open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-37004 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-37004 Source advisory: OSV:PYSEC-2026-3861...

cylc-uiserver (0.1.0), jhub-swarmspawner (>=0.2.0, <=0.2.2) potentially affected by CVE-2026-54338 via jupyterhub (1.0.0)

jupyterhub PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.1.0 - jhub-swarmspawner =0.2.0, =0.2.2 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2026-37004 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2026-37004 Source advisory: OSV:PYSEC-2026-3861...

vimgpt (0.1.2) potentially affected by CVE-2026-37004 via litellm (0.1.618)

litellm PYPI version 0.1.618 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - vimgpt 0.1.2 Source cves: CVE-2026-37004 Source advisory: OSV:PYSEC-2026-3861...

pyplanet (>=0.1.5, <=0.3.3) potentially affected by CVE-2019-6111 +1 more via asyncssh (1.10.0)

asyncssh PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.1.5, =0.3.3 Source cves: CVE-2019-6111, CVE-2026-54591 Source advisory: OSV:PYSEC-2026-3808...

async-sender (>=1.4.0, <=1.4.1), ax (>=0.39.0, <=0.42.0) potentially affected by CVE-2026-55558 via aiosmtplib (1.1.0)

aiosmtplib PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender =1.4.0, =0.39.0, =0.42.0 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

clockwerk (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-55558 via aiosmtplib (4.0.1)

aiosmtplib PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - clockwerk =0.1.0, =0.1.2 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

actions-runtime (>=1.0.1, <=1.0.4), agience-origin (>=0.1.0, <=0.2.8) +20 more potentially affected by CVE-2026-55558 via aiosmtplib (3.0.2)

aiosmtplib PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - actions-runtime =1.0.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =1.4.2, =1.7.0, =0.2.3, =1.6.52, =1.8.0rc2, =0.1.0, =0.1.2 and more Source cves:...

authx (>=0.0.3, <=0.1.2), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-55558 via aiosmtplib (1.1.4)

aiosmtplib PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - authx =0.0.3, =0.2.0, =0.9.0, =0.9.13 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

aldryn-events (>=1.1.1, <=1.1.3), aldryn-faq (1.2.1) +4 more potentially affected by CVE-2026-54623 via django-cms (3.3.4)

django-cms PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - aldryn-events =1.1.1, =1.1.3 - aldryn-faq 1.2.1 - aldryn-people 1.2.1 - cmsplugin-articles-ai 0.1.1 - cmsplugin-carousel-ai 0.0.3 -...

aldryn-django-cms (3.5.3.2), django-shopit (0.5.2) potentially affected by CVE-2026-63003 via django-cms (3.5.3)

django-cms PYPI version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - aldryn-django-cms 3.5.3.2 - django-shopit 0.5.2 Source cves: CVE-2026-63003 Source advisory: OSV:PYSEC-2026-3821...

aldryn-events (>=1.1.1, <=1.1.3), aldryn-faq (1.2.1) +4 more potentially affected by CVE-2026-54624 via django-cms (3.3.4)

django-cms PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - aldryn-events =1.1.1, =1.1.3 - aldryn-faq 1.2.1 - aldryn-people 1.2.1 - cmsplugin-articles-ai 0.1.1 - cmsplugin-carousel-ai 0.0.3 -...

11x-wagtail-blog (>=0.0.0, <=0.2.0), coderedcms (>=3.0.0, <=3.0.4) +37 more potentially affected by CVE-2026-55468 via wagtail (5.2.8)

wagtail PYPI version 5.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - 11x-wagtail-blog =0.0.0, =3.0.0, =5.2.0, =2.0.0, =1.0.0.dev0, =0.4.0a0, =1.0.0.dev0, =3.1.0, =0.1.0, =0.4.0, =0.1.0, =4.0.0b2, =4.0.0 and more...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +928 more potentially affected by CVE-2026-72818 via nltk (>=3.0.0, <=3.10.0)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-72818 Source advisory: OSV:PYSEC-2026-3870...

aldryn-events (2.0.0), aldryn-people (2.0.0) +7 more potentially affected by CVE-2026-63003 via django-cms (3.5.4)

django-cms PYPI version 3.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - aldryn-events 2.0.0 - aldryn-people 2.0.0 - aldryn-reversion =1.0.7, =0.2.0, =0.6.2, =0.3.0, =0.3.5 - emencia-contact-form 0.3.0 Source cves...

airflow-indexima (>=1.0.1, <=2.2.1), arcli (>=0.1.0, <=0.1.1) +69 more potentially affected by CVE-2026-76217 via gitpython (2.1.15)

gitpython PYPI version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - airflow-indexima =1.0.1, =0.1.0, =0.3.0rc1, =0.1.0, =0.7.0, =0.2.0, =0.11.0, =0.1.0, =0.6.0, =0.3.0, =2.0.0, =2019.2.3rc0, =2021.7.0 and more...

agilerl (>=0.1.6, <=2.0.6), aihandler (>=1.8.15, <=1.10.2) +8 more potentially affected by CVE-2026-69112 via accelerate (0.18.0)

accelerate PYPI version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - agilerl =0.1.6, =1.8.15, =1.8.17, =1.8.14, =0.0.1rc2, =0.0.1rc4 - open-gpts 0.0.1rc1 - pytorch-accelerated 0.1.45 Source cves: CVE-2026-691...

textrpp-py (0.1.0) potentially affected by CVE-2026-69112 via accelerate (0.26.0)

accelerate PYPI version 0.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - textrpp-py 0.1.0 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

imagen-pytorch (>=0.21.0, <=0.22.10), pytorch-accelerated (>=0.1.29, <=0.1.40) +1 more potentially affected by CVE-2026-69112 via accelerate (0.10.0)

accelerate PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - imagen-pytorch =0.21.0, =0.1.29, =0.7.0, =0.7.1 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

bento-cli (>=0.1.0, <=0.1.1), walletlib (0.1.0) potentially affected by CVE-2026-76218 via gitpython (2.1.14)

gitpython PYPI version 2.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bento-cli =0.1.0, =0.1.1 - walletlib 0.1.0 Source cves: CVE-2026-76218 Source advisory: OSV:PYSEC-2026-3840...