athina (1.1.0), llama-index-output-parsers-guardrails (>=0.0.1, <=0.6.0) potentially affected by CVE-2024-45858 via guardrails-ai (>=0.3.3, <=0.4.5)

guardrails-ai PYPI version =0.3.3, =0.0.1, =0.6.0 Source cves: CVE-2024-45858 Source advisory: OSV:PYSEC-2026-1432...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2024-6587 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2024-6587 Source advisory: OSV:PYSEC-2026-1547...

bytewax-azure-ai-search (0.1.1) potentially affected by CVE-2024-41950 via haystack-ai (2.2.1)

haystack-ai PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on haystack-ai and may be impacted: - bytewax-azure-ai-search 0.1.1 Source cves: CVE-2024-41950 Source advisory: OSV:PYSEC-2026-1447...

aio-overpass (>=0.9.0, <=0.11.0), aio-taginfo (0.2.0) +22 more potentially affected by CVE-2024-42367 via aiohttp (>=3.10.0rc0, <=3.10.1)

aiohttp PYPI version =3.10.0rc0, =0.9.0, =24.8.0, =0.2.0, =0.0.1, =1.1.6, =1.0.2, =1.0.1, =24.8.0, =6.1.0, =0.1.0, =0.9.73, =7.4.0, =7.4.1 and more Source cves: CVE-2024-42367 Source advisory: OSV:PYSEC-2026-1108...

aqt (2.1.30) potentially affected by CVE-2024-29073 via anki (2.1.30)

anki PYPI version 2.1.30 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.30 Source cves: CVE-2024-29073 Source advisory: OSV:PYSEC-2026-1118...

aqt (2.1.26) potentially affected by CVE-2024-29073 via anki (2.1.26)

anki PYPI version 2.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.26 Source cves: CVE-2024-29073 Source advisory: OSV:PYSEC-2026-1118...

aqt (2.1.35) potentially affected by CVE-2024-29073 via anki (2.1.35)

anki PYPI version 2.1.35 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.35 Source cves: CVE-2024-29073 Source advisory: OSV:PYSEC-2026-1118...

aqt (2.1.28) potentially affected by CVE-2024-29073 via anki (2.1.28)

anki PYPI version 2.1.28 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.28 Source cves: CVE-2024-29073 Source advisory: OSV:PYSEC-2026-1118...

crossbar (17.3.1) potentially affected by CVE-2024-41671 via twisted (17.1.0)

twisted PYPI version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - crossbar 17.3.1 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

carml (>=21.0.0, <=21.1.0), ctrader-fix (>=0.1.0, <=0.1.1) +17 more potentially affected by CVE-2024-41671 via twisted (21.7.0)

twisted PYPI version 21.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carml =21.0.0, =0.1.0, =0.4.0, =1.0.6, =0.0.1.dev15, =0.37.0, =0.1.2, =0.0.1, =0.1.0, =6.0.0, =6.0.2 and more Source cves: CVE-2024-41671 Source...

wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2024-35199 via torchserve (0.7.1)

torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2024-35199 Source advisory: OSV:PYSEC-2026-1971...

delft (0.2.2) potentially affected by CVE-2023-33976 via tensorflow-gpu (1.9.0)

tensorflow-gpu PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - delft 0.2.2 Source cves: CVE-2023-33976 Source advisory: OSV:PYSEC-2026-1962...

aqt (2.1.32) potentially affected by CVE-2024-29073 via anki (2.1.32)

anki PYPI version 2.1.32 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.32 Source cves: CVE-2024-29073 Source advisory: OSV:PYSEC-2026-1118...

fastlane (>=0.1.0, <=2.2.3) potentially affected by CVE-2024-40647 via sentry-sdk (0.5.5)

sentry-sdk PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - fastlane =0.1.0, =2.2.3 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

cobras (>=1.5.1, <=1.6.5), hackgame (>=0.0.14, <=0.0.28) +44 more potentially affected by CVE-2024-40647 via sentry-sdk (0.10.2)

sentry-sdk PYPI version 0.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - cobras =1.5.1, =0.0.14, =0.9.1.0, =0.0.1, =0.0.2, =2017.3.3, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.8.0, =0.46....

openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2024-6345 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2024-6345 Source advisor...

gripx (>=0.0.5, <=0.0.11), pythonmonitorapp (>=0.1.0, <=0.2.40) potentially affected by CVE-2024-6345 via setuptools (65.0.0)

setuptools PYPI version 65.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - gripx =0.0.5, =0.1.0, =0.2.40 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

goyabu-cli (>=1.0.7, <=1.0.15) potentially affected by CVE-2024-6345 via setuptools (64.0.1)

setuptools PYPI version 64.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - goyabu-cli =1.0.7, =1.0.15 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

cr-api-client (>=1.9.1, <=5.1.7), drb-impl-image (>=1.0.0a3, <=1.0.0b2) +33 more potentially affected by CVE-2024-6345 via setuptools (44.0.0)

setuptools PYPI version 44.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cr-api-client =1.9.1, =1.0.0a3, =1.0.0b1, =1.0.2, =1.0.1, =4.9.0, =1.3.15.8, =0.6.2, =1.26.0, =1.26.0, =1.26.0, =1.28.0 and more Source cve...

coinmetrics (0.2.4), ml4chem (>=0.0.3, <=0.0.6.dev0) +6 more potentially affected by CVE-2024-6345 via setuptools (41.4.0)

setuptools PYPI version 41.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - coinmetrics 0.2.4 - ml4chem =0.0.3, =2020.2.0, =1.0.0, =1.0.0, =1.0.1 - resume-classification 1.0.0 Source cves: CVE-2024-6345 Source...