aiomobilevikings (0.1.0), aiorobonect (>=1.1.0, <=1.1.3) +5 more potentially affected by CVE-2026-13346 via pip (24.1.2)

pip PYPI version 24.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aiomobilevikings 0.1.0 - aiorobonect =1.1.0, =0.4.0, =4.4.0, =2.0.0.post0, =2.0.2 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

uranium (>=0.2.23, <=0.2.34) potentially affected by CVE-2026-13346 via pip (7.1.2)

pip PYPI version 7.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - uranium =0.2.23, =0.2.34 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2026-13346 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

chalice (>=1.6.2, <=1.8.0), commit-helper (3.4.13) +6 more potentially affected by CVE-2026-13346 via pip (18.1.0)

pip PYPI version 18.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.6.2, =0.1.6, =0.0.3, =3.2.0, =4.0.0 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2106 more potentially affected by CVE-2026-16729 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2026-16729 Source advisory: SNYK:JS-UNDICI-18426061...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +906 more potentially affected by CVE-2026-16729 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.1 - @agnocon/connector-http 0.1.0 - @agnocon/piece-http 0.11.16 and more Source cves: CVE-2026-16729...

3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1094 more potentially affected by CVE-2026-16729 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.8, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-16729 Source...

cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2026-13346 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

animo-trainer (1.0.2), build-harness (1.0.1) +16 more potentially affected by CVE-2026-13346 via pip (22.0.4)

pip PYPI version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - animo-trainer 1.0.2 - build-harness 1.0.1 - cacheback2 0.0.5 - cdp-connector =1.0.0, =1.26.6, =1.2.3, =2022.3.0b0, =2022.3.0b0, =0.4.0rc0, =0.6.16,...

aider-chat (0.82.3), aird (0.2.0) +7 more potentially affected by CVE-2026-13346 via pip (25.1.1)

pip PYPI version 25.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aider-chat 0.82.3 - aird 0.2.0 - anki-release =25.6.0b2, =0.8.0, =1.0.0, =1.0.0, =0.1.11, =0.1.12 Source cves: CVE-2026-13346 Source advisory:...

nexus-uploader (1.0.14), uranium (>=0.2.38, <=1.1.0) potentially affected by CVE-2026-13346 via pip (8.1.1)

pip PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - nexus-uploader 1.0.14 - uranium =0.2.38, =1.1.0 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

chalice (>=1.2.3, <=1.6.0), httptesting (>=1.0.1, <=1.0.2) +4 more potentially affected by CVE-2026-13346 via pip (10.0.1)

pip PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.2.3, =1.0.1, =4.0.0, =4.0.0, =4.0.1 - zerv 0.1.0 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

pycellfit (>=0.2.0, <=0.2.3) potentially affected by CVE-2026-13346 via pip (20.2.0)

pip PYPI version 20.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - pycellfit =0.2.0, =0.2.3 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

build-harness (0.2.1), c4v-py (>=0.1.0.dev2021118, <=0.1.0.dev202201291921) +34 more potentially affected by CVE-2026-13346 via pip (21.3.1)

pip PYPI version 21.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - build-harness 0.2.1 - c4v-py =0.1.0.dev2021118, =0.0.2a0, =0.9.2, =1.26.1, =0.5.0, =4.0.0, =22.16.0, =0.1.9, =0.2.12, =0.1.0, =0.0.57, =0.0.59 -...

geonode (>=4.0.0, <=4.0.0.post1), jpeglib (0.10.16) potentially affected by CVE-2026-13346 via pip (22.2.1)

pip PYPI version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - geonode =4.0.0, =4.0.0.post1 - jpeglib 0.10.16 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

agent-plugin-builder (>=0.1.0, <=0.6.0), aider-chat (>=0.68.0, <=0.72.3) +94 more potentially affected by CVE-2026-13346 via pip (24.3.1)

pip PYPI version 24.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agent-plugin-builder =0.1.0, =0.68.0, =0.2.0, =0.6.17, =0.3.6, =24.2.0, =0.1.3, =1.3.0, =0.1.13, =0.1.0, =5.3.0, =5.3.1 and more Source cves:...

bighummingbird (>=0.0.2024070102, <=0.0.2024072501) potentially affected by CVE-2026-13346 via pip (24.1.1)

pip PYPI version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - bighummingbird =0.0.2024070102, =0.0.2024072501 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

diacamma-asso (>=2.3.0.18070322, <=2.3.11.19062511), diacamma-financial (>=2.3.0.18072813, <=2.3.11.19062210) +8 more potentially affected by CVE-2026-13346 via pip (19.1.1)

pip PYPI version 19.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - diacamma-asso =2.3.0.18070322, =2.3.0.18072813, =2.3.0.18073020, =2.3.10.19052414, =2.3.4.19022609, =2.3.2.19022615, =2.3.0.18070322, =1.4.5, =2019.5.6,...

fastq-handler (>=0.1.0, <=0.2.0), findontime (>=0.1.0, <=0.2.71) potentially affected by CVE-2026-13346 via pip (21.2.3)

pip PYPI version 21.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - fastq-handler =0.1.0, =0.1.0, =0.2.71 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

aaanalysis (>=0.1.2, <=1.0.2), aadetools (>=0.0.3, <=0.0.5) +631 more potentially affected by CVE-2026-13346 via pip (>=1.5.6, <=26.1.2)

pip PYPI version =1.5.6, =0.1.2, =0.0.3, =0.5.14, =0.0.0, =0.1.1, =0.0.0, =0.2.1, =0.1.2, =0.0.1.dev0, =0.1.0, =0.1.10, =0.2.0, =0.68.0, =1.8.15, =1.19.0 and more Source cves: CVE-2026-13346 Source advisory: MEND:CVE-2026-13346...