ctesiphon (>=0.1.0, <=0.1.17), framefox (>=0.0.11, <=1.1.0) +2 more potentially affected by CVE-2026-55558 via aiosmtplib (4.0.0)

aiosmtplib PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ctesiphon =0.1.0, =0.0.11, =0.0.2, =0.0.4, =0.0.6 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

async-sender (>=1.4.2, <=1.4.3) potentially affected by CVE-2026-55558 via aiosmtplib (1.1.3)

aiosmtplib PYPI version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender =1.4.2, =1.4.3 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

gulp-dissect (>=1.0.1, <=1.0.3), lazy-crawler (>=2.0.0, <=2.0.1) +1 more potentially affected by CVE-2026-55558 via aiosmtplib (>=5.0.0, <=5.1.0)

aiosmtplib PYPI version =5.0.0, =1.0.1, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

jhub-shibboleth-auth (1.1.0) potentially affected by CVE-2026-54338 via jupyterhub (0.9.0)

jupyterhub PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.1.0 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

cylc-uiserver (0.2.0), jhub-swarmspawner (>=0.2.4, <=0.2.6) +1 more potentially affected by CVE-2026-54338 via jupyterhub (1.1.0)

jupyterhub PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.2.0 - jhub-swarmspawner =0.2.4, =0.0.1, =0.0.3 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

swanhub (>=0.1.3, <=0.1.6) potentially affected by CVE-2026-54338 via jupyterhub (1.4.2)

jupyterhub PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - swanhub =0.1.3, =0.1.6 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

dapla-team-cli (>=0.0.4, <=0.1.2), dapla-toolbelt (>=1.3.7, <=1.8.2) +2 more potentially affected by CVE-2026-54338 via jupyterhub (3.1.1)

jupyterhub PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - dapla-team-cli =0.0.4, =1.3.7, =0.1.0, =0.2.1 - swmjupyter 0.1.3 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

jhub-shibboleth-auth (1.2.0) potentially affected by CVE-2026-54338 via jupyterhub (0.9.1)

jupyterhub PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.2.0 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2026-37004 via litellm (0.1.7713)

litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2026-37004 Sourc...

0xpwn (0.1.1), a2a-acl (0.0.14) +745 more potentially affected by CVE-2026-37004 via litellm (>=1.0.0, <=1.83.4)

litellm PYPI version =1.0.0, =0.3.5, =0.7.3, =1.0.1, =1.0.2, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.2.1.10062025 - agent-memory-server 0.15.0 - agent-opt 0.0.1 and more Source cves: CVE-2026-37004 Source advisory: OSV:PYSEC-2026-3861...

async-sender (>=1.3.0, <=1.3.2) potentially affected by CVE-2026-55558 via aiosmtplib (1.0.3)

aiosmtplib PYPI version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender =1.3.0, =1.3.2 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

academlo (>=0.0.1, <=0.0.3), aframeuz (>=0.1.0, <=0.2.0) +170 more potentially affected by CVE-2026-54770 via webob (>=1.2.3, <=1.8.10)

webob PYPI version =1.2.3, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =0.0.4 and more Source cves: CVE-2026-54770 Source advisory: OSV:PYSEC-2026-3943...

agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +6 more potentially affected by CVE-2026-45018 via chainlit (>=2.4.400, <=2.11.1)

chainlit PYPI version =2.4.400, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.2.2, =0.7.5, =0.7.10 Source cves: CVE-2026-45018 Source advisory: OSV:PYSEC-2026-3812...

agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +6 more potentially affected by CVE-2026-45019 via chainlit (>=2.4.400, <=2.11.1)

chainlit PYPI version =2.4.400, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.2.2, =0.7.5, =0.7.10 Source cves: CVE-2026-45019 Source advisory: OSV:PYSEC-2026-3811...

agentlightning (>=1.0.0, <=1.0.2), aiagents4pharma (>=0.0.0, <=1.49.1) +220 more potentially affected by CVE-2026-68508 via hydra-core (>=1.0.0rc4, <=1.3.2)

hydra-core PYPI version =1.0.0rc4, =1.0.0, =0.0.0, =0.1.5, =1.0.0rc1, =0.2.126, =1.0.0, =0.7.0, =0.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-68508 Source advisory: OSV:PYSEC-2026-3850...

richie (>=1.0.0b0, <=1.0.0b3) potentially affected by CVE-2026-54625 via django-cms (3.6.0)

django-cms PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - richie =1.0.0b0, =1.0.0b3 Source cves: CVE-2026-54625 Source advisory: OSV:PYSEC-2026-3824...

cmsplugin-blocks (>=1.3.0, <=1.5.3), cmsplugin-css-background (>=0.1.0, <=0.2.0) +36 more potentially affected by CVE-2026-54625 via django-cms (3.11.11)

django-cms PYPI version 3.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - cmsplugin-blocks =1.3.0, =0.1.0, =0.0.3, =2.0.0, =3.6.2, =7.0.4, =1.3.3.0, =0.6.0a3, =0.2.0, =0.0.2, =0.1.0, =0.3.0 and more Source cves:...

aldryn-faq (1.0.13), aldryn-people (1.1.1) +1 more potentially affected by CVE-2026-54625 via django-cms (3.2.5)

django-cms PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - aldryn-faq 1.0.13 - aldryn-people 1.1.1 - aldryn-snippet 0.1.4.2 Source cves: CVE-2026-54625 Source advisory: OSV:PYSEC-2026-3824...

django-unfold-extra (>=0.1.1, <=0.1.2), djangocms-haystack (>=0.5.0, <=0.5.1) potentially affected by CVE-2026-54625 via django-cms (>=5.0.0a1, <=5.0.6)

django-cms PYPI version =5.0.0a1, =0.1.1, =0.5.0, =0.5.1 Source cves: CVE-2026-54625 Source advisory: OSV:PYSEC-2026-3824...

richie (2.15.1) potentially affected by CVE-2026-54625 via django-cms (3.11.0)

django-cms PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - richie 2.15.1 Source cves: CVE-2026-54625 Source advisory: OSV:PYSEC-2026-3824...