chunknorris (>=1.0.7, <=1.1.6), docfusion (0.1.0) +6 more potentially affected by CVE-2025-11849 via mammoth (>=1.4.8, <=1.9.1)

mammoth PYPI version =1.4.8, =1.0.7, =0.1.0, =0.1.0, =1.0.0, =1.0.1, =1.5.2, =2.0.5 Source cves: CVE-2025-11849 Source advisory: OSV:PYSEC-2026-1603...

ai-plays-jackbox (>=0.0.1, <=0.3.2), air-link (>=0.3.0, <=0.5.0) +23 more potentially affected by CVE-2025-53354 via nicegui (2.24.2)

nicegui PYPI version 2.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - ai-plays-jackbox =0.0.1, =0.3.0, =0.8.0, =1.11.0b1, =0.13.24, =0.2.14, =0.30.0, =2.0.0, =0.2.0, =0.2.0, =0.0.1, =0.0.4 and more Source cves:...

synth-mapping-helper (1.4.7) potentially affected by CVE-2025-53354 via nicegui (1.4.30)

nicegui PYPI version 1.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.4.7 Source cves: CVE-2025-53354 Source advisory: OSV:PYSEC-2026-1699...

otanalytics (>=0.5.4, <=0.6.14), synth-mapping-helper (1.5.10) potentially affected by CVE-2025-53354 via nicegui (2.11.0)

nicegui PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - otanalytics =0.5.4, =0.6.14 - synth-mapping-helper 1.5.10 Source cves: CVE-2025-53354 Source advisory: OSV:PYSEC-2026-1699...

lumapps-sdk (>=1.0.0b13, <=1.0.0b18) potentially affected by CVE-2025-59420 via authlib (0.14.1)

authlib PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - lumapps-sdk =1.0.0b13, =1.0.0b18 Source cves: CVE-2025-59420 Source advisory: OSV:PYSEC-2026-1200...

wolf-core (2.0.1) potentially affected by CVE-2025-8869 via pip (22.0.0)

pip PYPI version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - wolf-core 2.0.1 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

meltano (>=1.60.0, <=2.1.0), molten-jwt (0.2.1) potentially affected by CVE-2025-59420 via authlib (0.10.0)

authlib PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - meltano =1.60.0, =2.1.0 - molten-jwt 0.2.1 Source cves: CVE-2025-59420 Source advisory: OSV:PYSEC-2026-1200...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2025-8869 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2025-8869 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

aima (2023.2.4), aiogram-inline-paginations (>=0.1.0, <=0.1.12) +84 more potentially affected by CVE-2025-8869 via pip (22.3.1)

pip PYPI version 22.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aima 2023.2.4 - aiogram-inline-paginations =0.1.0, =2022.11.0b1, =0.1.2, =0.1.2, =1.0.1, =0.1.1.1, =1.0.2, =0.10.0, =0.0.5, =0.0.0.2, =0.0.1.0 and more...

junctionart (>=0.1.0, <=0.1.2) potentially affected by CVE-2025-8869 via pip (20.3.1)

pip PYPI version 20.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - junctionart =0.1.0, =0.1.2 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

aihandler (>=1.9.8, <=1.19.0), aiorobonect (>=0.2.3, <=0.2.5) +18 more potentially affected by CVE-2025-8869 via pip (23.1.2)

pip PYPI version 23.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aihandler =1.9.8, =0.2.3, =1.10.0, =2023.5.1, =1.29.0, =4.1.0, =2023.5.0b0, =2023.5.0b0, =0.7.3, =2.7.1, =2.7.7 - mqtt-hass-base 4.2.2 and more Source...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2025-59842 via jupyterlab (3.3.3)

jupyterlab PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2025-59842 Source advisory: OSV:PYSEC-2026-1482...

flambe (>=0.4.11, <=0.4.13) potentially affected by CVE-2025-6051 via transformers (2.2.2)

transformers PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - flambe =0.4.11, =0.4.13 Source cves: CVE-2025-6051 Source advisory: OSV:PYSEC-2026-1988...

atacworks (0.3.4), atoti-jupyterlab (0.5.0) +4 more potentially affected by CVE-2025-59842 via jupyterlab (3.0.18)

jupyterlab PYPI version 3.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks 0.3.4 - atoti-jupyterlab 0.5.0 - jupyterlab-apod 0.1.0 - jupyterlab-kernelspy =3.0.0, =1.0.0a0, =1.1.0, =1.2.3 Source cves:...

elvia-louvre-vision (>=0.0.3, <=0.9.0), image-crawl (0.1.0) +1 more potentially affected by CVE-2025-59842 via jupyterlab (3.1.4)

jupyterlab PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elvia-louvre-vision =0.0.3, =0.9.0 - image-crawl 0.1.0 - vimms 2.0.1 Source cves: CVE-2025-59842 Source advisory: OSV:PYSEC-2026-1482...

cadlabs-ethereum-economic-model (0.0.2a0), nldi-el-serv (>=0.1.4, <=0.1.5) potentially affected by CVE-2025-59842 via jupyterlab (3.0.14)

jupyterlab PYPI version 3.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cadlabs-ethereum-economic-model 0.0.2a0 - nldi-el-serv =0.1.4, =0.1.5 Source cves: CVE-2025-59842 Source advisory: OSV:PYSEC-2026-1482...

scikit-blocks (0.0.1), scikit-lego (0.1.0) +1 more potentially affected by CVE-2025-59842 via jupyterlab (0.35.4)

jupyterlab PYPI version 0.35.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - scikit-blocks 0.0.1 - scikit-lego 0.1.0 - skillpub =0.2.41, =0.2.90 Source cves: CVE-2025-59842 Source advisory: OSV:PYSEC-2026-1482...

ibis-vega-transform (4.0.0), pangsitpy (0.0.3) +1 more potentially affected by CVE-2025-59842 via jupyterlab (2.0.0)

jupyterlab PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ibis-vega-transform 4.0.0 - pangsitpy 0.0.3 - pyomu 0.2.2 Source cves: CVE-2025-59842 Source advisory: OSV:PYSEC-2026-1482...

cherrypick (>=0.1.0, <=0.2.1), espercli (>=0.0.13, <=0.0.14) +2 more potentially affected by CVE-2025-8869 via pip (21.1.0)

pip PYPI version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cherrypick =0.1.0, =0.0.13, =0.0.5, =0.0.8 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...