crc-bonfire (>=0.0.0a0, <=1.0.0a0), git-jira (>=0.2.0, <=0.5.0) potentially affected by CVE-2026-54552 via sh (1.14.0)

sh PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - crc-bonfire =0.0.0a0, =0.2.0, =0.5.0 Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3540...

bk-plugin-framework (>=2.3.0rc1, <=2.4.0rc0), bk-plugin-runtime (>=2.1.0rc1, <=2.2.0rc0) potentially affected by CVE-2026-50271 via ddtrace (0.14.1)

ddtrace PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - bk-plugin-framework =2.3.0rc1, =2.1.0rc1, =2.2.0rc0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

dh-potluck (0.1.3) potentially affected by CVE-2026-50271 via ddtrace (0.25.0)

ddtrace PYPI version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - dh-potluck 0.1.3 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (2.24.0) potentially affected by CVE-2026-50271 via ddtrace (0.41.2)

ddtrace PYPI version 0.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 2.24.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (3.49.0) potentially affected by CVE-2026-50271 via ddtrace (0.53.0)

ddtrace PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 3.49.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=3.59.0, <=3.60.0) potentially affected by CVE-2026-50271 via ddtrace (0.61.5)

ddtrace PYPI version 0.61.5 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =3.59.0, =3.60.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

dh-potluck (>=1.5.0, <=1.12.0) potentially affected by CVE-2026-50271 via ddtrace (1.1.1)

ddtrace PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - dh-potluck =1.5.0, =1.12.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=3.0.0, <=3.0.1) potentially affected by CVE-2026-50271 via ddtrace (1.7.2)

ddtrace PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =3.0.0, =3.0.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

blackfire-conprof (>=0.1.2, <=1.1.0), troncos (>=4.0.0b1, <=4.0.0) potentially affected by CVE-2026-50271 via ddtrace (1.13.3)

ddtrace PYPI version 1.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - blackfire-conprof =0.1.2, =4.0.0b1, =4.0.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

emmet-api (>=0.72.0, <=0.78.0rc1) potentially affected by CVE-2026-50271 via ddtrace (2.1.0rc2)

ddtrace PYPI version 2.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - emmet-api =0.72.0, =0.78.0rc1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

tracer-extension (>=1.0.1, <=1.0.8) potentially affected by CVE-2026-50271 via ddtrace (2.9.2)

ddtrace PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - tracer-extension =1.0.1, =1.0.8 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

xocto (7.2.0) potentially affected by CVE-2026-50271 via ddtrace (2.19.4)

ddtrace PYPI version 2.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - xocto 7.2.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

asimov-nearai-module (0.0.0), nearai (>=0.1.14, <=0.1.19) +1 more potentially affected by CVE-2026-50271 via ddtrace (2.21.0)

ddtrace PYPI version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - asimov-nearai-module 0.0.0 - nearai =0.1.14, =0.0.7, =0.0.12 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (7.0.0) potentially affected by CVE-2026-50271 via ddtrace (3.16.0)

ddtrace PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos 7.0.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=2.19.0, <=2.21.0) potentially affected by CVE-2026-50271 via ddtrace (0.40.0)

ddtrace PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =2.19.0, =2.21.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

clawhealth (>=0.1.0, <=0.1.1), garmin-auth (>=0.1.1, <=0.2.1) +10 more potentially affected by CVE-2026-54447 via garminconnect (>=0.1.49, <=0.3.3)

garminconnect PYPI version =0.1.49, =0.1.0, =0.1.1, =1.0.2, =0.0.4, =2.7.0, =0.9.5, =0.1.2, =0.1.1, =0.1.0, =0.1.0, =0.1.2 Source cves: CVE-2026-54447 Source advisory: OSV:PYSEC-2026-3467...

hello2 (0.1.33) potentially affected by CVE-2026-53656 via fiftyone (0.16.5)

fiftyone PYPI version 0.16.5 is affected by a known vulnerability. The following packages have a transitive dependency on fiftyone and may be impacted: - hello2 0.1.33 Source cves: CVE-2026-53656 Source advisory: OSV:PYSEC-2026-3465...

artus (>=0.1.0, <=0.3.1), darwin-fiftyone (>=1.1.20, <=2.1.1) +1 more potentially affected by CVE-2026-53656 via fiftyone (>=1.1.0, <=1.16.0)

fiftyone PYPI version =1.1.0, =0.1.0, =1.1.20, =2.1.1 - pysolotools-fiftyone 0.3.25 Source cves: CVE-2026-53656 Source advisory: OSV:PYSEC-2026-3465...

ctadirac (>=2.2.78, <=3.0.0a5), lhcbdirac (>=11.1.0a4, <=11.1.0a6) potentially affected by CVE-2026-61667 via dirac (>=8.1.0a23, <=9.0.0a59)

dirac PYPI version =8.1.0a23, =2.2.78, =11.1.0a4, =11.1.0a6 Source cves: CVE-2026-61667 Source advisory: OSV:PYSEC-2026-3463...

ctadirac (>=2.2.78, <=3.0.0a5), lhcbdirac (>=11.1.0a4, <=11.1.0a6) potentially affected by CVE-2026-45579 via dirac (>=8.1.0a23, <=9.0.0a59)

dirac PYPI version =8.1.0a23, =2.2.78, =11.1.0a4, =11.1.0a6 Source cves: CVE-2026-45579 Source advisory: OSV:PYSEC-2026-3462...