esi-acme (2023.12.0), nwp-consumer (>=0.1.26, <=0.1.29) potentially affected by CVE-2026-23528 via distributed (2023.12.0)

distributed PYPI version 2023.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme 2023.12.0 - nwp-consumer =0.1.26, =0.1.29 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-cuda (>=23.4.0a230405, <=23.8.0a230605), dask-sql (2023.4.0) +5 more potentially affected by CVE-2026-23528 via distributed (2023.3.2.1)

distributed PYPI version 2023.3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =23.4.0a230405, =0.0.1, =3.0.40, =3.1.3 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2026-23528 via distributed (2.25.0)

distributed PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2026-23528 via distributed (2.25.0)

distributed PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

celldega (>=0.24.0, <=0.28.0a2), esi-acme (2025.11.0) +3 more potentially affected by CVE-2026-23528 via distributed (2025.11.0)

distributed PYPI version 2025.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - celldega =0.24.0, =0.2.39, =0.2.68 - signifikante 0.2.0 - thyra 1.24.0 Source cves: CVE-2026-23528 Source advisory:...

dask-cuda (>=23.4.0a230405, <=23.8.0a230605), dask-sql (2023.4.0) +5 more potentially affected by CVE-2026-23528 via distributed (2023.3.2.1)

distributed PYPI version 2023.3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =23.4.0a230405, =0.0.1, =3.0.40, =3.1.3 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

esi-acme (2023.12.0), nwp-consumer (>=0.1.26, <=0.1.29) potentially affected by CVE-2026-23528 via distributed (2023.12.0)

distributed PYPI version 2023.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme 2023.12.0 - nwp-consumer =0.1.26, =0.1.29 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

analysis-tools (0.2.1), esi-acme (>=2022.11.0, <=2022.12.0) +2 more potentially affected by CVE-2026-23528 via distributed (2022.10.2)

distributed PYPI version 2022.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - analysis-tools 0.2.1 - esi-acme =2022.11.0, =0.1.0b1, =0.1.0 - simpeg-drivers 0.1.0b1 Source cves: CVE-2026-23528 Source advisory:...

esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2021-42343 via distributed (2.25.0)

distributed PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2021-42343 via distributed (2.25.0)

distributed PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-871...

dataprep (>=0.2.13, <=0.2.14), esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2021-42343 via dask (2.25.0)

dask PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dataprep =0.2.13, =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...