arctic-ai (0.1.0), devito (4.8.0) +1 more potentially affected by CVE-2026-23528 via distributed (2023.2.1)

distributed PYPI version 2023.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - arctic-ai 0.1.0 - devito 4.8.0 - nwp-consumer =0.0.1, =0.1.23 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-cuda (>=22.8.0a220803, <=22.10.0a220808), devito (>=4.7.0, <=4.7.1) +3 more potentially affected by CVE-2026-23528 via distributed (2022.7.1)

distributed PYPI version 2022.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =22.8.0a220803, =4.7.0, =0.55.0, =1.13.0, =0.0.15, =0.6.11 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

devito (4.2.3) potentially affected by CVE-2026-23528 via distributed (2.22.0)

distributed PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito 4.2.3 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

cdp-backend (>=3.0.0.dev4, <=3.0.0.dev5), devito (4.3.0) +4 more potentially affected by CVE-2026-23528 via distributed (2021.1.1)

distributed PYPI version 2021.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cdp-backend =3.0.0.dev4, =0.1.0, =9.1.2, =0.0.1, =0.0.4 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

devito (4.4.0), flowi (0.3.7) potentially affected by CVE-2026-23528 via distributed (2021.4.1)

distributed PYPI version 2021.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito 4.4.0 - flowi 0.3.7 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

devito (4.5.0), divina (>=2021.8.2.dev2, <=2021.9.5) +2 more potentially affected by CVE-2026-23528 via distributed (2021.7.2)

distributed PYPI version 2021.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito 4.5.0 - divina =2021.8.2.dev2, =0.0.3, =0.0.6.dev0 - whakaari 0.0.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-...

devito (>=4.6.1, <=4.6.2) potentially affected by CVE-2026-23528 via distributed (2022.2.0)

distributed PYPI version 2022.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito =4.6.1, =4.6.2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-cuda (>=23.4.0a230405, <=23.8.0a230605), dask-sql (2023.4.0) +5 more potentially affected by CVE-2026-23528 via distributed (2023.3.2.1)

distributed PYPI version 2023.3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =23.4.0a230405, =0.0.1, =3.0.40, =3.1.3 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

devito (4.2.3) potentially affected by CVE-2026-23528 via distributed (2.22.0)

distributed PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito 4.2.3 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

devito (4.5.0), divina (>=2021.8.2.dev2, <=2021.9.5) +2 more potentially affected by CVE-2026-23528 via distributed (2021.7.2)

distributed PYPI version 2021.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito 4.5.0 - divina =2021.8.2.dev2, =0.0.3, =0.0.6.dev0 - whakaari 0.0.1 Source cves: CVE-2026-23528 Source advisory:...

dask-cuda (>=21.10.0a210924, <=21.12.0a210927), devito (4.6.0) +1 more potentially affected by CVE-2026-23528 via distributed (2021.9.1)

distributed PYPI version 2021.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =21.10.0a210924, =0.0.1, =0.0.48 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...