avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36), bravoserver (>=3.1.0, <=3.1.4) +42 more potentially affected by CVE-2026-15337 via django (>=6.0.0, <=6.0.7)

django PYPI version =6.0.0, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =0.70.2, =1.0.1, =1.2.3 - django-tasks-aws 0.2.0b1 and more Source cves: CVE-2026-15337 Source advisory: MEND:CVE-2026-15337...

arthexis (>=0.1.3, <=2.0.0), cdm-ecommerce-backend (0.1.0) +74 more potentially affected by CVE-2026-15337 via django (>=5.2.0, <=5.2.16)

django PYPI version =5.2.0, =0.1.3, =8.6.0, =0.32.0, =8.9.21, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =2025.7.38 - django-factory-all 0.1.2 and more Source cves: CVE-2026-15337 Source advisory: MEND:CVE-2026-15337...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36) +50 more potentially affected by CVE-2026-15307 via django (>=6.0.0a1, <=6.0.7)

django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-15307 Source advisory: MEND:CVE-2026-15307...

ROOT-APP-PYPI-CVE-2026-32597 CVE-2026-32597 in PyJWT - Patched by Root

Root has patched CVE-2026-32597 in the PyJWT package for Root:PyPI. Multiple fixed versions available...

Malicious code in psbt-helpers (PyPI)

Source: kam193 394dea9d587ac1affba13c45ecfc28f5d005b2cb5f8b665dcf4591b60085a8ae The code advertised as a firmware upgrader for hardware wallets in fact downloads an infostealer. The stealer searches the machine for cryptocurrency sensitive data wallet files, seeds, browser data passwords, cookies...

atlassian-jwt-auth (>=2.2.0, <=2.4.0) potentially affected by CVE-2026-69248 via cryptography (1.2.1)

cryptography PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.2.0, =2.4.0 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...

atlassian-jwt-auth (8.0.1), authx (>=0.0.3, <=0.0.5) +28 more potentially affected by CVE-2026-69248 via cryptography (3.1.1)

cryptography PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth 8.0.1 - authx =0.0.3, =0.9.1, =1.0.0, =0.8.2rc2, =3.20.0, =0.1.0a1, =0.0.1, =0.0.7, =0.0.5, =0.1.0a1, =0.1.0a4 and mo...

ais-dom (>=2023.4.0b0, <=2023.4.6), an-website (23.3.28) +41 more potentially affected by CVE-2026-69248 via cryptography (40.0.1)

cryptography PYPI version 40.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =2023.4.0b0, =0.2.0, =3.1.1, =0.7.24, =0.6.24, =0.1.15, =0.1.0, =1.0.0b10, =0.7.0, =0.7.2 and more Source cves: CVE-2026-69248...

aadinspector (>=1.0.0, <=1.1.6), acme-nginx (0.3.3) +232 more potentially affected by CVE-2026-69248 via cryptography (37.0.4)

cryptography PYPI version 37.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aadinspector =1.0.0, =1.161.2, =0.2.0, =1.3.0, =0.0.1, =2.2.1, =2022.9.0b2, =0.3.0, =0.8.0a3, =0.0.1, =1.0.0, =2.1.0, =2.5.4 and more...

ais-dom (>=0.92.5, <=0.95.7), bitwarden-simple-cli (>=1.0.0, <=1.3.1) +29 more potentially affected by CVE-2026-69248 via cryptography (2.6.1)

cryptography PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.92.5, =1.0.0, =1.7.1, =0.2.5, =0.0.0, =0.0.17, =0.0.1.dev33, =0.1.8, =0.4.3, =0.1.0, =1.0.5 - ezissue-br 1.0.0 and more Sourc...

atlassian-jwt-auth (>=2.5.1, <=2.8.0), data-pipeline (>=0.9.5, <=0.9.12) potentially affected by CVE-2026-69248 via cryptography (1.3.4)

cryptography PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.5.1, =0.9.5, =0.9.12 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...

abst (2.3.59), abundance (0.0.1b0) +693 more potentially affected by CVE-2026-69248 via cryptography (44.0.3)

cryptography PYPI version 44.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - abst 2.3.59 - abundance 0.0.1b0 - acedeploy =2.4.15, =0.6.3, =1.0.0, =0.3.1, =1.0.0a6, =0.4.0, =4.5.0, =0.20.1, =0.27.0 and more Source...

agentstack-cli (>=0.5.0rc4, <=0.6.0rc4), artifact-ddd (>=0.0.1, <=0.0.3) +105 more potentially affected by CVE-2026-69248 via cryptography (46.0.3)

cryptography PYPI version 46.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agentstack-cli =0.5.0rc4, =0.0.1, =3.8.9, =0.8.0, =0.4.6, =1.1.56, =1.0.3, =4.7.0, =1.28.0rc1, =3.1.9, =3.1.52 and more Source cves:...

dcoscli (>=0.4.15, <=0.5.3), pycookiecheat (0.3.3) potentially affected by CVE-2026-69248 via cryptography (1.6.0)

cryptography PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dcoscli =0.4.15, =0.5.3 - pycookiecheat 0.3.3 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...

biweeklybudget (>=0.1.0, <=0.7.0), crossbar (17.3.1) +6 more potentially affected by CVE-2026-69248 via cryptography (1.8.1)

cryptography PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - biweeklybudget =0.1.0, =1.6.0, =1.1.2, =2.2.0, =0.3.4, =0.3.5 - typtop 0.2.11 Source cves: CVE-2026-69248 Source advisory:...

a-beta-scalekit (>=2.3.0, <=4.0.2), agixt (>=1.7.3, <=1.7.11) +118 more potentially affected by CVE-2026-69248 via cryptography (44.0.1)

cryptography PYPI version 44.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - a-beta-scalekit =2.3.0, =1.7.3, =1.1.3, =0.7.1, =0.0.85, =0.0.1.1, =1.0.754, =0.1.0, =1.3.0, =0.24.0, =0.27.0 and more Source cves:...

aepp-sdk (>=0.18.0.3, <=0.18.0.4), atlassian-jwt-auth (>=3.3.1, <=4.0.1) +19 more potentially affected by CVE-2026-69248 via cryptography (2.2.2)

cryptography PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aepp-sdk =0.18.0.3, =3.3.1, =0.2.2, =0.1.1, =0.16.8, =0.10.4, =1.6.517, =3.0.4, =0.6.7, =0.3.7, =1.4.5, =2.0.1 and more Source cves:...

atlassian-jwt-auth (2.5.0), netlib (0.16.0) +1 more potentially affected by CVE-2026-69248 via cryptography (1.2.3)

cryptography PYPI version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth 2.5.0 - netlib 0.16.0 - signxml =0.5.0, =1.0.0 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...

pullkin (>=0.10.0, <=0.12.1), token-sub-info (>=0.1.16, <=0.1.20) potentially affected by CVE-2026-69248 via cryptography (40.0.0)

cryptography PYPI version 40.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - pullkin =0.10.0, =0.1.16, =0.1.20 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...

ais-dom (>=2023.3.0b0, <=2023.3.2), alibaba-itag-sdk (0.0.1) +101 more potentially affected by CVE-2026-69248 via cryptography (39.0.1)

cryptography PYPI version 39.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =2023.3.0b0, =1.0.439, =0.1.0, =0.18.0, =1.3.4rc1, =0.2.6, =0.3.1 - crl-checker 1.0.5 and more Source cves: CVE-2026-69248 Sour...