nucypher (>=0.1.0a29, <=1.2.0b1) potentially affected by CVE-2026-0994 via protobuf (3.10.0rc1)

protobuf PYPI version 3.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - nucypher =0.1.0a29, =1.2.0b1 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

acg-feature-extractor (0.0.2), aea (>=0.7.1, <=1.1.1) +91 more potentially affected by CVE-2026-0994 via protobuf (3.13.0)

protobuf PYPI version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - acg-feature-extractor 0.0.2 - aea =0.7.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =2.0.0, =0.0.8, =0.1.0, =0.1.0, =0.4.2, =1.5.0, =0.0.2, =0.0.4 and mo...

async-web3 (>=0.1.0, <=0.3.1), badger-utils (>=0.0.5, <=0.0.9) +22 more potentially affected by CVE-2026-0994 via protobuf (3.15.8)

protobuf PYPI version 3.15.8 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - async-web3 =0.1.0, =0.0.5, =2.0.0rc1, =1.0.0, =8.0.0b0, =0.0.1, =0.3.2, =1.18.0b1, =0.1.0, =2.0.0, =1.6.1, =3.0.0, =4.1.0 and more Source cves:...

datasaku (0.0.8), dovesnap (>=1.1.11, <=1.1.12) +13 more potentially affected by CVE-2026-0994 via protobuf (4.23.0)

protobuf PYPI version 4.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - datasaku 0.0.8 - dovesnap =1.1.11, =0.105.0rc2, =0.10.0rc1, =2.2.12, =15.32.0, =3.25.0, =1.7.0, =3.0.0, =0.8.0rc1, =0.10.0rc1, =0.10.0 -...

femtocrux (0.2.2), meteva (>=1.7.3, <=1.8.0.1) +3 more potentially affected by CVE-2026-0994 via protobuf (3.20.0rc2)

protobuf PYPI version 3.20.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - femtocrux 0.2.2 - meteva =1.7.3, =0.1.0, =0.0.2, =0.5.2, =1.0.0a8 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

airgym (>=0.0.1, <=0.0.2), c7n-gcp (>=0.4.24, <=0.4.25) +20 more potentially affected by CVE-2026-0994 via protobuf (4.22.1)

protobuf PYPI version 4.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - airgym =0.0.1, =0.4.24, =0.6.24, =2.3.3, =0.0.1, =4.7.0, =0.0.3, =0.0.3, =0.3.5, =0.0.13, =0.0.18 - podloot 0.1.0 and more Source cves:...

pybfe (>=2020.8.13.285, <=2020.12.23.630) potentially affected by CVE-2026-0994 via protobuf (3.12.0rc2)

protobuf PYPI version 3.12.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - pybfe =2020.8.13.285, =2020.12.23.630 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

bunnieinfra (>=0.1.0, <=0.1.4), iconrpcserver (>=1.2.10, <=1.4.9) +2 more potentially affected by CVE-2026-0994 via protobuf (3.7.0)

protobuf PYPI version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bunnieinfra =0.1.0, =1.2.10, =0.1.0.dev0, =0.1.17.dev0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

cloudscript (0.0.1), cloudview (0.3.2) +20 more potentially affected by CVE-2026-0994 via protobuf (3.10.0)

protobuf PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cloudscript 0.0.1 - cloudview 0.3.2 - comics-down 0.2.0 - dataclay =1.0.7.dev20200310, =20210310.0.0, =2.3.0rc2, =1.14.0b1, =0.0.1, =5.0.0,...

bfportal-grpc (>=0.1.3, <=0.1.4), browserstack-sdk (>=1.22.7b1, <=1.24.0) +22 more potentially affected by CVE-2026-0994 via protobuf (4.21.6)

protobuf PYPI version 4.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bfportal-grpc =0.1.3, =1.22.7b1, =1.8.0rc1.dev1258, =0.20.31, =1.0.2, =2022.3.2, =1.5.0, =5.4.7, =0.1.112.dev0, =2.1.0, =0.1.6, =2.1.0, =3.1.0,...

ahs8p (0.0.1), aioesphomeapi (>=1.7.0, <=2.6.1) +59 more potentially affected by CVE-2026-0994 via protobuf (3.6.1)

protobuf PYPI version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ahs8p 0.0.1 - aioesphomeapi =1.7.0, =0.4.0, =0.4.0, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.2.2, =0.1.2, =0.1.1, =0.1.1, =0.1.2, =1.16.0, =1.16.1 and...

esphome (>=1.19.0b1, <=1.19.4), fpgaconvnet-model (>=0.1.3, <=0.1.4.2) +6 more potentially affected by CVE-2026-0994 via protobuf (3.17.0)

protobuf PYPI version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - esphome =1.19.0b1, =0.1.3, =4.5.1, =5.0.0 - rpc-common 0.0.9 - squeaknode-proto 0.1.7 Source cves: CVE-2026-0994 Source advisory:...

blackfynn (>=2.4.1, <=3.0.0), dvc (>=0.8.2, <=0.8.6) potentially affected by CVE-2026-0994 via protobuf (3.2.0)

protobuf PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - blackfynn =2.4.1, =0.8.2, =0.8.6 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

bq-jobrunner (0.0.1), libp2p (>=0.1.1, <=0.1.2) +6 more potentially affected by CVE-2026-0994 via protobuf (3.9.0)

protobuf PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bq-jobrunner 0.0.1 - libp2p =0.1.1, =1.0.6, =0.0.20, =0.1.0a31, =1.2.0rc2, =1.2.0rc3, =1.2.0 Source cves: CVE-2026-0994 Source advisory:...

aquests (>=0.7.16.17, <=0.7.16.18), backend-ai-common (1.3.1) +6 more potentially affected by CVE-2026-0994 via protobuf (3.5.2.post1)

protobuf PYPI version 3.5.2.post1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aquests =0.7.16.17, =1.3.2, =1.1.0, =0.4.1, =0.0.4, =0.8.2, =0.11.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

baosnetlib-python (0.1.0), etcd-apiv3 (2.3.0.1) +2 more potentially affected by CVE-2026-0994 via protobuf (2.6.1)

protobuf PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - baosnetlib-python 0.1.0 - etcd-apiv3 2.3.0.1 - kaircs 0.4.0 - labeless =1.1.2.48, =1.1.6.0 Source cves: CVE-2026-0994 Source advisory:...

a2grunnerp (>=0.1.0, <=0.1.8), a62-emotion (>=0.10.11, <=0.11.4) +693 more potentially affected by CVE-2026-0994 via protobuf (3.19.6)

protobuf PYPI version 3.19.6 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - a2grunnerp =0.1.0, =0.10.11, =1.3.0, =1.1.1, =0.1.0, =0.0.157, =0.1.0, =1.2.36, =1.2.38 - aisdc 1.0.1 - aistnet 1.0.0 and more Source cves:...

worldengine (0.18.0) potentially affected by CVE-2026-0994 via protobuf (2.6.0)

protobuf PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - worldengine 0.18.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

hnzhu010506 (0.0.1), hnzhu010507 (>=0.0.1, <=0.0.8) +3 more potentially affected by CVE-2026-0994 via protobuf (4.21.0)

protobuf PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - hnzhu010506 0.0.1 - hnzhu010507 =0.0.1, =0.0.1, =0.0.2 - raz-client 1.0.2 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

amirispy (1.3.0), apache-beam (2.47.0) +11 more potentially affected by CVE-2026-0994 via protobuf (4.22.5)

protobuf PYPI version 4.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - amirispy 1.3.0 - apache-beam 2.47.0 - apache-beam-ai2 2.47.0 - fameio =1.6.0, =0.0.2.dev5, =1.5.3, =4.17.0, =3.3.0, =3.4.2 - pytorch-tabular...