muffin (>=0.7.1, <=0.8.6) potentially affected by CVE-2026-54277 via aiohttp (0.21.6)

aiohttp PYPI version 0.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.7.1, =0.8.6 Source cves: CVE-2026-54277 Source advisory: OSV:PYSEC-2026-2110...

muffin (>=0.7.1, <=0.8.6) potentially affected by CVE-2026-54278 via aiohttp (0.21.6)

aiohttp PYPI version 0.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.7.1, =0.8.6 Source cves: CVE-2026-54278 Source advisory: OSV:PYSEC-2026-2111...

muffin (>=0.7.1, <=0.8.6) potentially affected by CVE-2026-54280 via aiohttp (0.21.6)

aiohttp PYPI version 0.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.7.1, =0.8.6 Source cves: CVE-2026-54280 Source advisory: OSV:PYSEC-2026-2113...

muffin (>=0.7.1, <=0.8.6) potentially affected by CVE-2026-54275 via aiohttp (0.21.6)

aiohttp PYPI version 0.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.7.1, =0.8.6 Source cves: CVE-2026-54275 Source advisory: OSV:PYSEC-2026-237...

pushpull (0.0.2) potentially affected by CVE-2026-54280 via aiohttp (0.22.0)

aiohttp PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pushpull 0.0.2 Source cves: CVE-2026-54280 Source advisory: OSV:PYSEC-2026-2113...

goblin (1.0.0b1) potentially affected by CVE-2026-54277 via aiohttp (0.22.1)

aiohttp PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - goblin 1.0.0b1 Source cves: CVE-2026-54277 Source advisory: OSV:PYSEC-2026-2110...

pushpull (0.0.2) potentially affected by CVE-2026-54277 via aiohttp (0.22.0)

aiohttp PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pushpull 0.0.2 Source cves: CVE-2026-54277 Source advisory: OSV:PYSEC-2026-2110...

goblin (1.0.0b1) potentially affected by CVE-2026-54278 via aiohttp (0.22.1)

aiohttp PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - goblin 1.0.0b1 Source cves: CVE-2026-54278 Source advisory: OSV:PYSEC-2026-2111...

goblin (1.0.0b1) potentially affected by CVE-2026-54275 via aiohttp (0.22.1)

aiohttp PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - goblin 1.0.0b1 Source cves: CVE-2026-54275 Source advisory: OSV:PYSEC-2026-237...

pushpull (0.0.2) potentially affected by CVE-2026-54278 via aiohttp (0.22.0)

aiohttp PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pushpull 0.0.2 Source cves: CVE-2026-54278 Source advisory: OSV:PYSEC-2026-2111...

scriptworker (0.2.1) potentially affected by CVE-2026-54280 via aiohttp (0.22.0a0)

aiohttp PYPI version 0.22.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - scriptworker 0.2.1 Source cves: CVE-2026-54280 Source advisory: OSV:PYSEC-2026-2113...

guillotina-s3storage (>=1.0.31, <=1.0.34) potentially affected by CVE-2026-54275 via aiohttp (2.3.0a4)

aiohttp PYPI version 2.3.0a4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - guillotina-s3storage =1.0.31, =1.0.34 Source cves: CVE-2026-54275 Source advisory: OSV:PYSEC-2026-237...

aioboto3 (>=1.1.0, <=2.1.0), aiobotocore (>=0.4.2, <=0.4.5) +2 more potentially affected by CVE-2026-54275 via aiohttp (2.3.0)

aiohttp PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 =1.1.0, =0.4.2, =0.4.1b31, =0.6.0b19, =0.6.0b23 Source cves: CVE-2026-54275 Source advisory: OSV:PYSEC-2026-237...

guillotina-s3storage (>=1.0.31, <=1.0.34) potentially affected by CVE-2026-54277 via aiohttp (2.3.0a4)

aiohttp PYPI version 2.3.0a4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - guillotina-s3storage =1.0.31, =1.0.34 Source cves: CVE-2026-54277 Source advisory: OSV:PYSEC-2026-2110...

guillotina-s3storage (>=1.0.31, <=1.0.34) potentially affected by CVE-2026-54280 via aiohttp (2.3.0a4)

aiohttp PYPI version 2.3.0a4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - guillotina-s3storage =1.0.31, =1.0.34 Source cves: CVE-2026-54280 Source advisory: OSV:PYSEC-2026-2113...

aioboto3 (>=1.1.0, <=2.1.0), aiobotocore (>=0.4.2, <=0.4.5) +2 more potentially affected by CVE-2026-54278 via aiohttp (2.3.0)

aiohttp PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 =1.1.0, =0.4.2, =0.4.1b31, =0.6.0b19, =0.6.0b23 Source cves: CVE-2026-54278 Source advisory: OSV:PYSEC-2026-2111...

homeassistant (>=0.58.0, <=0.58.1), pyplanet (>=0.5.0, <=0.5.2) +1 more potentially affected by CVE-2026-54280 via aiohttp (2.3.2)

aiohttp PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - homeassistant =0.58.0, =0.5.0, =0.6.0, =0.6.2 Source cves: CVE-2026-54280 Source advisory: OSV:PYSEC-2026-2113...

pyplanet (0.5.3) potentially affected by CVE-2026-54277 via aiohttp (2.3.3)

aiohttp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pyplanet 0.5.3 Source cves: CVE-2026-54277 Source advisory: OSV:PYSEC-2026-2110...

pyplanet (0.5.3) potentially affected by CVE-2026-54278 via aiohttp (2.3.3)

aiohttp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pyplanet 0.5.3 Source cves: CVE-2026-54278 Source advisory: OSV:PYSEC-2026-2111...

pyplanet (0.5.3) potentially affected by CVE-2026-54280 via aiohttp (2.3.3)

aiohttp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pyplanet 0.5.3 Source cves: CVE-2026-54280 Source advisory: OSV:PYSEC-2026-2113...