5mghost-rover (>=0.0.1, <=0.0.3), aaaai (>=0.1.3, <=0.3.0) +853 more potentially affected by CVE-2026-64847 via anyio (>=4.0.0rc1, <=4.14.1)

anyio PYPI version =4.0.0rc1, =0.0.1, =0.1.3, =0.6.0, =0.0.32, =0.0.1, =4.8.2, =0.1.3, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.1.31, =0.1.0, =0.0.2, =0.4.0rc1, =0.7.1 and more Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

omniblack-model (>=0.1.1, <=0.1.4.post5) potentially affected by CVE-2026-64847 via anyio (3.0.0)

anyio PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - omniblack-model =0.1.1, =0.1.4.post5 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

aio-net-events (0.2.0), aio-usb-hotplug (>=2.0.0, <=3.0.1) +11 more potentially affected by CVE-2026-64847 via anyio (2.2.0)

anyio PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aio-net-events 0.2.0 - aio-usb-hotplug =2.0.0, =0.9.1, =0.6.0, =0.1.0, =1.6.3, =0.0.1, =3.0.0, =0.1.0, =0.2.0 Source cves: CVE-2026-64847 Source...

ircrobots (>=0.3.7, <=0.7.2), smtpproto (1.0.0) potentially affected by CVE-2026-64847 via anyio (2.0.2)

anyio PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - ircrobots =0.3.7, =0.7.2 - smtpproto 1.0.0 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

antistasi-logbook (>=0.3.2, <=0.4.2), anubis-policy-api (>=0.3.0, <=0.6.0) +9 more potentially affected by CVE-2026-64847 via anyio (3.5.0)

anyio PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - antistasi-logbook =0.3.2, =0.3.0, =1.0.0, =0.2.4, =0.1.7, =1.0.20.post9, =0.1.0, =0.18.2, =0.14.0, =0.15.0 - xircuits 1.3.0 Source cves: CVE-2026-6484...

aiopath (>=0.5.7, <=0.6.7), asiva (>=1.0.1, <=1.3.1) +1 more potentially affected by CVE-2026-64847 via anyio (3.1.0)

anyio PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aiopath =0.5.7, =1.0.1, =1.0.1, =1.0.6 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

CLEANSTART-2026-XS44337 AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio

CVE-2026-64847 affects multiple packages. AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. See references for individual vulnerability details...

accomate (>=2.0.0a0, <=2.0.0.6), asyncrepo (>=0.0.6, <=0.0.9) +15 more potentially affected by CVE-2026-64847 via anyio (3.6.1)

anyio PYPI version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - accomate =2.0.0a0, =0.0.6, =0.1.0, =1.2.3, =0.0.6, =1.0.0, =1.0.0, =0.3.8, =0.3.20, =0.0.4, =0.3.5.dev2659611866, =0.2.0, =1.5.0 and more Source cves:...

5mghost-rover (>=0.0.1, <=0.0.3), aaaai (>=0.1.3, <=0.3.0) +853 more potentially affected by CVE-2026-64847 via anyio (>=4.0.0rc1, <=4.14.1)

anyio PYPI version =4.0.0rc1, =0.0.1, =0.1.3, =0.6.0, =0.0.32, =0.0.1, =4.8.2, =0.1.3, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.1.31, =0.1.0, =0.0.2, =0.4.0rc1, =0.7.1 and more Source cves: CVE-2026-64847 Source advisory: SNYK:PYTHON-ANYIO-19958323...

aiopath (0.6.6), nectarifere (>=2.0.1, <=2.4.0) +1 more potentially affected by CVE-2026-64847 via anyio (3.0.1)

anyio PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aiopath 0.6.6 - nectarifere =2.0.1, =0.5.0, =0.6.0 Source cves: CVE-2026-64847 Source advisory: OSV:GHSA-5P39-CFHJ-2XMP...