botstory (>=0.0.33, <=0.0.37) potentially affected by CVE-2025-69223 via aiohttp (1.1.1)

aiohttp PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory =0.0.33, =0.0.37 Source cves: CVE-2025-69223 Source advisory: OSV:PYSEC-2026-1101...

hassmart-homeassistant (>=0.59.2, <=0.59.2.1), homeassistant (>=0.59.0, <=0.59.2) potentially affected by CVE-2025-69223 via aiohttp (2.3.5)

aiohttp PYPI version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hassmart-homeassistant =0.59.2, =0.59.0, =0.59.2 Source cves: CVE-2025-69223 Source advisory: OSV:PYSEC-2026-1101...

homeassistant (>=0.42.0, <=0.42.3) potentially affected by CVE-2025-69223 via aiohttp (2.0.5)

aiohttp PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - homeassistant =0.42.0, =0.42.3 Source cves: CVE-2025-69223 Source advisory: OSV:PYSEC-2026-1101...

botstory (0.0.63) potentially affected by CVE-2025-69223 via aiohttp (2.0.1)

aiohttp PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory 0.0.63 Source cves: CVE-2025-69223 Source advisory: OSV:PYSEC-2026-1101...

guillotina-s3storage (>=1.0.31, <=1.0.34) potentially affected by CVE-2025-69223 via aiohttp (2.3.0a4)

aiohttp PYPI version 2.3.0a4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - guillotina-s3storage =1.0.31, =1.0.34 Source cves: CVE-2025-69223 Source advisory: OSV:PYSEC-2026-1101...

elemeno-ai-sdk (>=0.0.5, <=0.6.11), elemeno-mlops-cli (>=0.0.1, <=0.0.4) +22 more potentially affected by CVE-2025-11157 via feast (>=0.9.3, <=0.49.0)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.3.0, =0.1.0rc3, =0.0.2, =1.0.0, =0.1.0, =0.1.33.dev3, =0.1.0, =0.6.19 and more Source cves: CVE-2025-11157 Source advisory: OSV:PYSEC-2026-1366...

fauxmo (>=0.1.0, <=0.3.2) potentially affected by CVE-2025-65713 via homeassistant (0.10.1)

homeassistant PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - fauxmo =0.1.0, =0.3.2 Source cves: CVE-2025-65713 Source advisory: OSV:PYSEC-2026-1454...

okami (0.1.5) potentially affected by CVE-2025-69223 via aiohttp (2.0.3)

aiohttp PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - okami 0.1.5 Source cves: CVE-2025-69223 Source advisory: OSV:PYSEC-2026-1101...

homeassistant-stubs (2021.10.1) potentially affected by CVE-2025-65713 via homeassistant (2021.10.1)

homeassistant PYPI version 2021.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.10.1 Source cves: CVE-2025-65713 Source advisory: OSV:PYSEC-2026-1454...

pug-nlp (>=0.1.6, <=0.1.14), twip (0.0.6) potentially affected by CVE-2025-53000 via nbconvert (4.2.0)

nbconvert PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - pug-nlp =0.1.6, =0.1.14 - twip 0.0.6 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

azure-arm-nb-extensions (>=0.0.1, <=0.0.2), deepof (>=0.1.8, <=0.1.85) +12 more potentially affected by CVE-2025-53000 via nbconvert (6.5.0)

nbconvert PYPI version 6.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - azure-arm-nb-extensions =0.0.1, =0.1.8, =0.0.6, =0.1.7, =3.2.0, =3.2.0, =9.0.2, =0.3.5.dev2659611866, =0.0.1, =0.12.0, =0.12.1 Source cves:...

adeso (>=0.0.1, <=0.0.4), anoteai (>=0.10.0, <=0.20.0) +78 more potentially affected by CVE-2025-68142 via pymdown-extensions (>=10.0.1, <=10.15.0)

pymdown-extensions PYPI version =10.0.1, =0.0.1, =0.10.0, =0.3.3rc4, =0.0.86, =0.0.11, =0.1.0, =0.1.1 - bias-ext-approval 0.1.0 - bias-ext-discussions 0.1.0 - bias-ext-emoji 0.1.0 - bias-ext-flags 0.1.0 - bias-ext-likes 0.1.0 - bias-ext-mentions 0.1.0 - bias-ext-notifications 0.1.0 and more Sourc...

pyarchops (0.0.4), pyarchops-dnsmasq (0.0.1) potentially affected by CVE-2025-14010 via ansible (2.7.5)

ansible PYPI version 2.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - pyarchops 0.0.4 - pyarchops-dnsmasq 0.0.1 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

solida (>=0.9.7.1, <=0.9.7.2), zbuilder (>=0.0.13, <=0.0.15) potentially affected by CVE-2025-14010 via ansible (2.7.16)

ansible PYPI version 2.7.16 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - solida =0.9.7.1, =0.0.13, =0.0.15 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ansible-role-collect-logs (>=1.1.0, <=1.2.0), ansible-role-container-registry (1.3.0) +17 more potentially affected by CVE-2025-14010 via ansible (2.9.27)

ansible PYPI version 2.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansible-role-collect-logs =1.1.0, =2.0.0, =0.0.1.post1, =7.0.0a1, =5.0.0a0, =0.22.0, =8.0.0.0rc1, =1.0.2, =1.6.0, =2.0.0, =12.4.0, =0.4.2, =0.6.7...

ewccli (>=0.8.0, <=0.9.3) potentially affected by CVE-2025-14010 via ansible (10.5.0)

ansible PYPI version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ewccli =0.8.0, =0.9.3 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

k8sdc (0.0.11), yak-yurt (>=0.1.7, <=0.1.14) potentially affected by CVE-2025-14010 via ansible (2.1.1.0)

ansible PYPI version 2.1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - k8sdc 0.0.11 - yak-yurt =0.1.7, =0.1.14 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ants-client (>=2.0.0b4, <=2.0.0b5) potentially affected by CVE-2025-14010 via ansible (2.9.1)

ansible PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ants-client =2.0.0b4, =2.0.0b5 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

amscrot-py (>=1.0.0, <=1.1.0), fabfed-py (>=1.8.0, <=1.10.1) potentially affected by CVE-2025-14010 via ansible (9.5.1)

ansible PYPI version 9.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - amscrot-py =1.0.0, =1.8.0, =1.10.1 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

forta-gate (0.1.0), openadapt (>=0.9.0, <=0.16.2) potentially affected by CVE-2025-66469 via nicegui (1.4.7)

nicegui PYPI version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - forta-gate 0.1.0 - openadapt =0.9.0, =0.16.2 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...