ai-shell (>=0.1.0, <=1.0.4), airut (>=0.25.5, <=0.27.0) +141 more potentially affected by CVE-2026-59922 via mistune (>=3.0.0rc5, <=3.2.1)

mistune PYPI version =3.0.0rc5, =0.1.0, =0.25.5, =0.9.5, =3.0.0rc3, =3.2.1b1, =1.0.1, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.2, =1.0.0.1, =0.0.1, =0.1.10, =0.1.20 and more Source cves: CVE-2026-59922 Source advisory: GHSA-C8J7-8CV4-2XMQ...

animalia (>=0.0.27, <=0.0.28), appyratus (>=3.0.3, <=3.0.4) +32 more potentially affected by CVE-2026-59926 via mistune (2.0.0rc1)

mistune PYPI version 2.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - animalia =0.0.27, =3.0.3, =0.1.0, =0.11.0, =0.20.7, =0.0.5, =0.0.13, =1.0.18, =0.0.1, =0.1.3 - datapackage-pipelines-spss 0.0.2a0 - embryo 3.0....

alphapulldown (>=0.21.2, <=0.30.7), arisu (>=0.1.1, <=0.1.2) +51 more potentially affected by CVE-2026-59926 via mistune (2.1.0)

mistune PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - alphapulldown =0.21.2, =0.1.1, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =4.2.93, =2.0.4, =5.2.0a0, =0.0.1, =3.7.1, =0.8.0, =0.8.5 and more Source cves:...

pyne-xmas-elves (>=0.4.0, <=0.7.1), tagy (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-59927 via mistune (0.8.1)

mistune PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - pyne-xmas-elves =0.4.0, =0.2.0, =0.3.0 Source cves: CVE-2026-59927 Source advisory: OSV:GHSA-8MPJ-M6QM-5QR8...

cfnow (>=0.0.1, <=0.0.6), coreplus (0.1.0) +20 more potentially affected by CVE-2026-59928 via mistune (2.0.4)

mistune PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - cfnow =0.0.1, =0.1.1rc3, =0.1.0, =1.4.0, =4.0.2, =2.2.1, =0.1.0, =0.1.0, =0.0.3, =1.0.4, =1.0.7 and more Source cves: CVE-2026-59928 Source...

alphapulldown (>=0.21.2, <=0.30.7), arisu (>=0.1.1, <=0.1.2) +51 more potentially affected by CVE-2026-59928 via mistune (2.1.0)

mistune PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - alphapulldown =0.21.2, =0.1.1, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =4.2.93, =2.0.4, =5.2.0a0, =0.0.1, =3.7.1, =0.8.0, =0.8.5 and more Source cves:...

@adobe/helix-docx2md (1.9.29), @adobe/helix-importer (>=3.4.141, <=3.4.143) +33 more potentially affected by CVE-2026-59868 via js-yaml (>=5.0.0, <=5.1.0)

js-yaml NPM version =5.0.0, =3.4.141, =2.2.62, =1.0.8, =0.2.12, =0.2.12, =0.2.12, =0.2.13, =0.2.12, =0.2.16, =0.2.14, =0.2.12, =0.2.17 and more Source cves: CVE-2026-59868 Source advisory: OSV:GHSA-G796-FGMG-93MV...

@adobe/helix-docx2md (1.9.29), @adobe/helix-importer (>=3.4.141, <=3.4.143) +33 more potentially affected by CVE-2026-59868 via js-yaml (>=5.0.0, <=5.1.0)

js-yaml NPM version =5.0.0, =3.4.141, =2.2.62, =1.0.8, =0.2.12, =0.2.12, =0.2.12, =0.2.13, =0.2.12, =0.2.16, =0.2.14, =0.2.12, =0.2.17 and more Source cves: CVE-2026-59868 Source advisory: GHSA-G796-FGMG-93MV...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21421 more potentially affected by CVE-2026-59869 via js-yaml (>=3.0.0, <=3.14.2)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-59869 Source advisory: GHSA-52CP-R559-CP3M...

02.aula (1.0.0), 0xrtest (1.0.0) +10444 more potentially affected by CVE-2026-59869 via js-yaml (>=4.0.0, <=4.2.0)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.14.0 and more Source cves: CVE-2026-59869 Source advisory: OSV:GHSA-52CP-R559-CP3M...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21421 more potentially affected by CVE-2026-59869 via js-yaml (>=3.0.0, <=3.14.2)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-59869 Source advisory: OSV:GHSA-52CP-R559-CP3M...

@adobe/aem-cli (>=16.21.1, <=16.21.2), @adobe/helix-docx2md (>=1.9.29, <=1.9.30) +49 more potentially affected by CVE-2026-59870 via js-yaml (>=5.0.0, <=5.2.0)

js-yaml NPM version =5.0.0, =16.21.1, =1.9.29, =3.4.141, =7.1.20, =2.2.62, =1.5.3, =1.0.8, =0.0.0-next-20260630092247, =0.0.0-next-20260630092247, =0.0.0-next-20260630092247, =0.0.0-next-20260824173136 and more Source cves: CVE-2026-59870 Source advisory: OSV:GHSA-724G-MXRG-4QVM...

altair-images (>=0.1.0, <=0.1.4), colorizexl (>=0.0.1, <=0.2.1) +13 more potentially affected by CVE-2026-55798 via pillow (7.1.1)

pillow PYPI version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - altair-images =0.1.0, =0.0.1, =0.0.5, =0.6.0.post3, =0.4.3, =0.6.18, =1.0.4, =0.0.95, =0.4.1.post1, =0.1.1, =0.0.1, =0.3.0, =1.3.0, =0.2.5, =0.2.6...

sphinxmark (0.1.15) potentially affected by CVE-2026-55798 via pillow (3.4.1)

pillow PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - sphinxmark 0.1.15 Source cves: CVE-2026-55798 Source advisory: OSV:GHSA-4X4J-2G7C-83W6...

ayab (0.9.0), distribusi (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-55798 via pillow (4.1.0)

pillow PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - ayab 0.9.0 - distribusi =0.0.2, =0.0.4 Source cves: CVE-2026-55798 Source advisory: OSV:GHSA-4X4J-2G7C-83W6...

banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +64 more potentially affected by CVE-2026-55798 via pillow (4.3.0)

pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...

blockies (0.0.2), cdt-test (>=0.1.0, <=0.1.7) +33 more potentially affected by CVE-2026-55798 via pillow (6.1.0)

pillow PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - blockies 0.0.2 - cdt-test =0.1.0, =1.1.0, =0.3.0, =0.1.0, =0.1.3, =0.1.2, =0.0.2, =1.1.0, =0.9.939.507, =0.9.939.518 - happy-tree-gallery 0.8.0 and...

abraia (>=0.8.10, <=0.9.2), adamapi (>=2.1.0, <=2.2.0) +128 more potentially affected by CVE-2026-55798 via pillow (8.3.2)

pillow PYPI version 8.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abraia =0.8.10, =2.1.0, =1.1.3, =1.5.0, =0.0.25, =0.2.2, =0.0.2a2, =1.4.0, =0.2.2, =0.0.1, =0.2.1b20210731, =0.2.1b20210731, =0.3.2b20211206 and mor...

adaptgym (>=0.1.0, <=0.1.2), agave-pyclient (>=1.0.0, <=1.1.2) +138 more potentially affected by CVE-2026-55798 via pillow (8.2.0)

pillow PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adaptgym =0.1.0, =1.0.0, =1.1.5, =1.2.3, =0.0.21, =1.0.1, =0.0.7, =0.15.0, =0.14.0, =0.3.0, =0.4.0 - arcor2-dobot 0.2.3 - arcor2-execution 0.16.0 -...

170051277-trab-final-gces (>=0.3.0, <=0.5.0), 2022-2-gces-ifpf (0.3.0) +1333 more potentially affected by CVE-2026-55798 via pillow (9.5.0)

pillow PYPI version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 170051277-trab-final-gces =0.3.0, =0.1.0, =0.1.0, =2.0.1, =0.1.4, =1.2.5, =0.1.0, =1.2.0, =1.10.3, =0.61.9b59, =1.3.1 and more Source cves:...