dike (>=0.1.0, <=0.4.0), liara (>=2.1.0, <=2.3.2) +9 more potentially affected by CVE-2026-61632 via pymdown-extensions (8.2.0)

pymdown-extensions PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - dike =0.1.0, =2.1.0, =0.1.0, =0.19.1, =0.13.0, =0.3.0, =2.2.0, =0.1.0, =0.1.6 Source cves: CVE-2026-61632 Source advisory:...

arkindex-base-worker (>=0.3.6, <=0.3.7rc1), markdown-live-preview (>=0.2.48, <=0.2.53) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.5.0)

pymdown-extensions PYPI version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.6, =0.2.48, =0.11.0, =0.12.2 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

arkindex-base-worker (>=0.3.5rc1, <=0.3.5rc5), saasops (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-61632 via pymdown-extensions (10.3.0)

pymdown-extensions PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.5rc1, =0.1.0, =0.1.1 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

anoteai (>=0.10.0, <=0.20.0), buisciii-tools (>=2.2.2, <=2.2.5) +23 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.4.0)

pymdown-extensions PYPI version 10.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - anoteai =0.10.0, =2.2.2, =0.1.0, =4.21.4, =1.0.6, =0.17.0, =2.7.7, =6.2.0, =0.2.0, =0.2.0, =0.2.2 and more Source cves:...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +72 more potentially affected by CVE-2026-13769 via awscli (>=1.7.34, <=1.44.77)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.8.2, =0.3.0, =0.6.0 and more Source cves: CVE-2026-13769 Source advisory: OSV:GHSA-WFP6-F47H-HXC3...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +72 more potentially affected by CVE-2026-13769 via awscli (>=1.7.34, <=1.44.77)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.8.2, =0.3.0, =0.6.0 and more Source cves: CVE-2026-13769 Source advisory: GHSA-WFP6-F47H-HXC3...

acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), acuity (6.18.0) +522 more potentially affected by CVE-2026-63632 via onnx (>=1.3.0, <=1.21.0)

onnx PYPI version =1.3.0, =0.1.0.dev2, =6.6.0, =0.3.0, =0.1.0, =0.0.0, =1.0.1, =0.0.8, =0.1.0, =2.0.0, =1.31.1, =2.9.0 and more Source cves: CVE-2026-63632 Source advisory: GHSA-P893-RVQ9-2XF9...

aana (>=0.2.1, <=0.2.4), ablator (>=0.0.1b1, <=0.0.1b3) +442 more potentially affected by CVE-2026-57516 via ray (>=2.0.0, <=2.55.1)

ray PYPI version =2.0.0, =0.2.1, =0.0.1b1, =0.2.0, =1.0.4, =1.3.0, =1.0.1, =1.0.3, =2.0.3, =2.0.3, =1.6.0, =1.4.0, =1.16.1 and more Source cves: CVE-2026-57516 Source advisory: GHSA-HHRP-GW25-JR43...

deephyper (>=0.1.1, <=0.1.2) potentially affected by CVE-2026-57516 via ray (0.7.2)

ray PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deephyper =0.1.1, =0.1.2 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

actorch (>=0.0.3, <=0.0.5), aliby (>=0.1.18, <=0.1.55) +38 more potentially affected by CVE-2026-57516 via ray (1.13.0)

ray PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - actorch =0.0.3, =0.1.18, =0.1.11, =0.1.3, =0.4.3b20220618, =0.4.3b20220618, =0.4.3b20220618, =0.0.14, =11.1.0, =0.1.0, =0.2.0, =0.0.1, =0.0.9, =0.1.3 and...

gen2-connector (1.0.0b60), pynb-dag-runner (>=0.0.6, <=0.0.9) +2 more potentially affected by CVE-2026-57516 via ray (1.9.1)

ray PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - gen2-connector 1.0.0b60 - pynb-dag-runner =0.0.6, =0.0.4.dev1661688916, =0.0.4, =0.0.6 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR4...

hydra-ray-launcher (1.2.0), ray-on-aml (>=0.1.8, <=0.2.1) +1 more potentially affected by CVE-2026-57516 via ray (1.12.0)

ray PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - hydra-ray-launcher 1.2.0 - ray-on-aml =0.1.8, =0.2.1 - txp 0.2.17 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

beta-rec (>=0.2.1, <=0.2.2), fluidexec (0.1.0rc0) +1 more potentially affected by CVE-2026-57516 via ray (0.8.5)

ray PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - beta-rec =0.2.1, =2.6.0, =2.7.0 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

biome-text (>=3.0.0, <=3.2.1), deepcomp (>=1.2.4, <=1.2.5) +7 more potentially affected by CVE-2026-57516 via ray (1.3.0)

ray PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - biome-text =3.0.0, =1.2.4, =0.4.2rc0, =0.0.7, =0.2.0, =2021.6.12.dev0, =2021.6.17.dev0 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR4...

abmarl (>=0.2.0, <=0.2.2), aliby (0.1.16) +5 more potentially affected by CVE-2026-57516 via ray (1.4.0)

ray PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.0, =0.1.4, =1.3.0, =1.4.10, =2021.6.22.dev0, =2021.7.1.dev0 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

autogluon (>=0.3.2b20220126, <=0.4.1b20220317), gen2-connector (>=1.0.0b48, <=1.0.0b56) +2 more potentially affected by CVE-2026-57516 via ray (1.8.0)

ray PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20220126, =1.0.0b48, =0.0.7.post1, =0.1.0b0, =0.1.3 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

gen2-connector (>=1.0.0b57, <=1.0.0b59), kserve (>=0.8.0rc0, <=0.8.0.2) +2 more potentially affected by CVE-2026-57516 via ray (1.9.0)

ray PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - gen2-connector =1.0.0b57, =0.8.0rc0, =0.0.2, =0.1.0, =0.1.2 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

airunner (>=3.1.8, <=3.1.14), aitraining (>=0.0.0, <=0.8.37.dev0) +45 more potentially affected by CVE-2026-66007 via datasets (3.2.0)

datasets PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - airunner =3.1.8, =0.0.0, =0.7.3, =0.1.2, =0.8.34, =1.1.5, =0.1.1, =0.11.0, =0.1.24, =0.1.32 - genderbench 0.5.0 and more Source cves:...

transformer-vae (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-66007 via datasets (1.1.3)

datasets PYPI version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - transformer-vae =0.0.1, =0.0.2 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

biome-text (3.0.0), gradsflow (>=0.0.1b1, <=0.0.3) +6 more potentially affected by CVE-2026-66007 via datasets (1.2.1)

datasets PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - biome-text 3.0.0 - gradsflow =0.0.1b1, =0.1.0, =0.2.13, =0.3.0a1, =0.3.1 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...