cnx-archive (>=3.1.0, <=4.15.23), cnx-easybake (1.2.8) +11 more potentially affected by CVE-2026-41066 via lxml (4.4.3)

lxml PYPI version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - cnx-archive =3.1.0, =0.21.1, =0.1.0a1, =0.3.1, =0.2.29, =0.3.0, =9.1.0b1, =3.3.0, =0.2.0a1, =0.3.0a1 - roku 3.1.0 Source cves: CVE-2026-41066 Source...

acdh-collatex-utils (>=0.2.0, <=1.2.0), ayushbot (0.0.2.4) +38 more potentially affected by CVE-2026-41066 via lxml (4.6.1)

lxml PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - acdh-collatex-utils =0.2.0, =0.2.0, =2.0.0, =3.22.0, =0.1.8.1, =0.6.0, =0.1.1, =0.0.2, =2.1.6, =1.0.0, =0.2.56, =0.2.2, =0.1.0, =0.7.0, =0.9.35 and more...

acdh-collatex-utils (1.3.0), alphapept (0.3.29) +76 more potentially affected by CVE-2026-41066 via lxml (4.6.2)

lxml PYPI version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - acdh-collatex-utils 1.3.0 - alphapept 0.3.29 - ansible-playbook-grapher 0.11.0 - arena-cli =1.0.0, =2.3.0, =0.0.1, =0.4.1, =3.25.0, =1.1.8, =1.1.11 and...

acmc (0.0.2), active-framework (>=2.0.0, <=2.0.9) +55 more potentially affected by CVE-2026-41066 via lxml (5.3.1)

lxml PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - acmc 0.0.2 - active-framework =2.0.0, =25.3.0, =1.0.4, =0.0.3.dev1, =0.0.3, =0.1.0, =0.0.32, =1.7.2, =0.2.1.dev1, =0.1.0, =0.1.0, =1.0.1, =1.107.2rc3,...

arched-emailer (>=0.2.26, <=0.2.37), article-parser (1.7.1) +27 more potentially affected by CVE-2026-41066 via lxml (5.1.1)

lxml PYPI version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - arched-emailer =0.2.26, =0.1.28, =1.0.0, =1.0.0, =1.0.9, =2.0.0, =0.1.0, =1.3.9, =1.2.7, =1.2.17 and more Source cves: CVE-2026-41066 Source advisory:...

chopper (>=0.4.7, <=0.4.8), doc2dash (>=1.2.1, <=2.0.2) potentially affected by CVE-2026-41066 via lxml (3.3.5)

lxml PYPI version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - chopper =0.4.7, =1.2.1, =2.0.2 Source cves: CVE-2026-41066 Source advisory: OSV:GHSA-VFMQ-68HX-4JFW...

reahl-webdev (>=3.1.0, <=3.2.0) potentially affected by CVE-2026-41066 via lxml (3.3.6)

lxml PYPI version 3.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - reahl-webdev =3.1.0, =3.2.0 Source cves: CVE-2026-41066 Source advisory: OSV:GHSA-VFMQ-68HX-4JFW...

com.aegisql:conveyor-configurator (>=1.5.1, <=1.5.2), com.datastax.oss.quarkus:cassandra-quarkus-client (>=1.0.1, <=1.0.4) +2043 more potentially affected by CVE-2026-22007 via org.graalvm.sdk:graal-sdk (>=21.0.0, <=21.0.0.2)

org.graalvm.sdk:graal-sdk MAVEN version =21.0.0, =1.5.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.3, =1.0.1, =1.0.1, =1.0.1, =4.11.0, =1.2.0, =1.2.0, =1.4.0 and more Source cves: CVE-2026-22007 Source advisory: SNYK:JAVA-ORGGRAALVMSDK-1...

com.aegisql:conveyor-configurator (>=1.5.1, <=1.5.2), com.datastax.oss.quarkus:cassandra-quarkus-client (>=1.0.1, <=1.0.4) +2043 more potentially affected by CVE-2026-22016 via org.graalvm.sdk:graal-sdk (>=21.0.0, <=21.0.0.2)

org.graalvm.sdk:graal-sdk MAVEN version =21.0.0, =1.5.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.3, =1.0.1, =1.0.1, =1.0.1, =4.11.0, =1.2.0, =1.2.0, =1.4.0 and more Source cves: CVE-2026-22016 Source advisory: SNYK:JAVA-ORGGRAALVMSDK-1...

@acampkin/mcc (>=2.1.0, <=2.5.0), @kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.6.0) +24 more potentially affected by CVE-2026-39861 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.63)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =2.0.0 - ch-go 1.0.3 and more Source cves: CVE-2026-39861 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-16191021...

@acampkin/mcc (>=2.1.0, <=2.5.0), @kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.6.0) +24 more potentially affected by CVE-2026-39861 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.63)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =2.0.0 - ch-go 1.0.3 and more Source cves: CVE-2026-39861 Source advisory: OSV:GHSA-VP62-R36R-9XQP...

aepsych (>=0.3.0, <=0.4.0), aima (2023.2.4) +210 more potentially affected by CVE-2026-39378 via nbconvert (>=6.5.0, <=7.17.0)

nbconvert PYPI version =6.5.0, =0.3.0, =0.9.5, =0.21.2, =0.1.0, =1.0.1, =1.0.1, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.1, =0.0.6 and more Source cves: CVE-2026-39378 Source advisory: OSV:GHSA-7JQV-FW35-GMX9...

@smg-automotive/auth (>=8.2.3, <=9.0.2-support-next-16.2.1) potentially affected by CVE-2026-40155 via @auth0/nextjs-auth0 (>=4.12.1, <=4.17.1)

@auth0/nextjs-auth0 NPM version =4.12.1, =8.2.3, =9.0.2-support-next-16.2.1 Source cves: CVE-2026-40155 Source advisory: OSV:GHSA-XQ8M-7C5P-C2R6...

eac-toolbelt (>=1.0.0, <=2.5.5) potentially affected by CVE-2026-28684 via python-dotenv (0.6.3)

python-dotenv PYPI version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - eac-toolbelt =1.0.0, =2.5.5 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

acru-l (>=1.0.0a0, <=1.0.0a6), akc-mamba (>=2.1.0a1, <=2.1.2a0) +182 more potentially affected by CVE-2026-28684 via python-dotenv (0.15.0)

python-dotenv PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - acru-l =1.0.0a0, =2.1.0a1, =1.0.0, =0.1.0, =1.4.0, =0.0.5, =0.6.2, =1.0.0, =0.1.1, =2021.10.11.4, =0.1.2, =0.1.8 and more Source cves...

abstract-python-email-validation (>=0.1.1, <=1.0.0), abstract-python-exchange-rates (>=1.0.0, <=1.0.1) +21 more potentially affected by CVE-2026-28684 via python-dotenv (0.17.0)

python-dotenv PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - abstract-python-email-validation =0.1.1, =1.0.0, =0.1.0, =0.1.0, =1.1.5, =0.0.3, =1.3.3, =1.0.1, =0.11.0, =0.0.3, =0.0.1, =0.3.0,...

lantern-flask (>=0.0.24, <=0.0.47), tgbotgen (>=0.1.0, <=0.2.1) potentially affected by CVE-2026-28684 via python-dotenv (0.9.0)

python-dotenv PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - lantern-flask =0.0.24, =0.1.0, =0.2.1 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

aepsych (>=0.3.0, <=0.4.0), aima (2023.2.4) +210 more potentially affected by CVE-2026-39378 via nbconvert (>=6.5.0, <=7.17.0)

nbconvert PYPI version =6.5.0, =0.3.0, =0.9.5, =0.21.2, =0.1.0, =1.0.1, =1.0.1, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.1, =0.0.6 and more Source cves: CVE-2026-39378 Source advisory: SNYK:PYTHON-NBCONVERT-16115385...

@alialf/cc-switch (>=1.0.0, <=1.0.1), codex-copilot-dx (>=0.1.0, <=0.1.6) potentially affected by CVE-2026-6662 via copilot-api (0.7.0)

copilot-api NPM version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on copilot-api and may be impacted: - @alialf/cc-switch =1.0.0, =0.1.0, =0.1.6 Source cves: CVE-2026-6662 Source advisory: SNYK:JS-COPILOTAPI-16636640...

c2cciutils (>=1.1.0.dev20260322010408, <=1.1.70), igrafx-mining-sdk (>=2.38.0, <=2.38.1) +13 more potentially affected by CVE-2026-3219 via pip (>=26.0.0, <=26.0.1)

pip PYPI version =26.0.0, =1.1.0.dev20260322010408, =2.38.0, =0.1.1, =0.9.478, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.4.3, =0.1.0, =2.0.0, =2.1.1 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...