batcave (37.0.0), batspp (>=2.0.1, <=2.1.2) +25 more potentially affected by CVE-2024-6345 via setuptools (41.2.0)

setuptools PYPI version 41.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - batcave 37.0.0 - batspp =2.0.1, =0.1.5, =0.1.4, =2021.9.1, =0.2.0, =0.0.1, =1.0.8, =1.0.0, =1.0.0, =1.0.2 - gendeblur 0.0.1 - lunas 0.3.7 -...

catapult-api (0.6.3), cumulusci (>=3.44.0.dev1, <=3.44.0) potentially affected by CVE-2024-6345 via setuptools (58.0.3)

setuptools PYPI version 58.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - catapult-api 0.6.3 - cumulusci =3.44.0.dev1, =3.44.0 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

cvexplore (0.1.6), pyphorus (>=0.0.1, <=0.0.3) potentially affected by CVE-2024-6345 via setuptools (51.1.0)

setuptools PYPI version 51.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cvexplore 0.1.6 - pyphorus =0.0.1, =0.0.3 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

python3-cisctl (>=0.1.2, <=1.1.0), python3-nbctl (>=0.0.2, <=1.0.0) +1 more potentially affected by CVE-2024-6345 via setuptools (65.1.1)

setuptools PYPI version 65.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - python3-cisctl =0.1.2, =0.0.2, =0.0.3, =0.0.28 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

aaiopay (>=0.2.1, <=0.2.2), absorb (0.1.2) +146 more potentially affected by CVE-2024-6345 via setuptools (65.5.1)

setuptools PYPI version 65.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aaiopay =0.2.1, =0.1.0, =1.8.15, =1.8.17, =0.0.8, =1.8.14, =1.0.6a1, =0.0.1, =3.0.0, =0.1.2, =0.2.0, =0.2.1 and more Source cves:...

ricecooker (>=0.7.0b4, <=0.7.1) potentially affected by CVE-2024-38519 via yt-dlp (2022.3.8.1)

yt-dlp PYPI version 2022.3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ricecooker =0.7.0b4, =0.7.1 Source cves: CVE-2024-38519 Source advisory: OSV:PYSEC-2026-2065...

gridplayer (>=0.4.0, <=0.4.2) potentially affected by CVE-2024-38519 via yt-dlp (2022.6.29)

yt-dlp PYPI version 2022.6.29 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - gridplayer =0.4.0, =0.4.2 Source cves: CVE-2024-38519 Source advisory: OSV:PYSEC-2026-2065...

a2grunnerp (>=0.1.0, <=0.1.8), abracadabra (>=0.0.0, <=0.0.7) +900 more potentially affected by CVE-2024-5569 via zipp (>=3.0.0, <=3.19.0)

zipp PYPI version =3.0.0, =0.1.0, =0.0.0, =2.0.0a0, =1.0.0.dev0, =1.5.2, =0.1.0, =1.0.0, =1.0.9, =0.0.1, =1.3.0, =0.0.1, =0.1.2, =0.1.8 and more Source cves: CVE-2024-5569 Source advisory: OSV:PYSEC-2026-2074...

aliot-py (>=0.1.0, <=1.0.6), angeltools (>=0.1.1, <=0.2.3.post5) +19 more potentially affected by CVE-2024-6345 via setuptools (62.1.0)

setuptools PYPI version 62.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aliot-py =0.1.0, =0.1.1, =0.3.0, =6.8.1, =2.0.8, =1.13.0, =2.4.3, =0.0.1, =1.0.5, =1.0.7 - nucypher 6.1.0 - pipsalabim 0.2.0 -...

aiogram-inline-paginations (>=0.1.10, <=0.1.12), asynkets (>=0.1.1, <=0.1.3) +114 more potentially affected by CVE-2024-6345 via setuptools (65.7.0)

setuptools PYPI version 65.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aiogram-inline-paginations =0.1.10, =0.1.1, =0.0.11, =0.4.1, =0.0.50, =0.1.3, =1.3.2, =2.3.0.dev0, =2.0.0, =2.0.0, =2.0.0, =2.3.0.dev0,...

aiodatastore (>=0.1.1, <=0.2.0), apache-airflow-providers-google (>=10.13.0, <=10.19.0) +65 more potentially affected by CVE-2024-6345 via setuptools (66.1.1)

setuptools PYPI version 66.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aiodatastore =0.1.1, =10.13.0, =0.0.2, =0.1.0, =1.0.0, =0.16.0, =0.1.0, =0.5.0, =0.1.0, =6.14.1, =8.1.1, =1.2.0, =0.0.2, =2.21.0, =2.22.0 a...

adpred (>=1.1.6, <=1.2.7), arsa (>=1.0.0, <=1.1.2) +10 more potentially affected by CVE-2024-6345 via setuptools (46.4.0)

setuptools PYPI version 46.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - adpred =1.1.6, =1.0.0, =0.11.0, =1.0.1, =0.1.0, =0.1.2, =0.1.2, =0.1.0, =0.2.3 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1...

wandb (>=0.6.21, <=0.6.26) potentially affected by CVE-2024-40647 via sentry-sdk (0.4.0)

sentry-sdk PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - wandb =0.6.21, =0.6.26 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

basketcase (3.0.1), gridplayer (0.3.0) potentially affected by CVE-2024-38519 via yt-dlp (2022.6.22.1)

yt-dlp PYPI version 2022.6.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 3.0.1 - gridplayer 0.3.0 Source cves: CVE-2024-38519 Source advisory: OSV:PYSEC-2026-2065...

aiolivisi (0.0.4), airflow-provider-sqream-blue (>=0.0.1, <=0.0.7) +35 more potentially affected by CVE-2024-6345 via setuptools (57.4.0)

setuptools PYPI version 57.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aiolivisi 0.0.4 - airflow-provider-sqream-blue =0.0.1, =0.7.5, =0.0.2, =0.11.0, =0.5.1, =3.40.0, =0.2.5.5, =0.3.2, =0.1.0, =0.1.0, =0.1.0,...

an-website (>=22.7.1, <=22.7.5), antigen (0.2.0) +31 more potentially affected by CVE-2024-6345 via setuptools (62.6.0)

setuptools PYPI version 62.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.7.1, =0.2.0, =0.1.0, =0.1.3, =1.2.18, =3.5.2, =1.3.0, =1.4.2 and more Source cves: CVE-2024-6345 Source advisory:...

elita (>=0.60.0, <=0.64.1) potentially affected by CVE-2024-22231 via salt (2014.1.10)

salt PYPI version 2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2024-22231 Source advisory: OSV:PYSEC-2026-1900...

aiconsole (>=0.2.0, <=0.2.7), fastrepl (>=0.0.19, <=0.0.20) potentially affected by CVE-2024-5710 via litellm (0.6.6)

litellm PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - aiconsole =0.2.0, =0.0.19, =0.0.20 Source cves: CVE-2024-5710 Source advisory: OSV:PYSEC-2026-1551...

drf-httpsig (>=1.0.0, <=1.0.2), sentry (>=7.7.1, <=7.7.4) potentially affected by CVE-2024-21520 via djangorestframework (2.3.14)

djangorestframework PYPI version 2.3.14 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework and may be impacted: - drf-httpsig =1.0.0, =7.7.1, =7.7.4 Source cves: CVE-2024-21520 Source advisory: OSV:PYSEC-2026-1304...

diffuzers (>=0.0.2, <=0.0.6), starwhale (>=0.3.5, <=0.4.9) potentially affected by CVE-2024-4940 via gradio (3.15.0)

gradio PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - diffuzers =0.0.2, =0.3.5, =0.4.9 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...