async-web3 (>=0.1.0, <=0.3.1), badger-utils (>=0.0.5, <=0.0.9) +22 more potentially affected by CVE-2026-0994 via protobuf (3.15.8)

protobuf PYPI version 3.15.8 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - async-web3 =0.1.0, =0.0.5, =2.0.0rc1, =1.0.0, =8.0.0b0, =0.0.1, =0.3.2, =1.18.0b1, =0.1.0, =2.0.0, =1.6.1, =3.0.0, =4.1.0 and more Source cves:...

aviatrix-migration-gcp (>=0.1.1, <=0.3.2), caraml-store (>=0.0.2, <=0.0.8) +9 more potentially affected by CVE-2026-0994 via protobuf (4.21.9)

protobuf PYPI version 4.21.9 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aviatrix-migration-gcp =0.1.1, =0.0.2, =0.12.0rc6, =0.0.8, =2.0.0, =0.1.4.1, =14.2.0, =14.2.1 Source cves: CVE-2026-0994 Source advisory:...

agixt (>=1.4.20, <=1.4.42), agxclick (>=0.1.36, <=0.4.1) +104 more potentially affected by CVE-2026-0994 via protobuf (4.21.12)

protobuf PYPI version 4.21.12 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - agixt =1.4.20, =0.1.36, =0.9.1, =0.0.12, =1.0.10, =1.0.0b1, =0.8.0, =1.0.1, =22.9.5, =22.9.5, =23.3.2, =22.9.5, =22.9.5, =23.3.12 and more...

pybfe (>=2020.8.13.285, <=2020.12.23.630) potentially affected by CVE-2026-0994 via protobuf (3.12.0rc2)

protobuf PYPI version 3.12.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - pybfe =2020.8.13.285, =2020.12.23.630 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

asc (>=0.1.0, <=0.3.1), candig-ingest (>=1.3.1, <=1.5.0) +6 more potentially affected by CVE-2026-0994 via protobuf (3.3.0)

protobuf PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - asc =0.1.0, =1.3.1, =1.0.1, =1.2.3, =2018.1.0, =0.0.0.dev1, =0.0.0.dev37 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

blackfynn (>=2.4.1, <=3.0.0), dvc (>=0.8.2, <=0.8.6) potentially affected by CVE-2026-0994 via protobuf (3.2.0)

protobuf PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - blackfynn =2.4.1, =0.8.2, =0.8.6 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

bq-jobrunner (0.0.1), libp2p (>=0.1.1, <=0.1.2) +6 more potentially affected by CVE-2026-0994 via protobuf (3.9.0)

protobuf PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bq-jobrunner 0.0.1 - libp2p =0.1.1, =1.0.6, =0.0.20, =0.1.0a31, =1.2.0rc2, =1.2.0rc3, =1.2.0 Source cves: CVE-2026-0994 Source advisory:...

abba-python (>=0.1.6, <=0.3.0), ablation (0.1.0) +188 more potentially affected by CVE-2026-0994 via protobuf (3.20.0)

protobuf PYPI version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - abba-python =0.1.6, =1.0.43, =0.3.1a1, =1.0.0, =0.1.0b5, =0.0.5, =0.1.1, =0.3.0, =0.1.11, =0.1.1, =0.2.3.4 and more Source cves: CVE-2026-0994...

apidriver (0.9.5), bondai (>=0.1.0, <=0.3.1) +8 more potentially affected by CVE-2026-0994 via protobuf (4.24.1)

protobuf PYPI version 4.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - apidriver 0.9.5 - bondai =0.1.0, =0.6.5, =0.6.5, =0.5.0, =3.32.0, =0.0.6, =3.1.0.dev302, =0.0.1, =0.0.1.1 Source cves: CVE-2026-0994 Source...

madan (0.0.1), openxc (2.2.0) potentially affected by CVE-2026-0994 via protobuf (3.17.1)

protobuf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - madan 0.0.1 - openxc 2.2.0 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

a2a-sdk (0.2.8), a7p (>=1.0.1rc2, <=1.0.2) +247 more potentially affected by CVE-2026-0994 via protobuf (>=6.30.0, <=6.33.4)

protobuf PYPI version =6.30.0, =1.0.1rc2, =0.1.3, =2025.12.2.2, =0.4.0rc1, =1.0.0, =1.0.29, =25.6.0b2, =1.2.0, =0.1.0, =0.2.1b20230930, =0.0.32, =1.3.0.dev4, =1.3.0 and more Source cves: CVE-2026-0994 Source advisory: SNYK:PYTHON-PROTOBUF-15090738...

robotframework-browser (14.3.0), rooster-client (0.0.1) +1 more potentially affected by CVE-2026-0994 via protobuf (4.21.10)

protobuf PYPI version 4.21.10 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - robotframework-browser 14.3.0 - rooster-client 0.0.1 - tracdap-runtime =0.5.4, =0.6.0rc1 Source cves: CVE-2026-0994 Source advisory:...

araali (>=0.0.20, <=0.0.22), imgraph (>=0.0.7, <=0.1.4) +2 more potentially affected by CVE-2026-0994 via protobuf (4.21.0rc2)

protobuf PYPI version 4.21.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - araali =0.0.20, =0.0.7, =0.2.0, =0.4.2, =0.4.3 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

a2a-sdk (>=0.2.9, <=0.3.0), a2anet (>=0.0.5, <=0.2.0) +440 more potentially affected by CVE-2026-0994 via protobuf (>=5.26.0rc2, <=5.29.5)

protobuf PYPI version =5.26.0rc2, =0.2.9, =0.0.5, =1.0.0, =0.1.0, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.0.1rc15474277, =2.47.9, =0.0.0b1, =0.1.0, =0.1.8, =0.0.10, =0.0.19 and more Source cves: CVE-2026-0994 Source advisory: GHSA-7GCM-G887-7QV7...

a2a-sdk (>=0.2.9, <=0.3.0), a2anet (>=0.0.5, <=0.2.0) +440 more potentially affected by CVE-2026-0994 via protobuf (>=5.26.0rc2, <=5.29.5)

protobuf PYPI version =5.26.0rc2, =0.2.9, =0.0.5, =1.0.0, =0.1.0, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.0.1rc15474277, =2.47.9, =0.0.0b1, =0.1.0, =0.1.8, =0.0.10, =0.0.19 and more Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

aiognmi (0.1.1), ansys-tools-protoc-helper (0.6.0) +60 more potentially affected by CVE-2026-0994 via protobuf (4.24.4)

protobuf PYPI version 4.24.4 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aiognmi 0.1.1 - ansys-tools-protoc-helper 0.6.0 - apache-beam 2.51.0 - arista-lab =0.2.0, =0.13.0, =0.2.40, =0.6.0b1, =8.3.0, =0.3.0, =1.1.16,...

fancy-nlp (>=0.0.1, <=0.0.4), gm (>=3.0.0.82, <=3.0.0.107) +3 more potentially affected by CVE-2026-0994 via protobuf (3.4.0)

protobuf PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - fancy-nlp =0.0.1, =3.0.0.82, =0.0.1, =1.0.0, =0.3.4.2, =0.3.5 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

bt-test-interfaces (>=0.0.1, <=0.0.2), cloudone-vsapi (>=1.0.0, <=1.0.4) +11 more potentially affected by CVE-2026-0994 via protobuf (4.22.0)

protobuf PYPI version 4.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bt-test-interfaces =0.0.1, =1.0.0, =0.11.4, =1.1.6.dev0, =0.9.6, =0.22.48, =0.7.3, =1.0.6, =1.0.0, =1.0.15, =3.3.2 Source cves: CVE-2026-0994...

c7n-gcp (0.4.30), cloudquery-plugin-sdk (>=0.1.2, <=0.1.3) +16 more potentially affected by CVE-2026-0994 via protobuf (4.24.2)

protobuf PYPI version 4.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - c7n-gcp 0.4.30 - cloudquery-plugin-sdk =0.1.2, =1.0.1, =1.0.0, =0.1.2, =0.0.3, =0.1.7, =0.7.0b5, =1.0.14, =0.1.2.dev0, =0.0.19, =0.3.0b6, =0.4....

akari-proto (>=0.3.0, <=0.3.4), ansys-tools-protoc-helper (>=0.1.0a1, <=0.4.0) +25 more potentially affected by CVE-2026-0994 via protobuf (3.19.3)

protobuf PYPI version 3.19.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - akari-proto =0.3.0, =0.1.0a1, =0.1.2, =8.6.0, =1.5.0rc1, =1.5.0rc1.dev779, =0.13.4, =0.1.1, =1.12.1 - mindpandas 0.2.0 and more Source cves:...