aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.9.28) +8 more potentially affected by CVE-2026-111497 via brotlicffi (>=1.0.9.2, <=1.2.0.2)

brotlicffi PYPI version =1.0.9.2, =3.1.0, =3.9.11, =5.3.46, =1.5.5, =0.7.4, =0.8.11, =2.10.12, =0.9.2, =0.12.3 - open-webui-fang 0.12.3 - podloot 0.1.0 Source cves: CVE-2026-111497 Source advisory: OSV:PYSEC-2026-4323...

anvyl (>=0.1.0, <=0.1.22), aurapro-ui (>=3.1.0, <=3.9.3) +65 more potentially affected by CVE-2026-114610 via fpdf2 (>=2.5.0, <=2.8.7)

fpdf2 PYPI version =2.5.0, =0.1.0, =3.1.0, =3.9.11, =0.7.0a0, =3.0.0, =1.0.0, =0.1.0, =0.1.23, =2026.2.23, =0.0.1, =1.0.0, =0.2.10, =0.1.2, =0.1.3.61 and more Source cves: CVE-2026-114610 Source advisory: MEND:CVE-2026-114610...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.9.28) +8 more potentially affected by CVE-2026-111497 via brotlicffi (>=1.0.9.2, <=1.2.0.2)

brotlicffi PYPI version =1.0.9.2, =3.1.0, =3.9.11, =5.3.46, =1.5.5, =0.7.4, =0.8.11, =2.10.12, =0.9.2, =0.12.3 - open-webui-fang 0.12.3 - podloot 0.1.0 Source cves: CVE-2026-111497 Source advisory: GHSA-9V8H-QQGM-4M35...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.9.28) +8 more potentially affected by CVE-2026-111497 via brotlicffi (>=1.0.9.2, <=1.2.0.2)

brotlicffi PYPI version =1.0.9.2, =3.1.0, =3.9.11, =5.3.46, =1.5.5, =0.7.4, =0.8.11, =2.10.12, =0.9.2, =0.12.3 - open-webui-fang 0.12.3 - podloot 0.1.0 Source cves: CVE-2026-111497 Source advisory: OSV:GHSA-9V8H-QQGM-4M35...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.9.28) +8 more potentially affected by CVE-2026-111497 via brotlicffi (>=1.0.9.2, <=1.2.0.2)

brotlicffi PYPI version =1.0.9.2, =3.1.0, =3.9.11, =5.3.46, =1.5.5, =0.7.4, =0.8.11, =2.10.12, =0.9.2, =0.12.3 - open-webui-fang 0.12.3 - podloot 0.1.0 Source cves: CVE-2026-111497 Source advisory: SNYK:PYTHON-BROTLICFFI-21717208...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.5) +15 more potentially affected by CVE-2026-76825 via restrictedpython (>=8.0.0, <=8.3.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.5) +15 more potentially affected by CVE-2026-76825 via restrictedpython (>=8.0.0, <=8.3.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-76825 Source advisory: OSV:GHSA-HP3V-5VW7-FX9W...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.5) +15 more potentially affected by CVE-2026-76825 via restrictedpython (>=8.0.0, <=8.3.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-76825 Source advisory: GHSA-HP3V-5VW7-FX9W...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.5) +15 more potentially affected by CVE-2026-55830 via restrictedpython (>=8.0.0, <=8.2.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-55830 Source advisory: OSV:PYSEC-2026-3917...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.5) +15 more potentially affected by CVE-2026-55830 via restrictedpython (>=8.0.0, <=8.2.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-55830 Source advisory: GHSA-FFG3-P8FM-MJX2...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.5) +15 more potentially affected by CVE-2026-55830 via restrictedpython (>=8.0.0, <=8.2.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-55830 Source advisory: OSV:GHSA-FFG3-P8FM-MJX2...

aurapro-ui (>=3.1.0, <=3.7.4), leopath (>=0.1.3, <=0.2.1) +2 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.21.0)

pymdown-extensions PYPI version 10.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aurapro-ui =3.1.0, =0.1.3, =0.4.3, =0.8.11, =0.9.6 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

aurapro-ui (>=3.1.0, <=3.7.4), leopath (>=0.1.3, <=0.2.1) +2 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.21.0)

pymdown-extensions PYPI version 10.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aurapro-ui =3.1.0, =0.1.3, =0.4.3, =0.8.11, =0.9.6 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

aurapro-ui (>=3.1.0, <=3.7.4), leopath (>=0.1.3, <=0.2.1) +2 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.21.0)

pymdown-extensions PYPI version 10.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aurapro-ui =3.1.0, =0.1.3, =0.4.3, =0.8.11, =0.9.6 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

aurapro-ui (>=3.1.0, <=3.7.4), leopath (>=0.1.3, <=0.2.1) +2 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.21.0)

pymdown-extensions PYPI version 10.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aurapro-ui =3.1.0, =0.1.3, =0.4.3, =0.8.11, =0.9.6 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +62 more potentially affected by CVE-2026-33699 via pypdf (>=6.0.0, <=6.9.1)

pypdf PYPI version =6.0.0, =0.0.0, =1.1.0, =1.0.0a3, =0.2.0, =3.1.0, =0.2.0, =0.2.0, =0.0.3, =6.2.61, =1.0.20, =0.12.0, =0.12.6 and more Source cves: CVE-2026-33699 Source advisory: OSV:PYSEC-2026-3012...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.5) +15 more potentially affected by CVE-2026-55830 via restrictedpython (>=8.0.0, <=8.2.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-55830 Source advisory: SNYK:PYTHON-RESTRICTEDPYTHON-17912186...

MAL-2026-4742 Malicious code in aurapro-ui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cace553d74971e3660a0a7095662488f531348ba3e756696da5ff0ef9645ab22 The PyPI package aurapro-ui installs its code under the Python import namespace openwebui/ and registers two console scripts in entrypoints.txt —...

Malicious code in aurapro-ui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cace553d74971e3660a0a7095662488f531348ba3e756696da5ff0ef9645ab22 The PyPI package aurapro-ui installs its code under the Python import namespace openwebui/ and registers two console scripts in entrypoints.txt —...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +67 more potentially affected by CVE-2026-41168 via pypdf (>=6.0.0, <=6.10.0)

pypdf PYPI version =6.0.0, =0.0.0, =1.1.0, =1.0.0a3, =0.2.0, =3.1.0, =0.2.0, =0.2.0, =0.0.3, =0.4.1, =6.2.61, =1.0.20, =1.0.31 and more Source cves: CVE-2026-41168 Source advisory: GHSA-JJ6C-8H6C-HPPX...