congo-lab (>=0.7.1, <=0.8.0), ezbeq (>=1.0.0b17, <=2.2.1) +8 more potentially affected by CVE-2026-77528 via autobahn (23.6.2)

autobahn PYPI version 23.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - congo-lab =0.7.1, =1.0.0b17, =0.2.0, =7.0.0, =1.2.4, =1.0.0, =3.0.0 - yangsuite-devices 2.8.7 Source cves: CVE-2026-77528 Source advisory:...

opentera (1.3.1) potentially affected by CVE-2026-77528 via autobahn (25.10.1)

autobahn PYPI version 25.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - opentera 1.3.1 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

arthexis (>=0.1.3, <=0.11.0), csg-pywaapi (>=0.1.2, <=1.1.20) +13 more potentially affected by CVE-2026-77528 via autobahn (24.4.2)

autobahn PYPI version 24.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - arthexis =0.1.3, =0.1.2, =0.1.5, =2.3.0a0, =2.0.1, =1.0.0, =1.1.0, =7.5.0, =1.0.0, =0.2.7, =0.0.5, =1.3.22, =1.3.32 - waapi-client 0.8.1 Source...

compas-cloud (0.1.0), nucypher (>=1.2.0b2, <=2.0.0b3) potentially affected by CVE-2026-77528 via autobahn (19.11.1)

autobahn PYPI version 19.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - compas-cloud 0.1.0 - nucypher =1.2.0b2, =2.0.0b3 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2026-86049 via jupyter-server (0.2.1)

jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

aio-net-events (0.2.0), aio-usb-hotplug (>=2.0.0, <=3.0.1) +11 more potentially affected by CVE-2026-63374 via anyio (2.2.0)

anyio PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aio-net-events 0.2.0 - aio-usb-hotplug =2.0.0, =0.9.1, =0.6.0, =0.1.0, =1.6.3, =0.0.1, =3.0.0, =0.1.0, =0.2.0 Source cves: CVE-2026-63374 Source...

5mghost-rover (>=0.0.1, <=0.0.3), aaaai (>=0.1.3, <=0.3.0) +856 more potentially affected by CVE-2026-63374 via anyio (>=4.0.0rc1, <=4.14.1)

anyio PYPI version =4.0.0rc1, =0.0.1, =0.1.3, =0.6.0, =0.0.32, =0.0.1, =4.8.2, =0.1.3, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.1.31, =0.1.0, =0.0.2, =0.4.0rc1, =0.7.1 and more Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

aiojarm (>=0.2.0, <=0.2.1), aiometer (>=0.1.0, <=0.2.1) +11 more potentially affected by CVE-2026-63374 via anyio (1.4.0)

anyio PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aiojarm =0.2.0, =0.1.0, =0.2.0, =0.2.0rc1, =0.1.3, =0.0.15, =0.0.2, =0.1.3, =0.4.1, =0.6.1 - roboto-telegram 0.3.0 - runnel 0.1.0a1 - sitemaps 0.1.0...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) +2 more potentially affected by CVE-2026-86049 via jupyter-server (1.18.1)

jupyter-server PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

acdh-spacytei (>=0.0.1, <=0.0.5), ircrobots (0.3.6) potentially affected by CVE-2026-64847 via anyio (1.3.1)

anyio PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - acdh-spacytei =0.0.1, =0.0.5 - ircrobots 0.3.6 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

ircrobots (>=0.3.7, <=0.7.2), smtpproto (1.0.0) potentially affected by CVE-2026-63374 via anyio (2.0.2)

anyio PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - ircrobots =0.3.7, =0.7.2 - smtpproto 1.0.0 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

aindy-runtime (>=1.5.0, <=1.11.0), amarcord (>=1.5.0, <=1.5.2) +23 more potentially affected by CVE-2026-63349 via anyio (>=4.14.0, <=4.14.1)

anyio PYPI version =4.14.0, =1.5.0, =1.5.0, =0.0.3, =1.8.0, =0.10.2, =0.1.4, =2.19.0, =1.3.1, =0.1.1, =0.1.0, =0.0.1a1, =1.0.0a1, =0.0.1a1, =1.0.0 and more Source cves: CVE-2026-63349 Source advisory: OSV:PYSEC-2026-4023...

aiojarm (>=0.2.0, <=0.2.1), aiometer (>=0.1.0, <=0.2.1) +11 more potentially affected by CVE-2026-64847 via anyio (1.4.0)

anyio PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aiojarm =0.2.0, =0.1.0, =0.2.0, =0.2.0rc1, =0.1.3, =0.0.15, =0.0.2, =0.1.3, =0.4.1, =0.6.1 - roboto-telegram 0.3.0 - runnel 0.1.0a1 - sitemaps 0.1.0...

langstream (0.1.8) potentially affected by CVE-2026-59823 via litellm (0.1.450)

litellm PYPI version 0.1.450 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - langstream 0.1.8 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2026-59823 via litellm (0.1.7713)

litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2026-59823 Sourc...

open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-59823 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

apartment-browser (0.0.1), docsvault (>=0.1.2, <=0.1.4) +12 more potentially affected by CVE-2026-85078 via sanic (20.9.1)

sanic PYPI version 20.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - apartment-browser 0.0.1 - docsvault =0.1.2, =4.1.0, =0.2.2, =0.1.2, =2.8.7, =0.1.1, =0.0.4, =0.0.6 - sanic-oauthlib 0.2.3 - zillionare-omega 0.6.0...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +10 more potentially affected by CVE-2026-85078 via sanic (23.6.0)

sanic PYPI version 23.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - circe-certic =0.0.45, =0.0.15, =0.5.0, =0.0.1, =0.0.1, =0.3.5, =0.7.1 - text2tac...

discodo (2.3.14) potentially affected by CVE-2026-85078 via sanic (21.3.2)

sanic PYPI version 21.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - discodo 2.3.14 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

systembridgebackend (>=3.0.3.dev1, <=3.3.0.dev4) potentially affected by CVE-2026-85078 via sanic (22.3.2)

sanic PYPI version 22.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - systembridgebackend =3.0.3.dev1, =3.3.0.dev4 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...