geonode (>=4.0.0, <=4.0.0.post1), jpeglib (0.10.16) potentially affected by CVE-2026-3219 via pip (22.2.1)

pip PYPI version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - geonode =4.0.0, =4.0.0.post1 - jpeglib 0.10.16 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

aiomobilevikings (0.1.0), aiorobonect (>=1.1.0, <=1.1.3) +5 more potentially affected by CVE-2026-3219 via pip (24.1.2)

pip PYPI version 24.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aiomobilevikings 0.1.0 - aiorobonect =1.1.0, =0.4.0, =4.4.0, =2.0.0.post0, =2.0.2 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

arvados-cwl-runner (>=2.6.0rc3, <=2.7.4), db-classifier (0.0.2) +18 more potentially affected by CVE-2026-49851 via mistune (2.0.5)

mistune PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - arvados-cwl-runner =2.6.0rc3, =2.0.5, =4.1.0, =0.8.4, =2.1.1, =1.0.0, =2.2.0, =0.0.1, =2.4.1rc3, =8.3.20221209165047, =8.5.20240102191335 - sitefa...

arvados-cwl-runner (>=2.6.0rc3, <=2.7.4), db-classifier (0.0.2) +18 more potentially affected by CVE-2026-59928 via mistune (2.0.5)

mistune PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - arvados-cwl-runner =2.6.0rc3, =2.0.5, =4.1.0, =0.8.4, =2.1.1, =1.0.0, =2.2.0, =0.0.1, =2.4.1rc3, =8.3.20221209165047, =8.5.20240102191335 - sitefa...

an-website (>=22.7.23, <=22.8.3), aws-toolbox (0.0.2) +10 more potentially affected by CVE-2026-59890 via setuptools (63.2.0)

setuptools PYPI version 63.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.7.23, =4.0.0, =1.0.6, =1.0.1, =0.13.0, =0.0.3, =0.0.4 - vpc-img-inst 1.0.0b7 Source cves: CVE-2026-59890 Source advisory:...

aitest-cli (>=0.0.7, <=0.0.9), geonode (4.4.5) potentially affected by CVE-2026-59890 via setuptools (63.0.0)

setuptools PYPI version 63.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aitest-cli =0.0.7, =0.0.9 - geonode 4.4.5 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

arvados-cwl-runner (>=2.6.0rc3, <=2.7.4), db-classifier (0.0.2) +18 more potentially affected by CVE-2026-59923 via mistune (2.0.5)

mistune PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - arvados-cwl-runner =2.6.0rc3, =2.0.5, =4.1.0, =0.8.4, =2.1.1, =1.0.0, =2.2.0, =0.0.1, =2.4.1rc3, =8.3.20221209165047, =8.5.20240102191335 - sitefa...

geonode (>=4.0.0, <=4.0.0.post1), jpeglib (0.10.16) potentially affected by CVE-2026-1703 via pip (22.2.1)

pip PYPI version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - geonode =4.0.0, =4.0.0.post1 - jpeglib 0.10.16 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

aiomobilevikings (0.1.0), aiorobonect (>=1.1.0, <=1.1.3) +5 more potentially affected by CVE-2025-8869 via pip (24.1.2)

pip PYPI version 24.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aiomobilevikings 0.1.0 - aiorobonect =1.1.0, =0.4.0, =4.4.0, =2.0.0.post0, =2.0.2 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

django-multitenancy-manager (>=0.0.2a0, <=0.0.2a27), django-tenants-manager (0.0.1) +1 more potentially affected by CVE-2025-48383 via django-select2 (7.10.1)

django-select2 PYPI version 7.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-select2 and may be impacted: - django-multitenancy-manager =0.0.2a0, =0.0.2a27 - django-tenants-manager 0.0.1 - geonode 4.0.1 Source cves: CVE-2025-48383 Source...

geonode (4.4.5), mayan-edms (>=4.6.13, <=4.7.9) +4 more potentially affected by CVE-2026-48588 via django (4.2.29)

django PYPI version 4.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - geonode 4.4.5 - mayan-edms =4.6.13, =7.4.0, =7.4.0, =4.0.17, =4.0.18 - pheme 21.12.1 Source cves: CVE-2026-48588 Source advisory:...

geonode (4.4.5), mayan-edms (>=4.6.13, <=4.7.9) +4 more potentially affected by CVE-2026-53878 via django (4.2.29)

django PYPI version 4.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - geonode 4.4.5 - mayan-edms =4.6.13, =7.4.0, =7.4.0, =4.0.17, =4.0.18 - pheme 21.12.1 Source cves: CVE-2026-53878 Source advisory:...

geonode (4.4.5), mayan-edms (>=4.6.13, <=4.7.9) +4 more potentially affected by CVE-2026-53877 via django (4.2.29)

django PYPI version 4.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - geonode 4.4.5 - mayan-edms =4.6.13, =7.4.0, =7.4.0, =4.0.17, =4.0.18 - pheme 21.12.1 Source cves: CVE-2026-53877 Source advisory:...

djangodjangodjango (4.2.24), geonode (4.4.4) +1 more potentially affected by CVE-2026-53878 via django (4.2.24)

django PYPI version 4.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.24 - geonode 4.4.4 - mayan-edms =4.6.10, =4.10.0 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...

djangodjangodjango (4.2.24), geonode (4.4.4) +1 more potentially affected by CVE-2026-53877 via django (4.2.24)

django PYPI version 4.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.24 - geonode 4.4.4 - mayan-edms =4.6.10, =4.10.0 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

binance-futures-connector (>=1.8.0, <=1.10.0), geonode (4.0.0rc0) +1 more potentially affected by CVE-2024-41671 via twisted (22.2.0)

twisted PYPI version 22.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-futures-connector =1.8.0, =1.10.0 - geonode 4.0.0rc0 - nucypher 6.0.0 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

ezmote-cmdserver (>=0.7.2, <=0.7.11), geonode (4.0.1) +7 more potentially affected by CVE-2024-41671 via twisted (22.8.0)

twisted PYPI version 22.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - ezmote-cmdserver =0.7.2, =0.0.4, =0.1.0, =0.9.2, =1.5.2, =0.0.0, =1.0.0, =1.0.3 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

carml (>=22.7.0, <=22.7.1), clutch-co-scraper (1.0.0) +6 more potentially affected by CVE-2024-41671 via twisted (22.4.0)

twisted PYPI version 22.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carml =22.7.0, =4.1.0, =4.0.0rc1, =0.0.1, =0.0.2 - nucypher 6.1.0 - pterodactyl-exporter 0.1.0 Source cves: CVE-2024-41671 Source advisory:...

geonode (3.3.3) potentially affected by CVE-2024-41671 via twisted (22.4.0rc1)

twisted PYPI version 22.4.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - geonode 3.3.3 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

an-website (>=22.7.23, <=22.8.3), aws-toolbox (0.0.2) +10 more potentially affected by CVE-2024-6345 via setuptools (63.2.0)

setuptools PYPI version 63.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.7.23, =4.0.0, =1.0.6, =1.0.1, =0.13.0, =0.0.3, =0.0.4 - vpc-img-inst 1.0.0b7 Source cves: CVE-2024-6345 Source advisory:...