hubzoid (>=0.7.15, <=0.9.6), openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-87999 via open-webui (>=0.6.0, <=0.11.0)

open-webui PYPI version =0.6.0, =0.7.15, =0.9.6 - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-87999 Source advisory: OSV:PYSEC-2026-4116...

django-codenerix (1.0.0), django-pre-post (1.0.0) +2 more potentially affected by CVE-2026-15307 via django (1.10.6)

django PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-codenerix 1.0.0 - django-pre-post 1.0.0 - teamvault =0.7.0, =0.2.5, =0.3.0.dev14 Source cves: CVE-2026-15307 Source advisory:...

acclaim-badges (0.1.0), aimmo (>=0.1.0b2696.post0.dev1, <=0.27.4b5229) +100 more potentially affected by CVE-2026-15307 via django (1.10.8)

django PYPI version 1.10.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - acclaim-badges 0.1.0 - aimmo =0.1.0b2696.post0.dev1, =0.2.1, =2.0.0, =0.3.1, =2.1.1.16070820, =2.1.1.16072018, =2.1.1.16070812, =1.0.0, =1.1.0 -...

edc (>=0.3.14, <=0.3.16), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2026-15307 via django (3.1.8)

django PYPI version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.14, =0.3.16 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +177 more potentially affected by CVE-2026-15307 via django (4.0.10)

django PYPI version 4.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aa-charlink =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.7.0, =2.0.0, =0.24.0, =1.0.3 - coop 2.16.0 a...

geonode (4.4.5), mayan-edms (>=4.6.13, <=4.7.9) +4 more potentially affected by CVE-2026-15307 via django (4.2.29)

django PYPI version 4.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - geonode 4.4.5 - mayan-edms =4.6.13, =7.4.0, =7.4.0, =4.0.17, =4.0.18 - pheme 21.12.1 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-40...

aileen (>=0.2.0.dev20181221, <=0.2.1), scdna-replication-tools (0.0.1) potentially affected by CVE-2026-15307 via django (1.11.16)

django PYPI version 1.11.16 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aileen =0.2.0.dev20181221, =0.2.1 - scdna-replication-tools 0.0.1 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

cosmicdb (>=0.0.1, <=0.0.14), recarguide (0.0.1) potentially affected by CVE-2026-15307 via django (1.11.6)

django PYPI version 1.11.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdb =0.0.1, =0.0.14 - recarguide 0.0.1 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

amapy-server (>=1.0.1, <=1.0.2), arm-rag-testing (>=0.0.1, <=7.7.9) +16 more potentially affected by CVE-2026-68770 via sentence-transformers (3.2.1)

sentence-transformers PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - amapy-server =1.0.1, =0.0.1, =0.8.26, =0.0.1, =0.1.1, =0.1.5, =0.5.0, =0.1.3, =1.0.2, =1.0.11 and more Source cves:...

esco-skill-extractor (>=0.1.9, <=0.1.10), graphreader (0.0.1) +2 more potentially affected by CVE-2026-68770 via sentence-transformers (3.2.0)

sentence-transformers PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - esco-skill-extractor =0.1.9, =0.1.10, =0.1.11 - openexcept 0.1.0 Source cves: CVE-2026-68770 Source advisory:...

aana (>=0.2.1, <=0.2.2.2), acace-compression-engine (0.1.0) +222 more potentially affected by CVE-2026-68770 via sentence-transformers (2.7.0)

sentence-transformers PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - aana =0.2.1, =0.0.2, =0.0.1, =1.1.74b0, =0.1.2, =0.1.1, =0.1.2, =0.1.0, =0.0.4, =0.1.8, =1.0.0, =1.0.5, =1.0.7 and mor...

smartgenai (>=0.1.0.0, <=0.1.0.1) potentially affected by CVE-2026-68770 via sentence-transformers (2.6.0)

sentence-transformers PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - smartgenai =0.1.0.0, =0.1.0.1 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

algorin-cli (>=0.0.1, <=0.21.0) potentially affected by CVE-2026-68770 via sentence-transformers (2.5.0)

sentence-transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - algorin-cli =0.0.1, =0.21.0 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

chat-with-mlx (>=0.1.0, <=0.1.11), raga-llm-eval (>=2.0.0a12, <=2.0.0b27) +1 more potentially affected by CVE-2026-68770 via sentence-transformers (2.4.0)

sentence-transformers PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - chat-with-mlx =0.1.0, =2.0.0a12, =2.0.0b27 - ragcar 0.1.0 Source cves: CVE-2026-68770 Source advisory:...

aces-metric (>=0.0.3, <=0.0.4), adv-bible-search (>=0.1.0, <=0.1.1) +154 more potentially affected by CVE-2026-68770 via sentence-transformers (2.2.2)

sentence-transformers PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - aces-metric =0.0.3, =0.1.0, =0.1.5, =1.2.3, =0.8.0, =1.0.1, =0.0.5.dev0, =0.1.0, =0.1.5.1, =0.1.1, =0.0.2, =0.0.5,...

compcor (>=1.0.5, <=1.0.6) potentially affected by CVE-2026-68770 via sentence-transformers (2.2.1)

sentence-transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - compcor =1.0.5, =1.0.6 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

byudml (>=0.7.2, <=0.7.3), mmt-retrieval (0.1.2) +1 more potentially affected by CVE-2026-68770 via sentence-transformers (1.2.1)

sentence-transformers PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - byudml =0.7.2, =0.0.4, =0.0.12 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

concept (>=0.0.1, <=0.2.1), semantic-search-faiss (>=0.0.3, <=0.1.0) potentially affected by CVE-2026-68770 via sentence-transformers (1.2.0)

sentence-transformers PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - concept =0.0.1, =0.0.3, =0.1.0 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

hypertag (>=0.4.0, <=0.6.3.3.1), pororo (0.3.1) potentially affected by CVE-2026-68770 via sentence-transformers (0.4.1.2)

sentence-transformers PYPI version 0.4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - hypertag =0.4.0, =0.6.3.3.1 - pororo 0.3.1 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

russian-paraphrasers (0.0.3) potentially affected by CVE-2026-68770 via sentence-transformers (0.4.0)

sentence-transformers PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - russian-paraphrasers 0.0.3 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...