auto-dl (0.1.1), chalice (>=1.0.1, <=1.2.2) +14 more potentially affected by CVE-2025-8869 via pip (9.0.3)

pip PYPI version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - auto-dl 0.1.1 - chalice =1.0.1, =1.5.119, =1.0.0, =2.1.1.16070820, =2.1.1.16072018, =2.1.1.16070812, =1.5.6, =0.2.0, =2.1.6.16123016, =2.1.1.16070814,...

georges (2023.1.0), georges-core (>=2023.1.0, <=2023.2.0) potentially affected by CVE-2025-59842 via jupyterlab (3.6.2)

jupyterlab PYPI version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - georges 2023.1.0 - georges-core =2023.1.0, =2023.2.0 Source cves: CVE-2025-59842 Source advisory: OSV:PYSEC-2026-1482...

agi-med-utils (>=0.1.10, <=0.1.19), c2cciutils (1.1.31) +2 more potentially affected by CVE-2025-8869 via pip (23.3.0)

pip PYPI version 23.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agi-med-utils =0.1.10, =0.0.15, =0.0.16 - resource-schema-guard-rail 0.0.9 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

allennlp (>=1.0.0rc6.dev20200604, <=1.1.0rc1.dev20200709), allennlp-models (>=1.0.0rc6, <=1.1.0rc1.dev20200709) +29 more potentially affected by CVE-2025-6638 via transformers (2.11.0)

transformers PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc6.dev20200604, =1.0.0rc6, =0.0.1rc1, =0.1.2, =0.1.3, =0.5.2, =0.1.2, =3.0.1, =0.1.0, =1.8.0, =0.12.2.dev2, =0.12.2.dev...

flambe (>=0.4.11, <=0.4.13) potentially affected by CVE-2025-6638 via transformers (2.2.2)

transformers PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - flambe =0.4.11, =0.4.13 Source cves: CVE-2025-6638 Source advisory: OSV:PYSEC-2026-1981...

ak-frame-extractor (>=1.2.0, <=1.3.0), ak-video-analyser (0.0.2) +5 more potentially affected by CVE-2025-59042 via pyinstaller (5.7.0)

pyinstaller PYPI version 5.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - ak-frame-extractor =1.2.0, =0.0.25, =3.6.0.dev1, =3.6.0.dev1, =3.6.0.dev1, =3.6.3.dev3 Source cves: CVE-2025-59042 Source advisory:...

systembridgebackend (3.6.3.dev6), systembridgecli (3.6.3.dev6) +1 more potentially affected by CVE-2025-59042 via pyinstaller (5.9.0)

pyinstaller PYPI version 5.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - systembridgebackend 3.6.3.dev6 - systembridgecli 3.6.3.dev6 - systembridgegui 3.6.3.dev6 Source cves: CVE-2025-59042 Source advisory:...

systembridgebackend (3.6.3.dev7), systembridgecli (3.6.3.dev7) +1 more potentially affected by CVE-2025-59042 via pyinstaller (5.10.0)

pyinstaller PYPI version 5.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - systembridgebackend 3.6.3.dev7 - systembridgecli 3.6.3.dev7 - systembridgegui 3.6.3.dev7 Source cves: CVE-2025-59042 Source advisory:...

pyupdater (>=1.0.1, <=1.1.13) potentially affected by CVE-2025-59042 via pyinstaller (3.0.0)

pyinstaller PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - pyupdater =1.0.1, =1.1.13 Source cves: CVE-2025-59042 Source advisory: OSV:PYSEC-2026-1813...

pretix (>=4.17.0, <=4.17.1), providentia (2.4.0) potentially affected by CVE-2025-55197 via pypdf (3.4.1)

pypdf PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - pretix =4.17.0, =4.17.1 - providentia 2.4.0 Source cves: CVE-2025-55197 Source advisory: OSV:PYSEC-2026-1830...

assert-files (>=0.1.0, <=0.1.3), vpplib (0.0.4) +1 more potentially affected by CVE-2025-55197 via pypdf (3.16.4)

pypdf PYPI version 3.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - assert-files =0.1.0, =0.61.0, =0.65.0 Source cves: CVE-2025-55197 Source advisory: OSV:PYSEC-2026-1830...

athena-starship (>=0.0.3, <=0.0.6), conflare (>=0.1.2, <=0.1.3) +11 more potentially affected by CVE-2025-55197 via pypdf (4.1.0)

pypdf PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - athena-starship =0.0.3, =0.1.2, =2.2.0, =0.0.1, =3.3.0, =1.14.0, =0.1.4, =4.6.2, =0.1.0, =0.1.58 Source cves: CVE-2025-55197 Source advisory:...

centricube-langchain (>=1.2.3, <=1.3.0), centricube-pyautogen (>=0.3.2, <=0.3.3) +5 more potentially affected by CVE-2025-55197 via pypdf (5.6.1)

pypdf PYPI version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - centricube-langchain =1.2.3, =0.3.2, =0.3.0, =0.1.0, =0.0.11, =0.0.3, =0.0.5 Source cves: CVE-2025-55197 Source advisory: OSV:PYSEC-2026-1830...

cewler (1.2.0.post1), python-xdoc (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-55197 via pypdf (4.0.1)

pypdf PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cewler 1.2.0.post1 - python-xdoc =0.1.0, =0.1.1 Source cves: CVE-2025-55197 Source advisory: OSV:PYSEC-2026-1830...

aapns (>=19.11.0, <=23.7.0), abq (>=0.1.0, <=0.1.4) +231 more potentially affected by CVE-2025-57804 via h2 (3.2.0)

h2 PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aapns =19.11.0, =0.1.0, =0.0.1, =0.4.0, =0.4.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.6, =0.0.1, =0.1.0, =0.0.1, =0.1.1 and more Source cves:...

aid-push (>=2.1.0, <=2.1.4), alexa-browser-client (>=0.3.3, <=3.3.2) +46 more potentially affected by CVE-2025-57804 via h2 (2.6.2)

h2 PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aid-push =2.1.0, =0.3.3, =1.3.0, =1.2.0, =0.2.0, =0.7.1.1, =0.0.1, =0.4.0, =17.5.1, =0.1.10, =0.4.10 and more Source cves: CVE-2025-57804 Source advisory:...

biopipen (>=0.12.0, <=0.17.7), flet (0.9.0) +9 more potentially affected by CVE-2025-55201 via copier (8.1.0)

copier PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - biopipen =0.12.0, =0.5.0, =1.3.3, =0.5.4, =0.6.1, =0.12.6, =0.5.0, =0.1.0, =0.5.1 Source cves: CVE-2025-55201 Source advisory: OSV:PYSEC-2026-1271...

pytoil (>=0.34.0, <=0.35.0) potentially affected by CVE-2025-55201 via copier (6.1.0)

copier PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - pytoil =0.34.0, =0.35.0 Source cves: CVE-2025-55201 Source advisory: OSV:PYSEC-2026-1271...

flexlate (>=0.14.1, <=0.14.2) potentially affected by CVE-2025-55201 via copier (6.0.0b0)

copier PYPI version 6.0.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - flexlate =0.14.1, =0.14.2 Source cves: CVE-2025-55201 Source advisory: OSV:PYSEC-2026-1271...

ai-dynamo-vllm (>=0.8.4, <=0.8.4.post4), arbor-ai (>=0.2.2, <=0.2.4) +35 more potentially affected by CVE-2025-57809 via xgrammar (>=0.1.11, <=0.1.19)

xgrammar PYPI version =0.1.11, =0.8.4, =0.2.2, =0.0.2, =0.1.1, =0.1.10, =0.0.2, =1.1.2, =0.1.1, =0.2.0a1, =0.1.2, =0.2.2 - lightrft 0.1.0 and more Source cves: CVE-2025-57809 Source advisory: OSV:PYSEC-2026-2054...