pext (0.22.0) potentially affected by unknown CVE via dulwich (0.19.9)

dulwich PYPI version 0.19.9 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - pext 0.22.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

aiidalab (>=21.7.1, <=22.2.0), alibabacloud-ros-iacer (0.0.16) +40 more potentially affected by unknown CVE via dulwich (0.20.50)

dulwich PYPI version 0.20.50 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - aiidalab =21.7.1, =0.1.0, =1.1.2, =0.4.0, =0.15.0, =7.2.0, =2.0.0, =0.3.0, =0.30.22, =0.1.0, =0.3.0, =0.14.0 and more Source cves: unknown CVE...

aiidalab (>=24.7.0, <=26.9.0), aiidalab-dlpoly (>=0.1.0, <=0.2.0) +49 more potentially affected by unknown CVE via dulwich (0.25.2)

dulwich PYPI version 0.25.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - aiidalab =24.7.0, =0.1.0, =0.1.0, =1.3.4, =0.5.1, =0.3.0, =0.1.0, =3.1.0, =3.56.0, =0.0.10.dev4, =0.1.1 and more Source cves: unknown CVE Source...

5gasp-cli (>=0.1.0, <=0.4.0), aia-read-svc (>=0.5.1, <=0.6.2) +385 more potentially affected by unknown CVE via dulwich (0.21.7)

dulwich PYPI version 0.21.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - 5gasp-cli =0.1.0, =0.5.1, =2023.2.21, =0.2.0rc3, =0.1.0, =0.1.1, =0.6.0.68, =0.0.1, =0.1.0rc7, =0.1.0, =1.2.2, =1.2.0, =1.2.2 and more Source cve...

CVE-2026-103956

Loom for AWS versions before 1.6.1 are vulnerable to a critical flaw due to missing authentication for a critical function within the authentication dependency. In deployments where no identity provider is configured, remote actors can exploit this via any request to the application API to obtain...

CVE-2026-103956 Missing authentication for critical function in Loom for AWS

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

CVE-2026-103956 Missing authentication for critical function in Loom for AWS

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

5gasp-cli (>=0.1.0, <=0.4.0), aia-read-svc (>=0.5.1, <=0.6.2) +385 more potentially affected by unknown CVE via dulwich (0.21.7)

dulwich PYPI version 0.21.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - 5gasp-cli =0.1.0, =0.5.1, =2023.2.21, =0.2.0rc3, =0.1.0, =0.1.1, =0.6.0.68, =0.0.1, =0.1.0rc7, =0.1.0, =1.2.2, =1.2.0, =1.2.2 and more Source cve...

errbot (6.1.9) potentially affected by unknown CVE via dulwich (0.20.31)

dulwich PYPI version 0.20.31 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - errbot 6.1.9 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

pext (>=0.24.1, <=0.27.0) potentially affected by unknown CVE via dulwich (0.19.13)

dulwich PYPI version 0.19.13 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - pext =0.24.1, =0.27.0 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

pext (0.22.0) potentially affected by unknown CVE via dulwich (0.19.9)

dulwich PYPI version 0.19.9 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - pext 0.22.0 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

album (>=0.12.0, <=0.12.2), album-distributed (>=0.1.0, <=0.2.1) +30 more potentially affected by unknown CVE via dulwich (0.24.10)

dulwich PYPI version 0.24.10 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - album =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.1.0, =2023.12.1, =0.5.1, =0.1.0a1, =4.0.0, =0.3.1, =2024.11.2, =2025.2.2 and more Sour...

kingarthur (>=0.2.2rc1, <=0.2.2rc2) potentially affected by unknown CVE via dulwich (0.20.32)

dulwich PYPI version 0.20.32 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - kingarthur =0.2.2rc1, =0.2.2rc2 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

anji-common-addons (>=0.3.0, <=0.3.2), anji-core (>=0.8.3, <=0.8.11) +9 more potentially affected by unknown CVE via dulwich (>=1.0.0, <=1.2.6)

dulwich PYPI version =1.0.0, =0.3.0, =0.8.3, =1.10.0, =0.3.1, =5.30.0, =5.30.0, =0.1.9, =0.2.1 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DULWICH-20416729...

prowler (>=5.9.0, <=5.29.3), prowler-cloud (>=5.9.0, <=5.29.2) potentially affected by unknown CVE via dulwich (0.23.0)

dulwich PYPI version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - prowler =5.9.0, =5.9.0, =5.29.2 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

aiidalab (>=22.6.0, <=26.9.0), aiidalab-dlpoly (>=0.1.0, <=0.2.0) +114 more potentially affected by unknown CVE via dulwich (>=0.23.1, <=1.2.6)

dulwich PYPI version =0.23.1, =22.6.0, =0.1.0, =0.1.0, =1.3.4, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.3.0, =0.8.3, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5FQC-MRG8-W798...

aiidalab (>=22.6.0, <=26.9.0), aiidalab-dlpoly (>=0.1.0, <=0.2.0) +114 more potentially affected by unknown CVE via dulwich (>=0.23.1, <=1.2.6)

dulwich PYPI version =0.23.1, =22.6.0, =0.1.0, =0.1.0, =1.3.4, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.3.0, =0.8.3, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: GHSA-5FQC-MRG8-W798...

@0xdeepak/wallets (0.0.2), @10xsai/cloudflare-router-nx-plugin (1.0.0) +1168 more potentially affected by CVE-2026-104853 via nx (>=13.10.0, <=22.7.9)

nx NPM version =13.10.0, =1.2.1, =2.0.0-beta.1, =2.0.0-beta.1, =2.0.0-beta.1, =2.0.0-beta.1, =2.2.1, =0.0.1, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2026-104853 Source advisory: SNYK:JS-NX-20417216...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1332 more potentially affected by CVE-2026-94543 via next (>=15.0.0, <=15.5.25)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-94543 Source advisory: SNYK:JS-NEXT-20569641...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +6583 more potentially affected by CVE-2026-61374 via org.apache.thrift:libthrift (>=0.6.1, <=0.24.0)

org.apache.thrift:libthrift MAVEN version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-de...