gakp-pylib (>=0.2.7, <=0.9.3), khan-mongo (0.1.6) +1 more potentially affected by CVE-2026-96749 via pymongo (3.2.2)

pymongo PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - gakp-pylib =0.2.7, =1.3.0, =1.4.0 Source cves: CVE-2026-96749 Source advisory: OSV:GHSA-V4X9-3549-CRWV...

inmanta (2016.6.0) potentially affected by CVE-2026-96749 via pymongo (2.7.0)

pymongo PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - inmanta 2016.6.0 Source cves: CVE-2026-96749 Source advisory: OSV:GHSA-V4X9-3549-CRWV...

capreolus (>=0.1.0, <=0.1.5), ckanext-nhm (>=3.7.1, <=6.9.8) +19 more potentially affected by CVE-2026-96749 via pymongo (3.9.0)

pymongo PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - capreolus =0.1.0, =3.7.1, =3.0.2, =3.7.0, =0.2.0, =0.0.2, =0.0.2, =0.9.2rc1, =0.0.2, =0.1.2, =0.0.1, =0.0.8 and more Source cves: CVE-2026-96749...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.7) +1591 more potentially affected by CVE-2026-102275 via pyjwt (>=2.1.0, <=2.14.0)

pyjwt PYPI version =2.1.0, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =1.8.26, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =1.2.0, =1.5.2, =1.5.6 and more Source cves: CVE-2026-102275 Source advisory: GHSA-X33G-CR3X-6449...

aleph-alpha-inference (1.0.0), evoke-vllm (>=0.1.0, <=0.1.1) +6 more potentially affected by CVE-2026-105758 via vllm (>=0.24.0, <=0.29.0)

vllm PYPI version =0.24.0, =0.1.0, =2.9.0, =2.3.0, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-105758 Source advisory: GHSA-X6MC-67GF-CHW4...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +133 more potentially affected by CVE-2026-105755 via vllm (>=0.1.3, <=0.29.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2026-105755 Source advisory: OSV:GHSA-2PHQ-3PHC-84PX...

ai-stp-cli (>=0.0.23, <=0.0.33), pygpt-net (>=2.8.27, <=2.9.1) +1 more potentially affected by CVE-2026-104843 via uv (>=0.12.10, <=0.12.15)

uv PYPI version =0.12.10, =0.0.23, =2.8.27, =2.9.1 - uvenv 3.11.1 Source cves: CVE-2026-104843 Source advisory: GHSA-2CV4-CQWR-GWF7...

ai-stp-cli (>=0.0.23, <=0.0.33), pygpt-net (>=2.8.27, <=2.9.1) +1 more potentially affected by CVE-2026-104843 via uv (>=0.12.10, <=0.12.15)

uv PYPI version =0.12.10, =0.0.23, =2.8.27, =2.9.1 - uvenv 3.11.1 Source cves: CVE-2026-104843 Source advisory: OSV:GHSA-2CV4-CQWR-GWF7...

@0xsequence/codegenie (>=0.1.0, <=0.7.0), @2h2d/new (>=0.0.2, <=0.1.1-alpha.4) +993 more potentially affected by unknown CVE via smol-toml (>=1.1.2, <=1.8.0)

smol-toml NPM version =1.1.2, =0.1.0, =0.0.2, =0.1.0, =1.0.0, =0.1.0, =4.10.0, =0.1.3, =0.1.0-beta.1, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.4 and more Source cves: unknown CVE Source advisory: SNYK:JS-SMOLTOML-20537050...

bloomtechlib (0.0.1), cocktail-apikit (>=0.1.20, <=0.1.22) +30 more potentially affected by CVE-2026-88029 via pymongo (3.11.4)

pymongo PYPI version 3.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bloomtechlib 0.0.1 - cocktail-apikit =0.1.20, =0.1.8, =0.0.3, =1.0.0, =0.1.3, =0.1.0, =0.2.1, =1.0.1, =0.11.0, =0.0.23, =1.0.1, =1.0.0, =1.2.5 an...

ai4rag (>=0.8.0, <=0.10.4), askbase (>=1.0.0, <=1.0.2) +21 more potentially affected by CVE-2026-105746 via docling (>=2.86.0, <=2.130.0)

docling PYPI version =2.86.0, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =1.0.1 and more Source cves: CVE-2026-105746 Source advisory: SNYK:PYTHON-DOCLING-20537062...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index through malformed LLB op validation in the solver’s SourceOp and DiffOp handling. An attacker can crash buildkitd by submitting a crafted LLB definition with an input/dependency count mismatch. The...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-100721 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-100721 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +132 more potentially affected by CVE-2026-105753 via vllm (>=0.1.3, <=0.27.1)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =0.0.38 and more Source cves: CVE-2026-105753 Source advisory: OSV:PYSEC-2026-4197...

aleph-alpha-inference (1.0.0), evoke-vllm (>=0.1.0, <=0.1.1) +7 more potentially affected by CVE-2026-105760 via vllm (>=0.23.0, <=0.29.0)

vllm PYPI version =0.23.0, =0.1.0, =2.9.0, =2.2.2, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-105760 Source advisory: MEND:CVE-2026-105760...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-100723 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@adamwdennis/nestjs-typeorm-cursor-pagination (1.0.0), @ambak/nest-logger (>=1.0.11, <=1.1.0) +209 more potentially affected by CVE-2026-104852 via @graphql-tools/utils (>=12.0.0-alpha-20260805121238-f73ffd0c8126377e841d94b8bb2db97f34af4c41, <=12.0.0)

@graphql-tools/utils NPM version =12.0.0-alpha-20260805121238-f73ffd0c8126377e841d94b8bb2db97f34af4c41, =1.0.11, =0.0.1, =1.0.0, =0.0.6, =1.2.5, =2.0.0, =1.0.8, =1.0.0, =1.0.7, =0.0.1, =1.0.0, =0.0.73, =0.0.3, =0.0.44 and more Source cves: CVE-2026-104852 Source advisory: GHSA-7MX3-VVMW-HJMV...

create-graphene (>=0.0.24, <=0.0.30) potentially affected by CVE-2026-86597 via snowflake-sdk (3.1.0)

snowflake-sdk NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-sdk and may be impacted: - create-graphene =0.0.24, =0.0.30 Source cves: CVE-2026-86597 Source advisory: GHSA-QQJ6-54Q6-CXV6...

csv-to-snowflake (>=0.1.0, <=0.2.1), dbt (>=0.18.0rc1, <=0.19.0b1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.10)

snowflake-connector-python PYPI version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - csv-to-snowflake =0.1.0, =0.18.0rc1, =0.2.3, =0.3.0 Source cves: CVE-2026-86597 Source advisory:...