@knocklabs/client (>=0.21.6, <=0.22.1), @knocklabs/expo (>=0.5.0, <=0.6.9) +8 more potentially affected by CVE-2026-56812 via phoenix (>=1.8.0, <=1.8.7)

phoenix NPM version =1.8.0, =0.21.6, =0.5.0, =0.11.0, =0.13.0, =0.8.0, =0.0.2, =0.0.1, =0.0.2, =0.0.1, =2.1.8, =2.5.4 Source cves: CVE-2026-56812 Source advisory: OSV:EEF-CVE-2026-56812...

@sqlite-list/sql-creator (1.0.7) potentially affected by unknown CVE via @sqlite-list/schema-generator (1.0.2)

@sqlite-list/schema-generator NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sqlite-list/schema-generator and may be impacted: - @sqlite-list/sql-creator 1.0.7 Source cves: unknown CVE Source advisory: GHSA-2859-847V-C4V9...

@sqlite-list/sql-creator (1.0.7) potentially affected by unknown CVE via @sqlite-list/schema-generator (1.0.2)

@sqlite-list/schema-generator NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sqlite-list/schema-generator and may be impacted: - @sqlite-list/sql-creator 1.0.7 Source cves: unknown CVE Source advisory:...

prompt2model (0.0.9) potentially affected by CVE-2025-0628 via litellm (0.1.583)

litellm PYPI version 0.1.583 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - prompt2model 0.0.9 Source cves: CVE-2025-0628 Source advisory: OSV:PYSEC-2026-1546...

mlfields (0.0.0), poms (0.0.0) potentially affected by CVE-2025-0453 via mlflow (1.20.1)

mlflow PYPI version 1.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlfields 0.0.0 - poms 0.0.0 Source cves: CVE-2025-0453 Source advisory: OSV:PYSEC-2026-1637...

autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2025-0628 via litellm (0.1.7713)

litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2025-0628 Source...

agentic-ai-vass-tools (>=0.1.0, <=0.4.0), ai-agents (>=0.0.4, <=0.0.52) +81 more potentially affected by CVE-2025-0628 via litellm (>=1.0.0, <=1.61.9)

litellm PYPI version =1.0.0, =0.1.0, =0.0.4, =0.1.3, =0.1.0, =0.67.0, =0.1.5, =0.0.1, =1.6.24, =0.1.12rc1, =0.1.0, =0.60.2, =0.3.6, =0.4.2 and more Source cves: CVE-2025-0628 Source advisory: OSV:PYSEC-2026-1546...

openstef (>=3.2.0a0, <=3.2.6) potentially affected by CVE-2025-0453 via mlflow (1.25.1)

mlflow PYPI version 1.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - openstef =3.2.0a0, =3.2.6 Source cves: CVE-2025-0453 Source advisory: OSV:PYSEC-2026-1637...

ml-deploy (2.0.0), waveletai (>=0.2.5, <=0.2.11) potentially affected by CVE-2025-0453 via mlflow (1.18.0)

mlflow PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-deploy 2.0.0 - waveletai =0.2.5, =0.2.11 Source cves: CVE-2025-0453 Source advisory: OSV:PYSEC-2026-1637...

promptulate (1.9.0) potentially affected by CVE-2025-0330 via litellm (0.12.12)

litellm PYPI version 0.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - promptulate 1.9.0 Source cves: CVE-2025-0330 Source advisory: OSV:PYSEC-2026-1543...

langstream (0.1.8) potentially affected by CVE-2025-0628 via litellm (0.1.450)

litellm PYPI version 0.1.450 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - langstream 0.1.8 Source cves: CVE-2025-0628 Source advisory: OSV:PYSEC-2026-1546...

langstream (0.1.8) potentially affected by CVE-2025-0330 via litellm (0.1.450)

litellm PYPI version 0.1.450 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - langstream 0.1.8 Source cves: CVE-2025-0330 Source advisory: OSV:PYSEC-2026-1543...

a2 (>=0.1.0, <=0.3.17), ikomia (>=0.9.0, <=0.13.0) +2 more potentially affected by CVE-2025-0453 via mlflow (1.30.0)

mlflow PYPI version 1.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - a2 =0.1.0, =0.9.0, =0.13.0 - mantik 0.1.2 - pyrovelocity 0.1.1 Source cves: CVE-2025-0453 Source advisory: OSV:PYSEC-2026-1637...

open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2025-0330 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2025-0330 Source advisory: OSV:PYSEC-2026-1543...

azureml-contrib-run (>=1.0.18.2, <=1.0.21.1) potentially affected by CVE-2024-8859 via mlflow (0.8.2)

mlflow PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-contrib-run =1.0.18.2, =1.0.21.1 Source cves: CVE-2024-8859 Source advisory: OSV:PYSEC-2026-1638...

langstream (0.1.8) potentially affected by CVE-2024-9606 via litellm (0.1.450)

litellm PYPI version 0.1.450 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - langstream 0.1.8 Source cves: CVE-2024-9606 Source advisory: OSV:PYSEC-2026-1548...

langstream (0.1.8) potentially affected by CVE-2024-8984 via litellm (0.1.450)

litellm PYPI version 0.1.450 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - langstream 0.1.8 Source cves: CVE-2024-8984 Source advisory: OSV:PYSEC-2026-1545...

autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2024-8984 via litellm (0.1.7713)

litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2024-8984 Source...

querytograph (>=0.0.1, <=0.0.5), tumourkit (>=0.6.0, <=0.10.1) potentially affected by CVE-2024-8966 via gradio (3.26.0)

gradio PYPI version 3.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - querytograph =0.0.1, =0.6.0, =0.10.1 Source cves: CVE-2024-8966 Source advisory: OSV:PYSEC-2026-1410...

autorad (>=0.2.2, <=0.2.5), katonic (>=1.3.0, <=1.6.0) potentially affected by CVE-2024-8859 via mlflow (1.23.1)

mlflow PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - autorad =0.2.2, =1.3.0, =1.6.0 Source cves: CVE-2024-8859 Source advisory: OSV:PYSEC-2026-1638...