djangodjangodjango (4.1.0a1) potentially affected by CVE-2026-15830 via django (4.1.0a1)

django PYPI version 4.1.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.0a1 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...

ambition-edc (>=0.3.68, <=0.3.72), caluma (>=5.2.1, <=5.3.1) +9 more potentially affected by CVE-2026-15830 via django (2.2.10)

django PYPI version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ambition-edc =0.3.68, =5.2.1, =0.1.4, =0.0.1, =0.0.6, =0.1.3, =0.1.2, =2.0.0, =0.3.0, =0.6.4 Source cves: CVE-2026-15830 Source advisory:...

ROOT-APP-PYPI-CVE-2026-21226 CVE-2026-21226 in azure-core - Patched by Root

Root has patched CVE-2026-21226 in the azure-core package for Root:PyPI. Multiple fixed versions available...

avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36), bravoserver (>=3.1.0, <=3.1.4) +42 more potentially affected by CVE-2026-15920 via django (>=6.0.0, <=6.0.7)

django PYPI version =6.0.0, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =0.70.2, =1.0.1, =1.2.3 - django-tasks-aws 0.2.0b1 and more Source cves: CVE-2026-15920 Source advisory: MEND:CVE-2026-15920...

arthexis (>=0.1.3, <=2.0.0), cdm-ecommerce-backend (0.1.0) +74 more potentially affected by CVE-2026-15337 via django (>=5.2.0, <=5.2.16)

django PYPI version =5.2.0, =0.1.3, =8.6.0, =0.32.0, =8.9.21, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =2025.7.38 - django-factory-all 0.1.2 and more Source cves: CVE-2026-15337 Source advisory: MEND:CVE-2026-15337...

avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36), bravoserver (>=3.1.0, <=3.1.4) +42 more potentially affected by CVE-2026-15337 via django (>=6.0.0, <=6.0.7)

django PYPI version =6.0.0, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =0.70.2, =1.0.1, =1.2.3 - django-tasks-aws 0.2.0b1 and more Source cves: CVE-2026-15337 Source advisory: MEND:CVE-2026-15337...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36) +50 more potentially affected by CVE-2026-15307 via django (>=6.0.0a1, <=6.0.7)

django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-15307 Source advisory: MEND:CVE-2026-15307...

ROOT-APP-PYPI-CVE-2026-32597 CVE-2026-32597 in PyJWT - Patched by Root

Root has patched CVE-2026-32597 in the PyJWT package for Root:PyPI. Multiple fixed versions available...

Malicious code in psbt-helpers (PyPI)

Source: kam193 394dea9d587ac1affba13c45ecfc28f5d005b2cb5f8b665dcf4591b60085a8ae The code advertised as a firmware upgrader for hardware wallets in fact downloads an infostealer. The stealer searches the machine for cryptocurrency sensitive data wallet files, seeds, browser data passwords, cookies...

askflow-cli (1.0.0), atlassian-jwt-auth (>=8.0.2, <=9.0.0) +68 more potentially affected by CVE-2026-69248 via cryptography (3.2.1)

cryptography PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - askflow-cli 1.0.0 - atlassian-jwt-auth =8.0.2, =0.0.9, =0.2.7a0, =0.0.2, =0.0.1a12, =0.6.0, =3.1.12, =2.1.0, =1.0.0, =0.0.19, =0.7.1,...

acmetk (0.0.2), aioasuswrt (1.3.3) +137 more potentially affected by CVE-2026-69248 via cryptography (3.3.2)

cryptography PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - acmetk 0.0.2 - aioasuswrt 1.3.3 - ais-dom =2021.3.0b4, =1.6.0, =10.0.0, =1.10.0, =1.8.0, =2.20.0, =2.20.0, =1.0.1, =0.3.27, =0.5.6, =0.8...

ali2b-cli-scrapper (>=1.0.0, <=1.0.1), ambient-edge-server (>=0.1.2, <=0.2.4) +64 more potentially affected by CVE-2026-69248 via cryptography (42.0.7)

cryptography PYPI version 42.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ali2b-cli-scrapper =1.0.0, =0.1.2, =0.2.13, =0.1.10, =2.1.0rc1, =0.3.0, =0.3.9, =2.7.0, =0.1.2, =0.1.3 - edx-repo-tools 1.0.0 and more...

airunner (>=3.1.8, <=3.1.14), aitraining (>=0.0.0, <=0.8.37.dev0) +150 more potentially affected by CVE-2026-69248 via cryptography (44.0.0)

cryptography PYPI version 44.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - airunner =3.1.8, =0.0.0, =0.8.0, =0.2.4, =0.4.3.dev0, =0.1.3.dev3, =0.8.34, =1.0.0, =0.4.1, =0.121.3, =1.3.1, =1.5.0 - candig-server...

agixt (>=1.3.144, <=1.3.155), airbyte-source-google-analytics-v4 (>=0.2.5, <=0.4.19) +75 more potentially affected by CVE-2026-69248 via cryptography (41.0.4)

cryptography PYPI version 41.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agixt =1.3.144, =0.2.5, =2023.10.0b1, =0.1.0, =0.2.0rc1, =1.0.530, =1.1.28, =0.14.0, =0.15.0 and more Source cves: CVE-2026-69248 Sourc...

ai-enterprise-agent (>=0.0.2, <=0.0.9), airbyte-source-google-analytics-data-api (>=2.5.0, <=2.7.7) +110 more potentially affected by CVE-2026-69248 via cryptography (42.0.5)

cryptography PYPI version 42.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ai-enterprise-agent =0.0.2, =2.5.0, =0.1.0, =2.0.0, =0.2.6, =0.0.2, =0.7.46, =0.0.3, =0.0.13, =0.1.1, =1.0.0, =6.12.0, =0.0.1a1, =0.1.0...

ais-dom (>=2023.3.0b0, <=2023.3.2), alibaba-itag-sdk (0.0.1) +101 more potentially affected by CVE-2026-69248 via cryptography (39.0.1)

cryptography PYPI version 39.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =2023.3.0b0, =1.0.439, =0.1.0, =0.18.0, =1.3.4rc1, =0.2.6, =0.3.1 - crl-checker 1.0.5 and more Source cves: CVE-2026-69248 Sour...

apputils-config (>=2.0.2.dev19, <=2.0.2.dev20), aws-gate (>=0.9.3, <=0.11.0) +43 more potentially affected by CVE-2026-69248 via cryptography (3.3.1)

cryptography PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - apputils-config =2.0.2.dev19, =0.9.3, =0.1.1, =1.1.0, =1.2.3, =3.26.0, =0.1.1, =21.1.0, =0.1.0, =0.0.1, =0.2.0, =0.2.8 and more Source...

image-builder (>=0.1.1rc0, <=0.2.0), shortesttrack-sdk (>=1.2.0rc1, <=1.4.1) +1 more potentially affected by CVE-2026-69248 via cryptography (2.2.1)

cryptography PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - image-builder =0.1.1rc0, =1.2.0rc1, =0.0.3a0, =0.1.10 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...

gcloud-connectors (>=0.1.58b10, <=0.1.62), spsdk (>=1.3.0, <=1.5.0) +1 more potentially affected by CVE-2026-69248 via cryptography (3.4.3)

cryptography PYPI version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - gcloud-connectors =0.1.58b10, =1.3.0, =0.1.29, =0.1.32 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...

acme2certifier (>=0.45.0.dev1, <=0.46.2), acmeeh (>=2.0.0, <=2.1.0) +122 more potentially affected by CVE-2026-69248 via cryptography (47.0.0)

cryptography PYPI version 47.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - acme2certifier =0.45.0.dev1, =2.0.0, =0.9.1, =3.3.0, =0.1.0, =0.3.0, =0.8.3, =2.69.0rc3, =2.7.2, =2.3.1, =0.4.9, =2.66.2, =2.82.0 and...