canonicalwebteam-flask-base (>=0.3.3, <=0.9.3), flexget (>=2.21.21, <=3.1.104) +4 more potentially affected by CVE-2026-21860 via werkzeug (0.15.6)

werkzeug PYPI version 0.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - canonicalwebteam-flask-base =0.3.3, =2.21.21, =0.1.0a27, =0.1.0, =0.15.0, =0.2.0, =0.2.1 Source cves: CVE-2026-21860 Source advisory:...

nucypher (>=0.1.0a29, <=1.2.0b1) potentially affected by CVE-2025-4565 via protobuf (3.10.0rc1)

protobuf PYPI version 3.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - nucypher =0.1.0a29, =1.2.0b1 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

nucypher (6.0.0) potentially affected by CVE-2025-4565 via protobuf (3.20.0rc1)

protobuf PYPI version 3.20.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - nucypher 6.0.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

canonicalwebteam-flask-base (>=0.3.3, <=0.9.3), flexget (>=2.21.21, <=3.1.104) +4 more potentially affected by CVE-2024-49766 via werkzeug (0.15.6)

werkzeug PYPI version 0.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - canonicalwebteam-flask-base =0.3.3, =2.21.21, =0.1.0a27, =0.1.0, =0.15.0, =0.2.0, =0.2.1 Source cves: CVE-2024-49766 Source advisory:...

nucypher (2.1.0b1) potentially affected by CVE-2024-41671 via twisted (20.3.0rc1)

twisted PYPI version 20.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - nucypher 2.1.0b1 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

binance-futures-connector (>=1.8.0, <=1.10.0), geonode (4.0.0rc0) +1 more potentially affected by CVE-2024-41671 via twisted (22.2.0)

twisted PYPI version 22.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-futures-connector =1.8.0, =1.10.0 - geonode 4.0.0rc0 - nucypher 6.0.0 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

carml (19.1.0), nucypher (>=0.1.0a27, <=1.2.0b1) +3 more potentially affected by CVE-2024-41671 via twisted (19.7.0)

twisted PYPI version 19.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carml 19.1.0 - nucypher =0.1.0a27, =1.1.0, =1.0.0, =0.2.0, =0.2.1 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

cyclone (>=1.2.0, <=1.3.0), irrd (>=4.0.1, <=4.0.8) +3 more potentially affected by CVE-2024-41671 via twisted (19.2.1)

twisted PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cyclone =1.2.0, =4.0.1, =1.0.0, =0.1.0a23, =0.1.0, =0.2.1 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

ambition-edc (>=0.2.8, <=0.3.28), meta-edc (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2024-40647 via sentry-sdk (0.9.0)

sentry-sdk PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - ambition-edc =0.2.8, =0.1.0, =0.1.0a23, =2.0.0b6 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

canonicalwebteam-flask-base (>=0.3.3, <=0.9.3), flexget (>=2.21.21, <=3.1.104) +4 more potentially affected by CVE-2024-34069 via werkzeug (0.15.6)

werkzeug PYPI version 0.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - canonicalwebteam-flask-base =0.3.3, =2.21.21, =0.1.0a27, =0.1.0, =0.15.0, =0.2.0, =0.2.1 Source cves: CVE-2024-34069 Source advisory:...

nucypher (>=6.0.0, <=6.1.0) potentially affected by CVE-2024-23342 via ecdsa (0.18.0b2)

ecdsa PYPI version 0.18.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on ecdsa and may be impacted: - nucypher =6.0.0, =6.1.0 Source cves: CVE-2024-23342 Source advisory: OSV:PYSEC-2026-1325...

ambition-edc (>=0.2.8, <=0.3.28), meta-edc (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2023-28117 via sentry-sdk (0.9.0)

sentry-sdk PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - ambition-edc =0.2.8, =0.1.0, =0.1.0a23, =2.0.0b6 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

nucypher (2.1.0b1) potentially affected by CVE-2026-42304 via twisted (20.3.0rc1)

twisted PYPI version 20.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - nucypher 2.1.0b1 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

carml (19.1.0), nucypher (>=0.1.0a27, <=1.2.0b1) +3 more potentially affected by CVE-2026-42304 via twisted (19.7.0)

twisted PYPI version 19.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carml 19.1.0 - nucypher =0.1.0a27, =1.1.0, =1.0.0, =0.2.0, =0.2.1 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

binance-futures-connector (>=1.8.0, <=1.10.0), geonode (4.0.0rc0) +1 more potentially affected by CVE-2026-42304 via twisted (22.2.0)

twisted PYPI version 22.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-futures-connector =1.8.0, =1.10.0 - geonode 4.0.0rc0 - nucypher 6.0.0 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

cqc (>=3.1.0, <=3.2.1), nucypher (>=1.2.0b2, <=2.0.0b11) +5 more potentially affected by CVE-2026-42304 via twisted (19.10.0)

twisted PYPI version 19.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cqc =3.1.0, =1.2.0b2, =0.5.5, =0.0.1, =3.0.7, =3.0.14 - txsshadmin 0.2.0 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

cyclone (>=1.2.0, <=1.3.0), irrd (>=4.0.1, <=4.0.8) +3 more potentially affected by CVE-2026-42304 via twisted (19.2.1)

twisted PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cyclone =1.2.0, =4.0.1, =1.0.0, =0.1.0a23, =0.1.0, =0.2.1 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

apricot-server (>=0.0.1, <=0.0.4), nucypher (>=7.0.0, <=7.0.4) +2 more potentially affected by CVE-2026-42304 via twisted (23.8.0)

twisted PYPI version 23.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.1, =7.0.0, =0.2.0, =0.4.1 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

cqc (>=3.1.0, <=3.2.1), nucypher (>=1.2.0b2, <=2.0.0b11) +5 more potentially affected by CVE-2026-42304 via twisted (19.10.0)

twisted PYPI version 19.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cqc =3.1.0, =1.2.0b2, =0.5.5, =0.0.1, =3.0.7, =3.0.14 - txsshadmin 0.2.0 Source cves: CVE-2026-42304 Source advisory: OSV:GHSA-GRGV-6HW6-V9G4...

binance-futures-connector (>=1.8.0, <=1.10.0), geonode (4.0.0rc0) +1 more potentially affected by CVE-2026-42304 via twisted (22.2.0)

twisted PYPI version 22.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-futures-connector =1.8.0, =1.10.0 - geonode 4.0.0rc0 - nucypher 6.0.0 Source cves: CVE-2026-42304 Source advisory: OSV:GHSA-GRGV-6HW6-V9G...