c7n-azure (0.7.10), c7n-openstack (0.1.1) +40 more potentially affected by CVE-2024-0727 via cryptography (3.4.6)

cryptography PYPI version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.10 - c7n-openstack 0.1.1 - combocurve-api-v1 =0.1.0, =2.0.0rc1, =0.1.6.1, =0.0.3, =0.1.0, =0.2.8, =0.5.0, =0.10.0, =1.0.0...

abinitostudio (>=1.0.1, <=1.0.8), autosubmit (3.14.0) +35 more potentially affected by CVE-2026-44405 via paramiko (2.7.1)

paramiko PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - abinitostudio =1.0.1, =1.1.0.0rc3, =0.7.0, =0.2.0, =0.0.1, =2.0.4, =0.8.0, =0.2.0, =0.0.1, =1.0.0a1, =1.0.2, =1.0.3 and more Source cves:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-34073 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-34073 Source advisory:...

ali2b-cli-scrapper (>=1.0.0, <=1.0.1), ambient-edge-server (>=0.1.2, <=0.2.4) +64 more potentially affected by CVE-2026-34073 via cryptography (42.0.7)

cryptography PYPI version 42.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ali2b-cli-scrapper =1.0.0, =0.1.2, =0.2.13, =0.1.10, =2.1.0rc1, =0.3.0, =0.3.9, =2.7.0, =0.1.2, =0.1.3 - edx-repo-tools 1.0.0 and more...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-34073 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-34073 Source advisory:...

c7n-azure (0.7.10), c7n-openstack (0.1.1) +40 more potentially affected by CVE-2026-34073 via cryptography (3.4.6)

cryptography PYPI version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.10 - c7n-openstack 0.1.1 - combocurve-api-v1 =0.1.0, =2.0.0rc1, =0.1.6.1, =0.0.3, =0.1.0, =0.2.8, =0.5.0, =0.10.0, =1.0.0...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-26007 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-26007 Source advisory:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-26007 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-26007 Source advisory:...

ali2b-cli-scrapper (>=1.0.0, <=1.0.1), ambient-edge-server (>=0.1.2, <=0.2.4) +64 more potentially affected by CVE-2026-26007 via cryptography (42.0.7)

cryptography PYPI version 42.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ali2b-cli-scrapper =1.0.0, =0.1.2, =0.2.13, =0.1.10, =2.1.0rc1, =0.3.0, =0.3.9, =2.7.0, =0.1.2, =0.1.3 - edx-repo-tools 1.0.0 and more...

apputils-config (>=2.0.2.dev19, <=2.0.2.dev20), aws-gate (>=0.9.3, <=0.11.0) +43 more potentially affected by CVE-2026-26007 via cryptography (3.3.1)

cryptography PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - apputils-config =2.0.2.dev19, =0.9.3, =0.1.1, =1.1.0, =1.2.3, =3.26.0, =0.1.1, =21.1.0, =0.1.0, =0.0.1, =0.2.0, =0.2.8 and more Source...

c7n-gcp (0.4.2), ciphey (3.5.7) +28 more potentially affected by CVE-2026-0994 via protobuf (3.12.2)

protobuf PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - c7n-gcp 0.4.2 - ciphey 3.5.7 - custos-sdk 1.0.2 - dagit =0.8.6rc1, =0.8.6rc1, =0.8.6rc1, =0.2.24, =0.1.12, =0.0.0, =1.15.0b1, =0.3.0, =0.3.1,...

c7n-gcp (>=0.4.18, <=0.4.19), c7n-mailer (0.6.18) +12 more potentially affected by CVE-2026-0994 via protobuf (4.21.7)

protobuf PYPI version 4.21.7 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - c7n-gcp =0.4.18, =2.7.0, =1.8.0rc1.dev1270, =0.3.1, =3.0.0, =1.0.0, =0.1.0, =0.1.1, =2.0.0.dev89, =0.0.1, =2.0.1 Source cves: CVE-2026-0994...

ai-flow (0.3.1), ai-flow-nightly (>=2022.9.19, <=2023.12.31) +19 more potentially affected by CVE-2026-0994 via protobuf (3.15.6)

protobuf PYPI version 3.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ai-flow 0.3.1 - ai-flow-nightly =2022.9.19, =0.1.0.2, =3.0.8rc6, =1.0.9, =0.0.1, =1.17.0b1, =1.14.0, =0.3.1, =0.3.73, =0.1.0, =2022.9.19,...

ai-db (0.0.2), aws-service-catalog-puppet (0.242.1) +41 more potentially affected by CVE-2025-50181 via urllib3 (1.26.17)

urllib3 PYPI version 1.26.17 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - ai-db 0.0.2 - aws-service-catalog-puppet 0.242.1 - bondai =0.3.0b2, =1.6.37, =0.3.9, =0.3.10 - c7n-logexporter 0.4.31 - c7n-mailer 0.6.31 -...

bsk (2.8.33), bts-mlb (0.1.2) +41 more potentially affected by CVE-2025-4565 via protobuf (>=6.30.0, <=6.31.0)

protobuf PYPI version =6.30.0, =1.0.0, =4.0.7, =0.2.0b3, =1.0.1, =1.0.0, =1.10.0rc3, =0.0.0, =1.0.0rc1, =1.1.1 - isosegdenoise 0.1.2.dev310 and more Source cves: CVE-2025-4565 Source advisory: MEND:CVE-2025-4565...

c7n-azure (>=0.7.18, <=0.7.19), c7n-kube (>=0.2.18, <=0.2.19) +6 more potentially affected by CVE-2025-47273 via setuptools (65.4.1)

setuptools PYPI version 65.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c7n-azure =0.7.18, =0.2.18, =0.1.0, =1.9.0, =1.10.0 - shaystack 0.10.0 - stapy 0.3.1 Source cves: CVE-2025-47273 Source advisory:...

bikeshed (4.1.0), c7n-policystream (0.4.32) +48 more potentially affected by CVE-2025-47273 via setuptools (69.0.2)

setuptools PYPI version 69.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bikeshed 4.1.0 - c7n-policystream 0.4.32 - c7n-sphinxext 1.1.32 - candlestick-patterns =1.0.1, =0.0.157, =0.0.1, =0.1.35, =0.0.1, =3.10.2,...

c7n-azure (0.7.22), c7n-kube (0.2.22) +1 more potentially affected by CVE-2025-47273 via setuptools (67.3.2)

setuptools PYPI version 67.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c7n-azure 0.7.22 - c7n-kube 0.2.22 - c7n-sphinxext 1.1.22 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

c7n-azure (0.7.22), c7n-kube (0.2.22) +1 more potentially affected by CVE-2025-47273 via setuptools (67.3.2)

setuptools PYPI version 67.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c7n-azure 0.7.22 - c7n-kube 0.2.22 - c7n-sphinxext 1.1.22 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

c7n-azure (>=0.7.18, <=0.7.19), c7n-kube (>=0.2.18, <=0.2.19) +6 more potentially affected by CVE-2025-47273 via setuptools (65.4.1)

setuptools PYPI version 65.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c7n-azure =0.7.18, =0.2.18, =0.1.0, =1.9.0, =1.10.0 - shaystack 0.10.0 - stapy 0.3.1 Source cves: CVE-2025-47273 Source advisory:...