homeassistant-stubs (2021.4.0b0) potentially affected by CVE-2026-64825 via homeassistant (2021.4.0b0)

homeassistant PYPI version 2021.4.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.4.0b0 Source cves: CVE-2026-64825 Source advisory: OSV:PYSEC-2026-3669...

homeassistant-stubs (2022.9.0b2), pytest-homeassistant-custom-component (0.11.14) potentially affected by CVE-2026-64825 via homeassistant (2022.9.0b2)

homeassistant PYPI version 2022.9.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.0b2 - pytest-homeassistant-custom-component 0.11.14 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.3.4), pytest-homeassistant-custom-component (0.7.3) potentially affected by CVE-2026-64825 via homeassistant (2022.3.4)

homeassistant PYPI version 2022.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.4 - pytest-homeassistant-custom-component 0.7.3 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.8.3), pytest-homeassistant-custom-component (0.11.8) potentially affected by CVE-2026-64825 via homeassistant (2022.8.3)

homeassistant PYPI version 2022.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.8.3 - pytest-homeassistant-custom-component 0.11.8 Source cves: CVE-2026-64825 Source advisory:...

coiled-runtime (>=0.1.0, <=0.1.1), trubrics (0.0.2) potentially affected by CVE-2026-73415 via jupyterlab (3.4.2)

jupyterlab PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - coiled-runtime =0.1.0, =0.1.1 - trubrics 0.0.2 Source cves: CVE-2026-73415 Source advisory: OSV:PYSEC-2026-3671...

homeassistant-stubs (2022.6.0b3), pytest-homeassistant-custom-component (0.9.7) potentially affected by CVE-2026-64825 via homeassistant (2022.6.0b3)

homeassistant PYPI version 2022.6.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.0b3 - pytest-homeassistant-custom-component 0.9.7 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2021.4.0b1) potentially affected by CVE-2026-64825 via homeassistant (2021.4.0b1)

homeassistant PYPI version 2021.4.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.4.0b1 Source cves: CVE-2026-64825 Source advisory: OSV:PYSEC-2026-3669...

vantage6-algorithm-store (4.13.0rc4), vantage6-node (4.13.0rc4) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.0rc4)

vantage6 PYPI version 4.13.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.0rc4 - vantage6-node 4.13.0rc4 - vantage6-server 4.13.0rc4 Source cves: CVE-2026-73652 Source advisory:...

homeassistant-stubs (2021.6.5) potentially affected by CVE-2026-64825 via homeassistant (2021.6.5)

homeassistant PYPI version 2021.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.6.5 Source cves: CVE-2026-64825 Source advisory: OSV:PYSEC-2026-3669...

JupyterLab: PyPI extension blocklist package-name canonicalization bypass

JupyterLab's PyPI extension manager enforces blockedextensionsuris by comparing the requested install name to blocklist entries with a custom string normalization that is weaker than PyPI package-name canonicalization. An authenticated user can request a PyPI-equivalent spelling such as...

vantage6-algorithm-store (4.13.3rc1), vantage6-node (4.13.3rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.3rc1)

vantage6 PYPI version 4.13.3rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.3rc1 - vantage6-node 4.13.3rc1 - vantage6-server 4.13.3rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-node (2.3.2rc1), vantage6-server (2.3.2rc1) potentially affected by CVE-2026-73652 via vantage6 (2.3.2rc1)

vantage6 PYPI version 2.3.2rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 2.3.2rc1 - vantage6-server 2.3.2rc1 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

homeassistant-stubs (2023.3.0b0) potentially affected by CVE-2026-64825 via homeassistant (2023.3.0b0)

homeassistant PYPI version 2023.3.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.3.0b0 Source cves: CVE-2026-64825 Source advisory: OSV:PYSEC-2026-3669...

homeassistant-stubs (2021.10.0b3) potentially affected by CVE-2026-64825 via homeassistant (2021.10.0b3)

homeassistant PYPI version 2021.10.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.10.0b3 Source cves: CVE-2026-64825 Source advisory: OSV:PYSEC-2026-3669...

homeassistant-stubs (2023.11.2), pytest-homeassistant-custom-component (0.13.76) potentially affected by CVE-2026-64825 via homeassistant (2023.11.2)

homeassistant PYPI version 2023.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.11.2 - pytest-homeassistant-custom-component 0.13.76 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.8.7), mqtt-hass-base (>=4.0.0, <=4.0.7) +1 more potentially affected by CVE-2026-64825 via homeassistant (2022.8.7)

homeassistant PYPI version 2022.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.8.7 - mqtt-hass-base =4.0.0, =4.0.7 - pytest-homeassistant-custom-component 0.11.12 Source cves:...

homeassistant-stubs (2022.7.0b2) potentially affected by CVE-2026-64825 via homeassistant (2022.7.0b2)

homeassistant PYPI version 2022.7.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.7.0b2 Source cves: CVE-2026-64825 Source advisory: OSV:PYSEC-2026-3669...

homeassistant-stubs (2021.6.0b1) potentially affected by CVE-2026-64825 via homeassistant (2021.6.0b1)

homeassistant PYPI version 2021.6.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.6.0b1 Source cves: CVE-2026-64825 Source advisory: OSV:PYSEC-2026-3669...

ale-uy (1.5.0), amphi-etl (>=0.9.2a3, <=0.9.8) +11 more potentially affected by CVE-2026-73416 via jupyterlab (>=4.5.0, <=4.5.8)

jupyterlab PYPI version =4.5.0, =0.9.2a3, =0.2.4, =0.0.1, =0.3.0, =2512.2.0, =1.4.0, =0.1.0, =2.0.0, =2.1.2 Source cves: CVE-2026-73416 Source advisory: OSV:PYSEC-2026-3670...

homeassistant-stubs (2022.9.0), pytest-homeassistant-custom-component (0.11.19) potentially affected by CVE-2026-64825 via homeassistant (2022.9.0)

homeassistant PYPI version 2022.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.0 - pytest-homeassistant-custom-component 0.11.19 Source cves: CVE-2026-64825 Source advisory:...