adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-3574 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-3574 Source advisory: OSV:PYSEC-2026-1908...

acmetk (0.0.2), aioasuswrt (1.3.3) +136 more potentially affected by CVE-2023-50782 via cryptography (3.3.2)

cryptography PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - acmetk 0.0.2 - aioasuswrt 1.3.3 - ais-dom =2021.3.0b4, =1.6.0, =10.0.0, =1.10.0, =1.8.0, =2.20.0, =2.20.0, =1.0.1, =0.3.27, =0.5.6, =0.8...

activedirectoryenum (>=0.4.0, <=0.4.6), adversarial-labeller (0.1.8) +117 more potentially affected by CVE-2023-50782 via cryptography (2.8.0)

cryptography PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - activedirectoryenum =0.4.0, =0.1.2, =0.105.2b1, =5.0.3, =0.6.1, =1.0.0.104260, =0.0.2, =1.1.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0,...

ais-dom (>=0.92.5, <=0.95.7), bitwarden-simple-cli (>=1.0.0, <=1.3.1) +29 more potentially affected by CVE-2023-50782 via cryptography (2.6.1)

cryptography PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.92.5, =1.0.0, =1.7.1, =0.2.5, =0.0.0, =0.0.17, =0.0.1.dev33, =0.1.8, =0.4.3, =0.1.0, =1.0.5 - ezissue-br 1.0.0 and more Sourc...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +378 more potentially affected by CVE-2024-0243 via langchain (>=0.0.27, <=0.0.354)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2024-0243 Source advisory: OSV:PYSEC-2026-1509...

airflow-run (0.4.9), ais-dom (>=0.117.0b0, <=2021.2.4) +49 more potentially affected by CVE-2024-0727 via cryptography (3.2.0)

cryptography PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - airflow-run 0.4.9 - ais-dom =0.117.0b0, =2.0.1.dev14, =2.0.2 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 -...

vantage6-node (3.0.1), vantage6-server (3.0.1) potentially affected by CVE-2024-21653 via vantage6 (3.0.1)

vantage6 PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.0.1 - vantage6-server 3.0.1 Source cves: CVE-2024-21653 Source advisory: OSV:PYSEC-2026-2003...

askflow-cli (1.0.0), atlassian-jwt-auth (>=8.0.2, <=9.0.0) +68 more potentially affected by CVE-2024-0727 via cryptography (3.2.1)

cryptography PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - askflow-cli 1.0.0 - atlassian-jwt-auth =8.0.2, =0.0.9, =0.2.7a0, =0.0.2, =0.0.1a12, =0.6.0, =3.1.12, =2.1.0, =1.0.0, =0.0.19, =0.7.1,...

hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2024-0727 via cryptography (2.0.0)

cryptography PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

activedirectoryenum (>=0.4.7, <=0.5.0), cumulusci (>=3.18.0, <=3.20.0.dev1) +20 more potentially affected by CVE-2024-0727 via cryptography (3.1.0)

cryptography PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - activedirectoryenum =0.4.7, =3.18.0, =1.0.1, =1.0.0, =1.0.0, =0.1.0, =1.3.0, =3.0.0b1, =1.4.0, =1.5.1, =2.1.6 - opacus 0.9.1 - osia...

acmetk (0.0.2), aioasuswrt (1.3.3) +136 more potentially affected by CVE-2024-0727 via cryptography (3.3.2)

cryptography PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - acmetk 0.0.2 - aioasuswrt 1.3.3 - ais-dom =2021.3.0b4, =1.6.0, =10.0.0, =1.10.0, =1.8.0, =2.20.0, =2.20.0, =1.0.1, =0.3.27, =0.5.6, =0.8...

acapy-plugin-pickup (>=0.1.0.post1, <=0.2.0), acapy-wallet-groups-plugin (>=0.1.5, <=0.7.0) +50 more potentially affected by CVE-2024-23342 via ecdsa (0.16.1)

ecdsa PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on ecdsa and may be impacted: - acapy-plugin-pickup =0.1.0.post1, =0.1.5, =1.0.2, =1.0.0rc1, =1.0.0rc1, =1.0.0rc1, =1.0.0rc1, =0.0.3, =0.2.0, =0.7.0rc0, =0.2.40, =2.1.0, =5.1.0,...

foodx-devops-tools (>=0.0.0.post44, <=0.0.0.post60) potentially affected by CVE-2023-5115 via ansible (4.4.0)

ansible PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - foodx-devops-tools =0.0.0.post44, =0.0.0.post60 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2023-6976 via mlflow (1.4.0)

mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2023-6976 Source advisory: OSV:PYSEC-2026-1662...

dagster-mlflow (>=0.14.18rc5, <=0.17.21), sparkpipelineframework (1.0.18) potentially affected by CVE-2023-6976 via mlflow (1.26.0)

mlflow PYPI version 1.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.14.18rc5, =0.17.21 - sparkpipelineframework 1.0.18 Source cves: CVE-2023-6976 Source advisory: OSV:PYSEC-2026-1662...

autorad (>=0.2.2, <=0.2.5), katonic (>=1.3.0, <=1.6.0) potentially affected by CVE-2023-6977 via mlflow (1.23.1)

mlflow PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - autorad =0.2.2, =1.3.0, =1.6.0 Source cves: CVE-2023-6977 Source advisory: OSV:PYSEC-2026-1659...

biome-text (>=3.0.0, <=3.2.1), farm (>=0.6.2, <=0.8.0) +5 more potentially affected by CVE-2023-6976 via mlflow (1.13.1)

mlflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text =3.0.0, =0.6.2, =0.7.0, =0.0.1, =1.1.0, =1.0.0, =0.4.5.dev2, =0.6.5 Source cves: CVE-2023-6976 Source advisory: OSV:PYSEC-2026-1662...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2023-6977 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2023-6977 Source advisory: OSV:PYSEC-2026-1659...

deepsleep (1.0.3) potentially affected by CVE-2023-6977 via mlflow (1.5.0)

mlflow PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - deepsleep 1.0.3 Source cves: CVE-2023-6977 Source advisory: OSV:PYSEC-2026-1659...

gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2023-6977 via mlflow (1.4.0)

mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2023-6977 Source advisory: OSV:PYSEC-2026-1659...