simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2019-19624 via opencv-python (3.4.16.59)

opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2019-19624 Source advisory: OSV:PYSEC-2026-2824...

simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2019-15939 via opencv-python (3.4.16.59)

opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2019-15939 Source advisory: OSV:PYSEC-2026-2822...

simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2019-14493 via opencv-python (3.4.16.59)

opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

CVE-2026-15185

Removed by vendor...

nxviz (>=0.2.0, <=0.2.7), reahl-component (>=4.0.0, <=4.0.1) +6 more potentially affected by CVE-2026-59890 via setuptools (32.3.1)

setuptools PYPI version 32.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - nxviz =0.2.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-34...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.29.0 Release.

Red Hat OpenShift Dev Spaces 3.29.0 has been released. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.29 release is based on...

GO-2026-5761 Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc...

python-dev-tools (>=2019.8.14, <=2019.8.24) potentially affected by CVE-2026-1703 via pip (19.2.2)

pip PYPI version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.8.14, =2019.8.24 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

chalice (>=1.2.3, <=1.6.0), httptesting (>=1.0.1, <=1.0.2) +4 more potentially affected by CVE-2026-1703 via pip (10.0.1)

pip PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.2.3, =1.0.1, =4.0.0, =4.0.0, =4.0.1 - zerv 0.1.0 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2026-1703 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2026-1703 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2026-1703 via pip (19.0.2)

pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

bitgrit-cloud (0.0.3a0), cloudformation-cli (>=0.1.0, <=0.1.1) +10 more potentially affected by CVE-2025-71176 via pytest (4.5.0)

pytest PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bitgrit-cloud 0.0.3a0 - cloudformation-cli =0.1.0, =1.0.0, =2019.5.13, =0.2.6, =0.9.4, =0.26.5, =0.1.1, =0.0.10, =0.0.11 Source cves: CVE-2025-71176...

getitfixed (>=1.0.0.dev20191121, <=1.0.0.dev20191126), neuroharmony (>=0.0.1, <=0.1.10) +2 more potentially affected by CVE-2025-71176 via pytest (5.1.3)

pytest PYPI version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - getitfixed =1.0.0.dev20191121, =0.0.1, =1.5.3, =1.18.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

python-dev-tools (2019.11.15) potentially affected by CVE-2025-71176 via pytest (5.2.3)

pytest PYPI version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - python-dev-tools 2019.11.15 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

dostoevsky (>=0.2.0, <=0.2.1), pytest-gherkin (>=0.1.4, <=0.1.6) +1 more potentially affected by CVE-2025-71176 via pytest (5.0.0)

pytest PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - dostoevsky =0.2.0, =0.1.4, =2019.6.29, =2019.7.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

alfrodull (0.1.0), bcdc-apitests (>=0.2.0, <=1.0.4) +4 more potentially affected by CVE-2025-71176 via pytest (4.6.2)

pytest PYPI version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - alfrodull 0.1.0 - bcdc-apitests =0.2.0, =0.2.6, =2019.6.4, =1.0.1, =1.0.7 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

ftw (>=1.2.3, <=1.2.4), python-dev-tools (2019.6.2) potentially affected by CVE-2025-71176 via pytest (4.6.0)

pytest PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - ftw =1.2.3, =1.2.4 - python-dev-tools 2019.6.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

python-dev-tools (>=2019.8.16, <=2019.8.19), styletransfer (>=0.8.0, <=0.8.2) potentially affected by CVE-2025-71176 via pytest (5.1.0)

pytest PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - python-dev-tools =2019.8.16, =0.8.0, =0.8.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

dialogy (>=0.2.3, <=0.9.20), flexlate-dev (>=0.1.0, <=0.19.0) +2 more potentially affected by CVE-2026-23986 via copier (5.1.0)

copier PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dialogy =0.2.3, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-23986 Source advisory: OSV:PYSEC-2026-1272...