1xn-vmcp (>=0.5.2, <=0.6.1), a2c-smcp (>=0.1.1rc0, <=0.1.5) +1095 more potentially affected by CVE-2026-59950 via mcp (>=1.0.0, <=1.28.0)

mcp PYPI version =1.0.0, =0.5.2, =0.1.1rc0, =0.0.2, =0.2.0, =0.1.7rc1, =1.2.3, =0.5.0, =0.1.1, =0.11.3, =0.11.8, =0.11.10 and more Source cves: CVE-2026-59950 Source advisory: OSV:PYSEC-2026-3483...

astra-assistants (>=2.3.0, <=2.4.5), fiftyone-mcp-server (>=0.1.0, <=0.1.2) +7 more potentially affected by CVE-2026-52869 via mcp (0.9.1)

mcp PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mcp and may be impacted: - astra-assistants =2.3.0, =0.1.0, =3.0.16, =0.0.4, =1.0.26, =1.0.35 Source cves: CVE-2026-52869 Source advisory: OSV:PYSEC-2026-3482...

aegis-finance-mcp (0.1.1), agency-engine (>=1.2.3, <=1.2.4.2) +229 more potentially affected by CVE-2026-52870 via mcp (>=1.23.0, <=1.27.1)

mcp PYPI version =1.23.0, =1.2.3, =0.1.1, =0.11.3, =0.11.8, =0.1.0, =0.1.0, =0.2.0, =0.13.2, =0.4.7, =0.5.0rc4, =0.1.0, =1.1.0, =1.1.1 and more Source cves: CVE-2026-52870 Source advisory: OSV:PYSEC-2026-3481...

arkindex-base-worker (>=0.1.11, <=0.2.1b2), assignment-autograder (>=2.12.0, <=2.18.1) +7 more potentially affected by CVE-2026-54552 via sh (1.14.1)

sh PYPI version 1.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - arkindex-base-worker =0.1.11, =2.12.0, =0.15.0, =0.1.0, =0.2.5, =1.0.0a0, =0.3.3, =0.3.0, =2.1.1a0 - zillionare-pluto 0.2.0 Source cves: CVE-2026-54552...

ci-buildbot (>=0.4.0, <=0.11.5), molecule (>=3.0.5, <=3.1.5) +2 more potentially affected by CVE-2026-54552 via sh (1.13.1)

sh PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - ci-buildbot =0.4.0, =3.0.5, =0.0.0.dev0, =0.1.9, =0.1.12 Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3540...

crc-bonfire (>=0.0.0a0, <=1.0.0a0), git-jira (>=0.2.0, <=0.5.0) potentially affected by CVE-2026-54552 via sh (1.14.0)

sh PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - crc-bonfire =0.0.0a0, =0.2.0, =0.5.0 Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3540...

bk-plugin-framework (>=2.3.0rc1, <=2.4.0rc0), bk-plugin-runtime (>=2.1.0rc1, <=2.2.0rc0) potentially affected by CVE-2026-50271 via ddtrace (0.14.1)

ddtrace PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - bk-plugin-framework =2.3.0rc1, =2.1.0rc1, =2.2.0rc0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

dh-potluck (0.1.3) potentially affected by CVE-2026-50271 via ddtrace (0.25.0)

ddtrace PYPI version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - dh-potluck 0.1.3 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (2.24.0) potentially affected by CVE-2026-50271 via ddtrace (0.41.2)

ddtrace PYPI version 0.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 2.24.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (3.49.0) potentially affected by CVE-2026-50271 via ddtrace (0.53.0)

ddtrace PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 3.49.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=3.59.0, <=3.60.0) potentially affected by CVE-2026-50271 via ddtrace (0.61.5)

ddtrace PYPI version 0.61.5 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =3.59.0, =3.60.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

dh-potluck (>=1.5.0, <=1.12.0) potentially affected by CVE-2026-50271 via ddtrace (1.1.1)

ddtrace PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - dh-potluck =1.5.0, =1.12.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=3.0.0, <=3.0.1) potentially affected by CVE-2026-50271 via ddtrace (1.7.2)

ddtrace PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =3.0.0, =3.0.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

blackfire-conprof (>=0.1.2, <=1.1.0), troncos (>=4.0.0b1, <=4.0.0) potentially affected by CVE-2026-50271 via ddtrace (1.13.3)

ddtrace PYPI version 1.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - blackfire-conprof =0.1.2, =4.0.0b1, =4.0.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

emmet-api (>=0.72.0, <=0.78.0rc1) potentially affected by CVE-2026-50271 via ddtrace (2.1.0rc2)

ddtrace PYPI version 2.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - emmet-api =0.72.0, =0.78.0rc1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

tracer-extension (>=1.0.1, <=1.0.8) potentially affected by CVE-2026-50271 via ddtrace (2.9.2)

ddtrace PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - tracer-extension =1.0.1, =1.0.8 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

xocto (7.2.0) potentially affected by CVE-2026-50271 via ddtrace (2.19.4)

ddtrace PYPI version 2.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - xocto 7.2.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

asimov-nearai-module (0.0.0), nearai (>=0.1.14, <=0.1.19) +1 more potentially affected by CVE-2026-50271 via ddtrace (2.21.0)

ddtrace PYPI version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - asimov-nearai-module 0.0.0 - nearai =0.1.14, =0.0.7, =0.0.12 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (7.0.0) potentially affected by CVE-2026-50271 via ddtrace (3.16.0)

ddtrace PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos 7.0.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=2.19.0, <=2.21.0) potentially affected by CVE-2026-50271 via ddtrace (0.40.0)

ddtrace PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =2.19.0, =2.21.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...