alo7-airflow (>=1.10.0, <=1.10.0.7), amundsen-metadata (1.0.17) +65 more potentially affected by CVE-2025-66221 via werkzeug (0.14.1)

werkzeug PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - alo7-airflow =1.10.0, =1.10.3b1, =0.6.7.post3, =0.1.1, =0.6.4, =0.1.0, =0.1.0, =1.0.5, =1.0.4, =0.1.3a0, =0.5.4rc0, =0.5.4rc0, =0.2.0rc0, =0.2....

adversarial-friend (1.1.8), agrothon (>=1.1.5, <=1.3.2) +43 more potentially affected by CVE-2025-12060 via keras (2.4.3)

keras PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-friend 1.1.8 - agrothon =1.1.5, =2.1.0, =0.0.6, =0.1.2.dev0, =0.1.0, =0.0.1.dev0, =0.0.6, =0.0.2, =0.1.3, =0.7.0, =1.4.0 and more Source...

ocrmypdf (>=9.4.0, <=9.5.0), seleniumbase (>=1.34.12, <=1.34.25) potentially affected by CVE-2025-64512 via pdfminer-six (20200104.0.0)

pdfminer-six PYPI version 20200104.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.4.0, =1.34.12, =1.34.25 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2025-66019 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2025-66019 Source advisory: OSV:PYSEC-2026-183...

bormeparser (>=0.1.1, <=0.1.3) potentially affected by CVE-2025-64512 via pdfminer-six (20140915.0.0)

pdfminer-six PYPI version 20140915.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bormeparser =0.1.1, =0.1.3 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

magic-pdf (1.3.10) potentially affected by CVE-2025-64512 via pdfminer-six (20250324.0.0)

pdfminer-six PYPI version 20250324.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - magic-pdf 1.3.10 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

seleniumbase (1.34.26) potentially affected by CVE-2025-64512 via pdfminer-six (20200121.0.0)

pdfminer-six PYPI version 20200121.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - seleniumbase 1.34.26 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

label-sorter (>=0.2.0, <=0.3.0), sereto (0.3.5) potentially affected by CVE-2025-66019 via pypdf (5.8.0)

pypdf PYPI version 5.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - label-sorter =0.2.0, =0.3.0 - sereto 0.3.5 Source cves: CVE-2025-66019 Source advisory: OSV:PYSEC-2026-1832...

chakraversiontracker (>=1.2.1.20160901, <=1.2.1.20160917), versiontracker (>=2.1.2.20180422, <=2.1.4.20190921) potentially affected by CVE-2025-6176 via scrapy (1.7.4)

scrapy PYPI version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - chakraversiontracker =1.2.1.20160901, =2.1.2.20180422, =2.1.4.20190921 Source cves: CVE-2025-6176 Source advisory: OSV:PYSEC-2026-1906...

scraper-factory (>=0.1.0, <=0.2.1) potentially affected by CVE-2025-6176 via scrapy (1.7.2)

scrapy PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - scraper-factory =0.1.0, =0.2.1 Source cves: CVE-2025-6176 Source advisory: OSV:PYSEC-2026-1906...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +63 more potentially affected by CVE-2025-6176 via scrapy (>=2.0.1, <=2.13.3)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =0.0.3, =1.1.9, =2.8.3, =1.0.6, =0.2.0, =0.0.1, =0.3.0, =0.0.2, =0.2.4.dev1, =0.0.2, =0.3.0a0, =0.4.0rc1 and more Source cves: CVE-2025-6176 Source advisory: OSV:PYSEC-2026-1906...

adversarial-friend (1.1.8), agrothon (>=1.1.5, <=1.3.2) +43 more potentially affected by CVE-2025-12058 via keras (2.4.3)

keras PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-friend 1.1.8 - agrothon =1.1.5, =2.1.0, =0.0.6, =0.1.2.dev0, =0.1.0, =0.0.1.dev0, =0.0.6, =0.0.2, =0.1.3, =0.7.0, =1.4.0 and more Source...

cde (>=0.1.0, <=0.2.0.1), deeppavlov (>=0.0.5.1, <=0.0.5.3) potentially affected by CVE-2025-12058 via keras (2.1.2)

keras PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cde =0.1.0, =0.0.5.1, =0.0.5.3 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

bunnieddpg (0.1.0), pdftotree (>=0.3.0, <=0.4.1) +2 more potentially affected by CVE-2025-12058 via keras (2.0.8)

keras PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bunnieddpg 0.1.0 - pdftotree =0.3.0, =0.1.1, =0.3.4 - yoctol-keras-layer-zoo 0.7.0 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

autotsf (>=0.0.5, <=0.0.8), carla-recourse (>=0.0.4, <=0.0.5) +15 more potentially affected by CVE-2025-12058 via keras (2.3.0)

keras PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - autotsf =0.0.5, =0.0.4, =1.0.0, =0.0.1, =0.4.2rc0, =0.4.1, =0.2.4, =0.6.4, =0.6.7 and more Source cves: CVE-2025-12058 Source advisory:...

cryoet-deepfinder (0.2.1), cspot (>=1.0.4, <=1.0.16) +9 more potentially affected by CVE-2025-12058 via keras (2.14.0rc0)

keras PYPI version 2.14.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cryoet-deepfinder 0.2.1 - cspot =1.0.4, =2.1.0, =0.4.0, =2.13.0rc0, =2.13.0rc0, =2.13.0rc2 - tensorflow-text 2.12.0rc0 - tfrec-literate 2.10.0rc1...

animl (>=1.1.2, <=1.1.4), annopro (>=0.1.0rc1, <=0.2.0) +65 more potentially affected by CVE-2025-12058 via keras (2.6.0)

keras PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - animl =1.1.2, =0.1.0rc1, =0.47.0, =1.0.1, =0.0.9, =0.0.3, =2.2.0, =2.4.1, =1.0.0rc1, =4.5.2, =0.48.1, =1.1.3, =0.2.4, =0.2.10 and more Source cves:...

aiqc (>=3.0.22, <=7.1.5), amdnet (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2025-12058 via keras (2.7.0)

keras PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aiqc =3.0.22, =1.0.0, =0.1.11, =2.7.0.0, =0.12.5, =0.0.0, =0.0.96, =0.3.8 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

keras-explain (0.0.1), scikit-keras (0.1.11) +3 more potentially affected by CVE-2025-12058 via keras (2.1.6)

keras PYPI version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-explain 0.0.1 - scikit-keras 0.1.11 - tensorflowjs =0.5.4, =0.5.2, =0.5.5 - tutti-aisthetics 0.0.3 Source cves: CVE-2025-12058 Source advisory:...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +178 more potentially affected by CVE-2025-12058 via keras (2.8.0rc1)

keras PYPI version 2.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =0.1.11, =0.1.11, =0.6.3, =0.0.6, =0.0.1, =1.1.2, =1.1.17 and more Source cves: CVE-2025-12058 Sourc...