connector-db-tools (0.0.1), cooka (>=0.1.2, <=0.1.5) +18 more potentially affected by CVE-2026-23528 via distributed (2024.8.0)

distributed PYPI version 2024.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - connector-db-tools 0.0.1 - cooka =0.1.2, =0.3.0, =6.62.4, =0.9.1, =1.0.0, =1.0.9, =0.0.2, =0.13.0, =0.2.0, =0.1.2.dev39, =0.1.1,...

trenchripper (>=0.0.4, <=0.2.1) potentially affected by CVE-2026-23528 via distributed (2.12.0)

distributed PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - trenchripper =0.0.4, =0.2.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

wisio (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-23528 via distributed (2023.4.1)

distributed PYPI version 2023.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - wisio =0.1.0, =0.1.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2026-23528 via distributed (2.25.0)

distributed PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

dask-cuda (>=22.6.0a220527, <=22.8.0a220527) potentially affected by CVE-2026-23528 via distributed (2022.5.1)

distributed PYPI version 2022.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =22.6.0a220527, =22.8.0a220527 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

dataprep (>=0.2.10a0, <=0.2.13.post2) potentially affected by CVE-2026-23528 via distributed (2.10.0)

distributed PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataprep =0.2.10a0, =0.2.13.post2 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

arctic-ai (0.1.0), devito (4.8.0) +1 more potentially affected by CVE-2026-23528 via distributed (2023.2.1)

distributed PYPI version 2023.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - arctic-ai 0.1.0 - devito 4.8.0 - nwp-consumer =0.0.1, =0.1.23 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

aces-apps (1.5.4), atflagger (>=0.2.0, <=0.4.6) +36 more potentially affected by CVE-2026-23528 via distributed (2022.12.1)

distributed PYPI version 2022.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - aces-apps 1.5.4 - atflagger =0.2.0, =0.1.0, =1.3.0, =0.0.2.dev0, =0.4.1, =0.0.3, =0.5.0, =2022.12.0, =2022.12.1 and more Source cves:...

coiled-runtime (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-23528 via distributed (2022.6.0)

distributed PYPI version 2022.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - coiled-runtime =0.1.0, =0.1.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

hgdl (>=2.1.6, <=2.1.7), nima (0.10.0) potentially affected by CVE-2026-23528 via distributed (2024.5.0)

distributed PYPI version 2024.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - hgdl =2.1.6, =2.1.7 - nima 0.10.0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

mobilkit (>=0.2.5, <=0.2.6) potentially affected by CVE-2026-23528 via distributed (2022.4.1)

distributed PYPI version 2022.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - mobilkit =0.2.5, =0.2.6 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

cugraph-cu11 (>=25.4.0, <=25.4.1), cugraph-cu12 (>=25.4.0, <=25.4.1) +21 more potentially affected by CVE-2026-23528 via distributed (2025.2.0)

distributed PYPI version 2025.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cugraph-cu11 =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.5.0, =25.5.0, =25.5.1 - cuxfilter-cu11 25.4.0 - cuxfilter-cu12...

dask-cuda (24.8.2), meersolar (>=1.0.3, <=3.3.0) +4 more potentially affected by CVE-2026-23528 via distributed (2024.7.1)

distributed PYPI version 2024.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda 24.8.2 - meersolar =1.0.3, =2.1.11, =0.1.1, =0.2.3 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

autogluon (>=0.3.2b20211216, <=0.5.3), autogluon-core (>=0.3.2b20211216, <=0.6.3b20230202) +19 more potentially affected by CVE-2026-23528 via distributed (2021.11.2)

distributed PYPI version 2021.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - autogluon =0.3.2b20211216, =0.3.2b20211216, =0.6.3b20230126, =0.4.3b20220616, =0.3.2b20211216, =0.3.2b20211216, =0.5.0b20220623,...

zftracker (>=0.0.7, <=0.0.8) potentially affected by CVE-2026-23528 via distributed (2023.9.1)

distributed PYPI version 2023.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - zftracker =0.0.7, =0.0.8 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

devito (4.4.0), flowi (0.3.7) potentially affected by CVE-2026-23528 via distributed (2021.4.1)

distributed PYPI version 2021.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito 4.4.0 - flowi 0.3.7 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

aggfly (>=0.1.0, <=0.1.5), cellseg-gsontools (0.1.3) +26 more potentially affected by CVE-2026-23528 via distributed (2023.12.1)

distributed PYPI version 2023.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - aggfly =0.1.0, =0.1.3, =0.14.0, =0.1.0, =2.1.0, =0.3.2, =0.1.0, =0.1.0, =3.0.0, =0.5.3, =0.5.8 and more Source cves: CVE-2026-23528...

crl-datacube (0.1.13) potentially affected by CVE-2026-23528 via distributed (2024.11.0)

distributed PYPI version 2024.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - crl-datacube 0.1.13 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

azureml-automl-dnn-nlp (>=1.37.0, <=1.46.1.post1), azureml-automl-dnn-vision (>=1.37.0, <=1.46.1) +31 more potentially affected by CVE-2026-23528 via distributed (2.30.1)

distributed PYPI version 2.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azureml-automl-dnn-nlp =1.37.0, =1.37.0, =1.34.0, =1.37.0, =1.37.0, =0.1.0, =0.9.22.post0, =0.1.0, =0.1.0, =0.1.0a1, =0.0.5, =0.0.5, =0.1...

dedl-stack-client (>=2024.4.1, <=2025.5.1), nima (>=0.7.2, <=0.7.3) potentially affected by CVE-2026-23528 via distributed (2023.8.0)

distributed PYPI version 2023.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dedl-stack-client =2024.4.1, =0.7.2, =0.7.3 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...