ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2025-6051 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2025-6051 Source advisory: OSV:PYSEC-2026-1988...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2025-6921 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2025-6921 Source advisory: OSV:PYSEC-2026-1980...

cdisc-rules-engine (>=0.1.0, <=0.4.7.8), systembridgebackend (>=3.4.0.dev2, <=3.4.3) +2 more potentially affected by CVE-2025-59042 via pyinstaller (5.2.0)

pyinstaller PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - cdisc-rules-engine =0.1.0, =3.4.0.dev2, =3.4.0.dev2, =3.4.0.dev2, =3.4.3 Source cves: CVE-2025-59042 Source advisory: OSV:PYSEC-2026-1813...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2025-6638 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2025-6638 Source advisory: OSV:PYSEC-2026-1981...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2025-55197 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2025-55197 Source advisory: OSV:PYSEC-2026-1830...

PYSEC-2026-1815 Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs

Dear Maintainers, I am writing to you on behalf of the Tencent AI Sec. We have identified a potential vulnerability in one of your products and would like to report it to you for further investigation and mitigation. Summary The jk parameter is received in pyLoad CNL Blueprint. Due to the lack of...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2025-5197 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2025-5197 Source advisory: OSV:PYSEC-2026-1983...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2025-3933 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2025-3933 Source advisory: OSV:PYSEC-2026-1977...

dagit (0.10.9), dagster-airflow (0.10.9) +3 more potentially affected by CVE-2023-51232 via dagster (0.10.9)

dagster PYPI version 0.10.9 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.10.9 - dagster-airflow 0.10.9 - spine-engine =0.10.1rc1, =0.11.0 - spine-items 0.8.0 - spinetoolbox 0.6.3 Source cves: CVE-2023-51232...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2025-3777 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2025-3777 Source advisory: OSV:PYSEC-2026-1986...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2025-3263 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2025-3263 Source advisory: OSV:PYSEC-2026-1987...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2025-3264 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2025-3264 Source advisory: OSV:PYSEC-2026-1985...

PYSEC-2026-1844 pyspur Incomplete Filtering of Special Elements allowed by SingleLLMCallNode function

A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/singlellmcall.py of the component Jinja2 Template Handler. The manipulation of the argument usermessage leads to imprope...

autodist (>=0.7.0rc1, <=0.7.0rc2), sage-engine (>=2.1.0, <=2.2.0) potentially affected by CVE-2025-4565 via protobuf (3.11.0)

protobuf PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - autodist =0.7.0rc1, =2.1.0, =2.2.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2025-1194 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2025-1194 Source advisory: OSV:PYSEC-2026-1984...

GO-2026-5864 Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast

Constrata's coordinator transit engine ciphertextContainer.UnmarshalJSON panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast...

finetuning-scheduler (0.1.2), gts-engine (>=0.1.1, <=0.1.2) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.2)

pytorch-lightning PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.1.2 - gts-engine =0.1.1, =0.3.3, =0.1.0, =0.1.5 Source cves: CVE-2024-8020 Source advisory:...

dimweb-persona-bot (0.0.6), finetuning-scheduler (0.2.2) +1 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.7.6)

pytorch-lightning PYPI version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dimweb-persona-bot 0.0.6 - finetuning-scheduler 0.2.2 - gts-engine 0.1.3 Source cves: CVE-2024-8020 Source advisory:...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2024-12720 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2024-12720 Source advisory: OSV:PYSEC-2026-1982...

airoboros (2.1.1), aphrodite-engine (>=0.3.0, <=0.5.1) +30 more potentially affected by CVE-2024-12376 via fschat (>=0.2.2, <=0.2.36)

fschat PYPI version =0.2.2, =0.3.0, =0.0.1, =1.1.0, =1.1.0, =0.1.1, =0.1.1, =0.9.0.8, =1.0.0, =1.1.4 - iflow-mcp-edenyavin-garakr-mcp 0.1.0 and more Source cves: CVE-2024-12376 Source advisory: OSV:PYSEC-2026-1396...