acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), aihandler (>=1.8.15, <=1.19.0) +116 more potentially affected by CVE-2026-12570 via keras (2.12.0)

keras PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - acetone-nnet =0.1.0.dev2, =1.8.15, =1.8.17, =0.1.18, =1.8.14, =1.1.0, =0.2.2.dev0, =1.3.0, =0.10.0, =0.2.0, =1.0.0, =1.0.1 - beyondml 0.1.5 and more...

bento-cli (>=0.1.0, <=0.1.1), walletlib (0.1.0) potentially affected by CVE-2026-76219 via gitpython (2.1.14)

gitpython PYPI version 2.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bento-cli =0.1.0, =0.1.1 - walletlib 0.1.0 Source cves: CVE-2026-76219 Source advisory: OSV:PYSEC-2026-3838...

ax-env (>=0.2.6, <=0.2.7), cbc (>=1.0.0, <=1.1.0) +18 more potentially affected by CVE-2026-12570 via keras (2.9.0)

keras PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - ax-env =0.2.6, =1.0.0, =0.3.0, =0.1.8, =1.0.0, =1.0.12, =0.6.1, =1.0.0, =0.1.7, =1.0.8rc18, =1.0.8rc19 and more Source cves: CVE-2026-12570 Source...

airflow-indexima (>=1.0.1, <=2.2.1), arcli (>=0.1.0, <=0.1.1) +69 more potentially affected by CVE-2026-76219 via gitpython (2.1.15)

gitpython PYPI version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - airflow-indexima =1.0.1, =0.1.0, =0.3.0rc1, =0.1.0, =0.7.0, =0.2.0, =0.11.0, =0.1.0, =0.6.0, =0.3.0, =2.0.0, =2019.2.3rc0, =2021.7.0 and more...

auto-dl (0.1.1), azureml-contrib-brainwave (>=0.1.57, <=1.0.33) +8 more potentially affected by CVE-2026-12570 via keras (2.1.5)

keras PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - auto-dl 0.1.1 - azureml-contrib-brainwave =0.1.57, =1.0.0, =0.1.2, =0.2.0, =1.0.0, =2.0.4, =0.1.0, =0.1.1 Source cves: CVE-2026-12570 Source advisory:...

cosmopower (0.2.0), guardrail-ml (>=0.0.14, <=0.0.15) +7 more potentially affected by CVE-2026-12570 via keras (2.15.0rc1)

keras PYPI version 2.15.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cosmopower 0.2.0 - guardrail-ml =0.0.14, =0.5.10, =0.1.0, =2.14.0rc0, =2.14.0rc0, =2.14.0rc1 - tensorflow-text 2.13.0rc0 - tf-extensions 0.1.0...

gpopt (>=0.1.0, <=0.2.3) potentially affected by CVE-2026-76220 via gitpython (0.3.6)

gitpython PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - gpopt =0.1.0, =0.2.3 Source cves: CVE-2026-76220 Source advisory: OSV:PYSEC-2026-3843...

deeppavlov (>=0.0.6b0, <=0.4.0) potentially affected by CVE-2026-12570 via keras (2.2.0)

keras PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - deeppavlov =0.0.6b0, =0.4.0 Source cves: CVE-2026-12570 Source advisory: OSV:PYSEC-2026-3856...

elib (>=0.1.55, <=0.1.57), emiz (>=0.1.35, <=2018.4.2.1) +11 more potentially affected by CVE-2026-76220 via gitpython (2.1.8)

gitpython PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elib =0.1.55, =0.1.35, =0.2.4a149, =0.0.1, =1.0.0, =0.4233.0, =0.2354.0, =0.2354.0, =0.1.7, =0.2.120, =1.0.0, =0.1.0, =2.1.1 Source cves:...

azureml-acft-image-components (>=0.0.7, <=0.0.45), azureml-evaluate-mlflow (>=0.0.0, <=0.0.91) +8 more potentially affected by CVE-2026-71211 via mlflow (>=3.14.0, <=3.15.2)

mlflow PYPI version =3.14.0, =0.0.7, =0.0.0, =0.9.1, =0.6.0, =0.2.9, =1.4.0, =1.0.9, =1.0.7, =1.0.12 Source cves: CVE-2026-71211 Source advisory: OSV:PYSEC-2026-3865...

a2grunnerp (>=0.1.0, <=0.1.8), academic-emotion (0.1.2) +113 more potentially affected by CVE-2026-12570 via keras (2.10.0)

keras PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.0.2, =0.1.0, =7.2.0, =0.1.3, =0.1.8 and more Source cves: CVE-2026-12570 Source advisory: OSV:PYSEC-2026-3856...

animl (>=1.1.2, <=1.1.4), annopro (>=0.1.0rc1, <=0.2.0) +65 more potentially affected by CVE-2026-12570 via keras (2.6.0)

keras PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - animl =1.1.2, =0.1.0rc1, =0.47.0, =1.0.1, =0.0.9, =0.0.3, =2.2.0, =2.4.1, =1.0.0rc1, =4.5.2, =0.48.1, =1.1.3, =0.2.4, =0.2.10 and more Source cves:...

tensorflow (2.6.0rc0) potentially affected by CVE-2026-12570 via keras (2.6.0rc0)

keras PYPI version 2.6.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - tensorflow 2.6.0rc0 Source cves: CVE-2026-12570 Source advisory: OSV:PYSEC-2026-3856...

adpred (>=1.2.8, <=1.2.9), ax-env (>=0.2.2, <=0.2.4) +24 more potentially affected by CVE-2026-12570 via keras (2.8.0)

keras PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.2.8, =0.2.2, =0.1.14, =1.1.9, =1.0.0, =1.1.1 - keras-flower 0.3.0 - napari-deepfinder 0.0.1 and more Source cves: CVE-2026-12570 Source...

adversarial-friend (1.1.8), agrothon (>=1.1.5, <=1.3.2) +43 more potentially affected by CVE-2026-12570 via keras (2.4.3)

keras PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-friend 1.1.8 - agrothon =1.1.5, =2.1.0, =0.0.6, =0.1.2.dev0, =0.1.0, =0.0.1.dev0, =0.0.6, =0.0.2, =0.1.3, =0.7.0, =1.4.0 and more Source...

amber-automl (>=0.1.0, <=0.1.2), axelerate (>=0.5.2, <=0.5.6) +32 more potentially affected by CVE-2026-12570 via keras (2.2.5)

keras PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - amber-automl =0.1.0, =0.5.2, =0.2.6, =0.0.1, =0.1.13, =0.2.0, =0.0.3, =0.16.3, =0.9.6, =1.2.0, =0.0.1, =0.0.10 - monk-cpu 0.0.1 and more Source cves:...

autotsf (>=0.0.5, <=0.0.8), carla-recourse (>=0.0.4, <=0.0.5) +15 more potentially affected by CVE-2026-12570 via keras (2.3.0)

keras PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - autotsf =0.0.5, =0.0.4, =1.0.0, =0.0.1, =0.4.2rc0, =0.4.1, =0.2.4, =0.6.4, =0.6.7 and more Source cves: CVE-2026-12570 Source advisory:...

aws-client (>=0.10.0, <=0.11.0), git-repo (>=1.7.0, <=1.7.1) potentially affected by CVE-2026-76220 via gitpython (2.0.6)

gitpython PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - aws-client =0.10.0, =1.7.0, =1.7.1 Source cves: CVE-2026-76220 Source advisory: OSV:PYSEC-2026-3843...

dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-76219 via gitpython (1.0.2)

gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-76219 Source advisory: OSV:PYSEC-2026-3838...

android-category (>=0.0.3, <=0.0.4), ant-cli (0.0.1) +34 more potentially affected by CVE-2026-76219 via gitpython (2.1.11)

gitpython PYPI version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - android-category =0.0.3, =0.0.2, =0.3.0, =0.0.2, =0.12.4rc1, =0.1.26.dev1542857464, =0.2.3, =0.1.0, =0.0.1, =1.2.5, =0.1.0.0b1, =0.1.3 and mo...