bighummingbird (>=0.0.2024070102, <=0.0.2024072501) potentially affected by CVE-2026-13346 via pip (24.1.1)

pip PYPI version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - bighummingbird =0.0.2024070102, =0.0.2024072501 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

chalice (1.12.0), commandfrog (>=0.2.1, <=0.3.1) +12 more potentially affected by CVE-2026-13346 via pip (19.3.1)

pip PYPI version 19.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice 1.12.0 - commandfrog =0.2.1, =0.1.0, =0.8.1, =0.4.11, =0.0.3, =2.4.0.19073113, =0.0.1, =2019.10.25, =0.0.1a0, =0.1.1, =0.1.2 - smartleia 1.0.1...

aider-chat (>=0.73.0, <=0.74.2), contextualize (>=0.0.4, <=0.0.5) +2 more potentially affected by CVE-2026-13346 via pip (25.0.0)

pip PYPI version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aider-chat =0.73.0, =0.0.4, =0.1.7, =0.1.8 - opentips 1.0.0 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

oriole-test (0.2.2) potentially affected by CVE-2026-13346 via pip (9.0.2)

pip PYPI version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - oriole-test 0.2.2 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2026-13346 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

hyperpod-elastic-agent (>=1.1.0, <=1.1.3), jupyter-quant (>=2509.1.0, <=2510.1.0) +5 more potentially affected by CVE-2026-13346 via pip (25.2.0)

pip PYPI version 25.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - hyperpod-elastic-agent =1.1.0, =2509.1.0, =0.1.0, =0.20.0, =3.13.0, =3.13.0, =3.14.0 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

agent-plugin-builder (>=0.1.0, <=0.6.0), aider-chat (>=0.68.0, <=0.72.3) +94 more potentially affected by CVE-2026-13346 via pip (24.3.1)

pip PYPI version 24.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agent-plugin-builder =0.1.0, =0.68.0, =0.2.0, =0.6.17, =0.3.6, =24.2.0, =0.1.3, =1.3.0, =0.1.13, =0.1.0, =5.3.0, =5.3.1 and more Source cves:...

chalice (>=1.2.3, <=1.6.0), httptesting (>=1.0.1, <=1.0.2) +4 more potentially affected by CVE-2026-13346 via pip (10.0.1)

pip PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.2.3, =1.0.1, =4.0.0, =4.0.0, =4.0.1 - zerv 0.1.0 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

aaanalysis (>=0.1.2, <=1.0.2), aadetools (>=0.0.3, <=0.0.5) +631 more potentially affected by CVE-2026-13346 via pip (>=1.5.6, <=26.1.2)

pip PYPI version =1.5.6, =0.1.2, =0.0.3, =0.5.14, =0.0.0, =0.1.1, =0.0.0, =0.2.1, =0.1.2, =0.0.1.dev0, =0.1.0, =0.1.10, =0.2.0, =0.68.0, =1.8.15, =1.19.0 and more Source cves: CVE-2026-13346 Source advisory: MEND:CVE-2026-13346...

3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1079 more potentially affected by CVE-2026-13697 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.8, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-13697 Source...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +903 more potentially affected by CVE-2026-13697 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.1 - @agnocon/connector-http 0.1.0 and more Source cves: CVE-2026-13697 Source advisory:...

@aulazero/task (>=0.0.1, <=0.7.2), @aulazero/task-2 (>=2.0.1, <=2.0.5) +278 more potentially affected by CVE-2025-29049 +1 more via mathlive (>=0.25.0, <=0.109.2)

mathlive NPM version =0.25.0, =0.0.1, =2.0.1, =1.17.3, =0.2.6, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.20.0, =11.25.1, =1.0.0, =0.1.0, =0.1.0-alpha.1, =0.2.41 and more Source cves: CVE-2025-29049, CVE-2026-54705 Source advisory: SNYK:JS-MATHLIVE-18508174...

@aulazero/task (>=0.0.1, <=0.7.2), @aulazero/task-2 (>=2.0.1, <=2.0.5) +278 more potentially affected by CVE-2026-54705 via mathlive (>=0.25.0, <=0.109.2)

mathlive NPM version =0.25.0, =0.0.1, =2.0.1, =1.17.3, =0.2.6, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.20.0, =11.25.1, =1.0.0, =0.1.0, =0.1.0-alpha.1, =0.2.41 and more Source cves: CVE-2026-54705 Source advisory: OSV:GHSA-FM7P-GW32-828P...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.5.0, <=0.6.1) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.6.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.5.0, =0.6...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=1.0.0, <=1.1.1) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.12.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =1.0.0,...

io.honeycomb:honeycomb-opentelemetry-javaagent (1.4.2) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.22.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 1.4.2 Sourc...

org.hypertrace.agent:javaagent (>=1.3.0, <=1.3.11) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.24.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent =1.3.0, =1.3.11 Source cves...

io.honeycomb:honeycomb-opentelemetry-javaagent (1.7.0) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 1.7.0 Sourc...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.8.1, <=0.9.0) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.9.2)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.8.1, =0.9...

io.honeycomb:honeycomb-opentelemetry-javaagent (0.10.0), org.hypertrace.agent:javaagent (>=1.2.3, <=1.2.6) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.11.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent 0.10.0 -...