ROOT-APP-PYPI-GHSA-539M-9XH6-Q6RR GHSA-539m-9xh6-q6rr in GitPython - Patched by Root

Root has patched GHSA-539m-9xh6-q6rr in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48710 CVE-2026-48710 in starlette - Patched by Root

Root has patched CVE-2026-48710 in the starlette package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-42561 CVE-2026-42561 in python-multipart - Patched by Root

Root has patched CVE-2026-42561 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

abstract-hugpy-dev (>=0.1.32, <=0.1.35), abstract-ocr (>=0.0.1.69, <=0.0.1.70) +402 more potentially affected by CVE-2026-84202 via modelscope (>=1.1.1, <=1.39.1)

modelscope PYPI version =1.1.1, =0.1.32, =0.0.1.69, =0.0.29, =1.11.4, =20260210.0.0, =0.1.0, =0.4.0, =2.0.0, =0.4.0, =1.0.0, =1.1.2, =1.1.4 and more Source cves: CVE-2026-84202 Source advisory: SNYK:PYTHON-MODELSCOPE-19497923...

ROOT-APP-PYPI-CVE-2026-54284 CVE-2026-54284 in sqlparse - Patched by Root

Root has patched CVE-2026-54284 in the sqlparse package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-41313 CVE-2026-41313 in pypdf - Patched by Root

Root has patched CVE-2026-41313 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-23949 CVE-2026-23949 in rootio-jaraco.context - Patched by Root

Root has patched CVE-2026-23949 in the rootio-jaraco.context package for Root:PyPI. Multiple fixed versions available...

aana (>=0.2.1, <=0.2.2), abgrouponline (>=1.0.0, <=1.0.2) +563 more potentially affected by CVE-2025-14922 via diffusers (>=0.2.4, <=0.40.0)

diffusers PYPI version =0.2.4, =0.2.1, =1.0.0, =0.1.1, =0.2.1, =20260210.0.0, =0.2.14, =0.1.2, =0.0.1, =0.0.3, =0.10.6, =0.0.1, =0.0.1, =1.8.20, =1.19.0 and more Source cves: CVE-2025-14922 Source advisory: SNYK:PYTHON-DIFFUSERS-14567485...

0token (>=0.1.0, <=0.4.0), 3-04-2025-ttm (0.1.0) +12410 more potentially affected by CVE-2025-14921 via transformers (>=0.1.0, <=5.16.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.5, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.6 and more Source cves: CVE-2025-14921 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564365...

0token (>=0.1.0, <=0.4.0), 3-04-2025-ttm (0.1.0) +12410 more potentially affected by CVE-2025-14929 via transformers (>=0.1.0, <=5.16.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.5, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.6 and more Source cves: CVE-2025-14929 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564275...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8501 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8501 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511413...

dbgpt-app (0.8.0rc1), dbgpt-client (>=0.7.0rc0, <=0.8.2) +2 more potentially affected by CVE-2024-10829 via dbgpt (0.8.2)

dbgpt PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbgpt and may be impacted: - dbgpt-app 0.8.0rc1 - dbgpt-client =0.7.0rc0, =0.7.0rc0, =0.8.0rc1, =0.8.2 Source cves: CVE-2024-10829 Source advisory: SNYK:PYTHON-DBGPT-9586190...

MAL-2025-191906 Malicious code in tonetext (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c46725ad6c88079cce4f7fa4a29175fec7f78ea83344da99d0f02ac4f020fcf3 When imported, the code embedded into the exception class downloads a remote file, and runs it by importing, and attempts to cover tracks by overwriting itself...

MAL-2024-11742 Malicious code in uus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 30ca4330f972788b6c86dd1f758c674796e53ffc99cf686ac2ed551110ba3830 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...