agave (0.2.3.dev0), ai-shell-agent (>=0.2.0, <=0.2.2) +30 more potentially affected by CVE-2026-13346 via pip (25.0.1)

pip PYPI version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave 0.2.3.dev0 - ai-shell-agent =0.2.0, =0.74.3, =0.1.1, =1.31.4, =0.0.1, =0.0.1, =4.4.3, =0.1.0, =0.1.1 - iflow-mcp-iflytek-ifly-workflow-mcp-server...

chalice (>=1.9.0, <=1.9.1), corgy-erp (>=0.0.1, <=1.0.7) potentially affected by CVE-2026-13346 via pip (19.2.0)

pip PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.9.0, =0.0.1, =1.0.7 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

cherrypick (>=0.1.0, <=0.2.1), espercli (>=0.0.13, <=0.0.14) +2 more potentially affected by CVE-2026-13346 via pip (21.1.0)

pip PYPI version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cherrypick =0.1.0, =0.0.13, =0.0.5, =0.0.8 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

clai (>=2.0.0b1, <=2.4.0), email-to-calendar (>=1.0.67, <=20260703001012.0.0.dev0) +8 more potentially affected by CVE-2026-65975 via pydantic-ai-slim (>=2.0.0b1, <=2.4.0)

pydantic-ai-slim PYPI version =2.0.0b1, =2.0.0b1, =1.0.67, =1.0.0, =2.0.0b1, =2.0.0b1, =2.0.0b1, =1.0.1, =0.0.3a20, =2.48.1, =2.50.0 Source cves: CVE-2026-65975 Source advisory: MEND:CVE-2026-65975...

a2a-server (>=0.1.0, <=0.6.1), adk-agui-middleware (>=1.0.0, <=1.5.1) +39 more potentially affected by CVE-2026-18236 via google-adk (>=1.5.0, <=1.37.0)

google-adk PYPI version =1.5.0, =0.1.0, =1.0.0, =0.1.0, =0.1.1, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =0.0.15, =0.0.28 and more Source cves: CVE-2026-18236 Source advisory: SNYK:PYTHON-GOOGLEADK-18426516...

chalice (>=1.6.2, <=1.8.0), commit-helper (3.4.13) +6 more potentially affected by CVE-2026-13346 via pip (18.1.0)

pip PYPI version 18.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.6.2, =0.1.6, =0.0.3, =3.2.0, =4.0.0 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

agent-plugin-builder (>=0.1.0, <=0.6.0), aider-chat (>=0.68.0, <=0.72.3) +94 more potentially affected by CVE-2026-13346 via pip (24.3.1)

pip PYPI version 24.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agent-plugin-builder =0.1.0, =0.68.0, =0.2.0, =0.6.17, =0.3.6, =24.2.0, =0.1.3, =1.3.0, =0.1.13, =0.1.0, =5.3.0, =5.3.1 and more Source cves:...

sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-13346 via pip (7.1.0)

pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

aaanalysis (>=0.1.2, <=1.0.0), abilian-devtools (>=0.5.14, <=0.5.17) +52 more potentially affected by CVE-2026-13346 via pip (23.3.2)

pip PYPI version 23.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =0.1.2, =0.5.14, =0.1.0, =1.0.0, =0.0.7, =1.0.2, =1.2.1.dev0, =2.4.0, =1.1.33, =1.30.0, =0.1.1, =0.1.5, =0.2.2 - cocodrilo 0.1.0 and more Sour...

aaanalysis (>=1.0.1, <=1.0.2), airunner (>=5.0.0, <=5.6.1) +52 more potentially affected by CVE-2026-13346 via pip (25.3.0)

pip PYPI version 25.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =1.0.1, =5.0.0, =0.1.3, =0.13.0, =1.1.56, =0.1.0, =0.22.1, =0.3.3, =5.4.0, =0.10.0, =0.9.0, =0.1.0a12, =0.2.3 and more Source cves:...

aihandler (1.9.7), airunner (>=1.9.4, <=1.9.5) potentially affected by CVE-2026-13346 via pip (23.1.0)

pip PYPI version 23.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aihandler 1.9.7 - airunner =1.9.4, =1.9.5 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

khan-mongo (0.1.6), uranium (>=0.2.35, <=0.2.37) potentially affected by CVE-2026-13346 via pip (8.1.2)

pip PYPI version 8.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - khan-mongo 0.1.6 - uranium =0.2.35, =0.2.37 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

c2cciutils (1.1.32), lenstozotero (>=0.1.2, <=0.1.4) +15 more potentially affected by CVE-2026-13346 via pip (23.3.1)

pip PYPI version 23.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - c2cciutils 1.1.32 - lenstozotero =0.1.2, =0.0.15, =0.0.1, =1.1.1, =0.0.1, =0.4.7, =0.0.6, =0.0.3, =0.0.1, =1.0.1, =0.1.0, =0.6.2, =0.12.3 - vg-management...

chalice (>=1.9.0, <=1.9.1), corgy-erp (>=0.0.1, <=1.0.7) potentially affected by CVE-2026-13346 via pip (19.2.0)

pip PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.9.0, =0.0.1, =1.0.7 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

aws-lambda-sls (0.1.0), chalice (1.6.1) +4 more potentially affected by CVE-2026-13346 via pip (18.0.0)

pip PYPI version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aws-lambda-sls 0.1.0 - chalice 1.6.1 - lucterios =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =2.3.1.18112821 - venv-update 3.1.1 Source cves:...

justuse (>=0.6.0, <=0.6.1) potentially affected by CVE-2026-13346 via pip (21.2.1)

pip PYPI version 21.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - justuse =0.6.0, =0.6.1 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

backlogprocessing (>=0.0.0, <=0.0.2), commit-helper (>=3.4.15, <=3.4.16) +9 more potentially affected by CVE-2026-13346 via pip (19.0.3)

pip PYPI version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - backlogprocessing =0.0.0, =3.4.15, =0.0.37, =2.3.7.19022609, =1.4.0, =2019.3.2, =0.0.1, =0.0.14, =0.9.1, =0.9.2 Source cves: CVE-2026-13346 Source...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-13346 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

actions-paket-test-vol1234 (>=0.0.0, <=0.0.13), aegea (>=0.0.0, <=4.5.1) +44 more potentially affected by CVE-2026-13346 via pip (>=26.0.0, <=26.1.2)

pip PYPI version =26.0.0, =0.0.0, =0.0.0, =1.1.0.dev20260322010408, =0.8.2, =0.0.1, =0.0.13, =0.1.0, =0.1.1 and more Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

aef-gw (>=0.1.1, <=0.1.15), africanwhisper (>=0.2.1, <=0.9.0) +37 more potentially affected by CVE-2026-13346 via pip (24.0.0)

pip PYPI version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aef-gw =0.1.1, =0.2.1, =1.0.2, =0.1.0, =1.0.3, =1.31.1, =2.4.3b1, =1.2.0, =0.3.3, =4.3.0, =2.35.2, =2.36.1 and more Source cves: CVE-2026-13346 Source...