chalice (>=1.6.2, <=1.8.0), commit-helper (3.4.13) +6 more potentially affected by CVE-2025-8869 via pip (18.1.0)

pip PYPI version 18.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.6.2, =0.1.6, =0.0.3, =3.2.0, =4.0.0 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

apis-core (>=0.14.0, <=0.14.2), sentry-chalice (>=0.3.1, <=0.3.3) +1 more potentially affected by CVE-2024-40647 via sentry-sdk (0.17.8)

sentry-sdk PYPI version 0.17.8 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - apis-core =0.14.0, =0.3.1, =0.3.3 - structlog-sentry-logger 0.1.0 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

sentry-chalice (0.1.0) potentially affected by CVE-2024-40647 via sentry-sdk (0.16.2)

sentry-sdk PYPI version 0.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - sentry-chalice 0.1.0 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

apis-core (>=0.14.0, <=0.14.2), sentry-chalice (>=0.3.1, <=0.3.3) +1 more potentially affected by CVE-2023-28117 via sentry-sdk (0.17.8)

sentry-sdk PYPI version 0.17.8 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - apis-core =0.14.0, =0.3.1, =0.3.3 - structlog-sentry-logger 0.1.0 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

sentry-chalice (0.1.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.16.2)

sentry-sdk PYPI version 0.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - sentry-chalice 0.1.0 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

aws-lambda-sls (0.1.0), chalice (1.6.1) +4 more potentially affected by CVE-2026-8643 via pip (18.0.0)

pip PYPI version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aws-lambda-sls 0.1.0 - chalice 1.6.1 - lucterios =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =2.3.1.18112821 - venv-update 3.1.1 Source cves:...

chalice (>=1.22.4, <=1.24.0), dpckan (>=0.0.1.9001, <=0.1.0) +6 more potentially affected by CVE-2026-8643 via pip (21.1.3)

pip PYPI version 21.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.22.4, =0.0.1.9001, =0.9.4, =1.0.0, =2.0.0, =2.1.0 - tikit 0.1.7 - wanikani-notifier 0.1.0 - yelpdataset2sql 0.0.2 Source cves: CVE-2026-8643...

chalice (1.12.0), commandfrog (>=0.2.1, <=0.3.1) +12 more potentially affected by CVE-2026-8643 via pip (19.3.1)

pip PYPI version 19.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice 1.12.0 - commandfrog =0.2.1, =0.1.0, =0.8.1, =0.4.11, =0.0.3, =2.4.0.19073113, =0.0.1, =2019.10.25, =0.0.1a0, =0.1.1, =0.1.2 - smartleia 1.0.1...

animo-trainer (1.0.2), build-harness (1.0.1) +16 more potentially affected by CVE-2026-8643 via pip (22.0.4)

pip PYPI version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - animo-trainer 1.0.2 - build-harness 1.0.1 - cacheback2 0.0.5 - cdp-connector =1.0.0, =1.26.6, =1.2.3, =2022.3.0b0, =2022.3.0b0, =0.4.0rc0, =0.6.16,...

chalice (>=1.2.3, <=1.6.0), httptesting (>=1.0.1, <=1.0.2) +4 more potentially affected by CVE-2026-8643 via pip (10.0.1)

pip PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.2.3, =1.0.1, =4.0.0, =4.0.0, =4.0.1 - zerv 0.1.0 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

agave (>=0.1.1, <=0.1.7), bankruptcy (>=0.0.2, <=0.0.5) +10 more potentially affected by CVE-2026-8643 via pip (21.0.1)

pip PYPI version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.1.1, =0.0.2, =0.2.0, =1.22.1, =0.0.60, =1.0.2, =2.0.3, =0.6.3, =0.0.7, =0.0.39, =0.5.0, =0.5.1 Source cves: CVE-2026-8643 Source advisory:...

aadetools (>=0.0.3, <=0.0.5), autocut3d (0.1.0) +14 more potentially affected by CVE-2026-8643 via pip (19.2.3)

pip PYPI version 19.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aadetools =0.0.3, =1.10.0, =0.1.4, =0.4.2, =2.0.0, =0.0.4, =0.2.4, =2019.9.2, =2019.10.22 - rtopy 0.1.0 - student-mixture 0.1.10 and more Source cves:...

cfn-docgen (>=0.2.0, <=0.2.3), chalice (>=1.13.0, <=1.14.0) +8 more potentially affected by CVE-2026-8643 via pip (20.0.2)

pip PYPI version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cfn-docgen =0.2.0, =1.13.0, =0.2.0, =0.0.1, =0.8.2, =0.3.1, =0.0.16, =0.0.24 Source cves: CVE-2026-8643 Source advisory: OSV:PYSEC-2026-196...

chalice (>=1.22.4, <=1.24.0), dpckan (>=0.0.1.9001, <=0.1.0) +6 more potentially affected by CVE-2026-8643 via pip (21.1.3)

pip PYPI version 21.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.22.4, =0.0.1.9001, =0.9.4, =1.0.0, =2.0.0, =2.1.0 - tikit 0.1.7 - wanikani-notifier 0.1.0 - yelpdataset2sql 0.0.2 Source cves: CVE-2026-8643...

chalice (>=1.6.2, <=1.8.0), commit-helper (3.4.13) +6 more potentially affected by CVE-2026-8643 via pip (18.1.0)

pip PYPI version 18.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.6.2, =0.1.6, =0.0.3, =3.2.0, =4.0.0 Source cves: CVE-2026-8643 Source advisory: OSV:PYSEC-2026-196...

aegea (>=2.0.0, <=2.2.5), chalice (>=1.14.1, <=1.16.0) +2 more potentially affected by CVE-2026-8643 via pip (20.1.1)

pip PYPI version 20.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aegea =2.0.0, =1.14.1, =0.1.0, =0.2.0 Source cves: CVE-2026-8643 Source advisory: OSV:PYSEC-2026-196...

agave (>=0.1.1, <=0.1.7), bankruptcy (>=0.0.2, <=0.0.5) +10 more potentially affected by CVE-2026-6357 via pip (21.0.1)

pip PYPI version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.1.1, =0.0.2, =0.2.0, =1.22.1, =0.0.60, =1.0.2, =2.0.3, =0.6.3, =0.0.7, =0.0.39, =0.5.0, =0.5.1 Source cves: CVE-2026-6357 Source advisory:...

chalice (>=1.2.3, <=1.6.0), httptesting (>=1.0.1, <=1.0.2) +4 more potentially affected by CVE-2026-6357 via pip (10.0.1)

pip PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.2.3, =1.0.1, =4.0.0, =4.0.0, =4.0.1 - zerv 0.1.0 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...

aegea (>=2.0.0, <=2.2.5), chalice (>=1.14.1, <=1.16.0) +2 more potentially affected by CVE-2026-6357 via pip (20.1.1)

pip PYPI version 20.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aegea =2.0.0, =1.14.1, =0.1.0, =0.2.0 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...

aftool (>=0.1.2, <=0.2.8), agave (>=0.0.3, <=0.1.3.dev2) +23 more potentially affected by CVE-2026-3219 via pip (20.3.4)

pip PYPI version 20.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aftool =0.1.2, =0.0.3, =0.1.0.dev1, =1.21.5, =0.4.0, =1.0.2, =0.1.59, =0.4.3, =0.2.1, =2.6.0b1, =2020.0.1, =0.1.0, =2.4.6.20013014, =2.4.0.19073113,...