dagit (0.14.17), dagster-airbyte (0.14.17) +35 more potentially affected by CVE-2026-41490 via dagster (0.14.17)

dagster PYPI version 0.14.17 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.17 - dagster-airbyte 0.14.17 - dagster-airflow 0.14.17 - dagster-aws 0.14.17 - dagster-azure 0.14.17 - dagster-celery 0.14.17 -...

dagit (0.14.18rc3), dagster-airbyte (0.14.18rc3) +35 more potentially affected by CVE-2026-41490 via dagster (0.14.18rc3)

dagster PYPI version 0.14.18rc3 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.18rc3 - dagster-airbyte 0.14.18rc3 - dagster-airflow 0.14.18rc3 - dagster-aws 0.14.18rc3 - dagster-azure 0.14.18rc3 - dagster-cele...

dagit (0.14.18rc6), dagster-airbyte (0.14.18rc6) +35 more potentially affected by CVE-2026-41490 via dagster (0.14.18rc6)

dagster PYPI version 0.14.18rc6 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.18rc6 - dagster-airbyte 0.14.18rc6 - dagster-airflow 0.14.18rc6 - dagster-aws 0.14.18rc6 - dagster-azure 0.14.18rc6 - dagster-cele...

dagit (0.14.20rc0), dagster-airbyte (0.14.20rc0) +35 more potentially affected by CVE-2026-41490 via dagster (0.14.20rc0)

dagster PYPI version 0.14.20rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.20rc0 - dagster-airbyte 0.14.20rc0 - dagster-airflow 0.14.20rc0 - dagster-aws 0.14.20rc0 - dagster-azure 0.14.20rc0 - dagster-cele...

dagit (0.14.21rc0), dagster-airbyte (0.14.21rc0) +35 more potentially affected by CVE-2026-41490 via dagster (0.14.21rc0)

dagster PYPI version 0.14.21rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.21rc0 - dagster-airbyte 0.14.21rc0 - dagster-airflow 0.14.21rc0 - dagster-aws 0.14.21rc0 - dagster-azure 0.14.21rc0 - dagster-cele...

dagit (0.14.17rc3), dagster-airbyte (0.14.17rc3) +35 more potentially affected by CVE-2026-41490 via dagster (0.14.17rc3)

dagster PYPI version 0.14.17rc3 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.17rc3 - dagster-airbyte 0.14.17rc3 - dagster-airflow 0.14.17rc3 - dagster-aws 0.14.17rc3 - dagster-azure 0.14.17rc3 - dagster-cele...

dagit (0.14.18rc4), dagster-airbyte (0.14.18rc4) +35 more potentially affected by CVE-2026-41490 via dagster (0.14.18rc4)

dagster PYPI version 0.14.18rc4 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.18rc4 - dagster-airbyte 0.14.18rc4 - dagster-airflow 0.14.18rc4 - dagster-aws 0.14.18rc4 - dagster-azure 0.14.18rc4 - dagster-cele...

dagit (0.15.1), dagster-airbyte (0.15.1) +35 more potentially affected by CVE-2026-41490 via dagster (0.15.1)

dagster PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.15.1 - dagster-airbyte 0.15.1 - dagster-airflow 0.15.1 - dagster-aws 0.15.1 - dagster-azure 0.15.1 - dagster-celery 0.15.1 -...

dagit (0.14.2rc0), dagster-airbyte (0.14.2rc0) +33 more potentially affected by CVE-2026-41490 via dagster (0.14.2rc0)

dagster PYPI version 0.14.2rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.2rc0 - dagster-airbyte 0.14.2rc0 - dagster-airflow 0.14.2rc0 - dagster-aws 0.14.2rc0 - dagster-azure 0.14.2rc0 - dagster-celery...

airbyte (>=0.10.5, <=0.27.0), airbyte-cdk (>=0.0.0.dev0, <=7.4.0) +263 more potentially affected by CVE-2026-34070 via langchain-core (0.1.42)

langchain-core PYPI version 0.1.42 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - airbyte =0.10.5, =0.0.0.dev0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.2.0, =4.2.0, =0.1.1, =4.1.0, =3.2.0, =1.0.0, =0.3.8, =0.6....

airbyte (>=0.10.5, <=0.27.0), airbyte-cdk (>=0.0.0.dev0, <=7.4.0) +263 more potentially affected by CVE-2026-34070 via langchain-core (0.1.42)

langchain-core PYPI version 0.1.42 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - airbyte =0.10.5, =0.0.0.dev0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.2.0, =4.2.0, =0.1.1, =4.1.0, =3.2.0, =1.0.0, =0.3.8, =0.6....

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-33231 via nltk (>=3.0.0, <=3.9.3)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33231 Source advisory: OSV:PYSEC-2026-2236...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-33230 via nltk (>=3.0.0, <=3.9.3)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33230 Source advisory: OSV:PYSEC-2026-2235...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +804 more potentially affected by CVE-2026-33230 via nltk (>=2.0.4, <=3.9.3)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33230 Source advisory: MEND:CVE-2026-33230...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-33231 via nltk (>=3.0.0, <=3.9.3)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33231 Source advisory: OSV:GHSA-JM6W-M3J8-898G...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-33231 via nltk (>=3.0.0, <=3.9.3)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33231 Source advisory: GHSA-JM6W-M3J8-898G...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-33230 via nltk (>=3.0.0, <=3.9.3)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33230 Source advisory: GHSA-GFWX-W7GR-FVH7...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-66393 via nltk (>=3.0.0, <=3.9.3)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-66393 Source advisory: OSV:GHSA-RF74-V2FM-23PW...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-66393 via nltk (>=3.0.0, <=3.9.3)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-66393 Source advisory: GHSA-RF74-V2FM-23PW...

Malicious Package

Overview linear-airbyte-source is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...