aaz-dev (>=1.0.2, <=2.10.1), adminui (1.5.2) +190 more potentially affected by CVE-2025-66221 via werkzeug (2.1.2)

werkzeug PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aaz-dev =1.0.2, =1.5.2, =0.14.0, =0.0.1a0, =1.5.0, =1.1.1, =2.6.0, =1.0.5, =1.7.1, =1.3.0, =3.1.0, =1.45.0, =1.47.0 and more Source cves:...

bbtext (0.1.0), casparser (0.5.4) +10 more potentially affected by CVE-2025-70559 via pdfminer-six (20211012.0.0)

pdfminer-six PYPI version 20211012.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bbtext 0.1.0 - casparser 0.5.4 - core-dev =0.1.0, =0.9.0, =2.3.0, =12.7.1, =0.5.7, =0.16.0, =1.66.13, =0.1.1, =0.3.1 Source cves:...

bbtext (0.1.0), casparser (0.5.4) +10 more potentially affected by CVE-2025-64512 via pdfminer-six (20211012.0.0)

pdfminer-six PYPI version 20211012.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bbtext 0.1.0 - casparser 0.5.4 - core-dev =0.1.0, =0.9.0, =2.3.0, =12.7.1, =0.5.7, =0.16.0, =1.66.13, =0.1.1, =0.3.1 Source cves:...

chalice (>=1.2.3, <=1.6.0), httptesting (>=1.0.1, <=1.0.2) +4 more potentially affected by CVE-2025-8869 via pip (10.0.1)

pip PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.2.3, =1.0.1, =4.0.0, =4.0.0, =4.0.1 - zerv 0.1.0 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2025-8869 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

python-dev-tools (>=2019.8.14, <=2019.8.24) potentially affected by CVE-2025-8869 via pip (19.2.2)

pip PYPI version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.8.14, =2019.8.24 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2025-8869 via pip (19.0.2)

pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2025-8869 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

Malicious Package

Overview load-nuxt-dev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in load-nuxt-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0f879297070c07197ace88cfb411c61d497ad150e39c2c5c91349737f5d83a The package name resembles the legitimate Nuxt ecosystem tooling e.g., @nuxt/load-nuxt, and the version 99.0.3 is a common dependency-confusion /...

MAL-2026-6935 Malicious code in load-nuxt-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0f879297070c07197ace88cfb411c61d497ad150e39c2c5c91349737f5d83a The package name resembles the legitimate Nuxt ecosystem tooling e.g., @nuxt/load-nuxt, and the version 99.0.3 is a common dependency-confusion /...

edc (>=0.3.14, <=0.3.16), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2026-53877 via django (3.1.8)

django PYPI version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.14, =0.3.16 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

edc (>=0.3.14, <=0.3.16), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2026-48588 via django (3.1.8)

django PYPI version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.14, =0.3.16 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

edc (>=0.3.14, <=0.3.16), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2026-53878 via django (3.1.8)

django PYPI version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.14, =0.3.16 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...

edc (>=0.3.14, <=0.3.16), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2024-45231 via django (3.1.8)

django PYPI version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.14, =0.3.16 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

nxviz (>=0.2.0, <=0.2.7), reahl-component (>=4.0.0, <=4.0.1) +6 more potentially affected by CVE-2024-6345 via setuptools (32.3.1)

setuptools PYPI version 32.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - nxviz =0.2.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-191...

aaz-dev (>=1.0.2, <=2.10.1), adminui (1.5.2) +190 more potentially affected by CVE-2024-34069 via werkzeug (2.1.2)

werkzeug PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aaz-dev =1.0.2, =1.5.2, =0.14.0, =0.0.1a0, =1.5.0, =1.1.1, =2.6.0, =1.0.5, =1.7.1, =1.3.0, =3.1.0, =1.45.0, =1.47.0 and more Source cves:...

a-api-server (1.3.0), aau-ais-dipaal (>=0.1.22, <=0.1.29) +1757 more potentially affected by CVE-2024-22195 via jinja2 (>=3.0.0a1, <=3.1.2)

jinja2 PYPI version =3.0.0a1, =0.1.22, =1.0.2, =0.0.2, =0.0.1, =0.0.1, =1.0.0, =1.5.2, =1.2.3, =1.7.1 and more Source cves: CVE-2024-22195 Source advisory: OSV:PYSEC-2026-1473...

airflow-provider-sqream-blue (>=0.0.8, <=0.0.13), apollo-sdk (>=0.1.1, <=0.2.11) +29 more potentially affected by CVE-2023-32732 via grpcio (1.53.0)

grpcio PYPI version 1.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on grpcio and may be impacted: - airflow-provider-sqream-blue =0.0.8, =0.1.1, =0.2.40, =0.1.1, =3.2.0, =3.2.0, =0.4.24, =0.6.24, =1.3.6rc1, =0.3.0, =1.0.5, =0.0.1, =1.6.3, =4.0.0,...

fairmofsyncondition (0.1.2), mofstructure (>=0.1.5, <=0.1.8.3) +2 more potentially affected by CVE-2022-42964 via pymatgen (2024.2.20)

pymatgen PYPI version 2024.2.20 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - fairmofsyncondition 0.1.2 - mofstructure =0.1.5, =0.0.0, =0.1.2 - pyhrmc-dev 0.0.0 Source cves: CVE-2022-42964 Source advisory:...