homeassistant-stubs (2021.7.0b3) potentially affected by CVE-2025-65713 via homeassistant (2021.7.0b3)

homeassistant PYPI version 2021.7.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.7.0b3 Source cves: CVE-2025-65713 Source advisory: OSV:PYSEC-2026-1454...

homeassistant-stubs (2022.4.1), pytest-homeassistant-custom-component (0.8.6) potentially affected by CVE-2025-65713 via homeassistant (2022.4.1)

homeassistant PYPI version 2022.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.1 - pytest-homeassistant-custom-component 0.8.6 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2023.1.3), pytest-homeassistant-custom-component (0.12.45) potentially affected by CVE-2025-65713 via homeassistant (2023.1.3)

homeassistant PYPI version 2023.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.1.3 - pytest-homeassistant-custom-component 0.12.45 Source cves: CVE-2025-65713 Source advisory:...

swap (>=0.3.0a3, <=0.3.2a7) potentially affected by CVE-2025-69277 via hdwallet (0.2.0)

hdwallet PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on hdwallet and may be impacted: - swap =0.3.0a3, =0.3.2a7 Source cves: CVE-2025-69277 Source advisory: OSV:PYSEC-2026-1448...

0x20bf (0.0.1), 2keys (0.5.1) +3141 more potentially affected by CVE-2025-69223 via aiohttp (>=3.0.0b0, <=3.13.2)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.1.0, =0.5.0a0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.0, =0.1.0b0, =1.0.99 and more Source cves: CVE-2025-69223 Source advisory: OSV:PYSEC-2026-1101...

acapy-agent (>=1.1.0rc1, <=1.2.7), acapy-agent-jamie-testing (1.0.1) +580 more potentially affected by CVE-2025-68480 via marshmallow (>=3.0.0rc1, <=3.26.1)

marshmallow PYPI version =3.0.0rc1, =1.1.0rc1, =0.1.0, =0.5.6.dev0, =0.1.0.post1, =0.1.5, =4.8.2, =0.1.3, =0.1.31, =0.0.2, =0.0.7, =0.0.5, =0.0.5, =0.3.0 and more Source cves: CVE-2025-68480 Source advisory: OSV:PYSEC-2026-1605...

homeassistant-stubs (2023.1.0b1), pytest-homeassistant-custom-component (0.12.37) potentially affected by CVE-2025-65713 via homeassistant (2023.1.0b1)

homeassistant PYPI version 2023.1.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.1.0b1 - pytest-homeassistant-custom-component 0.12.37 Source cves: CVE-2025-65713 Source advisory:...

jupyxplorer (0.0.4), sphinx-markdown-builder (0.0.5) potentially affected by CVE-2025-53000 via nbconvert (5.4.0)

nbconvert PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - jupyxplorer 0.0.4 - sphinx-markdown-builder 0.0.5 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

alphamap (0.0.7), arpes (>=1.0.0, <=2.2.0) +18 more potentially affected by CVE-2025-53000 via nbconvert (6.0.0rc0)

nbconvert PYPI version 6.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - alphamap 0.0.7 - arpes =1.0.0, =1.0.0b1, =0.1.0, =2.0.0, =0.2.0, =1.0.1, =0.1.1, =0.1.0, =1.1.0, =5.7.9, =0.0.1, =0.4.1 and more Source cve...

oscovida (0.2.6), reprexpy (0.3.1) potentially affected by CVE-2025-53000 via nbconvert (6.0.1)

nbconvert PYPI version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - oscovida 0.2.6 - reprexpy 0.3.1 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

geometron (>=0.0.1.dev7, <=0.0.3), jupyter-cell-extractor (>=0.1.0, <=1.0.0) potentially affected by CVE-2025-53000 via nbconvert (6.2.0)

nbconvert PYPI version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - geometron =0.0.1.dev7, =0.1.0, =1.0.0 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

categorical-encoding (>=0.0.0, <=0.3.0), jup2py (>=0.1.0.dev0, <=0.1.0.dev1) +2 more potentially affected by CVE-2025-53000 via nbconvert (5.5.0)

nbconvert PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - categorical-encoding =0.0.0, =0.1.0.dev0, =0.6.8a35, =0.0.7, =0.0.11 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

sphynxml (2.0.0) potentially affected by CVE-2025-53000 via nbconvert (6.4.0)

nbconvert PYPI version 6.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - sphynxml 2.0.0 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

abracadabra (>=0.0.6, <=0.0.7), ai-economist (>=1.2.3, <=1.7.1) +23 more potentially affected by CVE-2025-53000 via nbconvert (6.0.7)

nbconvert PYPI version 6.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - abracadabra =0.0.6, =1.2.3, =1.0.1, =0.0.4, =0.8.0, =3.0.0a1, =1.0.1, =0.0.2, =0.1.0, =1.4.0, =0.0.4, =0.0.9 - mlinspect 0.0.1.dev0 - neurocat...

pretix-tracking-scripts (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-14881 via pretix (2024.11.0)

pretix PYPI version 2024.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pretix and may be impacted: - pretix-tracking-scripts =1.0.0, =1.0.1 Source cves: CVE-2025-14881 Source advisory: OSV:PYSEC-2026-1803...

voila (>=0.2.0a2, <=0.2.0a3), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2025-53000 via nbconvert (6.0.0a6)

nbconvert PYPI version 6.0.0a6 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a2 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

metro-sp-mdp (>=0.1.0, <=2.1.2) potentially affected by CVE-2025-53000 via nbconvert (6.4.2)

nbconvert PYPI version 6.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - metro-sp-mdp =0.1.0, =2.1.2 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

31 (2.3.0), abaco (0.1.0) +849 more potentially affected by CVE-2025-68146 via filelock (>=3.0.4, <=3.20.0)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2025-68146 Source advisory: OSV:PYSEC-2026-1375...

synth-mapping-helper (1.4.7) potentially affected by CVE-2025-66469 via nicegui (1.4.30)

nicegui PYPI version 1.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.4.7 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

mcp-open-client (0.4.27), synth-mapping-helper (>=1.5.16, <=1.5.18) potentially affected by CVE-2025-66469 via nicegui (2.21.1)

nicegui PYPI version 2.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - mcp-open-client 0.4.27 - synth-mapping-helper =1.5.16, =1.5.18 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...