Pyup Dependency Parser — known CVE vulnerabilities

Every CVE whose affected-product data names Pyup Dependency Parser, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-39280 — CVSS 5.9 (medium): dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a…