asc (>=0.1.0, <=0.3.1), candig-ingest (>=1.3.1, <=1.5.0) +6 more potentially affected by CVE-2026-0994 via protobuf (3.3.0)

protobuf PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - asc =0.1.0, =1.3.1, =1.0.1, =1.2.3, =2018.1.0, =0.0.0.dev1, =0.0.0.dev37 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

bunnieinfra (>=0.1.0, <=0.1.4), iconrpcserver (>=1.2.10, <=1.4.9) +2 more potentially affected by CVE-2026-0994 via protobuf (3.7.0)

protobuf PYPI version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bunnieinfra =0.1.0, =1.2.10, =0.1.0.dev0, =0.1.17.dev0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

blackfynn (>=2.4.1, <=3.0.0), dvc (>=0.8.2, <=0.8.6) potentially affected by CVE-2026-0994 via protobuf (3.2.0)

protobuf PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - blackfynn =2.4.1, =0.8.2, =0.8.6 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

bq-jobrunner (0.0.1), libp2p (>=0.1.1, <=0.1.2) +6 more potentially affected by CVE-2026-0994 via protobuf (3.9.0)

protobuf PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bq-jobrunner 0.0.1 - libp2p =0.1.1, =1.0.6, =0.0.20, =0.1.0a31, =1.2.0rc2, =1.2.0rc3, =1.2.0 Source cves: CVE-2026-0994 Source advisory:...

ai-flow (0.3.1), ai-flow-nightly (>=2022.9.19, <=2023.12.31) +19 more potentially affected by CVE-2026-0994 via protobuf (3.15.6)

protobuf PYPI version 3.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ai-flow 0.3.1 - ai-flow-nightly =2022.9.19, =0.1.0.2, =3.0.8rc6, =1.0.9, =0.0.1, =1.17.0b1, =1.14.0, =0.3.1, =0.3.73, =0.1.0, =2022.9.19,...

adsmsg (>=1.3.3, <=1.3.19), algo-bus-sdk (>=0.0.1, <=0.0.9) +77 more potentially affected by CVE-2026-0994 via protobuf (3.17.3)

protobuf PYPI version 3.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - adsmsg =1.3.3, =0.0.1, =0.0.3, =0.4.9, =1.1.1, =2.1.1, =0.2.1, =0.4.11, =0.0.0rc24, =2.0.0, =1.3.0rc1, =1.3.0rc1.dev588, =0.0.12, =0.1.4 and mo...

c7n-gcp (0.4.2), ciphey (3.5.7) +28 more potentially affected by CVE-2026-0994 via protobuf (3.12.2)

protobuf PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - c7n-gcp 0.4.2 - ciphey 3.5.7 - custos-sdk 1.0.2 - dagit =0.8.6rc1, =0.8.6rc1, =0.8.6rc1, =0.2.24, =0.1.12, =0.0.0, =1.15.0b1, =0.3.0, =0.3.1,...

cogdata (>=0.0.6, <=0.0.7), icetk (>=0.0.5, <=0.0.7) +3 more potentially affected by CVE-2026-0994 via protobuf (3.19.0rc2)

protobuf PYPI version 3.19.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cogdata =0.0.6, =0.0.5, =3.0.0a2, =4.7.2 - motion-master-proto 5.2.0 - tensorflow-checkpoint-reader 0.1.2 Source cves: CVE-2026-0994 Source...

adcl (>=0.1.2, <=0.1.4), akc-mamba (>=2.0.1, <=2.0.2) +22 more potentially affected by CVE-2026-0994 via protobuf (3.11.2)

protobuf PYPI version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - adcl =0.1.2, =2.0.1, =0.0.31, =0.1.8, =1.1.0, =0.1.0rc2.dev174, =1.0.0, =0.9.0, =0.0.76, =1.1.6, =0.2.0, =0.0.6, =0.0.12 and more Source cves:...

blackfynn (>=2.4.1, <=3.0.0), dvc (>=0.8.2, <=0.8.6) potentially affected by CVE-2025-4565 via protobuf (3.2.0)

protobuf PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - blackfynn =2.4.1, =0.8.2, =0.8.6 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

chemtsv2 (>=0.9.1, <=0.9.13), cohesion-pipeline (0.1.2) +8 more potentially affected by CVE-2025-4565 via protobuf (3.9.2)

protobuf PYPI version 3.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - chemtsv2 =0.9.1, =0.8.6, =0.8.7 - nerdvision 1.0.1 - pycloud-client 0.7.1 - qihoo-tensornet 0.208.0 - transactid 0.1.0a3 - zeebe-grpc 0.20.0.11...

femtocrux (0.2.2), meteva (>=1.7.3, <=1.8.0.1) +3 more potentially affected by CVE-2025-4565 via protobuf (3.20.0rc2)

protobuf PYPI version 3.20.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - femtocrux 0.2.2 - meteva =1.7.3, =0.1.0, =0.0.2, =0.5.2, =1.0.0a8 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

admobilizeapis (>=0.0.5, <=0.0.7), c3-reference (1.8.1) +8 more potentially affected by CVE-2025-4565 via protobuf (3.6.0)

protobuf PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - admobilizeapis =0.0.5, =1.1.4, =1.0.5, =1.9.1, =1.10.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

bq-jobrunner (0.0.1), libp2p (>=0.1.1, <=0.1.2) +6 more potentially affected by CVE-2025-4565 via protobuf (3.9.0)

protobuf PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bq-jobrunner 0.0.1 - libp2p =0.1.1, =1.0.6, =0.0.20, =0.1.0a31, =1.2.0rc2, =1.2.0rc3, =1.2.0 Source cves: CVE-2025-4565 Source advisory:...

bsk (2.8.33), bts-mlb (0.1.2) +41 more potentially affected by CVE-2025-4565 via protobuf (>=6.30.0, <=6.31.0)

protobuf PYPI version =6.30.0, =1.0.0, =4.0.7, =0.2.0b3, =1.0.1, =1.0.0, =1.10.0rc3, =0.0.0, =1.0.0rc1, =1.1.1 - isosegdenoise 0.1.2.dev310 and more Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

adsmsg (>=1.2.0, <=1.3.1), alphalogic-api3 (>=0.0.1, <=0.1.5) +62 more potentially affected by CVE-2025-4565 via protobuf (3.14.0)

protobuf PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - adsmsg =1.2.0, =0.0.1, =0.1.0, =0.7.2b4, =0.0.1, =1.47.0, =0.0.1.dev50, =1.0.2, =0.4.8, =0.3.5, =2.0.3, =0.1.1, =0.9.1, =0.9.4 and more Source...

0x-web3 (5.0.0a5), a42-proto (>=0.1.0, <=0.1.5) +2333 more potentially affected by CVE-2025-4565 via protobuf (3.20.3)

protobuf PYPI version 3.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - 0x-web3 5.0.0a5 - a42-proto =0.1.0, =2.1.2rc1, =0.0.1b1, =0.1.1, =0.1.0, =1.0.0, =3.3.0.2, =0.1.1619376243, =1.0.4, =0.0.3, =0.0.5 and more...

chemtsv2 (>=0.9.1, <=0.9.13), cohesion-pipeline (0.1.2) +8 more potentially affected by CVE-2026-0994 via protobuf (3.9.2)

protobuf PYPI version 3.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - chemtsv2 =0.9.1, =0.8.6, =0.8.7 - nerdvision 1.0.1 - pycloud-client 0.7.1 - qihoo-tensornet 0.208.0 - transactid 0.1.0a3 - zeebe-grpc 0.20.0.11...

femtocrux (0.2.2), meteva (>=1.7.3, <=1.8.0.1) +3 more potentially affected by CVE-2026-0994 via protobuf (3.20.0rc2)

protobuf PYPI version 3.20.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - femtocrux 0.2.2 - meteva =1.7.3, =0.1.0, =0.0.2, =0.5.2, =1.0.0a8 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

a2a-sdk (0.2.8), a7p (>=1.0.1rc2, <=1.0.2) +247 more potentially affected by CVE-2026-0994 via protobuf (>=6.30.0, <=6.33.4)

protobuf PYPI version =6.30.0, =1.0.1rc2, =0.1.3, =2025.12.2.2, =0.4.0rc1, =1.0.0, =1.0.29, =25.6.0b2, =1.2.0, =0.1.0, =0.2.1b20230930, =0.0.32, =1.3.0.dev4, =1.3.0 and more Source cves: CVE-2026-0994 Source advisory: GHSA-7GCM-G887-7QV7...