bormeparser (>=0.1.1, <=0.1.3) potentially affected by CVE-2025-64512 via pdfminer-six (20140915.0.0)

pdfminer-six PYPI version 20140915.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bormeparser =0.1.1, =0.1.3 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2025-66019 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2025-66019 Source advisory: OSV:PYSEC-2026-183...

scraper-factory (>=0.1.0, <=0.2.1) potentially affected by CVE-2025-6176 via scrapy (1.7.2)

scrapy PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - scraper-factory =0.1.0, =0.2.1 Source cves: CVE-2025-6176 Source advisory: OSV:PYSEC-2026-1906...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +63 more potentially affected by CVE-2025-6176 via scrapy (>=2.0.1, <=2.13.3)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =0.0.3, =1.1.9, =2.8.3, =1.0.6, =0.2.0, =0.0.1, =0.3.0, =0.0.2, =0.2.4.dev1, =0.0.2, =0.3.0a0, =0.4.0rc1 and more Source cves: CVE-2025-6176 Source advisory: OSV:PYSEC-2026-1906...

chakraversiontracker (>=1.2.1.20160901, <=1.2.1.20160917), versiontracker (>=2.1.2.20180422, <=2.1.4.20190921) potentially affected by CVE-2025-6176 via scrapy (1.7.4)

scrapy PYPI version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - chakraversiontracker =1.2.1.20160901, =2.1.2.20180422, =2.1.4.20190921 Source cves: CVE-2025-6176 Source advisory: OSV:PYSEC-2026-1906...

add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +137 more potentially affected by CVE-2025-62707 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...

cryoet-deepfinder (0.2.1), cspot (>=1.0.4, <=1.0.16) +9 more potentially affected by CVE-2025-12058 via keras (2.14.0rc0)

keras PYPI version 2.14.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cryoet-deepfinder 0.2.1 - cspot =1.0.4, =2.1.0, =0.4.0, =2.13.0rc0, =2.13.0rc0, =2.13.0rc2 - tensorflow-text 2.12.0rc0 - tfrec-literate 2.10.0rc1...

bunnieddpg (0.1.0), pdftotree (>=0.3.0, <=0.4.1) +2 more potentially affected by CVE-2025-12058 via keras (2.0.8)

keras PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bunnieddpg 0.1.0 - pdftotree =0.3.0, =0.1.1, =0.3.4 - yoctol-keras-layer-zoo 0.7.0 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

cde (>=0.1.0, <=0.2.0.1), deeppavlov (>=0.0.5.1, <=0.0.5.3) potentially affected by CVE-2025-12058 via keras (2.1.2)

keras PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cde =0.1.0, =0.0.5.1, =0.0.5.3 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

autotsf (>=0.0.5, <=0.0.8), carla-recourse (>=0.0.4, <=0.0.5) +15 more potentially affected by CVE-2025-12058 via keras (2.3.0)

keras PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - autotsf =0.0.5, =0.0.4, =1.0.0, =0.0.1, =0.4.2rc0, =0.4.1, =0.2.4, =0.6.4, =0.6.7 and more Source cves: CVE-2025-12058 Source advisory:...

free (>=0.0.1, <=0.0.2), hdltex (1.0.4) +2 more potentially affected by CVE-2025-12058 via keras (2.0.9)

keras PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - free =0.0.1, =1.0.0, =1.0.1, =1.0.2 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

lkmeans (>=0.0.1, <=0.0.2) potentially affected by CVE-2025-12058 via keras (2.13.1rc0)

keras PYPI version 2.13.1rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - lkmeans =0.0.1, =0.0.2 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +178 more potentially affected by CVE-2025-12058 via keras (2.8.0rc1)

keras PYPI version 2.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =0.1.11, =0.1.11, =0.6.3, =0.0.6, =0.0.1, =1.1.2, =1.1.17 and more Source cves: CVE-2025-12058 Sourc...

ax-env (>=0.2.6, <=0.2.7), cbc (>=1.0.0, <=1.1.0) +18 more potentially affected by CVE-2025-12058 via keras (2.9.0)

keras PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - ax-env =0.2.6, =1.0.0, =0.3.0, =0.1.8, =1.0.0, =1.0.12, =0.6.1, =1.0.0, =0.1.7, =1.0.8rc18, =1.0.8rc19 and more Source cves: CVE-2025-12058 Source...

face-compare (>=1.0.1, <=1.0.2), pyhand-earth (>=0.0.11, <=1.1.0) potentially affected by CVE-2025-12058 via keras (2.4.2)

keras PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - face-compare =1.0.1, =0.0.11, =1.1.0 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

aiqc (>=3.0.22, <=7.1.5), amdnet (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2025-12058 via keras (2.7.0)

keras PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aiqc =3.0.22, =1.0.0, =0.1.11, =2.7.0.0, =0.12.5, =0.0.0, =0.0.96, =0.3.8 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

animl (>=1.1.2, <=1.1.4), annopro (>=0.1.0rc1, <=0.2.0) +65 more potentially affected by CVE-2025-12058 via keras (2.6.0)

keras PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - animl =1.1.2, =0.1.0rc1, =0.47.0, =1.0.1, =0.0.9, =0.0.3, =2.2.0, =2.4.1, =1.0.0rc1, =4.5.2, =0.48.1, =1.1.3, =0.2.4, =0.2.10 and more Source cves:...

adversarial-friend (1.1.8), agrothon (>=1.1.5, <=1.3.2) +43 more potentially affected by CVE-2025-12058 via keras (2.4.3)

keras PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-friend 1.1.8 - agrothon =1.1.5, =2.1.0, =0.0.6, =0.1.2.dev0, =0.1.0, =0.0.1.dev0, =0.0.6, =0.0.2, =0.1.3, =0.7.0, =1.4.0 and more Source...

keras-explain (0.0.1), scikit-keras (0.1.11) +3 more potentially affected by CVE-2025-12058 via keras (2.1.6)

keras PYPI version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-explain 0.0.1 - scikit-keras 0.1.11 - tensorflowjs =0.5.4, =0.5.2, =0.5.5 - tutti-aisthetics 0.0.3 Source cves: CVE-2025-12058 Source advisory:...

meltano (>=1.60.0, <=2.1.0), molten-jwt (0.2.1) potentially affected by CVE-2025-62706 via authlib (0.10.0)

authlib PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - meltano =1.60.0, =2.1.0 - molten-jwt 0.2.1 Source cves: CVE-2025-62706 Source advisory: OSV:PYSEC-2026-1202...