irrd (4.0.0), neural-mmo (>=1.5.1, <=1.5.2.2) +1 more potentially affected by CVE-2026-106454 via twisted (19.2.0)

twisted PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - irrd 4.0.0 - neural-mmo =1.5.1, =1.5.2.2 - nmmo 1.5.3.2 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...

cyclone (>=1.2.0, <=1.3.0), irrd (>=4.0.1, <=4.0.8) +3 more potentially affected by CVE-2026-106454 via twisted (19.2.1)

twisted PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cyclone =1.2.0, =4.0.1, =1.0.0, =0.1.0a23, =0.1.0, =0.2.1 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...

cyclone (>=1.2.0, <=1.3.0), irrd (>=4.0.1, <=4.0.8) +3 more potentially affected by CVE-2024-41671 via twisted (19.2.1)

twisted PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cyclone =1.2.0, =4.0.1, =1.0.0, =0.1.0a23, =0.1.0, =0.2.1 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

irrd (4.0.0), neural-mmo (>=1.5.1, <=1.5.2.2) +1 more potentially affected by CVE-2024-41671 via twisted (19.2.0)

twisted PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - irrd 4.0.0 - neural-mmo =1.5.1, =1.5.2.2 - nmmo 1.5.3.2 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

bootleg (1.1.0), cyberbrain (0.2.3) +6 more potentially affected by CVE-2022-31116 via ujson (4.1.0)

ujson PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - bootleg 1.1.0 - cyberbrain 0.2.3 - dataplate =0.2.0, =4.2.0, =0.7.0, =0.3.3, =0.2.0, =0.2.1 Source cves: CVE-2022-31116 Source advisory:...

bootleg (1.1.0), cyberbrain (0.2.3) +6 more potentially affected by CVE-2022-31117 via ujson (4.1.0)

ujson PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - bootleg 1.1.0 - cyberbrain 0.2.3 - dataplate =0.2.0, =4.2.0, =0.7.0, =0.3.3, =0.2.0, =0.2.1 Source cves: CVE-2022-31117 Source advisory:...

bootleg (1.1.0), cyberbrain (0.2.3) +6 more potentially affected by CVE-2026-54911 via ujson (4.1.0)

ujson PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - bootleg 1.1.0 - cyberbrain 0.2.3 - dataplate =0.2.0, =4.2.0, =0.7.0, =0.3.3, =0.2.0, =0.2.1 Source cves: CVE-2026-54911 Source advisory:...

arikaim (>=0.5.6, <=0.5.11), ellar (>=0.7.0, <=0.7.3) +3 more potentially affected by CVE-2026-54282 via starlette (0.37.1)

starlette PYPI version 0.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - arikaim =0.5.6, =0.7.0, =4.4.4, =0.1.2, =0.1.1, =0.1.12 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...

irrd (>=4.4.0, <=4.4.3), ofjustpy (1.1.2) +3 more potentially affected by CVE-2026-54282 via starlette (0.31.0)

starlette PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - irrd =4.4.0, =4.4.3 - ofjustpy 1.1.2 - ofjustpy-engine 1.1.3 - ofjustpy-plugins 0.0.1 - oj-signing-middleware 0.2.1 Source cves: CVE-2026-542...

bootleg (1.1.0), cyberbrain (0.2.3) +6 more potentially affected by CVE-2026-54911 via ujson (4.1.0)

ujson PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - bootleg 1.1.0 - cyberbrain 0.2.3 - dataplate =0.2.0, =4.2.0, =0.7.0, =0.3.3, =0.2.0, =0.2.1 Source cves: CVE-2026-54911 Source advisory:...

irrd (>=4.4.0, <=4.4.3), ofjustpy (1.1.2) +3 more potentially affected by CVE-2026-48817 via starlette (0.31.0)

starlette PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - irrd =4.4.0, =4.4.3 - ofjustpy 1.1.2 - ofjustpy-engine 1.1.3 - ofjustpy-plugins 0.0.1 - oj-signing-middleware 0.2.1 Source cves: CVE-2026-488...

arikaim (>=0.5.6, <=0.5.11), ellar (>=0.7.0, <=0.7.3) +3 more potentially affected by CVE-2026-48817 via starlette (0.37.1)

starlette PYPI version 0.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - arikaim =0.5.6, =0.7.0, =4.4.4, =0.1.2, =0.1.1, =0.1.12 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

arikaim (>=0.5.6, <=0.5.11), ellar (>=0.7.0, <=0.7.3) +3 more potentially affected by CVE-2026-48818 via starlette (0.37.1)

starlette PYPI version 0.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - arikaim =0.5.6, =0.7.0, =4.4.4, =0.1.2, =0.1.1, =0.1.12 Source cves: CVE-2026-48818 Source advisory: OSV:PYSEC-2026-2281...

irrd (>=4.4.0, <=4.4.3), ofjustpy (1.1.2) +3 more potentially affected by CVE-2026-54282 via starlette (0.31.0)

starlette PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - irrd =4.4.0, =4.4.3 - ofjustpy 1.1.2 - ofjustpy-engine 1.1.3 - ofjustpy-plugins 0.0.1 - oj-signing-middleware 0.2.1 Source cves: CVE-2026-542...

arikaim (>=0.5.6, <=0.5.11), ellar (>=0.7.0, <=0.7.3) +3 more potentially affected by CVE-2026-54282 via starlette (0.37.1)

starlette PYPI version 0.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - arikaim =0.5.6, =0.7.0, =4.4.4, =0.1.2, =0.1.1, =0.1.12 Source cves: CVE-2026-54282 Source advisory: OSV:GHSA-JP82-JPQV-5VV3...

irrd (>=4.4.0, <=4.4.3), ofjustpy (1.1.2) +3 more potentially affected by CVE-2026-48818 via starlette (0.31.0)

starlette PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - irrd =4.4.0, =4.4.3 - ofjustpy 1.1.2 - ofjustpy-engine 1.1.3 - ofjustpy-plugins 0.0.1 - oj-signing-middleware 0.2.1 Source cves: CVE-2026-488...

arikaim (>=0.5.6, <=0.5.11), ellar (>=0.7.0, <=0.7.3) +3 more potentially affected by CVE-2026-48818 via starlette (0.37.1)

starlette PYPI version 0.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - arikaim =0.5.6, =0.7.0, =4.4.4, =0.1.2, =0.1.1, =0.1.12 Source cves: CVE-2026-48818 Source advisory: OSV:GHSA-WQP7-X3PW-XC5R...

irrd (>=4.4.0, <=4.4.3), ofjustpy (1.1.2) +3 more potentially affected by CVE-2026-48817 via starlette (0.31.0)

starlette PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - irrd =4.4.0, =4.4.3 - ofjustpy 1.1.2 - ofjustpy-engine 1.1.3 - ofjustpy-plugins 0.0.1 - oj-signing-middleware 0.2.1 Source cves: CVE-2026-488...

arikaim (>=0.5.6, <=0.5.11), ellar (>=0.7.0, <=0.7.3) +3 more potentially affected by CVE-2026-48817 via starlette (0.37.1)

starlette PYPI version 0.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - arikaim =0.5.6, =0.7.0, =4.4.4, =0.1.2, =0.1.1, =0.1.12 Source cves: CVE-2026-48817 Source advisory: OSV:GHSA-X746-7M8F-X49C...

irrd (>=4.4.0, <=4.4.3), ofjustpy (1.1.2) +3 more potentially affected by CVE-2026-48710 via starlette (0.31.0)

starlette PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - irrd =4.4.0, =4.4.3 - ofjustpy 1.1.2 - ofjustpy-engine 1.1.3 - ofjustpy-plugins 0.0.1 - oj-signing-middleware 0.2.1 Source cves: CVE-2026-487...