debpackager (>=0.1.0, <=0.2.1), freedom (>=0.0.0_21_g3038804_dirty, <=0.0.1) +6 more potentially affected by CVE-2026-54552 via sh (1.11.0)

sh PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - debpackager =0.1.0, =0.0.021g3038804dirty, =0.6.0, =0.0.0, =0.1.0, =0.9.1, =0.9.6 - xenon 0.3.3 Source cves: CVE-2026-54552 Source advisory:...

es-translator (>=1.0.2, <=1.2.1), mixbytes-tank (>=0.1.2.dev20190704124001, <=1.0.2) +1 more potentially affected by CVE-2026-54552 via sh (1.12.13)

sh PYPI version 1.12.13 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - es-translator =1.0.2, =0.1.2.dev20190704124001, =0.0.4, =0.1.0 Source cves: CVE-2026-54552 Source advisory: OSV:PYSEC-2026-3540...

adelecv (>=0.0.1, <=0.0.2), finegrained (0.1.0) potentially affected by CVE-2026-53656 via fiftyone (0.19.1)

fiftyone PYPI version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on fiftyone and may be impacted: - adelecv =0.0.1, =0.0.2 - finegrained 0.1.0 Source cves: CVE-2026-53656 Source advisory: OSV:PYSEC-2026-3465...

scepter (1.0.3) potentially affected by CVE-2026-10801 via ms-swift (2.2.5)

ms-swift PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on ms-swift and may be impacted: - scepter 1.0.3 Source cves: CVE-2026-10801 Source advisory: OSV:PYSEC-2026-3488...

ai.foxpay.api:foxpay-sdk (>=1.0, <=1.1), ai.ylyue:yue-library-auth-client (>=j8.2.2.0, <=2.1.0) +10390 more potentially affected by CVE-2026-16723 via com.alibaba:fastjson (>=1.2.68, <=1.2.83_noneautotype)

com.alibaba:fastjson MAVEN version =1.2.68, =1.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =1.0.0, =1.0.6, =1.0.7 and more Source cves: CVE-2026-16723 Source advisory: SNYK:JAVA-COMALIBABA-18296111...

ai.foxpay.api:foxpay-sdk (>=1.0, <=1.1), ai.ylyue:yue-library-auth-client (>=j8.2.2.0, <=2.1.0) +10404 more potentially affected by CVE-2026-16723 via com.alibaba:fastjson (>=1.2.68, <=1.2.84)

com.alibaba:fastjson MAVEN version =1.2.68, =1.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =1.0.0, =1.0.6, =1.0.7 and more Source cves: CVE-2026-16723 Source advisory: MEND:CVE-2026-16723...

@cognidesk/integration-ticketing-servicenow (>=0.0.4, <=0.0.6), @darthcav/ts-http-server (0.9.1) +16 more potentially affected by CVE-2026-7120 via @fastify/static (>=10.1.0, <=10.1.1)

@fastify/static NPM version =10.1.0, =0.0.4, =0.7.1, =3.1.17, =1.3.8, =4.11.0, =4.11.0, =4.11.0, =4.11.0, =4.11.0, =5.1.0, =6.5.2, =4.6.0, =4.8.4 and more Source cves: CVE-2026-7120 Source advisory: SNYK:JS-FASTIFYSTATIC-18233800...

@novemberfiveco/highvoltage-js (>=2.0.0-beta.0, <=2.0.3), @rajzik/danger-configuration (>=2.4.0, <=4.0.3) potentially affected by CVE-2026-16629 via danger (>=13.0.4, <=13.0.7)

danger NPM version =13.0.4, =2.0.0-beta.0, =2.4.0, =4.0.3 Source cves: CVE-2026-16629 Source advisory: GHSA-3X93-P86W-5JVH...

@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)

n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322069...

@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)

n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322068...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +550 more potentially affected by CVE-2026-73417 via jupyterlab (>=3.3.2, <=4.5.8)

jupyterlab PYPI version =3.3.2, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =0.1.0, =3.0.0, =4.33.0, =5.0.0 - arcor2-calibration 0.8.0 and more Source cves: CVE-2026-73417 Source advisory: SNYK:PYTHON-JUPYTERLAB-18233306...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +550 more potentially affected by CVE-2026-73417 via jupyterlab (>=3.3.2, <=4.5.8)

jupyterlab PYPI version =3.3.2, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =0.1.0, =3.0.0, =4.33.0, =5.0.0 - arcor2-calibration 0.8.0 and more Source cves: CVE-2026-73417 Source advisory: OSV:GHSA-PPPJ-HQ3G-57PJ...

georges (2023.1.0), georges-core (>=2023.1.0, <=2023.2.0) potentially affected by CVE-2026-73415 via jupyterlab (3.6.2)

jupyterlab PYPI version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - georges 2023.1.0 - georges-core =2023.1.0, =2023.2.0 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

muvimaker (0.3.0) potentially affected by CVE-2026-73415 via jupyterlab (3.2.5)

jupyterlab PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - muvimaker 0.3.0 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

ml-medic-kit (>=0.1.9, <=0.2.1) potentially affected by CVE-2026-73415 via jupyterlab (1.2.6)

jupyterlab PYPI version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ml-medic-kit =0.1.9, =0.2.1 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

atacworks (>=0.3.0, <=0.3.2) potentially affected by CVE-2026-73415 via jupyterlab (2.1.4)

jupyterlab PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks =0.3.0, =0.3.2 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

crosscompute-analytics (0.9.4.9), db-classifier (0.0.2) +5 more potentially affected by CVE-2026-73415 via jupyterlab (3.6.3)

jupyterlab PYPI version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - crosscompute-analytics 0.9.4.9 - db-classifier 0.0.2 - pysailingvlm =1.0.0, =8.6.5, =1.4.0, =0.1.1rc1, =0.1.1147938789 Source cves:...

scikit-blocks (0.0.1), scikit-lego (0.1.0) +1 more potentially affected by CVE-2026-73415 via jupyterlab (0.35.4)

jupyterlab PYPI version 0.35.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - scikit-blocks 0.0.1 - scikit-lego 0.1.0 - skillpub =0.2.41, =0.2.90 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

mmtfpyspark (0.2.7) potentially affected by CVE-2026-73415 via jupyterlab (0.34.6)

jupyterlab PYPI version 0.34.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - mmtfpyspark 0.2.7 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

cadlabs-ethereum-economic-model (0.0.2a0), nldi-el-serv (>=0.1.4, <=0.1.5) potentially affected by CVE-2026-73415 via jupyterlab (3.0.14)

jupyterlab PYPI version 3.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cadlabs-ethereum-economic-model 0.0.2a0 - nldi-el-serv =0.1.4, =0.1.5 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...