cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2026-102598 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2026-102598 Source advisory: OSV:GHSA-G6X2-HCCM-HH4...

cloudmesh-client (4.2.6) potentially affected by CVE-2026-102930 via virtualenv (15.0.1)

virtualenv PYPI version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

cloudmesh-client (4.2.6) potentially affected by CVE-2026-102930 via virtualenv (15.0.1)

virtualenv PYPI version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

cloudmesh-client (4.2.6) potentially affected by CVE-2026-102937 via virtualenv (15.0.1)

virtualenv PYPI version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2026-69248 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...

cloudmesh-client (>=4.5.0, <=4.7.3), django-ca (>=1.5.0, <=1.5.1) +5 more potentially affected by CVE-2026-69249 via cryptography (1.7.2)

cryptography PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.5.0, =1.5.0, =0.5.1, =1.0.0, =5.4.0, =2.2.2, =0.7.0, =0.7.3 Source cves: CVE-2026-69249 Source advisory:...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2026-69249 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2026-69249 Source advisory: OSV:PYSEC-2026-3553...

cloudmesh-client (4.2.6), codev (>=0.5.1a10, <=0.7.4a3) potentially affected by CVE-2026-44405 via paramiko (2.0.0)

paramiko PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - cloudmesh-client 4.2.6 - codev =0.5.1a10, =0.7.4a3 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

cloudmesh-client (>=4.3.2, <=4.4.0) potentially affected by CVE-2026-44405 via paramiko (2.0.1)

paramiko PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - cloudmesh-client =4.3.2, =4.4.0 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

chaosmonkey (>=1.0.8, <=1.1.0), cloudmesh-client (>=4.5.0, <=4.7.3) +1 more potentially affected by CVE-2026-44405 via paramiko (2.1.1)

paramiko PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - chaosmonkey =1.0.8, =4.5.0, =0.8.0, =0.9.0 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

acmd (0.1.4), brainfrick-language (0.1.0) +10 more potentially affected by CVE-2025-71176 via pytest (2.9.2)

pytest PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - acmd 0.1.4 - brainfrick-language 0.1.0 - cloudmesh-client =4.3.2, =0.0.1, =0.0.3, =0.6.0, =0.6.0, =0.2.0, =1.4.2, =0.1.0, =1.0.0, =0.1.0, =0.2.5...

cloudmesh-client (4.2.6), dcicsnovault (>=2.0.0b0, <=2.0.0b11) +3 more potentially affected by CVE-2025-71176 via pytest (2.9.1)

pytest PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - cloudmesh-client 4.2.6 - dcicsnovault =2.0.0b0, =0.0.5, =0.0.11, =0.0.17 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

biomedsheets (>=0.2.0, <=0.4.0), c2cwsgiutils (>=0.0.2, <=0.5.1) +2 more potentially affected by CVE-2025-71176 via pytest (3.0.6)

pytest PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - biomedsheets =0.2.0, =0.0.2, =4.5.0, =0.0.0, =0.0.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2026-21860 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2026-21860 Source advisory: OSV:PYSEC-2026-2044...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2025-66221 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

cloudmesh-client (>=4.3.2, <=4.4.0), merk-api (0.0.5) +1 more potentially affected by CVE-2025-50181 via urllib3 (1.16.0)

urllib3 PYPI version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - cloudmesh-client =4.3.2, =2.0.1, =2.1.3 Source cves: CVE-2025-50181 Source advisory: OSV:PYSEC-2026-1999...

cloudmesh-client (>=4.5.0, <=4.7.3), python-telegram-bot (5.3.1) +1 more potentially affected by CVE-2025-50181 via urllib3 (1.20.0)

urllib3 PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 - python-telegram-bot 5.3.1 - steem 0.18.4 Source cves: CVE-2025-50181 Source advisory: OSV:PYSEC-2026-1999...

alo7-airflow (>=1.10.0, <=1.10.0.7), biweeklybudget (>=0.1.0, <=0.7.0) +20 more potentially affected by CVE-2025-27516 via jinja2 (2.8.1)

jinja2 PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - alo7-airflow =1.10.0, =0.1.0, =4.5.0, =0.1.0, =3.0.0, =1.3.0, =3.0.0, =1.4.0rc1, =1.3.0, =2.0.0, =1.0.0a1, =1.6.0, =0.8.0.0, =0.9.0.7 and more Sourc...

cloudmesh-client (>=4.2.6, <=4.4.0), nginxauthdaemon (>=1.0.0a1, <=1.1.0) +1 more potentially affected by CVE-2024-49766 via werkzeug (0.11.10)

werkzeug PYPI version 0.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.2.6, =1.0.0a1, =1.1.0 - picopayments-hub 0.0.11 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2024-49766 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...