mbq-tokens (0.0.1), twilio (>=6.4.2a1, <=6.5.0) potentially affected by CVE-2026-102267 via pyjwt (1.5.0)

pyjwt PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - mbq-tokens 0.0.1 - twilio =6.4.2a1, =6.5.0 Source cves: CVE-2026-102267 Source advisory: OSV:PYSEC-2026-4144...

aiohttp-ext-auth (>=0.1.1, <=0.1.2), ais-dom (>=0.76.5, <=0.91.5) +34 more potentially affected by CVE-2026-102268 via pyjwt (1.6.4)

pyjwt PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aiohttp-ext-auth =0.1.1, =0.76.5, =0.0.1, =0.0.1, =0.4.0, =1.0.0, =0.0.19, =0.5.0, =1.1.7, =0.31.0, =0.0.1, =0.0.2, =0.1.0 and more Source cves:...

360solutions-bc-mcp (0.5.7), acapy-agent (>=1.6.1rc0, <=1.7.0) +197 more potentially affected by CVE-2026-102272 via pyjwt (2.13.0)

pyjwt PYPI version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - 360solutions-bc-mcp 0.5.7 - acapy-agent =1.6.1rc0, =0.1.8, =0.0.116, =1.420.5, =26.6.0, =0.25.0, =0.57.0, =0.1.0, =0.1.0, =1.1.0, =3.8.0, =3.9.3 and...

mbq-tokens (0.0.1), twilio (>=6.4.2a1, <=6.5.0) potentially affected by CVE-2026-102268 via pyjwt (1.5.0)

pyjwt PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - mbq-tokens 0.0.1 - twilio =6.4.2a1, =6.5.0 Source cves: CVE-2026-102268 Source advisory: OSV:PYSEC-2026-4145...

agilicus (>=1.5.1, <=1.6.1), akeyra (>=0.0.1, <=0.1.2) +30 more potentially affected by CVE-2026-102269 via pyjwt (1.5.3)

pyjwt PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - agilicus =1.5.1, =0.0.1, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.7.0, =2.1.0, =1.10.0.1b0, =0.4.8,...

airavata-custos-portal (>=0.0.1, <=0.0.6), airavata-custos-portal-sdk (0.0.1) +1 more potentially affected by CVE-2026-102269 via pyjwt (0.4.3)

pyjwt PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - airavata-custos-portal =0.0.1, =1.2.0, =1.3.2 Source cves: CVE-2026-102269 Source advisory: OSV:PYSEC-2026-4147...

django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-101917 via pyjwt (0.4.1)

pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-101917 Source advisory: OSV:PYSEC-2026-4140...

django-globus-portal-framework (>=0.3.23, <=0.3.24), unicef-security (0.7.0) potentially affected by CVE-2026-57177 via social-auth-core (4.0.2)

social-auth-core PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - django-globus-portal-framework =0.3.23, =0.3.24 - unicef-security 0.7.0 Source cves: CVE-2026-57177 Source advisory:...

social-auth-liu (0.0.1) potentially affected by CVE-2026-57177 via social-auth-core (1.2.0)

social-auth-core PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - social-auth-liu 0.0.1 Source cves: CVE-2026-57177 Source advisory: OSV:PYSEC-2026-4169...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57177 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57177 Source advisory: OSV:PYSEC-2026-4169...

h2 (>=1.1.0, <=3.0.0), mitmproxy (>=0.18.2, <=0.18.3) +3 more potentially affected by CVE-2026-59980 via hpack (2.3.0)

hpack PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - h2 =1.1.0, =0.18.2, =0.9.0, =2.6.1, =3.10.2rc3 Source cves: CVE-2026-59980 Source advisory: OSV:PYSEC-2026-4053...

homeassistant-stubs (2022.4.0b4), pytest-homeassistant-custom-component (0.8.4) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.4.0b4)

homeassistant PYPI version 2022.4.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.0b4 - pytest-homeassistant-custom-component 0.8.4 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2022.5.0b1) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.5.0b1)

homeassistant PYPI version 2022.5.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.5.0b1 Source cves: CVE-2025-62172, CVE-2026-91130 Source advisory: OSV:PYSEC-2026-4052...

homeassistant-stubs (2022.9.2), mqtt-hass-base (4.0.8) +1 more potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.9.2)

homeassistant PYPI version 2022.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.2 - mqtt-hass-base 4.0.8 - pytest-homeassistant-custom-component 0.11.21 Source cves: CVE-2025-62172,...

homeassistant-stubs (2022.11.0b2), pytest-homeassistant-custom-component (0.12.13) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.11.0b2)

homeassistant PYPI version 2022.11.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.11.0b2 - pytest-homeassistant-custom-component 0.12.13 Source cves: CVE-2025-62172, CVE-2026-91130 Sour...

pyautosrt (>=0.1.14, <=0.1.18), pybonsai (3.0.0) potentially affected by CVE-2026-92164 via streamlink (7.6.0)

streamlink PYPI version 7.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - pyautosrt =0.1.14, =0.1.18 - pybonsai 3.0.0 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

tg-autoposter (2.4.3) potentially affected by CVE-2026-92164 via streamlink (4.0.0)

streamlink PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.3 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

tg-autoposter (2.4.2) potentially affected by CVE-2026-92164 via streamlink (3.2.0)

streamlink PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.2 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

homeassistant-stubs (2021.6.0b1) potentially affected by CVE-2025-62172 +1 more via homeassistant (2021.6.0b1)

homeassistant PYPI version 2021.6.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.6.0b1 Source cves: CVE-2025-62172, CVE-2026-91130 Source advisory: OSV:PYSEC-2026-4052...

gridplayer (>=0.4.0, <=0.4.3), tg-autoposter (>=3.1.1, <=3.1.2) potentially affected by CVE-2026-92164 via streamlink (4.2.0)

streamlink PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.4.0, =3.1.1, =3.1.2 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...