1337x (1.2.5), aba-cli-scrapper (>=0.1.0, <=0.7.6) +1225 more potentially affected by CVE-2025-50182 via urllib3 (>=2.2.0, <=2.4.0)

urllib3 PYPI version =2.2.0, =0.1.0, =4.8.2, =0.0.4, =3.0.2b3, =0.1.0, =0.1.2, =0.1.1, =1.0.0, =0.0.6, =0.1.31, =0.1.0, =0.1.5 and more Source cves: CVE-2025-50182 Source advisory: OSV:PYSEC-2026-1997...

aprsd (>=1.6.1, <=1.6.2.dev1), bge-python-sdk (>=0.1.0a1, <=0.1.0a3) +83 more potentially affected by CVE-2025-50181 via urllib3 (1.26.3)

urllib3 PYPI version 1.26.3 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - aprsd =1.6.1, =0.1.0a1, =0.2.1, =0.3.5, =4.15.17, =1.0.0, =0.1.6.1, =0.0.18, =0.0.1, =3.28.0, =3.30.0 - dataannotated 1.0.0 and more Source cves:...

handbook-tools (>=0.3.7, <=0.3.8) potentially affected by CVE-2025-50181 via urllib3 (1.13.1)

urllib3 PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - handbook-tools =0.3.7, =0.3.8 Source cves: CVE-2025-50181 Source advisory: OSV:PYSEC-2026-1999...

abeja-sdk (>=0.2.0rc1, <=1.1.0), abejacli (>=1.0.2rc1, <=1.0.2) +401 more potentially affected by CVE-2025-50181 via urllib3 (1.22.0)

urllib3 PYPI version 1.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - abeja-sdk =0.2.0rc1, =1.0.2rc1, =0.18.0.3, =0.70.0, =0.0.1, =0.5.0, =1.1.0rc6, =0.8.0, =0.0.2, =2.4.1, =0.1.1, =0.1.4 and more Source cves:...

hoard (1.1.1), maxipago-sdk (>=1.0.0, <=1.0.4) potentially affected by CVE-2024-47081 via requests (1.1.0)

requests PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on requests and may be impacted: - hoard 1.1.1 - maxipago-sdk =1.0.0, =1.0.4 Source cves: CVE-2024-47081 Source advisory: OSV:PYSEC-2026-1872...

openleadr (0.5.30), pyopenadr (0.5.30) potentially affected by CVE-2025-48995 via signxml (3.1.1)

signxml PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - openleadr 0.5.30 - pyopenadr 0.5.30 Source cves: CVE-2025-48995 Source advisory: OSV:PYSEC-2026-1922...

abracadabra (>=0.0.0, <=0.0.5), ai-economist (>=1.0.0, <=1.1.1) +20 more potentially affected by CVE-2025-30167 via jupyter-core (4.6.3)

jupyter-core PYPI version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-core and may be impacted: - abracadabra =0.0.0, =1.0.0, =0.1.0rc1, =0.0.1, =0.0.4, =1.0.0, =1.1.7, =1.0.2, =0.0.2, =0.0.8, =0.0.1, =0.0.2 - pangsitpy 0.0.3 and more...

openleadr (0.5.30), pyopenadr (0.5.30) potentially affected by CVE-2025-48994 via signxml (3.1.1)

signxml PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - openleadr 0.5.30 - pyopenadr 0.5.30 Source cves: CVE-2025-48994 Source advisory: OSV:PYSEC-2026-1921...

ksef-utils (>=1.1.0, <=1.4.0), pytbai (>=1.5.3, <=1.6.3) +1 more potentially affected by CVE-2025-48995 via signxml (3.2.1)

signxml PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - ksef-utils =1.1.0, =1.5.3, =0.9.17, =1.0.61 Source cves: CVE-2025-48995 Source advisory: OSV:PYSEC-2026-1922...

pug-nlp (>=0.1.6, <=0.1.14), twip (0.0.6) potentially affected by CVE-2025-30167 via jupyter-core (4.1.0)

jupyter-core PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-core and may be impacted: - pug-nlp =0.1.6, =0.1.14 - twip 0.0.6 Source cves: CVE-2025-30167 Source advisory: OSV:PYSEC-2026-1477...

ac-solver (0.1.0), airosentris (>=0.1.23, <=0.1.31) +182 more potentially affected by CVE-2025-30167 via jupyter-core (>=5.0.0, <=5.8.0)

jupyter-core PYPI version =5.0.0, =0.1.23, =0.20.0, =0.9.5, =0.1.0, =0.1.0, =1.0.1, =1.0.1, =0.3.1, =0.1.1, =0.1.0, =0.3.0, =0.0.1, =0.0.8.post4 and more Source cves: CVE-2025-30167 Source advisory: OSV:PYSEC-2026-1477...

pylocalsmtp (>=0.2.1, <=0.4.2) potentially affected by CVE-2025-47287 via tornado (3.0.1)

tornado PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - pylocalsmtp =0.2.1, =0.4.2 Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-1974...

stashpy (>=0.2.0, <=0.2.1) potentially affected by CVE-2025-47287 via tornado (4.3.0b2)

tornado PYPI version 4.3.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - stashpy =0.2.0, =0.2.1 Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-1974...

catsup (>=0.3.8, <=0.3.11), pylocalsmtp (>=0.5.0, <=1.0.0) +1 more potentially affected by CVE-2025-47287 via tornado (3.2.0)

tornado PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - catsup =0.3.8, =0.5.0, =0.1.1, =0.1.2 Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-1974...

3d-rcnet (>=0.1.0, <=0.2.3), alignn (>=2022.11.6, <=2023.1.10) +58 more potentially affected by CVE-2025-3730 via torch (1.12.0)

torch PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - 3d-rcnet =0.1.0, =2022.11.6, =2022.10.23, =1.44.0, =0.1.3, =3.6.0, =0.1.1, =0.0.5, =0.1.0, =1.5.0, =1.2.0, =0.0.16, =0.2.4, =2.3.1, =2.3.9 and more...

ayy (>=0.1.6, <=0.1.8), mseep-owl (0.0.2) +3 more potentially affected by CVE-2025-28197 via crawl4ai (>=0.3.731, <=0.4.24)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.1.0, =0.1.0, =0.1.7.5b6 - taskcraft 0.3.0 Source cves: CVE-2025-28197 Source advisory: OSV:PYSEC-2026-1281...

4996 (>=0.1.0, <=0.1.1), ablation (0.1.0) +30 more potentially affected by CVE-2025-3730 via torch (1.10.1)

torch PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - 4996 =0.1.0, =0.1.13, =2.0.0rc1, =0.0.1, =0.3.3, =0.1.0, =0.5.0, =0.6.0 and more Source cves: CVE-2025-3730 Source advisory: OSV:PYSEC-2026-1970...

aaa-ml-datasets-course (1.0.0), aait (>=0.0.4.80, <=2.0.2) +2617 more potentially affected by CVE-2025-3730 via torch (>=2.0.0, <=2.7.1)

torch PYPI version =2.0.0, =0.0.4.80, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =0.1.0, =1.0.0.3, =0.0.0, =0.0.5.5 and more Source cves: CVE-2025-3730 Source advisory: OSV:PYSEC-2026-1970...

adventofcode-initializer (>=1.0.1, <=1.0.5), agentia (0.0.2) +118 more potentially affected by CVE-2025-46656 via markdownify (>=0.4.1, <=0.13.1)

markdownify PYPI version =0.4.1, =1.0.1, =0.15.0, =0.3.3, =0.1.46, =0.1.0, =0.1.0, =1.0.1, =1.27.0, =1.0.0, =1.0.0, =0.0.320, =0.0.2, =0.1.0, =0.2.0 and more Source cves: CVE-2025-46656 Source advisory: OSV:PYSEC-2026-1604...

allennlp (>=1.0.0.dev20200427, <=1.0.0rc4.dev20200501), allennlp-models (1.0.0rc3) +42 more potentially affected by CVE-2025-3730 via torch (1.5.0)

torch PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - allennlp =1.0.0.dev20200427, =0.0.1, =0.0.2, =0.0.9, =0.0.14, =0.1.7, =0.0.6, =0.0.6, =0.0.1, =0.0.1, =0.0.3, =0.0.4 and more Source cves: CVE-2025-37...