aaanalysis (>=1.0.1, <=1.0.2), airunner (>=5.0.0, <=5.6.1) +52 more potentially affected by CVE-2026-6357 via pip (25.3.0)

pip PYPI version 25.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =1.0.1, =5.0.0, =0.1.3, =0.13.0, =1.1.56, =0.1.0, =0.22.1, =0.3.3, =5.4.0, =0.10.0, =0.9.0, =0.1.0a12, =0.2.3 and more Source cves:...

agave (>=0.1.1, <=0.1.7), bankruptcy (>=0.0.2, <=0.0.5) +10 more potentially affected by CVE-2026-6357 via pip (21.0.1)

pip PYPI version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.1.1, =0.0.2, =0.2.0, =1.22.1, =0.0.60, =1.0.2, =2.0.3, =0.6.3, =0.0.7, =0.0.39, =0.5.0, =0.5.1 Source cves: CVE-2026-6357 Source advisory:...

franka-valve (0.0.0), wildfire-environment (>=0.1.0, <=0.2.1) potentially affected by CVE-2026-6357 via pip (21.0.0)

pip PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - franka-valve 0.0.0 - wildfire-environment =0.1.0, =0.2.1 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2026-6357 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...

MAL-2026-3091 Malicious code in bytedfaas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ec7e2decd402442fba2d4ebd7637b596a33ef132120ffe4f3a8b5d2d6ce8475e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-3084 Malicious code in byteclaw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3fe21c4a32b814a0b46b75a26033bae1f40e1caa237e394842aff14639b7aaec Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

arca (>=0.1.1, <=0.3.1), epab (>=2018.4.2.1, <=2018.4.2.3) +3 more potentially affected by CVE-2026-42284 via gitpython (2.1.9)

gitpython PYPI version 2.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - arca =0.1.1, =2018.4.2.1, =1.0.3, =0.0.0, =0.4.1 - ubuntudesign-documentation-builder 1.6.0 Source cves: CVE-2026-42284 Source advisory:...

elib (>=0.1.55, <=0.1.57), emiz (>=0.1.35, <=2018.4.2.1) +11 more potentially affected by CVE-2026-42284 via gitpython (2.1.8)

gitpython PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elib =0.1.55, =0.1.35, =0.2.4a149, =0.0.1, =1.0.0, =0.4233.0, =0.2354.0, =0.2354.0, =0.1.7, =0.2.120, =1.0.0, =0.1.0, =2.1.1 Source cves:...

cabrita (>=2.2.2b1, <=2.2.2b2), cico (>=0.1.0, <=0.1.8) +4 more potentially affected by CVE-2026-42284 via gitpython (2.1.10)

gitpython PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - cabrita =2.2.2b1, =0.1.0, =0.1.0, =3.11.1, =0.9.0, =0.9.7.2 Source cves: CVE-2026-42284 Source advisory: OSV:GHSA-X2QX-6953-8485...

dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-42284 via gitpython (1.0.2)

gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-42284 Source advisory: OSV:GHSA-X2QX-6953-8485...

codev (>=0.5.1a10, <=0.7.4a3), git-repo (1.6.0) potentially affected by CVE-2026-42284 via gitpython (2.0.2)

gitpython PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - codev =0.5.1a10, =0.7.4a3 - git-repo 1.6.0 Source cves: CVE-2026-42284 Source advisory: OSV:GHSA-X2QX-6953-8485...

arca (>=0.1.0a0, <=0.1.0), mali (>=0.2775.0, <=0.4018.0) +4 more potentially affected by CVE-2026-42284 via gitpython (2.1.7)

gitpython PYPI version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - arca =0.1.0a0, =0.2775.0, =0.2304.0, =0.2304.0, =0.1.0a1, =1.0.0, =1.0.6 Source cves: CVE-2026-42284 Source advisory: OSV:GHSA-X2QX-6953-8485...

0xpwn (0.1.1), a2a-acl (0.0.14) +614 more potentially affected by CVE-2026-42271 via litellm (>=1.74.3, <=1.83.4)

litellm PYPI version =1.74.3, =0.3.5, =0.7.3, =0.1.0, =0.4.0, =0.1.39, =0.2.1, =0.1.0, =0.25.4a2, =0.64.1 and more Source cves: CVE-2026-42271 Source advisory: OSV:GHSA-V4P8-MG3P-G94G...

abs-langchain-suite (>=0.1.0, <=0.3.1), acp-cli (>=0.0.1, <=0.0.804) +737 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.11)

langchain-text-splitters PYPI version 0.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - abs-langchain-suite =0.1.0, =0.0.1, =0.0.1a1, =0.1.0, =1.0.0rc1, =3.2.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0,...

ai-enterprise-agent (>=0.0.2, <=0.0.9), data-digitization (0.1.0) +20 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.0.1)

langchain-text-splitters PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - ai-enterprise-agent =0.0.2, =0.1.14, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.1.3, =0.0.15, =1.0.6, =0.1.0b0, =0.5.0b1...

a2a-client-handler (0.1.0), aa-rag (>=0.1.0, <=0.4.3) +1279 more potentially affected by CVE-2026-41481 via langchain-text-splitters (>=0.0.1, <=1.1.1)

langchain-text-splitters PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0, =0.1.0b0, =0.0.1, =4.8.2, =0.0.1a1, =0.1.3, =0.1.0, =0.1.0, =1.0.0rc1, =2.6.1 and more Source cves: CVE-2026-41481 Source advisory: MEND:CVE-2026-41481...

a2grunnerp (>=0.1.0, <=0.1.8), aibench (>=0.0.2, <=0.0.5) +147 more potentially affected by CVE-2026-41066 via lxml (4.9.2)

lxml PYPI version 4.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - a2grunnerp =0.1.0, =0.0.2, =0.3.0, =1.2.0, =0.2.0, =22.12.28, =1.1.1, =7.3.13, =0.1.2, =3.11.14, =0.2.0rc4, =0.2.9 and more Source cves: CVE-2026-41066...

adfs-aws-login (0.1.5), afdko (3.0.1) +36 more potentially affected by CVE-2026-41066 via lxml (4.4.1)

lxml PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - adfs-aws-login 0.1.5 - afdko 3.0.1 - arjuna =1.1.15, =0.0.5.dev412, =0.39.0, =0.0.5a0, =2.5.6, =1.1.0, =0.0.2, =17.4.0, =0.4.1, =20.7.0b0, =20.8.0b1 and...

an-website (>=22.6.2, <=22.7.5), animdl (>=1.7.7, <=1.7.9) +19 more potentially affected by CVE-2026-41066 via lxml (4.9.0)

lxml PYPI version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - an-website =22.6.2, =1.7.7, =3.60.0, =0.0.6, =2.21.0, =0.9.70, =0.2.26, =0.0.61, =1.1.4, =2.14.0, =0.2.2, =0.2.3 and more Source cves: CVE-2026-41066...

anpy (>=0.1.16, <=0.2.1), apkcli (0.1.2) +24 more potentially affected by CVE-2026-41066 via lxml (4.2.6)

lxml PYPI version 4.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - anpy =0.1.16, =2.8.32, =0.1.8, =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =0.2.0, =0.1.1, =0.2.2 and more Source cves: CVE-2026-41066 Source...