assert-files (>=0.1.0, <=0.1.3), vpplib (0.0.4) +1 more potentially affected by CVE-2026-84309 via pypdf (3.16.4)

pypdf PYPI version 3.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - assert-files =0.1.0, =0.61.0, =0.65.0 Source cves: CVE-2026-84309 Source advisory: OSV:PYSEC-2026-3913...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-84309 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....

voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-71492 via banks (2.2.0)

banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-71492 Source advisory: OSV:PYSEC-2026-3810...

sereto (0.2.1), ten8t (>=0.0.14, <=0.0.21) potentially affected by CVE-2026-84311 via pypdf (5.3.1)

pypdf PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - sereto 0.2.1 - ten8t =0.0.14, =0.0.21 Source cves: CVE-2026-84311 Source advisory: OSV:PYSEC-2026-3911...

iiiflow (>=0.1.0, <=1.3.2), mayan-edms (>=4.5.0, <=4.5.8) potentially affected by CVE-2026-84310 via pypdf (3.14.0)

pypdf PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - iiiflow =0.1.0, =4.5.0, =4.5.8 Source cves: CVE-2026-84310 Source advisory: OSV:PYSEC-2026-3910...

pymorant (>=1.0.145, <=1.0.156) potentially affected by CVE-2026-82398 via pypdf (3.16.1)

pypdf PYPI version 3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - pymorant =1.0.145, =1.0.156 Source cves: CVE-2026-82398 Source advisory: OSV:PYSEC-2026-3912...

django-omnibus (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-82397 via tornado (3.1.1)

tornado PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - django-omnibus =0.1.0, =0.2.0 Source cves: CVE-2026-82397 Source advisory: OSV:PYSEC-2026-3928...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2026-82398 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2026-82398 Source advisory: OSV:PYSEC-2026-3912...

agora-protocol (0.2.0), athina (>=1.6.24, <=1.6.33) +14 more potentially affected by CVE-2026-55830 via restrictedpython (7.4.0)

restrictedpython PYPI version 7.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - agora-protocol 0.2.0 - athina =1.6.24, =0.1.5, =0.1.0, =0.38.0, =0.0.86, =0.0.43a23, =0.1.24, =0.2.0, =0.2.0, =0.3.2 and more...

open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-37004 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-37004 Source advisory: OSV:PYSEC-2026-3861...

pitcrew (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-54590 via asyncssh (1.16.1)

asyncssh PYPI version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pitcrew =0.0.1, =0.0.3 Source cves: CVE-2026-54590 Source advisory: OSV:PYSEC-2026-3809...

open-interpreter (>=0.1.12, <=0.1.17), promptmodel (>=0.0.25, <=0.0.31) potentially affected by CVE-2026-37004 via litellm (0.13.2)

litellm PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.12, =0.0.25, =0.0.31 Source cves: CVE-2026-37004 Source advisory: OSV:PYSEC-2026-3861...

rubin-jupyter-utils-lab (>=0.10.0, <=0.13.0), swannotificationsservice (0.1.0) potentially affected by CVE-2026-54338 via jupyterhub (1.5.1)

jupyterhub PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - rubin-jupyter-utils-lab =0.10.0, =0.13.0 - swannotificationsservice 0.1.0 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

cylc-uiserver (0.1.0), jhub-swarmspawner (>=0.2.0, <=0.2.2) potentially affected by CVE-2026-54338 via jupyterhub (1.0.0)

jupyterhub PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.1.0 - jhub-swarmspawner =0.2.0, =0.2.2 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2026-37004 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2026-37004 Source advisory: OSV:PYSEC-2026-3861...

vimgpt (0.1.2) potentially affected by CVE-2026-37004 via litellm (0.1.618)

litellm PYPI version 0.1.618 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - vimgpt 0.1.2 Source cves: CVE-2026-37004 Source advisory: OSV:PYSEC-2026-3861...

pyplanet (>=0.1.5, <=0.3.3) potentially affected by CVE-2019-6111 +1 more via asyncssh (1.10.0)

asyncssh PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.1.5, =0.3.3 Source cves: CVE-2019-6111, CVE-2026-54591 Source advisory: OSV:PYSEC-2026-3808...

async-sender (>=1.4.0, <=1.4.1), ax (>=0.39.0, <=0.42.0) potentially affected by CVE-2026-55558 via aiosmtplib (1.1.0)

aiosmtplib PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender =1.4.0, =0.39.0, =0.42.0 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

clockwerk (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-55558 via aiosmtplib (4.0.1)

aiosmtplib PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - clockwerk =0.1.0, =0.1.2 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

actions-runtime (>=1.0.1, <=1.0.4), agience-origin (>=0.1.0, <=0.2.8) +20 more potentially affected by CVE-2026-55558 via aiosmtplib (3.0.2)

aiosmtplib PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - actions-runtime =1.0.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =1.4.2, =1.7.0, =0.2.3, =1.6.52, =1.8.0rc2, =0.1.0, =0.1.2 and more Source cves:...