aioiliad (0.3.1), ansible-playbook-grapher (>=0.8.0, <=0.9.2) +23 more potentially affected by CVE-2026-41066 via lxml (4.2.5)

lxml PYPI version 4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - aioiliad 0.3.1 - ansible-playbook-grapher =0.8.0, =4.4.1, =0.3.2, =1.2.0, =1.0.0a201811211534, =0.4.1, =0.3.0, =0.9.0, =0.1.1, =1.0.0, =1.0.2 and more...

exchangerates (>=0.3.0, <=0.3.1), lolcomicgrabber (>=0.0.1, <=0.0.3) +4 more potentially affected by CVE-2026-41066 via lxml (4.4.0)

lxml PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - exchangerates =0.3.0, =0.0.1, =0.0.1b1, =0.1.0, =0.2.1 Source cves: CVE-2026-41066 Source advisory: OSV:GHSA-VFMQ-68HX-4JFW...

EUVD-2026-23803

A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extractwithbs4/extractwith3k/extractwithlxml of the file superagi/helper/webpageextractor.py of the component WebScraperTool. Such manipulation leads to server-side request forgery. I...

CVE-2026-6616

A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extractwithbs4/extractwith3k/extractwithlxml of the file superagi/helper/webpageextractor.py of the component WebScraperTool. Such manipulation leads to server-side request forgery. I...

CVE-2026-6616 TransformerOptimus SuperAGI WebScraperTool webpage_extractor.py extract_with_lxml server-side request forgery

A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extractwithbs4/extractwith3k/extractwithlxml of the file superagi/helper/webpageextractor.py of the component WebScraperTool. Such manipulation leads to server-side request forgery. I...

CVE-2026-6616

TransformerOptimus SuperAGI up to version 0.0.14 contains a server-side request forgery in the WebScraperTool’s webpage_extractor.py, affecting functions extract_with_bs4, extract_with_3k, and extract_with_lxml. The issue arises in superagi/helper/webpage_extractor.py and is exploitable remotely;...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-41314 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-41314 Source advisory: OSV:GHSA-X284-J5P8-9C5P...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-41313 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-41313 Source advisory: OSV:GHSA-4PXV-J86V-MHCW...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-41312 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-41312 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-41312 Source advisory: OSV:GHSA-7GW9-CF7V-778F...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-41168 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-41168 Source advisory: OSV:GHSA-JJ6C-8H6C-HPPX...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, dynamic-localpv-provisioner, nsc, opencost, victoriametrics-operator, wgcf, gitlab-kas, helm-mapkubeapis, flux-helm-controller, kyverno-notation-aws, spicedb-operator, rancher-telemetry, aws-flb-firehose, go-licenses, flux, mailpit,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, dynamic-localpv-provisioner, nsc, opencost, victoriametrics-operator, wgcf, gitlab-kas, helm-mapkubeapis, flux-helm-controller, kyverno-notation-aws, spicedb-operator, rancher-telemetry, aws-flb-firehose, go-licenses, flux, mailpit,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, linkerd2-fips, harbor, consul-k8s-fips, rabbitmq-default-user-credential-updater-fips, actions-runner-controller, aws-network-policy-agent-fips, percona-xtradb-cluster-operator-fips, kubevirt-cdi-operator, kubevirt-cdi-operator-fips, databricks-cli-fips...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-40260 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-40260 Source advisory: OSV:GHSA-3CRG-W4F6-42MX...

CLEANSTART-2026-PS51260 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.2.2-r0, 1.2.2-r1

Multiple security vulnerabilities affect the kubernetes-dashboard-metrics-scraper package. These issues are resolved in later releases. See references for individual vulnerability details...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-33699 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-33699 Source advisory: OSV:GHSA-87MJ-5GGW-8QC3...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-33123 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-33123 Source advisory: OSV:GHSA-QPXP-75PX-XJCP...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-31826 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-31826 Source advisory: OSV:GHSA-HQMH-PPP3-XVM7...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-28804 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-28804 Source advisory: OSV:GHSA-9M86-7PMV-2852...