dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2024-50378 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2024-50378 Source advisory: OSV:PYSEC-2026-1134...

timo-zappa (>=0.45.1, <=0.45.1.4), zappa (>=0.41.0, <=0.45.1) potentially affected by CVE-2024-49766 via werkzeug (0.12.0)

werkzeug PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - timo-zappa =0.45.1, =0.41.0, =0.45.1 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-49766 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

aaz-dev (>=1.0.2, <=2.10.1), adminui (1.5.2) +190 more potentially affected by CVE-2024-49766 via werkzeug (2.1.2)

werkzeug PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aaz-dev =1.0.2, =1.5.2, =0.14.0, =0.0.1a0, =1.5.0, =1.1.1, =2.6.0, =1.0.5, =1.7.1, =1.3.0, =3.1.0, =1.45.0, =1.47.0 and more Source cves:...

activedirectoryenum (>=0.4.0, <=0.4.6), airiam (>=0.1.2, <=0.1.8) +29 more potentially affected by CVE-2024-49766 via werkzeug (1.0.0)

werkzeug PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - activedirectoryenum =0.4.0, =0.1.2, =0.3.0, =0.0.3, =1.3.0, =1.0.0, =1.0.1, =0.8.0, =0.1.1, =1.0.0, =2.0.0b4, =2.1.0b1 - ors3handler 0.0.31 and...

eve (>=0.9.1, <=0.9.2), fancy-nlp (>=0.0.1, <=0.0.4) +15 more potentially affected by CVE-2024-49766 via werkzeug (0.15.4)

werkzeug PYPI version 0.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - eve =0.9.1, =0.0.1, =0.1.3, =2.0.0, =0.1.0a23, =0.1.0, =1.0.2, =1.0.0, =0.100.4, =0.1.0, =0.10.0 - revelation 1.1.0 and more Source cves:...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +583 more potentially affected by CVE-2024-8309 via langchain (>=0.0.27, <=0.2.0rc2)

langchain PYPI version =0.0.27, =0.1.0, =0.1.7, =0.2.1, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.52 and more Source cves: CVE-2024-8309 Source advisory: OSV:PYSEC-2026-1507...

yolov2keras (>=0.0.2, <=0.0.6) potentially affected by CVE-2024-48052 via gradio (3.45.2)

gradio PYPI version 3.45.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - yolov2keras =0.0.2, =0.0.6 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...

actinia-core (>=4.9.1, <=4.10.0), adeso (>=0.0.1, <=0.0.4) +28 more potentially affected by CVE-2024-49766 via werkzeug (2.3.6)

werkzeug PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - actinia-core =4.9.1, =0.0.1, =0.1.23, =0.6.14, =1.0.1, =1.0.0, =1.1.0, =2024.1.1, =0.0.1, =0.0.1, =0.0.25, =0.2.27 - fortigate-vpn-login 0.5.0 a...

gcvit (>=1.0.4, <=1.0.9) potentially affected by CVE-2024-48052 via gradio (3.1.0)

gradio PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gcvit =1.0.4, =1.0.9 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...

drmlapp (1.0.6), python-webex-bot (0.51.0) potentially affected by CVE-2024-49766 via werkzeug (0.15.1)

werkzeug PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - drmlapp 1.0.6 - python-webex-bot 0.51.0 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

cloudmesh-client (>=4.2.6, <=4.4.0), nginxauthdaemon (>=1.0.0a1, <=1.1.0) +1 more potentially affected by CVE-2024-49766 via werkzeug (0.11.10)

werkzeug PYPI version 0.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.2.6, =1.0.0a1, =1.1.0 - picopayments-hub 0.0.11 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

appenginetaskutils (>=0.4.3.dev2, <=0.4.3), asc (>=0.1.0, <=0.3.1) +20 more potentially affected by CVE-2024-49766 via werkzeug (0.12.2)

werkzeug PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - appenginetaskutils =0.4.3.dev2, =0.1.0, =1.0.18, =0.1.0, =0.12.0, =2.10.60, =2.0.2, =0.1.0, =0.1.0, =0.5.0 - nailpack-flask 0.1.0 - nails 0.2.0...

kyoukai (>=2.2.0, <=2.2.1), mezmorize (>=0.18.1, <=0.25.0) +2 more potentially affected by CVE-2024-49766 via werkzeug (0.13.0)

werkzeug PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - kyoukai =2.2.0, =0.18.1, =0.49.2, =0.0.0.1, =0.0.3 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

oobabot-plugin (0.2.3) potentially affected by CVE-2024-48052 via gradio (3.33.1)

gradio PYPI version 3.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - oobabot-plugin 0.2.3 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...

aequitas (>=0.26.0, <=0.42.0), ap-rss-reader (0.0.3) +32 more potentially affected by CVE-2024-25885 via xhtml2pdf (>=0.0.6, <=0.2.16)

xhtml2pdf PYPI version =0.0.6, =0.26.0, =2.3.1, =0.3.0, =1.0.0, =1.0.0, =1.0.3, =1.0.3, =0.1.2, =0.1.132, =0.1.137 and more Source cves: CVE-2024-25885 Source advisory: OSV:PYSEC-2026-2056...

django-pesapal (>=0.3.0, <=0.3.4) potentially affected by CVE-2024-45231 via django (1.7.8)

django PYPI version 1.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-pesapal =0.3.0, =0.3.4 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

aiida-core (1.0.0) potentially affected by CVE-2024-45231 via django (1.11.25)

django PYPI version 1.11.25 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aiida-core 1.0.0 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

docker-compose-control-center (3.1.0) potentially affected by CVE-2024-45231 via django (2.1.10)

django PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center 3.1.0 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

nemo (>=1.22.0, <=1.22.1), patchman (>=1.2.3, <=1.2.4) potentially affected by CVE-2024-45231 via django (1.11.27)

django PYPI version 1.11.27 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - nemo =1.22.0, =1.2.3, =1.2.4 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...