aio-pika-rpc (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-50271 via ddtrace (0.29.0)

ddtrace PYPI version 0.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aio-pika-rpc =1.0.0, =1.0.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

example-pkg-naturalett (>=6.0.0, <=12.6.0) potentially affected by CVE-2026-50271 via ddtrace (0.37.0)

ddtrace PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - example-pkg-naturalett =6.0.0, =12.6.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

opentelemetry-exporter-datadog (>=0.20.0b0, <=0.30.0b0) potentially affected by CVE-2026-50271 via ddtrace (0.46.0)

ddtrace PYPI version 0.46.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - opentelemetry-exporter-datadog =0.20.0b0, =0.30.0b0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

aioradio (>=0.14.3, <=0.14.4) potentially affected by CVE-2026-50271 via ddtrace (0.50.3)

ddtrace PYPI version 0.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aioradio =0.14.3, =0.14.4 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-checks-base (>=25.0.0, <=32.5.1) potentially affected by CVE-2026-50271 via ddtrace (0.53.2)

ddtrace PYPI version 0.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-checks-base =25.0.0, =32.5.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

spellbot (>=7.10.1, <=7.10.10) potentially affected by CVE-2026-50271 via ddtrace (0.56.1)

ddtrace PYPI version 0.56.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - spellbot =7.10.1, =7.10.10 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=3.52.0, <=3.53.0), spellbot (7.12.3) potentially affected by CVE-2026-50271 via ddtrace (0.58.5)

ddtrace PYPI version 0.58.5 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =3.52.0, =3.53.0 - spellbot 7.12.3 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=3.1.0, <=3.1.2) potentially affected by CVE-2026-50271 via ddtrace (1.8.0)

ddtrace PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =3.1.0, =3.1.2 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

kpler-ai-kai-dependencies (0.0.2) potentially affected by CVE-2026-50271 via ddtrace (1.20.14)

ddtrace PYPI version 1.20.14 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - kpler-ai-kai-dependencies 0.0.2 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=4.81.0, <=4.82.0) potentially affected by CVE-2026-50271 via ddtrace (2.0.0rc2)

ddtrace PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =4.81.0, =4.82.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

tracer-extension (1.0.0) potentially affected by CVE-2026-50271 via ddtrace (2.9.6)

ddtrace PYPI version 2.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - tracer-extension 1.0.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

emmet-api (>=0.84.6rc5, <=0.84.10rc0) potentially affected by CVE-2026-50271 via ddtrace (3.0.0rc3)

ddtrace PYPI version 3.0.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - emmet-api =0.84.6rc5, =0.84.10rc0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

dh-potluck (>=1.34.6, <=1.37.2) potentially affected by CVE-2026-50271 via ddtrace (3.14.1)

ddtrace PYPI version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - dh-potluck =1.34.6, =1.37.2 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

debpackager (>=0.1.0, <=0.2.1), freedom (>=0.0.0_21_g3038804_dirty, <=0.0.1) +6 more potentially affected by CVE-2026-54552 via sh (1.11.0)

sh PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - debpackager =0.1.0, =0.0.021g3038804dirty, =0.6.0, =0.0.0, =0.1.0, =0.9.1, =0.9.6 - xenon 0.3.3 Source cves: CVE-2026-54552 Source advisory:...

arkindex-base-worker (>=0.2.1, <=0.3.0rc5), candyshop (>=0.2.0, <=0.2.2) +8 more potentially affected by CVE-2026-54552 via sh (1.14.2)

sh PYPI version 1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - arkindex-base-worker =0.2.1, =0.2.0, =0.0.2, =4.3.0a1, =0.1.1.1, =1.0.1, =2.0.0rc3, =2.0.0rc4 Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3...

1xn-vmcp (>=0.5.2, <=0.6.1), a2c-smcp (>=0.1.1rc0, <=0.1.5) +1095 more potentially affected by CVE-2026-59950 via mcp (>=1.0.0, <=1.28.0)

mcp PYPI version =1.0.0, =0.5.2, =0.1.1rc0, =0.0.2, =0.2.0, =0.1.7rc1, =1.2.3, =0.5.0, =0.1.1, =0.11.3, =0.11.8, =0.11.10 and more Source cves: CVE-2026-59950 Source advisory: OSV:PYSEC-2026-3483...

astra-assistants (>=2.3.0, <=2.4.5), fiftyone-mcp-server (>=0.1.0, <=0.1.2) +7 more potentially affected by CVE-2026-52869 via mcp (0.9.1)

mcp PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mcp and may be impacted: - astra-assistants =2.3.0, =0.1.0, =3.0.16, =0.0.4, =1.0.26, =1.0.35 Source cves: CVE-2026-52869 Source advisory: OSV:PYSEC-2026-3482...

aegis-finance-mcp (0.1.1), agency-engine (>=1.2.3, <=1.2.4.2) +229 more potentially affected by CVE-2026-52870 via mcp (>=1.23.0, <=1.27.1)

mcp PYPI version =1.23.0, =1.2.3, =0.1.1, =0.11.3, =0.11.8, =0.1.0, =0.1.0, =0.2.0, =0.13.2, =0.4.7, =0.5.0rc4, =0.1.0, =1.1.0, =1.1.1 and more Source cves: CVE-2026-52870 Source advisory: OSV:PYSEC-2026-3481...

arkindex-base-worker (>=0.1.11, <=0.2.1b2), assignment-autograder (>=2.12.0, <=2.18.1) +7 more potentially affected by CVE-2026-54552 via sh (1.14.1)

sh PYPI version 1.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - arkindex-base-worker =0.1.11, =2.12.0, =0.15.0, =0.1.0, =0.2.5, =1.0.0a0, =0.3.3, =0.3.0, =2.1.1a0 - zillionare-pluto 0.2.0 Source cves: CVE-2026-54552...

ci-buildbot (>=0.4.0, <=0.11.5), molecule (>=3.0.5, <=3.1.5) +2 more potentially affected by CVE-2026-54552 via sh (1.13.1)

sh PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - ci-buildbot =0.4.0, =3.0.5, =0.0.0.dev0, =0.1.9, =0.1.12 Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3540...