tracer-extension (>=1.0.1, <=1.0.8) potentially affected by CVE-2026-50271 via ddtrace (2.9.2)

ddtrace PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - tracer-extension =1.0.1, =1.0.8 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

chalkdf (>=1.3.4, <=3.34.2), chalkpy (>=2.72.8, <=2.81.3) +9 more potentially affected by CVE-2026-50271 via ddtrace (2.21.12)

ddtrace PYPI version 2.21.12 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - chalkdf =1.3.4, =2.72.8, =1.17.0, =0.7.5, =0.7.5, =0.7.5, =0.1.53, =9.3.0, =4.2.0, =5.1.0 Source cves: CVE-2026-50271 Source advisory:...

clawhealth (>=0.1.0, <=0.1.1), garmin-auth (>=0.1.1, <=0.2.1) +10 more potentially affected by CVE-2026-54447 via garminconnect (>=0.1.49, <=0.3.3)

garminconnect PYPI version =0.1.49, =0.1.0, =0.1.1, =1.0.2, =0.0.4, =2.7.0, =0.9.5, =0.1.2, =0.1.1, =0.1.0, =0.1.0, =0.1.2 Source cves: CVE-2026-54447 Source advisory: OSV:PYSEC-2026-3467...

hello2 (0.1.33) potentially affected by CVE-2026-53656 via fiftyone (0.16.5)

fiftyone PYPI version 0.16.5 is affected by a known vulnerability. The following packages have a transitive dependency on fiftyone and may be impacted: - hello2 0.1.33 Source cves: CVE-2026-53656 Source advisory: OSV:PYSEC-2026-3465...

artus (>=0.1.0, <=0.3.1), darwin-fiftyone (>=1.1.20, <=2.1.1) +1 more potentially affected by CVE-2026-53656 via fiftyone (>=1.1.0, <=1.16.0)

fiftyone PYPI version =1.1.0, =0.1.0, =1.1.20, =2.1.1 - pysolotools-fiftyone 0.3.25 Source cves: CVE-2026-53656 Source advisory: OSV:PYSEC-2026-3465...

ctadirac (>=3.0.13, <=3.2.3a0), ctao-dpps-clients (>=0.7.0rc2, <=0.9.0) +1 more potentially affected by CVE-2026-45579 via dirac (>=9.1.4, <=9.1.9)

dirac PYPI version =9.1.4, =3.0.13, =0.7.0rc2, =0.7.0rc3, =0.9.0 Source cves: CVE-2026-45579 Source advisory: OSV:PYSEC-2026-3462...

ctadirac (>=2.2.78, <=3.0.0a5), lhcbdirac (>=11.1.0a4, <=11.1.0a6) potentially affected by CVE-2026-61667 via dirac (>=8.1.0a23, <=9.0.0a59)

dirac PYPI version =8.1.0a23, =2.2.78, =11.1.0a4, =11.1.0a6 Source cves: CVE-2026-61667 Source advisory: OSV:PYSEC-2026-3463...

ctadirac (>=2.2.78, <=3.0.0a5), lhcbdirac (>=11.1.0a4, <=11.1.0a6) potentially affected by CVE-2026-45579 via dirac (>=8.1.0a23, <=9.0.0a59)

dirac PYPI version =8.1.0a23, =2.2.78, =11.1.0a4, =11.1.0a6 Source cves: CVE-2026-45579 Source advisory: OSV:PYSEC-2026-3462...

scylla (1.1.6) potentially affected by CVE-2026-37737 via sanic-cors (0.9.7)

sanic-cors PYPI version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - scylla 1.1.6 Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

iconrpcserver (>=1.2.10, <=1.4.9) potentially affected by CVE-2026-37737 via sanic-cors (0.9.6)

sanic-cors PYPI version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - iconrpcserver =1.2.10, =1.4.9 Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

postile (>=0.1.0, <=0.1.1), scylla (1.1.5) potentially affected by CVE-2026-37737 via sanic-cors (0.9.5)

sanic-cors PYPI version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - postile =0.1.0, =0.1.1 - scylla 1.1.5 Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

scylla (>=0.1.5, <=1.1.4) potentially affected by CVE-2026-37737 via sanic-cors (0.9.3)

sanic-cors PYPI version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - scylla =0.1.5, =1.1.4 Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

lmcache-vllm (>=0.6.1rc1, <=0.6.2.1) potentially affected by CVE-2026-10813 via lmcache (0.4.3)

lmcache PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on lmcache and may be impacted: - lmcache-vllm =0.6.1rc1, =0.6.2.1 Source cves: CVE-2026-10813 Source advisory: OSV:PYSEC-2026-3480...

networking-bigswitch (>=15.0.0, <=15.0.2) potentially affected by CVE-2026-50266 via neutron (15.3.4)

neutron PYPI version 15.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bigswitch =15.0.0, =15.0.2 Source cves: CVE-2026-50266 Source advisory: OSV:PYSEC-2026-3491...

networking-bagpipe (8.0.1), networking-baremetal (1.0.1) +1 more potentially affected by CVE-2026-50266 via neutron (12.1.1)

neutron PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 8.0.1 - networking-baremetal 1.0.1 - networking-mlnx 12.4.0 Source cves: CVE-2026-50266 Source advisory: OSV:PYSEC-2026-3491...

a2 (>=0.1.0, <=0.3.17), acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=1.1.1rc4) +351 more potentially affected by CVE-2026-6657 via jupyter-server (>=1.13.2, <=2.17.0)

jupyter-server PYPI version =1.13.2, =0.1.0, =0.14.0.3rc1, =0.3.0, =0.1.0b0, =1.3.4, =0.18.3, =0.1.0, =0.1.0, =1.0.1, =0.2.2, =0.2.7 and more Source cves: CVE-2026-6657 Source advisory: OSV:PYSEC-2026-3472...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +551 more potentially affected by CVE-2026-73417 via jupyterlab (>=3.3.2, <=4.5.8)

jupyterlab PYPI version =3.3.2, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =0.1.0, =3.0.0, =4.33.0, =5.0.0 - arcor2-calibration 0.8.0 and more Source cves: CVE-2026-73417 Source advisory: GHSA-PPPJ-HQ3G-57PJ...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +551 more potentially affected by CVE-2026-73417 via jupyterlab (>=3.3.2, <=4.5.8)

jupyterlab PYPI version =3.3.2, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =0.1.0, =3.0.0, =4.33.0, =5.0.0 - arcor2-calibration 0.8.0 and more Source cves: CVE-2026-73417 Source advisory: SNYK:PYTHON-JUPYTERLAB-18233306...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +551 more potentially affected by CVE-2026-73417 via jupyterlab (>=3.3.2, <=4.5.8)

jupyterlab PYPI version =3.3.2, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =0.1.0, =3.0.0, =4.33.0, =5.0.0 - arcor2-calibration 0.8.0 and more Source cves: CVE-2026-73417 Source advisory: OSV:GHSA-PPPJ-HQ3G-57PJ...

logodetect (1.1.3) potentially affected by CVE-2026-73415 via jupyterlab (3.2.4)

jupyterlab PYPI version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - logodetect 1.1.3 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...