homeassistant-stubs (2022.10.4), pytest-homeassistant-custom-component (0.12.9) potentially affected by CVE-2025-65713 via homeassistant (2022.10.4)

homeassistant PYPI version 2022.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.4 - pytest-homeassistant-custom-component 0.12.9 Source cves: CVE-2025-65713 Source advisory:...

acapy-agent (>=1.1.0rc1, <=1.2.7), acapy-agent-jamie-testing (1.0.1) +580 more potentially affected by CVE-2025-68480 via marshmallow (>=3.0.0rc1, <=3.26.1)

marshmallow PYPI version =3.0.0rc1, =1.1.0rc1, =0.1.0, =0.5.6.dev0, =0.1.0.post1, =0.1.5, =4.8.2, =0.1.3, =0.1.31, =0.0.2, =0.0.7, =0.0.5, =0.0.5, =0.3.0 and more Source cves: CVE-2025-68480 Source advisory: OSV:PYSEC-2026-1605...

sphynxml (2.0.0) potentially affected by CVE-2025-53000 via nbconvert (6.4.0)

nbconvert PYPI version 6.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - sphynxml 2.0.0 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

categorical-encoding (>=0.0.0, <=0.3.0), jup2py (>=0.1.0.dev0, <=0.1.0.dev1) +2 more potentially affected by CVE-2025-53000 via nbconvert (5.5.0)

nbconvert PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - categorical-encoding =0.0.0, =0.1.0.dev0, =0.6.8a35, =0.0.7, =0.0.11 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

metro-sp-mdp (>=0.1.0, <=2.1.2) potentially affected by CVE-2025-53000 via nbconvert (6.4.2)

nbconvert PYPI version 6.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - metro-sp-mdp =0.1.0, =2.1.2 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

oscovida (0.2.6), reprexpy (0.3.1) potentially affected by CVE-2025-53000 via nbconvert (6.0.1)

nbconvert PYPI version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - oscovida 0.2.6 - reprexpy 0.3.1 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

abracadabra (>=0.0.6, <=0.0.7), ai-economist (>=1.2.3, <=1.7.1) +23 more potentially affected by CVE-2025-53000 via nbconvert (6.0.7)

nbconvert PYPI version 6.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - abracadabra =0.0.6, =1.2.3, =1.0.1, =0.0.4, =0.8.0, =3.0.0a1, =1.0.1, =0.0.2, =0.1.0, =1.4.0, =0.0.4, =0.0.9 - mlinspect 0.0.1.dev0 - neurocat...

jupyxplorer (0.0.4), sphinx-markdown-builder (0.0.5) potentially affected by CVE-2025-53000 via nbconvert (5.4.0)

nbconvert PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - jupyxplorer 0.0.4 - sphinx-markdown-builder 0.0.5 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

voila (>=0.2.0a2, <=0.2.0a3), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2025-53000 via nbconvert (6.0.0a6)

nbconvert PYPI version 6.0.0a6 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a2 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

alphamap (0.0.7), arpes (>=1.0.0, <=2.2.0) +18 more potentially affected by CVE-2025-53000 via nbconvert (6.0.0rc0)

nbconvert PYPI version 6.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - alphamap 0.0.7 - arpes =1.0.0, =1.0.0b1, =0.1.0, =2.0.0, =0.2.0, =1.0.1, =0.1.1, =0.1.0, =1.1.0, =5.7.9, =0.0.1, =0.4.1 and more Source cve...

31 (2.3.0), abaco (0.1.0) +849 more potentially affected by CVE-2025-68146 via filelock (>=3.0.4, <=3.20.0)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2025-68146 Source advisory: OSV:PYSEC-2026-1375...

pretix-tracking-scripts (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-14881 via pretix (2024.11.0)

pretix PYPI version 2024.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pretix and may be impacted: - pretix-tracking-scripts =1.0.0, =1.0.1 Source cves: CVE-2025-14881 Source advisory: OSV:PYSEC-2026-1803...

geometron (>=0.0.1.dev7, <=0.0.3), jupyter-cell-extractor (>=0.1.0, <=1.0.0) potentially affected by CVE-2025-53000 via nbconvert (6.2.0)

nbconvert PYPI version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - geometron =0.0.1.dev7, =0.1.0, =1.0.0 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

gufo-tower (2.0.0) potentially affected by CVE-2025-14010 via ansible (2.9.26)

ansible PYPI version 2.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - gufo-tower 2.0.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

zbuilder (>=0.0.29, <=0.0.31) potentially affected by CVE-2025-14010 via ansible (2.10.0)

ansible PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - zbuilder =0.0.29, =0.0.31 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

orchestrator-lso (>=1.0.0, <=1.0.2) potentially affected by CVE-2025-14010 via ansible (9.3.0)

ansible PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - orchestrator-lso =1.0.0, =1.0.2 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

foodx-devops-tools (>=0.0.0.post44, <=0.0.0.post60) potentially affected by CVE-2025-14010 via ansible (4.4.0)

ansible PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - foodx-devops-tools =0.0.0.post44, =0.0.0.post60 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

machine-stats-alpha (>=1.0.0, <=1.0.2) potentially affected by CVE-2025-14010 via ansible (5.5.0)

ansible PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - machine-stats-alpha =1.0.0, =1.0.2 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

galaxy-importer (>=0.1.2, <=0.1.3b10) potentially affected by CVE-2025-14010 via ansible (2.9.0b1)

ansible PYPI version 2.9.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer =0.1.2, =0.1.3b10 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

zbuilder (0.0.12) potentially affected by CVE-2025-14010 via ansible (2.7.15)

ansible PYPI version 2.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - zbuilder 0.0.12 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...