openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59214 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59214 Source advisory: OSV:PYSEC-2026-3590...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59218 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59218 Source advisory: OSV:PYSEC-2026-3594...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59217 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59217 Source advisory: OSV:PYSEC-2026-3593...

arkindex-base-worker (>=0.3.7rc2, <=0.3.7rc10), mafiagg (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.7.0)

pymdown-extensions PYPI version 10.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.7rc2, =1.0.0, =0.2.54, =0.2.65 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-13769 via awscli (>=1.7.34, <=1.44.77)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-13769 Source advisory: OSV:PYSEC-2026-3548...

mybws (0.1.1) potentially affected by CVE-2026-61632 via pymdown-extensions (10.8.0)

pymdown-extensions PYPI version 10.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mybws 0.1.1 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: OSV:PYSEC-2026-3592...

cipromote (>=1.5.0, <=1.5.2) potentially affected by CVE-2026-52902 via awxkit (23.9.0)

awxkit PYPI version 23.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on awxkit and may be impacted: - cipromote =1.5.0, =1.5.2 Source cves: CVE-2026-52902 Source advisory: OSV:PYSEC-2026-3550...

cocpyth (>=0.1.1, <=0.1.2), pretix (>=4.19.0, <=4.20.4) potentially affected by CVE-2026-59936 via pypdf (3.8.1)

pypdf PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cocpyth =0.1.1, =4.19.0, =4.20.4 Source cves: CVE-2026-59936 Source advisory: OSV:PYSEC-2026-3612...

agatta (>=1.0.0, <=1.0.2), agentbuddy (0.1.1.dev33) +102 more potentially affected by CVE-2026-59936 via pypdf (3.17.4)

pypdf PYPI version 3.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - agatta =1.0.0, =0.0.3, =0.0.1, =1.1.0, =0.0.2, =1.2.0, =0.6.7, =1.2.1, =0.1.3, =0.0.1, =0.8.2 - cadenai 0.1.0 and more Source cves: CVE-2026-59936...

mimir-ai (0.0.3), rara-digitizer (>=1.0.0, <=1.5.8) potentially affected by CVE-2026-59937 via pypdf (5.0.0)

pypdf PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - mimir-ai 0.0.3 - rara-digitizer =1.0.0, =1.5.8 Source cves: CVE-2026-59937 Source advisory: OSV:PYSEC-2026-3610...

acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), acuity (6.18.0) +520 more potentially affected by CVE-2026-63632 via onnx (>=1.3.0, <=1.21.0)

onnx PYPI version =1.3.0, =0.1.0.dev2, =6.6.0, =0.3.0, =0.1.0, =0.0.0, =1.0.1, =0.0.8, =0.1.0, =2.0.0, =1.31.1, =2.9.0 and more Source cves: CVE-2026-63632 Source advisory: OSV:PYSEC-2026-3587...

agent-vm-hermes-adapter (>=0.0.116, <=0.0.132), apify-hermes-agent-plugin (>=0.1.0, <=0.1.5) +18 more potentially affected by CVE-2026-10221 via hermes-agent (>=0.13.0, <=0.19.0)

hermes-agent PYPI version =0.13.0, =0.0.116, =0.1.0, =0.1.3, =0.1.0, =3.0.0, =0.1.2, =2.5.17, =0.3.0, =0.9.0, =0.1.0a16, =1.0.1, =1.0.0, =1.0.2, =1.0.21 and more Source cves: CVE-2026-10221 Source advisory: OSV:PYSEC-2026-3577...

chatlytics-hermes (>=3.0.0, <=3.0.1), mtmai (>=0.10.0, <=0.10.5) potentially affected by CVE-2026-10223 via hermes-agent (>=0.13.0, <=0.14.0)

hermes-agent PYPI version =0.13.0, =3.0.0, =0.10.0, =0.10.5 Source cves: CVE-2026-10223 Source advisory: OSV:PYSEC-2026-3575...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-18654 via awscli (>=1.7.34, <=1.45.23)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-18654 Source advisory: SNYK:PYTHON-AWSCLI-18533156...

1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +2648 more potentially affected by CVE-2026-69248 via cryptography (>=45.0.0, <=48.0.1)

cryptography PYPI version =45.0.0, =0.1.3, =0.5.3, =0.1.0, =0.1.1, =2.4.119, =0.45.0.dev1, =2.17.2, =2.0.0, =3.2.1, =3.9.2 and more Source cves: CVE-2026-69248 Source advisory: OSV:GHSA-M2H6-J472-RP4C...

1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +2648 more potentially affected by CVE-2026-69248 via cryptography (>=45.0.0, <=48.0.1)

cryptography PYPI version =45.0.0, =0.1.3, =0.5.3, =0.1.0, =0.1.1, =2.4.119, =0.45.0.dev1, =2.17.2, =2.0.0, =3.2.1, =3.9.2 and more Source cves: CVE-2026-69248 Source advisory: GHSA-M2H6-J472-RP4C...

1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +4594 more potentially affected by CVE-2026-69249 via cryptography (>=42.0.0, <=48.0.1)

cryptography PYPI version =42.0.0, =0.1.3, =0.5.3, =2.3.84, =0.1.0, =2.3.0, =0.1.0, =0.1.1, =0.1.0, =2.3.57, =2.4.15, =2.4.366.dev1 - aciclient 1.7.0 - acido 0.15.0 and more Source cves: CVE-2026-69249 Source advisory: GHSA-JWV3-5HGF-82WW...

1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +3533 more potentially affected by CVE-2026-69247 via cryptography (>=44.0.0, <=49.0.0)

cryptography PYPI version =44.0.0, =0.1.3, =0.5.3, =2.3.0, =0.1.0, =0.1.1, =2.4.15, =0.45.0.dev1, =0.46.2 and more Source cves: CVE-2026-69247 Source advisory: MEND:CVE-2026-69247...

muffin (>=0.1.5, <=0.1.6) potentially affected by CVE-2026-69244 via aiohttp (0.17.3)

aiohttp PYPI version 0.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.5, =0.1.6 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...