allennlp (>=0.9.1.dev20200404, <=0.9.1.dev20200413), pygaggle (0.0.1) potentially affected by CVE-2025-6051 via transformers (2.7.0)

transformers PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200404, =0.9.1.dev20200413 - pygaggle 0.0.1 Source cves: CVE-2025-6051 Source advisory: OSV:PYSEC-2026-1988...

nlp2go (>=0.2.5, <=0.4.9), nlprep (>=0.1.56, <=0.1.57) +2 more potentially affected by CVE-2025-6051 via transformers (3.3.0)

transformers PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp2go =0.2.5, =0.1.56, =0.2.11, =0.4.11, =0.5.13 Source cves: CVE-2025-6051 Source advisory: OSV:PYSEC-2026-1988...

authutils (>=6.1.2, <=6.2.2), dash-google-oauth (>=1.0.0, <=1.2.0) +1 more potentially affected by CVE-2025-59420 via authlib (0.11.0)

authlib PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - authutils =6.1.2, =1.0.0, =0.1.2, =0.2.0.dev5 Source cves: CVE-2025-59420 Source advisory: OSV:PYSEC-2026-1200...

annotell-auth (>=1.2.0, <=1.6.1), apicrud (>=0.0.59, <=0.3.6) +36 more potentially affected by CVE-2025-59420 via authlib (0.15.6)

authlib PYPI version 0.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - annotell-auth =1.2.0, =0.0.59, =0.5.0, =5.0.0b1, =0.1.0, =2.1.4, =0.1.1, =0.1.1, =0.1.0, =0.3.10, =0.1.0, =0.0.1, =0.7.2, =0.9.4 and more Source...

aiocloudlibrary (0.2.0), aiorobonect (>=1.2.0, <=1.3.1) +29 more potentially affected by CVE-2025-8869 via pip (24.2.0)

pip PYPI version 24.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aiocloudlibrary 0.2.0 - aiorobonect =1.2.0, =2.4.4rc1, =0.1.1, =0.1.0, =0.7.3 - iflow-mcp-mcp-prefect 3.6.1 and more Source cves: CVE-2025-8869 Source...

chalice (>=1.9.0, <=1.9.1), corgy-erp (>=0.0.1, <=1.0.7) potentially affected by CVE-2025-8869 via pip (19.2.0)

pip PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.9.0, =0.0.1, =1.0.7 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

build-harness (0.2.1), c4v-py (>=0.1.0.dev2021118, <=0.1.0.dev202201291921) +34 more potentially affected by CVE-2025-8869 via pip (21.3.1)

pip PYPI version 21.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - build-harness 0.2.1 - c4v-py =0.1.0.dev2021118, =0.0.2a0, =0.9.2, =1.26.1, =0.5.0, =4.0.0, =22.16.0, =0.1.9, =0.2.12, =0.1.0, =0.0.57, =0.0.59 -...

agave (>=0.0.1.dev0, <=0.0.5.dev0), always-updates (>=5.1.0, <=8.0.0) +21 more potentially affected by CVE-2025-8869 via pip (20.2.4)

pip PYPI version 20.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.0.1.dev0, =5.1.0, =0.1.0, =0.0.0, =0.0.1, =1.17.0, =2021.6.0.dev1, =0.0.0, =0.118.5, =2021.4.0b0, =0.2.2, =0.0.0.1.dev0, =1.2.0, =2021.4.1,...

agent-plugin-builder (>=0.1.0, <=0.6.0), aider-chat (>=0.68.0, <=0.72.3) +94 more potentially affected by CVE-2025-8869 via pip (24.3.1)

pip PYPI version 24.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agent-plugin-builder =0.1.0, =0.68.0, =0.2.0, =0.6.17, =0.3.6, =24.2.0, =0.1.3, =1.3.0, =0.1.13, =0.1.0, =5.3.0, =5.3.1 and more Source cves: CVE-2025-88...

aef-gw (>=0.1.1, <=0.1.15), africanwhisper (>=0.2.1, <=0.9.0) +37 more potentially affected by CVE-2025-8869 via pip (24.0.0)

pip PYPI version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aef-gw =0.1.1, =0.2.1, =1.0.2, =0.1.0, =1.0.3, =1.31.1, =2.4.3b1, =1.2.0, =0.3.3, =4.3.0, =2.35.2, =2.36.1 and more Source cves: CVE-2025-8869 Source...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2025-8869 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

authx (>=0.2.0, <=0.9.1), cumulusci (>=3.48.0, <=3.55.0.dev1) +4 more potentially affected by CVE-2025-59420 via authlib (0.15.5)

authlib PYPI version 0.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - authx =0.2.0, =3.48.0, =0.19.0, =1.0.1, =3.3.2 Source cves: CVE-2025-59420 Source advisory: OSV:PYSEC-2026-1200...

chalice (>=1.6.2, <=1.8.0), commit-helper (3.4.13) +6 more potentially affected by CVE-2025-8869 via pip (18.1.0)

pip PYPI version 18.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.6.2, =0.1.6, =0.0.3, =3.2.0, =4.0.0 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

aaanalysis (>=0.1.2, <=1.0.0), abilian-devtools (>=0.5.14, <=0.5.17) +52 more potentially affected by CVE-2025-8869 via pip (23.3.2)

pip PYPI version 23.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =0.1.2, =0.5.14, =0.1.0, =1.0.0, =0.0.7, =1.0.2, =1.2.1.dev0, =2.4.0, =1.1.33, =1.30.0, =0.1.1, =0.1.5, =0.2.2 - cocodrilo 0.1.0 and more Sour...

justuse (>=0.6.0, <=0.6.1) potentially affected by CVE-2025-8869 via pip (21.2.1)

pip PYPI version 21.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - justuse =0.6.0, =0.6.1 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

aadetools (>=0.0.3, <=0.0.5), autocut3d (0.1.0) +14 more potentially affected by CVE-2025-8869 via pip (19.2.3)

pip PYPI version 19.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aadetools =0.0.3, =1.10.0, =0.1.4, =0.4.2, =2.0.0, =0.0.4, =0.2.4, =2019.9.2, =2019.10.22 - rtopy 0.1.0 - student-mixture 0.1.10 and more Source cves:...

ais-dom (>=2022.7.7b1, <=2022.7.7), bentoncounty-gistools (>=0.0.1, <=0.0.8) +16 more potentially affected by CVE-2025-8869 via pip (22.1.2)

pip PYPI version 22.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - ais-dom =2022.7.7b1, =0.0.1, =0.1.0, =2022.6.0b0, =2022.6.0b0, =0.1.5, =3.1.0, =0.2.0, =0.2.1 - pdm-shell 1.0.0 - pdm-venv 0.6.0 and more Source cves:...

agave (0.2.3.dev0), ai-shell-agent (>=0.2.0, <=0.2.2) +45 more potentially affected by CVE-2025-8869 via pip (>=25.0.0, <=25.2.0)

pip PYPI version =25.0.0, =0.2.0, =0.73.0, =25.6.0b2, =0.1.1, =1.31.4, =0.1.2, =0.82.4.dev64, =0.0.4, =0.1.7, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

azure-arm-nb-extensions (>=0.0.1, <=0.0.2), cfn-docgen (>=0.0.1, <=0.1.4) +1 more potentially affected by CVE-2025-8869 via pip (20.2.3)

pip PYPI version 20.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - azure-arm-nb-extensions =0.0.1, =0.0.1, =0.0.8, =0.0.11 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

aftool (>=0.1.2, <=0.2.8), agave (>=0.0.3, <=0.1.3.dev2) +23 more potentially affected by CVE-2025-8869 via pip (20.3.4)

pip PYPI version 20.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aftool =0.1.2, =0.0.3, =0.1.0.dev1, =1.21.5, =0.4.0, =1.0.2, =0.1.59, =0.4.3, =0.2.1, =2.6.0b1, =2020.0.1, =0.1.0, =2.4.6.20013014, =2.4.0.19073113,...