sandroid (2.0.0), ui-automation-tools-mbt (>=1.1.1, <=1.3.1) potentially affected by CVE-2025-23217 via mitmproxy (0.17.0)

mitmproxy PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - sandroid 2.0.0 - ui-automation-tools-mbt =1.1.1, =1.3.1 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...

a2grunnerp (>=0.1.0, <=0.1.8), agora-protocol (0.2.0) +37 more potentially affected by CVE-2025-22153 via restrictedpython (>=6.0.0, <=7.4.0)

restrictedpython PYPI version =6.0.0, =0.1.0, =1.6.24, =0.1.1, =0.1.5, =0.1.0, =0.38.0, =0.0.86, =0.0.42a3, =0.5.2, =0.1.24, =1.0.9 and more Source cves: CVE-2025-22153 Source advisory: OSV:PYSEC-2026-1874...

resolwe (>=30.0.0a1, <=35.2.0a1), resolwe-bio (>=44.0.0a1, <=52.1.0) potentially affected by CVE-2025-24359 via asteval (0.9.26)

asteval PYPI version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - resolwe =30.0.0a1, =44.0.0a1, =52.1.0 Source cves: CVE-2025-24359 Source advisory: OSV:PYSEC-2026-1195...

comics-down (0.2.0), http-tools (1.1.0) potentially affected by CVE-2025-23217 via mitmproxy (5.0.1)

mitmproxy PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - comics-down 0.2.0 - http-tools 1.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...

http-tools (4.0.0) potentially affected by CVE-2025-23217 via mitmproxy (10.1.5)

mitmproxy PYPI version 10.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools 4.0.0 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...

clotho (0.1.0) potentially affected by CVE-2025-23217 via mitmproxy (10.2.2)

mitmproxy PYPI version 10.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - clotho 0.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...

robotframework-mitmlibrary (0.1.3), wapiti3 (>=3.2.0, <=3.2.3) potentially affected by CVE-2025-23217 via mitmproxy (10.2.3)

mitmproxy PYPI version 10.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - robotframework-mitmlibrary 0.1.3 - wapiti3 =3.2.0, =3.2.3 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...

homeassistant-stubs (2021.11.0b2) potentially affected by CVE-2025-25305 via homeassistant (2021.11.0b2)

homeassistant PYPI version 2021.11.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.11.0b2 Source cves: CVE-2025-25305 Source advisory: OSV:PYSEC-2026-1452...

hc-nlp (>=0.1.0, <=0.2.0) potentially affected by CVE-2025-25296 via label-studio (0.8.1)

label-studio PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - hc-nlp =0.1.0, =0.2.0 Source cves: CVE-2025-25296 Source advisory: OSV:PYSEC-2026-1504...

agent-smith-ai (>=0.9.2, <=1.0.1), bibliomancer (0.1.0) +24 more potentially affected by CVE-2025-24359 via asteval (0.9.33)

asteval PYPI version 0.9.33 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - agent-smith-ai =0.9.2, =0.2.0rc0, =0.1.0, =0.2.0, =0.1.0, =2.1.3, =2.1.0b2, =2.5.1, =0.4.0, =0.1.4, =0.7.0, =0.3.0, =0.5.0 and more Source cves:...

aomaker (>=2.4.11, <=2.4.13), apidriver (0.9.5) +14 more potentially affected by CVE-2025-23217 via mitmproxy (9.0.1)

mitmproxy PYPI version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - aomaker =2.4.11, =0.1.0a0, =0.32.0, =0.32.0, =0.32.0, =0.32.0, =0.3.0, =0.7.2, =0.0.22, =0.3.0, =0.4.2 and more Source cves: CVE-2025-23217...

homeassistant-stubs (2022.7.6), pytest-homeassistant-custom-component (0.10.7) potentially affected by CVE-2025-25305 via homeassistant (2022.7.6)

homeassistant PYPI version 2022.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.7.6 - pytest-homeassistant-custom-component 0.10.7 Source cves: CVE-2025-25305 Source advisory:...

fauxmo (>=0.3.5, <=0.3.6) potentially affected by CVE-2025-25305 via homeassistant (0.31.1)

homeassistant PYPI version 0.31.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - fauxmo =0.3.5, =0.3.6 Source cves: CVE-2025-25305 Source advisory: OSV:PYSEC-2026-1452...

padsniff (1.1.1) potentially affected by CVE-2025-23217 via mitmproxy (2.0.1)

mitmproxy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff 1.1.1 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...

awslabs-ccapi-mcp-server (>=1.0.1, <=1.0.18), bridgecrew (>=3.2.415, <=3.2.477) +10 more potentially affected by CVE-2025-24359 via asteval (1.0.5)

asteval PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - awslabs-ccapi-mcp-server =1.0.1, =3.2.415, =3.2.415, =0.1.130, =6.0.0, =5.8.0, =5.8.0, =0.0.8, =0.1.0, =0.31.0 Source cves: CVE-2025-24359 Source...

homeassistant-stubs (2022.12.6), pytest-homeassistant-custom-component (0.12.34) potentially affected by CVE-2025-25305 via homeassistant (2022.12.6)

homeassistant PYPI version 2022.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.12.6 - pytest-homeassistant-custom-component 0.12.34 Source cves: CVE-2025-25305 Source advisory:...

kayalab (>=0.7.30, <=0.11.9) potentially affected by CVE-2025-21618 via nicegui (1.4.24)

nicegui PYPI version 1.4.24 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - kayalab =0.7.30, =0.11.9 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (>=0.4.10, <=0.4.12) potentially affected by CVE-2025-21618 via nicegui (0.6.10)

nicegui PYPI version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.10, =0.4.12 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

aiolambda (>=0.2.0, <=0.3.0), alcazar-web-framework (0.0.2) +155 more potentially affected by CVE-2024-56326 via jinja2 (2.10.0)

jinja2 PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aiolambda =0.2.0, =1.10.3b1, =3.0.0b4, =0.1.0, =0.0.1, =0.2.0, =0.6.7.post3, =0.7.1, =0.1.1, =1.2.1, =0.0.2, =0.0.3 - burl 1.0.0 and more Source...

activedirectoryenum (>=0.4.0, <=0.4.9), agavepy (>=1.0.0a4, <=1.0.0a5) +82 more potentially affected by CVE-2024-56326 via jinja2 (2.11.1)

jinja2 PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - activedirectoryenum =0.4.0, =1.0.0a4, =0.1.2, =0.0.27, =4.0.4, =0.3.0, =1.3.1, =1.2.3, =0.1.0, =0.1.0rc1, =1.2.0, =0.0.1, =0.2.1 and more Source...