audalign (>=0.1.3, <=1.0.1), hp-procurvearuba (>=0.0.1, <=2.0.0) +1 more potentially affected by CVE-2025-71176 via pytest (6.2.0)

pytest PYPI version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - audalign =0.1.3, =0.0.1, =2.0.0 - inmanta-dev-dependencies 1.5.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

an-website (24.1.0), browserist (1.6.7) +5 more potentially affected by CVE-2026-41066 via lxml (5.0.0)

lxml PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - an-website 24.1.0 - browserist 1.6.7 - ena-upload-cli =0.6.3, =5.0.0, =0.1.0, =0.5.0 - stockplot 2.0.3 Source cves: CVE-2026-41066 Source advisory:...

inmanta-dev-dependencies (2.117.0) potentially affected by CVE-2026-32274 via black (24.4.1)

black PYPI version 24.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - inmanta-dev-dependencies 2.117.0 Source cves: CVE-2026-32274 Source advisory: OSV:PYSEC-2026-2121...

aiosoma (>=1.1.12, <=1.1.13), hdx-cli-toolkit (>=2024.3.3, <=2026.2.1) +2 more potentially affected by CVE-2026-32274 via black (23.10.0)

black PYPI version 23.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aiosoma =1.1.12, =2024.3.3, =2026.2.1 - inmanta-dev-dependencies 2.89.0 - pyink 23.10.0 Source cves: CVE-2026-32274 Source advisory:...

aiosoma (1.1.14), cloudquery-plugin-sdk (0.1.8) +4 more potentially affected by CVE-2026-32274 via black (23.10.1)

black PYPI version 23.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aiosoma 1.1.14 - cloudquery-plugin-sdk 0.1.8 - fairprice =0.1.0, =2.90.0, =0.0.2, =2024.2.1 Source cves: CVE-2026-32274 Source advisory:...

aiosoma (1.1.18), candlestick-patterns (>=1.0.1, <=1.2.0) +3 more potentially affected by CVE-2026-32274 via black (23.12.0)

black PYPI version 23.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aiosoma 1.1.18 - candlestick-patterns =1.0.1, =0.1.9, =2.97.0, =0.39.0, =0.39.6 Source cves: CVE-2026-32274 Source advisory: OSV:PYSEC-2026-2121...

inmanta-dev-dependencies (2.116.0), ul-py-tool (>=1.16.0, <=1.16.2) potentially affected by CVE-2026-32274 via black (24.4.0)

black PYPI version 24.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - inmanta-dev-dependencies 2.116.0 - ul-py-tool =1.16.0, =1.16.2 Source cves: CVE-2026-32274 Source advisory: OSV:PYSEC-2026-2121...

inmanta-dev-dependencies (2.117.0) potentially affected by CVE-2026-31900 via black (24.4.1)

black PYPI version 24.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - inmanta-dev-dependencies 2.117.0 Source cves: CVE-2026-31900 Source advisory: OSV:PYSEC-2026-2120...

aiosoma (1.1.14), cloudquery-plugin-sdk (0.1.8) +4 more potentially affected by CVE-2026-31900 via black (23.10.1)

black PYPI version 23.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aiosoma 1.1.14 - cloudquery-plugin-sdk 0.1.8 - fairprice =0.1.0, =2.90.0, =0.0.2, =2024.2.1 Source cves: CVE-2026-31900 Source advisory:...

inmanta-dev-dependencies (2.67.0), nerv (0.1.1) +2 more potentially affected by CVE-2025-71176 via pytest (7.3.0)

pytest PYPI version 7.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - inmanta-dev-dependencies 2.67.0 - nerv 0.1.1 - nmmo =2.0.4, =4.13.22, =4.13.24 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

audalign (>=0.1.3, <=1.0.1), hp-procurvearuba (>=0.0.1, <=2.0.0) +1 more potentially affected by CVE-2025-71176 via pytest (6.2.0)

pytest PYPI version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - audalign =0.1.3, =0.0.1, =2.0.0 - inmanta-dev-dependencies 1.5.0 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

aiosoma (1.1.18), candlestick-patterns (>=1.0.1, <=1.2.0) +3 more potentially affected by CVE-2024-21503 via black (23.12.0)

black PYPI version 23.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aiosoma 1.1.18 - candlestick-patterns =1.0.1, =0.1.9, =2.97.0, =0.39.0, =0.39.6 Source cves: CVE-2024-21503 Source advisory: OSV:GHSA-FJ7X-Q9J7-G6Q6...