerabilities/CVE-2022-29194/49275",
             "specs": [
                 "<0.25.0"
             ],
@@ -154758,9 +159151,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-27778",
-            "id": "pyup.io-49267",
-            "more_info_path": "/vulnerabilities/CVE-2022-27778/49267",
+            "cve": "CVE-2022-29192",
+            "id": "pyup.io-49273",
+            "more_info_path": "/vulnerabilities/CVE-2022-29192/49273",
             "specs": [
                 "<0.25.0"
             ],
@@ -154768,9 +159161,39 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29204",
-            "id": "pyup.io-49285",
-            "more_info_path": "/vulnerabilities/CVE-2022-29204/49285",
+            "cve": "CVE-2022-27776",
+            "id": "pyup.io-49266",
+            "more_info_path": "/vulnerabilities/CVE-2022-27776/49266",
+            "specs": [
+                "<0.25.0"
+            ],
+            "v": "<0.25.0"
+        },
+        {
+            "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
+            "cve": "CVE-2022-29202",
+            "id": "pyup.io-49283",
+            "more_info_path": "/vulnerabilities/CVE-2022-29202/49283",
+            "specs": [
+                "<0.25.0"
+            ],
+            "v": "<0.25.0"
+        },
+        {
+            "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
+            "cve": "CVE-2022-29199",
+            "id": "pyup.io-49280",
+            "more_info_path": "/vulnerabilities/CVE-2022-29199/49280",
+            "specs": [
+                "<0.25.0"
+            ],
+            "v": "<0.25.0"
+        },
+        {
+            "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
+            "cve": "CVE-2022-27774",
+            "id": "pyup.io-49264",
+            "more_info_path": "/vulnerabilities/CVE-2022-27774/49264",
             "specs": [
                 "<0.25.0"
             ],
@@ -154788,9 +159211,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29205",
-            "id": "pyup.io-49286",
-            "more_info_path": "/vulnerabilities/CVE-2022-29205/49286",
+            "cve": "CVE-2022-29208",
+            "id": "pyup.io-49289",
+            "more_info_path": "/vulnerabilities/CVE-2022-29208/49289",
             "specs": [
                 "<0.25.0"
             ],
@@ -154798,9 +159221,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29203",
-            "id": "pyup.io-49284",
-            "more_info_path": "/vulnerabilities/CVE-2022-29203/49284",
+            "cve": "CVE-2022-27778",
+            "id": "pyup.io-49267",
+            "more_info_path": "/vulnerabilities/CVE-2022-27778/49267",
             "specs": [
                 "<0.25.0"
             ],
@@ -154808,9 +159231,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29200",
-            "id": "pyup.io-49281",
-            "more_info_path": "/vulnerabilities/CVE-2022-29200/49281",
+            "cve": "CVE-2022-29204",
+            "id": "pyup.io-49285",
+            "more_info_path": "/vulnerabilities/CVE-2022-29204/49285",
             "specs": [
                 "<0.25.0"
             ],
@@ -154818,9 +159241,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29206",
-            "id": "pyup.io-49287",
-            "more_info_path": "/vulnerabilities/CVE-2022-29206/49287",
+            "cve": "CVE-2022-29205",
+            "id": "pyup.io-49286",
+            "more_info_path": "/vulnerabilities/CVE-2022-29205/49286",
             "specs": [
                 "<0.25.0"
             ],
@@ -154828,9 +159251,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29192",
-            "id": "pyup.io-49273",
-            "more_info_path": "/vulnerabilities/CVE-2022-29192/49273",
+            "cve": "CVE-2022-29203",
+            "id": "pyup.io-49284",
+            "more_info_path": "/vulnerabilities/CVE-2022-29203/49284",
             "specs": [
                 "<0.25.0"
             ],
@@ -154838,9 +159261,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29199",
-            "id": "pyup.io-49280",
-            "more_info_path": "/vulnerabilities/CVE-2022-29199/49280",
+            "cve": "CVE-2022-29197",
+            "id": "pyup.io-49278",
+            "more_info_path": "/vulnerabilities/CVE-2022-29197/49278",
             "specs": [
                 "<0.25.0"
             ],
@@ -154848,9 +159271,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29195",
-            "id": "pyup.io-49276",
-            "more_info_path": "/vulnerabilities/CVE-2022-29195/49276",
+            "cve": "CVE-2022-29213",
+            "id": "pyup.io-49294",
+            "more_info_path": "/vulnerabilities/CVE-2022-29213/49294",
             "specs": [
                 "<0.25.0"
             ],
@@ -154858,9 +159281,9 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29207",
-            "id": "pyup.io-49288",
-            "more_info_path": "/vulnerabilities/CVE-2022-29207/49288",
+            "cve": "CVE-2022-29209",
+            "id": "pyup.io-49290",
+            "more_info_path": "/vulnerabilities/CVE-2022-29209/49290",
             "specs": [
                 "<0.25.0"
             ],
@@ -154868,9 +159291,19 @@
         },
         {
             "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-29198",
-            "id": "pyup.io-49279",
-            "more_info_path": "/vulnerabilities/CVE-2022-29198/49279",
+            "cve": "CVE-2022-29200",
+            "id": "pyup.io-49281",
+            "more_info_path": "/vulnerabilities/CVE-2022-29200/49281",
+            "specs": [
+                "<0.25.0"
+            ],
+            "v": "<0.25.0"
+        },
+        {
+            "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
+            "cve": "CVE-2022-29195",
+            "id": "pyup.io-49276",
+            "more_info_path": "/vulnerabilities/CVE-2022-29195/49276",
             "specs": [
                 "<0.25.0"
             ],
@@ -154905,46 +159338,6 @@
                 "<0.25.0"
             ],
             "v": "<0.25.0"
-        },
-        {
-            "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-27776",
-            "id": "pyup.io-49266",
-            "more_info_path": "/vulnerabilities/CVE-2022-27776/49266",
-            "specs": [
-                "<0.25.0"
-            ],
-            "v": "<0.25.0"
-        },
-        {
-            "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-27775",
-            "id": "pyup.io-49265",
-            "more_info_path": "/vulnerabilities/CVE-2022-27775/49265",
-            "specs": [
-                "<0.25.0"
-            ],
-            "v": "<0.25.0"
-        },
-        {
-            "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-27774",
-            "id": "pyup.io-49264",
-            "more_info_path": "/vulnerabilities/CVE-2022-27774/49264",
-            "specs": [
-                "<0.25.0"
-            ],
-            "v": "<0.25.0"
-        },
-        {
-            "advisory": "Tensorflow-federated 0.25.0 updates its dependency 'TensorFlow' to v2.9.0 to include security fixes.",
-            "cve": "CVE-2022-22576",
-            "id": "pyup.io-49263",
-            "more_info_path": "/vulnerabilities/CVE-2022-22576/49263",
-            "specs": [
-                "<0.25.0"
-            ],
-            "v": "<0.25.0"
         }
     ],
     "tensorflow-gpu": [
@@ -174699,16 +179092,6 @@
             ],
             "v": "<1.5.0"
         },
-        {
-            "advisory": "Tensorpy 1.5.0 updates Tensorflow to v1.15.4 to include security fixes.",
-            "cve": "CVE-2019-13960",
-            "id": "pyup.io-44399",
-            "more_info_path": "/vulnerabilities/CVE-2019-13960/44399",
-            "specs": [
-                "<1.5.0"
-            ],
-            "v": "<1.5.0"
-        },
         {
             "advisory": "Tensorpy 1.5.0 updates Tensorflow to v1.15.4 to include security fixes.",
             "cve": "CVE-2019-19646",
@@ -174909,6 +179292,16 @@
             ],
             "v": "<1.5.0"
         },
+        {
+            "advisory": "Tensorpy 1.5.0 updates Tensorflow to v1.15.4 to include security fixes.",
+            "cve": "CVE-2019-13960",
+            "id": "pyup.io-44399",
+            "more_info_path": "/vulnerabilities/CVE-2019-13960/44399",
+            "specs": [
+                "<1.5.0"
+            ],
+            "v": "<1.5.0"
+        },
         {
             "advisory": "Tensorpy versions 1.6.1 and prior require as dependency TensorFlow v1.15.4 or lower, that have several known vulnerabilities.",
             "cve": "CVE-2021-41228",
@@ -175990,20 +180383,20 @@
     ],
     "testinfra-bdd": [
         {
-            "advisory": "Testinfra-bdd 2.2.4 updates its dependency 'GitPython' to v3.1.30 to include a security fix.",
-            "cve": "CVE-2022-24439",
-            "id": "pyup.io-52602",
-            "more_info_path": "/vulnerabilities/CVE-2022-24439/52602",
+            "advisory": "Testinfra-bdd 2.2.4 pins its dependency 'setuptools' to versions '>=65.5.1' to include a security fix.",
+            "cve": "CVE-2022-40897",
+            "id": "pyup.io-52656",
+            "more_info_path": "/vulnerabilities/CVE-2022-40897/52656",
             "specs": [
                 "<2.2.4"
             ],
             "v": "<2.2.4"
         },
         {
-            "advisory": "Testinfra-bdd 2.2.4 pins its dependency 'setuptools' to versions '>=65.5.1' to include a security fix.",
-            "cve": "CVE-2022-40897",
-            "id": "pyup.io-52656",
-            "more_info_path": "/vulnerabilities/CVE-2022-40897/52656",
+            "advisory": "Testinfra-bdd 2.2.4 updates its dependency 'GitPython' to v3.1.30 to include a security fix.",
+            "cve": "CVE-2022-24439",
+            "id": "pyup.io-52602",
+            "more_info_path": "/vulnerabilities/CVE-2022-24439/52602",
             "specs": [
                 "<2.2.4"
             ],
@@ -177328,6 +181721,18 @@
             "v": ">=0,<1.2.18"
         }
     ],
+    "tile-generator": [
+        {
+            "advisory": "An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by the PCF Tile Generator create a running open security group that overrides security groups set by the operator.",
+            "cve": "CVE-2017-4975",
+            "id": "pyup.io-67431",
+            "more_info_path": "/vulnerabilities/CVE-2017-4975/67431",
+            "specs": [
+                "<6.0.0"
+            ],
+            "v": "<6.0.0"
+        }
+    ],
     "tiledb": [
         {
             "advisory": "Tiledb 2.7.0rc1 introduces a fix for a race condition that was causing inconsistencies during schema evolution operations. The fix involves setting a timestamp range to avoid conflicts during concurrent schema evolutions. This update could potentially lead to data integrity issues, unauthorized data access or modification, and even denial of service attacks if a race condition is exploited. Inc/TileDB/pull/2776/commits/6dfa2cb2ce3b60b811eabd893118cadce13b8c2a",
@@ -177380,9 +181785,9 @@
     "timezonefinder": [
         {
             "advisory": "Timezonefinder 6.0.2 updates its dependency 'numpy' to v1.22.4 to include security fixes.",
-            "cve": "CVE-2021-41495",
-            "id": "pyup.io-49903",
-            "more_info_path": "/vulnerabilities/CVE-2021-41495/49903",
+            "cve": "CVE-2021-41496",
+            "id": "pyup.io-49902",
+            "more_info_path": "/vulnerabilities/CVE-2021-41496/49902",
             "specs": [
                 "<6.0.2"
             ],
@@ -177390,9 +181795,9 @@
         },
         {
             "advisory": "Timezonefinder 6.0.2 updates its dependency 'numpy' to v1.22.4 to include security fixes.",
-            "cve": "CVE-2021-41496",
-            "id": "pyup.io-49902",
-            "more_info_path": "/vulnerabilities/CVE-2021-41496/49902",
+            "cve": "CVE-2021-34141",
+            "id": "pyup.io-49800",
+            "more_info_path": "/vulnerabilities/CVE-2021-34141/49800",
             "specs": [
                 "<6.0.2"
             ],
@@ -177400,9 +181805,9 @@
         },
         {
             "advisory": "Timezonefinder 6.0.2 updates its dependency 'numpy' to v1.22.4 to include security fixes.",
-            "cve": "CVE-2021-34141",
-            "id": "pyup.io-49800",
-            "more_info_path": "/vulnerabilities/CVE-2021-34141/49800",
+            "cve": "CVE-2021-41495",
+            "id": "pyup.io-49903",
+            "more_info_path": "/vulnerabilities/CVE-2021-41495/49903",
             "specs": [
                 "<6.0.2"
             ],
@@ -177663,9 +182068,9 @@
     "tomtoolkit": [
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2019-14233",
-            "id": "pyup.io-49473",
-            "more_info_path": "/vulnerabilities/CVE-2019-14233/49473",
+            "cve": "CVE-2019-19118",
+            "id": "pyup.io-49470",
+            "more_info_path": "/vulnerabilities/CVE-2019-19118/49470",
             "specs": [
                 "<1.6.1"
             ],
@@ -177673,9 +182078,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2019-12308",
-            "id": "pyup.io-49476",
-            "more_info_path": "/vulnerabilities/CVE-2019-12308/49476",
+            "cve": "CVE-2019-14232",
+            "id": "pyup.io-49474",
+            "more_info_path": "/vulnerabilities/CVE-2019-14232/49474",
             "specs": [
                 "<1.6.1"
             ],
@@ -177683,9 +182088,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2020-7471",
-            "id": "pyup.io-49468",
-            "more_info_path": "/vulnerabilities/CVE-2020-7471/49468",
+            "cve": "CVE-2019-19844",
+            "id": "pyup.io-49469",
+            "more_info_path": "/vulnerabilities/CVE-2019-19844/49469",
             "specs": [
                 "<1.6.1"
             ],
@@ -177693,9 +182098,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2019-14234",
-            "id": "pyup.io-49471",
-            "more_info_path": "/vulnerabilities/CVE-2019-14234/49471",
+            "cve": "CVE-2019-12308",
+            "id": "pyup.io-49476",
+            "more_info_path": "/vulnerabilities/CVE-2019-12308/49476",
             "specs": [
                 "<1.6.1"
             ],
@@ -177703,9 +182108,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2019-19118",
-            "id": "pyup.io-49470",
-            "more_info_path": "/vulnerabilities/CVE-2019-19118/49470",
+            "cve": "CVE-2019-14235",
+            "id": "pyup.io-49472",
+            "more_info_path": "/vulnerabilities/CVE-2019-14235/49472",
             "specs": [
                 "<1.6.1"
             ],
@@ -177713,9 +182118,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2019-14235",
-            "id": "pyup.io-49472",
-            "more_info_path": "/vulnerabilities/CVE-2019-14235/49472",
+            "cve": "CVE-2019-14233",
+            "id": "pyup.io-49473",
+            "more_info_path": "/vulnerabilities/CVE-2019-14233/49473",
             "specs": [
                 "<1.6.1"
             ],
@@ -177723,9 +182128,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2019-12781",
-            "id": "pyup.io-49475",
-            "more_info_path": "/vulnerabilities/CVE-2019-12781/49475",
+            "cve": "CVE-2019-14234",
+            "id": "pyup.io-49471",
+            "more_info_path": "/vulnerabilities/CVE-2019-14234/49471",
             "specs": [
                 "<1.6.1"
             ],
@@ -177733,9 +182138,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2020-13596",
-            "id": "pyup.io-38397",
-            "more_info_path": "/vulnerabilities/CVE-2020-13596/38397",
+            "cve": "CVE-2020-7471",
+            "id": "pyup.io-49468",
+            "more_info_path": "/vulnerabilities/CVE-2020-7471/49468",
             "specs": [
                 "<1.6.1"
             ],
@@ -177743,9 +182148,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2020-13254",
-            "id": "pyup.io-49466",
-            "more_info_path": "/vulnerabilities/CVE-2020-13254/49466",
+            "cve": "CVE-2020-13596",
+            "id": "pyup.io-38397",
+            "more_info_path": "/vulnerabilities/CVE-2020-13596/38397",
             "specs": [
                 "<1.6.1"
             ],
@@ -177753,9 +182158,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2019-19844",
-            "id": "pyup.io-49469",
-            "more_info_path": "/vulnerabilities/CVE-2019-19844/49469",
+            "cve": "CVE-2019-12781",
+            "id": "pyup.io-49475",
+            "more_info_path": "/vulnerabilities/CVE-2019-12781/49475",
             "specs": [
                 "<1.6.1"
             ],
@@ -177763,9 +182168,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2020-9402",
-            "id": "pyup.io-49467",
-            "more_info_path": "/vulnerabilities/CVE-2020-9402/49467",
+            "cve": "CVE-2020-13254",
+            "id": "pyup.io-49466",
+            "more_info_path": "/vulnerabilities/CVE-2020-13254/49466",
             "specs": [
                 "<1.6.1"
             ],
@@ -177773,9 +182178,9 @@
         },
         {
             "advisory": "Tomtoolkit 1.6.1 updates its dependency 'Django' requirement to '>=3.0.7' to include security fixes.",
-            "cve": "CVE-2019-14232",
-            "id": "pyup.io-49474",
-            "more_info_path": "/vulnerabilities/CVE-2019-14232/49474",
+            "cve": "CVE-2020-9402",
+            "id": "pyup.io-49467",
+            "more_info_path": "/vulnerabilities/CVE-2020-9402/49467",
             "specs": [
                 "<1.6.1"
             ],
@@ -178046,6 +182451,16 @@
                 ">=0.1.0,<0.8.2"
             ],
             "v": ">=0.1.0,<0.8.2"
+        },
+        {
+            "advisory": "Certain versions of TorchServe are susceptible to an OS Command Injection vulnerability due to improper neutralization of special elements used in an operating system command. This flaw allows attackers to execute arbitrary OS commands, potentially leading to unauthorized actions or data access. To mitigate this risk, users should review their system configurations and apply recommended security practices for TorchServe.",
+            "cve": "PVE-2024-68053",
+            "id": "pyup.io-68053",
+            "more_info_path": "/vulnerabilities/PVE-2024-68053/68053",
+            "specs": [
+                ">=0.3.0,<0.8.2"
+            ],
+            "v": ">=0.3.0,<0.8.2"
         }
     ],
     "torchtriton": [
@@ -178101,16 +182516,6 @@
             ],
             "v": ">=0,<3.2.2"
         },
-        {
-            "advisory": "Versions of Tornado, a Python web framework and asynchronous networking library, are vulnerable to HTTP Request Smuggling. This occurs through incorrect parsing of the -, +, and _ characters in chunk length and Content-Length fields. The vulnerability is exploitable when Tornado is used behind specific proxies, notably older versions of haproxy, which interpret these non-standard characters in a non-uniform way.",
-            "cve": "PVE-2024-99839",
-            "id": "pyup.io-65581",
-            "more_info_path": "/vulnerabilities/PVE-2024-99839/65581",
-            "specs": [
-                ">=0,<6.3.3"
-            ],
-            "v": ">=0,<6.3.3"
-        },
         {
             "advisory": "The versions of Tornado from v3.1.0 to v4.2.0 contain a path traversal vulnerability.",
             "cve": "PVE-2023-99976",
@@ -178379,20 +182784,20 @@
     ],
     "transformers": [
         {
-            "advisory": "Transformers 4.23.0 updates its dependency 'protobuf' requirement to '<=3.20.2' to include a security fix.",
-            "cve": "CVE-2022-1941",
-            "id": "pyup.io-51396",
-            "more_info_path": "/vulnerabilities/CVE-2022-1941/51396",
+            "advisory": "Transformers 4.23.0 includes a fix for a link vulnerable to repojacking.\r\nhttps://github.com/huggingface/transformers/commit/ce2620194b4a8f070cd29504d34a79758affdf95",
+            "cve": "PVE-2022-51450",
+            "id": "pyup.io-51450",
+            "more_info_path": "/vulnerabilities/PVE-2022-51450/51450",
             "specs": [
                 "<4.23.0"
             ],
             "v": "<4.23.0"
         },
         {
-            "advisory": "Transformers 4.23.0 includes a fix for a link vulnerable to repojacking.\r\nhttps://github.com/huggingface/transformers/commit/ce2620194b4a8f070cd29504d34a79758affdf95",
-            "cve": "PVE-2022-51450",
-            "id": "pyup.io-51450",
-            "more_info_path": "/vulnerabilities/PVE-2022-51450/51450",
+            "advisory": "Transformers 4.23.0 updates its dependency 'protobuf' requirement to '<=3.20.2' to include a security fix.",
+            "cve": "CVE-2022-1941",
+            "id": "pyup.io-51396",
+            "more_info_path": "/vulnerabilities/CVE-2022-1941/51396",
             "specs": [
                 "<4.23.0"
             ],
@@ -178430,9 +182835,9 @@
         },
         {
             "advisory": "Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.",
-            "cve": "CVE-2023-7018",
-            "id": "pyup.io-65398",
-            "more_info_path": "/vulnerabilities/CVE-2023-7018/65398",
+            "cve": "CVE-2023-6730",
+            "id": "pyup.io-65215",
+            "more_info_path": "/vulnerabilities/CVE-2023-6730/65215",
             "specs": [
                 ">=0,<4.36.0"
             ],
@@ -178440,9 +182845,9 @@
         },
         {
             "advisory": "Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.",
-            "cve": "CVE-2023-6730",
-            "id": "pyup.io-65215",
-            "more_info_path": "/vulnerabilities/CVE-2023-6730/65215",
+            "cve": "CVE-2023-7018",
+            "id": "pyup.io-65398",
+            "more_info_path": "/vulnerabilities/CVE-2023-7018/65398",
             "specs": [
                 ">=0,<4.36.0"
             ],
@@ -178450,6 +182855,16 @@
         }
     ],
     "transifex-client": [
+        {
+            "advisory": "Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.",
+            "cve": "CVE-2013-2073",
+            "id": "pyup.io-67970",
+            "more_info_path": "/vulnerabilities/CVE-2013-2073/67970",
+            "specs": [
+                "<0.9"
+            ],
+            "v": "<0.9"
+        },
         {
             "advisory": "Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.",
             "cve": "CVE-2013-7110",
@@ -178787,6 +183202,18 @@
             "v": "<1.13.0"
         }
     ],
+    "trove": [
+        {
+            "advisory": "The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.",
+            "cve": "CVE-2015-3156",
+            "id": "pyup.io-70414",
+            "more_info_path": "/vulnerabilities/CVE-2015-3156/70414",
+            "specs": [
+                "<2015.1.0"
+            ],
+            "v": "<2015.1.0"
+        }
+    ],
     "trrfab": [
         {
             "advisory": "Trrfab is a malicious package, typosquatting.  It steals Discord access tokens, passwords, and even stage dependency confusion attacks.\r\nhttps://thehackernews.com/2021/11/11-malicious-pypi-python-libraries.html",
@@ -178945,10 +183372,10 @@
             "v": ">=4.2.0,<4.2.21,>=4.4.0,<4.4.19,>=4.6.0,<4.6.14,>=4.8.0,<4.8.10,>=5.0.0,<5.0.6"
         },
         {
-            "advisory": "An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.",
-            "cve": "CVE-2022-26661",
-            "id": "pyup.io-54404",
-            "more_info_path": "/vulnerabilities/CVE-2022-26661/54404",
+            "advisory": "An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An unauthenticated user can send a crafted XML-RPC message to consume all the resources of the server.",
+            "cve": "CVE-2022-26662",
+            "id": "pyup.io-54402",
+            "more_info_path": "/vulnerabilities/CVE-2022-26662/54402",
             "specs": [
                 ">=5.0.0,<5.0.46",
                 ">=6.0.0,<6.0.16",
@@ -178957,10 +183384,10 @@
             "v": ">=5.0.0,<5.0.46,>=6.0.0,<6.0.16,>=6.1.0,<6.2.6"
         },
         {
-            "advisory": "An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An unauthenticated user can send a crafted XML-RPC message to consume all the resources of the server.",
-            "cve": "CVE-2022-26662",
-            "id": "pyup.io-54402",
-            "more_info_path": "/vulnerabilities/CVE-2022-26662/54402",
+            "advisory": "An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.",
+            "cve": "CVE-2022-26661",
+            "id": "pyup.io-54404",
+            "more_info_path": "/vulnerabilities/CVE-2022-26661/54404",
             "specs": [
                 ">=5.0.0,<5.0.46",
                 ">=6.0.0,<6.0.16",
@@ -179138,6 +183565,16 @@
             ],
             "v": "<0.19.0"
         },
+        {
+            "advisory": "TUF 3.1.1 addresses GHSA-77hh-43cm-v8j6 by fixing a security flaw in how delegated roles are verified, particularly under \"succinct delegation.\" The issue could mislead users of tuf.api.metadata into trusting incorrectly delegated roles, though tuf.ngclient users remain unaffected. The vulnerability's impact is deemed low due to the specific conditions required for exploitation and the fact that actual signature verification processes are not compromised. This scenario mainly affects users employing succinct delegations in a manner susceptible to the outlined exploit.",
+            "cve": "PVE-2024-67478",
+            "id": "pyup.io-67478",
+            "more_info_path": "/vulnerabilities/PVE-2024-67478/67478",
+            "specs": [
+                "<3.1.1"
+            ],
+            "v": "<3.1.1"
+        },
         {
             "advisory": "TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.",
             "cve": "CVE-2020-6174",
@@ -179348,9 +183785,9 @@
         },
         {
             "advisory": "Tutor 11.2.10 applies security patches for the 'Django' dependency by upgrading from 2.2.20 to 2.2.23.",
-            "cve": "CVE-2021-31542",
-            "id": "pyup.io-49771",
-            "more_info_path": "/vulnerabilities/CVE-2021-31542/49771",
+            "cve": "CVE-2021-32052",
+            "id": "pyup.io-40906",
+            "more_info_path": "/vulnerabilities/CVE-2021-32052/40906",
             "specs": [
                 "<11.2.10"
             ],
@@ -179358,9 +183795,9 @@
         },
         {
             "advisory": "Tutor 11.2.10 applies security patches for the 'Django' dependency by upgrading from 2.2.20 to 2.2.23.",
-            "cve": "CVE-2021-28658",
-            "id": "pyup.io-49772",
-            "more_info_path": "/vulnerabilities/CVE-2021-28658/49772",
+            "cve": "CVE-2021-31542",
+            "id": "pyup.io-49771",
+            "more_info_path": "/vulnerabilities/CVE-2021-31542/49771",
             "specs": [
                 "<11.2.10"
             ],
@@ -179368,9 +183805,9 @@
         },
         {
             "advisory": "Tutor 11.2.10 applies security patches for the 'Django' dependency by upgrading from 2.2.20 to 2.2.23.",
-            "cve": "CVE-2021-32052",
-            "id": "pyup.io-40906",
-            "more_info_path": "/vulnerabilities/CVE-2021-32052/40906",
+            "cve": "CVE-2021-28658",
+            "id": "pyup.io-49772",
+            "more_info_path": "/vulnerabilities/CVE-2021-28658/49772",
             "specs": [
                 "<11.2.10"
             ],
@@ -179568,9 +184005,9 @@
         },
         {
             "advisory": "Tutor 3.9.0 includes security patches for the 'Django' underlying dependency (1.11.21 -> 1.11.27).",
-            "cve": "CVE-2019-14234",
-            "id": "pyup.io-49776",
-            "more_info_path": "/vulnerabilities/CVE-2019-14234/49776",
+            "cve": "CVE-2019-12308",
+            "id": "pyup.io-40921",
+            "more_info_path": "/vulnerabilities/CVE-2019-12308/40921",
             "specs": [
                 "<3.9.0"
             ],
@@ -179578,9 +184015,9 @@
         },
         {
             "advisory": "Tutor 3.9.0 includes security patches for the 'Django' underlying dependency (1.11.21 -> 1.11.27).",
-            "cve": "CVE-2019-14233",
-            "id": "pyup.io-49775",
-            "more_info_path": "/vulnerabilities/CVE-2019-14233/49775",
+            "cve": "CVE-2019-19118",
+            "id": "pyup.io-49778",
+            "more_info_path": "/vulnerabilities/CVE-2019-19118/49778",
             "specs": [
                 "<3.9.0"
             ],
@@ -179588,9 +184025,9 @@
         },
         {
             "advisory": "Tutor 3.9.0 includes security patches for the 'Django' underlying dependency (1.11.21 -> 1.11.27).",
-            "cve": "CVE-2019-12781",
-            "id": "pyup.io-49773",
-            "more_info_path": "/vulnerabilities/CVE-2019-12781/49773",
+            "cve": "CVE-2019-19844",
+            "id": "pyup.io-49779",
+            "more_info_path": "/vulnerabilities/CVE-2019-19844/49779",
             "specs": [
                 "<3.9.0"
             ],
@@ -179598,9 +184035,9 @@
         },
         {
             "advisory": "Tutor 3.9.0 includes security patches for the 'Django' underlying dependency (1.11.21 -> 1.11.27).",
-            "cve": "CVE-2019-12308",
-            "id": "pyup.io-40921",
-            "more_info_path": "/vulnerabilities/CVE-2019-12308/40921",
+            "cve": "CVE-2019-14234",
+            "id": "pyup.io-49776",
+            "more_info_path": "/vulnerabilities/CVE-2019-14234/49776",
             "specs": [
                 "<3.9.0"
             ],
@@ -179608,9 +184045,9 @@
         },
         {
             "advisory": "Tutor 3.9.0 includes security patches for the 'Django' underlying dependency (1.11.21 -> 1.11.27).",
-            "cve": "CVE-2019-19118",
-            "id": "pyup.io-49778",
-            "more_info_path": "/vulnerabilities/CVE-2019-19118/49778",
+            "cve": "CVE-2019-14233",
+            "id": "pyup.io-49775",
+            "more_info_path": "/vulnerabilities/CVE-2019-14233/49775",
             "specs": [
                 "<3.9.0"
             ],
@@ -179618,9 +184055,9 @@
         },
         {
             "advisory": "Tutor 3.9.0 includes security patches for the 'Django' underlying dependency (1.11.21 -> 1.11.27).",
-            "cve": "CVE-2019-19844",
-            "id": "pyup.io-49779",
-            "more_info_path": "/vulnerabilities/CVE-2019-19844/49779",
+            "cve": "CVE-2019-12781",
+            "id": "pyup.io-49773",
+            "more_info_path": "/vulnerabilities/CVE-2019-12781/49773",
             "specs": [
                 "<3.9.0"
             ],
@@ -179689,6 +184126,36 @@
                 "<7.16.2"
             ],
             "v": "<7.16.2"
+        },
+        {
+            "advisory": "Twilio version 9.0.5 has updated its certifi library from version 2021.10.8 to 2023.7.22 to address the security vulnerability identified in CVE-2022-23491.",
+            "cve": "CVE-2022-23491",
+            "id": "pyup.io-67976",
+            "more_info_path": "/vulnerabilities/CVE-2022-23491/67976",
+            "specs": [
+                "<9.0.5"
+            ],
+            "v": "<9.0.5"
+        },
+        {
+            "advisory": "Twilio version 9.0.5 has upgraded its certifi library from version 2021.10.8 to 2023.7.22 in response to the security issue detailed in CVE-2023-37920.",
+            "cve": "CVE-2023-37920",
+            "id": "pyup.io-68033",
+            "more_info_path": "/vulnerabilities/CVE-2023-37920/68033",
+            "specs": [
+                "<9.0.5"
+            ],
+            "v": "<9.0.5"
+        },
+        {
+            "advisory": "Twilio version 9.0.5 has updated its certifi library from version 2021.10.8 to 2023.7.22 in response to the security concerns outlined in CVE-2023-32681.",
+            "cve": "CVE-2023-32681",
+            "id": "pyup.io-68034",
+            "more_info_path": "/vulnerabilities/CVE-2023-32681/68034",
+            "specs": [
+                "<9.0.5"
+            ],
+            "v": "<9.0.5"
         }
     ],
     "twine": [
@@ -179966,10 +184433,9 @@
             "id": "pyup.io-37768",
             "more_info_path": "/vulnerabilities/CVE-2019-19275/37768",
             "specs": [
-                "==1.3.0",
-                "==1.3.1"
+                "<=1.3.2"
             ],
-            "v": "==1.3.0,==1.3.1"
+            "v": "<=1.3.2"
         },
         {
             "advisory": "Typed_ast 1.3.0 and 1.3.1 have a handle_keywordonly_args out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.) See: CVE-2019-19274.",
@@ -179977,10 +184443,21 @@
             "id": "pyup.io-37767",
             "more_info_path": "/vulnerabilities/CVE-2019-19274/37767",
             "specs": [
-                "==1.3.0",
-                "==1.3.1"
+                "<=1.3.2"
+            ],
+            "v": "<=1.3.2"
+        }
+    ],
+    "typed-ffmpeg": [
+        {
+            "advisory": "Typed-ffmpeg 1.0.4 enhances security by restricting class loading exclusively to the ffmpeg module, preventing unauthorized or unsafe class loading practices.",
+            "cve": "PVE-2024-67006",
+            "id": "pyup.io-67006",
+            "more_info_path": "/vulnerabilities/PVE-2024-67006/67006",
+            "specs": [
+                "<1.0.4"
             ],
-            "v": "==1.3.0,==1.3.1"
+            "v": "<1.0.4"
         }
     ],
     "typedb-client": [
@@ -180394,6 +184871,16 @@
             ],
             "v": "<2.0.0"
         },
+        {
+            "advisory": "Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm.",
+            "cve": "CVE-2020-36431",
+            "id": "pyup.io-70608",
+            "more_info_path": "/vulnerabilities/CVE-2020-36431/70608",
+            "specs": [
+                "<=1.0.2"
+            ],
+            "v": "<=1.0.2"
+        },
         {
             "advisory": "Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function.",
             "cve": "CVE-2022-29692",
@@ -180527,6 +185014,28 @@
             "v": "<=1.2.0"
         }
     ],
+    "up42-py": [
+        {
+            "advisory": "Up42-py version 0.37.2 updates its dependency on the black library, upgrading from version 22.12.0 to 24.3.0. This update addresses the security vulnerability identified in CVE-2024-21503.",
+            "cve": "CVE-2024-21503",
+            "id": "pyup.io-67942",
+            "more_info_path": "/vulnerabilities/CVE-2024-21503/67942",
+            "specs": [
+                "<0.37.2"
+            ],
+            "v": "<0.37.2"
+        },
+        {
+            "advisory": "Up42-py version 0.37.2 updates its dependency on the pillow library, upgrading from version 10.2.0 to 10.3.0. This update addresses the security vulnerability identified in CVE-2024-28219.",
+            "cve": "CVE-2024-28219",
+            "id": "pyup.io-67975",
+            "more_info_path": "/vulnerabilities/CVE-2024-28219/67975",
+            "specs": [
+                "<0.37.2"
+            ],
+            "v": "<0.37.2"
+        }
+    ],
     "upamonkws": [
         {
             "advisory": "Upamonkws is a malicious package. It delivers the W4SP Stealer Malware to your system.\r\nhttps://thehackernews.com/2022/12/w4sp-stealer-discovered-in-multiple.html",
@@ -180913,16 +185422,6 @@
             ],
             "v": "<4.0.0"
         },
-        {
-            "advisory": "vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaboration and to view the tasks in it. However, prior to version 4.0.0, it is only checked if the user has permission to view the collaboration. Version 4.0.0 contains a patch. There are no known workarounds.",
-            "cve": "CVE-2023-41882",
-            "id": "pyup.io-65239",
-            "more_info_path": "/vulnerabilities/CVE-2023-41882/65239",
-            "specs": [
-                "<4.0.0"
-            ],
-            "v": "<4.0.0"
-        },
         {
             "advisory": "Vantage6 4.0.0 includes a fix for CVE-2023-23930: Versions prior to 4.0.0 use pickle, which has known security issue, as a default serialization module but that has known security issues. All users of vantage6 that post tasks with the default serialization are affected. Users may specify JSON serialization as a workaround.\r\nhttps://github.com/vantage6/vantage6/security/advisories/GHSA-5m22-cfq9-86x6",
             "cve": "CVE-2023-23930",
@@ -180943,6 +185442,16 @@
             ],
             "v": "<4.0.0"
         },
+        {
+            "advisory": "vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaboration and to view the tasks in it. However, prior to version 4.0.0, it is only checked if the user has permission to view the collaboration. Version 4.0.0 contains a patch. There are no known workarounds.",
+            "cve": "CVE-2023-41882",
+            "id": "pyup.io-65239",
+            "more_info_path": "/vulnerabilities/CVE-2023-41882/65239",
+            "specs": [
+                "<4.0.0"
+            ],
+            "v": "<4.0.0"
+        },
         {
             "advisory": "vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). In affected versions a node does not check if an image is allowed to run if a `parent_id` is set. A malicious party that breaches the server may modify it to set a fake `parent_id` and send a task of a non-whitelisted algorithm. The node will then execute it because the `parent_id` that is set prevents checks from being run. This impacts all servers that are breached by an expert user. This vulnerability has been patched in version 4.1.2. All users are advised to upgrade. There are no known workarounds for this vulnerability.",
             "cve": "CVE-2023-47631",
@@ -180954,60 +185463,60 @@
             "v": "<4.1.2"
         },
         {
-            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution.  This vulnerability is patched in 4.2.0.",
-            "cve": "CVE-2024-21649",
-            "id": "pyup.io-66729",
-            "more_info_path": "/vulnerabilities/CVE-2024-21649/66729",
+            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).  It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks.  Version 4.2.0 patches this vulnerability.",
+            "cve": "CVE-2024-21671",
+            "id": "pyup.io-66725",
+            "more_info_path": "/vulnerabilities/CVE-2024-21671/66725",
             "specs": [
                 "<4.2.0"
             ],
             "v": "<4.2.0"
         },
         {
-            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). There are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a task with sensitive input data that will then be stored unencrypted in a database.  Users should ensure they set the encryption setting correctly.  This vulnerability is patched in 4.2.0.",
-            "cve": "CVE-2024-22193",
-            "id": "pyup.io-66723",
-            "more_info_path": "/vulnerabilities/CVE-2024-22193/66723",
+            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).  Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not exposed so there is no risk, but not all deployments are ideal. The default should therefore be less permissive.  The vulnerability can be mitigated by removing the ssh part from the docker file and rebuilding the docker image.  Version 4.2.0 patches the vulnerability.",
+            "cve": "CVE-2024-21653",
+            "id": "pyup.io-66727",
+            "more_info_path": "/vulnerabilities/CVE-2024-21653/66727",
             "specs": [
                 "<4.2.0"
             ],
             "v": "<4.2.0"
         },
         {
-            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).  It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks.  Version 4.2.0 patches this vulnerability.",
-            "cve": "CVE-2024-21671",
-            "id": "pyup.io-66725",
-            "more_info_path": "/vulnerabilities/CVE-2024-21671/66725",
+            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). There are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a task with sensitive input data that will then be stored unencrypted in a database.  Users should ensure they set the encryption setting correctly.  This vulnerability is patched in 4.2.0.",
+            "cve": "CVE-2024-22193",
+            "id": "pyup.io-66723",
+            "more_info_path": "/vulnerabilities/CVE-2024-22193/66723",
             "specs": [
                 "<4.2.0"
             ],
             "v": "<4.2.0"
         },
         {
-            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).  Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not exposed so there is no risk, but not all deployments are ideal. The default should therefore be less permissive.  The vulnerability can be mitigated by removing the ssh part from the docker file and rebuilding the docker image.  Version 4.2.0 patches the vulnerability.",
-            "cve": "CVE-2024-21653",
-            "id": "pyup.io-66727",
-            "more_info_path": "/vulnerabilities/CVE-2024-21653/66727",
+            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution.  This vulnerability is patched in 4.2.0.",
+            "cve": "CVE-2024-21649",
+            "id": "pyup.io-66729",
+            "more_info_path": "/vulnerabilities/CVE-2024-21649/66729",
             "specs": [
                 "<4.2.0"
             ],
             "v": "<4.2.0"
         },
         {
-            "advisory": "From issue: \n\nProblem description\nCurrently, the refresh token is valid indefinitely. This is bad security practice.\n\nDesired solution\nThe refresh token should get a validity of 24-48 hours.\n\nAdditional context\n\nWhen implementing this, also check that the refresh token returns a new refresh token\nWhen implementing this, also adapt the UI so that it logs out if refresh token is no longer valid.\nWhen implementing this, ensure that nodes refresh their token periodically so that they do not have to be restarted manually.\n\n\n### Impact\n### Patches\nNone available \n\n### Workarounds\nNone available\n\n",
-            "cve": "CVE-2023-23929",
-            "id": "pyup.io-54661",
-            "more_info_path": "/vulnerabilities/CVE-2023-23929/54661",
+            "advisory": "### Impact\nWe are incorporating the password policies listed in https://github.com/vantage6/vantage6/issues/59. One measure is that we don't let the user know in case of wrong username/password combination if the username actually exists, to prevent that bots can guess usernames. However, if a wrong password is entered a number of times, the user account is blocked temporarily. This way you could still find out which usernames exist.\n\n### Patches\nUpdate to 3.8.0+\n\n### Workarounds\nNo\n\n### References\nhttps://github.com/vantage6/vantage6/issues/59\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [vantage6@iknl.nl](mailto:vantage6@iknl.nl)\n",
+            "cve": "CVE-2022-39228",
+            "id": "pyup.io-54659",
+            "more_info_path": "/vulnerabilities/CVE-2022-39228/54659",
             "specs": [
                 ">=0,<3.8.0"
             ],
             "v": ">=0,<3.8.0"
         },
         {
-            "advisory": "### Impact\nWe are incorporating the password policies listed in https://github.com/vantage6/vantage6/issues/59. One measure is that we don't let the user know in case of wrong username/password combination if the username actually exists, to prevent that bots can guess usernames. However, if a wrong password is entered a number of times, the user account is blocked temporarily. This way you could still find out which usernames exist.\n\n### Patches\nUpdate to 3.8.0+\n\n### Workarounds\nNo\n\n### References\nhttps://github.com/vantage6/vantage6/issues/59\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [vantage6@iknl.nl](mailto:vantage6@iknl.nl)\n",
-            "cve": "CVE-2022-39228",
-            "id": "pyup.io-54659",
-            "more_info_path": "/vulnerabilities/CVE-2022-39228/54659",
+            "advisory": "From issue: \n\nProblem description\nCurrently, the refresh token is valid indefinitely. This is bad security practice.\n\nDesired solution\nThe refresh token should get a validity of 24-48 hours.\n\nAdditional context\n\nWhen implementing this, also check that the refresh token returns a new refresh token\nWhen implementing this, also adapt the UI so that it logs out if refresh token is no longer valid.\nWhen implementing this, ensure that nodes refresh their token periodically so that they do not have to be restarted manually.\n\n\n### Impact\n### Patches\nNone available \n\n### Workarounds\nNone available\n\n",
+            "cve": "CVE-2023-23929",
+            "id": "pyup.io-54661",
+            "more_info_path": "/vulnerabilities/CVE-2023-23929/54661",
             "specs": [
                 ">=0,<3.8.0"
             ],
@@ -181068,20 +185577,20 @@
     ],
     "vantage6-common": [
         {
-            "advisory": "vantage6 is privacy preserving federated learning infrastructure. When a collaboration is deleted, the linked resources (such as tasks from that collaboration) should be deleted. This is partly to manage data properly, but also to prevent a potential (but unlikely) side-effect that affects versions prior to 4.0.0, where if a collaboration with id=10 is deleted, and subsequently a new collaboration is created with id=10, the authenticated users in that collaboration could potentially see results of the deleted collaboration in some cases. Version 4.0.0 contains a patch for this issue. There are no known workarounds.",
-            "cve": "CVE-2023-41881",
-            "id": "pyup.io-65246",
-            "more_info_path": "/vulnerabilities/CVE-2023-41881/65246",
+            "advisory": "vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaboration and to view the tasks in it. However, prior to version 4.0.0, it is only checked if the user has permission to view the collaboration. Version 4.0.0 contains a patch. There are no known workarounds.",
+            "cve": "CVE-2023-41882",
+            "id": "pyup.io-65241",
+            "more_info_path": "/vulnerabilities/CVE-2023-41882/65241",
             "specs": [
                 "<4.0.0"
             ],
             "v": "<4.0.0"
         },
         {
-            "advisory": "vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaboration and to view the tasks in it. However, prior to version 4.0.0, it is only checked if the user has permission to view the collaboration. Version 4.0.0 contains a patch. There are no known workarounds.",
-            "cve": "CVE-2023-41882",
-            "id": "pyup.io-65241",
-            "more_info_path": "/vulnerabilities/CVE-2023-41882/65241",
+            "advisory": "vantage6 is privacy preserving federated learning infrastructure. When a collaboration is deleted, the linked resources (such as tasks from that collaboration) should be deleted. This is partly to manage data properly, but also to prevent a potential (but unlikely) side-effect that affects versions prior to 4.0.0, where if a collaboration with id=10 is deleted, and subsequently a new collaboration is created with id=10, the authenticated users in that collaboration could potentially see results of the deleted collaboration in some cases. Version 4.0.0 contains a patch for this issue. There are no known workarounds.",
+            "cve": "CVE-2023-41881",
+            "id": "pyup.io-65246",
+            "more_info_path": "/vulnerabilities/CVE-2023-41881/65246",
             "specs": [
                 "<4.0.0"
             ],
@@ -181089,6 +185598,16 @@
         }
     ],
     "vantage6-node": [
+        {
+            "advisory": "vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0, malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this is a risk, is when users define which users are allowed to run algorithms on their node. This may be defined by username or user id. Now, for example, if user id 13 is allowed to run tasks, and an attacker creates a username with username '13', they would be wrongly allowed to run an algorithm. There may also be other places in the code where such a mixup of resource ID or name leads to issues. Version 4.0.0 contains a patch for this issue. The best solution is to check when resources are created or modified, that the resource name always starts with a character.",
+            "cve": "CVE-2023-28635",
+            "id": "pyup.io-62910",
+            "more_info_path": "/vulnerabilities/CVE-2023-28635/62910",
+            "specs": [
+                "<4.0.0"
+            ],
+            "v": "<4.0.0"
+        },
         {
             "advisory": "vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaboration and to view the tasks in it. However, prior to version 4.0.0, it is only checked if the user has permission to view the collaboration. Version 4.0.0 contains a patch. There are no known workarounds.",
             "cve": "CVE-2023-41882",
@@ -181109,16 +185628,6 @@
             ],
             "v": "<4.0.0"
         },
-        {
-            "advisory": "vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0, malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this is a risk, is when users define which users are allowed to run algorithms on their node. This may be defined by username or user id. Now, for example, if user id 13 is allowed to run tasks, and an attacker creates a username with username '13', they would be wrongly allowed to run an algorithm. There may also be other places in the code where such a mixup of resource ID or name leads to issues. Version 4.0.0 contains a patch for this issue. The best solution is to check when resources are created or modified, that the resource name always starts with a character.",
-            "cve": "CVE-2023-28635",
-            "id": "pyup.io-62910",
-            "more_info_path": "/vulnerabilities/CVE-2023-28635/62910",
-            "specs": [
-                "<4.0.0"
-            ],
-            "v": "<4.0.0"
-        },
         {
             "advisory": "vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). In affected versions a node does not check if an image is allowed to run if a `parent_id` is set. A malicious party that breaches the server may modify it to set a fake `parent_id` and send a task of a non-whitelisted algorithm. The node will then execute it because the `parent_id` that is set prevents checks from being run. This impacts all servers that are breached by an expert user. This vulnerability has been patched in version 4.1.2. All users are advised to upgrade. There are no known workarounds for this vulnerability.",
             "cve": "CVE-2023-47631",
@@ -181132,20 +185641,20 @@
     ],
     "vantage6-server": [
         {
-            "advisory": "vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0, malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this is a risk, is when users define which users are allowed to run algorithms on their node. This may be defined by username or user id. Now, for example, if user id 13 is allowed to run tasks, and an attacker creates a username with username '13', they would be wrongly allowed to run an algorithm. There may also be other places in the code where such a mixup of resource ID or name leads to issues. Version 4.0.0 contains a patch for this issue. The best solution is to check when resources are created or modified, that the resource name always starts with a character.",
-            "cve": "CVE-2023-28635",
-            "id": "pyup.io-62912",
-            "more_info_path": "/vulnerabilities/CVE-2023-28635/62912",
+            "advisory": "vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaboration and to view the tasks in it. However, prior to version 4.0.0, it is only checked if the user has permission to view the collaboration. Version 4.0.0 contains a patch. There are no known workarounds.",
+            "cve": "CVE-2023-41882",
+            "id": "pyup.io-65243",
+            "more_info_path": "/vulnerabilities/CVE-2023-41882/65243",
             "specs": [
                 "<4.0.0"
             ],
             "v": "<4.0.0"
         },
         {
-            "advisory": "vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaboration and to view the tasks in it. However, prior to version 4.0.0, it is only checked if the user has permission to view the collaboration. Version 4.0.0 contains a patch. There are no known workarounds.",
-            "cve": "CVE-2023-41882",
-            "id": "pyup.io-65243",
-            "more_info_path": "/vulnerabilities/CVE-2023-41882/65243",
+            "advisory": "vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0, malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this is a risk, is when users define which users are allowed to run algorithms on their node. This may be defined by username or user id. Now, for example, if user id 13 is allowed to run tasks, and an attacker creates a username with username '13', they would be wrongly allowed to run an algorithm. There may also be other places in the code where such a mixup of resource ID or name leads to issues. Version 4.0.0 contains a patch for this issue. The best solution is to check when resources are created or modified, that the resource name always starts with a character.",
+            "cve": "CVE-2023-28635",
+            "id": "pyup.io-62912",
+            "more_info_path": "/vulnerabilities/CVE-2023-28635/62912",
             "specs": [
                 "<4.0.0"
             ],
@@ -181171,16 +185680,6 @@
             ],
             "v": "<4.1.2"
         },
-        {
-            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).  Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not exposed so there is no risk, but not all deployments are ideal. The default should therefore be less permissive.  The vulnerability can be mitigated by removing the ssh part from the docker file and rebuilding the docker image.  Version 4.2.0 patches the vulnerability.",
-            "cve": "CVE-2024-21653",
-            "id": "pyup.io-66728",
-            "more_info_path": "/vulnerabilities/CVE-2024-21653/66728",
-            "specs": [
-                "<4.2.0"
-            ],
-            "v": "<4.2.0"
-        },
         {
             "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).  It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks.  Version 4.2.0 patches this vulnerability.",
             "cve": "CVE-2024-21671",
@@ -181192,10 +185691,10 @@
             "v": "<4.2.0"
         },
         {
-            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). There are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a task with sensitive input data that will then be stored unencrypted in a database.  Users should ensure they set the encryption setting correctly.  This vulnerability is patched in 4.2.0.",
-            "cve": "CVE-2024-22193",
-            "id": "pyup.io-66724",
-            "more_info_path": "/vulnerabilities/CVE-2024-22193/66724",
+            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).  Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not exposed so there is no risk, but not all deployments are ideal. The default should therefore be less permissive.  The vulnerability can be mitigated by removing the ssh part from the docker file and rebuilding the docker image.  Version 4.2.0 patches the vulnerability.",
+            "cve": "CVE-2024-21653",
+            "id": "pyup.io-66728",
+            "more_info_path": "/vulnerabilities/CVE-2024-21653/66728",
             "specs": [
                 "<4.2.0"
             ],
@@ -181210,6 +185709,16 @@
                 "<4.2.0"
             ],
             "v": "<4.2.0"
+        },
+        {
+            "advisory": "The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). There are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a task with sensitive input data that will then be stored unencrypted in a database.  Users should ensure they set the encryption setting correctly.  This vulnerability is patched in 4.2.0.",
+            "cve": "CVE-2024-22193",
+            "id": "pyup.io-66724",
+            "more_info_path": "/vulnerabilities/CVE-2024-22193/66724",
+            "specs": [
+                "<4.2.0"
+            ],
+            "v": "<4.2.0"
         }
     ],
     "vault-cli": [
@@ -181272,6 +185781,18 @@
             "v": "<0.1.2"
         }
     ],
+    "verbs": [
+        {
+            "advisory": "Verbs 0.4.1 has updated its h2 library from version 0.3.25 to 0.3.26 to address a security concern related to Denial of Service (DoS) vulnerabilities.",
+            "cve": "PVE-2024-67588",
+            "id": "pyup.io-67588",
+            "more_info_path": "/vulnerabilities/PVE-2024-67588/67588",
+            "specs": [
+                "<0.4.1"
+            ],
+            "v": "<0.4.1"
+        }
+    ],
     "verifone": [
         {
             "advisory": "Verifone 0.1.8 updates its dependecy 'pyyaml' to v4.2b1 to include a security fix.",
@@ -181570,6 +186091,16 @@
                 "<1.5"
             ],
             "v": "<1.5"
+        },
+        {
+            "advisory": "Virtualenv version 20.21.0 addresses a race condition in `virtualenv.cli_run` where a `FileNotFoundError` could occur for a JSON file in `pypa/virtualenv/py_info/1`. This error happens if the underlying interpreter is updated, causing the JSON file to be deleted and rewritten.",
+            "cve": "PVE-2024-68477",
+            "id": "pyup.io-68477",
+            "more_info_path": "/vulnerabilities/PVE-2024-68477/68477",
+            "specs": [
+                "<20.21.0"
+            ],
+            "v": "<20.21.0"
         }
     ],
     "virtualnv": [
@@ -181715,6 +186246,18 @@
             "v": "<3.6.0"
         }
     ],
+    "vizable": [
+        {
+            "advisory": "Vizable version 0.12.0 addresses a security issue by updating the `idna` package from version 3.6 to 3.7.",
+            "cve": "PVE-2024-70374",
+            "id": "pyup.io-70374",
+            "more_info_path": "/vulnerabilities/PVE-2024-70374/70374",
+            "specs": [
+                "<0.12.0"
+            ],
+            "v": "<0.12.0"
+        }
+    ],
     "vizro": [
         {
             "advisory": "Vizro 0.1.4 updates 'pydantic' requirement to '>=1.10.13, <2' to include a security fix.",
@@ -181785,6 +186328,50 @@
             "v": "<1.5.2"
         }
     ],
+    "vng-api-common": [
+        {
+            "advisory": "This vulnerability involves a theoretical privilege escalation issue within the PyJWT library due to the way client-supplied JSON Web Tokens (JWTs) are verified against an allow-list of known algorithms, effectively preventing the use of invalid algorithms. The issue is rooted in the potential for manipulating JWTs by exploiting the `alg` header field, which specifies the algorithm used for the token's cryptographic signature. Despite the potential risk for privilege escalation, which could allow attackers to impersonate any client without detection, the vulnerability is deemed non-exploitable as PyJWT does not support the use of substrings of \"HS256\" as valid algorithms. Consequently, no specific mitigation actions are required, but caution is advised when updating PyJWT to ensure that only acceptable algorithms are specified and used.",
+            "cve": "PVE-2024-68086",
+            "id": "pyup.io-68086",
+            "more_info_path": "/vulnerabilities/PVE-2024-68086/68086",
+            "specs": [
+                "<=2.0.5"
+            ],
+            "v": "<=2.0.5"
+        },
+        {
+            "advisory": "Versions of software utilizing the PyJWT library are susceptible to a theoretical privilege escalation due to a non-exploitable weakness in client-supplied JWT verification. Despite using an explicit allow-list of algorithms preventing the use of invalid ones, a hypothetical scenario was identified where, without such a mechanism, tampered client JWTs could lead to an attacker impersonating any client without detection. The JWT verification issue stems from the handling of the algorithm specified in the JWT header, specifically the use of a string for algorithm names rather than a strict list, potentially allowing any substring matching to pass verification checks. However, this vulnerability is considered non-exploitable since PyJWT does not support algorithm substrings that would exploit this issue.",
+            "cve": "PVE-2024-68498",
+            "id": "pyup.io-68498",
+            "more_info_path": "/vulnerabilities/PVE-2024-68498/68498",
+            "specs": [
+                "<=2.0.5"
+            ],
+            "v": "<=2.0.5"
+        }
+    ],
+    "vng-api-common-utrecht": [
+        {
+            "advisory": "A privilege escalation vulnerability has been detected in versions of the PyJWT library due to how client-supplied JSON Web Tokens (JWTs) are verified. Despite being theoretically possible, this vulnerability is considered non-exploitable because the library uses an explicit allow-list of known algorithms to validate JWTs, automatically rejecting invalid or tampered user-supplied algorithms that could otherwise lead to impersonation attacks. It is important for users to ensure that when updating the PyJWT library, the configuration does not specify any invalid algorithms or those not explicitly intended for use.",
+            "cve": "PVE-2024-68087",
+            "id": "pyup.io-68087",
+            "more_info_path": "/vulnerabilities/PVE-2024-68087/68087",
+            "specs": [
+                "<=1.3.2"
+            ],
+            "v": "<=1.3.2"
+        },
+        {
+            "advisory": "Versions of software utilizing the PyJWT library are susceptible to a theoretical privilege escalation due to a non-exploitable weakness in client-supplied JWT verification. Despite using an explicit allow-list of algorithms preventing the use of invalid ones, a hypothetical scenario was identified where, without such a mechanism, tampered client JWTs could lead to an attacker impersonating any client without detection. The JWT verification issue stems from the handling of the algorithm specified in the JWT header, specifically the use of a string for algorithm names rather than a strict list, potentially allowing any substring matching to pass verification checks. However, this vulnerability is considered non-exploitable since PyJWT does not support algorithm substrings that would exploit this issue.",
+            "cve": "PVE-2024-68500",
+            "id": "pyup.io-68500",
+            "more_info_path": "/vulnerabilities/PVE-2024-68500/68500",
+            "specs": [
+                "<=1.3.2"
+            ],
+            "v": "<=1.3.2"
+        }
+    ],
     "volcengine": [
         {
             "advisory": "Volcengine 1.0.62 updates APIs to prevent injection attacks.\r\nhttps://github.com/volcengine/volc-sdk-python/commit/7f00052c6687ba31dca771c27b36bda8c676e847",
@@ -182015,30 +186602,30 @@
             "v": "<0.3.10"
         },
         {
-            "advisory": "Vyper 0.3.10 includes a fix for CVE-2023-41052: In affected versions the order of evaluation of the arguments of the builtin functions 'uint256_addmod', 'uint256_mulmod', 'ecadd' and 'ecmul' does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on. A patch is currently being developed on pull request #3583. When using builtins from the list above, users should make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.\r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-4hg4-9mf5-wxxq",
-            "cve": "CVE-2023-41052",
-            "id": "pyup.io-60966",
-            "more_info_path": "/vulnerabilities/CVE-2023-41052/60966",
+            "advisory": "Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read position to overflow. This results in the decoding of values outside the intended array bounds, potentially leading to exploitations in contracts that use arrays within `_abi_decode`. This vulnerability affects 0.3.10 and earlier versions. See CVE-2024-26149.",
+            "cve": "CVE-2024-26149",
+            "id": "pyup.io-65700",
+            "more_info_path": "/vulnerabilities/CVE-2024-26149/65700",
             "specs": [
                 "<0.3.10"
             ],
             "v": "<0.3.10"
         },
         {
-            "advisory": "Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read position to overflow. This results in the decoding of values outside the intended array bounds, potentially leading to exploitations in contracts that use arrays within `_abi_decode`. This vulnerability affects 0.3.10 and earlier versions. See CVE-2024-26149.",
-            "cve": "CVE-2024-26149",
-            "id": "pyup.io-65700",
-            "more_info_path": "/vulnerabilities/CVE-2024-26149/65700",
+            "advisory": "Vyper 0.3.10 includes a fix for CVE-2023-41052: In affected versions the order of evaluation of the arguments of the builtin functions 'uint256_addmod', 'uint256_mulmod', 'ecadd' and 'ecmul' does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on. A patch is currently being developed on pull request #3583. When using builtins from the list above, users should make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.\r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-4hg4-9mf5-wxxq",
+            "cve": "CVE-2023-41052",
+            "id": "pyup.io-60966",
+            "more_info_path": "/vulnerabilities/CVE-2023-41052/60966",
             "specs": [
                 "<0.3.10"
             ],
             "v": "<0.3.10"
         },
         {
-            "advisory": "Vyper 0.3.2 includes a fix for CVE-2022-24787: In version 0.3.1 and prior, bytestrings can have dirty bytes in them, resulting in the word-for-word comparisons giving incorrect results. Even without dirty nonzero bytes, two bytestrings can compare to equal if one ends with \"\\x00\" because there is no comparison of the length. \r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-7vrm-3jc8-5wwm",
-            "cve": "CVE-2022-24787",
-            "id": "pyup.io-47973",
-            "more_info_path": "/vulnerabilities/CVE-2022-24787/47973",
+            "advisory": "Vyper 0.3.2 includes a fix for CVE-2022-24845: In affected versions, the return of '<iface>.returns_int128()' is not validated to fall within the bounds of 'int128'. This issue can result in a misinterpretation of the integer value and lead to incorrect behavior. As of v0.3.0, '<iface>.returns_int128()' is validated in simple expressions, but not complex expressions.\r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-j2x6-9323-fp7h",
+            "cve": "CVE-2022-24845",
+            "id": "pyup.io-48133",
+            "more_info_path": "/vulnerabilities/CVE-2022-24845/48133",
             "specs": [
                 "<0.3.2"
             ],
@@ -182055,10 +186642,10 @@
             "v": "<0.3.2"
         },
         {
-            "advisory": "Vyper 0.3.2 includes a fix for CVE-2022-24845: In affected versions, the return of '<iface>.returns_int128()' is not validated to fall within the bounds of 'int128'. This issue can result in a misinterpretation of the integer value and lead to incorrect behavior. As of v0.3.0, '<iface>.returns_int128()' is validated in simple expressions, but not complex expressions.\r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-j2x6-9323-fp7h",
-            "cve": "CVE-2022-24845",
-            "id": "pyup.io-48133",
-            "more_info_path": "/vulnerabilities/CVE-2022-24845/48133",
+            "advisory": "Vyper 0.3.2 includes a fix for CVE-2022-24787: In version 0.3.1 and prior, bytestrings can have dirty bytes in them, resulting in the word-for-word comparisons giving incorrect results. Even without dirty nonzero bytes, two bytestrings can compare to equal if one ends with \"\\x00\" because there is no comparison of the length. \r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-7vrm-3jc8-5wwm",
+            "cve": "CVE-2022-24787",
+            "id": "pyup.io-47973",
+            "more_info_path": "/vulnerabilities/CVE-2022-24787/47973",
             "specs": [
                 "<0.3.2"
             ],
@@ -182074,6 +186661,16 @@
             ],
             "v": "<0.3.4"
         },
+        {
+            "advisory": "Vyper 0.3.8 includes a fix for CVE-2023-32058: Prior to version 0.3.8, due to missing overflow check for loop variables, by assigning the iterator of a loop to a variable, it is possible to overflow the type of the latter. The issue seems to happen only in loops of type 'for i in range(a, a + N)' as in loops of type 'for i in range(start, stop)' and 'for i in range(stop)', the compiler is able to raise a 'TypeMismatch' when trying to overflow the variable.\r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-6r8q-pfpv-7cgj",
+            "cve": "CVE-2023-32058",
+            "id": "pyup.io-58659",
+            "more_info_path": "/vulnerabilities/CVE-2023-32058/58659",
+            "specs": [
+                "<0.3.8"
+            ],
+            "v": "<0.3.8"
+        },
         {
             "advisory": "Vyper 0.3.8 includes a fix for CVE-2023-32675: In contracts with more than one regular nonpayable function, it is possible to send funds to the default function, even if the default function is marked 'nonpayable'. This applies to contracts compiled with vyper versions prior to 0.3.8. This issue was fixed by the removal of the global 'calldatasize' check in commit '02339dfda'. Users unable to upgrade should avoid use of nonpayable default functions.\r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-vxmm-cwh2-q762",
             "cve": "CVE-2023-32675",
@@ -182114,16 +186711,6 @@
             ],
             "v": "<0.3.8"
         },
-        {
-            "advisory": "Vyper 0.3.8 includes a fix for CVE-2023-32058: Prior to version 0.3.8, due to missing overflow check for loop variables, by assigning the iterator of a loop to a variable, it is possible to overflow the type of the latter. The issue seems to happen only in loops of type 'for i in range(a, a + N)' as in loops of type 'for i in range(start, stop)' and 'for i in range(stop)', the compiler is able to raise a 'TypeMismatch' when trying to overflow the variable.\r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-6r8q-pfpv-7cgj",
-            "cve": "CVE-2023-32058",
-            "id": "pyup.io-58659",
-            "more_info_path": "/vulnerabilities/CVE-2023-32058/58659",
-            "specs": [
-                "<0.3.8"
-            ],
-            "v": "<0.3.8"
-        },
         {
             "advisory": "A security flaw was detected in Vyper up to version 0.1.0b16. The vulnerability arises when interfaces return integer types smaller than 256 bits and uint256 is employed, allowing for potential manipulation.",
             "cve": "PVE-2023-99970",
@@ -182134,16 +186721,6 @@
             ],
             "v": "<=0.1.0b16"
         },
-        {
-            "advisory": "Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack management when compiling the `IR` for `sha3_64`. Concretely, the `height` variable is miscalculated. The vulnerability can't be triggered without writing the `IR` by hand (that is, it cannot be triggered from regular vyper code). `sha3_64` is used for retrieval in mappings. No flow that would cache the `key` was found so the issue shouldn't be possible to trigger when compiling the compiler-generated `IR`. This issue isn't triggered during normal compilation of vyper code so the impact is low. At the time of publication there is no patch available. See CVE-2024-24559.",
-            "cve": "CVE-2024-24559",
-            "id": "pyup.io-65288",
-            "more_info_path": "/vulnerabilities/CVE-2024-24559/65288",
-            "specs": [
-                "<=0.3.10"
-            ],
-            "v": "<=0.3.10"
-        },
         {
             "advisory": "Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an `int` as an index for an array. The typechecker allows the usage of signed integers to be used as indexes to arrays. The vulnerability is present in different forms in all versions, including `0.3.10`. For ints, the 2's complement representation is used. Because the array was declared very large, the bounds checking will pass Negative values will simply be represented as very large numbers. As of time of publication, a fixed version does not exist.\r\nThere are three potential vulnerability classes: unpredictable behavior, accessing inaccessible elements and denial of service. Class 1: If it is possible to index an array with a negative integer without reverting, this is most likely not anticipated by the developer and such accesses can cause unpredictable behavior for the contract. Class 2: If a contract has an invariant in the form `assert index < x`, the developer will suppose that no elements on indexes `y | y >= x` are accessible. However, by using negative indexes, this can be bypassed. Class 3: If the index is dependent on the state of the contract, this poses a risk of denial of service. If the state of the contract can be manipulated in such way that the index will be forced to be negative, the array access can always revert (because most likely the array won't be declared extremely large). However, all these the scenarios are highly unlikely. Most likely behavior is a revert on the bounds check.",
             "cve": "CVE-2024-24563",
@@ -182155,10 +186732,10 @@
             "v": "<=0.3.10"
         },
         {
-            "advisory": "Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Vyper compiler allows passing a value in builtin raw_call even if the call is a delegatecall or a staticcall. But in the context of delegatecall and staticcall the handling of value is not possible due to the semantics of the respective opcodes, and vyper will silently ignore the value= argument. If the semantics of the EVM are unknown to the developer, he could suspect that by specifying the `value` kwarg, exactly the given amount will be sent along to the target. This vulnerability affects 0.3.10 and earlier versions. See CVE-2024-24567.",
-            "cve": "CVE-2024-24567",
-            "id": "pyup.io-65292",
-            "more_info_path": "/vulnerabilities/CVE-2024-24567/65292",
+            "advisory": "Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack management when compiling the `IR` for `sha3_64`. Concretely, the `height` variable is miscalculated. The vulnerability can't be triggered without writing the `IR` by hand (that is, it cannot be triggered from regular vyper code). `sha3_64` is used for retrieval in mappings. No flow that would cache the `key` was found so the issue shouldn't be possible to trigger when compiling the compiler-generated `IR`. This issue isn't triggered during normal compilation of vyper code so the impact is low. At the time of publication there is no patch available. See CVE-2024-24559.",
+            "cve": "CVE-2024-24559",
+            "id": "pyup.io-65288",
+            "more_info_path": "/vulnerabilities/CVE-2024-24559/65288",
             "specs": [
                 "<=0.3.10"
             ],
@@ -182185,20 +186762,30 @@
             "v": "<=0.3.10"
         },
         {
-            "advisory": "Vyper, in versions <=0.3.10, has a memory buffer overflow issue. The concat function could overwrite valid data due to incorrect adherence to the copy_bytes function's API in builds >=0.3.2. This overflow, dependent on the length, could alter contract semantics, potentially unnoticed during testing. Not all concat uses were affected, as it required specific conditions like being in an internal function near a return statement without other memory allocations. Though no vulnerable contracts in production were found, the issue is fixed in commit 55e18f6d1.\r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-2q8v-3gqq-4f8p",
-            "cve": "CVE-2024-22419",
-            "id": "pyup.io-64458",
-            "more_info_path": "/vulnerabilities/CVE-2024-22419/64458",
+            "advisory": "Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte array to extract `32` bytes from, it could be that some dirty memory is read and returned by `extract32`. This vulnerability affects 0.3.10 and earlier versions. See CVE-2024-24564.",
+            "cve": "CVE-2024-24564",
+            "id": "pyup.io-65695",
+            "more_info_path": "/vulnerabilities/CVE-2024-24564/65695",
             "specs": [
                 "<=0.3.10"
             ],
             "v": "<=0.3.10"
         },
         {
-            "advisory": "Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte array to extract `32` bytes from, it could be that some dirty memory is read and returned by `extract32`. This vulnerability affects 0.3.10 and earlier versions. See CVE-2024-24564.",
-            "cve": "CVE-2024-24564",
-            "id": "pyup.io-65695",
-            "more_info_path": "/vulnerabilities/CVE-2024-24564/65695",
+            "advisory": "Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Vyper compiler allows passing a value in builtin raw_call even if the call is a delegatecall or a staticcall. But in the context of delegatecall and staticcall the handling of value is not possible due to the semantics of the respective opcodes, and vyper will silently ignore the value= argument. If the semantics of the EVM are unknown to the developer, he could suspect that by specifying the `value` kwarg, exactly the given amount will be sent along to the target. This vulnerability affects 0.3.10 and earlier versions. See CVE-2024-24567.",
+            "cve": "CVE-2024-24567",
+            "id": "pyup.io-65292",
+            "more_info_path": "/vulnerabilities/CVE-2024-24567/65292",
+            "specs": [
+                "<=0.3.10"
+            ],
+            "v": "<=0.3.10"
+        },
+        {
+            "advisory": "Vyper, in versions <=0.3.10, has a memory buffer overflow issue. The concat function could overwrite valid data due to incorrect adherence to the copy_bytes function's API in builds >=0.3.2. This overflow, dependent on the length, could alter contract semantics, potentially unnoticed during testing. Not all concat uses were affected, as it required specific conditions like being in an internal function near a return statement without other memory allocations. Though no vulnerable contracts in production were found, the issue is fixed in commit 55e18f6d1.\r\nhttps://github.com/vyperlang/vyper/security/advisories/GHSA-2q8v-3gqq-4f8p",
+            "cve": "CVE-2024-22419",
+            "id": "pyup.io-64458",
+            "more_info_path": "/vulnerabilities/CVE-2024-22419/64458",
             "specs": [
                 "<=0.3.10"
             ],
@@ -182879,16 +187466,6 @@
             ],
             "v": "<0.12.12"
         },
-        {
-            "advisory": "Wandb 0.12.18 updates its dependency 'urllib3' to v1.26.5 to include security fixes.",
-            "cve": "CVE-2020-7212",
-            "id": "pyup.io-49370",
-            "more_info_path": "/vulnerabilities/CVE-2020-7212/49370",
-            "specs": [
-                "<0.12.18"
-            ],
-            "v": "<0.12.18"
-        },
         {
             "advisory": "Wandb 0.12.18 updates its dependency 'rsa' to v4.7 to include security fixes.",
             "cve": "CVE-2020-13757",
@@ -182910,10 +187487,10 @@
             "v": "<0.12.18"
         },
         {
-            "advisory": "Wandb 0.12.18 updates its dependency 'urllib3' to v1.26.5 to include security fixes.",
-            "cve": "CVE-2020-26137",
-            "id": "pyup.io-49368",
-            "more_info_path": "/vulnerabilities/CVE-2020-26137/49368",
+            "advisory": "Wandb 0.12.18 updates its dependency 'httplib2' to v0.19.0 to include security fixes.",
+            "cve": "CVE-2021-21240",
+            "id": "pyup.io-49358",
+            "more_info_path": "/vulnerabilities/CVE-2021-21240/49358",
             "specs": [
                 "<0.12.18"
             ],
@@ -182921,9 +187498,9 @@
         },
         {
             "advisory": "Wandb 0.12.18 updates its dependency 'httplib2' to v0.19.0 to include security fixes.",
-            "cve": "CVE-2021-21240",
-            "id": "pyup.io-49358",
-            "more_info_path": "/vulnerabilities/CVE-2021-21240/49358",
+            "cve": "CVE-2020-11078",
+            "id": "pyup.io-49365",
+            "more_info_path": "/vulnerabilities/CVE-2020-11078/49365",
             "specs": [
                 "<0.12.18"
             ],
@@ -182931,19 +187508,29 @@
         },
         {
             "advisory": "Wandb 0.12.18 updates its dependency 'urllib3' to v1.26.5 to include security fixes.",
-            "cve": "CVE-2021-33503",
-            "id": "pyup.io-49369",
-            "more_info_path": "/vulnerabilities/CVE-2021-33503/49369",
+            "cve": "CVE-2020-26137",
+            "id": "pyup.io-49368",
+            "more_info_path": "/vulnerabilities/CVE-2020-26137/49368",
             "specs": [
                 "<0.12.18"
             ],
             "v": "<0.12.18"
         },
         {
-            "advisory": "Wandb 0.12.18 updates its dependency 'httplib2' to v0.19.0 to include security fixes.",
-            "cve": "CVE-2020-11078",
-            "id": "pyup.io-49365",
-            "more_info_path": "/vulnerabilities/CVE-2020-11078/49365",
+            "advisory": "Wandb 0.12.18 updates its dependency 'urllib3' to v1.26.5 to include security fixes.",
+            "cve": "CVE-2020-7212",
+            "id": "pyup.io-49370",
+            "more_info_path": "/vulnerabilities/CVE-2020-7212/49370",
+            "specs": [
+                "<0.12.18"
+            ],
+            "v": "<0.12.18"
+        },
+        {
+            "advisory": "Wandb 0.12.18 updates its dependency 'urllib3' to v1.26.5 to include security fixes.",
+            "cve": "CVE-2021-33503",
+            "id": "pyup.io-49369",
+            "more_info_path": "/vulnerabilities/CVE-2021-33503/49369",
             "specs": [
                 "<0.12.18"
             ],
@@ -183097,20 +187684,20 @@
             "v": "<3.0.0"
         },
         {
-            "advisory": "Wasmtime (Python bindings) 7.0.0 downloads a precompiled version of Wastime core that includes security fixes.\r\nhttps://github.com/bytecodealliance/wasmtime-py/commit/4a52ebbe0a7e577721a30a38170b7472aa153329",
-            "cve": "CVE-2023-27477",
-            "id": "pyup.io-53756",
-            "more_info_path": "/vulnerabilities/CVE-2023-27477/53756",
+            "advisory": "Wasmtime (Python bindings) 7.0.0 downloads a precompiled version of Wasmtime core that includes security fixes.\r\nhttps://github.com/bytecodealliance/wasmtime-py/commit/4a52ebbe0a7e577721a30a38170b7472aa153329",
+            "cve": "CVE-2023-26489",
+            "id": "pyup.io-53755",
+            "more_info_path": "/vulnerabilities/CVE-2023-26489/53755",
             "specs": [
                 "<7.0.0"
             ],
             "v": "<7.0.0"
         },
         {
-            "advisory": "Wasmtime (Python bindings) 7.0.0 downloads a precompiled version of Wasmtime core that includes security fixes.\r\nhttps://github.com/bytecodealliance/wasmtime-py/commit/4a52ebbe0a7e577721a30a38170b7472aa153329",
-            "cve": "CVE-2023-26489",
-            "id": "pyup.io-53755",
-            "more_info_path": "/vulnerabilities/CVE-2023-26489/53755",
+            "advisory": "Wasmtime (Python bindings) 7.0.0 downloads a precompiled version of Wastime core that includes security fixes.\r\nhttps://github.com/bytecodealliance/wasmtime-py/commit/4a52ebbe0a7e577721a30a38170b7472aa153329",
+            "cve": "CVE-2023-27477",
+            "id": "pyup.io-53756",
+            "more_info_path": "/vulnerabilities/CVE-2023-27477/53756",
             "specs": [
                 "<7.0.0"
             ],
@@ -183276,16 +187863,6 @@
             ],
             "v": "<12.9.3"
         },
-        {
-            "advisory": "Wdmtoolbox 12.9.3 pins the dependency 'numpy>=1.22.2' to include security fixes.",
-            "cve": "CVE-2021-41495",
-            "id": "pyup.io-49447",
-            "more_info_path": "/vulnerabilities/CVE-2021-41495/49447",
-            "specs": [
-                "<12.9.3"
-            ],
-            "v": "<12.9.3"
-        },
         {
             "advisory": "Wdmtoolbox 12.9.3 pins the dependency 'pygments>=2.7.4' to include security fixes.",
             "cve": "CVE-2021-27291",
@@ -183306,6 +187883,16 @@
             ],
             "v": "<12.9.3"
         },
+        {
+            "advisory": "Wdmtoolbox 12.9.3 pins the dependency 'numpy>=1.22.2' to include security fixes.",
+            "cve": "CVE-2021-41495",
+            "id": "pyup.io-49447",
+            "more_info_path": "/vulnerabilities/CVE-2021-41495/49447",
+            "specs": [
+                "<12.9.3"
+            ],
+            "v": "<12.9.3"
+        },
         {
             "advisory": "Wdmtoolbox 12.9.3 pins the dependency 'numpy>=1.22.2' to include security fixes.",
             "cve": "CVE-2020-11023",
@@ -183390,6 +187977,16 @@
         }
     ],
     "web2py": [
+        {
+            "advisory": "web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/template_examples/beautify.  NOTE: this issue can be leveraged by remote attackers to gain administrative access.",
+            "cve": "CVE-2016-3952",
+            "id": "pyup.io-70561",
+            "more_info_path": "/vulnerabilities/CVE-2016-3952/70561",
+            "specs": [
+                "<2.14.1"
+            ],
+            "v": "<2.14.1"
+        },
         {
             "advisory": "The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryption_key.",
             "cve": "CVE-2016-3957",
@@ -183430,6 +188027,26 @@
             ],
             "v": "<2.14.6"
         },
+        {
+            "advisory": "Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files.",
+            "cve": "CVE-2016-4806",
+            "id": "pyup.io-70528",
+            "more_info_path": "/vulnerabilities/CVE-2016-4806/70528",
+            "specs": [
+                "<=2.14.5"
+            ],
+            "v": "<=2.14.5"
+        },
+        {
+            "advisory": "Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).",
+            "cve": "CVE-2016-4807",
+            "id": "pyup.io-70529",
+            "more_info_path": "/vulnerabilities/CVE-2016-4807/70529",
+            "specs": [
+                "<=2.14.5"
+            ],
+            "v": "<=2.14.5"
+        },
         {
             "advisory": "Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker can trick an victim to disable the installed application just by sending a URL to victim.",
             "cve": "CVE-2016-4808",
@@ -183440,6 +188057,16 @@
             ],
             "v": "<=2.14.5"
         },
+        {
+            "advisory": "A vulnerability in versions of web2py up to 2.24.1 involves an OS command injection risk when configured to use notifySendHandler for logging. This condition allows for the execution of arbitrary OS commands on the web server via specially crafted web requests.",
+            "cve": "CVE-2023-45158",
+            "id": "pyup.io-70381",
+            "more_info_path": "/vulnerabilities/CVE-2023-45158/70381",
+            "specs": [
+                "<=2.24.1"
+            ],
+            "v": "<=2.24.1"
+        },
         {
             "advisory": "Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the _next parameter to user/logout.",
             "cve": "CVE-2015-6961",
@@ -184147,6 +188774,16 @@
             ],
             "v": "<0.7.2"
         },
+        {
+            "advisory": "Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and passes them to the `send` method which sends a GET request on lines 339-343 in `request.py`, which leads to a server-side request forgery. This issue allows for crafting GET requests to internal and external resources on behalf of the server. For example, this issue would allow for accessing resources on the internal network that the server has access to, even though these resources may not be accessible on the internet. This issue is fixed in version 0.8.4.",
+            "cve": "CVE-2024-22203",
+            "id": "pyup.io-70405",
+            "more_info_path": "/vulnerabilities/CVE-2024-22203/70405",
+            "specs": [
+                "<0.8.4"
+            ],
+            "v": "<0.8.4"
+        },
         {
             "advisory": "Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize user-supplied input from the `location` variable and passes it to the `send` method which sends a `GET` request on lines 339-343 in `request.py,` which leads to a server-side request forgery. This issue allows for crafting GET requests to internal and external resources on behalf of the server. For example, this issue would allow for accessing resources on the internal network that the server has access to, even though these resources may not be accessible on the internet. This issue is fixed in version 0.8.4.",
             "cve": "CVE-2024-22205",
@@ -184377,6 +189014,18 @@
             "v": "<2.0.4"
         }
     ],
+    "wolfcrypt": [
+        {
+            "advisory": "wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about the nonces used and potentially mount a lattice attack to recover the private key used. The issue occurs because ecc.c scalar multiplication might leak the bit length.",
+            "cve": "CVE-2019-13628",
+            "id": "pyup.io-70562",
+            "more_info_path": "/vulnerabilities/CVE-2019-13628/70562",
+            "specs": [
+                "<=4.0.0"
+            ],
+            "v": "<=4.0.0"
+        }
+    ],
     "wolkenbrot": [
         {
             "advisory": "Wolkenbrot 0.3 updates its dependency 'cryptography' to v3.3.2 to include security fixes.",
@@ -184673,6 +189322,18 @@
             "v": "<=0.25"
         }
     ],
+    "xiaogpt": [
+        {
+            "advisory": "Xiaogpt version 2.31 is susceptible to a denial of service vulnerability due to issues with how idna.encode handles specially crafted inputs.",
+            "cve": "CVE-2022-45061",
+            "id": "pyup.io-67881",
+            "more_info_path": "/vulnerabilities/CVE-2022-45061/67881",
+            "specs": [
+                "<2.31"
+            ],
+            "v": "<2.31"
+        }
+    ],
     "xknx": [
         {
             "advisory": "Xknx 2.0.0 updates its dependency 'cryptography' to v38.0.3 to include security fixes.",
@@ -184719,20 +189380,20 @@
             "v": "<3.12.4"
         },
         {
-            "advisory": "Some versions of xml2rfc are susceptible to Cross-site Scripting (XSS) through script elements embedded in SVG sources.",
-            "cve": "PVE-2024-99823",
-            "id": "pyup.io-65606",
-            "more_info_path": "/vulnerabilities/PVE-2024-99823/65606",
+            "advisory": "Xml2rfc 3.12.4 includes a security fix: xml2rfc allows 'script' elements in SVG sources. In HTML output having these script elements can lead to XSS attacks.",
+            "cve": "PVE-2023-55196",
+            "id": "pyup.io-55196",
+            "more_info_path": "/vulnerabilities/PVE-2023-55196/55196",
             "specs": [
                 ">=0,<3.12.4"
             ],
             "v": ">=0,<3.12.4"
         },
         {
-            "advisory": "Xml2rfc 3.12.4 includes a security fix: xml2rfc allows 'script' elements in SVG sources. In HTML output having these script elements can lead to XSS attacks.",
-            "cve": "PVE-2023-55196",
-            "id": "pyup.io-55196",
-            "more_info_path": "/vulnerabilities/PVE-2023-55196/55196",
+            "advisory": "Some versions of xml2rfc are susceptible to Cross-site Scripting (XSS) through script elements embedded in SVG sources.",
+            "cve": "PVE-2024-99823",
+            "id": "pyup.io-65606",
+            "more_info_path": "/vulnerabilities/PVE-2024-99823/65606",
             "specs": [
                 ">=0,<3.12.4"
             ],
@@ -185465,6 +190126,16 @@
             ],
             "v": "<2023.09.24"
         },
+        {
+            "advisory": "Yt-dlp version 2024.04.09 addresses CVE-2024-22423 by enhancing the patch for a previous vulnerability, CVE-2023-40581, related to the --exec option and %q. This version introduces a more effective escaping method for the percent symbol to prevent environment variable expansion and potential remote code execution (RCE) risks. Users are advised to update to this latest version for improved security, especially when utilizing the --exec option, to safeguard against potential misuse of unvalidated input in shell commands.",
+            "cve": "CVE-2024-22423",
+            "id": "pyup.io-67569",
+            "more_info_path": "/vulnerabilities/CVE-2024-22423/67569",
+            "specs": [
+                "<2024.04.09"
+            ],
+            "v": "<2024.04.09"
+        },
         {
             "advisory": "Yt-dlp 2023.11.14 includes a fix for CVE-2023-46121: Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection.\r\nhttps://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-3ch3-jhc6-5r8x",
             "cve": "CVE-2023-46121",
@@ -185559,6 +190230,18 @@
             "v": "<1.0.2,==1.1.0"
         }
     ],
+    "zanshin-sdk-python": [
+        {
+            "advisory": "Zanshin-sdk-python version 1.2.5 has upgraded its httpx library to version 0.23.0 to address the security vulnerability detailed in CVE-2021-41945.",
+            "cve": "CVE-2021-41945",
+            "id": "pyup.io-68468",
+            "more_info_path": "/vulnerabilities/CVE-2021-41945/68468",
+            "specs": [
+                "<1.2.5"
+            ],
+            "v": "<1.2.5"
+        }
+    ],
     "zanshincli": [
         {
             "advisory": "Zanshincli 1.2.7 updates its dependency 'httpx' to v0.23.0 to include a security fix.",
@@ -185689,6 +190372,36 @@
                 "<0.46.7"
             ],
             "v": "<0.46.7"
+        },
+        {
+            "advisory": "Zenml version 0.56.3 has broadened its compatibility with FastAPI, now requiring versions \">=0.75,<0.111\" to address the security concerns outlined in CVE-2024-24762.",
+            "cve": "CVE-2024-24762",
+            "id": "pyup.io-67571",
+            "more_info_path": "/vulnerabilities/CVE-2024-24762/67571",
+            "specs": [
+                "<0.56.3"
+            ],
+            "v": "<0.56.3"
+        },
+        {
+            "advisory": "Zenml version 0.56.3 updates its python-multipart dependency from \"~0.0.5\" to \"~0.0.9\" in response to GHSA-qf9m-vfgh-m389. This change addresses a vulnerability in python-multipart that impacts its use with FastAPI.",
+            "cve": "PVE-2024-67582",
+            "id": "pyup.io-67582",
+            "more_info_path": "/vulnerabilities/PVE-2024-67582/67582",
+            "specs": [
+                "<0.56.3"
+            ],
+            "v": "<0.56.3"
+        },
+        {
+            "advisory": "Zenml version 0.56.3 has upgraded its orjson dependency to \"~3.10.0\" from \"~3.8.3\" to mitigate the security issue identified in CVE-2024-27454.",
+            "cve": "CVE-2024-27454",
+            "id": "pyup.io-67583",
+            "more_info_path": "/vulnerabilities/CVE-2024-27454/67583",
+            "specs": [
+                "<0.56.3"
+            ],
+            "v": "<0.56.3"
         }
     ],
     "zeo": [