aleph-alpha-inference (1.0.0), caption-flow (>=0.5.0, <=0.5.1) +9 more potentially affected by CVE-2026-105755 via vllm (>=0.19.0, <=0.29.0)

vllm PYPI version =0.19.0, =0.5.0, =0.1.0, =2.5.3, =0.1.1.4, =2.1.2, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-105755 Source advisory: MEND:CVE-2026-105755...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-92959 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-92959 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

aleph-alpha-inference (1.0.0), evoke-vllm (>=0.1.0, <=0.1.1) +7 more potentially affected by CVE-2026-105754 via vllm (>=0.21.0, <=0.29.0)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-105754 Source advisory: MEND:CVE-2026-105754...

@aiconnect/codelets-runner (>=0.1.0, <=0.2.0), @cairncms/api (>=1.0.0-beta.1, <=1.0.0-beta.4) +23 more potentially affected by CVE-2026-92954 via vm2 (>=3.10.0, <=3.11.6)

vm2 NPM version =3.10.0, =0.1.0, =1.0.0-beta.1, =3.0.46, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =1.0.0-beta.1, =2.32.0, =2.32.0, =2.40.2 and more Source cves: CVE-2026-92954 Source advisory: GHSA-GJQ8-XM47-88RC...

ado-vllm-performance (>=1.2.2, <=1.3.3), caption-flow (>=0.1.0, <=0.5.1) +31 more potentially affected by CVE-2026-105753 via vllm (>=0.10.2, <=0.27.1)

vllm PYPI version =0.10.2, =1.2.2, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.0, =0.3.9.post2, =0.5.2, =1.0.0.dev0, =0.1.0, =0.1.1, =2.5.3, =0.0.2, =0.1.0 and more Source cves: CVE-2026-105753 Source advisory: MEND:CVE-2026-105753...

@dataform/cli (>=3.0.57, <=3.0.71), @n8n-plus/n8n-plus (>=2.32.7, <=2.37.9) +18 more potentially affected by CVE-2026-92936 via vm2 (>=3.11.1, <=3.11.6)

vm2 NPM version =3.11.1, =3.0.57, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =2.32.0, =2.32.0, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.74.12 and more Source cves: CVE-2026-92936 Source advisory: GHSA-X6M4-CHR9-CG97...

@dataform/cli (>=3.0.57, <=3.0.71), @n8n-plus/n8n-plus (>=2.32.7, <=2.37.9) +18 more potentially affected by CVE-2026-92936 via vm2 (>=3.11.1, <=3.11.6)

vm2 NPM version =3.11.1, =3.0.57, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =2.32.0, =2.32.0, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.74.12 and more Source cves: CVE-2026-92936 Source advisory: OSV:GHSA-X6M4-CHR9-CG97...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-92946 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-92946 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

ai4rag (>=0.9.0, <=0.10.4), distlk (0.1.0rc1) +3 more potentially affected by CVE-2026-105751 via docling (>=2.107.0, <=2.118.1)

docling PYPI version =2.107.0, =0.9.0, =0.3.0, =0.3.0, =0.3.2 Source cves: CVE-2026-105751 Source advisory: OSV:GHSA-4XHP-XG4W-8PPM...

ai4rag (>=0.9.0, <=0.10.4), distlk (0.1.0rc1) +3 more potentially affected by CVE-2026-105751 via docling (>=2.107.0, <=2.118.1)

docling PYPI version =2.107.0, =0.9.0, =0.3.0, =0.3.0, =0.3.2 Source cves: CVE-2026-105751 Source advisory: GHSA-4XHP-XG4W-8PPM...

ado-vllm-performance (>=1.2.2, <=1.3.3), aleph-alpha-inference (1.0.0) +34 more potentially affected by CVE-2026-105752 via vllm (>=0.10.1, <=0.29.0)

vllm PYPI version =0.10.1, =1.2.2, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.0, =0.3.9.post2, =0.5.2, =1.0.0.dev0, =0.1.0, =0.1.1, =2.5.3, =2.10.1 and more Source cves: CVE-2026-105752 Source advisory: MEND:CVE-2026-105752...

ai4rag (>=0.9.0, <=0.24.0), conexus (>=7.29.0, <=7.82.0) +18 more potentially affected by CVE-2026-105744 via docling-slim (>=2.94.0, <=2.131.0)

docling-slim PYPI version =2.94.0, =0.9.0, =7.29.0, =2.94.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.7.0, =0.7.1 and more Source cves: CVE-2026-105744 Source advisory: SNYK:PYTHON-DOCLINGSLIM-20537229...

ai4rag (>=0.9.0, <=0.24.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105743 via docling-slim (>=2.92.0, <=2.131.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105743 Source advisory: SNYK:PYTHON-DOCLINGSLIM-20537233...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.10.4) +41 more potentially affected by CVE-2026-105745 via docling (>=2.28.1, <=2.130.0)

docling PYPI version =2.28.1, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =0.0.51 and more Source cves: CVE-2026-105745 Source advisory: SNYK:PYTHON-DOCLING-20537230...

ai4rag (>=0.8.0, <=0.10.4), askbase (>=1.0.0, <=1.0.2) +14 more potentially affected by CVE-2026-105750 via docling (>=2.82.0, <=2.118.0)

docling PYPI version =2.82.0, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =0.3.0, =0.40.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.0.1, =0.6.27, =0.1.0, =0.2.0 and more Source cves: CVE-2026-105750 Source advisory: OSV:PYSEC-2026-4196...

ai4rag (>=0.9.0, <=0.10.4), conexus (>=7.29.0, <=7.29.1) +17 more potentially affected by CVE-2026-105744 via docling (>=2.94.0, <=2.131.0)

docling PYPI version =2.94.0, =0.9.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.7.0, =0.7.1 - lollms 11.0.0 - pdf-to-epub 0.1.0 and more Source cves: CVE-2026-105744 Source advisory: OSV:PYSEC-2026-4191...

PYSEC-2026-4192

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories in docling/models/factories/basefactory.py call loadsetuptoolsentrypoints before applying the allowexternalplugins...

ai4rag (>=0.8.0, <=0.10.4), askbase (>=1.0.0, <=1.0.2) +31 more potentially affected by CVE-2026-105747 via docling (>=2.51.0, <=2.130.0)

docling PYPI version =2.51.0, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.40.0, =1.42.0 and more Source cves: CVE-2026-105747 Source advisory: OSV:PYSEC-2026-4194...