kyoukai (>=2.2.0, <=2.2.1), mezmorize (>=0.18.1, <=0.25.0) +2 more potentially affected by CVE-2025-66221 via werkzeug (0.13.0)

werkzeug PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - kyoukai =2.2.0, =0.18.1, =0.49.2, =0.0.0.1, =0.0.3 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

ablog (>=0.10.3, <=0.10.7), acumos (>=0.9.3, <=0.9.4) +13 more potentially affected by CVE-2025-66221 via werkzeug (1.0.0rc1)

werkzeug PYPI version 1.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - ablog =0.10.3, =0.9.3, =0.7.0rc0, =0.26.0, =0.26.0, =5.0.19, =0.2.11, =0.51.0, =0.51.6, =0.52.0, =0.52.0, =0.53.0, =0.53.4 Source cves:...

a2grunnerp (>=0.1.0, <=0.1.8), agentuniverse (>=0.0.6.dev1, <=0.0.7) +142 more potentially affected by CVE-2025-66221 via werkzeug (2.2.2)

werkzeug PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - a2grunnerp =0.1.0, =0.0.6.dev1, =0.3.0rc5, =0.10.0, =2022.8.1, =0.1.0, =7.0.1, =0.0.2, =1.0.0, =1.0.2 - dareyou 1.0.0 and more Source cves:...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2025-66221 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

coil (>=1.2.1, <=1.3.7), dkcloudcommand (>=1.0.22, <=1.0.131) +2 more potentially affected by CVE-2025-66221 via werkzeug (0.10.4)

werkzeug PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - coil =1.2.1, =1.0.22, =1.1.1, =2.0.1 - typedjsonrpc 0.4.0 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

animo-trainer (1.0.2), ankml (>=1.0.1, <=1.0.7) +31 more potentially affected by CVE-2025-66221 via werkzeug (2.3.7)

werkzeug PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - animo-trainer 1.0.2 - ankml =1.0.1, =0.9.5, =3.2.0, =1.0.5, =0.2.18, =1.0.0, =0.1.0, =2.0.0, =1.0.1, =1.0.4 and more Source cves: CVE-2025-66221...

drmlapp (1.0.6), python-webex-bot (0.51.0) potentially affected by CVE-2025-66221 via werkzeug (0.15.1)

werkzeug PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - drmlapp 1.0.6 - python-webex-bot 0.51.0 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

animl (>=1.1.2, <=1.1.4), annopro (>=0.1.0rc1, <=0.2.0) +65 more potentially affected by CVE-2025-12060 via keras (2.6.0)

keras PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - animl =1.1.2, =0.1.0rc1, =0.47.0, =1.0.1, =0.0.9, =0.0.3, =2.2.0, =2.4.1, =1.0.0rc1, =4.5.2, =0.48.1, =1.1.3, =0.2.4, =0.2.10 and more Source cves:...

adversarial-friend (1.1.8), agrothon (>=1.1.5, <=1.3.2) +43 more potentially affected by CVE-2025-12060 via keras (2.4.3)

keras PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-friend 1.1.8 - agrothon =1.1.5, =2.1.0, =0.0.6, =0.1.2.dev0, =0.1.0, =0.0.1.dev0, =0.0.6, =0.0.2, =0.1.3, =0.7.0, =1.4.0 and more Source...

bunnieddpg (0.1.0), pdftotree (>=0.3.0, <=0.4.1) +2 more potentially affected by CVE-2025-12060 via keras (2.0.8)

keras PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bunnieddpg 0.1.0 - pdftotree =0.3.0, =0.1.1, =0.3.4 - yoctol-keras-layer-zoo 0.7.0 Source cves: CVE-2025-12060 Source advisory: OSV:PYSEC-2026-1486...

alo7-airflow (>=1.10.0, <=1.10.0.7), amundsen-metadata (1.0.17) +65 more potentially affected by CVE-2025-66221 via werkzeug (0.14.1)

werkzeug PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - alo7-airflow =1.10.0, =1.10.3b1, =0.6.7.post3, =0.1.1, =0.6.4, =0.1.0, =0.1.0, =1.0.5, =1.0.4, =0.1.3a0, =0.5.4rc0, =0.5.4rc0, =0.2.0rc0, =0.2....

aigarmic (>=1.0.0, <=1.0.1), albedo (0.1.0) +130 more potentially affected by CVE-2025-12060 via keras (2.14.0)

keras PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aigarmic =1.0.0, =0.40.4, =0.0.0, =0.30.5, =0.3.0, =0.1.0, =0.1.0, =3.0.2, =2.0.0, =1.0.0rc1, =0.0.7, =1.3.1 and more Source cves: CVE-2025-12060...

a62-emotion (>=0.10.11, <=0.11.4), adcl (>=0.1.2, <=0.1.4) +160 more potentially affected by CVE-2025-12060 via keras (2.11.0)

keras PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.10.11, =0.1.2, =1.3.0, =1.2.36, =1.0.3, =0.3.1, =0.0.3, =0.2.4, =2.0.0, =0.1.10, =0.0.0, =0.3.1 - brainglobe-workflows 1.0.0 and more...

aaz-dev (>=1.0.2, <=2.10.1), adminui (1.5.2) +190 more potentially affected by CVE-2025-66221 via werkzeug (2.1.2)

werkzeug PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aaz-dev =1.0.2, =1.5.2, =0.14.0, =0.0.1a0, =1.5.0, =1.1.1, =2.6.0, =1.0.5, =1.7.1, =1.3.0, =3.1.0, =1.45.0, =1.47.0 and more Source cves:...

amber-automl (>=0.1.0, <=0.1.2), axelerate (>=0.5.2, <=0.5.6) +32 more potentially affected by CVE-2025-12060 via keras (2.2.5)

keras PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - amber-automl =0.1.0, =0.5.2, =0.2.6, =0.0.1, =0.1.13, =0.2.0, =0.0.3, =0.16.3, =0.9.6, =1.2.0, =0.0.1, =0.0.10 - monk-cpu 0.0.1 and more Source cves:...

astra-assistants (>=2.3.0, <=2.4.5), fiftyone-mcp-server (>=0.1.0, <=0.1.2) +7 more potentially affected by CVE-2025-66416 via mcp (0.9.1)

mcp PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mcp and may be impacted: - astra-assistants =2.3.0, =0.1.0, =3.0.16, =0.0.4, =1.0.26, =1.0.35 Source cves: CVE-2025-66416 Source advisory: OSV:PYSEC-2026-1617...

label-sorter (>=0.2.0, <=0.3.0), sereto (0.3.5) potentially affected by CVE-2025-66019 via pypdf (5.8.0)

pypdf PYPI version 5.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - label-sorter =0.2.0, =0.3.0 - sereto 0.3.5 Source cves: CVE-2025-66019 Source advisory: OSV:PYSEC-2026-1832...

ocrmypdf (>=9.4.0, <=9.5.0), seleniumbase (>=1.34.12, <=1.34.25) potentially affected by CVE-2025-64512 via pdfminer-six (20200104.0.0)

pdfminer-six PYPI version 20200104.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.4.0, =1.34.12, =1.34.25 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

seleniumbase (1.34.26) potentially affected by CVE-2025-64512 via pdfminer-six (20200121.0.0)

pdfminer-six PYPI version 20200121.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - seleniumbase 1.34.26 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

magic-pdf (1.3.10) potentially affected by CVE-2025-64512 via pdfminer-six (20250324.0.0)

pdfminer-six PYPI version 20250324.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - magic-pdf 1.3.10 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...