ctadirac (>=2.2.78, <=3.0.0a5), lhcbdirac (>=11.1.0a4, <=11.1.0a6) potentially affected by CVE-2026-45579 via dirac (>=8.1.0a23, <=9.0.0a59)

dirac PYPI version =8.1.0a23, =2.2.78, =11.1.0a4, =11.1.0a6 Source cves: CVE-2026-45579 Source advisory: OSV:PYSEC-2026-3462...

ctadirac (>=3.0.13, <=3.2.3a0), ctao-dpps-clients (>=0.7.0rc2, <=0.9.0) +1 more potentially affected by CVE-2026-45579 via dirac (>=9.1.4, <=9.1.9)

dirac PYPI version =9.1.4, =3.0.13, =0.7.0rc2, =0.7.0rc3, =0.9.0 Source cves: CVE-2026-45579 Source advisory: OSV:PYSEC-2026-3462...

iconrpcserver (>=1.2.10, <=1.4.9) potentially affected by CVE-2026-37737 via sanic-cors (0.9.6)

sanic-cors PYPI version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - iconrpcserver =1.2.10, =1.4.9 Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

postile (>=0.1.0, <=0.1.1), scylla (1.1.5) potentially affected by CVE-2026-37737 via sanic-cors (0.9.5)

sanic-cors PYPI version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - postile =0.1.0, =0.1.1 - scylla 1.1.5 Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

scylla (>=0.1.5, <=1.1.4) potentially affected by CVE-2026-37737 via sanic-cors (0.9.3)

sanic-cors PYPI version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - scylla =0.1.5, =1.1.4 Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

scylla (1.1.6) potentially affected by CVE-2026-37737 via sanic-cors (0.9.7)

sanic-cors PYPI version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - scylla 1.1.6 Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

networking-bagpipe (8.0.1), networking-baremetal (1.0.1) +1 more potentially affected by CVE-2026-50266 via neutron (12.1.1)

neutron PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 8.0.1 - networking-baremetal 1.0.1 - networking-mlnx 12.4.0 Source cves: CVE-2026-50266 Source advisory: OSV:PYSEC-2026-3491...

networking-bigswitch (>=15.0.0, <=15.0.2) potentially affected by CVE-2026-50266 via neutron (15.3.4)

neutron PYPI version 15.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bigswitch =15.0.0, =15.0.2 Source cves: CVE-2026-50266 Source advisory: OSV:PYSEC-2026-3491...

lmcache-vllm (>=0.6.1rc1, <=0.6.2.1) potentially affected by CVE-2026-10813 via lmcache (0.4.3)

lmcache PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on lmcache and may be impacted: - lmcache-vllm =0.6.1rc1, =0.6.2.1 Source cves: CVE-2026-10813 Source advisory: OSV:PYSEC-2026-3480...

a2 (>=0.1.0, <=0.3.17), acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=1.1.1rc4) +351 more potentially affected by CVE-2026-6657 via jupyter-server (>=1.13.2, <=2.17.0)

jupyter-server PYPI version =1.13.2, =0.1.0, =0.14.0.3rc1, =0.3.0, =0.1.0b0, =1.3.4, =0.18.3, =0.1.0, =0.1.0, =1.0.1, =0.2.2, =0.2.7 and more Source cves: CVE-2026-6657 Source advisory: OSV:PYSEC-2026-3472...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +551 more potentially affected by CVE-2026-73417 via jupyterlab (>=3.3.2, <=4.5.8)

jupyterlab PYPI version =3.3.2, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =0.1.0, =3.0.0, =4.33.0, =5.0.0 - arcor2-calibration 0.8.0 and more Source cves: CVE-2026-73417 Source advisory: SNYK:PYTHON-JUPYTERLAB-18233306...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +551 more potentially affected by CVE-2026-73417 via jupyterlab (>=3.3.2, <=4.5.8)

jupyterlab PYPI version =3.3.2, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =0.1.0, =3.0.0, =4.33.0, =5.0.0 - arcor2-calibration 0.8.0 and more Source cves: CVE-2026-73417 Source advisory: GHSA-PPPJ-HQ3G-57PJ...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +551 more potentially affected by CVE-2026-73417 via jupyterlab (>=3.3.2, <=4.5.8)

jupyterlab PYPI version =3.3.2, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =0.1.0, =3.0.0, =4.33.0, =5.0.0 - arcor2-calibration 0.8.0 and more Source cves: CVE-2026-73417 Source advisory: OSV:GHSA-PPPJ-HQ3G-57PJ...

crosscompute-analytics (0.9.4.9), db-classifier (0.0.2) +5 more potentially affected by CVE-2026-73415 via jupyterlab (3.6.3)

jupyterlab PYPI version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - crosscompute-analytics 0.9.4.9 - db-classifier 0.0.2 - pysailingvlm =1.0.0, =8.6.5, =1.4.0, =0.1.1rc1, =0.1.1147938789 Source cves:...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-73415 via jupyterlab (3.3.3)

jupyterlab PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

coiled-runtime (>=0.1.0, <=0.1.1), trubrics (0.0.2) potentially affected by CVE-2026-73415 via jupyterlab (3.4.2)

jupyterlab PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - coiled-runtime =0.1.0, =0.1.1 - trubrics 0.0.2 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) potentially affected by CVE-2026-73415 via jupyterlab (3.4.5)

jupyterlab PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.0.7 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

discretisedfield (>=0.8.14, <=0.11.1), micromagneticdata (>=0.3.2, <=0.5.1) +5 more potentially affected by CVE-2026-73415 via jupyterlab (2.2.0)

jupyterlab PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - discretisedfield =0.8.14, =0.3.2, =0.8.22, =0.1.6, =0.8.25, =0.3.0, =0.2.0, =0.6.1 Source cves: CVE-2026-73415 Source advisory:...

omolab-conf-analysis (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-73415 via jupyterlab (2.2.8)

jupyterlab PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - omolab-conf-analysis =0.0.1, =0.0.2 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

aalto-gpu (0.1.0), ballet-assemble (>=0.8.2, <=0.8.8) +41 more potentially affected by CVE-2026-73415 via jupyterlab (2.3.2)

jupyterlab PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - aalto-gpu 0.1.0 - ballet-assemble =0.8.2, =1.0.0rc1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =0.1.0, =0.0.2, =1.31.6, =0.1.0, =0.3.0, =0.3.0, =0.5.0...