debpackager (>=0.1.0, <=0.2.1), freedom (>=0.0.0_21_g3038804_dirty, <=0.0.1) +6 more potentially affected by CVE-2026-54552 via sh (1.11.0)

sh PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - debpackager =0.1.0, =0.0.021g3038804dirty, =0.6.0, =0.0.0, =0.1.0, =0.9.1, =0.9.6 - xenon 0.3.3 Source cves: CVE-2026-54552 Source advisory:...

eaxum-zou (>=0.0.1, <=0.0.15), fetch-tool (>=0.8.0, <=0.8.1) +15 more potentially affected by CVE-2026-54552 via sh (1.12.14)

sh PYPI version 1.12.14 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - eaxum-zou =0.0.1, =0.8.0, =0.11.0, =0.0.2, =0.1.9, =0.1.0, =2.13.0, =0.1.20200409, =0.12.0, =0.0.4, =0.0.2, =0.0.12 and more Source cves: CVE-2026-54552...

ci-buildbot (>=0.4.0, <=0.11.5), molecule (>=3.0.5, <=3.1.5) +2 more potentially affected by CVE-2026-54552 via sh (1.13.1)

sh PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - ci-buildbot =0.4.0, =3.0.5, =0.0.0.dev0, =0.1.9, =0.1.12 Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3540...

crc-bonfire (>=0.0.0a0, <=1.0.0a0), git-jira (>=0.2.0, <=0.5.0) potentially affected by CVE-2026-54552 via sh (1.14.0)

sh PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - crc-bonfire =0.0.0a0, =0.2.0, =0.5.0 Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3540...

arkindex-base-worker (>=0.1.11, <=0.2.1b2), assignment-autograder (>=2.12.0, <=2.18.1) +7 more potentially affected by CVE-2026-54552 via sh (1.14.1)

sh PYPI version 1.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - arkindex-base-worker =0.1.11, =2.12.0, =0.15.0, =0.1.0, =0.2.5, =1.0.0a0, =0.3.3, =0.3.0, =2.1.1a0 - zillionare-pluto 0.2.0 Source cves: CVE-2026-54552...

arkindex-base-worker (>=0.2.1, <=0.3.0rc5), candyshop (>=0.2.0, <=0.2.2) +8 more potentially affected by CVE-2026-54552 via sh (1.14.2)

sh PYPI version 1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - arkindex-base-worker =0.2.1, =0.2.0, =0.0.2, =4.3.0a1, =0.1.1.1, =1.0.1, =2.0.0rc3, =2.0.0rc4 Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3...

arkindex-base-worker (>=0.3.2rc7, <=0.3.6rc1), disk-usage-exporter (>=0.0.1, <=0.1.0) +14 more potentially affected by CVE-2026-54552 via sh (>=2.0.2, <=2.2.2)

sh PYPI version =2.0.2, =0.3.2rc7, =0.0.1, =0.0.1, =1.0.0, =1.0.20, =0.0.2, =0.0.1, =0.8.9, =4.5.0, =23.10.20rc0, =0.1.6, =0.6.14, =0.1.5, =1.0.19, =1.0.20 and more Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3540...

bk-plugin-framework (>=2.3.0rc1, <=2.4.0rc0), bk-plugin-runtime (>=2.1.0rc1, <=2.2.0rc0) potentially affected by CVE-2026-50271 via ddtrace (0.14.1)

ddtrace PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - bk-plugin-framework =2.3.0rc1, =2.1.0rc1, =2.2.0rc0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

dh-potluck (0.1.3) potentially affected by CVE-2026-50271 via ddtrace (0.25.0)

ddtrace PYPI version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - dh-potluck 0.1.3 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

aio-pika-rpc (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-50271 via ddtrace (0.29.0)

ddtrace PYPI version 0.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aio-pika-rpc =1.0.0, =1.0.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

example-pkg-naturalett (>=6.0.0, <=12.6.0) potentially affected by CVE-2026-50271 via ddtrace (0.37.0)

ddtrace PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - example-pkg-naturalett =6.0.0, =12.6.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=2.19.0, <=2.21.0) potentially affected by CVE-2026-50271 via ddtrace (0.40.0)

ddtrace PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =2.19.0, =2.21.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

aioradio (>=0.14.3, <=0.14.4) potentially affected by CVE-2026-50271 via ddtrace (0.50.3)

ddtrace PYPI version 0.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aioradio =0.14.3, =0.14.4 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (3.49.0) potentially affected by CVE-2026-50271 via ddtrace (0.53.0)

ddtrace PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 3.49.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-checks-base (>=25.0.0, <=32.5.1) potentially affected by CVE-2026-50271 via ddtrace (0.53.2)

ddtrace PYPI version 0.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-checks-base =25.0.0, =32.5.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=3.59.0, <=3.60.0) potentially affected by CVE-2026-50271 via ddtrace (0.61.5)

ddtrace PYPI version 0.61.5 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =3.59.0, =3.60.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=3.0.2, <=3.0.5) potentially affected by CVE-2026-50271 via ddtrace (1.7.3)

ddtrace PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =3.0.2, =3.0.5 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=3.2.0, <=3.2.1) potentially affected by CVE-2026-50271 via ddtrace (1.12.4)

ddtrace PYPI version 1.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =3.2.0, =3.2.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

blackfire-conprof (>=0.1.2, <=1.1.0), troncos (>=4.0.0b1, <=4.0.0) potentially affected by CVE-2026-50271 via ddtrace (1.13.3)

ddtrace PYPI version 1.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - blackfire-conprof =0.1.2, =4.0.0b1, =4.0.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=4.0.1, <=4.0.3b1) potentially affected by CVE-2026-50271 via ddtrace (1.15.0)

ddtrace PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =4.0.1, =4.0.3b1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...