billomapy (2.4.0), prawoauth2 (0.1.5) potentially affected by CVE-2026-103261 via tornado (4.2.0)

tornado PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - billomapy 2.4.0 - prawoauth2 0.1.5 Source cves: CVE-2026-103261 Source advisory: OSV:GHSA-3HV7-MJH2-FV65...

stashpy (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-103262 via tornado (4.3.0b2)

tornado PYPI version 4.3.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - stashpy =0.2.0, =0.2.1 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

brew-view (>=2.4.0, <=2.4.21), fast-explain (>=0.0.49, <=0.0.91) +6 more potentially affected by CVE-2026-103262 via tornado (5.1.0)

tornado PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - brew-view =2.4.0, =0.0.49, =0.9.0.2, =0.1.2, =0.10.2, =0.5.23, =0.6.0 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

@agent-tool-platform/agent-kit (>=0.2.0, <=0.4.0), @agent-tool-platform/ast-summarizer (>=0.1.0, <=0.1.1) +544 more potentially affected by CVE-2026-84504 via fastify (>=5.0.0-alpha.2, <=5.12.1)

fastify NPM version =5.0.0-alpha.2, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =1.0.4, =0.0.0-vBETA-20260417080530, =0.0.1, =1.60.2, =1.0.0, =0.0.0, =2.0.1, =0.1.0, =0.2.7 and more Source cves: CVE-2026-84504 Source advisory: OSV:GHSA-667R-XXJV-C9MM...

03-api-solid (>=1.0.0, <=1.1.2), 0uth (>=1.0.5, <=1.2.1) +3000 more potentially affected by CVE-2026-76169 via fastify (>=4.0.2, <=5.12.1)

fastify NPM version =4.0.2, =1.0.0, =1.0.5, =1.0.3, =0.0.3, =0.1.0, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =3.0.0, =0.1.0, =2.0.0, =3.0.0, =0.0.1, =0.2.0 and more Source cves: CVE-2026-76169 Source advisory: GHSA-P68Q-WCHP-6FH7...

@agent-tool-platform/agent-kit (>=0.2.0, <=0.4.0), @agent-tool-platform/ast-summarizer (>=0.1.0, <=0.1.1) +544 more potentially affected by CVE-2026-84428 via fastify (>=5.0.0-alpha.2, <=5.12.1)

fastify NPM version =5.0.0-alpha.2, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =1.0.4, =0.0.0-vBETA-20260417080530, =0.0.1, =1.60.2, =1.0.0, =0.0.0, =2.0.1, =0.1.0, =0.2.7 and more Source cves: CVE-2026-84428 Source advisory: GHSA-9Q9J-Q6P8-XQ58...

@apisurf/canonui (>=0.1.1, <=0.2.1), @apisurf/deckui (>=0.1.1, <=0.1.2) +14 more potentially affected by CVE-2026-102984 via astro (>=7.0.2, <=7.2.2)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-102984 Source advisory: SNYK:JS-ASTRO-20510285...

android-category (>=0.0.3, <=0.0.4), ant-cli (0.0.1) +34 more potentially affected by CVE-2026-87819 via gitpython (2.1.11)

gitpython PYPI version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - android-category =0.0.3, =0.0.2, =0.3.0, =0.0.2, =0.12.4rc1, =0.1.26.dev1542857464, =0.2.3, =0.1.0, =0.0.1, =1.2.5, =0.1.0.0b1, =0.1.3 and mo...

arthur-common (2.4.69) potentially affected by CVE-2026-84377 via litellm (1.96.0)

litellm PYPI version 1.96.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - arthur-common 2.4.69 Source cves: CVE-2026-84377 Source advisory: OSV:GHSA-3CV6-JPF6-8222...

autollm (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-84377 via litellm (0.8.4)

litellm PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autollm =0.0.1, =0.0.3 Source cves: CVE-2026-84377 Source advisory: OSV:GHSA-3CV6-JPF6-8222...

airlock-llm (>=0.1.1, <=0.5.15), gllm-multimodal-binary (>=0.2.9b1, <=0.3.22) +7 more potentially affected by CVE-2026-84377 via litellm (1.95.0)

litellm PYPI version 1.95.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - airlock-llm =0.1.1, =0.2.9b1, =0.7.15, =0.1.0.8.11, =0.1.0.9 - pbi-agent 0.14.0 - pilottai-tools 0.1.0 - pr-agent 0.42.0 Source cves:...

promptulate (1.9.0) potentially affected by CVE-2026-84377 via litellm (0.12.12)

litellm PYPI version 0.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - promptulate 1.9.0 Source cves: CVE-2026-84377 Source advisory: OSV:GHSA-3CV6-JPF6-8222...

arthur-common (2.4.67), benchflow (>=0.6.1, <=0.6.5) +27 more potentially affected by CVE-2026-84377 via litellm (>=1.89.0, <=1.89.3)

litellm PYPI version =1.89.0, =0.6.1, =0.6.5 - cognee-community-graph-adapter-arcadedb 0.2.0 - cognee-community-graph-adapter-memgraph 0.2.0 - cognee-community-graph-adapter-networkx 1.1.0 - cognee-community-graph-adapter-pggraph 0.2.0 - cognee-community-graph-adapter-spanner 0.2.0 -...

@5minds/processcube_engine (>=19.0.0-beta.11, <=20.0.0-renovate-fd1892-me5sbqz0), @angular-architects/native-federation (>=22.0.0, <=22.0.1) +55 more potentially affected by CVE-2026-102992 via piscina (>=5.0.0, <=5.3.1)

piscina NPM version =5.0.0, =19.0.0-beta.11, =22.0.0, =20.0.0-rc.0, =20.0.0-rc.0, =21.2.2-depup.0, =1.0.0, =5.0.0, =21.0.0-alpha.10, =22.0.0-alpha.1, =21.0.0-alpha.10, =22.0.0-alpha.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =0.1.0, =0.1.26, =0.1.36 and more Source cves:...

@27richie/npm-test-richie (>=1.0.2, <=1.0.6), @alex91ivanov/ngx-run-builder (1.0.0) +381 more potentially affected by CVE-2026-102992 via piscina (>=1.6.3, <=4.9.3)

piscina NPM version =1.6.3, =1.0.2, =2.0.70, =14.2.0-next.0, =13.0.0, =0.9.2, =17.1.0-beta.0, =12.0.0-beta.0, =18.2.6-RC-1, =16.0.0, =12.2.0-next.2, =18.0.0-next.3, =1.24.0, =1.27.0 and more Source cves: CVE-2026-102992 Source advisory: MEND:CVE-2026-102992...

CLEANSTART-2024-XJ18859 Composer is a dependency manager for PHP

Security vulnerability affects the composer package. Composer is a dependency manager for PHP...

CLEANSTART-2024-SA12234 Composer is an open source dependency manager for the PHP language

Security vulnerability affects the composer package. Composer is an open source dependency manager for the PHP language...

CLEANSTART-2024-VD23894 Composer is a dependency manager for the PHP programming language

Security vulnerability affects the composer package. Composer is a dependency manager for the PHP programming language...

CLEANSTART-2024-OM41616 Composer is a dependency manager for PHP

Security vulnerability affects the composer package. Composer is a dependency manager for PHP...

CLEANSTART-2024-JY83809 Composer is a dependency Manager for the PHP language

Security vulnerability affects the composer package. Composer is a dependency Manager for the PHP language...