analysis3054 (>=0.3.24, <=0.5.2), autogluon (>=0.5.0b20220623, <=1.5.1b20260720) +18 more potentially affected by CVE-2026-100308 via gluonts (>=0.6.0, <=0.17.0rc1)

gluonts PYPI version =0.6.0, =0.3.24, =0.5.0b20220623, =0.5.0b20220623, =0.1.3, =0.0.1, =0.6.0, =1.0.0, =0.2.0, =0.1.3, =0.0.1, =0.1.0 and more Source cves: CVE-2026-100308 Source advisory: MEND:CVE-2026-100308...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

airunner (>=3.0.0, <=3.1.7), autogluon-multimodal (>=1.1.2b20241102, <=1.1.2b20241106) +30 more potentially affected by CVE-2026-69112 via accelerate (0.33.0)

accelerate PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - airunner =3.0.0, =1.1.2b20241102, =1.1.2b20241102, =0.8.9, =2.6.0b1, =0.0.71, =4.2.0, =0.3.7rc0, =0.8.0, =1.3.0, =1.2.2, =0.0.10, =0.0.30 a...

airunner (>=3.0.0, <=3.1.7), autogluon-multimodal (>=1.1.2b20241102, <=1.1.2b20241106) +30 more potentially affected by CVE-2026-69112 via accelerate (0.33.0)

accelerate PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - airunner =3.0.0, =1.1.2b20241102, =1.1.2b20241102, =0.8.9, =2.6.0b1, =0.0.71, =4.2.0, =0.3.7rc0, =0.8.0, =1.3.0, =1.2.2, =0.0.10, =0.0.30 a...

apillava (0.1.0), artcraft (>=0.0.0, <=0.0.23) +28 more potentially affected by CVE-2026-69112 via accelerate (0.21.0)

accelerate PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - apillava 0.1.0 - artcraft =0.0.0, =0.8.3b20230817, =1.0.1b20240321, =0.0.2, =2.1.0b2, =0.1.52, =0.1.1, =1.1.0, =0.0.7, =3.0.1rc2, =3.1.1 -...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2026-58659 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...