krakenci-server (>=0.1047.0, <=1.7.36) potentially affected by CVE-2026-55830 via restrictedpython (5.0.0)

restrictedpython PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - krakenci-server =0.1047.0, =1.7.36 Source cves: CVE-2026-55830 Source advisory: OSV:PYSEC-2026-3917...

artificienlib (>=0.1.1, <=0.1.6), syft (>=0.2.8, <=0.2.9) +8 more potentially affected by CVE-2026-55830 via restrictedpython (5.4.0)

restrictedpython PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - artificienlib =0.1.1, =0.2.8, =0.0.333, =0.0.27, =0.0.70, =0.0.126, =0.0.31, =0.0.30, =0.0.14, =0.0.26 Source cves: CVE-2026-558...

dothttp-req (>=0.0.43a19, <=0.0.43a20) potentially affected by CVE-2026-55830 via restrictedpython (7.2.0)

restrictedpython PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dothttp-req =0.0.43a19, =0.0.43a20 Source cves: CVE-2026-55830 Source advisory: OSV:PYSEC-2026-3917...

CVE-2026-55830 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-55830 vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

agora-protocol (0.2.0), athina (>=1.6.24, <=1.6.33) +14 more potentially affected by CVE-2026-55830 via restrictedpython (7.4.0)

restrictedpython PYPI version 7.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - agora-protocol 0.2.0 - athina =1.6.24, =0.1.5, =0.1.0, =0.38.0, =0.0.86, =0.0.43a23, =0.1.24, =0.2.0, =0.2.0, =0.3.2 and more...

llm-toys (0.1.1) potentially affected by CVE-2026-55830 via restrictedpython (6.1.0)

restrictedpython PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - llm-toys 0.1.1 Source cves: CVE-2026-55830 Source advisory: OSV:GHSA-FFG3-P8FM-MJX2...

CVE-2026-55830 RestrictedPython guard hooks can be shadowed via positional-only arguments

RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Prior to 8.3, checkfunctionargumentnames rejected protected guard hook names for regular, variadic, and keyword-only arguments but omitted...