Search for packages
| purl | pkg:rpm/redhat/automation-controller@4.4.3-1?arch=el8ap |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-16je-k2yd-jydf
Aliases: CVE-2023-40267 GHSA-pr76-5cm5-w9cj PYSEC-2023-137 |
GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439. | There are no reported fixed by versions. |
|
VCID-u4f5-k68d-wfd1
Aliases: CVE-2023-23931 GHSA-w7pp-m8wf-vj6r PYSEC-2023-11 |
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T13:55:31.827407+00:00 | RedHat Importer | Affected by | VCID-u4f5-k68d-wfd1 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-23931.json | 38.0.0 |
| 2026-04-01T13:53:02.725903+00:00 | RedHat Importer | Affected by | VCID-16je-k2yd-jydf | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-40267.json | 38.0.0 |