hugo-jupyter (>=0.2.1, <=0.3.0), kitehistory (1.4.0) +2 more potentially affected by CVE-2026-103262 via tornado (4.5.1)

tornado PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - hugo-jupyter =0.2.1, =0.3.1, =1.5.1 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

hugo-jupyter (>=0.2.1, <=0.3.0), kitehistory (1.4.0) +2 more potentially affected by CVE-2026-82397 via tornado (4.5.1)

tornado PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - hugo-jupyter =0.2.1, =0.3.1, =1.5.1 Source cves: CVE-2026-82397 Source advisory: OSV:GHSA-MPF4-983Q-P7J4...

biobb-io (>=0.0.1, <=0.0.8), biobb-model (>=0.0.1, <=0.0.10) +3 more potentially affected by CVE-2026-59922 via mistune (0.7.4)

mistune PYPI version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - biobb-io =0.0.1, =0.0.1, =0.2.1, =2.2.20170208112505, =2.7.20181012180226 Source cves: CVE-2026-59922 Source advisory: OSV:GHSA-C8J7-8CV4-2XMQ...

biobb-io (>=0.0.1, <=0.0.8), biobb-model (>=0.0.1, <=0.0.10) +3 more potentially affected by CVE-2026-59925 via mistune (0.7.4)

mistune PYPI version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - biobb-io =0.0.1, =0.0.1, =0.2.1, =2.2.20170208112505, =2.7.20181012180226 Source cves: CVE-2026-59925 Source advisory: OSV:GHSA-4J32-57V6-6G45...

hugo-jupyter (>=0.2.1, <=0.3.0), kitehistory (1.4.0) +2 more potentially affected by CVE-2025-67726 via tornado (4.5.1)

tornado PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - hugo-jupyter =0.2.1, =0.3.1, =1.5.1 Source cves: CVE-2025-67726 Source advisory: OSV:GHSA-JHMP-MQWM-3GQ8...

hugo-jupyter (>=0.2.1, <=0.3.0), kitehistory (1.4.0) +2 more potentially affected by CVE-2026-49854 via tornado (4.5.1)

tornado PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - hugo-jupyter =0.2.1, =0.3.1, =1.5.1 Source cves: CVE-2026-49854 Source advisory: OSV:PYSEC-2026-3388...

django-sftp (0.1.0), hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2026-44405 via paramiko (2.2.1)

paramiko PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - django-sftp 0.1.0 - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

hugo-jupyter (>=0.2.1, <=0.3.0), modconf (>=0.4.0b7, <=0.4.0b9) +3 more potentially affected by CVE-2026-59890 via setuptools (36.2.0)

setuptools PYPI version 36.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - hugo-jupyter =0.2.1, =0.4.0b7, =0.5.0b10, =0.5.0b12 - ws-sheets-server 0.4.1b28 - ws-web-aiohttp 0.1.0b19 Source cves: CVE-2026-59890 Sourc...

hugo-jupyter (>=0.2.1, <=0.3.0), kitehistory (1.4.0) +2 more potentially affected by CVE-2024-52804 via tornado (4.5.1)

tornado PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - hugo-jupyter =0.2.1, =0.3.1, =1.5.1 Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-1975...

biobb-io (>=0.0.1, <=0.0.8), biobb-model (>=0.0.1, <=0.0.10) +3 more potentially affected by CVE-2026-44899 via mistune (0.7.4)

mistune PYPI version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - biobb-io =0.0.1, =0.0.1, =0.2.1, =2.2.20170208112505, =2.7.20181012180226 Source cves: CVE-2026-44899 Source advisory: OSV:PYSEC-2026-2209...

biobb-io (>=0.0.1, <=0.0.8), biobb-model (>=0.0.1, <=0.0.10) +3 more potentially affected by CVE-2026-44896 via mistune (0.7.4)

mistune PYPI version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - biobb-io =0.0.1, =0.0.1, =0.2.1, =2.2.20170208112505, =2.7.20181012180226 Source cves: CVE-2026-44896 Source advisory: OSV:PYSEC-2026-168...

biobb-io (>=0.0.1, <=0.0.8), biobb-model (>=0.0.1, <=0.0.10) +3 more potentially affected by CVE-2026-44897 via mistune (0.7.4)

mistune PYPI version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - biobb-io =0.0.1, =0.0.1, =0.2.1, =2.2.20170208112505, =2.7.20181012180226 Source cves: CVE-2026-44897 Source advisory: OSV:GHSA-V87V-83H2-53W7...

biobb-io (>=0.0.1, <=0.0.8), biobb-model (>=0.0.1, <=0.0.10) +3 more potentially affected by CVE-2026-44708 via mistune (0.7.4)

mistune PYPI version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - biobb-io =0.0.1, =0.0.1, =0.2.1, =2.2.20170208112505, =2.7.20181012180226 Source cves: CVE-2026-44708 Source advisory: OSV:GHSA-8G87-J6Q8-G93X...

django-sftp (0.1.0), hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2026-44405 via paramiko (2.2.1)

paramiko PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - django-sftp 0.1.0 - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...

hugo-jupyter (>=0.2.1, <=0.3.0), kitehistory (1.4.0) +2 more potentially affected by CVE-2026-35536 via tornado (4.5.1)

tornado PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - hugo-jupyter =0.2.1, =0.3.1, =1.5.1 Source cves: CVE-2026-35536 Source advisory: OSV:GHSA-FQWM-6JPJ-5WXC...

hugo-jupyter (>=0.2.1, <=0.3.0), kitehistory (1.4.0) +2 more potentially affected by CVE-2026-35536 via tornado (4.5.1)

tornado PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - hugo-jupyter =0.2.1, =0.3.1, =1.5.1 Source cves: CVE-2026-35536 Source advisory: OSV:PYSEC-2026-2287...

hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2026-34073 via cryptography (2.0.0)

cryptography PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...

hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2026-34073 via cryptography (2.0.0)

cryptography PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2026-34073 Source advisory: OSV:GHSA-M959-CC7F-WV43...

hugo-jupyter (>=0.2.1, <=0.3.0), kitehistory (1.4.0) +2 more potentially affected by CVE-2026-31958 via tornado (4.5.1)

tornado PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - hugo-jupyter =0.2.1, =0.3.1, =1.5.1 Source cves: CVE-2026-31958 Source advisory: OSV:GHSA-QJXF-F2MG-C6MC...

hugo-jupyter (>=0.2.1, <=0.3.0), kitehistory (1.4.0) +2 more potentially affected by CVE-2026-35536 via tornado (4.5.1)

tornado PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - hugo-jupyter =0.2.1, =0.3.1, =1.5.1 Source cves: CVE-2026-35536 Source advisory: OSV:GHSA-78CV-MQJ4-43F7...