orchestrator-lso (>=1.0.0, <=1.0.2) potentially affected by CVE-2025-14010 via ansible (9.3.0)

ansible PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - orchestrator-lso =1.0.0, =1.0.2 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

zbuilder (0.0.12) potentially affected by CVE-2025-14010 via ansible (2.7.15)

ansible PYPI version 2.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - zbuilder 0.0.12 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

zbuilder (>=0.0.29, <=0.0.31) potentially affected by CVE-2025-14010 via ansible (2.10.0)

ansible PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - zbuilder =0.0.29, =0.0.31 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

msg-topgen (>=0.1.4, <=0.1.7) potentially affected by CVE-2025-14010 via ansible (2.0.0.0)

ansible PYPI version 2.0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - msg-topgen =0.1.4, =0.1.7 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ants-client (>=2.0.1rc1, <=2.1.0) potentially affected by CVE-2025-14010 via ansible (2.9.4)

ansible PYPI version 2.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ants-client =2.0.1rc1, =2.1.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

foodx-devops-tools (>=0.0.0.post44, <=0.0.0.post60) potentially affected by CVE-2025-14010 via ansible (4.4.0)

ansible PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - foodx-devops-tools =0.0.0.post44, =0.0.0.post60 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ewccli (>=0.8.0, <=0.9.3) potentially affected by CVE-2025-14010 via ansible (10.5.0)

ansible PYPI version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ewccli =0.8.0, =0.9.3 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

sagecreator (>=0.0.31, <=0.1.1.3) potentially affected by CVE-2025-14010 via ansible (2.7.2)

ansible PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - sagecreator =0.0.31, =0.1.1.3 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

kayalab (>=0.7.30, <=0.11.9) potentially affected by CVE-2025-66469 via nicegui (1.4.24)

nicegui PYPI version 1.4.24 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - kayalab =0.7.30, =0.11.9 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

rosys (>=0.5.1, <=0.5.2) potentially affected by CVE-2025-66469 via nicegui (0.7.2)

nicegui PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.1, =0.5.2 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

otanalytics (>=0.6.15, <=0.7.5), synth-mapping-helper (1.5.19) potentially affected by CVE-2025-66469 via nicegui (2.24.1)

nicegui PYPI version 2.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - otanalytics =0.6.15, =0.7.5 - synth-mapping-helper 1.5.19 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

0xdegenmo-lighter-mcp (0.1.1), 1337x (1.2.5) +13631 more potentially affected by CVE-2025-66418 via urllib3 (>=1.24.0, <=2.5.0)

urllib3 PYPI version =1.24.0, =0.3.0, =0.0.1a0, =2.3.84, =0.1.0, =1.1.2, =0.1.0, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-texam 1.1.0 - a16z 0.0.1 and more Source cves: CVE-2025-66418 Source advisory: OSV:PYSEC-2026-1998...

astra-assistants (>=2.3.0, <=2.4.5), fiftyone-mcp-server (>=0.1.0, <=0.1.2) +7 more potentially affected by CVE-2025-66416 via mcp (0.9.1)

mcp PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mcp and may be impacted: - astra-assistants =2.3.0, =0.1.0, =3.0.16, =0.0.4, =1.0.26, =1.0.35 Source cves: CVE-2025-66416 Source advisory: OSV:PYSEC-2026-1617...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), actinia-core (4.2.0) +695 more potentially affected by CVE-2025-66221 via werkzeug (1.0.1)

werkzeug PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.4.7, =0.1.0rc3, =2022.9.19, =1.0.2, =0.1.1, =0.1.6, =0.5.1, =0.2.0, =1.0.0, =0.0.3, =0.0.4 and mor...

aigarmic (>=1.0.0, <=1.0.1), albedo (0.1.0) +130 more potentially affected by CVE-2025-12060 via keras (2.14.0)

keras PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aigarmic =1.0.0, =0.40.4, =0.0.0, =0.30.5, =0.3.0, =0.1.0, =0.1.0, =3.0.2, =2.0.0, =1.0.0rc1, =0.0.7, =1.3.1 and more Source cves: CVE-2025-12060...

amber-automl (>=0.1.0, <=0.1.2), axelerate (>=0.5.2, <=0.5.6) +32 more potentially affected by CVE-2025-12060 via keras (2.2.5)

keras PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - amber-automl =0.1.0, =0.5.2, =0.2.6, =0.0.1, =0.1.13, =0.2.0, =0.0.3, =0.16.3, =0.9.6, =1.2.0, =0.0.1, =0.0.10 - monk-cpu 0.0.1 and more Source cves:...

a62-emotion (>=0.10.11, <=0.11.4), adcl (>=0.1.2, <=0.1.4) +160 more potentially affected by CVE-2025-12060 via keras (2.11.0)

keras PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.10.11, =0.1.2, =1.3.0, =1.2.36, =1.0.3, =0.3.1, =0.0.3, =0.2.4, =2.0.0, =0.1.10, =0.0.0, =0.3.1 - brainglobe-workflows 1.0.0 and more...

genet (>=0.11.0, <=0.17.2), mup-tf (0.0.3) +4 more potentially affected by CVE-2025-12060 via keras (2.11.0rc3)

keras PYPI version 2.11.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - genet =0.11.0, =2.10.0rc1, =2.10.0rc1, =2.10.0rc1, =2.11.0rc0 - tensorflow-text 2.9.0rc1 Source cves: CVE-2025-12060 Source advisory:...

coil (>=1.2.1, <=1.3.7), dkcloudcommand (>=1.0.22, <=1.0.131) +2 more potentially affected by CVE-2025-66221 via werkzeug (0.10.4)

werkzeug PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - coil =1.2.1, =1.0.22, =1.1.1, =2.0.1 - typedjsonrpc 0.4.0 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

cde (>=0.1.0, <=0.2.0.1), deeppavlov (>=0.0.5.1, <=0.0.5.3) potentially affected by CVE-2025-12060 via keras (2.1.2)

keras PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cde =0.1.0, =0.0.5.1, =0.0.5.3 Source cves: CVE-2025-12060 Source advisory: OSV:PYSEC-2026-1486...