cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2026-8643 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

uranium (>=0.2.23, <=0.2.34) potentially affected by CVE-2026-8643 via pip (7.1.2)

pip PYPI version 7.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - uranium =0.2.23, =0.2.34 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

hyperpod-elastic-agent (>=1.1.0, <=1.1.3), jupyter-quant (>=2509.1.0, <=2510.1.0) +5 more potentially affected by CVE-2026-8643 via pip (25.2.0)

pip PYPI version 25.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - hyperpod-elastic-agent =1.1.0, =2509.1.0, =0.1.0, =0.20.0, =3.13.0, =3.13.0, =3.14.0 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

oriole-test (0.2.2) potentially affected by CVE-2026-8643 via pip (9.0.2)

pip PYPI version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - oriole-test 0.2.2 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

aegea (>=2.0.0, <=2.2.5), chalice (>=1.14.1, <=1.16.0) +2 more potentially affected by CVE-2026-8643 via pip (20.1.1)

pip PYPI version 20.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aegea =2.0.0, =1.14.1, =0.1.0, =0.2.0 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

chalice (>=1.2.3, <=1.6.0), httptesting (>=1.0.1, <=1.0.2) +4 more potentially affected by CVE-2026-8643 via pip (10.0.1)

pip PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.2.3, =1.0.1, =4.0.0, =4.0.0, =4.0.1 - zerv 0.1.0 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

lisa-api (0.5.0), lisa-plugins-shopping (>=0.1.9, <=0.2.0) +2 more potentially affected by CVE-2026-8643 via pip (1.5.6)

pip PYPI version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - lisa-api 0.5.0 - lisa-plugins-shopping =0.1.9, =1.0.0rc1, =1.0.0, =1.1.2 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

c2cciutils (1.1.32), lenstozotero (>=0.1.2, <=0.1.4) +15 more potentially affected by CVE-2026-8643 via pip (23.3.1)

pip PYPI version 23.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - c2cciutils 1.1.32 - lenstozotero =0.1.2, =0.0.15, =0.0.1, =1.1.1, =0.0.1, =0.4.7, =0.0.6, =0.0.3, =0.0.1, =1.0.1, =0.1.0, =0.6.2, =0.12.3 - vg-management...

khan-mongo (0.1.6), uranium (>=0.2.35, <=0.2.37) potentially affected by CVE-2026-8643 via pip (8.1.2)

pip PYPI version 8.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - khan-mongo 0.1.6 - uranium =0.2.35, =0.2.37 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

c2cciutils (>=1.1.0.dev20260322010408, <=1.1.70), dragonlog (>=26.6.0, <=26.8.0) +19 more potentially affected by CVE-2026-8643 via pip (>=26.0.0, <=26.1.1)

pip PYPI version =26.0.0, =1.1.0.dev20260322010408, =26.6.0, =2.38.0, =0.1.1, =0.9.478, =2602.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.12, =0.1.0 - py3dbl 1.0.1 and more Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

geonode (>=4.0.0, <=4.0.0.post1), jpeglib (0.10.16) potentially affected by CVE-2026-8643 via pip (22.2.1)

pip PYPI version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - geonode =4.0.0, =4.0.0.post1 - jpeglib 0.10.16 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

ovsegmentation (1.0.41), pptx2typ (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-8643 via pip (22.0.2)

pip PYPI version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - ovsegmentation 1.0.41 - pptx2typ =0.1.0, =0.1.1 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2026-8643 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

franka-valve (0.0.0), wildfire-environment (>=0.1.0, <=0.2.1) potentially affected by CVE-2026-8643 via pip (21.0.0)

pip PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - franka-valve 0.0.0 - wildfire-environment =0.1.0, =0.2.1 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

my-flask (2023.4.23), zonesmart-utils (>=0.4.0, <=0.4.1) potentially affected by CVE-2026-8643 via pip (23.0.0)

pip PYPI version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - my-flask 2023.4.23 - zonesmart-utils =0.4.0, =0.4.1 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

justuse (>=0.6.0, <=0.6.1) potentially affected by CVE-2026-8643 via pip (21.2.1)

pip PYPI version 21.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - justuse =0.6.0, =0.6.1 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

build-harness (0.2.1), c4v-py (>=0.1.0.dev2021118, <=0.1.0.dev202201291921) +34 more potentially affected by CVE-2026-8643 via pip (21.3.1)

pip PYPI version 21.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - build-harness 0.2.1 - c4v-py =0.1.0.dev2021118, =0.0.2a0, =0.9.2, =1.26.1, =0.5.0, =4.0.0, =22.16.0, =0.1.9, =0.2.12, =0.1.0, =0.0.57, =0.0.59 -...

animo-trainer (1.0.2), build-harness (1.0.1) +16 more potentially affected by CVE-2026-8643 via pip (22.0.4)

pip PYPI version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - animo-trainer 1.0.2 - build-harness 1.0.1 - cacheback2 0.0.5 - cdp-connector =1.0.0, =1.26.6, =1.2.3, =2022.3.0b0, =2022.3.0b0, =0.4.0rc0, =0.6.16,...

cherrypick (>=0.1.0, <=0.2.1), espercli (>=0.0.13, <=0.0.14) +2 more potentially affected by CVE-2026-8643 via pip (21.1.0)

pip PYPI version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cherrypick =0.1.0, =0.0.13, =0.0.5, =0.0.8 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

agent-plugin-builder (>=0.1.0, <=0.6.0), aider-chat (>=0.68.0, <=0.72.3) +94 more potentially affected by CVE-2026-8643 via pip (24.3.1)

pip PYPI version 24.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agent-plugin-builder =0.1.0, =0.68.0, =0.2.0, =0.6.17, =0.3.6, =24.2.0, =0.1.3, =1.3.0, =0.1.13, =0.1.0, =5.3.0, =5.3.1 and more Source cves: CVE-2026-86...