magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-3219 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...

aihandler (1.9.7), airunner (>=1.9.4, <=1.9.5) potentially affected by CVE-2026-3219 via pip (23.1.0)

pip PYPI version 23.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aihandler 1.9.7 - airunner =1.9.4, =1.9.5 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...

animo-trainer (1.0.2), build-harness (1.0.1) +16 more potentially affected by CVE-2026-3219 via pip (22.0.4)

pip PYPI version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - animo-trainer 1.0.2 - build-harness 1.0.1 - cacheback2 0.0.5 - cdp-connector =1.0.0, =1.26.6, =1.2.3, =2022.3.0b0, =2022.3.0b0, =0.4.0rc0, =0.6.16,...

build-harness (0.2.1), c4v-py (>=0.1.0.dev2021118, <=0.1.0.dev202201291921) +34 more potentially affected by CVE-2026-3219 via pip (21.3.1)

pip PYPI version 21.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - build-harness 0.2.1 - c4v-py =0.1.0.dev2021118, =0.0.2a0, =0.9.2, =1.26.1, =0.5.0, =4.0.0, =22.16.0, =0.1.9, =0.2.12, =0.1.0, =0.0.57, =0.0.59 -...

chalice (>=1.9.0, <=1.9.1), corgy-erp (>=0.0.1, <=1.0.7) potentially affected by CVE-2026-3219 via pip (19.2.0)

pip PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.9.0, =0.0.1, =1.0.7 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...

dsframework (>=0.1.9, <=0.1.12), hes-off (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-3219 via pip (21.1.1)

pip PYPI version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - dsframework =0.1.9, =1.0.0, =1.0.1 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...

agi-med-utils (>=0.1.10, <=0.1.19), c2cciutils (1.1.31) +2 more potentially affected by CVE-2026-3219 via pip (23.3.0)

pip PYPI version 23.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agi-med-utils =0.1.10, =0.0.15, =0.0.16 - resource-schema-guard-rail 0.0.9 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...

1password-secrets (>=0.0.1.dev107, <=0.4.0), 42towels (>=0.1.1001, <=0.1.1011) +2376 more potentially affected by CVE-2026-28684 via python-dotenv (>=1.0.0, <=1.2.1)

python-dotenv PYPI version =1.0.0, =0.0.1.dev107, =0.1.1001, =2.3.0, =0.0.15, =0.15.1, =0.1.0, =0.1.0, =1.0.0, =2.3.9b1, =1.18.8, =0.1.0b0, =0.0.1, =0.0.0, =4.8.2, =4.8.399 and more Source cves: CVE-2026-28684 Source advisory: OSV:PYSEC-2026-2270...

abstract-python-email-validation (>=0.1.1, <=1.0.0), abstract-python-exchange-rates (>=1.0.0, <=1.0.1) +21 more potentially affected by CVE-2026-28684 via python-dotenv (0.17.0)

python-dotenv PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - abstract-python-email-validation =0.1.1, =1.0.0, =0.1.0, =0.1.0, =1.1.5, =0.0.3, =1.3.3, =1.0.1, =0.11.0, =0.0.3, =0.0.1, =0.3.0,...

@brikcss/rollup-config-generator (>=0.0.15, <=0.0.16), @brikcss/stakcss (>=0.0.0, <=0.9.1) +9 more potentially affected by CVE-2026-6594 via @brikcss/merge (>=1.0.7, <=1.3.0)

@brikcss/merge NPM version =1.0.7, =0.0.15, =0.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4, =0.0.1, =0.2.0, =0.10.0 Source cves: CVE-2026-6594 Source advisory: OSV:GHSA-3JC6-6R48-V6QF...

011xwztpjn (1.0.0), 02y9dg4qm3 (1.0.0) +11557 more potentially affected by CVE-2026-41239 via dompurify (>=1.0.10, <=3.3.3)

dompurify NPM version =1.0.10, =3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on dompurify and may be impacted: - 011xwztpjn 1.0.0 - 02y9dg4qm3 1.0.0 - 04tw75kmd9 1.0.0 - 0650teqqly 1.0.0 - 097oi25ils 1.0.0 - 0a0fpniotn 1.0.0 - 0c7j76u46q 1.0.0 -...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2162 more potentially affected by CVE-2026-41238 via dompurify (>=3.0.1, <=3.3.3)

dompurify NPM version =3.0.1, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.3 and more Source cves: CVE-2026-41238 Source advisory: SNYK:JS-DOMPURIFY-16132234...

1router (>=0.3.96, <=1.0.2), 3d-bin-packing-ts (>=1.0.0, <=1.0.1) +7586 more potentially affected by CVE-2026-41907 via uuid (>=12.0.0, <=13.0.2)

uuid NPM version =12.0.0, =0.3.96, =1.0.0, =2.1.0, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =0.0.1, =0.3.0, =0.4.0, =0.2.0, =0.2.1 - @0xcurvy/curvy-mcp 0.1.0 and more Source cves: CVE-2026-41907 Source advisory: SNYK:JS-UUID-16133035...

dadmatools (>=1.4.0, <=1.5.0), draupnir (>=0.0.2, <=0.0.193) potentially affected by CVE-2026-40491 via gdown (4.3.1)

gdown PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on gdown and may be impacted: - dadmatools =1.4.0, =0.0.2, =0.0.193 Source cves: CVE-2026-40491 Source advisory: OSV:PYSEC-2026-2158...

adversarial-insight-ml (0.2.1), aiagents4pharma (>=0.0.0, <=1.49.1) +90 more potentially affected by CVE-2026-40491 via gdown (>=5.0.0, <=5.2.1)

gdown PYPI version =5.0.0, =0.0.0, =0.2.3, =0.4.0, =0.0.1rc1, =0.2.2, =1.8.1, =0.2.1, =0.1.1, =0.0.1, =0.2.1 and more Source cves: CVE-2026-40491 Source advisory: OSV:PYSEC-2026-2158...

dagit (0.14.1rc0), dagster-airbyte (0.14.1rc0) +33 more potentially affected by CVE-2026-41490 via dagster (0.14.1rc0)

dagster PYPI version 0.14.1rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.1rc0 - dagster-airbyte 0.14.1rc0 - dagster-airflow 0.14.1rc0 - dagster-aws 0.14.1rc0 - dagster-azure 0.14.1rc0 - dagster-celery...

dagit (0.7.8rc0), dagster-airflow (0.7.8rc0) potentially affected by CVE-2026-41490 via dagster (0.7.8rc0)

dagster PYPI version 0.7.8rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.7.8rc0 - dagster-airflow 0.7.8rc0 Source cves: CVE-2026-41490 Source advisory: OSV:GHSA-MJW2-V2HM-WJ34...

dagit (0.11.3rc0), dagster-airflow (0.11.3rc0) potentially affected by CVE-2026-41490 via dagster (0.11.3rc0)

dagster PYPI version 0.11.3rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.11.3rc0 - dagster-airflow 0.11.3rc0 Source cves: CVE-2026-41490 Source advisory: OSV:GHSA-MJW2-V2HM-WJ34...

dagit (0.7.4rc0), dagster-airflow (0.7.4rc0) potentially affected by CVE-2026-41490 via dagster (0.7.4rc0)

dagster PYPI version 0.7.4rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.7.4rc0 - dagster-airflow 0.7.4rc0 Source cves: CVE-2026-41490 Source advisory: OSV:GHSA-MJW2-V2HM-WJ34...

dagit (0.10.2rc0), dagster-airflow (0.10.2rc0) potentially affected by CVE-2026-41490 via dagster (0.10.2rc0)

dagster PYPI version 0.10.2rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.10.2rc0 - dagster-airflow 0.10.2rc0 Source cves: CVE-2026-41490 Source advisory: OSV:GHSA-MJW2-V2HM-WJ34...