vantage6-algorithm-store (4.13.0), vantage6-node (4.13.0) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.0)

vantage6 PYPI version 4.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.0 - vantage6-node 4.13.0 - vantage6-server 4.13.0 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-370...

vantage6-algorithm-store (4.13.2rc1), vantage6-node (4.13.2rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.2rc1)

vantage6 PYPI version 4.13.2rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.2rc1 - vantage6-node 4.13.2rc1 - vantage6-server 4.13.2rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.13.3rc1), vantage6-node (4.13.3rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.3rc1)

vantage6 PYPI version 4.13.3rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.3rc1 - vantage6-node 4.13.3rc1 - vantage6-server 4.13.3rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.13.3rc2), vantage6-node (4.13.3rc2) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.3rc2)

vantage6 PYPI version 4.13.3rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.3rc2 - vantage6-node 4.13.3rc2 - vantage6-server 4.13.3rc2 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.13.6rc3), vantage6-node (4.13.6rc3) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.6rc3)

vantage6 PYPI version 4.13.6rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.6rc3 - vantage6-node 4.13.6rc3 - vantage6-server 4.13.6rc3 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.14.0rc1), vantage6-node (4.14.0rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.14.0rc1)

vantage6 PYPI version 4.14.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.14.0rc1 - vantage6-node 4.14.0rc1 - vantage6-server 4.14.0rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.15.0rc1), vantage6-node (4.15.0rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.15.0rc1)

vantage6 PYPI version 4.15.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.15.0rc1 - vantage6-node 4.15.0rc1 - vantage6-server 4.15.0rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.15.0rc2), vantage6-node (4.15.0rc2) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.15.0rc2)

vantage6 PYPI version 4.15.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.15.0rc2 - vantage6-node 4.15.0rc2 - vantage6-server 4.15.0rc2 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.15.0rc5), vantage6-node (4.15.0rc5) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.15.0rc5)

vantage6 PYPI version 4.15.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.15.0rc5 - vantage6-node 4.15.0rc5 - vantage6-server 4.15.0rc5 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.15.1), vantage6-node (4.15.1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.15.1)

vantage6 PYPI version 4.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.15.1 - vantage6-node 4.15.1 - vantage6-server 4.15.1 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-370...

diap-sdk (>=0.1.4, <=0.1.5), p2pclient (>=0.1.2, <=0.1.3) +1 more potentially affected by CVE-2026-73568 via libp2p (>=0.1.1, <=0.7.0)

libp2p PYPI version =0.1.1, =0.1.4, =0.1.2, =0.1.0a28, =0.1.0a36 Source cves: CVE-2026-73568 Source advisory: OSV:PYSEC-2026-3681...

JupyterLab: PyPI extension blocklist package-name canonicalization bypass

JupyterLab's PyPI extension manager enforces blockedextensionsuris by comparing the requested install name to blocklist entries with a custom string normalization that is weaker than PyPI package-name canonicalization. An authenticated user can request a PyPI-equivalent spelling such as...

homeassistant-stubs (2023.8.1), pytest-homeassistant-custom-component (0.13.50) potentially affected by CVE-2026-64825 via homeassistant (2023.8.1)

homeassistant PYPI version 2023.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.1 - pytest-homeassistant-custom-component 0.13.50 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.11.3), pytest-homeassistant-custom-component (0.12.20) potentially affected by CVE-2026-64825 via homeassistant (2022.11.3)

homeassistant PYPI version 2022.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.11.3 - pytest-homeassistant-custom-component 0.12.20 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.10.0b6), pytest-homeassistant-custom-component (0.12.4) potentially affected by CVE-2026-64825 via homeassistant (2022.10.0b6)

homeassistant PYPI version 2022.10.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.0b6 - pytest-homeassistant-custom-component 0.12.4 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.11.2), pytest-homeassistant-custom-component (0.12.19) potentially affected by CVE-2026-64825 via homeassistant (2022.11.2)

homeassistant PYPI version 2022.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.11.2 - pytest-homeassistant-custom-component 0.12.19 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.10.0b4), pytest-homeassistant-custom-component (0.12.2) potentially affected by CVE-2026-64825 via homeassistant (2022.10.0b4)

homeassistant PYPI version 2022.10.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.0b4 - pytest-homeassistant-custom-component 0.12.2 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.10.3), mqtt-hass-base (4.0.15) +1 more potentially affected by CVE-2026-64825 via homeassistant (2022.10.3)

homeassistant PYPI version 2022.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.3 - mqtt-hass-base 4.0.15 - pytest-homeassistant-custom-component 0.12.8 Source cves: CVE-2026-64825...

homeassistant-stubs (2022.9.6), mqtt-hass-base (>=4.0.9, <=4.0.10) +1 more potentially affected by CVE-2026-64825 via homeassistant (2022.9.6)

homeassistant PYPI version 2022.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.6 - mqtt-hass-base =4.0.9, =4.0.10 - pytest-homeassistant-custom-component 0.11.25 Source cves:...

homeassistant-stubs (2022.11.0b6), pytest-homeassistant-custom-component (0.12.16) potentially affected by CVE-2026-64825 via homeassistant (2022.11.0b6)

homeassistant PYPI version 2022.11.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.11.0b6 - pytest-homeassistant-custom-component 0.12.16 Source cves: CVE-2026-64825 Source advisory:...