particleanalyzer (1.2.3) potentially affected by CVE-2026-28415 via gradio (5.47.0)

gradio PYPI version 5.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - particleanalyzer 1.2.3 Source cves: CVE-2026-28415 Source advisory: OSV:PYSEC-2026-65...

axolotl (0.13.0.dev0), lazyllm (>=0.7.0, <=0.7.2) +5 more potentially affected by CVE-2026-28414 via gradio (5.49.1)

gradio PYPI version 5.49.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - axolotl 0.13.0.dev0 - lazyllm =0.7.0, =0.1.4, =0.1.7, =0.4.1 Source cves: CVE-2026-28414 Source advisory: OSV:PYSEC-2026-64...

gradio-rerun (0.26.0a1), particleanalyzer (>=1.3.2, <=1.3.3) potentially affected by CVE-2026-28416 via gradio (5.47.2)

gradio PYPI version 5.47.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-rerun 0.26.0a1 - particleanalyzer =1.3.2, =1.3.3 Source cves: CVE-2026-28416 Source advisory: OSV:PYSEC-2026-66...

axolotl (0.13.0.dev0), lazyllm (>=0.7.0, <=0.7.2) +5 more potentially affected by CVE-2026-28415 via gradio (5.49.1)

gradio PYPI version 5.49.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - axolotl 0.13.0.dev0 - lazyllm =0.7.0, =0.1.4, =0.1.7, =0.4.1 Source cves: CVE-2026-28415 Source advisory: OSV:PYSEC-2026-65...

gradio-rerun (0.26.0a1), particleanalyzer (>=1.3.2, <=1.3.3) potentially affected by CVE-2026-28414 via gradio (5.47.2)

gradio PYPI version 5.47.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-rerun 0.26.0a1 - particleanalyzer =1.3.2, =1.3.3 Source cves: CVE-2026-28414 Source advisory: OSV:PYSEC-2026-64...