aa-rag (0.4.3), acex (>=3.0.0, <=6.17.0) +903 more potentially affected by CVE-2026-32871 via fastmcp (>=0.1.0, <=3.1.1)

fastmcp PYPI version =0.1.0, =3.0.0, =0.2.0, =0.1.0, =0.5.0, =0.1.7rc1, =2.1.7, =0.1.0, =1.0.0, =0.4.6, =0.1.0, =2.0.5 and more Source cves: CVE-2026-32871 Source advisory: MEND:CVE-2026-32871...

aa-rag (0.4.3), hou-garden (>=0.0.1, <=0.0.8) +9 more potentially affected by CVE-2026-32871 via fastmcp (2.2.0)

fastmcp PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aa-rag 0.4.3 - hou-garden =0.0.1, =1.0.0, =2.0.0, =0.1.1, =0.1.1, =2.0.0 Source cves: CVE-2026-32871 Source advisory: OSV:GHSA-VV7Q-7JX5-F767...

aa-rag (>=0.1.0, <=0.4.1), graphtomation (>=0.0.3, <=0.0.5) +4 more potentially affected by CVE-2026-34070 via langchain-core (0.3.29)

langchain-core PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aa-rag =0.1.0, =0.0.3, =0.3.0, =0.1.1, =0.0.30, =0.0.33 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

aa-rag (>=0.4.2, <=0.4.3), ai-parrot (>=0.5.18, <=0.6.4) +11 more potentially affected by CVE-2026-34070 via langchain-core (0.3.51)

langchain-core PYPI version 0.3.51 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aa-rag =0.4.2, =0.5.18, =2025.4.71026, =2025.5.11802, =0.1.0, =2025.4.101146, =2025.9.111721, =2025.4.181139, =2025.5.91122, =0.1.8...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-33230 via nltk (>=3.0.0, <=3.9.3)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33230 Source advisory: OSV:PYSEC-2026-2235...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-33231 via nltk (>=3.0.0, <=3.9.3)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33231 Source advisory: GHSA-JM6W-M3J8-898G...

aa-rag (>=0.4.2, <=0.4.3), ab-auth-client-service (>=0.1.3, <=0.3.5) +1599 more potentially affected by CVE-2025-62727 via starlette (>=0.39.2, <=0.48.0)

starlette PYPI version =0.39.2, =0.4.2, =0.1.3, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1, =0.1.0, =0.1.1, =0.1.1, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.3 and more Source cves: CVE-2025-62727 Source advisory: GHSA-7F5H-V6XP-FCQ8...