robotframework-browser (14.3.0), rooster-client (0.0.1) +1 more potentially affected by CVE-2026-0994 via protobuf (4.21.10)

protobuf PYPI version 4.21.10 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - robotframework-browser 14.3.0 - rooster-client 0.0.1 - tracdap-runtime =0.5.4, =0.6.0rc1 Source cves: CVE-2026-0994 Source advisory:...

madan (0.0.1), openxc (2.2.0) potentially affected by CVE-2026-0994 via protobuf (3.17.1)

protobuf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - madan 0.0.1 - openxc 2.2.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

cloudview (0.3.0), comet-common (>=2.0.2, <=2.0.3) +7 more potentially affected by CVE-2026-0994 via protobuf (3.9.1)

protobuf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cloudview 0.3.0 - comet-common =2.0.2, =0.1.3, =1.0.0, =0.1.0a27, =0.1.1, =0.2.0 - openxc 1.0.0 - pytext-nlp 0.2.2 - zfl-ai 0.0.10 Source cves:...

amazon-braket-algorithm-library (>=0.1.3, <=1.3.0), anx-interface (>=0.5.2, <=0.5.3) +27 more potentially affected by CVE-2026-0994 via protobuf (3.12.4)

protobuf PYPI version 3.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - amazon-braket-algorithm-library =0.1.3, =0.5.2, =1.4.0, =0.0.1, =0.8.2, =0.9.0.dev20200710225859, =0.0.3, =0.9.0rc0, =0.9.0rc0, =0.9.0rc0,...

aiognmi (0.1.1), ansys-tools-protoc-helper (0.6.0) +60 more potentially affected by CVE-2026-0994 via protobuf (4.24.4)

protobuf PYPI version 4.24.4 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aiognmi 0.1.1 - ansys-tools-protoc-helper 0.6.0 - apache-beam 2.51.0 - arista-lab =0.2.0, =0.13.0, =0.2.40, =0.6.0b1, =8.3.0, =0.3.0, =1.1.16,...

alpha-data-py (>=1.0.0, <=1.0.9), beeper-hangups (>=0.5.0a1, <=0.5.0a5) +7 more potentially affected by CVE-2026-0994 via protobuf (3.16.0)

protobuf PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - alpha-data-py =1.0.0, =0.5.0a1, =0.0.34, =0.20.5rc3, =0.2.0b1, =0.1.1.1, =4.4.0, =1.0.0, =1.0.1 Source cves: CVE-2026-0994 Source advisory:...

archipelagos (>=0.0.1, <=0.0.2), bugout-spire (0.4.2) +36 more potentially affected by CVE-2026-0994 via protobuf (3.19.1)

protobuf PYPI version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - archipelagos =0.0.1, =0.1.0, =1.2.0, =0.4.0, =1.4.0rc1, =1.4.0rc1.dev640, =1.0.1, =0.8.0.dev6, =1.4.3, =0.5.8.6, =0.0.0.77, =0.0.0.79 -...

akari-proto (>=0.3.0, <=0.3.4), ansys-tools-protoc-helper (>=0.1.0a1, <=0.4.0) +25 more potentially affected by CVE-2026-0994 via protobuf (3.19.3)

protobuf PYPI version 3.19.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - akari-proto =0.3.0, =0.1.0a1, =0.1.2, =8.6.0, =1.5.0rc1, =1.5.0rc1.dev779, =0.13.4, =0.1.1, =1.12.1 - mindpandas 0.2.0 and more Source cves:...

etcd-apiv3 (2.3.0.2) potentially affected by CVE-2026-0994 via protobuf (3.0.0b2.post2)

protobuf PYPI version 3.0.0b2.post2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - etcd-apiv3 2.3.0.2 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

ai-flow (0.3.1), ai-flow-nightly (>=2022.9.19, <=2023.12.31) +19 more potentially affected by CVE-2026-0994 via protobuf (3.15.6)

protobuf PYPI version 3.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ai-flow 0.3.1 - ai-flow-nightly =2022.9.19, =0.1.0.2, =3.0.8rc6, =1.0.9, =0.0.1, =1.17.0b1, =1.14.0, =0.3.1, =0.3.73, =0.1.0, =2022.9.19,...

lback-framework (>=0.1.0, <=1.0.1), ncalab (0.1.0) +6 more potentially affected by CVE-2026-0994 via protobuf (4.25.7)

protobuf PYPI version 4.25.7 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - lback-framework =0.1.0, =1.3.2, =0.27.0b1, =0.47.0b1, =1.0.0b1, =0.3.0b5, =0.37.0b1, =1.8.0b1 Source cves: CVE-2026-0994 Source advisory:...

ilpyt (0.1.0) potentially affected by CVE-2026-0994 via protobuf (3.15.4)

protobuf PYPI version 3.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ilpyt 0.1.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

dovesnap (1.1.10), faucetconfrpc (>=0.22.54, <=0.22.55) +3 more potentially affected by CVE-2026-0994 via protobuf (4.22.4)

protobuf PYPI version 4.22.4 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - dovesnap 1.1.10 - faucetconfrpc =0.22.54, =0.7.6, =2.5.8, =2.5.10 - robotframework-browser 16.1.0 Source cves: CVE-2026-0994 Source advisory:...

eqcctpro (>=0.3.0, <=0.6.1), ingestr (>=0.13.18, <=0.14.122) potentially affected by CVE-2026-0994 via protobuf (4.25.6)

protobuf PYPI version 4.25.6 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - eqcctpro =0.3.0, =0.13.18, =0.14.122 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

PYSEC-2026-1805 protobuf affected by a JSON recursion depth bypass

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

bcryptrpcserver (>=0.0.1, <=0.0.6), cloudview (0.3.10) +11 more potentially affected by CVE-2026-0994 via protobuf (4.23.2)

protobuf PYPI version 4.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bcryptrpcserver =0.0.1, =3.27.0, =1.0.2, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.0.1, =0.5.29, =0.6.0rc2 Source cves: CVE-2026-0994 Source...

aiops-ml (>=1.0.0, <=1.0.1), akernel-sdk (0.1.0) +28 more potentially affected by CVE-2026-0994 via protobuf (4.25.5)

protobuf PYPI version 4.25.5 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aiops-ml =1.0.0, =3.17.1, =1.0.2, =1.7.4, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =1.2.0, =1.0.1a4, =1.0.1a5 and more Source cves: CVE-2026-099...

adsmsg (>=1.3.3, <=1.3.19), algo-bus-sdk (>=0.0.1, <=0.0.9) +77 more potentially affected by CVE-2026-0994 via protobuf (3.17.3)

protobuf PYPI version 3.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - adsmsg =1.3.3, =0.0.1, =0.0.3, =0.4.9, =1.1.1, =2.1.1, =0.2.1, =0.4.11, =0.0.0rc24, =2.0.0, =1.3.0rc1, =1.3.0rc1.dev588, =0.0.12, =0.1.4 and mo...

c7n-gcp (0.4.2), ciphey (3.5.7) +28 more potentially affected by CVE-2026-0994 via protobuf (3.12.2)

protobuf PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - c7n-gcp 0.4.2 - ciphey 3.5.7 - custos-sdk 1.0.2 - dagit =0.8.6rc1, =0.8.6rc1, =0.8.6rc1, =0.2.24, =0.1.12, =0.0.0, =1.15.0b1, =0.3.0, =0.3.1,...

nucypher (6.0.0) potentially affected by CVE-2026-0994 via protobuf (3.20.0rc1)

protobuf PYPI version 3.20.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - nucypher 6.0.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...