cloudmesh-client (>=4.2.6, <=4.4.0), nginxauthdaemon (>=1.0.0a1, <=1.1.0) +1 more potentially affected by CVE-2026-27199 via werkzeug (0.11.10)

werkzeug PYPI version 0.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.2.6, =1.0.0a1, =1.1.0 - picopayments-hub 0.0.11 Source cves: CVE-2026-27199 Source advisory: OSV:GHSA-29VQ-49WR-VM6X...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2026-26007 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2026-26007 Source advisory: OSV:PYSEC-2026-2141...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2026-26007 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...

cloudmesh-client (>=4.3.2, <=4.4.0), mastercard-api-core (>=1.1.1, <=1.3.0) +29 more potentially affected by CVE-2026-26007 via cryptography (1.4.0)

cryptography PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.3.2, =1.1.1, =1.0.2, =1.0.2, =1.0.2, =0.0.1, =0.0.1, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3 and more Source cves:...

biomedsheets (>=0.2.0, <=0.4.0), c2cwsgiutils (>=0.0.2, <=0.5.1) +2 more potentially affected by CVE-2025-71176 via pytest (3.0.6)

pytest PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - biomedsheets =0.2.0, =0.0.2, =4.5.0, =0.0.0, =0.0.4 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

cloudmesh-client (4.2.6), dcicsnovault (>=2.0.0b0, <=2.0.0b11) +3 more potentially affected by CVE-2025-71176 via pytest (2.9.1)

pytest PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - cloudmesh-client 4.2.6 - dcicsnovault =2.0.0b0, =0.0.5, =0.0.11, =0.0.17 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2026-21860 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2026-21860 Source advisory: OSV:GHSA-87HC-H4R5-73F7...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2025-66221 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2025-66221 Source advisory: OSV:GHSA-HGF8-39GV-G3F2...

cloudmesh-client (>=4.5.0, <=4.7.3), python-telegram-bot (5.3.1) +1 more potentially affected by CVE-2025-50181 via urllib3 (1.20.0)

urllib3 PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 - python-telegram-bot 5.3.1 - steem 0.18.4 Source cves: CVE-2025-50181 Source advisory: OSV:GHSA-PQ67-6M6Q-MJ2V...

cloudmesh-client (4.2.6) potentially affected by CVE-2024-53899 via virtualenv (15.0.1)

virtualenv PYPI version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2024-53899 Source advisory: OSV:GHSA-RQC4-2HC7-8C8V...

cloudmesh-client (4.2.6) potentially affected by CVE-2024-53899 via virtualenv (15.0.1)

virtualenv PYPI version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2024-53899 Source advisory: OSV:PYSEC-2024-187...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2024-49766 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2024-49766 Source advisory: OSV:GHSA-F9VJ-2WH5-FJ8J...

cloudmesh-client (>=4.2.6, <=4.4.0), nginxauthdaemon (>=1.0.0a1, <=1.1.0) +1 more potentially affected by CVE-2024-49766 via werkzeug (0.11.10)

werkzeug PYPI version 0.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.2.6, =1.0.0a1, =1.1.0 - picopayments-hub 0.0.11 Source cves: CVE-2024-49766 Source advisory: OSV:GHSA-F9VJ-2WH5-FJ8J...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2024-34069 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2024-34069 Source advisory: OSV:GHSA-2G68-C3QC-8985...

cloudmesh-client (>=4.2.6, <=4.4.0), moca (0.3.3) +2 more potentially affected by CVE-2024-3651 via idna (2.1.0)

idna PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on idna and may be impacted: - cloudmesh-client =4.2.6, =2.1.1rc5, =2.2.0 Source cves: CVE-2024-3651 Source advisory: OSV:GHSA-JJG7-2V4V-X38H...

cloudmesh-client (>=4.5.0, <=4.7.3), no-cloud (0.0.8) potentially affected by CVE-2024-3651 via idna (2.2.0)

idna PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on idna and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 - no-cloud 0.0.8 Source cves: CVE-2024-3651 Source advisory: OSV:GHSA-JJG7-2V4V-X38H...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2024-0727 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2024-0727 Source advisory: OSV:GHSA-9V9H-CGJ8-H64P...

alo7-airflow (>=1.10.0, <=1.10.0.7), biweeklybudget (>=0.1.0, <=0.7.0) +20 more potentially affected by CVE-2024-22195 via jinja2 (2.8.1)

jinja2 PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - alo7-airflow =1.10.0, =0.1.0, =4.5.0, =0.1.0, =3.0.0, =1.3.0, =3.0.0, =1.4.0rc1, =1.3.0, =2.0.0, =1.0.0a1, =1.6.0, =0.8.0.0, =0.9.0.7 and more Sourc...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2023-46136 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2023-46136 Source advisory: OSV:PYSEC-2023-221...

cloudmesh-client (>=4.5.0, <=4.7.3) potentially affected by CVE-2022-0718 via oslo-utils (3.22.0)

oslo-utils PYPI version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 Source cves: CVE-2022-0718 Source advisory: OSV:GHSA-WMQQ-R32M-87C5...