a2grunnerp (>=0.1.0, <=0.1.8), a62-emotion (>=0.10.11, <=0.11.4) +693 more potentially affected by CVE-2026-0994 via protobuf (3.19.6)

protobuf PYPI version 3.19.6 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - a2grunnerp =0.1.0, =0.10.11, =1.3.0, =1.1.1, =0.1.0, =0.0.157, =0.1.0, =1.2.36, =1.2.38 - aisdc 1.0.1 - aistnet 1.0.0 and more Source cves:...

esphome (>=1.19.0b1, <=1.19.4), fpgaconvnet-model (>=0.1.3, <=0.1.4.2) +6 more potentially affected by CVE-2026-0994 via protobuf (3.17.0)

protobuf PYPI version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - esphome =1.19.0b1, =0.1.3, =4.5.1, =5.0.0 - rpc-common 0.0.9 - squeaknode-proto 0.1.7 Source cves: CVE-2026-0994 Source advisory:...

hnzhu010506 (0.0.1), hnzhu010507 (>=0.0.1, <=0.0.8) +3 more potentially affected by CVE-2026-0994 via protobuf (4.21.0)

protobuf PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - hnzhu010506 0.0.1 - hnzhu010507 =0.0.1, =0.0.1, =0.0.2 - raz-client 1.0.2 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

aiop4 (>=0.1.0, <=0.3.0), autogluon (>=0.4.3b20220614, <=0.5.3b20221007) +17 more potentially affected by CVE-2026-0994 via protobuf (3.18.1)

protobuf PYPI version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aiop4 =0.1.0, =0.4.3b20220614, =0.4.3b20220616, =0.4.3b20220614, =1.4.0rc1.dev626, =0.0.5, =1.0.0, =1.0.0, =2.1.6, =2.0.9, =1.0.10, =9.0.0,...

nucypher (>=0.1.0a29, <=1.2.0b1) potentially affected by CVE-2026-0994 via protobuf (3.10.0rc1)

protobuf PYPI version 3.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - nucypher =0.1.0a29, =1.2.0b1 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

a2a-sdk (>=0.2.9, <=0.3.0), a2anet (>=0.0.5, <=0.2.0) +440 more potentially affected by CVE-2026-0994 via protobuf (>=5.26.0rc2, <=5.29.5)

protobuf PYPI version =5.26.0rc2, =0.2.9, =0.0.5, =1.0.0, =0.1.0, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.0.1rc15474277, =2.47.9, =0.0.0b1, =0.1.0, =0.1.8, =0.0.10, =0.0.19 and more Source cves: CVE-2026-0994 Source advisory: GHSA-7GCM-G887-7QV7...

baosnetlib-python (0.1.0), etcd-apiv3 (2.3.0.1) +2 more potentially affected by CVE-2026-0994 via protobuf (2.6.1)

protobuf PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - baosnetlib-python 0.1.0 - etcd-apiv3 2.3.0.1 - kaircs 0.4.0 - labeless =1.1.2.48, =1.1.6.0 Source cves: CVE-2026-0994 Source advisory:...

blackfynn (>=2.4.1, <=3.0.0), dvc (>=0.8.2, <=0.8.6) potentially affected by CVE-2026-0994 via protobuf (3.2.0)

protobuf PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - blackfynn =2.4.1, =0.8.2, =0.8.6 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

fancy-nlp (>=0.0.1, <=0.0.4), gm (>=3.0.0.82, <=3.0.0.107) +3 more potentially affected by CVE-2026-0994 via protobuf (3.4.0)

protobuf PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - fancy-nlp =0.0.1, =3.0.0.82, =0.0.1, =1.0.0, =0.3.4.2, =0.3.5 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

c7n-gcp (0.4.30), cloudquery-plugin-sdk (>=0.1.2, <=0.1.3) +16 more potentially affected by CVE-2026-0994 via protobuf (4.24.2)

protobuf PYPI version 4.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - c7n-gcp 0.4.30 - cloudquery-plugin-sdk =0.1.2, =1.0.1, =1.0.0, =0.1.2, =0.0.3, =0.1.7, =0.7.0b5, =1.0.14, =0.1.2.dev0, =0.0.19, =0.3.0b6, =0.4....

bt-test-interfaces (>=0.0.1, <=0.0.2), cloudone-vsapi (>=1.0.0, <=1.0.4) +11 more potentially affected by CVE-2026-0994 via protobuf (4.22.0)

protobuf PYPI version 4.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bt-test-interfaces =0.0.1, =1.0.0, =0.11.4, =1.1.6.dev0, =0.9.6, =0.22.48, =0.7.3, =1.0.6, =1.0.0, =1.0.15, =3.3.2 Source cves: CVE-2026-0994...

apollo-sdk (>=0.1.1, <=0.2.11), candy-web (1.0.0) +80 more potentially affected by CVE-2026-0994 via protobuf (4.22.3)

protobuf PYPI version 4.22.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - apollo-sdk =0.1.1, =0.1.0, =0.3.0, =0.104.3rc1, =0.9.0rc1, =23.0.0, =0.0.1.dev5, =0.0.1.dev14 and more Source cves: CVE-2026-0994 Source...

cylc-flow (8.0.0a2), cylc-uiserver (0.2.0) +6 more potentially affected by CVE-2026-0994 via protobuf (3.12.1)

protobuf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cylc-flow 8.0.0a2 - cylc-uiserver 0.2.0 - flwr =0.1.0, =0.0.1.dev20200713, =1.8.5, =2.1.0b7, =0.0.1, =0.0.4 - zeebe-grpc 0.23.2.0 Source cves:...

a2a-sdk (>=0.2.9, <=0.3.0), a2anet (>=0.0.5, <=0.2.0) +440 more potentially affected by CVE-2026-0994 via protobuf (>=5.26.0rc2, <=5.29.5)

protobuf PYPI version =5.26.0rc2, =0.2.9, =0.0.5, =1.0.0, =0.1.0, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.0.1rc15474277, =2.47.9, =0.0.0b1, =0.1.0, =0.1.8, =0.0.10, =0.0.19 and more Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

aiognmi (0.1.1), ansys-tools-protoc-helper (0.6.0) +60 more potentially affected by CVE-2026-0994 via protobuf (4.24.4)

protobuf PYPI version 4.24.4 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aiognmi 0.1.1 - ansys-tools-protoc-helper 0.6.0 - apache-beam 2.51.0 - arista-lab =0.2.0, =0.13.0, =0.2.40, =0.6.0b1, =8.3.0, =0.3.0, =1.1.16,...

amazon-braket-algorithm-library (>=0.1.3, <=1.3.0), anx-interface (>=0.5.2, <=0.5.3) +27 more potentially affected by CVE-2026-0994 via protobuf (3.12.4)

protobuf PYPI version 3.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - amazon-braket-algorithm-library =0.1.3, =0.5.2, =1.4.0, =0.0.1, =0.8.2, =0.9.0.dev20200710225859, =0.0.3, =0.9.0rc0, =0.9.0rc0, =0.9.0rc0,...

acg-feature-extractor (0.0.2), aea (>=0.7.1, <=1.1.1) +91 more potentially affected by CVE-2026-0994 via protobuf (3.13.0)

protobuf PYPI version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - acg-feature-extractor 0.0.2 - aea =0.7.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =2.0.0, =0.0.8, =0.1.0, =0.1.0, =0.4.2, =1.5.0, =0.0.2, =0.0.4 and mo...

abi-maker (0.1.0), acapy-mydata-did-protocol (>=0.1.3, <=0.1.15) +187 more potentially affected by CVE-2026-0994 via protobuf (3.19.5)

protobuf PYPI version 3.19.5 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - abi-maker 0.1.0 - acapy-mydata-did-protocol =0.1.3, =1.1.1, =0.0.3, =0.1.0, =0.1.0, =1.0.0, =3.0.0, =3.0.0, =3.0.3 and more Source cves:...

nucypher (>=7.0.0, <=7.0.4) potentially affected by CVE-2026-0994 via protobuf (4.25.0rc2)

protobuf PYPI version 4.25.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - nucypher =7.0.0, =7.0.4 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

dovesnap (1.1.5), faucetconfrpc (0.22.45) +1 more potentially affected by CVE-2026-0994 via protobuf (4.21.11)

protobuf PYPI version 4.21.11 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - dovesnap 1.1.5 - faucetconfrpc 0.22.45 - mcap-protobuf-support 0.4.0 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...