galaxy-app (>=23.0.1, <=24.0.3), galaxy-data (>=22.1.1, <=24.1.3) +13 more potentially affected by CVE-2026-57175 via social-auth-core (4.0.3)

social-auth-core PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy-app =23.0.1, =22.1.1, =23.0.1, =23.0.2, =21.9.0, =23.2.1, =0.4.0, =0.0.1, =0.13.0, =0.6.0, =0.1.0, =0.8.0, =0.1.0, =0.9.1...

netbox-types (>=4.5.4, <=4.6.5), umap-project (>=3.6.2, <=3.7.3) potentially affected by CVE-2026-57177 via social-auth-core (4.8.5)

social-auth-core PYPI version 4.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - netbox-types =4.5.4, =3.6.2, =3.7.3 Source cves: CVE-2026-57177 Source advisory: OSV:PYSEC-2026-4169...

social-auth-liu (0.0.1) potentially affected by CVE-2026-57175 via social-auth-core (1.2.0)

social-auth-core PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - social-auth-liu 0.0.1 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

masonite-socialite (>=0.0.1, <=0.0.5), richie (>=2.0.0b9, <=2.7.1) potentially affected by CVE-2026-57175 via social-auth-core (3.2.0)

social-auth-core PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - masonite-socialite =0.0.1, =2.0.0b9, =2.7.1 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

argilla-server (>=1.24.0rc3, <=2.8.0), extralit (0.1.0a5) +2 more potentially affected by CVE-2026-57177 via social-auth-core (4.5.6)

social-auth-core PYPI version 4.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argilla-server =1.24.0rc3, =0.2.0, =3.0.0, =3.4.0 Source cves: CVE-2026-57177 Source advisory: OSV:PYSEC-2026-4169...

django-globus-portal-framework (>=0.3.23, <=0.3.24), unicef-security (0.7.0) potentially affected by CVE-2026-57175 via social-auth-core (4.0.2)

social-auth-core PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - django-globus-portal-framework =0.3.23, =0.3.24 - unicef-security 0.7.0 Source cves: CVE-2026-57175 Source advisory:...

umap-project (>=2.0.0a3, <=2.2.0b0) potentially affected by CVE-2026-57175 via social-auth-core (4.5.3)

social-auth-core PYPI version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =2.0.0a3, =2.2.0b0 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

ezbeq (>=2.5.0, <=2.8.0), fiduswriter (>=4.1.1, <=5.0.0a2) +6 more potentially affected by CVE-2026-77528 via autobahn (25.12.2)

autobahn PYPI version 25.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - ezbeq =2.5.0, =4.1.1, =3.11.3, =1.3.9, =0.28.0, =2.0.0, =2.1.9 - senbai 0.0.1 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

autobahntestsuite (>=0.8.0, <=0.8.2) potentially affected by CVE-2026-77528 via autobahn (0.10.9)

autobahn PYPI version 0.10.9 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - autobahntestsuite =0.8.0, =0.8.2 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

alexa-browser-client (>=3.0.0, <=3.3.2), bluedot-rest-framework (>=2.0.90, <=2.2.90) +9 more potentially affected by CVE-2026-77528 via autobahn (25.10.2)

autobahn PYPI version 25.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - alexa-browser-client =3.0.0, =2.0.90, =2.0.1, =0.1.10, =0.1.2, =1.3.7, =0.9.0a5, =10.0.0a2, =10.0.0a1, =36.1.0 - thenewboston-ml-dev 0.2.3...

nucypher (0.1.0a29) potentially affected by CVE-2026-77528 via autobahn (19.9.3)

autobahn PYPI version 19.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - nucypher 0.1.0a29 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

marlben (>=1.0.0, <=1.0.4), neural-mmo (>=1.5.1, <=1.5.2.2) +1 more potentially affected by CVE-2026-77528 via autobahn (19.3.3)

autobahn PYPI version 19.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - marlben =1.0.0, =1.5.1, =1.5.2.2 - nmmo 1.5.3.2 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

acdh-spacytei (>=0.0.1, <=0.0.5), ircrobots (0.3.6) potentially affected by CVE-2026-63374 via anyio (1.3.1)

anyio PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - acdh-spacytei =0.0.1, =0.0.5 - ircrobots 0.3.6 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

3lc (>=2.3.84, <=2.6.4), a-data-processing (0.0.1) +2162 more potentially affected by CVE-2026-63374 via anyio (3.7.1)

anyio PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - 3lc =2.3.84, =0.1.0, =1.2.1b0, =0.1.0, =0.7.3.post0, =0.1.0, =0.1.0, =0.1.0, =0.14.0.3rc1, =0.0.12, =0.0.18 and more Source cves: CVE-2026-63374 Sourc...

advans-erp-checker (>=0.1.0, <=0.1.1), is-wordpress (0.0.2) potentially affected by CVE-2026-86000 via soupsieve (1.7.3)

soupsieve PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - advans-erp-checker =0.1.0, =0.1.1 - is-wordpress 0.0.2 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

boj2md (>=0.0.1, <=0.0.2), desktopscoreviewer (>=1.0.2, <=1.0.3) +3 more potentially affected by CVE-2026-86000 via soupsieve (1.9.1)

soupsieve PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - boj2md =0.0.1, =1.0.2, =0.2.0, =1.3.7, =1.4.4 - subtidal 1.0.0 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), categorical-encoding (>=0.0.0, <=0.3.0) +33 more potentially affected by CVE-2026-86049 via jupyter-server (1.15.6)

jupyter-server PYPI version 1.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - aiidalab-widgets-base =1.3.4, =0.0.0, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =0.0.0,...

suruguya (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-85999 via soupsieve (1.9.0)

soupsieve PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - suruguya =0.0.1, =0.0.2 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

9gag-scraper (>=0.0.6, <=0.0.7), euroleague-scrapping (>=0.0.1.dev10, <=0.0.1.dev21) potentially affected by CVE-2026-85999 via soupsieve (1.9.6)

soupsieve PYPI version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - 9gag-scraper =0.0.6, =0.0.1.dev10, =0.0.1.dev21 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

1337x (1.2.5), 8a-scraper (>=0.0.2, <=0.0.4) +667 more potentially affected by CVE-2026-85999 via soupsieve (>=2.0.0, <=2.8.4)

soupsieve PYPI version =2.0.0, =0.0.2, =1.0.4, =0.1.3, =1.0.0, =0.4.0, =1.2.3, =0.2.0, =0.87.2.dev9, =0.24.0, =0.1.0.dev19, =1.3.0, =0.1.0, =1.3.0, =1.3.3 and more Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...