9gag-scraper (>=0.0.6, <=0.0.7), euroleague-scrapping (>=0.0.1.dev10, <=0.0.1.dev21) potentially affected by CVE-2026-85999 via soupsieve (1.9.6)

soupsieve PYPI version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - 9gag-scraper =0.0.6, =0.0.1.dev10, =0.0.1.dev21 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-86049 via jupyter-server (1.16.0)

jupyter-server PYPI version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

1337x (1.2.5), 8a-scraper (>=0.0.2, <=0.0.4) +667 more potentially affected by CVE-2026-85999 via soupsieve (>=2.0.0, <=2.8.4)

soupsieve PYPI version =2.0.0, =0.0.2, =1.0.4, =0.1.3, =1.0.0, =0.4.0, =1.2.3, =0.2.0, =0.87.2.dev9, =0.24.0, =0.1.0.dev19, =1.3.0, =0.1.0, =1.3.0, =1.3.3 and more Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

3lc (>=2.3.84, <=2.6.4), a-data-processing (0.0.1) +2152 more potentially affected by CVE-2026-63374 via anyio (3.7.1)

anyio PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - 3lc =2.3.84, =0.1.0, =1.2.1b0, =0.1.0, =0.7.3.post0, =0.1.0, =0.1.0, =0.1.0, =0.14.0.3rc1, =0.0.12, =0.0.18 and more Source cves: CVE-2026-63374 Sourc...

aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), categorical-encoding (>=0.0.0, <=0.3.0) +33 more potentially affected by CVE-2026-86049 via jupyter-server (1.15.6)

jupyter-server PYPI version 1.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - aiidalab-widgets-base =1.3.4, =0.0.0, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =0.0.0,...

accomate (>=2.0.0a0, <=2.0.0.6), asyncrepo (>=0.0.6, <=0.0.9) +15 more potentially affected by CVE-2026-63374 via anyio (3.6.1)

anyio PYPI version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - accomate =2.0.0a0, =0.0.6, =0.1.0, =1.2.3, =0.0.6, =1.0.0, =1.0.0, =0.3.8, =0.3.20, =0.0.4, =0.3.5.dev2659611866, =0.2.0, =1.5.0 and more Source cves:...

mdml (>=0.0.3, <=0.0.8) potentially affected by CVE-2026-86049 via jupyter-server (1.23.0)

jupyter-server PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mdml =0.0.3, =0.0.8 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

aac (>=0.1.10, <=0.5.21), aac-bom (>=0.0.1, <=0.0.4) +71 more potentially affected by CVE-2026-64847 via anyio (3.6.2)

anyio PYPI version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aac =0.1.10, =0.0.1, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =0.0.3, =0.1.1, =0.4.2, =0.0.1, =0.1.0, =0.3.0 and more Source cves: CVE-2026-64847 Sourc...

ohmyi3 (>=0.1.0, <=0.1.4), uvicore (>=0.1.15, <=0.1.25) potentially affected by CVE-2026-64847 via anyio (3.2.1)

anyio PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - ohmyi3 =0.1.0, =0.1.15, =0.1.25 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

acdh-spacytei (>=0.0.1, <=0.0.5), ircrobots (0.3.6) potentially affected by CVE-2026-63374 via anyio (1.3.1)

anyio PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - acdh-spacytei =0.0.1, =0.0.5 - ircrobots 0.3.6 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

advans-erp-checker (>=0.1.0, <=0.1.1), is-wordpress (0.0.2) potentially affected by CVE-2026-86000 via soupsieve (1.7.3)

soupsieve PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - advans-erp-checker =0.1.0, =0.1.1 - is-wordpress 0.0.2 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

machine-web (>=0.0.1, <=0.0.2.post2) potentially affected by CVE-2026-63374 via anyio (3.3.2)

anyio PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - machine-web =0.0.1, =0.0.2.post2 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

pyplanet (>=0.1.5, <=0.3.3) potentially affected by CVE-2026-62949 via asyncssh (1.10.0)

asyncssh PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.1.5, =0.3.3 Source cves: CVE-2026-62949 Source advisory: OSV:PYSEC-2026-4026...

py-easy-rest (>=0.4.2, <=0.4.7), systembridgebackend (>=3.0.0.dev1, <=3.0.2) potentially affected by CVE-2026-85078 via sanic (22.3.1)

sanic PYPI version 22.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - py-easy-rest =0.4.2, =3.0.0.dev1, =3.0.2 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

sanic-dispatcher (>=0.5.2.0, <=0.5.2.1) potentially affected by CVE-2026-85078 via sanic (0.5.2)

sanic PYPI version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-dispatcher =0.5.2.0, =0.5.2.1 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

0xpwn (0.1.1), a2a-acl (0.0.14) +749 more potentially affected by CVE-2026-59823 via litellm (>=1.0.0, <=1.83.8)

litellm PYPI version =1.0.0, =0.3.5, =0.7.3, =1.0.1, =1.0.2, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.2.1.10062025 - agent-memory-server 0.15.0 - agent-opt 0.0.1 and more Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

python-signal-cli-rest-api (22.6.2), sanic-redis-extend (0.0.1) +1 more potentially affected by CVE-2026-85078 via sanic (22.6.0)

sanic PYPI version 22.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - python-signal-cli-rest-api 22.6.2 - sanic-redis-extend 0.0.1 - systembridgebackend =3.3.0.dev5, =3.4.3 Source cves: CVE-2026-85078 Source advisory:...

pyplanet (>=0.0.1, <=0.1.4) potentially affected by CVE-2026-62949 via asyncssh (1.9.0)

asyncssh PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.0.1, =0.1.4 Source cves: CVE-2026-62949 Source advisory: OSV:PYSEC-2026-4026...

aiida-core (>=2.7.0rc0, <=2.9.2), aiida-gromacs (2.2.2) +103 more potentially affected by CVE-2026-62949 via asyncssh (>=2.0.1, <=2.23.1)

asyncssh PYPI version =2.0.1, =2.7.0rc0, =0.4.1, =0.7.2, =1.2.7, =0.0.1, =1.5.0.dev202411111555, =1.44.2, =0.6.0, =1.7.3, =1.46.0, =0.0.2, =2.0.15, =2.1.8 and more Source cves: CVE-2026-62949 Source advisory: OSV:PYSEC-2026-4026...

pitcrew (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-62949 via asyncssh (1.16.1)

asyncssh PYPI version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pitcrew =0.0.1, =0.0.3 Source cves: CVE-2026-62949 Source advisory: OSV:PYSEC-2026-4026...