criscostack (1.0.0), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-24688 via pypdf (3.9.1)

pypdf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - criscostack 1.0.0 - neumai =0.0.9, =0.0.17, =2023.6.0, =2024.4.0 Source cves: CVE-2026-24688 Source advisory: OSV:PYSEC-2026-1827...

python-dev-tools (>=2019.8.16, <=2019.8.19), styletransfer (>=0.8.0, <=0.8.2) potentially affected by CVE-2025-71176 via pytest (5.1.0)

pytest PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - python-dev-tools =2019.8.16, =0.8.0, =0.8.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

c2cwsgiutils (0.28.0), chispa (0.2.0) +2 more potentially affected by CVE-2025-71176 via pytest (3.2.2)

pytest PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - c2cwsgiutils 0.28.0 - chispa 0.2.0 - nxviz =0.3.2, =0.1.0, =0.2.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

dostoevsky (>=0.2.0, <=0.2.1), pytest-gherkin (>=0.1.4, <=0.1.6) +1 more potentially affected by CVE-2025-71176 via pytest (5.0.0)

pytest PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - dostoevsky =0.2.0, =0.1.4, =2019.6.29, =2019.7.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

ftw (>=1.2.3, <=1.2.4), python-dev-tools (2019.6.2) potentially affected by CVE-2025-71176 via pytest (4.6.0)

pytest PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - ftw =1.2.3, =1.2.4 - python-dev-tools 2019.6.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

bolinette (>=0.0.12, <=0.0.19), mlbackend (0.0.3) +6 more potentially affected by CVE-2025-71176 via pytest (5.3.1)

pytest PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bolinette =0.0.12, =0.0.2, =1.0.0, =2019.11.27, =0.0.12, =2019.12.13.0, =1.2.1, =1.2.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1...

alfrodull (0.1.0), bcdc-apitests (>=0.2.0, <=1.0.4) +4 more potentially affected by CVE-2025-71176 via pytest (4.6.2)

pytest PYPI version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - alfrodull 0.1.0 - bcdc-apitests =0.2.0, =0.2.6, =2019.6.4, =1.0.1, =1.0.7 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

mask-anonymization-framework (>=1.2.0, <=1.3.2), python-dev-tools (2019.8.24) +2 more potentially affected by CVE-2025-71176 via pytest (5.1.1)

pytest PYPI version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mask-anonymization-framework =1.2.0, =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

folio-migration-tools (>=1.0.2, <=1.1.4), json2xml (>=3.10.0rc1, <=3.10.0) potentially affected by CVE-2025-71176 via pytest (7.0.0rc1)

pytest PYPI version 7.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - folio-migration-tools =1.0.2, =3.10.0rc1, =3.10.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

criscostack (1.0.0), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-22690 via pypdf (3.9.1)

pypdf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - criscostack 1.0.0 - neumai =0.0.9, =0.0.17, =2023.6.0, =2024.4.0 Source cves: CVE-2026-22690 Source advisory: OSV:PYSEC-2026-1829...

oarepo (>=9.0.10, <=9.0.16), spatial-networks (>=0.0.4, <=0.0.7) +1 more potentially affected by CVE-2025-53000 via nbconvert (6.5.3)

nbconvert PYPI version 6.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - oarepo =9.0.10, =0.0.4, =0.0.7 - testing-tools 0.0.1 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

amundsen-metadata (>=1.0.18, <=2.5.4), amundsen-search (>=2.4.1, <=2.5.1) +8 more potentially affected by CVE-2025-66221 via werkzeug (0.15.3)

werkzeug PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - amundsen-metadata =1.0.18, =2.4.1, =0.0.1, =0.0.6, =0.9.94, =0.0.1, =0.0.1, =0.0.1, =0.1.2 Source cves: CVE-2025-66221 Source advisory:...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2025-8869 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

python-dev-tools (>=2019.8.14, <=2019.8.24) potentially affected by CVE-2025-8869 via pip (19.2.2)

pip PYPI version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.8.14, =2019.8.24 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2025-8869 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

bq-jobrunner (0.0.1), libp2p (>=0.1.1, <=0.1.2) +6 more potentially affected by CVE-2025-4565 via protobuf (3.9.0)

protobuf PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bq-jobrunner 0.0.1 - libp2p =0.1.1, =1.0.6, =0.0.20, =0.1.0a31, =1.2.0rc2, =1.2.0rc3, =1.2.0 Source cves: CVE-2025-4565 Source advisory:...

aileen (>=0.2.0.dev20181221, <=0.2.1), scdna-replication-tools (0.0.1) potentially affected by CVE-2026-53877 via django (1.11.16)

django PYPI version 1.11.16 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aileen =0.2.0.dev20181221, =0.2.1 - scdna-replication-tools 0.0.1 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

amundsen-metadata (>=1.0.18, <=2.5.4), amundsen-search (>=2.4.1, <=2.5.1) +8 more potentially affected by CVE-2024-49766 via werkzeug (0.15.3)

werkzeug PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - amundsen-metadata =1.0.18, =2.4.1, =0.0.1, =0.0.6, =0.9.94, =0.0.1, =0.0.1, =0.0.1, =0.1.2 Source cves: CVE-2024-49766 Source advisory:...

aileen (>=0.2.0.dev20181221, <=0.2.1), scdna-replication-tools (0.0.1) potentially affected by CVE-2024-45231 via django (1.11.16)

django PYPI version 1.11.16 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aileen =0.2.0.dev20181221, =0.2.1 - scdna-replication-tools 0.0.1 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

PYSEC-2026-1266 Composio Code Injection Vulnerability

A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. Affected by this vulnerability is the function Calculator of the file python/composio/tools/local/mathematical/actions/calculator.py. The manipulation leads to code injection. The exploit has been...