c7n-gcp (0.4.2), ciphey (3.5.7) +28 more potentially affected by CVE-2026-0994 via protobuf (3.12.2)

protobuf PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - c7n-gcp 0.4.2 - ciphey 3.5.7 - custos-sdk 1.0.2 - dagit =0.8.6rc1, =0.8.6rc1, =0.8.6rc1, =0.2.24, =0.1.12, =0.0.0, =1.15.0b1, =0.3.0, =0.3.1,...

nucypher (6.0.0) potentially affected by CVE-2026-0994 via protobuf (3.20.0rc1)

protobuf PYPI version 3.20.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - nucypher 6.0.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +118 more potentially affected by CVE-2026-0994 via protobuf (3.20.2)

protobuf PYPI version 3.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =1.31.1, =0.1.0, =0.3.3, =0.0.13, =0.0.2, =0.0.8 and more Source cves: CVE-2026-0994 Source...

dovesnap (1.1.5), faucetconfrpc (0.22.45) +1 more potentially affected by CVE-2026-0994 via protobuf (4.21.11)

protobuf PYPI version 4.21.11 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - dovesnap 1.1.5 - faucetconfrpc 0.22.45 - mcap-protobuf-support 0.4.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

label-maker (>=0.6.0, <=0.7.0), rampante (>=0.0.3, <=0.0.10) potentially affected by CVE-2026-0994 via protobuf (3.5.0.post1)

protobuf PYPI version 3.5.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - label-maker =0.6.0, =0.0.3, =0.0.10 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

cnvrgv2 (>=1.0.0, <=1.0.6), deepomatic-rpc (>=0.8.8, <=0.8.10) +6 more potentially affected by CVE-2026-0994 via protobuf (3.17.2)

protobuf PYPI version 3.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cnvrgv2 =1.0.0, =0.8.8, =1.0.0, =0.1.0, =1.0.0.dev0, =0.2.5, =0.11.1, =0.12.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

c7n-gcp (0.4.31), cassandra-medusa (>=0.17.0, <=0.19.1) +18 more potentially affected by CVE-2026-0994 via protobuf (4.24.3)

protobuf PYPI version 4.24.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - c7n-gcp 0.4.31 - cassandra-medusa =0.17.0, =0.1.4, =0.1.0, =0.1.36, =0.0.3, =0.0.5, =0.12.6, =3.35.0, =0.1.0, =17.5.0, =0.0.7, =0.0.9 and more...

aquests (>=0.7.8.5b1, <=0.7.15.7), dnntools (0.1.4) +10 more potentially affected by CVE-2026-0994 via protobuf (3.1.0.post1)

protobuf PYPI version 3.1.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aquests =0.7.8.5b1, =0.1.8a1, =0.1.0, =0.1.0, =0.1.5, =0.1.6 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

aiearth-engine (>=3.1.3, <=3.1.6), aironsuit (0.1.20) +36 more potentially affected by CVE-2026-0994 via protobuf (4.23.3)

protobuf PYPI version 4.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aiearth-engine =3.1.3, =0.1.23, =0.2.0, =0.0.1, =0.0.1, =2.1.0rc1, =0.0.1, =0.0.5, =0.0.1, =0.34.0, =0.34.1.0, =1.0.0, =1.0.25 and more Source...

aark-sdk (>=0.1.2, <=0.1.9), cosyvoice-package (0.0.2) +10 more potentially affected by CVE-2026-0994 via protobuf (4.25.0)

protobuf PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aark-sdk =0.1.2, =1.0.38, =0.1.0, =0.1.0, =1.0.1, =0.2.0, =4.1.0.dev338, =5.0.1 - viet-tts 0.1.0 Source cves: CVE-2026-0994 Source advisory:...

bittensor (>=2.1.0, <=3.5.1), converse-sfr (0.0.2) +9 more potentially affected by CVE-2026-0994 via protobuf (3.15.0)

protobuf PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bittensor =2.1.0, =0.10.4, =1.1.10, =0.1.0, =0.1.8b3, =0.7.11, =0.5.6.dev85, =0.5.6.dev87 Source cves: CVE-2026-0994 Source advisory:...

cogdata (>=0.0.6, <=0.0.7), icetk (>=0.0.5, <=0.0.7) +3 more potentially affected by CVE-2026-0994 via protobuf (3.19.0rc2)

protobuf PYPI version 3.19.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cogdata =0.0.6, =0.0.5, =3.0.0a2, =4.7.2 - motion-master-proto 5.2.0 - tensorflow-checkpoint-reader 0.1.2 Source cves: CVE-2026-0994 Source...

bonsai-python (>=0.6.0, <=0.11.0) potentially affected by CVE-2026-0994 via protobuf (3.1.0)

protobuf PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bonsai-python =0.6.0, =0.11.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

a7p (>=0.0.1, <=0.0.5b1), agentsociety (>=1.0.0, <=1.5.7) +20 more potentially affected by CVE-2026-0994 via protobuf (4.24.0)

protobuf PYPI version 4.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - a7p =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.0.8, =0.55.60, =0.22.19, =0.0.1, =0.0.38, =0.0.39 and more Source cves: CVE-2026-0994 Source advisory:...

araali (>=0.0.20, <=0.0.22), imgraph (>=0.0.7, <=0.1.4) +2 more potentially affected by CVE-2026-0994 via protobuf (4.21.0rc2)

protobuf PYPI version 4.21.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - araali =0.0.20, =0.0.7, =0.2.0, =0.4.2, =0.4.3 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

fancy-nlp (>=0.0.1, <=0.0.4), gm (>=3.0.0.82, <=3.0.0.107) +3 more potentially affected by CVE-2026-0994 via protobuf (3.4.0)

protobuf PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - fancy-nlp =0.0.1, =3.0.0.82, =0.0.1, =1.0.0, =0.3.4.2, =0.3.5 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

abba-python (>=0.1.6, <=0.3.0), ablation (0.1.0) +188 more potentially affected by CVE-2026-0994 via protobuf (3.20.0)

protobuf PYPI version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - abba-python =0.1.6, =1.0.43, =0.3.1a1, =1.0.0, =0.1.0b5, =0.0.5, =0.1.1, =0.3.0, =0.1.11, =0.1.1, =0.2.3.4 and more Source cves: CVE-2026-0994...

aaa-ml-datasets-course (1.0.0), adstoolbox (>=2026.2.10.1, <=2026.5.19) +109 more potentially affected by CVE-2026-0994 via protobuf (4.25.3)

protobuf PYPI version 4.25.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aaa-ml-datasets-course 1.0.0 - adstoolbox =2026.2.10.1, =0.1.1, =0.0.2, =0.0.1b1, =0.9.9, =0.3.5, =0.0.1, =0.5.5.post5, =0.5.5.post4, =2.4.0,...

adcl (>=0.1.2, <=0.1.4), akc-mamba (>=2.0.1, <=2.0.2) +22 more potentially affected by CVE-2026-0994 via protobuf (3.11.2)

protobuf PYPI version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - adcl =0.1.2, =2.0.1, =0.0.31, =0.1.8, =1.1.0, =0.1.0rc2.dev174, =1.0.0, =0.9.0, =0.0.76, =1.1.6, =0.2.0, =0.0.6, =0.0.12 and more Source cves:...

a2a-sdk (0.2.8), a7p (>=1.0.1rc2, <=1.0.2) +247 more potentially affected by CVE-2026-0994 via protobuf (>=6.30.0, <=6.33.4)

protobuf PYPI version =6.30.0, =1.0.1rc2, =0.1.3, =2025.12.2.2, =0.4.0rc1, =1.0.0, =1.0.29, =25.6.0b2, =1.2.0, =0.1.0, =0.2.1b20230930, =0.0.32, =1.3.0.dev4, =1.3.0 and more Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...