dh-potluck (>=1.34.4, <=1.34.5) potentially affected by CVE-2026-50271 via ddtrace (3.14.0)

ddtrace PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - dh-potluck =1.34.4, =1.34.5 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

blackfire-conprof (>=1.2.6, <=1.2.11), dh-potluck (>=1.37.3, <=2.0.0) +2 more potentially affected by CVE-2026-50271 via ddtrace (>=4.0.0, <=4.6.4)

ddtrace PYPI version =4.0.0, =1.2.6, =1.37.3, =0.86.4rc0, =8.0.0, =8.0.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=3.0.2, <=3.0.5) potentially affected by CVE-2026-50271 via ddtrace (1.7.3)

ddtrace PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =3.0.2, =3.0.5 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

arkindex-base-worker (>=0.3.2rc7, <=0.3.6rc1), disk-usage-exporter (>=0.0.1, <=0.1.0) +14 more potentially affected by CVE-2026-54552 via sh (>=2.0.2, <=2.2.2)

sh PYPI version =2.0.2, =0.3.2rc7, =0.0.1, =0.0.1, =1.0.0, =1.0.20, =0.0.2, =0.0.1, =0.8.9, =4.5.0, =23.10.20rc0, =0.1.6, =0.6.14, =0.1.5, =1.0.19, =1.0.20 and more Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3540...

eaxum-zou (>=0.0.1, <=0.0.15), fetch-tool (>=0.8.0, <=0.8.1) +15 more potentially affected by CVE-2026-54552 via sh (1.12.14)

sh PYPI version 1.12.14 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - eaxum-zou =0.0.1, =0.8.0, =0.11.0, =0.0.2, =0.1.9, =0.1.0, =2.13.0, =0.1.20200409, =0.12.0, =0.0.4, =0.0.2, =0.0.12 and more Source cves: CVE-2026-54552...

aio-pika-rpc (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-50271 via ddtrace (0.29.0)

ddtrace PYPI version 0.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aio-pika-rpc =1.0.0, =1.0.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

example-pkg-naturalett (>=6.0.0, <=12.6.0) potentially affected by CVE-2026-50271 via ddtrace (0.37.0)

ddtrace PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - example-pkg-naturalett =6.0.0, =12.6.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

opentelemetry-exporter-datadog (>=0.20.0b0, <=0.30.0b0) potentially affected by CVE-2026-50271 via ddtrace (0.46.0)

ddtrace PYPI version 0.46.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - opentelemetry-exporter-datadog =0.20.0b0, =0.30.0b0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

aioradio (>=0.14.3, <=0.14.4) potentially affected by CVE-2026-50271 via ddtrace (0.50.3)

ddtrace PYPI version 0.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aioradio =0.14.3, =0.14.4 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-checks-base (>=25.0.0, <=32.5.1) potentially affected by CVE-2026-50271 via ddtrace (0.53.2)

ddtrace PYPI version 0.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-checks-base =25.0.0, =32.5.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

spellbot (>=7.10.1, <=7.10.10) potentially affected by CVE-2026-50271 via ddtrace (0.56.1)

ddtrace PYPI version 0.56.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - spellbot =7.10.1, =7.10.10 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=3.52.0, <=3.53.0), spellbot (7.12.3) potentially affected by CVE-2026-50271 via ddtrace (0.58.5)

ddtrace PYPI version 0.58.5 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =3.52.0, =3.53.0 - spellbot 7.12.3 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=3.1.0, <=3.1.2) potentially affected by CVE-2026-50271 via ddtrace (1.8.0)

ddtrace PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =3.1.0, =3.1.2 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

kpler-ai-kai-dependencies (0.0.2) potentially affected by CVE-2026-50271 via ddtrace (1.20.14)

ddtrace PYPI version 1.20.14 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - kpler-ai-kai-dependencies 0.0.2 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=4.81.0, <=4.82.0) potentially affected by CVE-2026-50271 via ddtrace (2.0.0rc2)

ddtrace PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =4.81.0, =4.82.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

tracer-extension (1.0.0) potentially affected by CVE-2026-50271 via ddtrace (2.9.6)

ddtrace PYPI version 2.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - tracer-extension 1.0.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

emmet-api (>=0.84.6rc5, <=0.84.10rc0) potentially affected by CVE-2026-50271 via ddtrace (3.0.0rc3)

ddtrace PYPI version 3.0.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - emmet-api =0.84.6rc5, =0.84.10rc0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

dh-potluck (>=1.34.6, <=1.37.2) potentially affected by CVE-2026-50271 via ddtrace (3.14.1)

ddtrace PYPI version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - dh-potluck =1.34.6, =1.37.2 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

debpackager (>=0.1.0, <=0.2.1), freedom (>=0.0.0_21_g3038804_dirty, <=0.0.1) +6 more potentially affected by CVE-2026-54552 via sh (1.11.0)

sh PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - debpackager =0.1.0, =0.0.021g3038804dirty, =0.6.0, =0.0.0, =0.1.0, =0.9.1, =0.9.6 - xenon 0.3.3 Source cves: CVE-2026-54552 Source advisory:...

arkindex-base-worker (>=0.2.1, <=0.3.0rc5), candyshop (>=0.2.0, <=0.2.2) +8 more potentially affected by CVE-2026-54552 via sh (1.14.2)

sh PYPI version 1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - arkindex-base-worker =0.2.1, =0.2.0, =0.0.2, =4.3.0a1, =0.1.1.1, =1.0.1, =2.0.0rc3, =2.0.0rc4 Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3...