datapipe-label-studio-lite (>=0.2.0, <=0.3.3) potentially affected by CVE-2025-25295 via label-studio-sdk (0.0.16)

label-studio-sdk PYPI version 0.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio-sdk and may be impacted: - datapipe-label-studio-lite =0.2.0, =0.3.3 Source cves: CVE-2025-25295 Source advisory: OSV:PYSEC-2026-1506...

nerblackbox (>=0.0.15, <=1.0.0) potentially affected by CVE-2025-25295 via label-studio-sdk (0.0.34)

label-studio-sdk PYPI version 0.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio-sdk and may be impacted: - nerblackbox =0.0.15, =1.0.0 Source cves: CVE-2025-25295 Source advisory: OSV:PYSEC-2026-1506...

berrydb (>=1.1.3, <=1.5.1), label-studio (>=1.13.0, <=1.15.0) potentially affected by CVE-2025-25295 via label-studio-sdk (>=1.0.4, <=1.0.8)

label-studio-sdk PYPI version =1.0.4, =1.1.3, =1.13.0, =1.15.0 Source cves: CVE-2025-25295 Source advisory: OSV:PYSEC-2026-1506...

hc-nlp (>=0.1.0, <=0.2.0) potentially affected by CVE-2025-25297 via label-studio (0.8.1)

label-studio PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - hc-nlp =0.1.0, =0.2.0 Source cves: CVE-2025-25297 Source advisory: OSV:PYSEC-2026-1503...

dataops-toolkits (>=0.1.1, <=0.1.2) potentially affected by CVE-2025-25297 via label-studio (1.5.0)

label-studio PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - dataops-toolkits =0.1.1, =0.1.2 Source cves: CVE-2025-25297 Source advisory: OSV:PYSEC-2026-1503...

dataops-toolkits (>=0.1.1, <=0.1.2) potentially affected by CVE-2025-25296 via label-studio (1.5.0)

label-studio PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - dataops-toolkits =0.1.1, =0.1.2 Source cves: CVE-2025-25296 Source advisory: OSV:PYSEC-2026-1504...

berrydb (>=1.0.9, <=1.1.2) potentially affected by CVE-2025-25295 via label-studio-sdk (0.0.1)

label-studio-sdk PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio-sdk and may be impacted: - berrydb =1.0.9, =1.1.2 Source cves: CVE-2025-25295 Source advisory: OSV:PYSEC-2026-1506...

gantry (>=0.5.11, <=0.6.13) potentially affected by CVE-2025-25295 via label-studio-sdk (0.0.21)

label-studio-sdk PYPI version 0.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio-sdk and may be impacted: - gantry =0.5.11, =0.6.13 Source cves: CVE-2025-25295 Source advisory: OSV:PYSEC-2026-1506...

django-dragon (0.1.1), label-studio (>=1.3.0, <=1.4.0) potentially affected by CVE-2024-45231 via django (3.1.13)

django PYPI version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-dragon 0.1.1 - label-studio =1.3.0, =1.4.0 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

Label Studio < 1.18.0 - Reflected XSS

Label Studio 1.18.0 contains a stored XSS caused by improper sanitization in POST /projects/upload-example/ endpoint, letting attackers inject malicious scripts to hijack sessions and perform unauthorized actions, exploit requires sending crafted requests. id: CVE-2025-47783 info: name: Label...

django-dragon (0.1.1), label-studio (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-48587 via django (3.1.13)

django PYPI version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-dragon 0.1.1 - label-studio =1.3.0, =1.4.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

django-dragon (0.1.1), label-studio (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-6873 via django (3.1.13)

django PYPI version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-dragon 0.1.1 - label-studio =1.3.0, =1.4.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

django-dragon (0.1.1), label-studio (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-8404 via django (3.1.13)

django PYPI version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-dragon 0.1.1 - label-studio =1.3.0, =1.4.0 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

GHSA-C38F-WX89-P2XG vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-44660 vulnerabilities

Vulnerabilities for packages: label-studio...

dataops-toolkits (>=0.1.1, <=0.1.2) potentially affected by CVE-2022-32179 via label-studio (1.5.0)

label-studio PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - dataops-toolkits =0.1.1, =0.1.2 Source cves: CVE-2022-32179 Source advisory: MEND:CVE-2022-32179...

dataops-toolkits (>=0.1.1, <=0.1.2) potentially affected by CVE-2022-32178 via label-studio (1.5.0)

label-studio PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - dataops-toolkits =0.1.1, =0.1.2 Source cves: CVE-2022-32178 Source advisory: MEND:CVE-2022-32178...

auto-augment (1.0.0), betfairlightweight (>=0.0.0b14, <=2.7.0) +13 more potentially affected by CVE-2026-44660 via ujson (3.0.0)

ujson PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - auto-augment 1.0.0 - betfairlightweight =0.0.0b14, =10.0.0, =1.6.8, =0.13.2, =0.1.0, =4.1.0, =0.7.4, =0.0.1b1, =0.12.1, =0.0.1, =1.14.9, =1.0.21,...

CVE-2026-32597 vulnerabilities

Vulnerabilities for packages: az, keep-fips, airflow-core, authentik, pgadmin4-fips, datadog-agent-fips, dbt-snowflake, ggshield, semgrep, py3-cassandra-medusa, awx, metaflow-service-fips, superset, vllm-openai-cuda-12.9, kserve, open-webui, label-studio, airflow, keep, opal, litellm, request-127...

GHSA-752W-5FWX-JX9F vulnerabilities

Vulnerabilities for packages: az, keep-fips, airflow-core, authentik, pgadmin4-fips, datadog-agent-fips, dbt-snowflake, ggshield, semgrep, py3-cassandra-medusa, awx, metaflow-service-fips, superset, vllm-openai-cuda-12.9, kserve, open-webui, label-studio, airflow, keep, opal, litellm, request-127...