aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1439 more potentially affected by CVE-2025-64458 via django (>=5.2.0 <=5.2.7)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-64458 Source advisory: SNYK:PYTHON-DJANGO-13837025...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1439 more potentially affected by CVE-2025-64459 via django (>=5.2.0 <=5.2.7)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1439 more potentially affected by CVE-2025-64458 via django (>=5.2.0 <=5.2.7)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-64458 Source advisory: OSV:PYSEC-2025-107...

01os (>=0.0.1 <=0.0.14), advanced-research (>=0.1.0 <=0.2.2) +422 more potentially affected by unknown CVE via litellm (>=1.0.0 <=1.77.5)

litellm PYPI version =1.0.0, =0.0.1, =0.1.0, =0.4.0, =0.8.1, =0.1.0, =0.1.39, =0.2.1, =0.14.1a0, =0.1.0, =0.0.5, =0.3.1, =1.1.2, =1.4.3, =0.0.1, =0.1.0, =0.7.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-LITELLM-13803705...

abinitostudio (>=1.0.1 <=1.0.8), aicsshparam (>=0.0.6 <=0.0.12) +145 more potentially affected by CVE-2025-57107 via vtk (>=8.1.2 <=9.5.0)

vtk PYPI version =8.1.2, =1.0.1, =0.0.6, =0.1.8, =0.4.0, =0.13.1, =0.71.0, =0.2.0, =0.4.2, =2024.7.4, =0.0.4rc3, =0.2.5, =0.6.1, =1.0.0.0, =2.1.16 and more Source cves: CVE-2025-57107 Source advisory: OSV:PYSEC-2025-225...

builder-addon-pca (>=0.0.1 <=0.0.3), configparser-crypt (>=0.6.2 <=1.1.0) +5 more potentially affected by CVE-2025-63675 via cryptidy (=1.2.4)

cryptidy PYPI version =1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptidy and may be impacted: - builder-addon-pca =0.0.1, =0.6.2, =1.4.0, =0.2.0, =2.2.0rc6, =0.9.0, =0.0.4, =1.0.6 Source cves: CVE-2025-63675 Source advisory:...

alertwise (=1.0.0), amusing-app (>=0.1.0 <=0.4.3) +214 more potentially affected by CVE-2025-6176 via brotli (>=1.0.7 <=1.1.0)

brotli PYPI version =1.0.7, =0.1.0, =22.5.13, =2.4.11, =0.72.2, =1.1.3, =8.3.1, =16.0.1b2, =9.1.2, =0.0.1, =0.0.6 and more Source cves: CVE-2025-6176 Source advisory: SNYK:PYTHON-BROTLI-13821834...

adpred (=1.3.2), bacpipe (>=1.2.0 <=1.3.2.dev0) +14 more potentially affected by CVE-2025-12058 via keras (>=3.0.0 <=3.11.3)

keras PYPI version =3.0.0, =1.2.0, =0.1.0, =0.0.4, =0.4.7, =1.0.3, =0.0.28, =0.2.0, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.10.0 and more Source cves: CVE-2025-12058 Source advisory: SNYK:PYTHON-KERAS-13743411...

aa-rag (>=0.4.2 <=0.4.3), ab-auth-client-service (>=0.1.3 <=0.3.5) +1579 more potentially affected by CVE-2025-62727 via starlette (>=0.39.2 <=0.49.0)

starlette PYPI version =0.39.2, =0.4.2, =0.1.3, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1, =0.1.0, =0.1.1, =0.1.1, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.3 and more Source cves: CVE-2025-62727 Source advisory: OSV:GHSA-7F5H-V6XP-FCQ8...

Important Photon OS Security Update - PHSA-2025-5.0-0657

Updates of 'python3' packages of Photon OS have been released...

01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +2518 more potentially affected by CVE-2025-62708 via pypdf (>=3.10.0 <=6.1.1)

pypdf PYPI version =3.10.0, =0.0.5, =0.1.0, =0.0.1, =0.4.1, =0.3.6, =0.2.5, =0.0.2, =0.2.0, =1.2.27, =0.1.0, =0.6.0, =1.2.32, =2.0.2 and more Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +1993 more potentially affected by CVE-2025-62708 via pypdf (>=6.0.0 <=6.1.1)

pypdf PYPI version =6.0.0, =0.0.5, =0.1.0, =0.0.1, =0.4.1, =0.3.6, =0.2.5, =0.0.2, =0.2.0, =1.2.27, =0.1.0, =0.6.0, =1.2.32, =1.0.1, =0.2.5, =0.2.10 and more Source cves: CVE-2025-62708 Source advisory: SNYK:PYTHON-PYPDF-13658706...

aad-fastapi-dl37 (>=1.0.0 <=1.0.2), agentiq (>=1.2.0a20250730 <=1.2.0rc4) +207 more potentially affected by CVE-2025-62706 via authlib (>=1.0.0 <=1.6.4)

authlib PYPI version =1.0.0, =1.0.0, =1.2.0a20250730, =1.1.0, =1.2.0a20250730, =0.4.0, =0.1.0, =0.1.0a1, =1.2.0, =1.2.0a20250730, =1.2.0a20250730, =1.2.0a20250730, =1.2.0, =1.2.0a20250730, =1.2.0a20250730, =1.2.0a20250730, =1.2.0rc4 and more Source cves: CVE-2025-62706 Source advisory:...

aad-fastapi (>=1.0.0 <=1.1.2), aad-fastapi-dl37 (>=1.0.0 <=1.0.3) +266 more potentially affected by CVE-2025-61920 via authlib (>=0.10.0 <=1.6.4)

authlib PYPI version =0.10.0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =1.0.2, =1.2.0a20250730, =1.1.0, =1.2.0a20250730, =0.4.0, =0.1.0, =0.1.0a1, =1.2.0, =1.2.0a20250730, =1.2.0a20250730, =1.2.0a20250730, =1.2.0rc4 and more Source cves: CVE-2025-61920 Source advisory: OSV:GHSA-PQ5P-34CR-23V9...

GHSA-49G5-F6QW-8MM7 vulnerabilities

Vulnerabilities for packages: python...

GHSA-49G5-F6QW-8MM7 vulnerabilities

Vulnerabilities for packages: python...

agentics-py (>=0.0.0 <=0.0.5), agilerl (>=2.3.5 <=2.4.1.dev1) +16 more potentially affected by CVE-2025-59425 via vllm (>=0.10.0 <=0.10.2)

vllm PYPI version =0.10.0, =0.0.0, =2.3.5, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.5, =1.0.0, =0.2.4, =0.1.1, =0.1.2, =0.1.2, =0.1.0, =0.1.2 and more Source cves: CVE-2025-59425 Source advisory: SNYK:PYTHON-VLLM-13449923...

aiosftp (>=0.0.1 <=0.3.1), apt-mirror (>=1.0.0 <=16.0.0) +12 more potentially affected by unknown CVE via aioftp (>=0.16.0 <=0.26.2)

aioftp PYPI version =0.16.0, =0.0.1, =1.0.0, =0.1.2, =1.1.0b78, =5.5.1, =0.0.0, =0.10.0, =0.6.0, =0.1.0, =0.1.0, =0.6.1, =0.5.8, =1.0.0b2, =1.0.0b3 Source cves: unknown CVE Source advisory: SNYK:PYTHON-AIOFTP-13304441...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1436 more potentially affected by CVE-2025-59682 via django (>=5.2.0 <=5.2.6)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-59682 Source advisory: SNYK:PYTHON-DJANGO-13179425...

aldryn-django (>=4.2.10.0 <=4.2.18.0), alertwise (=1.0.0) +113 more potentially affected by CVE-2025-59681 via django (>=4.2.0 <=4.2.24)

django PYPI version =4.2.0, =4.2.10.0, =65.10.0, =7.5.1, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.8.0, =0.0.4.dev0, =8.0.0, =8.5.1 and more Source cves: CVE-2025-59681 Source advisory: SNYK:PYTHON-DJANGO-13179650...