alo7-airflow (>=1.10.0, <=1.10.0.7), biweeklybudget (>=0.1.0, <=0.7.0) +20 more potentially affected by CVE-2025-27516 via jinja2 (2.8.1)

jinja2 PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - alo7-airflow =1.10.0, =0.1.0, =4.5.0, =0.1.0, =3.0.0, =1.3.0, =3.0.0, =1.4.0rc1, =1.3.0, =2.0.0, =1.0.0a1, =1.6.0, =0.8.0.0, =0.9.0.7 and more Sourc...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2024-49766 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

cloudmesh-client (>=4.2.6, <=4.4.0), nginxauthdaemon (>=1.0.0a1, <=1.1.0) +1 more potentially affected by CVE-2024-49766 via werkzeug (0.11.10)

werkzeug PYPI version 0.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.2.6, =1.0.0a1, =1.1.0 - picopayments-hub 0.0.11 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

cloudmesh-client (>=4.2.6, <=4.4.0), nginxauthdaemon (>=1.0.0a1, <=1.1.0) +1 more potentially affected by CVE-2024-34069 via werkzeug (0.11.10)

werkzeug PYPI version 0.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.2.6, =1.0.0a1, =1.1.0 - picopayments-hub 0.0.11 Source cves: CVE-2024-34069 Source advisory: OSV:PYSEC-2026-2043...

cloudmesh-client (>=4.3.2, <=4.4.0), mastercard-api-core (>=1.1.1, <=1.3.0) +29 more potentially affected by CVE-2023-50782 via cryptography (1.4.0)

cryptography PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.3.2, =1.1.1, =1.0.2, =1.0.2, =1.0.2, =0.0.1, =0.0.1, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3 and more Source cves:...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2023-50782 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2024-0727 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

cloudmesh-client (>=4.5.0, <=4.7.3), django-ca (>=1.5.0, <=1.5.1) +5 more potentially affected by CVE-2024-0727 via cryptography (1.7.2)

cryptography PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.5.0, =1.5.0, =0.5.1, =1.0.0, =5.4.0, =2.2.2, =0.7.0, =0.7.3 Source cves: CVE-2024-0727 Source advisory:...

bb8 (>=0.1.0, <=0.2.6), blendedux (0.0.2) +71 more potentially affected by CVE-2024-22195 via jinja2 (2.8.0)

jinja2 PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - bb8 =0.1.0, =0.3.1, =4.2.6, =0.3.1, =0.9.158, =0.3.0, =0.1.8, =0.1.0, =0.3.7, =0.0.1, =0.1.0, =0.24.0, =0.24.3 - lmdo 2.3.1 and more Source cves:...

cloudmesh-client (>=4.2.6, <=4.4.0), moca (0.3.3) +2 more potentially affected by CVE-2026-45409 via idna (2.1.0)

idna PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on idna and may be impacted: - cloudmesh-client =4.2.6, =2.1.1rc5, =2.2.0 Source cves: CVE-2026-45409 Source advisory: OSV:PYSEC-2026-215...

cloudmesh-client (>=4.5.0, <=4.7.3), no-cloud (0.0.8) potentially affected by CVE-2026-45409 via idna (2.2.0)

idna PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on idna and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 - no-cloud 0.0.8 Source cves: CVE-2026-45409 Source advisory: OSV:PYSEC-2026-215...

cloudmesh-client (>=4.2.6, <=4.4.0), moca (0.3.3) +2 more potentially affected by CVE-2026-45409 via idna (2.1.0)

idna PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on idna and may be impacted: - cloudmesh-client =4.2.6, =2.1.1rc5, =2.2.0 Source cves: CVE-2026-45409 Source advisory: OSV:GHSA-65PC-FJ4G-8RJX...

cloudmesh-client (>=4.5.0, <=4.7.3), no-cloud (0.0.8) potentially affected by CVE-2026-45409 via idna (2.2.0)

idna PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on idna and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 - no-cloud 0.0.8 Source cves: CVE-2026-45409 Source advisory: OSV:GHSA-65PC-FJ4G-8RJX...

chaosmonkey (>=1.0.8, <=1.1.0), cloudmesh-client (>=4.5.0, <=4.7.3) +1 more potentially affected by CVE-2026-44405 via paramiko (2.1.1)

paramiko PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - chaosmonkey =1.0.8, =4.5.0, =0.8.0, =0.9.0 Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...

cloudmesh-client (>=4.3.2, <=4.4.0) potentially affected by CVE-2026-44405 via paramiko (2.0.1)

paramiko PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - cloudmesh-client =4.3.2, =4.4.0 Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2026-34073 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...

cloudmesh-client (>=4.3.2, <=4.4.0), mastercard-api-core (>=1.1.1, <=1.3.0) +29 more potentially affected by CVE-2026-34073 via cryptography (1.4.0)

cryptography PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.3.2, =1.1.1, =1.0.2, =1.0.2, =1.0.2, =0.0.1, =0.0.1, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3 and more Source cves:...

cloudmesh-client (>=4.5.0, <=4.7.3), django-ca (>=1.5.0, <=1.5.1) +5 more potentially affected by CVE-2026-34073 via cryptography (1.7.2)

cryptography PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.5.0, =1.5.0, =0.5.1, =1.0.0, =5.4.0, =2.2.2, =0.7.0, =0.7.3 Source cves: CVE-2026-34073 Source advisory:...

cloudmesh-client (>=4.3.2, <=4.4.0), mastercard-api-core (>=1.1.1, <=1.3.0) +29 more potentially affected by CVE-2026-34073 via cryptography (1.4.0)

cryptography PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.3.2, =1.1.1, =1.0.2, =1.0.2, =1.0.2, =0.0.1, =0.0.1, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3 and more Source cves:...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2026-34073 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2026-34073 Source advisory: OSV:GHSA-M959-CC7F-WV43...