pretix-tracking-scripts (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-14881 via pretix (2024.11.0)

pretix PYPI version 2024.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pretix and may be impacted: - pretix-tracking-scripts =1.0.0, =1.0.1 Source cves: CVE-2025-14881 Source advisory: OSV:PYSEC-2026-1803...

voila (>=0.2.0a2, <=0.2.0a3), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2025-53000 via nbconvert (6.0.0a6)

nbconvert PYPI version 6.0.0a6 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a2 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

metro-sp-mdp (>=0.1.0, <=2.1.2) potentially affected by CVE-2025-53000 via nbconvert (6.4.2)

nbconvert PYPI version 6.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - metro-sp-mdp =0.1.0, =2.1.2 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

31 (2.3.0), abaco (0.1.0) +849 more potentially affected by CVE-2025-68146 via filelock (>=3.0.4, <=3.20.0)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2025-68146 Source advisory: OSV:PYSEC-2026-1375...

synth-mapping-helper (1.4.7) potentially affected by CVE-2025-66469 via nicegui (1.4.30)

nicegui PYPI version 1.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.4.7 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

mcp-open-client (0.4.27), synth-mapping-helper (>=1.5.16, <=1.5.18) potentially affected by CVE-2025-66469 via nicegui (2.21.1)

nicegui PYPI version 2.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - mcp-open-client 0.4.27 - synth-mapping-helper =1.5.16, =1.5.18 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

nice-gui-utils (>=0.1.2, <=0.1.5) potentially affected by CVE-2025-66469 via nicegui (1.4.2)

nicegui PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils =0.1.2, =0.1.5 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

rosys (>=0.5.18, <=0.5.21) potentially affected by CVE-2025-66469 via nicegui (0.7.27)

nicegui PYPI version 0.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.18, =0.5.21 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

air-link (>=0.0.0, <=0.2.1), broh5 (1.3.2) +16 more potentially affected by CVE-2025-66469 via nicegui (1.4.37)

nicegui PYPI version 1.4.37 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - air-link =0.0.0, =0.1.0, =1.1.3, =0.6.7, =1.0.0, =1.14.5, =0.0.2a5, =1.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves:...

0xdegenmo-lighter-mcp (0.1.1), 1337x (1.2.5) +14104 more potentially affected by CVE-2025-66471 via urllib3 (>=1.7.1, <=2.5.0)

urllib3 PYPI version =1.7.1, =0.3.0, =0.0.1a0, =2.3.84, =0.1.0, =1.1.2, =0.1.0, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-texam 1.1.0 - a16z 0.0.1 and more Source cves: CVE-2025-66471 Source advisory: OSV:PYSEC-2026-1994...

machine-stats-alpha (>=1.0.0, <=1.0.2) potentially affected by CVE-2025-14010 via ansible (5.5.0)

ansible PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - machine-stats-alpha =1.0.0, =1.0.2 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

rosys (>=0.5.14, <=0.5.17) potentially affected by CVE-2025-66469 via nicegui (0.7.21)

nicegui PYPI version 0.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.14, =0.5.17 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

ai-plays-jackbox (>=0.0.1, <=0.3.2), air-link (>=0.3.0, <=0.5.0) +23 more potentially affected by CVE-2025-66469 via nicegui (2.24.2)

nicegui PYPI version 2.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - ai-plays-jackbox =0.0.1, =0.3.0, =0.8.0, =1.11.0b1, =0.13.24, =0.2.14, =0.30.0, =2.0.0, =0.2.0, =0.2.0, =0.0.1, =0.0.4 and more Source cves:...

openadapt (>=0.17.0, <=0.26.2) potentially affected by CVE-2025-66469 via nicegui (1.4.9)

nicegui PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt =0.17.0, =0.26.2 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

aignostics (>=0.2.200, <=0.2.226), bindmc (>=0.1.3, <=0.1.11) +3 more potentially affected by CVE-2025-66469 via nicegui (>=3.0.0rc1, <=3.3.1)

nicegui PYPI version =3.0.0rc1, =0.2.200, =0.1.3, =0.4.24, =0.4.25 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

synth-mapping-helper (>=1.5.3, <=1.5.7) potentially affected by CVE-2025-66469 via nicegui (2.5.0)

nicegui PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.5.3, =1.5.7 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

galaxy-importer (>=0.1.2, <=0.1.3b10) potentially affected by CVE-2025-14010 via ansible (2.9.0b1)

ansible PYPI version 2.9.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer =0.1.2, =0.1.3b10 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

gufo-tower (2.0.0) potentially affected by CVE-2025-14010 via ansible (2.9.26)

ansible PYPI version 2.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - gufo-tower 2.0.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

delta-core (>=1.1.2, <=1.2.1), deltatwin-cli (>=1.3.2, <=1.5.0) potentially affected by CVE-2025-14010 via ansible (9.1.0)

ansible PYPI version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - delta-core =1.1.2, =1.3.2, =1.5.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ansible-vault-rekey (1.0.0), browbeat (>=0.0.1.dev1287, <=0.0.1.dev1290) +1 more potentially affected by CVE-2025-14010 via ansible (2.4.1.0)

ansible PYPI version 2.4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansible-vault-rekey 1.0.0 - browbeat =0.0.1.dev1287, =0.2.2, =0.2.6 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...