CVE-2024-29156
2 advisories.
PyPI/yaql CVE-2024-29156: medium 6.5, EPSS 0.75%
Information leakage in YAQL
Action: Upgrade yaql to 3.0.0 or later.
pip install yaql==3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: GHSA-mvf6-hwxh-7v76
- https://nvd.nist.gov/vuln/detail/CVE-2024-29156
- https://bugs.launchpad.net/murano/+bug/2048114
- https://launchpad.net/bugs/2048114
- https://opendev.org/openstack/murano/tags
- https://opendev.org/openstack/yaql/commit/83e28324e1a0ce3970dd854393d2431123a909d3
- https://wiki.openstack.org/wiki/OSSN/OSSN-0093
CVE-2024-29156 · published · modified · JSON
PyPI/yaql CVE-2024-29156: medium 6.5, EPSS 0.75%
Information leakage in YAQL
Action: Upgrade yaql to 3.0.0 or later.
pip install yaql==3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: PYSEC-2026-2059
- https://nvd.nist.gov/vuln/detail/CVE-2024-29156
- https://bugs.launchpad.net/murano/+bug/2048114
- https://launchpad.net/bugs/2048114
- https://opendev.org/openstack/murano/tags
- https://opendev.org/openstack/yaql/commit/83e28324e1a0ce3970dd854393d2431123a909d3
- https://wiki.openstack.org/wiki/OSSN/OSSN-0093
- https://pypi.org/project/yaql
- https://github.com/advisories/GHSA-mvf6-hwxh-7v76
CVE-2024-29156 · published · modified · JSON