aac (>=0.1.10, <=0.5.21), aac-bom (>=0.0.1, <=0.0.4) +71 more potentially affected by CVE-2026-63374 via anyio (3.6.2)

anyio PYPI version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aac =0.1.10, =0.0.1, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =0.0.3, =0.1.1, =0.4.2, =0.0.1, =0.1.0, =0.3.0 and more Source cves: CVE-2026-63374 Sourc...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-86049 via jupyter-server (1.16.0)

jupyter-server PYPI version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

image-crawl (0.1.0), vimms (2.0.1) +1 more potentially affected by CVE-2026-86049 via jupyter-server (1.10.2)

jupyter-server PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - image-crawl 0.1.0 - vimms 2.0.1 - xircuits =1.0.0, =1.2.0 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

geometron (>=0.0.1.dev7, <=0.0.3), metaplex-python-api (>=1.0.0, <=1.3.0) +1 more potentially affected by CVE-2026-63374 via anyio (3.3.4)

anyio PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - geometron =0.0.1.dev7, =1.0.0, =1.4.46, =3.0.3 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

ohmyi3 (>=0.1.0, <=0.1.4), uvicore (>=0.1.15, <=0.1.25) potentially affected by CVE-2026-63374 via anyio (3.2.1)

anyio PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - ohmyi3 =0.1.0, =0.1.15, =0.1.25 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

fennel (0.3.0), runnel (>=0.1.0a2, <=0.1.0b1) +1 more potentially affected by CVE-2026-63374 via anyio (3.0.0rc4)

anyio PYPI version 3.0.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - fennel 0.3.0 - runnel =0.1.0a2, =0.8.0, =0.13.0 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

5mghost-rover (>=0.0.1, <=0.0.3), aaaai (>=0.1.3, <=0.3.0) +856 more potentially affected by CVE-2026-63374 via anyio (>=4.0.0rc1, <=4.14.1)

anyio PYPI version =4.0.0rc1, =0.0.1, =0.1.3, =0.6.0, =0.0.32, =0.0.1, =4.8.2, =0.1.3, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.1.31, =0.1.0, =0.0.2, =0.4.0rc1, =0.7.1 and more Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

mplfooty (>=0.0.1, <=0.2.0), total-points-model (>=1.0.3, <=1.0.5) potentially affected by CVE-2026-86049 via jupyter-server (1.23.4)

jupyter-server PYPI version 1.23.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mplfooty =0.0.1, =1.0.3, =1.0.5 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

asiva (>=1.0.1, <=1.3.1), jupyterlab-daisy (>=1.0.6, <=1.0.9) potentially affected by CVE-2026-86049 via jupyter-server (1.8.0)

jupyter-server PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - asiva =1.0.1, =1.0.6, =1.0.9 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

mdml (>=0.0.3, <=0.0.8) potentially affected by CVE-2026-86049 via jupyter-server (1.23.0)

jupyter-server PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mdml =0.0.3, =0.0.8 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

agl-ocr-reader (1.1.1), app-ocr (>=0.0.1, <=1.2.14) +7 more potentially affected by CVE-2026-63374 via anyio (3.7.0)

anyio PYPI version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - agl-ocr-reader 1.1.1 - app-ocr =0.0.1, =0.1.0, =0.0.1, =0.1.0, =1.2.0 - yt-fts 0.1.6 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) +2 more potentially affected by CVE-2026-86049 via jupyter-server (1.18.1)

jupyter-server PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

octomachinery (>=0.2.3, <=0.3.11), purerpc (>=0.2.0, <=0.3.2) potentially affected by CVE-2026-63374 via anyio (2.0.0rc2)

anyio PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - octomachinery =0.2.3, =0.2.0, =0.3.2 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

aio-net-events (0.2.0), aio-usb-hotplug (>=2.0.0, <=3.0.1) +11 more potentially affected by CVE-2026-64847 via anyio (2.2.0)

anyio PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aio-net-events 0.2.0 - aio-usb-hotplug =2.0.0, =0.9.1, =0.6.0, =0.1.0, =1.6.3, =0.0.1, =3.0.0, =0.1.0, =0.2.0 Source cves: CVE-2026-64847 Source...

5mghost-rover (>=0.0.1, <=0.0.3), aaaai (>=0.1.3, <=0.3.0) +856 more potentially affected by CVE-2026-64847 via anyio (>=4.0.0rc1, <=4.14.1)

anyio PYPI version =4.0.0rc1, =0.0.1, =0.1.3, =0.6.0, =0.0.32, =0.0.1, =4.8.2, =0.1.3, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.1.31, =0.1.0, =0.0.2, =0.4.0rc1, =0.7.1 and more Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

octomachinery (>=0.2.3, <=0.3.11), purerpc (>=0.2.0, <=0.3.2) potentially affected by CVE-2026-64847 via anyio (2.0.0rc2)

anyio PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - octomachinery =0.2.3, =0.2.0, =0.3.2 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

geometron (>=0.0.1.dev7, <=0.0.3), metaplex-python-api (>=1.0.0, <=1.3.0) +1 more potentially affected by CVE-2026-64847 via anyio (3.3.4)

anyio PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - geometron =0.0.1.dev7, =1.0.0, =1.4.46, =3.0.3 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

antistasi-logbook (>=0.3.2, <=0.4.2), anubis-policy-api (>=0.3.0, <=0.6.0) +9 more potentially affected by CVE-2026-64847 via anyio (3.5.0)

anyio PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - antistasi-logbook =0.3.2, =0.3.0, =1.0.0, =0.2.4, =0.1.7, =1.0.20.post9, =0.1.0, =0.18.2, =0.14.0, =0.15.0 - xircuits 1.3.0 Source cves: CVE-2026-6484...

mrx-link (>=0.8.2, <=1.2.0), mrx-link-core (>=1.2.0.dev1, <=1.3.2.dev1) +1 more potentially affected by CVE-2026-86049 via jupyter-server (1.17.0)

jupyter-server PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mrx-link =0.8.2, =1.2.0.dev1, =0.12.0.dev0, =1.0.2.dev1 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

immersim (1.0.3) potentially affected by CVE-2026-86049 via jupyter-server (1.23.1)

jupyter-server PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - immersim 1.0.3 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...