graal (>=0.3.2rc3, <=0.4.1rc3), grimoire-elk (>=0.103.0rc10, <=0.103.2rc2) +8 more potentially affected by unknown CVE via dulwich (0.20.46)

dulwich PYPI version 0.20.46 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - graal =0.3.2rc3, =0.103.0rc10, =0.6.0, =0.2.2rc4, =0.20.0rc6, =0.3.2rc4, =0.2.2rc4, =0.2.2rc4, =0.2.2rc5, =0.4.0rc1, =0.5.0rc2 Source cves:...

grimoirelab (>=1.9.0rc1, <=1.9.0), qgis-deployment-toolbelt (0.36.1) potentially affected by unknown CVE via dulwich (0.22.6)

dulwich PYPI version 0.22.6 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.9.0rc1, =1.9.0 - qgis-deployment-toolbelt 0.36.1 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grimoirelab (>=1.8.0rc1, <=1.8.0) potentially affected by unknown CVE via dulwich (0.22.5)

dulwich PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.8.0rc1, =1.8.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grimoire-elk (>=0.55.0, <=0.58.0), grimoirelab (>=0.2.52, <=0.2.53) +4 more potentially affected by unknown CVE via dulwich (0.21.4.1)

dulwich PYPI version 0.21.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoire-elk =0.55.0, =0.2.52, =0.1.0, =0.13.2, =0.4.5, =0.0.4, =0.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grimoirelab (>=1.9.1rc1, <=1.9.2), infrahub-server (>=1.6.0b0, <=1.8.0b0) +3 more potentially affected by unknown CVE via dulwich (0.22.7)

dulwich PYPI version 0.22.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.9.1rc1, =1.6.0b0, =0.1.2, =0.36.2, =0.8.0b4, =0.9.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grimoirelab (>=1.6.0rc1, <=1.7.0), qgis-deployment-toolbelt (>=0.34.5, <=0.36.0) +2 more potentially affected by unknown CVE via dulwich (0.22.1)

dulwich PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.6.0rc1, =0.34.5, =0.6.0rc3, =0.1.0, =0.3.4 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grimoirelab (>=1.9.0rc1, <=1.9.0), qgis-deployment-toolbelt (0.36.1) potentially affected by unknown CVE via dulwich (0.22.6)

dulwich PYPI version 0.22.6 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.9.0rc1, =1.9.0 - qgis-deployment-toolbelt 0.36.1 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

grimoirelab (>=1.8.0rc1, <=1.8.0) potentially affected by unknown CVE via dulwich (0.22.5)

dulwich PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.8.0rc1, =1.8.0 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

grimoirelab (>=1.6.0rc1, <=1.7.0), qgis-deployment-toolbelt (>=0.34.5, <=0.36.0) +2 more potentially affected by unknown CVE via dulwich (0.22.1)

dulwich PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.6.0rc1, =0.34.5, =0.6.0rc3, =0.1.0, =0.3.4 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

grimoire-elk (>=0.55.0, <=0.58.0), grimoirelab (>=0.2.52, <=0.2.53) +4 more potentially affected by unknown CVE via dulwich (0.21.4.1)

dulwich PYPI version 0.21.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoire-elk =0.55.0, =0.2.52, =0.1.0, =0.13.2, =0.4.5, =0.0.4, =0.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

graal (>=0.3.2rc3, <=0.4.1rc3), grimoire-elk (>=0.103.0rc10, <=0.103.2rc2) +8 more potentially affected by unknown CVE via dulwich (0.20.46)

dulwich PYPI version 0.20.46 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - graal =0.3.2rc3, =0.103.0rc10, =0.6.0, =0.2.2rc4, =0.20.0rc6, =0.3.2rc4, =0.2.2rc4, =0.2.2rc4, =0.2.2rc5, =0.4.0rc1, =0.5.0rc2 Source cves:...

dbnomics-data-model (>=0.11.0, <=0.12.1), git2effort (>=0.1.1, <=0.1.4) +2 more potentially affected by unknown CVE via dulwich (0.18.6)

dulwich PYPI version 0.18.6 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - dbnomics-data-model =0.11.0, =0.1.1, =0.1.2, =0.9.16, =0.12.24 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

grimoirelab (>=1.9.1rc1, <=1.9.2), infrahub-server (>=1.6.0b0, <=1.8.0b0) +3 more potentially affected by unknown CVE via dulwich (0.22.7)

dulwich PYPI version 0.22.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.9.1rc1, =1.6.0b0, =0.1.2, =0.36.2, =0.8.0b4, =0.9.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

django-sohoui (>=1.2.2, <=1.3.9), djangodjangodjango (4.2.21) +1 more potentially affected by CVE-2026-15307 via django (4.2.21)

django PYPI version 4.2.21 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-sohoui =1.2.2, =1.11.0rc1, =1.13.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

an-website (>=26.6.0, <=26.7.0), blfs-pm (1.1.0) +9 more potentially affected by CVE-2026-86000 via soupsieve (2.8.4)

soupsieve PYPI version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - an-website =26.6.0, =1.21.0rc1, =3.9.0, =2.22.0, =1.0.0, =4.45.4, =1.28.5, =2.24.1.13, =2.24.4.14 Source cves: CVE-2026-86000 Source advisory:...

an-website (>=26.6.0, <=26.7.0), blfs-pm (1.1.0) +9 more potentially affected by CVE-2026-85999 via soupsieve (2.8.4)

soupsieve PYPI version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - an-website =26.6.0, =1.21.0rc1, =3.9.0, =2.22.0, =1.0.0, =4.45.4, =1.28.5, =2.24.1.13, =2.24.4.14 Source cves: CVE-2026-85999 Source advisory:...

django-sohoui (>=1.2.2, <=1.3.9), djangodjangodjango (4.2.21) +1 more potentially affected by CVE-2026-15830 via django (4.2.21)

django PYPI version 4.2.21 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-sohoui =1.2.2, =1.11.0rc1, =1.13.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

atsdk (0.2.51), eaasy (0.2.21) +26 more potentially affected by CVE-2026-69248 via cryptography (46.0.2)

cryptography PYPI version 46.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atsdk 0.2.51 - eaasy 0.2.21 - ewccli =0.2.0, =25.1.0, =1.17.0rc1, =1.34.0, =0.1.75, =1.0.136, =1.0.153, =0.2.115, =0.3.164, =0.1.87,...

daktari (>=0.0.92, <=0.0.93), graal (>=0.4.5rc2, <=0.4.5) +10 more potentially affected by CVE-2026-59890 via setuptools (67.7.1)

setuptools PYPI version 67.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - daktari =0.0.92, =0.4.5rc2, =0.104.3rc2, =0.9.0rc1, =0.21.4rc2, =0.3.8rc2, =0.2.8rc2, =0.2.8rc2, =0.2.8rc2, =0.7.0rc1, =0.9.0rc2, =0.9.0 -...

chk (>=0.4.2, <=0.4.3), cinnamon-core (0.1.0) +12 more potentially affected by CVE-2026-59890 via setuptools (67.1.0)

setuptools PYPI version 67.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - chk =0.4.2, =0.7.4, =0.8.0 - perceval 0.21.3 - perceval-mozilla 0.3.7 - perceval-opnfv 0.2.7 - perceval-puppet 0.2.7 - perceval-weblate 0.2...