cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2026-69248 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2026-69248 Source advisory:...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2026-69249 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2026-69249 Source advisory:...

colony-cli (>=1.2.13b0, <=1.3.0b0), cumulusci (>=3.32.0, <=3.32.1) +16 more potentially affected by CVE-2026-59890 via setuptools (54.2.0)

setuptools PYPI version 54.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colony-cli =1.2.13b0, =3.32.0, =0.1.0, =0.1.0, =0.0.1, =2.0.0.dev4, =0.0.1, =0.0.3, =1.4.0b0, =1.1.3, =0.5.0, =0.5.1 and more Source cves:...

apidriver (>=0.6.5, <=0.9.1), classification-model (0.0.1) +27 more potentially affected by CVE-2026-59890 via setuptools (56.0.0)

setuptools PYPI version 56.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - apidriver =0.6.5, =3.33.0, =0.41.1, =10.0.0, =0.0.3.6, =1.2.3, =1.0.0, =0.0.18, =1.0.0, =1.4.13, =1.4.29 and more Source cves: CVE-2026-598...

aiolivisi (0.0.4), airflow-provider-sqream-blue (>=0.0.1, <=0.0.7) +35 more potentially affected by CVE-2026-59890 via setuptools (57.4.0)

setuptools PYPI version 57.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aiolivisi 0.0.4 - airflow-provider-sqream-blue =0.0.1, =0.7.5, =0.0.2, =0.11.0, =0.5.1, =3.40.0, =0.2.5.5, =0.3.2, =0.1.0, =0.1.0, =0.1.0,...

cumulusci (>=3.32.0, <=3.37.0.dev0), lumapps-sdk (>=1.1.3b5, <=2.0.3) +3 more potentially affected by CVE-2025-62706 via authlib (0.15.3)

authlib PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - cumulusci =3.32.0, =1.1.3b5, =0.1.0, =0.53.1, =0.1.0, =0.1.9 Source cves: CVE-2025-62706 Source advisory: OSV:PYSEC-2026-1202...

authx (>=0.2.0, <=0.9.1), cumulusci (>=3.48.0, <=3.55.0.dev1) +4 more potentially affected by CVE-2025-62706 via authlib (0.15.5)

authlib PYPI version 0.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - authx =0.2.0, =3.48.0, =0.19.0, =1.0.1, =3.3.2 Source cves: CVE-2025-62706 Source advisory: OSV:PYSEC-2026-1202...

cumulusci (>=3.32.0, <=3.37.0.dev0), lumapps-sdk (>=1.1.3b5, <=2.0.3) +3 more potentially affected by CVE-2025-59420 via authlib (0.15.3)

authlib PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - cumulusci =3.32.0, =1.1.3b5, =0.1.0, =0.53.1, =0.1.0, =0.1.9 Source cves: CVE-2025-59420 Source advisory: OSV:PYSEC-2026-1200...

cateye (>=0.3.4, <=0.3.8), cizohosubscriptions (>=1.0.1, <=1.0.2) +5 more potentially affected by CVE-2025-50181 via urllib3 (1.25.5)

urllib3 PYPI version 1.25.5 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - cateye =0.3.4, =1.0.1, =2.5.9, =1.0.1, =0.2.1, =0.3.1 - zoho-subscriptions 1.0.1 Source cves: CVE-2025-50181 Source advisory: OSV:PYSEC-2026-1999...

catapult-api (0.6.3), cumulusci (>=3.44.0.dev1, <=3.44.0) potentially affected by CVE-2024-6345 via setuptools (58.0.3)

setuptools PYPI version 58.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - catapult-api 0.6.3 - cumulusci =3.44.0.dev1, =3.44.0 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

cumulusci (>=3.38.0.dev1, <=3.40.2.dev1), daml-dit-if (>=0.6.0, <=0.6.12) +1 more potentially affected by CVE-2024-28102 via jwcrypto (0.9.1)

jwcrypto PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =3.38.0.dev1, =0.6.0, =0.1.0, =0.9.0 Source cves: CVE-2024-28102 Source advisory: OSV:PYSEC-2026-1484...

cumulusci (>=2.5.6, <=3.7.0), lgblkb-tools (>=1.0.60, <=1.0.66) +2 more potentially affected by CVE-2024-28102 via jwcrypto (0.6.0)

jwcrypto PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =2.5.6, =1.0.60, =0.0.0, =1.4.5, =1.7.0 Source cves: CVE-2024-28102 Source advisory: OSV:PYSEC-2026-1484...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2023-50782 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2023-50782 Source advisory:...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2024-0727 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2024-0727 Source advisory:...

cumulusci (>=3.32.0, <=3.37.0.dev0), lumapps-sdk (>=1.1.3b5, <=2.0.3) +3 more potentially affected by CVE-2026-44681 via authlib (0.15.3)

authlib PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - cumulusci =3.32.0, =1.1.3b5, =0.1.0, =0.53.1, =0.1.0, =0.1.9 Source cves: CVE-2026-44681 Source advisory: OSV:PYSEC-2026-188...

cumulusci (>=3.32.0, <=3.37.0.dev0), lumapps-sdk (>=1.1.3b5, <=2.0.3) +3 more potentially affected by CVE-2026-44681 via authlib (0.15.3)

authlib PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - cumulusci =3.32.0, =1.1.3b5, =0.1.0, =0.53.1, =0.1.0, =0.1.9 Source cves: CVE-2026-44681 Source advisory: OSV:GHSA-R95X-QFJJ-FJJ2...

cumulusci (>=3.32.0, <=3.37.0.dev0), lumapps-sdk (>=1.1.3b5, <=2.0.3) +3 more potentially affected by CVE-2026-41425 via authlib (0.15.3)

authlib PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - cumulusci =3.32.0, =1.1.3b5, =0.1.0, =0.53.1, =0.1.0, =0.1.9 Source cves: CVE-2026-41425 Source advisory: OSV:PYSEC-2026-25...

aio-nxapi (>=0.1.0, <=0.3.0), basketball-reference-web-scraper (>=4.9.4, <=4.13.0) +19 more potentially affected by CVE-2026-41066 via lxml (4.5.1)

lxml PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - aio-nxapi =0.1.0, =4.9.4, =2020.6.3, =3.13.0, =3.7.0, =1.1.5, =2.1.0, =2020.6.3, =2.22.0, =0.1.8, =0.1.5, =3.0.0, =3.0.1 and more Source cves:...

cumulusci (>=3.37.0, <=3.38.0.dev0) potentially affected by CVE-2026-39373 via jwcrypto (0.9.0)

jwcrypto PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =3.37.0, =3.38.0.dev0 Source cves: CVE-2026-39373 Source advisory: OSV:GHSA-FJRM-76X2-C4Q4...

cumulusci (>=2.5.6, <=3.7.0), lgblkb-tools (>=1.0.60, <=1.0.66) +2 more potentially affected by CVE-2026-39373 via jwcrypto (0.6.0)

jwcrypto PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - cumulusci =2.5.6, =1.0.60, =0.0.0, =1.4.5, =1.7.0 Source cves: CVE-2026-39373 Source advisory: OSV:GHSA-FJRM-76X2-C4Q4...