arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +7 more potentially affected by CVE-2026-10775 via sglang (>=0.1.26, <=0.5.2)

sglang PYPI version =0.1.26, =0.1.0, =1.1.0rc1, =0.4.0, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2026-10775 Source advisory: OSV:PYSEC-2026-3695...

arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +8 more potentially affected by CVE-2026-15978 via sglang (>=0.1.26, <=0.5.14)

sglang PYPI version =0.1.26, =0.1.0, =1.1.0rc1, =0.4.0, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2026-15978 Source advisory: MEND:CVE-2026-15978...

arbor-ai (0.2.17), ardupilot-methodic-configurator (>=1.4.3, <=1.4.4) +8 more potentially affected by CVE-2026-59890 via setuptools (79.0.0)

setuptools PYPI version 79.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - arbor-ai 0.2.17 - ardupilot-methodic-configurator =1.4.3, =0.0.1, =1.0.6, =0.1.0, =20250422.0.0.dev0, =20250430.0.0.dev0 -...

agilerl (>=2.3.5.dev0, <=2.4.1.dev1), arbor-ai (0.2.17) +7 more potentially affected by CVE-2025-9141 via vllm (>=0.10.0, <=0.10.1)

vllm PYPI version =0.10.0, =2.3.5.dev0, =0.1.2, =0.1.5, =0.2.4, =0.1.2, =0.2.1.dev0, =0.3.0 Source cves: CVE-2025-9141 Source advisory: OSV:PYSEC-2026-2014...

arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +6 more potentially affected by CVE-2026-7304 via sglang (>=0.4.5, <=0.5.2)

sglang PYPI version =0.4.5, =0.1.0, =1.1.0rc1, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2026-7304 Source advisory: OSV:PYSEC-2026-535...

arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +7 more potentially affected by CVE-2026-10300 via sglang (>=0.1.26, <=0.5.2)

sglang PYPI version =0.1.26, =0.1.0, =1.1.0rc1, =0.4.0, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2026-10300 Source advisory: OSV:GHSA-M2JR-X4GQ-5RMJ...

arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +6 more potentially affected by CVE-2026-7304 via sglang (>=0.4.5, <=0.5.2)

sglang PYPI version =0.4.5, =0.1.0, =1.1.0rc1, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2026-7304 Source advisory: OSV:GHSA-36M8-W8QF-G76P...

arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +6 more potentially affected by CVE-2026-7304 via sglang (>=0.4.5, <=0.5.2)

sglang PYPI version =0.4.5, =0.1.0, =1.1.0rc1, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2026-7304 Source advisory: GHSA-36M8-W8QF-G76P...

arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +7 more potentially affected by CVE-2026-3060 via sglang (>=0.1.26, <=0.5.2)

sglang PYPI version =0.1.26, =0.1.0, =1.1.0rc1, =0.4.0, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2026-3060 Source advisory: SNYK:PYTHON-SGLANG-15470991...

ado-vllm-performance (>=1.2.2, <=1.3.3), agilerl (>=2.3.5.dev0, <=2.4.1.dev1) +45 more potentially affected by CVE-2026-22778 via vllm (>=0.8.3, <=0.14.0)

vllm PYPI version =0.8.3, =1.2.2, =2.3.5.dev0, =0.2.2, =0.1.0, =0.1.0, =1.0.1rc1, =0.1.21, =0.1.10, =1.1.2, =0.0.4, =0.3.9.post2, =0.5.2, =0.1.1, =0.2.0 and more Source cves: CVE-2026-22778 Source advisory: MEND:CVE-2026-22778...

arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +7 more potentially affected by CVE-2025-10164 via sglang (>=0.1.26, <=0.5.2)

sglang PYPI version =0.1.26, =0.1.0, =1.1.0rc1, =0.4.0, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2025-10164 Source advisory: MEND:CVE-2025-10164...

ai-dynamo-vllm (>=0.8.4, <=0.8.4.post4), arbor-ai (>=0.2.2, <=0.2.4) +35 more potentially affected by CVE-2025-57809 via xgrammar (>=0.1.11, <=0.1.19)

xgrammar PYPI version =0.1.11, =0.8.4, =0.2.2, =0.0.2, =0.1.1, =0.1.10, =0.0.2, =1.1.2, =0.1.1, =0.2.0a1, =0.1.2, =0.2.2 - lightrft 0.1.0 and more Source cves: CVE-2025-57809 Source advisory: GHSA-5CMR-4PX5-23PC...

agilerl (>=2.3.5.dev0, <=2.4.1.dev1), arbor-ai (0.2.17) +7 more potentially affected by CVE-2025-9141 via vllm (>=0.10.0, <=0.10.1)

vllm PYPI version =0.10.0, =2.3.5.dev0, =0.1.2, =0.1.5, =0.2.4, =0.1.2, =0.2.1.dev0, =0.3.0 Source cves: CVE-2025-9141 Source advisory: GHSA-79J6-G2M3-JGFW...

arbor-ai (>=0.2.2, <=0.2.4), axolotl-plugin-atropos (0.0.2) +16 more potentially affected by CVE-2025-48943 via vllm (>=0.8.3, <=0.8.5.post1)

vllm PYPI version =0.8.3, =0.2.2, =0.1.21, =0.1.10, =0.1.1, =0.1.2, =0.1.0, =0.2.2, =0.1.1, =0.3.1, =0.3.11.post3, =0.0.1, =1.0.0, =1.1.0 - trinity-rft 0.1.1 and more Source cves: CVE-2025-48943 Source advisory: OSV:PYSEC-2025-55...

arbor-ai (>=0.2.2, <=0.2.4), axolotl-plugin-atropos (0.0.2) +16 more potentially affected by CVE-2025-48944 via vllm (>=0.8.3, <=0.8.5.post1)

vllm PYPI version =0.8.3, =0.2.2, =0.1.21, =0.1.10, =0.1.1, =0.1.2, =0.1.0, =0.2.2, =0.1.1, =0.3.1, =0.3.11.post3, =0.0.1, =1.0.0, =1.1.0 - trinity-rft 0.1.1 and more Source cves: CVE-2025-48944 Source advisory: MEND:CVE-2025-48944...

arbor-ai (>=0.2.2, <=0.2.4), axolotl-plugin-atropos (0.0.2) +16 more potentially affected by CVE-2025-48944 via vllm (>=0.8.3, <=0.8.5.post1)

vllm PYPI version =0.8.3, =0.2.2, =0.1.21, =0.1.10, =0.1.1, =0.1.2, =0.1.0, =0.2.2, =0.1.1, =0.3.1, =0.3.11.post3, =0.0.1, =1.0.0, =1.1.0 - trinity-rft 0.1.1 and more Source cves: CVE-2025-48944 Source advisory: OSV:GHSA-VRQ3-R879-7M65...

arbor-ai (>=0.1.5, <=0.2.4), cassandra-medusa (>=0.24.0, <=0.24.1) +19 more potentially affected by CVE-2025-47273 via setuptools (76.1.0)

setuptools PYPI version 76.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - arbor-ai =0.1.5, =0.24.0, =0.1.12, =0.0.0a2, =0.0.1.post2, =3.7.0rc1, =0.21.0, =0.4.5, =0.2.2, =0.3.0, =0.3.3 and more Source cves:...