azureml-automl-dnn-nlp (>=1.47.0, <=1.48.0.post1), azureml-automl-dnn-vision (>=1.47.0, <=1.48.0) +4 more potentially affected by CVE-2026-23528 via distributed (2021.6.0)

distributed PYPI version 2021.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azureml-automl-dnn-nlp =1.47.0, =1.47.0, =1.47.0, =1.47.0, =1.47.0.post1, =0.20.0, =0.21.1 Source cves: CVE-2026-23528 Source advisory:...

dask-cuda (>=21.8.0a210728, <=21.10.0a210728), lddl (0.1.0) potentially affected by CVE-2026-23528 via distributed (2021.7.1)

distributed PYPI version 2021.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =21.8.0a210728, =21.10.0a210728 - lddl 0.1.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

devito (4.5.0), divina (>=2021.8.2.dev2, <=2021.9.5) +2 more potentially affected by CVE-2026-23528 via distributed (2021.7.2)

distributed PYPI version 2021.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito 4.5.0 - divina =2021.8.2.dev2, =0.0.3, =0.0.6.dev0 - whakaari 0.0.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-...

dask-sql (2022.8.0), simmate (>=0.8.0, <=0.11.1) potentially affected by CVE-2026-23528 via distributed (2022.8.0)

distributed PYPI version 2022.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-sql 2022.8.0 - simmate =0.8.0, =0.11.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

covigator (>=1.0.0.dev1, <=2.2.3), dask-cuda (>=22.10.0a221004, <=22.12.0a221004) potentially affected by CVE-2026-23528 via distributed (2022.9.2)

distributed PYPI version 2022.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - covigator =1.0.0.dev1, =22.10.0a221004, =22.12.0a221004 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

euba (0.1.2), simmate (0.12.0) +1 more potentially affected by CVE-2026-23528 via distributed (2022.9.0)

distributed PYPI version 2022.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - euba 0.1.2 - simmate 0.12.0 - vpt =1.0.1, =1.1.2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

climakitae (>=1.0.0, <=1.0.1), climakitaegui (1.0.1) +1 more potentially affected by CVE-2026-23528 via distributed (2022.9.1)

distributed PYPI version 2022.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - climakitae =1.0.0, =1.0.1 - climakitaegui 1.0.1 - netcdfella 0.3.4 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-sql (2022.10.1), geoapps (>=0.9.0.post1, <=0.9.2) +2 more potentially affected by CVE-2026-23528 via distributed (2022.10.0)

distributed PYPI version 2022.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-sql 2022.10.1 - geoapps =0.9.0.post1, =0.3.0, =0.3.3 - peak-finder-app 0.1.0a1 Source cves: CVE-2026-23528 Source advisory:...

dagster-dask (>=0.11.15rc0, <=0.12.14rc0), edx-prefectutils (>=2.0.1, <=2.3.8) +9 more potentially affected by CVE-2026-23528 via distributed (2023.3.0)

distributed PYPI version 2023.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dagster-dask =0.11.15rc0, =2.0.1, =0.0.3.dev0, =0.3.3, =0.2.2, =0.0.1, =0.9.0.9000, =0.14.20, =0.4.0b0, =0.5.0b0 - sundial-framework...

astrohack (>=0.0.1, <=0.1.6), tristan (>=0.2.3, <=0.3.2) potentially affected by CVE-2026-23528 via distributed (2023.3.2)

distributed PYPI version 2023.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - astrohack =0.0.1, =0.2.3, =0.3.2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-cuda (>=23.4.0a230405, <=23.8.0a230605), dask-sql (2023.4.0) +5 more potentially affected by CVE-2026-23528 via distributed (2023.3.2.1)

distributed PYPI version 2023.3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =23.4.0a230405, =0.0.1, =3.0.40, =3.1.3 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

datacube-ows (>=1.8.19, <=1.8.20) potentially affected by CVE-2026-23528 via distributed (2023.4.0)

distributed PYPI version 2023.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - datacube-ows =1.8.19, =1.8.20 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

autogluon (>=0.0.13b20200721, <=0.1.1b20210419), autogluon-core (>=0.0.15b20201014, <=0.0.15b20201023) +14 more potentially affected by CVE-2026-23528 via distributed (2023.5.0)

distributed PYPI version 2023.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - autogluon =0.0.13b20200721, =0.0.15b20201014, =0.0.15b20201024, =0.9.0, =0.9.0, =0.0.4.5, =1.0.0, =0.2.7, =0.3.0, =0.1.0, =2021.4.28rc1...

dask-sql (2023.6.0), flowdapt (>=0.1.0, <=0.1.8) +2 more potentially affected by CVE-2026-23528 via distributed (2023.5.1)

distributed PYPI version 2023.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-sql 2023.6.0 - flowdapt =0.1.0, =0.0.20, =0.0.4, =0.0.6 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

mobilkit (>=0.2.5, <=0.2.6) potentially affected by CVE-2026-23528 via distributed (2022.4.1)

distributed PYPI version 2022.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - mobilkit =0.2.5, =0.2.6 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

ax-env (>=0.2.6, <=0.3.1), dask-cuda (>=22.6.0a220528, <=22.8.0a220616) +5 more potentially affected by CVE-2026-23528 via distributed (2022.5.2)

distributed PYPI version 2022.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - ax-env =0.2.6, =22.6.0a220528, =0.1.8, =2022.7.0, =0.0.7, =0.0.15 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

blocktorch (>=1.33.1, <=1.33.2), climaticai (1.33.0) potentially affected by CVE-2026-23528 via distributed (2021.7.0)

distributed PYPI version 2021.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - blocktorch =1.33.1, =1.33.2 - climaticai 1.33.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

sgm-data (>=0.3.10b0, <=0.3.13b0) potentially affected by CVE-2026-23528 via distributed (2021.8.0)

distributed PYPI version 2021.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - sgm-data =0.3.10b0, =0.3.13b0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

coiled-runtime (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-23528 via distributed (2022.6.0)

distributed PYPI version 2022.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - coiled-runtime =0.1.0, =0.1.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

launchcontainers (>=0.0.1, <=0.3.16) potentially affected by CVE-2026-23528 via distributed (2022.7.0)

distributed PYPI version 2022.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - launchcontainers =0.0.1, =0.3.16 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...