promptulate (1.9.0) potentially affected by CVE-2026-59823 via litellm (0.12.12)

litellm PYPI version 0.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - promptulate 1.9.0 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

fastrepl (>=0.0.21, <=0.0.25), funcflow (0.0.3) +2 more potentially affected by CVE-2026-59823 via litellm (0.8.6)

litellm PYPI version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - fastrepl =0.0.21, =0.0.5, =0.0.9 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

fastrepl (>=0.0.17, <=0.0.18) potentially affected by CVE-2026-59823 via litellm (0.2.6)

litellm PYPI version 0.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - fastrepl =0.0.17, =0.0.18 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

otter-ai (>=0.0.0a0, <=0.0.0a5) potentially affected by CVE-2026-59823 via litellm (0.1.400)

litellm PYPI version 0.1.400 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - otter-ai =0.0.0a0, =0.0.0a5 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

fpx (>=0.0.0.dev1, <=0.3.4), pepperbot (>=0.1.0, <=0.1.2) +11 more potentially affected by CVE-2026-85078 via sanic (20.12.7)

sanic PYPI version 20.12.7 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - fpx =0.0.0.dev1, =0.1.0, =2.6.3, =2.0.0a5, =0.0.9, =0.0.7, =0.9.4.post2, =0.5.5, =0.0.1, =0.0.2, =0.6.1a1, =1.0.0a4 Source cves: CVE-2026-85078 Sour...

dektools (>=0.1.0, <=0.1.117), dothttp-req (>=0.0.41a1, <=0.0.42a1) potentially affected by CVE-2026-76825 via restrictedpython (5.2.0)

restrictedpython PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dektools =0.1.0, =0.0.41a1, =0.0.42a1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

artificienlib (>=0.1.1, <=0.1.6), syft (>=0.2.8, <=0.2.9) +8 more potentially affected by CVE-2026-76825 via restrictedpython (5.4.0)

restrictedpython PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - artificienlib =0.1.1, =0.2.8, =0.0.333, =0.0.27, =0.0.70, =0.0.126, =0.0.31, =0.0.30, =0.0.14, =0.0.26 Source cves: CVE-2026-768...

discodo (>=2.3.3, <=2.3.6), klldfn (>=1.9.9, <=2.8.12) potentially affected by CVE-2026-85078 via sanic (20.12.0)

sanic PYPI version 20.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - discodo =2.3.3, =1.9.9, =2.8.12 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2026-59823 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

discodo (>=2.3.12.2, <=2.3.13), ssh2http (0.1.0) +1 more potentially affected by CVE-2026-85078 via sanic (20.12.2)

sanic PYPI version 20.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - discodo =2.3.12.2, =1.0.0a5, =1.1.0.1 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

battlehack20 (>=1.0.0, <=1.1.0), battlehack20-fancyviewer (>=1.0.1, <=1.0.5) potentially affected by CVE-2026-76825 via restrictedpython (4.0.0b4)

restrictedpython PYPI version 4.0.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - battlehack20 =1.0.0, =1.0.1, =1.0.5 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87014 via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87014 Source advisory: OSV:PYSEC-2026-4127...

hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87015 via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87015 Source advisory: OSV:PYSEC-2026-4124...

hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87011 via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87011 Source advisory: OSV:PYSEC-2026-4117...

hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87013 via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87013 Source advisory: OSV:PYSEC-2026-4121...

aimmo (>=2.9.1, <=2.10.8), arches (>=6.2.4, <=7.4.1) +16 more potentially affected by CVE-2026-15307 via django (3.2.20)

django PYPI version 3.2.20 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.9.1, =6.2.4, =6.33.2, =6.33.2, =4.1.1, =0.107.0rc1, =0.1.1, =0.12.0rc1, =1.8.2, =4.3.10, =4.6.0, =1.6.0, =5.11.1, =5.15.0 and more Source...

aldryn-django (4.2.7.0), cypartagraphqlsubscriptionstools (>=2.0.0, <=4.1.7) +14 more potentially affected by CVE-2026-15307 via django (4.2.7)

django PYPI version 4.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.7.0 - cypartagraphqlsubscriptionstools =2.0.0, =7.2.8, =0.22.1, =1.0.0, =2.5.3, =0.39.0, =2.0.1rc1, =0.38.0rc1, =21.8.0, =21.9.0 -...

apis-core (>=0.14.0, <=0.14.2), caluma (>=6.5.0, <=6.6.0) potentially affected by CVE-2026-15307 via django (2.2.16)

django PYPI version 2.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - apis-core =0.14.0, =6.5.0, =6.6.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

admin-auth0 (>=0.1.1, <=0.1.5), directory-api-client (>=26.4.0, <=26.4.2) +15 more potentially affected by CVE-2026-15307 via django (4.2.3)

django PYPI version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - admin-auth0 =0.1.1, =26.4.0, =7.2.5, =0.2.0, =0.0.1, =0.0.5, =0.6.0, =2.0.0rc27, =1.7.2, =0.1.4, =0.69.0, =0.70.0 and more Source cves: CVE-2026-153...

backstage-oauth2 (>=0.1.7, <=0.1.8), dbaas-aclapi (>=0.1.17, <=1.0.14) +1 more potentially affected by CVE-2026-15307 via django (1.6.10)

django PYPI version 1.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - backstage-oauth2 =0.1.7, =0.1.17, =1.0.14 - django-pesapal 0.2.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...