0xpwn (0.1.1), a2a-acl (>=0.0.14, <=0.1.1) +825 more potentially affected by CVE-2026-84377 via litellm (>=1.0.0, <=1.88.1)

litellm PYPI version =1.0.0, =0.0.14, =0.0.14, =0.3.5, =0.7.3, =1.0.1, =1.0.2, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.2.1.10062025 - agent-memory-server 0.15.0 - agent-opt 0.0.1 and more Source cves: CVE-2026-84377 Source advisory: SNYK:PYTHON-LITELLM-19644158...

agentcore-metering (>=0.1.0, <=0.3.2), benchflow (>=0.6.6, <=0.7.9.dev2354) +13 more potentially affected by CVE-2026-84377 via litellm (>=1.91.0, <=1.91.4)

litellm PYPI version =1.91.0, =0.1.0, =0.6.6, =0.7.7, =0.1.0, =0.5.2, =2.1.7, =1.0.0, =0.4.9, =0.2.1, =0.3.0 - vikingbot 0.1.3 Source cves: CVE-2026-84377 Source advisory: SNYK:PYTHON-LITELLM-19644158...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +142 more potentially affected by CVE-2026-84381 via httpcore2 (>=2.0.0b1, <=2.9.1)

httpcore2 PYPI version =2.0.0b1, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2026-84381 Source advisory: MEND:CVE-2026-84381...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +147 more potentially affected by CVE-2026-84379 via httpx2 (>=0.0.0, <=2.10.0)

httpx2 PYPI version =0.0.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2026-84379 Source advisory: MEND:CVE-2026-84379...

fittrackee (1.3.3), kerbside (>=0.3.0, <=0.4.0) +1 more potentially affected by CVE-2026-76098 via mistune (>=3.3.0, <=3.3.2)

mistune PYPI version =3.3.0, =0.3.0, =3.1.0, =3.1.1 Source cves: CVE-2026-76098 Source advisory: OSV:GHSA-6M44-FPC8-C3RQ...

fittrackee (1.3.3), kerbside (>=0.3.0, <=0.4.0) +1 more potentially affected by CVE-2026-76098 via mistune (>=3.3.0, <=3.3.2)

mistune PYPI version =3.3.0, =0.3.0, =3.1.0, =3.1.1 Source cves: CVE-2026-76098 Source advisory: GHSA-6M44-FPC8-C3RQ...

torext (0.10.0) potentially affected by CVE-2026-82397 via tornado (3.0.0)

tornado PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - torext 0.10.0 Source cves: CVE-2026-82397 Source advisory: OSV:GHSA-MPF4-983Q-P7J4...

billomapy (2.4.0), prawoauth2 (0.1.5) potentially affected by CVE-2026-82397 via tornado (4.2.0)

tornado PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - billomapy 2.4.0 - prawoauth2 0.1.5 Source cves: CVE-2026-82397 Source advisory: OSV:GHSA-MPF4-983Q-P7J4...

monasca-agent (1.1.20), rejected (>=3.12.0, <=3.19.9) +1 more potentially affected by CVE-2026-82397 via tornado (4.2.1)

tornado PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - monasca-agent 1.1.20 - rejected =3.12.0, =1.0.0, =1.4.0 Source cves: CVE-2026-82397 Source advisory: OSV:GHSA-MPF4-983Q-P7J4...

analysisstore (0.0.5), bluesky-browser (0.1.0a1) +14 more potentially affected by CVE-2026-82397 via tornado (5.0.0b1)

tornado PYPI version 5.0.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - analysisstore 0.0.5 - bluesky-browser 0.1.0a1 - conftrak 0.0.6 - foebackend 1.0.0 - foeworkers 1.0.4 - httpwatcher 0.5.2 - legoman =1.0.0, =0.1....

edgy-project (>=0.1.12, <=0.1.15), fallixy (0.18.1) +5 more potentially affected by CVE-2026-82397 via tornado (4.4.3)

tornado PYPI version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - edgy-project =0.1.12, =0.18.1, =0.1.2, =0.9.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2026-82397 Source advisory: OSV:GHSA-MPF4-983Q-P7J4...

bokcolmaps (>=0.1.0, <=0.2.1), bokodapviewer (>=0.1.0, <=0.1.1) +8 more potentially affected by CVE-2026-82397 via tornado (4.4.2)

tornado PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - bokcolmaps =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.4, =0.1.7, =0.0.1, =0.0.14 Source cves: CVE-2026-82397 Source advisory: OSV:GHSA-MPF4-983Q-P7J4...

graphite-beacon (>=0.0.1, <=0.22.2) potentially affected by CVE-2026-82397 via tornado (4.0.2)

tornado PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - graphite-beacon =0.0.1, =0.22.2 Source cves: CVE-2026-82397 Source advisory: OSV:GHSA-MPF4-983Q-P7J4...

cocpyth (>=0.1.1, <=0.1.2), pretix (>=4.19.0, <=4.20.4) potentially affected by CVE-2026-82398 via pypdf (3.8.1)

pypdf PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cocpyth =0.1.1, =4.19.0, =4.20.4 Source cves: CVE-2026-82398 Source advisory: OSV:GHSA-FC8X-2RWW-XW9M...

agatta (>=1.0.0, <=1.0.2), agentbuddy (0.1.1.dev33) +102 more potentially affected by CVE-2026-82398 via pypdf (3.17.4)

pypdf PYPI version 3.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - agatta =1.0.0, =0.0.3, =0.0.1, =1.1.0, =0.0.2, =1.2.0, =0.6.7, =1.2.1, =0.1.3, =0.0.1, =0.8.2 - cadenai 0.1.0 and more Source cves: CVE-2026-82398...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-81727 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-81727 Source advisory: OSV:GHSA-F794-5JV7-7672...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-81727 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-81727 Source advisory: GHSA-F794-5JV7-7672...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-81723 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-81723 Source advisory: OSV:GHSA-VP2X-QP44-57V7...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-81723 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-81723 Source advisory: GHSA-VP2X-QP44-57V7...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-81723 via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-81723 Source advisory: OSV:GHSA-VP2X-QP44-57V7...