leap-ec (0.8.2), neofox (>=1.2.1, <=1.2.3) +6 more potentially affected by CVE-2026-23528 via distributed (2024.6.2)

distributed PYPI version 2024.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - leap-ec 0.8.2 - neofox =1.2.1, =0.10.1, =0.5.27, =0.2.0b3, =0.1.0b4, =0.2.0b1, =0.0.3, =0.1.0 Source cves: CVE-2026-23528 Source...

eubi-bridge (>=0.0.2b2, <=0.0.5b1), padocc (>=1.3.0a0, <=1.4.2) potentially affected by CVE-2026-23528 via distributed (2024.7.0)

distributed PYPI version 2024.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - eubi-bridge =0.0.2b2, =1.3.0a0, =1.4.2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-cuda (24.8.2), meersolar (>=1.0.3, <=3.3.0) +4 more potentially affected by CVE-2026-23528 via distributed (2024.7.1)

distributed PYPI version 2024.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda 24.8.2 - meersolar =1.0.3, =2.1.11, =0.1.1, =0.2.3 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-cuda (>=23.12.0a27, <=24.2.0a6), dask-sql (2023.11.0) +3 more potentially affected by CVE-2026-23528 via distributed (2023.11.0)

distributed PYPI version 2023.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =23.12.0a27, =1.0.0, =23.12.0a5, =23.12.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

esi-acme (2023.12.0), nwp-consumer (>=0.1.26, <=0.1.29) potentially affected by CVE-2026-23528 via distributed (2023.12.0)

distributed PYPI version 2023.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme 2023.12.0 - nwp-consumer =0.1.26, =0.1.29 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

hipscat-import (>=0.2.4, <=0.3.0) potentially affected by CVE-2026-23528 via distributed (2024.2.0)

distributed PYPI version 2024.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - hipscat-import =0.2.4, =0.3.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

aggfly (>=0.1.0, <=0.1.5), cellseg-gsontools (0.1.3) +26 more potentially affected by CVE-2026-23528 via distributed (2023.12.1)

distributed PYPI version 2023.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - aggfly =0.1.0, =0.1.3, =0.14.0, =0.1.0, =2.1.0, =0.3.2, =0.1.0, =0.1.0, =3.0.0, =0.5.3, =0.5.8 and more Source cves: CVE-2026-23528...

dask-sql (2024.1.0rc0), fvgp (>=4.1.2, <=4.2.9) +5 more potentially affected by CVE-2026-23528 via distributed (2024.1.0)

distributed PYPI version 2024.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-sql 2024.1.0rc0 - fvgp =4.1.2, =8.0.3, =0.1.4, =0.2.0a6, =0.1.2, =0.1.3 Source cves: CVE-2026-23528 Source advisory:...

dask-cuda (>=24.2.0a7, <=24.4.0), dask-sql (>=2024.1.0, <=2024.3.0) +11 more potentially affected by CVE-2026-23528 via distributed (2024.1.1)

distributed PYPI version 2024.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =24.2.0a7, =2024.1.0, =4.2.10, =8.1.0, =2.1.9, =1.4.1, =0.2.3, =0.1.0, =2024.2.21, =24.2.0, =1.1.16, =1.1.22 Source cves:...

cardea (>=0.1.2.dev0, <=0.1.2), evalml (>=0.16.1, <=0.22.0) +12 more potentially affected by CVE-2026-23528 via distributed (2024.2.1)

distributed PYPI version 2024.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cardea =0.1.2.dev0, =0.16.1, =1.0.0, =0.1.0, =0.12.0, =0.0.2, =0.32.2, =0.3.0.dev0, =2.11.28, =0.3.1, =0.0.1, =0.0.4 Source cves:...

nima (>=0.9.0, <=0.9.1) potentially affected by CVE-2026-23528 via distributed (2024.3.1)

distributed PYPI version 2024.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - nima =0.9.0, =0.9.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

bia-explorer (>=0.1.2, <=0.1.5), caspian (>=0.1.0, <=0.2.0) +63 more potentially affected by CVE-2026-23528 via distributed (2024.12.1)

distributed PYPI version 2024.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - bia-explorer =0.1.2, =0.1.0, =0.1.1, =25.2.0, =25.2.0, =0.1.0, =0.3.5.1 and more Source cves: CVE-2026-23528 Source advisory:...

jupyter-quant (2504.1.0), odc-algo (>=1.2.0, <=1.2.1) +2 more potentially affected by CVE-2026-23528 via distributed (2025.3.0)

distributed PYPI version 2025.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - jupyter-quant 2504.1.0 - odc-algo =1.2.0, =0.3.4, =0.3.11 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

eodc (>=2025.5.1, <=2025.6.1), raster2stac (0.0.10) potentially affected by CVE-2026-23528 via distributed (2025.1.0)

distributed PYPI version 2025.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - eodc =2025.5.1, =2025.6.1 - raster2stac 0.0.10 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

calitp-data-analysis (>=2026.1.30, <=2026.3.5), egamma-tnp (0.6.0) +5 more potentially affected by CVE-2026-23528 via distributed (2025.3.1)

distributed PYPI version 2025.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - calitp-data-analysis =2026.1.30, =0.2.1a3, =0.2.0a1, =0.3.0a4, =0.5.2rc1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-16...

nullsweep (>=0.5.0, <=0.6.0) potentially affected by CVE-2026-23528 via distributed (2025.4.1)

distributed PYPI version 2025.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - nullsweep =0.5.0, =0.6.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

jupyter-quant (2509.1.0), sktmls (>=2025.9.16.2, <=2026.10.7) potentially affected by CVE-2026-23528 via distributed (2025.9.0)

distributed PYPI version 2025.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - jupyter-quant 2509.1.0 - sktmls =2025.9.16.2, =2026.10.7 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

connectome-manipulator (>=0.0.11.dev1, <=1.0.0), molscore (>=1.1.0, <=1.4.0) potentially affected by CVE-2026-23528 via distributed (2023.6.0)

distributed PYPI version 2023.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - connectome-manipulator =0.0.11.dev1, =1.1.0, =1.4.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

flowi (0.5.13), mosaiks (>=0.0.0, <=1.0.2) +1 more potentially affected by CVE-2026-23528 via distributed (2023.7.0)

distributed PYPI version 2023.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - flowi 0.5.13 - mosaiks =0.0.0, =0.98.0, =0.101.2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-sql (>=2023.10.0, <=2023.10.1), mlrun (>=1.6.0rc1, <=1.6.0rc2) +1 more potentially affected by CVE-2026-23528 via distributed (2023.9.3)

distributed PYPI version 2023.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-sql =2023.10.0, =1.6.0rc1, =1.6.0rc2 - wisio 0.0.2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...