apoplast (>=1.0.3, <=3.0.7), ark-server-certic (>=0.0.12, <=0.0.14) +68 more potentially affected by CVE-2026-85078 via sanic (23.12.2)

sanic PYPI version 23.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - apoplast =1.0.3, =0.0.12, =1.0.0, =0.1.1, =1.0.0, =1.0.1, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =8.0.0 - foam-rodeo 0.0.1 and more Source...

hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87017 via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87017 Source advisory: OSV:PYSEC-2026-4125...

awessome (>=0.0.1, <=0.0.14), bani (>=0.1.0, <=0.7.2) +3 more potentially affected by CVE-2026-68770 via sentence-transformers (0.3.8)

sentence-transformers PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - awessome =0.0.1, =0.1.0, =0.0.2, =0.0.9 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

aiology (0.0.4), argentic (>=0.6.0, <=0.8.20) +64 more potentially affected by CVE-2026-68770 via sentence-transformers (4.1.0)

sentence-transformers PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - aiology 0.0.4 - argentic =0.6.0, =0.1.5, =0.2.0, =0.5.9, =0.1.0, =0.1.1, =0.1.0a1, =0.8.0, =0.5.5, =0.2.0, =0.3.0,...

framework3 (>=1.0.10, <=1.2.1), linden (>=0.1.0, <=0.3.0) +4 more potentially affected by CVE-2026-68770 via sentence-transformers (4.0.2)

sentence-transformers PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - framework3 =1.0.10, =0.1.0, =0.1.0, =1.2.0, =22.7.0, =0.0.2, =1.0.2rc0 Source cves: CVE-2026-68770 Source advisory:...

django-automated-logging (0.0.1a0) potentially affected by CVE-2026-15307 via django (1.10.0rc1)

django PYPI version 1.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-automated-logging 0.0.1a0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

searchstax-simulator-crawler (>=0.0.1a22, <=0.0.1a23) potentially affected by CVE-2026-15307 via django (1.8.13)

django PYPI version 1.8.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - searchstax-simulator-crawler =0.0.1a22, =0.0.1a23 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

auth-token-django (>=0.0.1, <=0.0.5), directory-constants (23.1.0) +7 more potentially affected by CVE-2026-15307 via django (4.2.1)

django PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - auth-token-django =0.0.1, =2.0.0rc15, =0.0.18, =0.2.1, =1.2.8 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

docker-compose-control-center (>=3.1.1, <=3.1.2) potentially affected by CVE-2026-15307 via django (2.1.11)

django PYPI version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =3.1.1, =3.1.2 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

django-magnificent-messages (>=0.1.2, <=0.1.4), fiduswriter (3.7.0rc4) +5 more potentially affected by CVE-2026-15307 via django (2.2.4)

django PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-magnificent-messages =0.1.2, =0.0.0, =0.9.6, =0.9.16, =0.9.17 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

edubotics-core (>=0.1.3, <=0.1.7) potentially affected by CVE-2026-56104 via chainlit (1.2.0)

chainlit PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - edubotics-core =0.1.3, =0.1.7 Source cves: CVE-2026-56104 Source advisory: OSV:PYSEC-2026-4028...

vimgpt (0.1.2) potentially affected by CVE-2026-12796 via litellm (0.1.618)

litellm PYPI version 0.1.618 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - vimgpt 0.1.2 Source cves: CVE-2026-12796 Source advisory: OSV:PYSEC-2026-4076...

aiconsole (>=0.2.0, <=0.2.7), fastrepl (>=0.0.19, <=0.0.20) potentially affected by CVE-2026-12796 via litellm (0.6.6)

litellm PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - aiconsole =0.2.0, =0.0.19, =0.0.20 Source cves: CVE-2026-12796 Source advisory: OSV:PYSEC-2026-4076...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2026-12773 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2026-12773 Source advisory: OSV:PYSEC-2026-4067...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2026-12795 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2026-12795 Source advisory: OSV:PYSEC-2026-4071...

langstream (0.1.8) potentially affected by CVE-2026-12795 via litellm (0.1.450)

litellm PYPI version 0.1.450 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - langstream 0.1.8 Source cves: CVE-2026-12795 Source advisory: OSV:PYSEC-2026-4071...

0xpwn (0.1.1), a2a-acl (>=0.0.14, <=0.1.1) +757 more potentially affected by CVE-2026-12773 via litellm (>=1.0.0, <=1.83.14)

litellm PYPI version =1.0.0, =0.0.14, =0.0.14, =0.3.5, =0.7.3, =1.0.1, =1.0.2, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.2.1.10062025 - agent-memory-server 0.15.0 - agent-opt 0.0.1 and more Source cves: CVE-2026-12773 Source advisory: OSV:PYSEC-2026-4067...

open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-12795 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-12795 Source advisory: OSV:PYSEC-2026-4071...

promptulate (1.9.0) potentially affected by CVE-2026-12798 via litellm (0.12.12)

litellm PYPI version 0.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - promptulate 1.9.0 Source cves: CVE-2026-12798 Source advisory: OSV:PYSEC-2026-4069...

open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-12798 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-12798 Source advisory: OSV:PYSEC-2026-4069...