cylc-uiserver (0.2.0), jhub-swarmspawner (>=0.2.4, <=0.2.6) +1 more potentially affected by CVE-2026-54338 via jupyterhub (1.1.0)

jupyterhub PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.2.0 - jhub-swarmspawner =0.2.4, =0.0.1, =0.0.3 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2026-54338 via jupyterhub (1.3.0)

jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

cylc-uiserver (0.1.0), jhub-swarmspawner (>=0.2.0, <=0.2.2) potentially affected by CVE-2026-54338 via jupyterhub (1.0.0)

jupyterhub PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.1.0 - jhub-swarmspawner =0.2.0, =0.2.2 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

cylc-uiserver (0.1.0), jhub-swarmspawner (>=0.2.0, <=0.2.2) potentially affected by CVE-2026-54338 via jupyterhub (1.0.0)

jupyterhub PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.1.0 - jhub-swarmspawner =0.2.0, =0.2.2 Source cves: CVE-2026-54338 Source advisory: OSV:GHSA-P43P-WHWX-Q52H...

cylc-uiserver (0.2.0), jhub-swarmspawner (>=0.2.4, <=0.2.6) +1 more potentially affected by CVE-2026-54338 via jupyterhub (1.1.0)

jupyterhub PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.2.0 - jhub-swarmspawner =0.2.4, =0.0.1, =0.0.3 Source cves: CVE-2026-54338 Source advisory: OSV:GHSA-P43P-WHWX-Q52H...

cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2026-54338 via jupyterhub (1.3.0)

jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2026-54338 Source advisory: OSV:GHSA-P43P-WHWX-Q52H...

cylc-flow (8.0.0a2), cylc-uiserver (0.2.0) +6 more potentially affected by CVE-2026-0994 via protobuf (3.12.1)

protobuf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cylc-flow 8.0.0a2 - cylc-uiserver 0.2.0 - flwr =0.1.0, =0.0.1.dev20200713, =1.8.5, =2.1.0b7, =0.0.1, =0.0.4 - zeebe-grpc 0.23.2.0 Source cves:...

appenginetaskutils (>=0.4.3.dev2, <=0.4.3), asc (>=0.1.0, <=0.3.1) +20 more potentially affected by CVE-2025-66221 via werkzeug (0.12.2)

werkzeug PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - appenginetaskutils =0.4.3.dev2, =0.1.0, =1.0.18, =0.1.0, =0.12.0, =2.10.60, =2.0.2, =0.1.0, =0.1.0, =0.5.0 - nailpack-flask 0.1.0 - nails 0.2.0...

cylc-uiserver (0.1.0), jhub-swarmspawner (>=0.2.0, <=0.2.2) potentially affected by CVE-2024-28233 via jupyterhub (1.0.0)

jupyterhub PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.1.0 - jhub-swarmspawner =0.2.0, =0.2.2 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

cylc-uiserver (0.2.0), jhub-swarmspawner (>=0.2.4, <=0.2.6) +1 more potentially affected by CVE-2024-28233 via jupyterhub (1.1.0)

jupyterhub PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.2.0 - jhub-swarmspawner =0.2.4, =0.0.1, =0.0.3 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2024-28233 via jupyterhub (1.3.0)

jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2026-33709 via jupyterhub (1.3.0)

jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2026-33709 Source advisory: OSV:PYSEC-2026-2188...

cylc-uiserver (0.1.0), jhub-swarmspawner (>=0.2.0, <=0.2.2) potentially affected by CVE-2026-33709 via jupyterhub (1.0.0)

jupyterhub PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.1.0 - jhub-swarmspawner =0.2.0, =0.2.2 Source cves: CVE-2026-33709 Source advisory: OSV:PYSEC-2026-2188...

cylc-uiserver (0.2.0), jhub-swarmspawner (>=0.2.4, <=0.2.6) +1 more potentially affected by CVE-2026-33709 via jupyterhub (1.1.0)

jupyterhub PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.2.0 - jhub-swarmspawner =0.2.4, =0.0.1, =0.0.3 Source cves: CVE-2026-33709 Source advisory: OSV:PYSEC-2026-2188...

cylc-uiserver (0.1.0), jhub-swarmspawner (>=0.2.0, <=0.2.2) potentially affected by CVE-2026-33709 via jupyterhub (1.0.0)

jupyterhub PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.1.0 - jhub-swarmspawner =0.2.0, =0.2.2 Source cves: CVE-2026-33709 Source advisory: OSV:GHSA-3VFF-HJQV-M7H8...

cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2026-33709 via jupyterhub (1.3.0)

jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2026-33709 Source advisory: OSV:GHSA-3VFF-HJQV-M7H8...

cylc-uiserver (0.2.0), jhub-swarmspawner (>=0.2.4, <=0.2.6) +1 more potentially affected by CVE-2026-33709 via jupyterhub (1.1.0)

jupyterhub PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.2.0 - jhub-swarmspawner =0.2.4, =0.0.1, =0.0.3 Source cves: CVE-2026-33709 Source advisory: OSV:GHSA-3VFF-HJQV-M7H8...

cylc-flow (8.0.0a2), cylc-uiserver (0.2.0) +6 more potentially affected by CVE-2026-0994 via protobuf (3.12.1)

protobuf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cylc-flow 8.0.0a2 - cylc-uiserver 0.2.0 - flwr =0.1.0, =0.0.1.dev20200713, =1.8.5, =2.1.0b7, =0.0.1, =0.0.4 - zeebe-grpc 0.23.2.0 Source cves:...

cylc-flow (8.0.0a2), cylc-uiserver (0.2.0) +6 more potentially affected by CVE-2025-4565 via protobuf (3.12.1)

protobuf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cylc-flow 8.0.0a2 - cylc-uiserver 0.2.0 - flwr =0.1.0, =0.0.1.dev20200713, =1.8.5, =2.1.0b7, =0.0.1, =0.0.4 - zeebe-grpc 0.23.2.0 Source cves:...

chemtsv2 (>=0.9.1, <=0.9.13), cohesion-pipeline (0.1.2) +8 more potentially affected by CVE-2025-4565 via protobuf (3.9.2)

protobuf PYPI version 3.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - chemtsv2 =0.9.1, =0.8.6, =0.8.7 - nerdvision 1.0.1 - pycloud-client 0.7.1 - qihoo-tensornet 0.208.0 - transactid 0.1.0a3 - zeebe-grpc 0.20.0.11...