centricube-langchain (>=1.2.3, <=1.3.0), centricube-pyautogen (>=0.3.2, <=0.3.3) +5 more potentially affected by CVE-2025-55197 via pypdf (5.6.1)

pypdf PYPI version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - centricube-langchain =1.2.3, =0.3.2, =0.3.0, =0.1.0, =0.0.11, =0.0.3, =0.0.5 Source cves: CVE-2025-55197 Source advisory: OSV:PYSEC-2026-1830...

dagit (0.8.10rc1), dagster-airflow (0.8.10rc1) potentially affected by CVE-2025-51481 via dagster (0.8.10rc1)

dagster PYPI version 0.8.10rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.8.10rc1 - dagster-airflow 0.8.10rc1 Source cves: CVE-2025-51481 Source advisory: OSV:PYSEC-2026-1286...

ailab-lite (>=0.1.1, <=0.1.14), aioradio (0.20.24) +40 more potentially affected by CVE-2025-54413 via skops (>=0.1.0.dev0, <=0.11.0)

skops PYPI version =0.1.0.dev0, =0.1.1, =0.2.2.dev0, =23.10.1, =0.1.1, =1.0.4, =23.8.0, =0.0.1, =1.0.0, =0.0.5, =0.0.1, =0.2.0, =0.1.4, =0.1.9 and more Source cves: CVE-2025-54413 Source advisory: OSV:PYSEC-2026-1926...

muffin (>=0.0.46, <=0.0.52) potentially affected by CVE-2025-53643 via aiohttp (0.15.0)

aiohttp PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.46, =0.0.52 Source cves: CVE-2025-53643 Source advisory: OSV:PYSEC-2026-1104...

pyatv (>=0.1.2, <=0.1.3) potentially affected by CVE-2025-53643 via aiohttp (1.3.0)

aiohttp PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pyatv =0.1.2, =0.1.3 Source cves: CVE-2025-53643 Source advisory: OSV:PYSEC-2026-1104...

dagit (0.9.6rc0), dagster-airflow (0.9.6rc0) potentially affected by CVE-2025-51481 via dagster (0.9.6rc0)

dagster PYPI version 0.9.6rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.9.6rc0 - dagster-airflow 0.9.6rc0 Source cves: CVE-2025-51481 Source advisory: OSV:PYSEC-2026-1286...

muffin (>=0.3.3, <=0.3.7) potentially affected by CVE-2025-53643 via aiohttp (0.18.4)

aiohttp PYPI version 0.18.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.3.3, =0.3.7 Source cves: CVE-2025-53643 Source advisory: OSV:PYSEC-2026-1104...

dagit (0.5.1), dagster-ge (0.5.1) potentially affected by CVE-2025-51481 via dagster (0.5.1)

dagster PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.5.1 - dagster-ge 0.5.1 Source cves: CVE-2025-51481 Source advisory: OSV:PYSEC-2026-1286...

dagit (0.11.6rc9), dagster-airflow (0.11.6rc9) potentially affected by CVE-2025-51481 via dagster (0.11.6rc9)

dagster PYPI version 0.11.6rc9 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.11.6rc9 - dagster-airflow 0.11.6rc9 Source cves: CVE-2025-51481 Source advisory: OSV:PYSEC-2026-1286...

homeassistant (>=0.42.0, <=0.42.3) potentially affected by CVE-2025-53643 via aiohttp (2.0.5)

aiohttp PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - homeassistant =0.42.0, =0.42.3 Source cves: CVE-2025-53643 Source advisory: OSV:PYSEC-2026-1104...

hassmart-homeassistant (0.60.0), homeassistant (>=0.60.0, <=0.60.1) +2 more potentially affected by CVE-2025-53643 via aiohttp (2.3.6)

aiohttp PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hassmart-homeassistant 0.60.0 - homeassistant =0.60.0, =0.60.1 - pyplanet 0.5.4 - reliz 0.1.0.dev0 Source cves: CVE-2025-53643 Source advisory:...

opentrons (>=3.7.0, <=3.11.4) potentially affected by CVE-2025-53643 via aiohttp (2.3.8)

aiohttp PYPI version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - opentrons =3.7.0, =3.11.4 Source cves: CVE-2025-53643 Source advisory: OSV:PYSEC-2026-1104...

aiopixiv (>=1.0.0, <=1.0.4) potentially affected by CVE-2025-53643 via aiohttp (1.1.0)

aiohttp PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiopixiv =1.0.0, =1.0.4 Source cves: CVE-2025-53643 Source advisory: OSV:PYSEC-2026-1104...

aiopixiv (1.0.5) potentially affected by CVE-2025-53643 via aiohttp (2.0.4)

aiohttp PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiopixiv 1.0.5 Source cves: CVE-2025-53643 Source advisory: OSV:PYSEC-2026-1104...

muffin (>=0.0.23, <=0.0.45) potentially affected by CVE-2025-53643 via aiohttp (0.14.4)

aiohttp PYPI version 0.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.23, =0.0.45 Source cves: CVE-2025-53643 Source advisory: OSV:PYSEC-2026-1104...

allennlp (>=1.2.0rc1.dev20200924, <=1.2.0rc1.dev20200929) potentially affected by CVE-2025-3933 via transformers (3.2.0)

transformers PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.2.0rc1.dev20200924, =1.2.0rc1.dev20200929 Source cves: CVE-2025-3933 Source advisory: OSV:PYSEC-2026-1977...

dagit (0.8.4rc0), dagster-airflow (0.8.4rc0) potentially affected by CVE-2023-51232 via dagster (0.8.4rc0)

dagster PYPI version 0.8.4rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.8.4rc0 - dagster-airflow 0.8.4rc0 Source cves: CVE-2023-51232 Source advisory: OSV:PYSEC-2026-1287...

dagit (0.14.8rc1), dagster-airbyte (0.14.8rc1) +33 more potentially affected by CVE-2023-51232 via dagster (0.14.8rc1)

dagster PYPI version 0.14.8rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.8rc1 - dagster-airbyte 0.14.8rc1 - dagster-airflow 0.14.8rc1 - dagster-aws 0.14.8rc1 - dagster-azure 0.14.8rc1 - dagster-celery...

dagit (0.11.14rc2), dagster-airflow (0.11.14rc2) potentially affected by CVE-2023-51232 via dagster (0.11.14rc2)

dagster PYPI version 0.11.14rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.11.14rc2 - dagster-airflow 0.11.14rc2 Source cves: CVE-2023-51232 Source advisory: OSV:PYSEC-2026-1287...

dagit (0.9.16rc0), dagster-airflow (0.9.16rc0) potentially affected by CVE-2023-51232 via dagster (0.9.16rc0)

dagster PYPI version 0.9.16rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.9.16rc0 - dagster-airflow 0.9.16rc0 Source cves: CVE-2023-51232 Source advisory: OSV:PYSEC-2026-1287...