10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.7) +1463 more potentially affected by CVE-2026-102271 via pyjwt (>=2.4.0, <=2.13.0)

pyjwt PYPI version =2.4.0, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =1.8.26, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =1.2.0, =0.1.1, =0.1.15 - aegis-security-console 2.4.0 and more Source cves: CVE-2026-102271 Source advisory: OSV:PYSEC-2026-4149...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102269 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.7) +1689 more potentially affected by CVE-2026-102269 via pyjwt (>=2.0.0a2, <=2.13.0)

pyjwt PYPI version =2.0.0a2, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =1.8.26, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =1.2.0, =1.2.1 - adminui 1.5.2 and more Source cves: CVE-2026-102269 Source advisory: OSV:PYSEC-2026-4147...

django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-102269 via pyjwt (0.4.1)

pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-102269 Source advisory: OSV:PYSEC-2026-4147...

b9gemyaeix (>=4.14.0, <=4.14.1), edx-oauth2-wordpress-backend (>=1.0.7, <=1.0.8) +15 more potentially affected by CVE-2026-57176 via social-auth-core (4.3.0)

social-auth-core PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - b9gemyaeix =4.14.0, =1.0.7, =1.0.0, =1.0.0, =1.0.0rc1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.5.0rc4, =4.0.0rc6,...

argus-server (>=1.23.0, <=1.34.1), bitcaster (>=2.1.0rc1, <=2.2.0) +14 more potentially affected by CVE-2026-57176 via social-auth-core (4.8.7)

social-auth-core PYPI version 4.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argus-server =1.23.0, =2.1.0rc1, =2.4.6, =2.0.9, =1.0.1, =0.16.0, =2024.1.0, =1.62.0, =5.7.0, =0.10.0, =5.6.0, =0.1.0, =0.12.0 a...

umap-project (3.1.0) potentially affected by CVE-2026-57179 via social-auth-core (4.6.1)

social-auth-core PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project 3.1.0 Source cves: CVE-2026-57179 Source advisory: OSV:PYSEC-2026-4168...

umap-project (3.1.0) potentially affected by CVE-2026-57176 via social-auth-core (4.6.1)

social-auth-core PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project 3.1.0 Source cves: CVE-2026-57176 Source advisory: OSV:PYSEC-2026-4166...

umap-project (>=3.4.1, <=3.5.0) potentially affected by CVE-2026-57176 via social-auth-core (4.8.1)

social-auth-core PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =3.4.1, =3.5.0 Source cves: CVE-2026-57176 Source advisory: OSV:PYSEC-2026-4166...

umap-project (>=3.4.1, <=3.5.0) potentially affected by CVE-2026-57179 via social-auth-core (4.8.1)

social-auth-core PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =3.4.1, =3.5.0 Source cves: CVE-2026-57179 Source advisory: OSV:PYSEC-2026-4168...

umap-project (>=1.2.2, <=1.2.3) potentially affected by CVE-2026-57176 via social-auth-core (3.3.2)

social-auth-core PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =1.2.2, =1.2.3 Source cves: CVE-2026-57176 Source advisory: OSV:PYSEC-2026-4166...

galaxy-data (>=20.9.1, <=21.9.0), umap-project (>=1.2.0, <=1.2.1) potentially affected by CVE-2026-57176 via social-auth-core (3.3.0)

social-auth-core PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy-data =20.9.1, =1.2.0, =1.2.1 Source cves: CVE-2026-57176 Source advisory: OSV:PYSEC-2026-4166...

masonite-socialite (>=0.0.1, <=0.0.5), richie (>=2.0.0b9, <=2.7.1) potentially affected by CVE-2026-57179 via social-auth-core (3.2.0)

social-auth-core PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - masonite-socialite =0.0.1, =2.0.0b9, =2.7.1 Source cves: CVE-2026-57179 Source advisory: OSV:PYSEC-2026-4168...

social-auth-liu (0.0.1) potentially affected by CVE-2026-57179 via social-auth-core (1.2.0)

social-auth-core PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - social-auth-liu 0.0.1 Source cves: CVE-2026-57179 Source advisory: OSV:PYSEC-2026-4168...

django-globus-portal-framework (>=0.3.23, <=0.3.24), unicef-security (0.7.0) potentially affected by CVE-2026-57175 via social-auth-core (4.0.2)

social-auth-core PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - django-globus-portal-framework =0.3.23, =0.3.24 - unicef-security 0.7.0 Source cves: CVE-2026-57175 Source advisory:...

galaxy-app (>=23.0.1, <=24.0.3), galaxy-data (>=22.1.1, <=24.1.3) +13 more potentially affected by CVE-2026-57175 via social-auth-core (4.0.3)

social-auth-core PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy-app =23.0.1, =22.1.1, =23.0.1, =23.0.2, =21.9.0, =23.2.1, =0.4.0, =0.0.1, =0.13.0, =0.6.0, =0.1.0, =0.8.0, =0.1.0, =0.9.1...

richie (>=2.8.0, <=2.12.0), weblate (>=4.9.0, <=4.10.1) potentially affected by CVE-2026-57175 via social-auth-core (4.1.0)

social-auth-core PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - richie =2.8.0, =4.9.0, =4.10.1 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

umap-project (>=2.0.0a3, <=2.2.0b0) potentially affected by CVE-2026-57175 via social-auth-core (4.5.3)

social-auth-core PYPI version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =2.0.0a3, =2.2.0b0 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

umap-project (3.1.0) potentially affected by CVE-2026-57175 via social-auth-core (4.6.1)

social-auth-core PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project 3.1.0 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

social-auth-liu (0.0.1) potentially affected by CVE-2026-57175 via social-auth-core (1.2.0)

social-auth-core PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - social-auth-liu 0.0.1 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...