Skip to content
OpenAdvisories

Package · PyPI

fiona

2 known vulnerabilities.

2 results · Feed

  • Critical 9.8

    Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib

    ### Summary Vulnerability scan of fiona shows [CVE-2023-45853](https://nvd.nist.gov/vuln/detail/CVE-2023-45853). The vulnerability is in GDAL, a dependency of fiona. ### Details Fiona depends on GDAL and GDAL has a port of minizip. MiniZip in zlib through 1.3…

  • High 7.1

    Fiona affected by CVE-2020-14152 related to madler-zlib

    ### Summary Vulnerability scan of fiona shows [CVE-2020-14152](https://nvd.nist.gov/vuln/detail/CVE-2020-14152). The vulnerability is in libjpeg, a transitive dependency of fiona (via GDAL and PROJ). ### Details In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_a…