adamalib (0.1.0), angus-sdk-python (0.0.9) +3 more potentially affected by CVE-2025-71176 via pytest (2.6.4)

pytest PYPI version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - adamalib 0.1.0 - angus-sdk-python 0.0.9 - nfetoolkit =0.2.8, =1.1.4, =0.0.7, =0.1.1 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

adamalib (0.1.0), bormeparser (>=0.1.1, <=0.2.3) +23 more potentially affected by CVE-2026-41066 via lxml (3.4.4)

lxml PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - adamalib 0.1.0 - bormeparser =0.1.1, =2.0.1.16012810, =2.0.1.16012810, =2.0.1.16012810, =1.0.1, =2.0.2.16012810, =2.0.1.15101417, =2.0.1.15101417,...

adamalib (0.1.0), angus-sdk-python (0.0.9) +3 more potentially affected by CVE-2025-71176 via pytest (2.6.4)

pytest PYPI version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - adamalib 0.1.0 - angus-sdk-python 0.0.9 - nfetoolkit =0.2.8, =1.1.4, =0.0.7, =0.1.1 Source cves: CVE-2025-71176 Source advisory:...

adamalib (0.1.0), bormeparser (>=0.1.1, <=0.2.3) +23 more potentially affected by CVE-2018-19787 via lxml (3.4.4)

lxml PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - adamalib 0.1.0 - bormeparser =0.1.1, =2.0.1.16012810, =2.0.1.16012810, =2.0.1.16012810, =1.0.1, =2.0.2.16012810, =2.0.1.15101417, =2.0.1.15101417,...