dataverk (0.2.13) potentially affected by CVE-2026-23528 via distributed (2.5.1)

distributed PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataverk 0.2.13 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

autogluon (>=0.0.5, <=0.0.7b17042020) potentially affected by CVE-2026-23528 via distributed (2.6.0)

distributed PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - autogluon =0.0.5, =0.0.7b17042020 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

aporia-importer (1.0.6), cg-simulator (>=0.1.0, <=0.1.1) +14 more potentially affected by CVE-2026-23528 via distributed (2021.12.0)

distributed PYPI version 2021.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - aporia-importer 1.0.6 - cg-simulator =0.1.0, =0.1.3, =2.0.0, =0.1.6, =0.2.1, =0.1.4, =0.0.1, =0.2.0, =0.1.0, =0.1.3a0, =22.1.0b1,...

elfi (0.3.1) potentially affected by CVE-2026-23528 via distributed (1.14.3)

distributed PYPI version 1.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - elfi 0.3.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

pysmfish (>=0.0.0, <=0.0.5), tsfresh (0.11.0) potentially affected by CVE-2026-23528 via distributed (1.18.3)

distributed PYPI version 1.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pysmfish =0.0.0, =0.0.5 - tsfresh 0.11.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

azuremlftk (>=0.1.19008.12a1, <=0.1.19032.1) potentially affected by CVE-2026-23528 via distributed (1.23.1)

distributed PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azuremlftk =0.1.19008.12a1, =0.1.19032.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

pybnf (>=0.3.1, <=1.1.6) potentially affected by CVE-2026-23528 via distributed (1.24.0)

distributed PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pybnf =0.3.1, =1.1.6 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

libertem (>=0.2.0, <=0.2.2) potentially affected by CVE-2026-23528 via distributed (1.27.1)

distributed PYPI version 1.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - libertem =0.2.0, =0.2.2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

complai-test (0.1.0), sphinxcontrib-jupyter (>=0.5.4, <=0.5.5) potentially affected by CVE-2026-23528 via distributed (2.5.2)

distributed PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - complai-test 0.1.0 - sphinxcontrib-jupyter =0.5.4, =0.5.5 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

prefect (>=0.6.0, <=0.9.3), prefect-ds (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2026-23528 via distributed (2.16.0)

distributed PYPI version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - prefect =0.6.0, =0.1.0, =0.0.2, =0.0.22.dev6 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

hypycube (0.0.0a0), prefect (>=0.9.5, <=0.12.2) +2 more potentially affected by CVE-2026-23528 via distributed (2.20.0)

distributed PYPI version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - hypycube 0.0.0a0 - prefect =0.9.5, =0.6.5, =0.0.22.dev7, =0.0.24.dev0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

azureml-automl-dnn-nlp (>=1.37.0, <=1.46.1.post1), azureml-automl-dnn-vision (>=1.37.0, <=1.46.1) +31 more potentially affected by CVE-2026-23528 via distributed (2.30.1)

distributed PYPI version 2.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azureml-automl-dnn-nlp =1.37.0, =1.37.0, =1.34.0, =1.37.0, =1.37.0, =0.1.0, =0.9.22.post0, =0.1.0, =0.1.0, =0.1.0a1, =0.0.5, =0.0.5, =0.1...

dask-cuda (>=0.19.0a210422, <=0.19.0), llyr (0.1.0) potentially affected by CVE-2026-23528 via distributed (2021.4.0)

distributed PYPI version 2021.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =0.19.0a210422, =0.19.0 - llyr 0.1.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

azureml-automl-dnn-nlp (>=1.47.0, <=1.48.0.post1), azureml-automl-dnn-vision (>=1.47.0, <=1.48.0) +4 more potentially affected by CVE-2026-23528 via distributed (2021.6.0)

distributed PYPI version 2021.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azureml-automl-dnn-nlp =1.47.0, =1.47.0, =1.47.0, =1.47.0, =1.47.0.post1, =0.20.0, =0.21.1 Source cves: CVE-2026-23528 Source advisory:...

dask-cuda (>=21.8.0a210728, <=21.10.0a210728), lddl (0.1.0) potentially affected by CVE-2026-23528 via distributed (2021.7.1)

distributed PYPI version 2021.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =21.8.0a210728, =21.10.0a210728 - lddl 0.1.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

cimla (>=0.0.8, <=0.0.18), dask-sql (2021.11.0) +3 more potentially affected by CVE-2026-23528 via distributed (2021.10.0)

distributed PYPI version 2021.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cimla =0.0.8, =21.11.0b1, =0.1.0, =0.3.7, =0.3.9 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

subaligner (>=0.0.6rc1, <=0.3.6) potentially affected by CVE-2026-23528 via distributed (1.13.0)

distributed PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - subaligner =0.0.6rc1, =0.3.6 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dataprep (>=0.2.10a0, <=0.2.13.post2) potentially affected by CVE-2026-23528 via distributed (2.10.0)

distributed PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataprep =0.2.10a0, =0.2.13.post2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

noah-vega (>=1.2.0, <=1.7.1) potentially affected by CVE-2026-23528 via distributed (2.18.0)

distributed PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - noah-vega =1.2.0, =1.7.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2026-23528 via distributed (2.25.0)

distributed PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...