anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2026-82397 via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2025-67726 via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2026-49853 via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2026-49854 via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

backtrader-plotting (1.1.0), biome-text (1.0.0rc1) +4 more potentially affected by CVE-2026-21883 via bokeh (2.0.2)

bokeh PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - backtrader-plotting 1.1.0 - biome-text 1.0.0rc1 - dataprep =0.2.2, =0.11.5, =0.0.0, =1.3.1 - plotgallery 0.2.0 Source cves: CVE-2026-21883 Source...

awesome-panel-extensions (>=20200722.1.0, <=20201022.1.0), dataprep (>=0.2.7, <=0.2.9) +2 more potentially affected by CVE-2026-21883 via bokeh (2.1.1)

bokeh PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - awesome-panel-extensions =20200722.1.0, =0.2.7, =0.3.0, =0.0.14, =0.0.17 Source cves: CVE-2026-21883 Source advisory: OSV:PYSEC-2026-1223...

anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2024-52804 via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

cnx-archive (>=3.1.0, <=4.15.23), cnx-easybake (1.2.8) +11 more potentially affected by CVE-2026-41066 via lxml (4.4.3)

lxml PYPI version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - cnx-archive =3.1.0, =0.21.1, =0.1.0a1, =0.3.1, =0.2.29, =0.3.0, =9.1.0b1, =3.3.0, =0.2.0a1, =0.3.0a1 - roku 3.1.0 Source cves: CVE-2026-41066 Source...

dataprep (>=0.2.10a0, <=0.2.13.post2) potentially affected by CVE-2026-23528 via distributed (2.10.0)

distributed PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataprep =0.2.10a0, =0.2.13.post2 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

awesome-panel-extensions (>=20200722.1.0, <=20201022.1.0), dataprep (>=0.2.7, <=0.2.9) +2 more potentially affected by CVE-2026-21883 via bokeh (2.1.1)

bokeh PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - awesome-panel-extensions =20200722.1.0, =0.2.7, =0.3.0, =0.0.14, =0.0.17 Source cves: CVE-2026-21883 Source advisory: OSV:GHSA-793V-589G-574V...

anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2024-14029 via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2023-28370 via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

dataprep (>=0.2.10a0, <=0.2.13.post2) potentially affected by CVE-2021-42343 via distributed (2.10.0)

distributed PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataprep =0.2.10a0, =0.2.13.post2 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

dataprep (>=0.2.10a0, <=0.2.13.post2) potentially affected by CVE-2021-42343 via distributed (2.10.0)

distributed PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataprep =0.2.10a0, =0.2.13.post2 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-871...

dataprep (>=0.1.0a1, <=0.2.1) potentially affected by CVE-2021-42343 via dask (2.9.2)

dask PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dataprep =0.1.0a1, =0.2.1 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

dataprep (>=0.2.2, <=0.2.10) potentially affected by CVE-2021-42343 via dask (2.13.0)

dask PYPI version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dataprep =0.2.2, =0.2.10 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

a2g (2020.0.1), dataprep (>=0.2.11, <=0.2.12) +1 more potentially affected by CVE-2021-42343 via dask (2.22.0)

dask PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - a2g 2020.0.1 - dataprep =0.2.11, =0.2.12 - justblast 2020.0.4 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

dataprep (>=0.2.13, <=0.2.14), esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2021-42343 via dask (2.25.0)

dask PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dataprep =0.2.13, =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...