3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1094 more potentially affected by CVE-2026-16728 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.8, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-16728 Source...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2106 more potentially affected by CVE-2026-16728 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2026-16728 Source advisory: SNYK:JS-UNDICI-18426063...

3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1094 more potentially affected by CVE-2026-14643 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.8, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-14643 Source...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +906 more potentially affected by CVE-2026-14643 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.1 - @agnocon/connector-http 0.1.0 - @agnocon/piece-http 0.11.16 and more Source cves: CVE-2026-14643...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +906 more potentially affected by CVE-2026-15157 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.1 - @agnocon/connector-http 0.1.0 - @agnocon/piece-http 0.11.16 and more Source cves: CVE-2026-15157...

3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1094 more potentially affected by CVE-2026-15157 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.8, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-15157 Source...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2106 more potentially affected by CVE-2026-15157 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2026-15157 Source advisory: SNYK:JS-UNDICI-18426067...

datanator-query-python (0.6.2), light-the-torch (>=0.5.0rc0, <=0.5.0) potentially affected by CVE-2026-13346 via pip (22.3.0)

pip PYPI version 22.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - datanator-query-python 0.6.2 - light-the-torch =0.5.0rc0, =0.5.0 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

actions-paket-test-vol1234 (>=0.0.0, <=0.0.13), aegea (>=0.0.0, <=4.5.1) +44 more potentially affected by CVE-2026-13346 via pip (>=26.0.0, <=26.1.2)

pip PYPI version =26.0.0, =0.0.0, =0.0.0, =1.1.0.dev20260322010408, =0.8.2, =0.0.1, =0.0.13, =0.1.0, =0.1.1 and more Source cves: CVE-2026-13346 Source advisory: GHSA-QWM4-QH6W-59XR...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-13346 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

aihandler (>=1.9.8, <=1.19.0), aiorobonect (>=0.2.3, <=0.2.5) +18 more potentially affected by CVE-2026-13346 via pip (23.1.2)

pip PYPI version 23.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aihandler =1.9.8, =0.2.3, =1.10.0, =2023.5.1, =1.29.0, =4.1.0, =2023.5.0b0, =2023.5.0b0, =0.7.3, =2.7.1, =2.7.7 - mqtt-hass-base 4.2.2 and more Source...

cfn-docgen (>=0.2.0, <=0.2.3), chalice (>=1.13.0, <=1.14.0) +8 more potentially affected by CVE-2026-13346 via pip (20.0.2)

pip PYPI version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cfn-docgen =0.2.0, =1.13.0, =0.2.0, =0.0.1, =0.8.2, =0.3.1, =0.0.16, =0.0.24 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

justuse (>=0.6.0, <=0.6.1) potentially affected by CVE-2026-13346 via pip (21.2.1)

pip PYPI version 21.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - justuse =0.6.0, =0.6.1 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

azure-arm-nb-extensions (>=0.0.1, <=0.0.2), cfn-docgen (>=0.0.1, <=0.1.4) +1 more potentially affected by CVE-2026-13346 via pip (20.2.3)

pip PYPI version 20.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - azure-arm-nb-extensions =0.0.1, =0.0.1, =0.0.8, =0.0.11 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

aima (2023.2.4), aiogram-inline-paginations (>=0.1.0, <=0.1.12) +84 more potentially affected by CVE-2026-13346 via pip (22.3.1)

pip PYPI version 22.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aima 2023.2.4 - aiogram-inline-paginations =0.1.0, =2022.11.0b1, =0.1.2, =0.1.2, =1.0.1, =0.1.1.1, =1.0.2, =0.10.0, =0.0.5, =0.0.0.2, =0.0.1.0 and more...

agave (>=0.1.8, <=0.2.2), argnorm (0.0.1rc1) +6 more potentially affected by CVE-2026-13346 via pip (21.2.4)

pip PYPI version 21.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.1.8, =0.2.1, =1.24.1, =0.1.6, =1.0.2, =0.1.0, =0.1.5 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

my-flask (2023.4.23), zonesmart-utils (>=0.4.0, <=0.4.1) potentially affected by CVE-2026-13346 via pip (23.0.0)

pip PYPI version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - my-flask 2023.4.23 - zonesmart-utils =0.4.0, =0.4.1 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

aihandler (1.9.7), airunner (>=1.9.4, <=1.9.5) potentially affected by CVE-2026-13346 via pip (23.1.0)

pip PYPI version 23.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aihandler 1.9.7 - airunner =1.9.4, =1.9.5 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

hyperpod-elastic-agent (>=1.1.0, <=1.1.3), jupyter-quant (>=2509.1.0, <=2510.1.0) +5 more potentially affected by CVE-2026-13346 via pip (25.2.0)

pip PYPI version 25.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - hyperpod-elastic-agent =1.1.0, =2509.1.0, =0.1.0, =0.20.0, =3.13.0, =3.13.0, =3.14.0 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2026-13346 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...