360solutions-bc-mcp (>=0.5.3, <=0.5.7), adversarial-workflow (>=0.4.0, <=0.9.8) +589 more potentially affected by CVE-2026-97688 via urllib3 (>=2.6.2, <=2.7.0)

urllib3 PYPI version =2.6.2, =0.5.3, =0.4.0, =0.1.0, =0.5.0rc4, =0.1.0, =0.20.3, =0.0.2, =1.3.0, =0.1.0, =0.5.0, =1.1.0, =2.22.0 and more Source cves: CVE-2026-97688 Source advisory: OSV:PYSEC-2026-4176...

1337x (1.2.5), 8a-scraper (>=0.0.2, <=0.0.4) +667 more potentially affected by CVE-2026-86000 via soupsieve (>=2.0.0, <=2.8.4)

soupsieve PYPI version =2.0.0, =0.0.2, =1.0.4, =0.1.3, =1.0.0, =0.4.0, =1.2.3, =0.2.0, =0.87.2.dev9, =0.24.0, =0.1.0.dev19, =1.3.0, =0.1.0, =1.3.0, =1.3.3 and more Source cves: CVE-2026-86000 Source advisory: OSV:GHSA-GJV8-XP57-G29C...

CVE-2026-85674

aider aider-chat automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd executed at startup or lint-cmd executed on the first file edit, which aider runs through a shell subprocess with shell=True witho...

EUVD-2026-71130

aider aider-chat automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd executed at startup or lint-cmd executed on the first file edit, which aider runs through a shell subprocess with shell=True witho...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +916 more potentially affected by CVE-2026-78678 via gitpython (>=0.3.4, <=3.1.58)

gitpython PYPI version =0.3.4, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-78678 Source advisory: MEND:CVE-2026-78678...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +775 more potentially affected by CVE-2026-76217 via gitpython (>=3.0.0, <=3.1.57)

gitpython PYPI version =3.0.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-76217 Source advisory: GHSA-HH9P-6WH2-4MFC...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +773 more potentially affected by CVE-2026-73619 via gitpython (>=3.0.0, <=3.1.55)

gitpython PYPI version =3.0.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-73619 Source advisory: SNYK:PYTHON-GITPYTHON-18516649...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +914 more potentially affected by CVE-2026-67323 via gitpython (>=0.3.4, <=3.1.50)

gitpython PYPI version =0.3.4, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-67323 Source advisory: MEND:CVE-2026-67323...

aider-chat (0.82.3), aird (0.2.0) +7 more potentially affected by CVE-2026-13346 via pip (25.1.1)

pip PYPI version 25.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aider-chat 0.82.3 - aird 0.2.0 - anki-release =25.6.0b2, =0.8.0, =1.0.0, =1.0.0, =0.1.11, =0.1.12 Source cves: CVE-2026-13346 Source advisory:...

acdcserver (>=2.3.10rc8, <=2.4.5.8), aider-ce (>=0.87.2.dev9, <=0.87.3.dev4) +345 more potentially affected by CVE-2026-59939 via httplib2 (>=0.9.0, <=0.31.2)

httplib2 PYPI version =0.9.0, =2.3.10rc8, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.1.0, =0.2.0, =1.4.6, =0.1.0, =2021.2.5rc1, =2.11.0, =1.16.0, =2.3.0 and more Source cves: CVE-2026-59939 Source advisory: OSV:GHSA-J5G9-F88F-GFJ3...

aider-chat (>=0.82.3, <=0.85.2), aider-code (>=0.1.0.dev19, <=0.1.1.post14) +186 more potentially affected by CVE-2026-59197 via pillow (11.2.1)

pillow PYPI version 11.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aider-chat =0.82.3, =0.1.0.dev19, =0.0.1, =3.1.20260611, =0.1.0, =0.2.0, =0.1.0, =2026.5.28, =2026.4.15, =2.0.6, =25.5.0, =0.0.0, =1.4.3, =0.5.0b2,...

aider-chat (>=0.82.3, <=0.85.2), aider-code (>=0.1.0.dev19, <=0.1.1.post14) +186 more potentially affected by CVE-2026-54060 via pillow (11.2.1)

pillow PYPI version 11.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aider-chat =0.82.3, =0.1.0.dev19, =0.0.1, =3.1.20260611, =0.1.0, =0.2.0, =0.1.0, =2026.5.28, =2026.4.15, =2.0.6, =25.5.0, =0.0.0, =1.4.3, =0.5.0b2,...

agkit (>=0.17.0, <=0.26.0), ai-puti (0.1.0b5) +238 more potentially affected by CVE-2026-54060 via pillow (11.1.0)

pillow PYPI version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - agkit =0.17.0, =0.2.0, =0.1.0, =0.76.0, =0.1.1, =3.1.8, =0.1.0, =0.1.0, =0.5.0, =25.2.0, =1.0.4, =0.1.0, =0.1.12 - arched-emailer 0.4.6 and more...

aider-chat (>=0.82.3, <=0.85.2), aider-code (>=0.1.0.dev19, <=0.1.1.post14) +186 more potentially affected by CVE-2026-54059 via pillow (11.2.1)

pillow PYPI version 11.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aider-chat =0.82.3, =0.1.0.dev19, =0.0.1, =3.1.20260611, =0.1.0, =0.2.0, =0.1.0, =2026.5.28, =2026.4.15, =2.0.6, =25.5.0, =0.0.0, =1.4.3, =0.5.0b2,...

aider-chat (>=0.82.3, <=0.85.2), aider-code (>=0.1.0.dev19, <=0.1.1.post14) +186 more potentially affected by CVE-2026-59197 via pillow (11.2.1)

pillow PYPI version 11.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aider-chat =0.82.3, =0.1.0.dev19, =0.0.1, =3.1.20260611, =0.1.0, =0.2.0, =0.1.0, =2026.5.28, =2026.4.15, =2.0.6, =25.5.0, =0.0.0, =1.4.3, =0.5.0b2,...

a2grunnerp (>=0.1.0, <=0.1.8), acltoolkit-ad (0.2.2) +984 more potentially affected by CVE-2026-59884 via pyasn1 (>=0.1.7, <=0.6.3)

pyasn1 PYPI version =0.1.7, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.4.0rc1, =0.0.2, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.1.0, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-59884 Source advisory: OSV:PYSEC-2026-3455...

3lc (>=2.3.84, <=2.11.2), a-data-processing (0.0.1) +295 more potentially affected by CVE-2026-59205 via pillow (10.2.0)

pillow PYPI version 10.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3lc =2.3.84, =0.2.3, =1.6.0, =0.21.0, =0.0.2, =0.0.1, =0.0.1, =24.2.0, =0.0.7, =1.0.3.dev0, =1.1.0 and more Source cves: CVE-2026-59205 Source...

aider-chat (>=0.73.0, <=0.74.2), contextualize (>=0.0.4, <=0.0.5) +2 more potentially affected by CVE-2026-6357 via pip (25.0.0)

pip PYPI version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aider-chat =0.73.0, =0.0.4, =0.1.7, =0.1.8 - opentips 1.0.0 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

aider-chat (>=0.73.0, <=0.74.2), contextualize (>=0.0.4, <=0.0.5) +2 more potentially affected by CVE-2026-1703 via pip (25.0.0)

pip PYPI version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aider-chat =0.73.0, =0.0.4, =0.1.7, =0.1.8 - opentips 1.0.0 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

aider-chat (0.82.3), aird (0.2.0) +7 more potentially affected by CVE-2026-1703 via pip (25.1.1)

pip PYPI version 25.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aider-chat 0.82.3 - aird 0.2.0 - anki-release =25.6.0b2, =0.8.0, =1.0.0, =1.0.0, =0.1.11, =0.1.12 Source cves: CVE-2026-1703 Source advisory:...