@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by unknown CVE via @sveltejs/kit (>=2.0.0, <=2.67.0)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.1.0, =1.0.1-next.0, =1.0.10-next.0 and more Source cves: unknown CVE Source advisory: GHSA-WQJV-9729-C5Q2...

modin (0.6.0) potentially affected by CVE-2026-57516 via ray (0.7.3)

ray PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - modin 0.6.0 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

auto-augment (1.0.0), bio-pyminer (>=0.9.13, <=0.10.0) +3 more potentially affected by CVE-2026-57516 via ray (0.8.4)

ray PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - auto-augment 1.0.0 - bio-pyminer =0.9.13, =0.0.0, =0.4.7, =0.4.9 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

connector-db-tools (0.0.1), pdf2dataset (>=0.1.0, <=0.4.0a1) +1 more potentially affected by CVE-2026-57516 via ray (0.8.6)

ray PYPI version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - connector-db-tools 0.0.1 - pdf2dataset =0.1.0, =0.4.10, =0.4.11 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

modin (0.1.2) potentially affected by CVE-2026-57516 via ray (0.5.2)

ray PYPI version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - modin 0.1.2 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

pydgn (>=0.5.0, <=1.2.6), raylab (0.16.0) potentially affected by CVE-2026-57516 via ray (1.5.2)

ray PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - pydgn =0.5.0, =1.2.6 - raylab 0.16.0 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

@enbi/auth (>=0.1.0, <=0.11.0), @enbi/cli (>=0.1.0, <=0.11.0) +2 more potentially affected by CVE-2026-67327 via better-auth (>=1.7.0-beta.0, <=1.7.0-beta.9)

better-auth NPM version =1.7.0-beta.0, =0.1.0, =0.1.0, =0.1.0, =1.7.0-beta.0, =1.7.0-beta.9 Source cves: CVE-2026-67327 Source advisory: OSV:GHSA-QQ9H-G4JM-XGF3...

axolotl (>=0.18.0, <=0.20.0), clawperf (>=0.1.0, <=0.6.1) +22 more potentially affected by CVE-2026-66007 via datasets (4.8.4)

datasets PYPI version 4.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - axolotl =0.18.0, =0.1.0, =3.2.0, =0.5.0rc0, =0.1.18, =1.0.0, =2.0.0, =0.3.0, =0.3.0, =0.4.1, =0.1.0, =0.1.1 and more Source cves: CVE-2026-66007...

bcembedding (0.0.4), pydparser (1.0.4) potentially affected by CVE-2026-66007 via datasets (2.16.0)

datasets PYPI version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - bcembedding 0.0.4 - pydparser 1.0.4 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

africanwhisper (>=0.2.1, <=0.2.5), audioaugmentor (>=0.0.1, <=0.1.1) +8 more potentially affected by CVE-2026-66007 via datasets (2.17.1)

datasets PYPI version 2.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - africanwhisper =0.2.1, =0.0.1, =0.0.1, =0.1.3, =1.0.2, =1.1.0, =0.1.0, =0.1.4 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6...

medcat (>=1.0.25, <=1.1.3), medflux (>=0.0.1, <=0.1.2) +2 more potentially affected by CVE-2026-66007 via datasets (1.6.2)

datasets PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - medcat =1.0.25, =0.0.1, =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

deepfabric (>=2.9.0, <=2.14.1), explainbench-cli (0.1.0) +1 more potentially affected by CVE-2026-66007 via datasets (4.2.0)

datasets PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - deepfabric =2.9.0, =0.1.0, =0.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

fashion-clip (>=0.1.1, <=0.1.2), parallel-corpus-mnbvc (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-66007 via datasets (2.10.0)

datasets PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - fashion-clip =0.1.1, =1.0.0, =1.0.8 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

atomgit (>=1.0.5, <=1.0.9), axolotl (0.13.0.dev0) +6 more potentially affected by CVE-2026-66007 via datasets (4.4.1)

datasets PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - atomgit =1.0.5, =0.1.0, =0.1.0, =0.0.11, =0.9.0, =0.9.0.4 - multimodal-parsers 0.1.6 - shifaa 0.1.0 Source cves: CVE-2026-66007 Source advisory:...

africanwhisper (>=0.2.6, <=0.2.9), algorin-cli (>=0.0.1, <=0.21.0) +35 more potentially affected by CVE-2026-66007 via datasets (2.18.0)

datasets PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - africanwhisper =0.2.6, =0.0.1, =0.2.0, =0.1.4, =1.0.0, =0.1.1, =0.5.4, =0.1.0, =0.0.2, =1.35.2, =0.1.0, =0.1.4 and more Source cves:...

biome-text (3.0.0), gradsflow (>=0.0.1b1, <=0.0.3) +6 more potentially affected by CVE-2026-66007 via datasets (1.2.1)

datasets PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - biome-text 3.0.0 - gradsflow =0.0.1b1, =0.1.0, =0.2.13, =0.3.0a1, =0.3.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

azureml-evaluate-mlflow (>=0.0.4, <=0.0.15), datati (>=0.0.26, <=0.1.0) +5 more potentially affected by CVE-2026-66007 via datasets (2.11.0)

datasets PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - azureml-evaluate-mlflow =0.0.4, =0.0.26, =0.0.0a0, =0.1.0, =0.2.0 - py-data-modori 0.1.0 - waffle-hub 0.1.9 Source cves: CVE-2026-66007 Source...

azureml-automl-dnn-nlp (1.55.0), azureml-evaluate-mlflow (>=0.0.16, <=0.0.25) +28 more potentially affected by CVE-2026-66007 via datasets (2.16.1)

datasets PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - azureml-automl-dnn-nlp 1.55.0 - azureml-evaluate-mlflow =0.0.16, =1.0.5, =0.0.5, =1.2.6, =1.0.0, =1.0.0, =0.9.0.13, =0.9.0, =1.0.0.dev0, =0.0.1...

classy-core (>=0.1.0.dev20211019, <=0.2.1), gperc (>=0.6.0, <=0.7.0) +3 more potentially affected by CVE-2026-66007 via datasets (1.12.1)

datasets PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - classy-core =0.1.0.dev20211019, =0.6.0, =0.2.2, =0.1.3, =0.1.8 - paoding 0.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

easy-transformers (0.17.0), feedbackqa-bart (>=0.1.0rc1, <=0.1.0rc2) +2 more potentially affected by CVE-2026-66007 via datasets (2.2.1)

datasets PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - easy-transformers 0.17.0 - feedbackqa-bart =0.1.0rc1, =1.1.0, =1.7.0, =1.7.2 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...