aihandler (>=1.8.15, <=1.9.6), aihandlerwindows (>=1.8.17, <=1.8.19) +15 more potentially affected by CVE-2026-13346 via pip (23.0.1)

pip PYPI version 23.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aihandler =1.8.15, =1.8.17, =1.8.14, =2023.3.0b0, =0.1.1, =2023.3.0b0, =2023.3.0b0, =0.12.0, =0.7.1, =0.7.2 - mqtt-hass-base 4.2.1 - pip-and-pip-tools...

ais-dom (>=2022.7.7b1, <=2022.7.7), bentoncounty-gistools (>=0.0.1, <=0.0.8) +16 more potentially affected by CVE-2026-13346 via pip (22.1.2)

pip PYPI version 22.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - ais-dom =2022.7.7b1, =0.0.1, =0.1.0, =2022.6.0b0, =2022.6.0b0, =0.1.5, =3.1.0, =0.2.0, =0.2.1 - pdm-shell 1.0.0 - pdm-venv 0.6.0 and more Source cves:...

cryptobot-python (0.1.5), ops-py-azure-key-vault-alert (>=7.0.0, <=7.0.1) +2 more potentially affected by CVE-2026-13346 via pip (24.1.0)

pip PYPI version 24.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cryptobot-python 0.1.5 - ops-py-azure-key-vault-alert =7.0.0, =1.3.1, =2.0.1 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

junctionart (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-13346 via pip (20.3.1)

pip PYPI version 20.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - junctionart =0.1.0, =0.1.2 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

agave (>=0.1.8, <=0.2.2), argnorm (0.0.1rc1) +6 more potentially affected by CVE-2026-13346 via pip (21.2.4)

pip PYPI version 21.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.1.8, =0.2.1, =1.24.1, =0.1.6, =1.0.2, =0.1.0, =0.1.5 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

geonode (>=4.0.0, <=4.0.0.post1), jpeglib (0.10.16) potentially affected by CVE-2026-13346 via pip (22.2.1)

pip PYPI version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - geonode =4.0.0, =4.0.0.post1 - jpeglib 0.10.16 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

agave (0.2.3.dev0), ai-shell-agent (>=0.2.0, <=0.2.2) +30 more potentially affected by CVE-2026-13346 via pip (25.0.1)

pip PYPI version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave 0.2.3.dev0 - ai-shell-agent =0.2.0, =0.74.3, =0.1.1, =1.31.4, =0.0.1, =0.0.1, =4.4.3, =0.1.0, =0.1.1 - iflow-mcp-iflytek-ifly-workflow-mcp-server...

franka-valve (0.0.0), wildfire-environment (>=0.1.0, <=0.2.1) potentially affected by CVE-2026-13346 via pip (21.0.0)

pip PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - franka-valve 0.0.0 - wildfire-environment =0.1.0, =0.2.1 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2026-13346 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

adversarial-insight-ml (0.1.0), aiorobonect (>=0.2.6, <=0.2.8) +20 more potentially affected by CVE-2026-13346 via pip (23.2.1)

pip PYPI version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - adversarial-insight-ml 0.1.0 - aiorobonect =0.2.6, =2.0.3, =1.2.0, =1.0.0, =4.2.0, =0.0.2, =0.0.2, =0.0.5 - musclex 1.23.0 and more Source cves:...

aaanalysis (>=1.0.1, <=1.0.2), airunner (>=5.0.0, <=5.6.1) +51 more potentially affected by CVE-2026-13346 via pip (25.3.0)

pip PYPI version 25.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =1.0.1, =5.0.0, =0.1.3, =1.1.56, =0.1.0, =0.22.1, =0.3.3, =5.4.0, =0.10.0, =0.9.0, =0.1.0a12, =0.2.3 - dzbanek-langflow-base 0.8.1 and more...

agi-med-utils (>=0.1.10, <=0.1.19), c2cciutils (1.1.31) +2 more potentially affected by CVE-2026-13346 via pip (23.3.0)

pip PYPI version 23.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agi-med-utils =0.1.10, =0.0.15, =0.0.16 - resource-schema-guard-rail 0.0.9 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

agave (>=0.0.1.dev0, <=0.0.5.dev0), always-updates (>=5.1.0, <=8.0.0) +21 more potentially affected by CVE-2026-13346 via pip (20.2.4)

pip PYPI version 20.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.0.1.dev0, =5.1.0, =0.1.0, =0.0.0, =0.0.1, =1.17.0, =2021.6.0.dev1, =0.0.0, =0.118.5, =2021.4.0b0, =0.2.2, =0.0.0.1.dev0, =1.2.0, =2021.4.1,...

aiomobilevikings (0.1.0), aiorobonect (>=1.1.0, <=1.1.3) +5 more potentially affected by CVE-2026-13346 via pip (24.1.2)

pip PYPI version 24.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aiomobilevikings 0.1.0 - aiorobonect =1.1.0, =0.4.0, =4.4.0, =2.0.0.post0, =2.0.2 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

chalice (>=1.9.0, <=1.9.1), corgy-erp (>=0.0.1, <=1.0.7) potentially affected by CVE-2026-13346 via pip (19.2.0)

pip PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.9.0, =0.0.1, =1.0.7 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

cherrypick (>=0.1.0, <=0.2.1), espercli (>=0.0.13, <=0.0.14) +2 more potentially affected by CVE-2026-13346 via pip (21.1.0)

pip PYPI version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cherrypick =0.1.0, =0.0.13, =0.0.5, =0.0.8 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

c2cciutils (>=1.1.16, <=1.1.30), ddpw (2.0.0) +1 more potentially affected by CVE-2026-13346 via pip (22.0.3)

pip PYPI version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - c2cciutils =1.1.16, =0.4.2, =0.5.4 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

agave (>=0.1.1, <=0.1.7), bankruptcy (>=0.0.2, <=0.0.5) +10 more potentially affected by CVE-2026-13346 via pip (21.0.1)

pip PYPI version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.1.1, =0.0.2, =0.2.0, =1.22.1, =0.0.60, =1.0.2, =2.0.3, =0.6.3, =0.0.7, =0.0.39, =0.5.0, =0.5.1 Source cves: CVE-2026-13346 Source advisory:...

uranium (>=0.2.23, <=0.2.34) potentially affected by CVE-2026-13346 via pip (7.1.2)

pip PYPI version 7.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - uranium =0.2.23, =0.2.34 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

bravoserver (3.1.1), c2cciutils (>=1.1.0.dev20260322010408, <=1.1.74) +24 more potentially affected by CVE-2026-13346 via pip (>=26.0.0, <=26.1.2)

pip PYPI version =26.0.0, =1.1.0.dev20260322010408, =26.6.0, =2.38.0, =0.1.1, =0.9.478, =2602.1.0, =0.1.0, =0.1.0, =0.1.0, =1.6.1 and more Source cves: CVE-2026-13346 Source advisory: GHSA-QWM4-QH6W-59XR...