aleph-client (>=1.0.0, <=1.9.3), aleph-sdk-python (>=1.0.0rc2, <=2.1.0) +41 more potentially affected by CVE-2026-39373 via jwcrypto (>=1.0.0, <=1.5.6)

jwcrypto PYPI version =1.0.0, =1.0.0, =1.0.0rc2, =0.1.0, =0.1.0, =0.1.0, =0.11.0rc1, =2.0.0, =0.1.0, =0.1.0, =0.1.0, =3.41.0, =0.0.0.1, =0.1.7, =2.5.0, =3.0.0 and more Source cves: CVE-2026-39373 Source advisory: GHSA-FJRM-76X2-C4Q4...

aleph-client (>=1.0.0, <=1.9.3), aleph-sdk-python (>=1.0.0rc2, <=2.1.0) +41 more potentially affected by CVE-2026-39373 via jwcrypto (>=1.0.0, <=1.5.6)

jwcrypto PYPI version =1.0.0, =1.0.0, =1.0.0rc2, =0.1.0, =0.1.0, =0.1.0, =0.11.0rc1, =2.0.0, =0.1.0, =0.1.0, =0.1.0, =3.41.0, =0.0.0.1, =0.1.7, =2.5.0, =3.0.0 and more Source cves: CVE-2026-39373 Source advisory: OSV:PYSEC-2026-70...

alastria-auth (>=0.0.3, <=0.0.17), alastria-identity (>=0.2.0, <=0.4.0) +60 more potentially affected by CVE-2026-39373 via jwcrypto (>=0.4.0, <=1.5.6)

jwcrypto PYPI version =0.4.0, =0.0.3, =0.2.0, =1.0.0, =1.0.0rc2, =0.1.0, =0.1.0, =0.1.0, =0.11.0rc1, =0.4.0a0, =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0.2, =0.1.0.8 and more Source cves: CVE-2026-39373 Source advisory: MEND:CVE-2026-39373...

aleph-client (>=0.6.0, <=0.6.1), aleph-sdk-python (>=0.7.0b1, <=0.9.0) +5 more potentially affected by unknown CVE via eth-abi (4.0.0b2)

eth-abi PYPI version 4.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - aleph-client =0.6.0, =0.7.0b1, =1.0.0rc1, =1.0.1, =1.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF7...