27714 matches found
0x20bf (0.0.1), 2keys (0.5.1) +3491 more potentially affected by CVE-2026-59881 via aiohttp (>=3.0.0b0, <=3.14.1)
aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-59881 Source advisory: OSV:PYSEC-2026-3547...
annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-12074 via nltk (2.0.5)
nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-12074 Source advisory: OSV:PYSEC-2026-3584...
aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +117 more potentially affected by CVE-2026-54621 via datamodel-code-generator (>=0.25.1, <=0.59.1)
datamodel-code-generator PYPI version =0.25.1, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.0.0, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.1.5 and more Source cves: CVE-2026-54621 Source advisory: OSV:PYSEC-2026-3561...
aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +140 more potentially affected by CVE-2026-55391 via datamodel-code-generator (>=0.5.10, <=0.61.0)
datamodel-code-generator PYPI version =0.5.10, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.0.0, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.1.5 and more Source cves: CVE-2026-55391 Source advisory: OSV:PYSEC-2026-3565...
AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()
SummaryThe AWS Bedrock AgentCore Python SDK bedrock-agentcore provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the...
mimir-ai (0.0.3), rara-digitizer (>=1.0.0, <=1.5.8) potentially affected by CVE-2026-59937 via pypdf (5.0.0)
pypdf PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - mimir-ai 0.0.3 - rara-digitizer =1.0.0, =1.5.8 Source cves: CVE-2026-59937 Source advisory: OSV:PYSEC-2026-3610...
accession (>=1.9.0, <=3.11.0), aws-ecr-migration (>=1.0.0, <=1.2.1) +71 more potentially affected by CVE-2026-18654 via awscli (>=1.7.34, <=1.45.23)
awscli PYPI version =1.7.34, =1.9.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.8.2, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-18654 Source advisory: SNYK:PYTHON-AWSCLI-18533156...
1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +2722 more potentially affected by CVE-2026-69248 via cryptography (>=45.0.0, <=48.0.1)
cryptography PYPI version =45.0.0, =0.1.3, =0.5.3, =0.1.0, =0.1.1, =2.4.119, =0.45.0.dev1, =2.17.2, =2.0.0, =3.2.1, =3.9.2 and more Source cves: CVE-2026-69248 Source advisory: OSV:GHSA-M2H6-J472-RP4C...
1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +2722 more potentially affected by CVE-2026-69248 via cryptography (>=45.0.0, <=48.0.1)
cryptography PYPI version =45.0.0, =0.1.3, =0.5.3, =0.1.0, =0.1.1, =2.4.119, =0.45.0.dev1, =2.17.2, =2.0.0, =3.2.1, =3.9.2 and more Source cves: CVE-2026-69248 Source advisory: GHSA-M2H6-J472-RP4C...
1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +4667 more potentially affected by CVE-2026-69249 via cryptography (>=42.0.0, <=48.0.1)
cryptography PYPI version =42.0.0, =0.1.3, =0.5.3, =2.3.84, =0.1.0, =2.3.0, =0.1.0, =0.1.1, =0.1.0, =2.3.57, =2.4.15, =2.4.366.dev1 - aciclient 1.7.0 - acido 0.15.0 and more Source cves: CVE-2026-69249 Source advisory: GHSA-JWV3-5HGF-82WW...
1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +3607 more potentially affected by CVE-2026-69247 via cryptography (>=44.0.0, <=49.0.0)
cryptography PYPI version =44.0.0, =0.1.3, =0.5.3, =2.3.0, =0.1.0, =0.1.1, =2.4.15, =0.45.0.dev1, =0.46.1 and more Source cves: CVE-2026-69247 Source advisory: MEND:CVE-2026-69247...
muffin (>=0.3.0, <=0.3.2) potentially affected by CVE-2026-69244 via aiohttp (0.18.3)
aiohttp PYPI version 0.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.3.0, =0.3.2 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...
muffin (>=0.7.1, <=0.8.6) potentially affected by CVE-2026-69244 via aiohttp (0.21.6)
aiohttp PYPI version 0.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.7.1, =0.8.6 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...
muffin (0.5.0) potentially affected by CVE-2026-69244 via aiohttp (0.20.0)
aiohttp PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.5.0 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...
muffin (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-69244 via aiohttp (0.17.2)
aiohttp PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.1, =0.1.4 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...
muffin (>=0.0.2, <=0.0.22) potentially affected by CVE-2026-69244 via aiohttp (0.14.1)
aiohttp PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.2, =0.0.22 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...
muffin (>=0.6.0, <=0.6.1) potentially affected by CVE-2026-69244 via aiohttp (0.21.2)
aiohttp PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.6.0, =0.6.1 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...
muffin (>=0.1.5, <=0.1.6) potentially affected by CVE-2026-69244 via aiohttp (0.17.3)
aiohttp PYPI version 0.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.5, =0.1.6 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...
geoffrey (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-69244 via aiohttp (0.6.4)
aiohttp PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - geoffrey =0.1.0, =0.1.2 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...
homeassistant (>=0.38.0, <=0.38.4), okami (>=0.1.2, <=0.1.3) +1 more potentially affected by CVE-2026-69244 via aiohttp (1.3.1)
aiohttp PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - homeassistant =0.38.0, =0.1.2, =0.1.3 - pyatv 0.1.4 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...