graditude (0.1.0), jwql (>=0.23.0, <=0.24.0) +2 more potentially affected by CVE-2026-21883 via bokeh (1.3.4)

bokeh PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - graditude 0.1.0 - jwql =0.23.0, =1.0.0, =0.31.14, =0.31.37 Source cves: CVE-2026-21883 Source advisory: OSV:PYSEC-2026-1223...

jwql (>=0.16.0, <=0.17.0) potentially affected by CVE-2026-21883 via bokeh (1.0.1)

bokeh PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - jwql =0.16.0, =0.17.0 Source cves: CVE-2026-21883 Source advisory: OSV:PYSEC-2026-1223...

boorunaut (>=0.1.0, <=0.4.1), coldfront (0.0.2) +10 more potentially affected by CVE-2026-6873 via django (2.1.2)

django PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - boorunaut =0.1.0, =0.31.0, =0.16.0, =1.0.0, =1.24.0, =1.0.0rc7, =1.0.0rc8 - warriorframework 4.2.0 Source cves: CVE-2026-6873 Source advisory:...

boorunaut (>=0.1.0, <=0.4.1), coldfront (0.0.2) +10 more potentially affected by CVE-2025-57833 via django (2.1.2)

django PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - boorunaut =0.1.0, =0.31.0, =0.16.0, =1.0.0, =1.24.0, =1.0.0rc7, =1.0.0rc8 - warriorframework 4.2.0 Source cves: CVE-2025-57833 Source advisory:...