open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2024-8984 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2024-8984 Source advisory: OSV:PYSEC-2026-1545...

autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2024-8984 via litellm (0.1.7713)

litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2024-8984 Source...

academic-chatgpt (>=0.3.0, <=0.4.1), agentverse (>=0.1.5, <=0.1.8) +46 more potentially affected by CVE-2024-8021 via gradio (3.50.2)

gradio PYPI version 3.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - academic-chatgpt =0.3.0, =0.1.5, =0.0.4, =0.8.11, =0.1.0, =0.1.3, =1.1.0, =1.2.1 and more Source cves: CVE-2024-8021 Source advisory:...

alcali (>=2018.3.1, <=2019.2.2), ax (>=0.39.0, <=0.42.0) +74 more potentially affected by CVE-2024-6827 via gunicorn (19.9.0)

gunicorn PYPI version 19.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on gunicorn and may be impacted: - alcali =2018.3.1, =0.39.0, =1.0.69, =1.0.48, =0.0.112, =0.0.1, =0.0.20, =0.0.40, =0.0.16, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =1.0.72, =1.0.76,...

vr-server (>=6.11.0, <=7.2.5) potentially affected by CVE-2024-6827 via gunicorn (0.17.2)

gunicorn PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on gunicorn and may be impacted: - vr-server =6.11.0, =7.2.5 Source cves: CVE-2024-6827 Source advisory: OSV:PYSEC-2026-1433...

mlflow-asus-aimaker (>=0.0.6, <=1.0.2), newsmodel (0.1.0) +3 more potentially affected by CVE-2024-6838 via mlflow (1.24.0)

mlflow PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlflow-asus-aimaker =0.0.6, =1.3.0, =3.1.1, =3.1.4, =3.1.6 Source cves: CVE-2024-6838 Source advisory: OSV:PYSEC-2026-1658...

deepsleep (1.0.3) potentially affected by CVE-2024-6838 via mlflow (1.5.0)

mlflow PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - deepsleep 1.0.3 Source cves: CVE-2024-6838 Source advisory: OSV:PYSEC-2026-1658...

chaosmonkey (>=1.0.8, <=1.1.0), flexget (>=2.10.60, <=3.1.104) +10 more potentially affected by CVE-2024-6844 via flask-cors (3.0.2)

flask-cors PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - chaosmonkey =1.0.8, =2.10.60, =0.1.0rc0, =23.1.0, =3.0.2.dev1, =21.10.5, =0.6.0, =1.0.2, =1.0.5 Source cves: CVE-2024-6844 Source advisory:...

sevenpack (2.7.1) potentially affected by CVE-2024-6839 via flask-cors (2.0.1)

flask-cors PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - sevenpack 2.7.1 Source cves: CVE-2024-6839 Source advisory: OSV:PYSEC-2026-1384...

astaligner (>=0.1.0, <=1.0.2), cacaodocs (>=0.1.3, <=0.1.14) +30 more potentially affected by CVE-2024-6844 via flask-cors (5.0.0)

flask-cors PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - astaligner =0.1.0, =0.1.3, =0.1.0, =1.0.0a0, =0.1.0, =1.0.0, =1.5.8, =0.1.0, =0.0.10, =3.11.44, =3.3.4, =0.0.1, =0.0.3 and more Source cves:...

agentic-ai-vass-tools (>=0.1.0, <=0.4.0), altspell (>=0.1.0, <=0.4.0) +39 more potentially affected by CVE-2024-6844 via flask-cors (5.0.1)

flask-cors PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - agentic-ai-vass-tools =0.1.0, =0.1.0, =0.21.0, =1.3.3, =0.2.0, =4.21.0b8, =1.7.0, =0.2.4, =0.1.0, =0.1.1, =3.13.7, =3.16.1 and more Source...

allennlp (>=1.2.0rc1.dev20200924, <=1.2.0rc1.dev20200929) potentially affected by CVE-2024-12720 via transformers (3.2.0)

transformers PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.2.0rc1.dev20200924, =1.2.0rc1.dev20200929 Source cves: CVE-2024-12720 Source advisory: OSV:PYSEC-2026-1982...

corradin-opioid-project (0.1.0), eensight (>=1.0.0, <=1.0.2) +33 more potentially affected by CVE-2024-12215 via kedro (>=0.15.9, <=0.19.8)

kedro PYPI version =0.15.9, =1.0.0, =0.1.0, =0.1.0, =0.2.1, =0.1.0, =0.1.0, =1.0.0, =0.1.2, =0.7.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2024-12215 Source advisory: OSV:PYSEC-2026-1485...

allennlp (>=0.9.1.dev20200404, <=0.9.1.dev20200413), pygaggle (0.0.1) potentially affected by CVE-2024-12720 via transformers (2.7.0)

transformers PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200404, =0.9.1.dev20200413 - pygaggle 0.0.1 Source cves: CVE-2024-12720 Source advisory: OSV:PYSEC-2026-1982...

customintents (>=0.8.0, <=1.0.0) potentially affected by CVE-2024-12217 via gradio (3.16.2)

gradio PYPI version 3.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.8.0, =1.0.0 Source cves: CVE-2024-12217 Source advisory: OSV:PYSEC-2026-1418...

airoboros (2.1.1), aphrodite-engine (>=0.3.0, <=0.5.1) +30 more potentially affected by CVE-2024-10907 via fschat (>=0.2.2, <=0.2.36)

fschat PYPI version =0.2.2, =0.3.0, =0.0.1, =1.1.0, =1.1.0, =0.1.1, =0.1.1, =0.9.0.8, =1.0.0, =1.1.4 - iflow-mcp-edenyavin-garakr-mcp 0.1.0 and more Source cves: CVE-2024-10907 Source advisory: OSV:PYSEC-2026-1398...

aiconfigurator (>=0.1.0, <=0.2.0), aijson-core (>=0.1.1, <=0.2.4) +171 more potentially affected by CVE-2024-10624 via gradio (>=4.38.1, <=4.44.1)

gradio PYPI version =4.38.1, =0.1.0, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.4, =0.1.0, =25.3.1, =0.0.1, =0.1.0, =0.1.0a12, =0.1.1a1, =0.1.1 and more Source cves: CVE-2024-10624 Source advisory: OSV:PYSEC-2026-1421...

aqmlator (>=0.1.1, <=0.1.2), bandcalq (0.0.1) +111 more potentially affected by CVE-2025-1403 via qiskit-terra (>=0.45.0, <=0.46.3)

qiskit-terra PYPI version =0.45.0, =0.1.1, =2.0.0, =0.0.3, =0.0.0, =0.9.1, =0.5.0, =0.0.0, =0.1.1, =1.0.4, =0.1.0, =0.1.1, =1.3.0, =0.2.0, =0.2.2 and more Source cves: CVE-2025-1403 Source advisory: OSV:PYSEC-2026-1859...

async-patterns (0.2.0), bentodev (>=0.1.17, <=2018.11.2) +52 more potentially affected by CVE-2025-27516 via jinja2 (2.9.6)

jinja2 PYPI version 2.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - async-patterns 0.2.0 - bentodev =0.1.17, =1.0.0, =1.3.0, =0.6.0, =2.0.3, =1.0.18, =0.1.48, =2.10.60, =17.4.1, =4.0.0, =4.1.4 - graphene-tornado 2.0....

homeassistant-stubs (2023.8.0b4), pytest-homeassistant-custom-component (0.13.48) potentially affected by CVE-2025-25305 via homeassistant (2023.8.0b4)

homeassistant PYPI version 2023.8.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.0b4 - pytest-homeassistant-custom-component 0.13.48 Source cves: CVE-2025-25305 Source advisory:...