dask-sql (2022.10.1), geoapps (>=0.9.0.post1, <=0.9.2) +2 more potentially affected by CVE-2026-23528 via distributed (2022.10.0)

distributed PYPI version 2022.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-sql 2022.10.1 - geoapps =0.9.0.post1, =0.3.0, =0.3.3 - peak-finder-app 0.1.0a1 Source cves: CVE-2026-23528 Source advisory:...

coiled-runtime (>=0.2.0, <=0.2.1), dask-cuda (>=22.12.0a221208, <=23.2.0a221212) +3 more potentially affected by CVE-2026-23528 via distributed (2022.11.1)

distributed PYPI version 2022.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - coiled-runtime =0.2.0, =22.12.0a221208, =1.0.0, =0.1.7, =0.4.36 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

aces-apps (1.5.4), atflagger (>=0.2.0, <=0.4.6) +36 more potentially affected by CVE-2026-23528 via distributed (2022.12.1)

distributed PYPI version 2022.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - aces-apps 1.5.4 - atflagger =0.2.0, =0.1.0, =1.3.0, =0.0.2.dev0, =0.4.1, =0.0.3, =0.5.0, =2022.12.0, =2022.12.1 and more Source cves:...

autogluon (>=0.0.13b20200721, <=0.1.1b20210419), autogluon-core (>=0.0.15b20201014, <=0.0.15b20201023) +14 more potentially affected by CVE-2026-23528 via distributed (2023.5.0)

distributed PYPI version 2023.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - autogluon =0.0.13b20200721, =0.0.15b20201014, =0.0.15b20201024, =0.9.0, =0.9.0, =0.0.4.5, =1.0.0, =0.2.7, =0.3.0, =0.1.0, =2021.4.28rc1...

flowi (0.5.13), mosaiks (>=0.0.0, <=1.0.2) +1 more potentially affected by CVE-2026-23528 via distributed (2023.7.0)

distributed PYPI version 2023.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - flowi 0.5.13 - mosaiks =0.0.0, =0.98.0, =0.101.2 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

dask-cuda (>=23.8.0a230803, <=23.10.0a230822), dask-sql (2023.8.0) +2 more potentially affected by CVE-2026-23528 via distributed (2023.7.1)

distributed PYPI version 2023.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =23.8.0a230803, =0.7.0, =3.2.2, =3.5.6 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

dedl-stack-client (>=2024.4.1, <=2025.5.1), nima (>=0.7.2, <=0.7.3) potentially affected by CVE-2026-23528 via distributed (2023.8.0)

distributed PYPI version 2023.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dedl-stack-client =2024.4.1, =0.7.2, =0.7.3 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

esi-acme (2023.12.0), nwp-consumer (>=0.1.26, <=0.1.29) potentially affected by CVE-2026-23528 via distributed (2023.12.0)

distributed PYPI version 2023.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme 2023.12.0 - nwp-consumer =0.1.26, =0.1.29 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

dask-sql (2024.1.0rc0), fvgp (>=4.1.2, <=4.2.9) +5 more potentially affected by CVE-2026-23528 via distributed (2024.1.0)

distributed PYPI version 2024.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-sql 2024.1.0rc0 - fvgp =4.1.2, =8.0.3, =0.1.4, =0.2.0a6, =0.1.2, =0.1.3 Source cves: CVE-2026-23528 Source advisory:...

nima (>=0.9.0, <=0.9.1) potentially affected by CVE-2026-23528 via distributed (2024.3.1)

distributed PYPI version 2024.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - nima =0.9.0, =0.9.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

hgdl (>=2.1.6, <=2.1.7), nima (0.10.0) potentially affected by CVE-2026-23528 via distributed (2024.5.0)

distributed PYPI version 2024.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - hgdl =2.1.6, =2.1.7 - nima 0.10.0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

dask-cuda (24.6.0), rapids-dask-dependency (24.6.0) potentially affected by CVE-2026-23528 via distributed (2024.5.1)

distributed PYPI version 2024.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda 24.6.0 - rapids-dask-dependency 24.6.0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

leap-ec (0.8.2), neofox (>=1.2.1, <=1.2.3) +6 more potentially affected by CVE-2026-23528 via distributed (2024.6.2)

distributed PYPI version 2024.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - leap-ec 0.8.2 - neofox =1.2.1, =0.10.1, =0.5.27, =0.2.0b3, =0.1.0b4, =0.2.0b1, =0.0.3, =0.1.0 Source cves: CVE-2026-23528 Source...

datacube (>=1.8.20, <=1.9.0), datacube-ows (>=1.8.41, <=1.8.43) +8 more potentially affected by CVE-2026-23528 via distributed (2024.10.0)

distributed PYPI version 2024.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - datacube =1.8.20, =1.8.41, =1.1.12, =0.0.0, =0.2.4, =0.1.0, =0.1.9, =1.0.0b0 Source cves: CVE-2026-23528 Source advisory:...

easy-vitessce (>=0.0.2, <=0.0.10) potentially affected by CVE-2026-23528 via distributed (2024.11.1)

distributed PYPI version 2024.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - easy-vitessce =0.0.2, =0.0.10 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

crl-datacube (>=0.1.22, <=0.1.140), cugraph-cu11 (24.12.0) +24 more potentially affected by CVE-2026-23528 via distributed (2024.11.2)

distributed PYPI version 2024.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - crl-datacube =0.1.22, =0.1.140 - cugraph-cu11 24.12.0 - cugraph-cu12 24.12.0 - cugraph-dgl-cu11 24.12.0 - cugraph-dgl-cu12 24.12.0 -...

cellxgene-schema (5.3.0), crl-datacube (0.1.56) potentially affected by CVE-2026-23528 via distributed (2024.12.0)

distributed PYPI version 2024.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cellxgene-schema 5.3.0 - crl-datacube 0.1.56 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

eodc (>=2025.5.1, <=2025.6.1), raster2stac (0.0.10) potentially affected by CVE-2026-23528 via distributed (2025.1.0)

distributed PYPI version 2025.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - eodc =2025.5.1, =2025.6.1 - raster2stac 0.0.10 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

cugraph-cu11 (25.6.0), cugraph-cu12 (25.6.0) +17 more potentially affected by CVE-2026-23528 via distributed (2025.5.0)

distributed PYPI version 2025.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cugraph-cu11 25.6.0 - cugraph-cu12 25.6.0 - cugraph-dgl-cu11 25.6.0 - cugraph-dgl-cu12 25.6.0 - cugraph-pyg-cu11 25.6.0 -...

cugraph-cu12 (25.12.2), cugraph-cu13 (25.12.2) +13 more potentially affected by CVE-2026-23528 via distributed (2025.9.2)

distributed PYPI version 2025.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cugraph-cu12 25.12.2 - cugraph-cu13 25.12.2 - cuopt-cu12 25.12.0 - cuopt-cu13 25.12.0 - cuopt-server-cu12 25.12.0 - cuxfilter-cu12...