9base_service_interconnect_1_4 vulnerabilities
CVEs whose affected-version data names the 9base_service_interconnect_1_4 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-6345High· 8.8pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)
A flaw was found in the package_index module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or …
▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 1.9%via CSAF
CVE-2024-37371Medium· 6.5⚖ disputedkrb5: GSS message token handling (CVE-2024-37371)
A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the toke…
▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 9)EPSS 1.9%via CSAF