autogluon (>=0.3.2b20211216, <=0.5.3), autogluon-core (>=0.3.2b20211216, <=0.6.3b20230202) +19 more potentially affected by CVE-2026-23528 via distributed (2021.11.2)

distributed PYPI version 2021.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - autogluon =0.3.2b20211216, =0.3.2b20211216, =0.6.3b20230126, =0.4.3b20220616, =0.3.2b20211216, =0.3.2b20211216, =0.5.0b20220623,...

auto-ts (0.0.63), dask-cuda (>=22.2.0a220125, <=22.4.0a220201) +3 more potentially affected by CVE-2026-23528 via distributed (2022.1.0)

distributed PYPI version 2022.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - auto-ts 0.0.63 - dask-cuda =22.2.0a220125, =22.4.0a220201 - dask-sql 2022.1.0 - sgkit 0.5.0 - sphynxml 2.0.0 Source cves: CVE-2026-2352...

pp-role-mining (>=0.0.1, <=0.0.6) potentially affected by CVE-2026-23528 via distributed (1.21.8)

distributed PYPI version 1.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pp-role-mining =0.0.1, =0.0.6 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

pybnf (>=0.3.1, <=1.1.6) potentially affected by CVE-2026-23528 via distributed (1.24.0)

distributed PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pybnf =0.3.1, =1.1.6 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2026-23528 via distributed (2.25.0)

distributed PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

cimla (>=0.0.8, <=0.0.18), dask-sql (2021.11.0) +3 more potentially affected by CVE-2026-23528 via distributed (2021.10.0)

distributed PYPI version 2021.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cimla =0.0.8, =21.11.0b1, =0.1.0, =0.3.7, =0.3.9 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

devito (>=4.6.1, <=4.6.2) potentially affected by CVE-2026-23528 via distributed (2022.2.0)

distributed PYPI version 2022.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito =4.6.1, =4.6.2 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

libertem (>=0.2.0, <=0.2.2) potentially affected by CVE-2026-23528 via distributed (1.27.1)

distributed PYPI version 1.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - libertem =0.2.0, =0.2.2 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

cellphonedbu (>=1.1.1.6, <=1.1.1.7), dagster-dask (>=0.5.0rc4, <=0.6.4) +2 more potentially affected by CVE-2026-23528 via distributed (1.28.1)

distributed PYPI version 1.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cellphonedbu =1.1.1.6, =0.5.0rc4, =0.5.0, =0.5.5 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

autogluon (>=0.0.5, <=0.0.7b17042020) potentially affected by CVE-2026-23528 via distributed (2.6.0)

distributed PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - autogluon =0.0.5, =0.0.7b17042020 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

dataprep (>=0.2.10a0, <=0.2.13.post2) potentially affected by CVE-2026-23528 via distributed (2.10.0)

distributed PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataprep =0.2.10a0, =0.2.13.post2 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

trenchripper (>=0.0.4, <=0.2.1) potentially affected by CVE-2026-23528 via distributed (2.12.0)

distributed PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - trenchripper =0.0.4, =0.2.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

hypycube (0.0.0a0), prefect (>=0.9.5, <=0.12.2) +2 more potentially affected by CVE-2026-23528 via distributed (2.20.0)

distributed PYPI version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - hypycube 0.0.0a0 - prefect =0.9.5, =0.6.5, =0.0.22.dev7, =0.0.24.dev0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ...

oracle-ads (>=2.3.3, <=2.4.1) potentially affected by CVE-2026-23528 via distributed (2.30.0)

distributed PYPI version 2.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - oracle-ads =2.3.3, =2.4.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

cdp-backend (>=3.0.0.dev4, <=3.0.0.dev5), devito (4.3.0) +4 more potentially affected by CVE-2026-23528 via distributed (2021.1.1)

distributed PYPI version 2021.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cdp-backend =3.0.0.dev4, =0.1.0, =9.1.2, =0.0.1, =0.0.4 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

dask-cuda (>=21.6.0a210607, <=21.8.0a210608), mosartwmpy (>=0.0.5, <=0.0.7) +1 more potentially affected by CVE-2026-23528 via distributed (2021.5.1)

distributed PYPI version 2021.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =21.6.0a210607, =0.0.5, =1.2.1, =1.4.2 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

devito (4.5.0), divina (>=2021.8.2.dev2, <=2021.9.5) +2 more potentially affected by CVE-2026-23528 via distributed (2021.7.2)

distributed PYPI version 2021.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito 4.5.0 - divina =2021.8.2.dev2, =0.0.3, =0.0.6.dev0 - whakaari 0.0.1 Source cves: CVE-2026-23528 Source advisory:...

elfi (0.3.1) potentially affected by CVE-2026-23528 via distributed (1.14.3)

distributed PYPI version 1.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - elfi 0.3.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

pysmfish (>=0.0.0, <=0.0.5), tsfresh (0.11.0) potentially affected by CVE-2026-23528 via distributed (1.18.3)

distributed PYPI version 1.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pysmfish =0.0.0, =0.0.5 - tsfresh 0.11.0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

azuremlftk (>=0.1.19008.12a1, <=0.1.19032.1) potentially affected by CVE-2026-23528 via distributed (1.23.1)

distributed PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azuremlftk =0.1.19008.12a1, =0.1.19032.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...