aratinga (0.1.0a0.dev3), coop (>=7.1.0, <=7.2.1) +7 more potentially affected by CVE-2026-54260 via wagtail (>=7.1.0, <=7.2.3)

wagtail PYPI version =7.1.0, =7.1.0, =1.1.1, =2.0.0, =0.0.1, =7.1.0a1, =7.2.0b0 Source cves: CVE-2026-54260 Source advisory: SNYK:PYTHON-WAGTAIL-17795996...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-54756 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-54756 Source advisory: SNYK:JS-JODIT-17796054...

coop (2.15.1), django-oscar-elasticsearch (>=2.0.3, <=2.0.7) +18 more potentially affected by CVE-2026-54262 via wagtail (2.15.6)

wagtail PYPI version 2.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop 2.15.1 - django-oscar-elasticsearch =2.0.3, =0.0.1, =0.1.0, =0.9.5, =0.2.0, =0.0.1, =1.2.0, =1.2.1 - wagtail-trash 0.2.0 and more Source cve...

wagtail-resume (1.3.0) potentially affected by CVE-2026-54259 via wagtail (2.12.0)

wagtail PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-resume 1.3.0 Source cves: CVE-2026-54259 Source advisory: OSV:PYSEC-2026-612...

django-cast (0.2.33) potentially affected by CVE-2026-54262 via wagtail (6.1.0rc2)

wagtail PYPI version 6.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-cast 0.2.33 Source cves: CVE-2026-54262 Source advisory: OSV:PYSEC-2026-615...

texsite (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-54262 via wagtail (1.2.0)

wagtail PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - texsite =0.0.1, =0.0.2 Source cves: CVE-2026-54262 Source advisory: OSV:PYSEC-2026-615...

wagtailgridder (0.9.0) potentially affected by CVE-2026-54262 via wagtail (1.8.2)

wagtail PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtailgridder 0.9.0 Source cves: CVE-2026-54262 Source advisory: OSV:PYSEC-2026-615...

wagtail-markdown (0.5.0) potentially affected by CVE-2026-54259 via wagtail (2.3.0rc2)

wagtail PYPI version 2.3.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-markdown 0.5.0 Source cves: CVE-2026-54259 Source advisory: OSV:PYSEC-2026-612...

aimmo (>=0.57.1b6141, <=0.61.8b52), cfl-common (>=4.3.0, <=4.14.2) +9 more potentially affected by CVE-2026-54259 via wagtail (2.3.0)

wagtail PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - aimmo =0.57.1b6141, =4.3.0, =2.28.0, =2.3.0, =0.2.0, =2.4.0, =0.2.0, =0.1.5, =0.6.1 - wagtailsurveys 0.2.0 Source cves: CVE-2026-54259 Source...

wapps (>=0.1.1.dev0, <=0.1.2.dev0) potentially affected by CVE-2026-54259 via wagtail (1.13.0)

wagtail PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wapps =0.1.1.dev0, =0.1.2.dev0 Source cves: CVE-2026-54259 Source advisory: OSV:PYSEC-2026-612...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-58263 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-58263 Source advisory: SNYK:JS-JODIT-17796040...

apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-50143 via @apify/actors-mcp-server (0.7.4)

@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-50143 Source advisory:...

apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-50143 via @apify/actors-mcp-server (0.7.4)

@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-50143 Source advisory: OSV:GHSA-6GR2-QH89-HXWM...

ai.pipestream:connector-admin-service (0.1.18), ai.pipestream:pipestream-engine (0.0.6) +199 more potentially affected by CVE-2026-53712 via com.ongres.scram:scram-common (>=3.0, <=3.2)

com.ongres.scram:scram-common MAVEN version =3.0, =0.1.25, =1.5.0, =1.5.0, =0.3.0, =0.7.0, =0.7.0, =0.7.0, =0.3.124, =0.3.124, =0.5.0 and more Source cves: CVE-2026-53712 Source advisory: OSV:GHSA-P9JG-FCR6-3MHF...

depthflow (>=0.5.0, <=0.6.0) potentially affected by CVE-2026-49119 via gradio (4.22.0)

gradio PYPI version 4.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - depthflow =0.5.0, =0.6.0 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2026-49119 via gradio (3.48.0)

gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

screenenv (0.0.1.dev0), simple-voice-chat (>=4.0.1, <=4.2.3) +1 more potentially affected by CVE-2026-49119 via gradio (5.23.1)

gradio PYPI version 5.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - screenenv 0.0.1.dev0 - simple-voice-chat =4.0.1, =4.2.3 - zmp-knowledge-store-mcp-server 0.1.0 Source cves: CVE-2026-49119 Source advisory:...

jllama-py (>=1.0.0, <=1.1.14), llamafactory (0.9.3) potentially affected by CVE-2026-49119 via gradio (5.31.0)

gradio PYPI version 5.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - jllama-py =1.0.0, =1.1.14 - llamafactory 0.9.3 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

cleanunet-denoiser (>=0.0.1.dev1, <=0.0.1.dev3), depthflow (>=0.7.0.dev1, <=0.8.0) +4 more potentially affected by CVE-2026-49119 via gradio (4.44.0)

gradio PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cleanunet-denoiser =0.0.1.dev1, =0.7.0.dev1, =0.4.5, =0.5.9, =1.0.2, =1.0.8 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

depthflow (0.9.1), f5-tts (1.1.7) +10 more potentially affected by CVE-2026-49119 via gradio (5.35.0)

gradio PYPI version 5.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - depthflow 0.9.1 - f5-tts 1.1.7 - iflow-mcp-pdfmathtranslate-pdf2zh 1.9.11 - mseep-pdf2zh 1.9.11 - paper-reader 0.1.0 - particleanalyzer =0.1.28,...