poetry-plugin-export (1.0.6) potentially affected by CVE-2026-41140 via poetry (1.2.0)

poetry PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - poetry-plugin-export 1.0.6 Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-2890...

poetry-plugin-export (>=1.0.7, <=1.1.1), poetry-plugin-tweak-dependencies-version (0.1.0) potentially affected by CVE-2026-41140 via poetry (1.2.1)

poetry PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - poetry-plugin-export =1.0.7, =1.1.1 - poetry-plugin-tweak-dependencies-version 0.1.0 Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-289...

appcensus-dynamic-repos (0.6.1.91), poetry-grpc-plugin (0.1.5) +5 more potentially affected by CVE-2026-41140 via poetry (1.3.2)

poetry PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - appcensus-dynamic-repos 0.6.1.91 - poetry-grpc-plugin 0.1.5 - poetry-plugin-export 1.2.0 - poetry-plugin-pypi-mirror 0.3.0 -...

distill-trainer (>=0.1.0, <=0.1.1), poetry-plugin-export (1.3.1) +1 more potentially affected by CVE-2026-41140 via poetry (1.5.0)

poetry PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - distill-trainer =0.1.0, =0.1.1 - poetry-plugin-export 1.3.1 - wolf-core 2.0.1 Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-2890...

poetry-plugin-export (>=1.0.7, <=1.1.1), poetry-plugin-tweak-dependencies-version (0.1.0) potentially affected by CVE-2026-41140 via poetry (1.2.1)

poetry PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - poetry-plugin-export =1.0.7, =1.1.1 - poetry-plugin-tweak-dependencies-version 0.1.0 Source cves: CVE-2026-41140 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), poetry-plugin-export (1.3.1) +1 more potentially affected by CVE-2026-41140 via poetry (1.5.0)

poetry PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - distill-trainer =0.1.0, =0.1.1 - poetry-plugin-export 1.3.1 - wolf-core 2.0.1 Source cves: CVE-2026-41140 Source advisory: OSV:GHSA-73H3-MF4W-8647...

poetry-plugin-export (1.0.4) potentially affected by CVE-2026-41140 via poetry (1.2.0b2)

poetry PYPI version 1.2.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - poetry-plugin-export 1.0.4 Source cves: CVE-2026-41140 Source advisory: OSV:GHSA-73H3-MF4W-8647...

pab (>=2.5.5, <=2.8.1), poetry-alias (0.1.0) +2 more potentially affected by CVE-2026-41140 via poetry (1.2.0b3)

poetry PYPI version 1.2.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - pab =2.5.5, =2.8.1 - poetry-alias 0.1.0 - poetry-plugin-export 1.0.5 - poetry-scaffold-plugin 0.1.0 Source cves: CVE-2026-41140 Source advisory:...