mrx-link (>=0.8.2, <=1.2.0), mrx-link-core (>=1.2.0.dev1, <=1.3.2.dev1) +1 more potentially affected by CVE-2026-86049 via jupyter-server (1.17.0)

jupyter-server PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mrx-link =0.8.2, =1.2.0.dev1, =0.12.0.dev0, =1.0.2.dev1 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

aindy-runtime (>=1.5.0, <=1.11.0), amarcord (>=1.5.0, <=1.5.2) +23 more potentially affected by CVE-2026-63349 via anyio (>=4.14.0, <=4.14.1)

anyio PYPI version =4.14.0, =1.5.0, =1.5.0, =0.0.3, =1.8.0, =0.10.2, =0.1.4, =2.19.0, =1.3.1, =0.1.1, =0.1.0, =0.0.1a1, =1.0.0a1, =0.0.1a1, =1.0.0 and more Source cves: CVE-2026-63349 Source advisory: OSV:PYSEC-2026-4023...

accomate (>=2.0.0a0, <=2.0.0.6), asyncrepo (>=0.0.6, <=0.0.9) +15 more potentially affected by CVE-2026-64847 via anyio (3.6.1)

anyio PYPI version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - accomate =2.0.0a0, =0.0.6, =0.1.0, =1.2.3, =0.0.6, =1.0.0, =1.0.0, =0.3.8, =0.3.20, =0.0.4, =0.3.5.dev2659611866, =0.2.0, =1.5.0 and more Source cves:...

3lc (>=2.3.84, <=2.6.4), a-data-processing (0.0.1) +2152 more potentially affected by CVE-2026-64847 via anyio (3.7.1)

anyio PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - 3lc =2.3.84, =0.1.0, =1.2.1b0, =0.1.0, =0.7.3.post0, =0.1.0, =0.1.0, =0.1.0, =0.14.0.3rc1, =0.0.12, =0.0.18 and more Source cves: CVE-2026-64847 Sourc...

fennel (0.3.0), runnel (>=0.1.0a2, <=0.1.0b1) +1 more potentially affected by CVE-2026-64847 via anyio (3.0.0rc4)

anyio PYPI version 3.0.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - fennel 0.3.0 - runnel =0.1.0a2, =0.8.0, =0.13.0 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

aiojarm (>=0.2.0, <=0.2.1), aiometer (>=0.1.0, <=0.2.1) +11 more potentially affected by CVE-2026-64847 via anyio (1.4.0)

anyio PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aiojarm =0.2.0, =0.1.0, =0.2.0, =0.2.0rc1, =0.1.3, =0.0.15, =0.0.2, =0.1.3, =0.4.1, =0.6.1 - roboto-telegram 0.3.0 - runnel 0.1.0a1 - sitemaps 0.1.0...

aiopath (0.6.6), nectarifere (>=2.0.1, <=2.4.0) +1 more potentially affected by CVE-2026-64847 via anyio (3.0.1)

anyio PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aiopath 0.6.6 - nectarifere =2.0.1, =0.5.0, =0.6.0 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

image-crawl (0.1.0), vimms (2.0.1) +1 more potentially affected by CVE-2026-86049 via jupyter-server (1.10.2)

jupyter-server PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - image-crawl 0.1.0 - vimms 2.0.1 - xircuits =1.0.0, =1.2.0 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-86049 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

filecrawl (>=1.0.0b0, <=1.0.0), framler (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-85999 via soupsieve (1.8.0)

soupsieve PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - filecrawl =1.0.0b0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

boj2md (>=0.0.1, <=0.0.2), desktopscoreviewer (>=1.0.2, <=1.0.3) +3 more potentially affected by CVE-2026-85999 via soupsieve (1.9.1)

soupsieve PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - boj2md =0.0.1, =1.0.2, =0.2.0, =1.3.7, =1.4.4 - subtidal 1.0.0 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

spotichart (>=0.6.0, <=1.0.0), watertools (>=0.0.2, <=0.0.3) potentially affected by CVE-2026-85999 via soupsieve (1.9.4)

soupsieve PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - spotichart =0.6.0, =0.0.2, =0.0.3 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

basketball-reference-scraper (>=1.0.1, <=1.0.31), bsdownloader (>=0.2.0, <=0.2.1) +21 more potentially affected by CVE-2026-85999 via soupsieve (1.9.5)

soupsieve PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - basketball-reference-scraper =1.0.1, =0.2.0, =0.0.31, =0.1.0, =0.4.0, =0.1.2.5, =3.1.7, =2.3.0, =0.1.1, =0.0.1, =0.0.2, =0.0.3 and more Source...

vitamin-b (>=0.1.0, <=0.2.2) potentially affected by CVE-2026-85999 via soupsieve (1.9.3)

soupsieve PYPI version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - vitamin-b =0.1.0, =0.2.2 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

khed (0.0.1) potentially affected by CVE-2026-86000 via soupsieve (1.6.2)

soupsieve PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - khed 0.0.1 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

spotichart (>=0.6.0, <=1.0.0), watertools (>=0.0.2, <=0.0.3) potentially affected by CVE-2026-86000 via soupsieve (1.9.4)

soupsieve PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - spotichart =0.6.0, =0.0.2, =0.0.3 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

filecrawl (>=1.0.0b0, <=1.0.0), framler (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-86000 via soupsieve (1.8.0)

soupsieve PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - filecrawl =1.0.0b0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

9gag-scraper (>=0.0.6, <=0.0.7), euroleague-scrapping (>=0.0.1.dev10, <=0.0.1.dev21) potentially affected by CVE-2026-86000 via soupsieve (1.9.6)

soupsieve PYPI version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - 9gag-scraper =0.0.6, =0.0.1.dev10, =0.0.1.dev21 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

1337x (1.2.5), 8a-scraper (>=0.0.2, <=0.0.4) +667 more potentially affected by CVE-2026-86000 via soupsieve (>=2.0.0, <=2.8.4)

soupsieve PYPI version =2.0.0, =0.0.2, =1.0.4, =0.1.3, =1.0.0, =0.4.0, =1.2.3, =0.2.0, =0.87.2.dev9, =0.24.0, =0.1.0.dev19, =1.3.0, =0.1.0, =1.3.0, =1.3.3 and more Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

basketball-reference-scraper (>=1.0.1, <=1.0.31), bsdownloader (>=0.2.0, <=0.2.1) +21 more potentially affected by CVE-2026-86000 via soupsieve (1.9.5)

soupsieve PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - basketball-reference-scraper =1.0.1, =0.2.0, =0.0.31, =0.1.0, =0.4.0, =0.1.2.5, =3.1.7, =2.3.0, =0.1.1, =0.0.1, =0.0.2, =0.0.3 and more Source...