chatting-chatbots (0.0.1), embedding-lenses (>=0.1.0, <=0.11.0) +3 more potentially affected by CVE-2026-66007 via datasets (1.14.0)

datasets PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - chatting-chatbots 0.0.1 - embedding-lenses =0.1.0, =1.2.0, =0.3.0, =0.3.3 - zensols-mednlp 0.0.1 Source cves: CVE-2026-66007 Source advisory:...

flagembedding (1.3.2), lavague (1.0.10) +2 more potentially affected by CVE-2026-66007 via datasets (2.19.0)

datasets PYPI version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - flagembedding 1.3.2 - lavague 1.0.10 - radeval =0.0.1rc6, =0.0.1, =0.0.4 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

bertlocrna (0.0.4), friday-agent (0.1.0) +12 more potentially affected by CVE-2026-66007 via datasets (2.15.0)

datasets PYPI version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - bertlocrna 0.0.4 - friday-agent 0.1.0 - gentab =0.1.0, =1.35.0, =0.1.12, =0.4.0, =0.8.1, =0.0.1, =0.1.3, =0.5.0, =0.1.2, =0.0.0, =0.0.2, =0.0.1...

autotrain-advanced (>=0.6.15, <=0.7.63), cfg-analysis-tool-py (0.1.0) +35 more potentially affected by CVE-2026-66007 via datasets (2.14.7)

datasets PYPI version 2.14.7 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - autotrain-advanced =0.6.15, =0.1.3, =0.1.3, =0.1.1, =0.0.1rc7, =0.1.0, =2.1.4, =0.2.0, =2024.3.4, =0.0.66, =2.3.1, =0.1.0.dev0, =0.1.0.1 and mo...

aideml (>=0.1.0, <=0.2.2), dlk (>=0.0.13, <=0.0.19) +3 more potentially affected by CVE-2026-66007 via datasets (2.1.0)

datasets PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - aideml =0.1.0, =0.0.13, =1.0.1a2, =1.0.2.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

adaptnlp (>=0.3.6, <=0.3.7), artificial-detection (0.1.0) +2 more potentially affected by CVE-2026-66007 via datasets (1.15.1)

datasets PYPI version 1.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - adaptnlp =0.3.6, =0.3.7 - artificial-detection 0.1.0 - lm-eval 0.2.0 - tailor-nlp 0.1.0 Source cves: CVE-2026-66007 Source advisory:...

gantry (>=0.5.1, <=0.6.14), openicl (>=0.1.1, <=0.1.6) +2 more potentially affected by CVE-2026-66007 via datasets (2.7.1)

datasets PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - gantry =0.5.1, =0.1.1, =0.0.2, =0.0.4 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

autonlp (>=0.3.3, <=0.3.4), repro (>=0.0.1, <=0.1.3) +2 more potentially affected by CVE-2026-66007 via datasets (1.9.0)

datasets PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - autonlp =0.3.3, =0.0.1, =0.2.4, =1.0.2, =1.0.4 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

esntorch (>=0.0.2, <=1.0.6), model-hub (>=0.16.0rc0, <=0.16.5) +1 more potentially affected by CVE-2026-66007 via datasets (1.7.0)

datasets PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - esntorch =0.0.2, =0.16.0rc0, =0.0.1, =0.0.3 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

airosentris (>=0.1.8, <=0.1.31), astropt (>=1.0.1.dev32, <=1.0.2) +24 more potentially affected by CVE-2026-66007 via datasets (3.1.0)

datasets PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - airosentris =0.1.8, =1.0.1.dev32, =0.8.26, =0.0.1b2, =0.0.0, =0.1.21, =1.0.0, =0.1.0, =0.6.0, =0.0.1a1, =0.4.0, =0.1.0, =2.0.0, =2.3.0 -...

indobenchmark-toolkit (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-66007 via datasets (1.4.1)

datasets PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - indobenchmark-toolkit =0.0.1, =0.0.5 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

biome-text (3.0.0), gradsflow (>=0.0.1b1, <=0.0.3) +6 more potentially affected by CVE-2026-66007 via datasets (1.2.1)

datasets PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - biome-text 3.0.0 - gradsflow =0.0.1b1, =0.1.0, =0.2.13, =0.3.0a1, =0.3.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

transformer-vae (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-66007 via datasets (1.1.3)

datasets PYPI version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - transformer-vae =0.0.1, =0.0.2 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

a2 (>=0.3.2, <=0.10.13), abliterix (>=1.1.0, <=1.12.2) +1206 more potentially affected by CVE-2026-66007 via datasets (>=1.1.2, <=5.0.0)

datasets PYPI version =1.1.2, =0.3.2, =1.1.0, =0.2.1, =0.1.0, =0.2.14, =0.1.3, =0.2.1, =2.0.4, =0.0.4, =0.1.0, =0.0.7, =0.3.6 and more Source cves: CVE-2026-66007 Source advisory: MEND:CVE-2026-66007...

mcpuniverse (>=1.0.0, <=1.1.3), mseep-mcpuniverse (1.0.4) potentially affected by CVE-2026-66004 via blender-mcp (1.1.3)

blender-mcp PYPI version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on blender-mcp and may be impacted: - mcpuniverse =1.0.0, =1.1.3 - mseep-mcpuniverse 1.0.4 Source cves: CVE-2026-66004 Source advisory: MEND:CVE-2026-66004...

MSC-2026-6374

Malicious PyPI package: a fully-featured Remote Access Tool / backdoor published anonymously author 'gcli contributors', no company, no author/maintainer email; homepage github.com/gcli-control/gcli returns 404; first published 2026-07-21, 0 downloads. It implements an AES-256-GCM encrypted...

stitchlab-agentcore (>=0.1.0, <=1.0.2), strands-compose-agentcore (0.1.1) potentially affected by CVE-2026-16796 via bedrock-agentcore (>=1.1.1, <=1.7.0)

bedrock-agentcore PYPI version =1.1.1, =0.1.0, =1.0.2 - strands-compose-agentcore 0.1.1 Source cves: CVE-2026-16796 Source advisory: MEND:CVE-2026-16796...

chellow (>=1692799408.0.0, <=1698672999.0.0), pspdfutils (>=3.1.2, <=3.2.0) potentially affected by CVE-2026-59935 via pypdf (3.15.2)

pypdf PYPI version 3.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chellow =1692799408.0.0, =3.1.2, =3.2.0 Source cves: CVE-2026-59935 Source advisory: OSV:GHSA-G867-7843-WF8Q...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-45339 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-45339 Source advisory: OSV:PYSEC-2026-3543...

criscostack (1.0.0), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-59937 via pypdf (3.9.1)

pypdf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - criscostack 1.0.0 - neumai =0.0.9, =0.0.17, =2023.6.0, =2024.4.0 Source cves: CVE-2026-59937 Source advisory: OSV:GHSA-55H5-XMCQ-C37V...