chalice (>=1.2.3, <=1.6.0), httptesting (>=1.0.1, <=1.0.2) +4 more potentially affected by CVE-2026-1703 via pip (10.0.1)

pip PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.2.3, =1.0.1, =4.0.0, =4.0.0, =4.0.1 - zerv 0.1.0 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

python-dev-tools (>=2019.8.14, <=2019.8.24) potentially affected by CVE-2026-1703 via pip (19.2.2)

pip PYPI version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.8.14, =2019.8.24 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2026-1703 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2026-1703 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2026-1703 via pip (19.0.2)

pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

dialogy (>=0.2.3, <=0.9.20), flexlate-dev (>=0.1.0, <=0.19.0) +2 more potentially affected by CVE-2026-23968 via copier (5.1.0)

copier PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dialogy =0.2.3, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-23968 Source advisory: OSV:PYSEC-2026-1274...

bitgrit-cloud (0.0.3a0), cloudformation-cli (>=0.1.0, <=0.1.1) +10 more potentially affected by CVE-2025-71176 via pytest (4.5.0)

pytest PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bitgrit-cloud 0.0.3a0 - cloudformation-cli =0.1.0, =1.0.0, =2019.5.13, =0.2.6, =0.9.4, =0.26.5, =0.1.1, =0.0.10, =0.0.11 Source cves: CVE-2025-71176...

getitfixed (>=1.0.0.dev20191121, <=1.0.0.dev20191126), neuroharmony (>=0.0.1, <=0.1.10) +2 more potentially affected by CVE-2025-71176 via pytest (5.1.3)

pytest PYPI version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - getitfixed =1.0.0.dev20191121, =0.0.1, =1.5.3, =1.18.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

python-dev-tools (2019.11.15) potentially affected by CVE-2025-71176 via pytest (5.2.3)

pytest PYPI version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - python-dev-tools 2019.11.15 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

dostoevsky (>=0.2.0, <=0.2.1), pytest-gherkin (>=0.1.4, <=0.1.6) +1 more potentially affected by CVE-2025-71176 via pytest (5.0.0)

pytest PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - dostoevsky =0.2.0, =0.1.4, =2019.6.29, =2019.7.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

alfrodull (0.1.0), bcdc-apitests (>=0.2.0, <=1.0.4) +4 more potentially affected by CVE-2025-71176 via pytest (4.6.2)

pytest PYPI version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - alfrodull 0.1.0 - bcdc-apitests =0.2.0, =0.2.6, =2019.6.4, =1.0.1, =1.0.7 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

audalign (>=0.1.3, <=1.0.1), hp-procurvearuba (>=0.0.1, <=2.0.0) +1 more potentially affected by CVE-2025-71176 via pytest (6.2.0)

pytest PYPI version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - audalign =0.1.3, =0.0.1, =2.0.0 - inmanta-dev-dependencies 1.5.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

inmanta-dev-dependencies (2.67.0), nerv (0.1.1) +2 more potentially affected by CVE-2025-71176 via pytest (7.3.0)

pytest PYPI version 7.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - inmanta-dev-dependencies 2.67.0 - nerv 0.1.1 - nmmo =2.0.4, =4.13.22, =4.13.24 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

ftw (>=1.2.3, <=1.2.4), python-dev-tools (2019.6.2) potentially affected by CVE-2025-71176 via pytest (4.6.0)

pytest PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - ftw =1.2.3, =1.2.4 - python-dev-tools 2019.6.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

python-dev-tools (>=2019.8.16, <=2019.8.19), styletransfer (>=0.8.0, <=0.8.2) potentially affected by CVE-2025-71176 via pytest (5.1.0)

pytest PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - python-dev-tools =2019.8.16, =0.8.0, =0.8.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

django-clite (>=0.2.11, <=0.3.0), python-dev-tools (>=2019.11.20, <=2019.11.25) +1 more potentially affected by CVE-2025-71176 via pytest (5.3.0)

pytest PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - django-clite =0.2.11, =2019.11.20, =0.1.1, =0.1.3 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

dialogy (>=0.2.3, <=0.9.20), flexlate-dev (>=0.1.0, <=0.19.0) +2 more potentially affected by CVE-2026-23986 via copier (5.1.0)

copier PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dialogy =0.2.3, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-23986 Source advisory: OSV:PYSEC-2026-1272...

mask-anonymization-framework (>=1.2.0, <=1.3.2), python-dev-tools (2019.8.24) +2 more potentially affected by CVE-2025-71176 via pytest (5.1.1)

pytest PYPI version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mask-anonymization-framework =1.2.0, =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

bolinette (>=0.0.12, <=0.0.19), mlbackend (0.0.3) +6 more potentially affected by CVE-2025-71176 via pytest (5.3.1)

pytest PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bolinette =0.0.12, =0.0.2, =1.0.0, =2019.11.27, =0.0.12, =2019.12.13.0, =1.2.1, =1.2.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1...

aaz-dev (>=1.0.2, <=2.10.1), adminui (1.5.2) +190 more potentially affected by CVE-2025-66221 via werkzeug (2.1.2)

werkzeug PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aaz-dev =1.0.2, =1.5.2, =0.14.0, =0.0.1a0, =1.5.0, =1.1.1, =2.6.0, =1.0.5, =1.7.1, =1.3.0, =3.1.0, =1.45.0, =1.47.0 and more Source cves:...