hatch (1.9.7) potentially affected by CVE-2026-102930 via virtualenv (20.25.3)

virtualenv PYPI version 20.25.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hatch 1.9.7 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

cashu (0.15.1), cfg-analysis-tool-py (0.1.0) +7 more potentially affected by CVE-2026-102930 via virtualenv (20.25.0)

virtualenv PYPI version 20.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cashu 0.15.1 - cfg-analysis-tool-py 0.1.0 - edx-repo-tools 0.8.3 - mamba-toolbox =1.2.5.22, =0.2.1, =2.0.2, =0.1.15, =0.0.7, =0.0.8 Source...

c2cciutils (>=1.1.16, <=1.1.46), crl-devutils (>=1.3.1, <=1.4.0) potentially affected by CVE-2026-102930 via virtualenv (20.13.4)

virtualenv PYPI version 20.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.16, =1.3.1, =1.4.0 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

hatch (>=1.0.0rc2, <=1.0.0rc8) potentially affected by CVE-2026-102930 via virtualenv (20.11.2)

virtualenv PYPI version 20.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hatch =1.0.0rc2, =1.0.0rc8 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

buildpan (>=0.0.12, <=0.0.22), buildpan-cli (1.0.0) +6 more potentially affected by CVE-2026-102930 via virtualenv (20.6.0)

virtualenv PYPI version 20.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - buildpan =0.0.12, =0.1.0, =0.0.0, =0.0.1, =0.0.1, =3.0.2, =3.0.4 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

aieng-platform-onboard (>=0.5.0, <=0.7.5), autodocgenerator (>=0.5.1, <=1.6.6.8) +10 more potentially affected by CVE-2026-102930 via virtualenv (20.36.1)

virtualenv PYPI version 20.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aieng-platform-onboard =0.5.0, =0.5.1, =1.1.0.dev20260322010408, =0.0.0, =2.2.9, =0.5.0, =1.0.0, =1.0.0b2, =1.1.0, =1.2.0 - waldiez-runner...

pkg-15903 (>=0.1.10, <=0.1.18), py-package-updater (>=0.1.1, <=0.1.3) +3 more potentially affected by CVE-2026-102930 via virtualenv (20.29.3)

virtualenv PYPI version 20.29.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pkg-15903 =0.1.10, =0.1.1, =0.1.1, =1.0.9 - ten8t 0.0.22 - tidyfiles 0.6.3 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-40...

im-openai (>=0.8.3, <=0.9.2), pollboy (>=0.3.0, <=0.4.0) +1 more potentially affected by CVE-2026-102930 via virtualenv (20.24.3)

virtualenv PYPI version 20.24.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - im-openai =0.8.3, =0.3.0, =0.4.0 - pubsub-library 0.2.0 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

dreem (>=0.0.0, <=0.1.16), riot (>=0.17.2, <=0.18.0) potentially affected by CVE-2026-102930 via virtualenv (20.20.0)

virtualenv PYPI version 20.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dreem =0.0.0, =0.17.2, =0.18.0 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

hip-data-ml-utils (>=1.0.1, <=1.0.2), pytoil (0.35.0) potentially affected by CVE-2026-102930 via virtualenv (20.16.3)

virtualenv PYPI version 20.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hip-data-ml-utils =1.0.1, =1.0.2 - pytoil 0.35.0 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

MAL-2026-16276 Malicious code in @lekzo/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5caafea4a5656343feb4b52bf0007c98e6ed65a41ad22c79f24c0f1c48566f package.json declares the libsignal dependency as github:canove/libsignal-node — a bare GitHub owner/repo reference with no commit SHA, tag, or semve...

boj2md (>=0.0.1, <=0.0.2), desktopscoreviewer (>=1.0.2, <=1.0.3) +3 more potentially affected by CVE-2026-86000 via soupsieve (1.9.1)

soupsieve PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - boj2md =0.0.1, =1.0.2, =0.2.0, =1.3.7, =1.4.4 - subtidal 1.0.0 Source cves: CVE-2026-86000 Source advisory: OSV:GHSA-GJV8-XP57-G29C...

basketball-reference-scraper (>=1.0.1, <=1.0.31), bsdownloader (>=0.2.0, <=0.2.1) +21 more potentially affected by CVE-2026-85999 via soupsieve (1.9.5)

soupsieve PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - basketball-reference-scraper =1.0.1, =0.2.0, =0.0.31, =0.1.0, =0.4.0, =0.1.2.5, =3.1.7, =2.3.0, =0.1.1, =0.0.1, =0.0.2, =0.0.3 and more Source...

ca.uhn.hapi.fhir:org.hl7.fhir.report (1.0.0) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (1.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.report 1.0.0 Source cves: CVE-2026-81876 Source...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.1.16), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.1.16) +1 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.6)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.1.16 -...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.1.27), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.1.27) +1 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.14)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.1.27 -...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (>=1.1.41, <=1.1.42), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (>=1.1.41, <=1.1.42) +1 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.22)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.1.22 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher =1.1.41, =1.1.41, =1.1.41, =1.1....

org.hl7.fhir.publisher:org.hl7.fhir.publisher (>=1.1.124, <=1.1.125), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (>=1.1.124, <=1.1.125) +1 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.50)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.50 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher =1.1.124, =1.1.124, =1.1.124,...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.2.41), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.2.41) +1 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.105)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.105 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.2.41 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (6.4.0), ca.uhn.hapi.fhir:hapi-fhir-cli-app (6.4.0) +18 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.881)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.881 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 6.4.0 - ca.uhn.hapi.fhir:hapi-fhir-cli-app...