aiida-project (0.7.0), airbyte (>=1.0.0rc24, <=1.0.0rc34) +73 more potentially affected by CVE-2025-13327 via uv (>=0.1.45, <=0.9.5)

uv PYPI version =0.1.45, =1.0.0rc24, =0.112.0, =0.1.0, =0.1.2, =1.0.3, =0.5.0.dev0, =1.0.0, =11.5.1, =0.0.24, =1.2.4, =1.2.5 and more Source cves: CVE-2025-13327 Source advisory: OSV:PYSEC-2026-2295...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +799 more potentially affected by CVE-2025-14009 via nltk (>=3.0.0, <=3.9.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2025-14009 Source advisory: GHSA-7P94-766C-HGJP...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +801 more potentially affected by CVE-2025-14009 via nltk (>=2.0.4, <=3.9.2)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2025-14009 Source advisory: MEND:CVE-2025-14009...

airbyte (>=0.10.5, <=0.27.0), airbyte-cdk (>=0.0.0.dev0, <=7.4.0) +263 more potentially affected by CVE-2026-26013 via langchain-core (0.1.42)

langchain-core PYPI version 0.1.42 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - airbyte =0.10.5, =0.0.0.dev0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.2.0, =4.2.0, =0.1.1, =4.1.0, =3.2.0, =1.0.0, =0.3.8, =0.6....

agixt (>=1.3.144, <=1.3.155), airbyte-source-google-analytics-v4 (>=0.2.5, <=0.4.19) +75 more potentially affected by CVE-2026-26007 via cryptography (41.0.4)

cryptography PYPI version 41.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agixt =1.3.144, =0.2.5, =2023.10.0b1, =0.1.0, =0.2.0rc1, =1.0.530, =1.1.28, =0.14.0, =0.15.0 and more Source cves: CVE-2026-26007 Sourc...

agixt (>=1.3.144, <=1.3.155), airbyte-source-google-analytics-v4 (>=0.2.5, <=0.4.19) +75 more potentially affected by CVE-2026-26007 via cryptography (41.0.4)

cryptography PYPI version 41.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agixt =1.3.144, =0.2.5, =2023.10.0b1, =0.1.0, =0.2.0rc1, =1.0.530, =1.1.28, =0.14.0, =0.15.0 and more Source cves: CVE-2026-26007 Sourc...

abst (2.3.59), abundance (0.0.1b0) +692 more potentially affected by CVE-2026-26007 via cryptography (44.0.3)

cryptography PYPI version 44.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - abst 2.3.59 - abundance 0.0.1b0 - acedeploy =2.4.15, =0.6.3, =1.0.0, =0.3.1, =1.0.0a6, =0.4.0, =4.5.0, =0.20.1, =0.27.0 and more Source...

EUVD-2024-37279

Malicious code in bioql PyPI...

Malicious Package

Overview airbyte-webapp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in airbyte-webapp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47843 Malicious code in airbyte-webapp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb9621dfdc8c213cde4d731ad33b75a36cc9298649d12d5ed1669fb3d401f1c Any computer that has this package installed or running should be considered...

Malicious code in airbyte-webapp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb9621dfdc8c213cde4d731ad33b75a36cc9298649d12d5ed1669fb3d401f1c Any computer that has this package installed or running should be considered...

dagit (0.14.17rc4), dagster-airbyte (0.14.17rc4) +35 more potentially affected by CVE-2025-51481 via dagster (0.14.17rc4)

dagster PYPI version 0.14.17rc4 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.17rc4 - dagster-airbyte 0.14.17rc4 - dagster-airflow 0.14.17rc4 - dagster-aws 0.14.17rc4 - dagster-azure 0.14.17rc4 - dagster-cele...

dagit (0.15.7), dagster-airbyte (0.15.7) +36 more potentially affected by CVE-2025-51481 via dagster (0.15.7)

dagster PYPI version 0.15.7 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.15.7 - dagster-airbyte 0.15.7 - dagster-airflow 0.15.7 - dagster-aws 0.15.7 - dagster-azure 0.15.7 - dagster-celery 0.15.7 -...

dagit (0.14.1), dagster-airbyte (0.14.1) +33 more potentially affected by CVE-2025-51481 via dagster (0.14.1)

dagster PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.1 - dagster-airbyte 0.14.1 - dagster-airflow 0.14.1 - dagster-aws 0.14.1 - dagster-azure 0.14.1 - dagster-celery 0.14.1 -...

dagit (0.14.9), dagster-airbyte (0.14.9) +33 more potentially affected by CVE-2025-51481 via dagster (0.14.9)

dagster PYPI version 0.14.9 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.9 - dagster-airbyte 0.14.9 - dagster-airflow 0.14.9 - dagster-aws 0.14.9 - dagster-azure 0.14.9 - dagster-celery 0.14.9 -...

dagit (0.13.19rc2), dagster-airbyte (0.13.19rc2) +32 more potentially affected by CVE-2025-51481 via dagster (0.13.19rc2)

dagster PYPI version 0.13.19rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.19rc2 - dagster-airbyte 0.13.19rc2 - dagster-airflow 0.13.19rc2 - dagster-aws 0.13.19rc2 - dagster-azure 0.13.19rc2 - dagster-cele...

dagit (0.14.3rc0), dagster-airbyte (0.14.3rc0) +33 more potentially affected by CVE-2025-51481 via dagster (0.14.3rc0)

dagster PYPI version 0.14.3rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.3rc0 - dagster-airbyte 0.14.3rc0 - dagster-airflow 0.14.3rc0 - dagster-aws 0.14.3rc0 - dagster-azure 0.14.3rc0 - dagster-celery...

dagit (0.14.3), dagster-airbyte (0.14.3) +33 more potentially affected by CVE-2025-51481 via dagster (0.14.3)

dagster PYPI version 0.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.3 - dagster-airbyte 0.14.3 - dagster-airflow 0.14.3 - dagster-aws 0.14.3 - dagster-azure 0.14.3 - dagster-celery 0.14.3 -...

dagit (0.14.4), dagster-airbyte (0.14.4) +33 more potentially affected by CVE-2025-51481 via dagster (0.14.4)

dagster PYPI version 0.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.4 - dagster-airbyte 0.14.4 - dagster-airflow 0.14.4 - dagster-aws 0.14.4 - dagster-azure 0.14.4 - dagster-celery 0.14.4 -...