aegis-finance-mcp (0.1.1), agentchaos-sdk (0.1.0) +12 more potentially affected by CVE-2026-62240 via crewai-tools (>=1.6.1, <=1.14.5a2)

crewai-tools PYPI version =1.6.1, =0.4.7, =0.0.6, =0.1.0, =0.1.0, =0.1.5, =0.0.27, =0.2.1, =0.2.3 Source cves: CVE-2026-62240 Source advisory: OSV:PYSEC-2026-3819...

caption-flow (>=0.1.0, <=0.4.2), commit-bot (>=1.0.1rc1, <=1.1.8) +6 more potentially affected by CVE-2025-58446 via xgrammar (0.1.23)

xgrammar PYPI version 0.1.23 is affected by a known vulnerability. The following packages have a transitive dependency on xgrammar and may be impacted: - caption-flow =0.1.0, =1.0.1rc1, =0.0.4, =1.0.0.dev0, =0.1.1, =0.2.0, =0.9.2.post1, =0.10.0 Source cves: CVE-2025-58446 Source advisory:...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +127 more potentially affected by CVE-2026-54233 via vllm (>=0.1.3, <=0.23.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =0.0.38 and more Source cves: CVE-2026-54233 Source advisory: GHSA-6PR9-RP53-2PMC...

ado-vllm-performance (>=1.2.2, <=1.3.3), agilerl (>=2.3.5.dev0, <=2.4.1.dev1) +67 more potentially affected by CVE-2026-25048 via xgrammar (>=0.1.11, <=0.1.29)

xgrammar PYPI version =0.1.11, =1.2.2, =2.3.5.dev0, =0.8.4, =0.2.2, =0.1.0, =0.1.0, =1.0.1rc1, =0.0.2, =0.1.1, =0.1.10, =0.0.2, =1.1.2, =0.0.4, =2025.12.1 and more Source cves: CVE-2026-25048 Source advisory: MEND:CVE-2026-25048...

ado-vllm-performance (>=1.2.2, <=1.3.3), agilerl (>=2.3.5.dev0, <=2.4.1.dev1) +45 more potentially affected by CVE-2026-22778 via vllm (>=0.8.3, <=0.14.0)

vllm PYPI version =0.8.3, =1.2.2, =2.3.5.dev0, =0.2.2, =0.1.0, =0.1.0, =1.0.1rc1, =0.1.21, =0.1.10, =1.1.2, =0.0.4, =0.3.9.post2, =0.5.2, =0.1.1, =0.2.0 and more Source cves: CVE-2026-22778 Source advisory: MEND:CVE-2026-22778...

ado-vllm-performance (>=1.2.2, <=1.3.3), caption-flow (>=0.1.0, <=0.4.2) +17 more potentially affected by CVE-2026-22807 via vllm (>=0.10.1, <=0.13.0)

vllm PYPI version =0.10.1, =1.2.2, =0.1.0, =1.0.1rc1, =0.0.4, =1.0.0.dev0, =0.1.0, =0.1.1, =0.2.0, =0.0.0, =0.1.0.0, =0.1.0, =0.1.5.2 and more Source cves: CVE-2026-22807 Source advisory: OSV:GHSA-2PC9-4J83-QJMR...

ado-vllm-performance (>=1.2.2, <=1.3.3), caption-flow (>=0.1.0, <=0.4.2) +15 more potentially affected by CVE-2026-56340 via vllm (>=0.10.2, <=0.12.0)

vllm PYPI version =0.10.2, =1.2.2, =0.1.0, =1.0.1rc1, =0.0.4, =1.0.0.dev0, =0.1.0, =0.1.1, =0.2.0, =0.0.0, =0.1.0.0, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-56340 Source advisory: OSV:GHSA-MCMC-2M55-J8JJ...

caption-flow (>=0.1.0, <=0.4.2), commit-bot (>=1.0.1rc1, <=1.1.8) +6 more potentially affected by CVE-2025-58446 via xgrammar (0.1.23)

xgrammar PYPI version 0.1.23 is affected by a known vulnerability. The following packages have a transitive dependency on xgrammar and may be impacted: - caption-flow =0.1.0, =1.0.1rc1, =0.0.4, =1.0.0.dev0, =0.1.1, =0.2.0, =0.9.2.post1, =0.10.0 Source cves: CVE-2025-58446 Source advisory:...