agilicus (>=1.5.1, <=1.6.1), akeyra (>=0.0.1, <=0.1.2) +30 more potentially affected by CVE-2026-102269 via pyjwt (1.5.3)

pyjwt PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - agilicus =1.5.1, =0.0.1, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.7.0, =2.1.0, =1.10.0.1b0, =0.4.8,...

django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-102270 via pyjwt (0.4.1)

pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-102270 Source advisory: OSV:PYSEC-2026-4148...

atlassian-jwt-auth (1.0.9), eve-auth-jwt (>=1.0.2, <=1.0.5) potentially affected by CVE-2026-102270 via pyjwt (1.3.0)

pyjwt PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - atlassian-jwt-auth 1.0.9 - eve-auth-jwt =1.0.2, =1.0.5 Source cves: CVE-2026-102270 Source advisory: OSV:PYSEC-2026-4148...

django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-101917 via pyjwt (0.4.1)

pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-101917 Source advisory: OSV:PYSEC-2026-4140...

aiohttp-ext-auth (>=0.1.1, <=0.1.2), ais-dom (>=0.76.5, <=0.91.5) +34 more potentially affected by CVE-2026-102268 via pyjwt (1.6.4)

pyjwt PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aiohttp-ext-auth =0.1.1, =0.76.5, =0.0.1, =0.0.1, =0.4.0, =1.0.0, =0.0.19, =0.5.0, =1.1.7, =0.31.0, =0.0.1, =0.0.2, =0.1.0 and more Source cves:...

social-auth-liu (0.0.1) potentially affected by CVE-2026-57177 via social-auth-core (1.2.0)

social-auth-core PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - social-auth-liu 0.0.1 Source cves: CVE-2026-57177 Source advisory: OSV:PYSEC-2026-4169...

h2 (>=1.1.0, <=3.0.0), mitmproxy (>=0.18.2, <=0.18.3) +3 more potentially affected by CVE-2026-59980 via hpack (2.3.0)

hpack PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - h2 =1.1.0, =0.18.2, =0.9.0, =2.6.1, =3.10.2rc3 Source cves: CVE-2026-59980 Source advisory: OSV:PYSEC-2026-4053...

compas-cloud (0.1.0), nucypher (>=1.2.0b2, <=2.0.0b3) potentially affected by CVE-2026-77528 via autobahn (19.11.1)

autobahn PYPI version 19.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - compas-cloud 0.1.0 - nucypher =1.2.0b2, =2.0.0b3 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) +2 more potentially affected by CVE-2026-86049 via jupyter-server (1.18.1)

jupyter-server PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2026-86049 via jupyter-server (0.2.1)

jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

aiojarm (>=0.2.0, <=0.2.1), aiometer (>=0.1.0, <=0.2.1) +11 more potentially affected by CVE-2026-63374 via anyio (1.4.0)

anyio PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aiojarm =0.2.0, =0.1.0, =0.2.0, =0.2.0rc1, =0.1.3, =0.0.15, =0.0.2, =0.1.3, =0.4.1, =0.6.1 - roboto-telegram 0.3.0 - runnel 0.1.0a1 - sitemaps 0.1.0...

aio-net-events (0.2.0), aio-usb-hotplug (>=2.0.0, <=3.0.1) +11 more potentially affected by CVE-2026-63374 via anyio (2.2.0)

anyio PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aio-net-events 0.2.0 - aio-usb-hotplug =2.0.0, =0.9.1, =0.6.0, =0.1.0, =1.6.3, =0.0.1, =3.0.0, =0.1.0, =0.2.0 Source cves: CVE-2026-63374 Source...

aiojarm (>=0.2.0, <=0.2.1), aiometer (>=0.1.0, <=0.2.1) +11 more potentially affected by CVE-2026-64847 via anyio (1.4.0)

anyio PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aiojarm =0.2.0, =0.1.0, =0.2.0, =0.2.0rc1, =0.1.3, =0.0.15, =0.0.2, =0.1.3, =0.4.1, =0.6.1 - roboto-telegram 0.3.0 - runnel 0.1.0a1 - sitemaps 0.1.0...

ircrobots (>=0.3.7, <=0.7.2), smtpproto (1.0.0) potentially affected by CVE-2026-63374 via anyio (2.0.2)

anyio PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - ircrobots =0.3.7, =0.7.2 - smtpproto 1.0.0 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

5mghost-rover (>=0.0.1, <=0.0.3), aaaai (>=0.1.3, <=0.3.0) +853 more potentially affected by CVE-2026-63374 via anyio (>=4.0.0rc1, <=4.14.1)

anyio PYPI version =4.0.0rc1, =0.0.1, =0.1.3, =0.6.0, =0.0.32, =0.0.1, =4.8.2, =0.1.3, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.1.31, =0.1.0, =0.0.2, =0.4.0rc1, =0.7.1 and more Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

acdh-spacytei (>=0.0.1, <=0.0.5), ircrobots (0.3.6) potentially affected by CVE-2026-64847 via anyio (1.3.1)

anyio PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - acdh-spacytei =0.0.1, =0.0.5 - ircrobots 0.3.6 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

apartment-browser (0.0.1), docsvault (>=0.1.2, <=0.1.4) +12 more potentially affected by CVE-2026-85078 via sanic (20.9.1)

sanic PYPI version 20.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - apartment-browser 0.0.1 - docsvault =0.1.2, =4.1.0, =0.2.2, =0.1.2, =2.8.7, =0.1.1, =0.0.4, =0.0.6 - sanic-oauthlib 0.2.3 - zillionare-omega 0.6.0...

langstream (0.1.8) potentially affected by CVE-2026-59823 via litellm (0.1.450)

litellm PYPI version 0.1.450 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - langstream 0.1.8 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-59823 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

discodo (2.3.14) potentially affected by CVE-2026-85078 via sanic (21.3.2)

sanic PYPI version 21.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - discodo 2.3.14 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...