lftools (0.31.2) potentially affected by CVE-2026-102930 via virtualenv (20.0.9)

virtualenv PYPI version 20.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - lftools 0.31.2 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

ezflow (>=0.2.1, <=0.2.4) potentially affected by CVE-2026-102937 via virtualenv (20.5.0)

virtualenv PYPI version 20.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ezflow =0.2.1, =0.2.4 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

ducktape (0.7.16), gym-simplifiedtetris-avela (0.1.6) +3 more potentially affected by CVE-2026-102937 via virtualenv (20.16.2)

virtualenv PYPI version 20.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ducktape 0.7.16 - gym-simplifiedtetris-avela 0.1.6 - pgsync =2.4.0, =1.66.5, =2.3.3 Source cves: CVE-2026-102937 Source advisory:...

aprsd (1.6.0), costsekondi (0.0.1) potentially affected by CVE-2026-102937 via virtualenv (20.4.0)

virtualenv PYPI version 20.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aprsd 1.6.0 - costsekondi 0.0.1 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

nova-prompt-optimizer (>=1.0.48, <=1.1.0), pkg-15903 (>=0.1.20, <=0.1.55) +9 more potentially affected by CVE-2026-102937 via virtualenv (20.31.2)

virtualenv PYPI version 20.31.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - nova-prompt-optimizer =1.0.48, =0.1.20, =0.1.1, =0.1.0, =1.0.0, =0.4.9, =0.5.3 Source cves: CVE-2026-102937 Source advisory:...

pkg-15903 (>=0.1.10, <=0.1.18), py-package-updater (>=0.1.1, <=0.1.3) +3 more potentially affected by CVE-2026-102937 via virtualenv (20.29.3)

virtualenv PYPI version 20.29.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pkg-15903 =0.1.10, =0.1.1, =0.1.1, =1.0.9 - ten8t 0.0.22 - tidyfiles 0.6.3 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-40...

titanic-mieuxqaloys (0.1.0) potentially affected by CVE-2026-102937 via virtualenv (20.29.2)

virtualenv PYPI version 20.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - titanic-mieuxqaloys 0.1.0 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

MAL-2026-16276 Malicious code in @lekzo/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5caafea4a5656343feb4b52bf0007c98e6ed65a41ad22c79f24c0f1c48566f package.json declares the libsignal dependency as github:canove/libsignal-node — a bare GitHub owner/repo reference with no commit SHA, tag, or semve...

boj2md (>=0.0.1, <=0.0.2), desktopscoreviewer (>=1.0.2, <=1.0.3) +3 more potentially affected by CVE-2026-86000 via soupsieve (1.9.1)

soupsieve PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - boj2md =0.0.1, =1.0.2, =0.2.0, =1.3.7, =1.4.4 - subtidal 1.0.0 Source cves: CVE-2026-86000 Source advisory: OSV:GHSA-GJV8-XP57-G29C...

basketball-reference-scraper (>=1.0.1, <=1.0.31), bsdownloader (>=0.2.0, <=0.2.1) +21 more potentially affected by CVE-2026-85999 via soupsieve (1.9.5)

soupsieve PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - basketball-reference-scraper =1.0.1, =0.2.0, =0.0.31, =0.1.0, =0.4.0, =0.1.2.5, =3.1.7, =2.3.0, =0.1.1, =0.0.1, =0.0.2, =0.0.3 and more Source...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.1.16), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.1.16) +1 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.6)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.1.16 -...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.1.27), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.1.27) +1 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.14)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.1.27 -...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.2.41), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.2.41) +1 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.105)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.105 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.2.41 -...

ca.uhn.hapi.fhir:org.hl7.fhir.report (1.0.0) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (1.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.report 1.0.0 Source cves: CVE-2026-81876 Source...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (>=1.1.41, <=1.1.42), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (>=1.1.41, <=1.1.42) +1 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.22)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.1.22 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher =1.1.41, =1.1.41, =1.1.41, =1.1....

ca.uhn.hapi.fhir:hapi-fhir-cli-api (6.4.0), ca.uhn.hapi.fhir:hapi-fhir-cli-app (6.4.0) +18 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.881)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.881 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 6.4.0 - ca.uhn.hapi.fhir:hapi-fhir-cli-app...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=8.10.0), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.5) +155 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.0.0, <=6.9.11)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.4.0, =6.8.0, =6.6.0, =8.10.0 and more Source cves: CVE-2026-81876 Source advisory: OSV:GHSA-GQ9C-WMRM-5HVR...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (>=1.1.124, <=1.1.125), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (>=1.1.124, <=1.1.125) +1 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.50)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.50 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher =1.1.124, =1.1.124, =1.1.124,...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.2.39), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.2.39) +1 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.101)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.101 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.2.39 -...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.2.1), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.2.1) +1 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.63)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.63 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.2.1 -...