pickley (1.9.19), thaispoon (0.0.1) potentially affected by CVE-2026-102938 via virtualenv (16.7.7)

virtualenv PYPI version 16.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pickley 1.9.19 - thaispoon 0.0.1 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

optimizo (>=1.2.0, <=1.3.0), pencil-pusher (1.6.1) potentially affected by CVE-2026-102938 via virtualenv (20.4.7)

virtualenv PYPI version 20.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - optimizo =1.2.0, =1.3.0 - pencil-pusher 1.6.1 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

bento-cli (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-102938 via virtualenv (16.7.5)

virtualenv PYPI version 16.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - bento-cli =0.1.0, =0.1.1 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

cashu (0.15.1), cfg-analysis-tool-py (0.1.0) +7 more potentially affected by CVE-2026-102938 via virtualenv (20.25.0)

virtualenv PYPI version 20.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cashu 0.15.1 - cfg-analysis-tool-py 0.1.0 - edx-repo-tools 0.8.3 - mamba-toolbox =1.2.5.22, =0.2.1, =2.0.2, =0.1.15, =0.0.7, =0.0.8 Source...

gllm-core-binary (>=0.0.0.dev0, <=0.4.4b3), gllm-inference-binary (0.5.51b3) +5 more potentially affected by CVE-2026-102938 via virtualenv (20.30.0)

virtualenv PYPI version 20.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - gllm-core-binary =0.0.0.dev0, =0.3.149, =0.1.0, =1.0.51, =0.4.4, =0.4.8 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

delete-branches (1.2.15), delete-workflow-runs (1.2.33) +12 more potentially affected by CVE-2026-102938 via virtualenv (20.35.4)

virtualenv PYPI version 20.35.4 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-branches 1.2.15 - delete-workflow-runs 1.2.33 - elroy =0.0.62, =0.0.1b1, =0.6.0, =2.2.1, =6.0.0, =1.2.3, =0.6.2, =0.7.0 Source cves...

azure-devops-artifacts-helpers (1.0.7) potentially affected by CVE-2026-102938 via virtualenv (20.2.1)

virtualenv PYPI version 20.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers 1.0.7 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

dcoscli (>=0.1.1, <=0.1.8) potentially affected by CVE-2026-102938 via virtualenv (12.1.1)

virtualenv PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dcoscli =0.1.1, =0.1.8 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

cinemator (0.1.3), gsy-frameworke (>=1.2.0, <=5.0.2) +1 more potentially affected by CVE-2026-102938 via virtualenv (20.10.0)

virtualenv PYPI version 20.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cinemator 0.1.3 - gsy-frameworke =1.2.0, =5.0.2 - limbo 8.6.0 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

cateye (>=0.3.4, <=0.3.8), edx-completion (>=0.0.1, <=0.1.1) +4 more potentially affected by CVE-2026-102938 via virtualenv (15.1.0)

virtualenv PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cateye =0.3.4, =0.0.1, =0.5.7, =1.0.0rc1, =1.2.0, =1.7.1 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

dreamai (>=0.10.0, <=0.12.0), nb-cli (>=1.0.0, <=1.2.4) +5 more potentially affected by CVE-2026-102938 via virtualenv (20.17.1)

virtualenv PYPI version 20.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dreamai =0.10.0, =1.0.0, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

akc-mamba (>=2.0.1, <=2.0.2), pangsitpy (0.0.3) potentially affected by CVE-2026-102938 via virtualenv (16.7.9)

virtualenv PYPI version 16.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - akc-mamba =2.0.1, =2.0.2 - pangsitpy 0.0.3 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +645 more potentially affected by CVE-2026-86071 via com.github.junrar:junrar (>=7.4.0, <=7.6.0)

com.github.junrar:junrar MAVEN version =7.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-86071 Source advisory: OSV:GHSA-89M4-43J5-VHHX...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +645 more potentially affected by CVE-2026-86071 via com.github.junrar:junrar (>=7.4.0, <=7.6.0)

com.github.junrar:junrar MAVEN version =7.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-86071 Source advisory: SNYK:JAVA-COMGITHUBJUNRAR-19964034...

dothttp-req (>=0.0.43a14, <=0.0.43a17), dynamiq (>=0.5.2, <=0.11.1) potentially affected by CVE-2026-76825 via restrictedpython (7.1.0)

restrictedpython PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dothttp-req =0.0.43a14, =0.5.2, =0.11.1 Source cves: CVE-2026-76825 Source advisory: OSV:GHSA-HP3V-5VW7-FX9W...

@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.17) +24 more potentially affected by CVE-2026-85715 via exifreader (>=4.1.1, <=4.41.0)

exifreader NPM version =4.1.1, =0.0.5, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 and more Source cves: CVE-2026-85715 Source advisory: OSV:GHSA-PJ96-35FP-CFCC...

@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.17) +24 more potentially affected by CVE-2026-85715 via exifreader (>=4.1.1, <=4.41.0)

exifreader NPM version =4.1.1, =0.0.5, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 and more Source cves: CVE-2026-85715 Source advisory: SNYK:JS-EXIFREADER-20045986...

ba.sake:mill-squery-generator_mill0.11_2.13 (>=0.4.0, <=0.7.0), ba.sake:mill-squery-generator_mill1_3 (>=0.8.0, <=0.11.0) +656 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.0.3, <=3.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.0.3, =0.4.0, =0.8.0, =6.0.0, =6.0.3, =2.6.0, =2.0.0, =0.4.2, =0.0.1, =1.0.0, =1.6.2, =1.6.2, =2.2.0, =3.2.0 and more Source cves: CVE-2026-61700 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19964085...

com.distelli.persistence:persistence-example (>=1.2.0, <=3.3.0), com.distelli.persistence:persistence-impl (>=1.2.0, <=3.3.0) +47 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.4.6)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.distelli.persistence:persistence-example =1.2.0, =1.2.0, =1.6.1, =1.0.0, =1.0.0,...

com.sos-berlin:jobscheduler.engine (1.12.0), com.speedment:speedment-maven-plugin (>=3.0.3, <=3.0.5) +5 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.sos-berlin:jobscheduler.engine 1.12.0 - com.speedment:speedment-maven-plugin =3.0.3...