ROOT-APP-PYPI-GHSA-RR7J-V2Q5-CHGV GHSA-rr7j-v2q5-chgv in langsmith - Patched by Root

Root has patched GHSA-rr7j-v2q5-chgv in the langsmith package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-33230 CVE-2026-33230 in nltk - Patched by Root

Root has patched CVE-2026-33230 in the nltk package for Root:PyPI. Multiple fixed versions available...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70491 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70491 Source advisory: SNYK:PYTHON-OPENWEBUI-18600527...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70491 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70491 Source advisory: GHSA-3R7G-Q6CG-Q2VX...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70491 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70491 Source advisory: MEND:CVE-2026-70491...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-54020 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-54020 Source advisory: GHSA-H6X2-583H-X99R...

doppler-pdm (>=0.1.0, <=1.0.2), liteyukibot-plugin-nonebot (>=0.1.0, <=0.1.3) +9 more potentially affected by CVE-2026-47781 via pdm (>=1.15.5, <=2.26.2)

pdm PYPI version =1.15.5, =0.1.0, =0.1.0, =0.1.5, =0.4.0, =0.6.0, =0.2.0, =0.8.0, =0.8.0b1, =0.8.0b2 Source cves: CVE-2026-47781 Source advisory: MEND:CVE-2026-47781...

djangodjangodjango (4.1.5), haupt (>=0.0.1, <=0.0.2) +4 more potentially affected by CVE-2026-15830 via django (4.1.5)

django PYPI version 4.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.5 - haupt =0.0.1, =0.13.0, =0.4.0, =0.4.1 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

djangodjangodjango (4.1.0rc1) potentially affected by CVE-2026-15307 via django (4.1.0rc1)

django PYPI version 4.1.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.0rc1 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

afex-devtools (>=0.1.0, <=0.32.0), aldryn-django (4.1.6.0) +3 more potentially affected by CVE-2026-15307 via django (4.1.6)

django PYPI version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - afex-devtools =0.1.0, =0.1.0, =0.0.3, =0.0.17 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

djangodjangodjango (4.1.0a1) potentially affected by CVE-2026-15830 via django (4.1.0a1)

django PYPI version 4.1.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.0a1 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

djangodjangodjango (4.1.0rc1) potentially affected by CVE-2026-15830 via django (4.1.0rc1)

django PYPI version 4.1.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.0rc1 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

djangodjangodjango (4.2.0b1), railguns (0.66.0) potentially affected by CVE-2026-15830 via django (4.2.0b1)

django PYPI version 4.2.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.0b1 - railguns 0.66.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

djangodjangodjango (4.1.0b1) potentially affected by CVE-2026-15307 via django (4.1.0b1)

django PYPI version 4.1.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.0b1 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

djangodjangodjango (4.1.5), haupt (>=0.0.1, <=0.0.2) +4 more potentially affected by CVE-2026-15307 via django (4.1.5)

django PYPI version 4.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.5 - haupt =0.0.1, =0.13.0, =0.4.0, =0.4.1 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

djangodjangodjango (4.1.8), kiwitcms (12.2.0) potentially affected by CVE-2026-15307 via django (4.1.8)

django PYPI version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.8 - kiwitcms 12.2.0 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +177 more potentially affected by CVE-2026-15307 via django (4.0.10)

django PYPI version 4.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aa-charlink =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.7.0, =2.0.0, =0.24.0, =1.0.3 - coop 2.16.0 a...

apollo-sdk (>=0.2.0, <=0.2.11), audoma (>=0.6.1, <=0.6.10) +19 more potentially affected by CVE-2026-15307 via django (4.0.0)

django PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - apollo-sdk =0.2.0, =0.6.1, =2.16.1, =1.0.7, =0.9.0, =0.9.0, =0.20.2, =0.70.0, =0.70.2 and more Source cves: CVE-2026-15307 Source advisory:...

autoreduce-frontend (>=22.0.0.dev12, <=22.0.0.dev13), djangodjangodjango (4.0.1) +4 more potentially affected by CVE-2026-15830 via django (4.0.1)

django PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev12, =0.0.3, =1.2.1 - railguns 0.53.0 - shaarpy 0.3.0 - vuln-repo 0.0.4 Source cves: CVE-2026-15830 Source advisory:...

djangodjangodjango (4.2.24), geonode (4.4.4) +1 more potentially affected by CVE-2026-15830 via django (4.2.24)

django PYPI version 4.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.24 - geonode 4.4.4 - mayan-edms =4.6.10, =4.10.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...