bblib (>=0.1.1, <=3.1.0), beambusters (>=1.0.0, <=3.1.0) +7 more potentially affected by CVE-2026-102938 via virtualenv (20.25.1)

virtualenv PYPI version 20.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - bblib =0.1.1, =1.0.0, =1.0.1, =0.8.4, =0.0.2, =0.0.1, =0.7.30, =1.0.0, =1.0.3, =1.0.8 Source cves: CVE-2026-102938 Source advisory:...

geotify (>=0.1.0, <=0.2.0), plutomanager (0.2.0) potentially affected by CVE-2026-102938 via virtualenv (20.25.2)

virtualenv PYPI version 20.25.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - geotify =0.1.0, =0.2.0 - plutomanager 0.2.0 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

optimizo (>=1.2.0, <=1.3.0), pencil-pusher (1.6.1) potentially affected by CVE-2026-102938 via virtualenv (20.4.7)

virtualenv PYPI version 20.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - optimizo =1.2.0, =1.3.0 - pencil-pusher 1.6.1 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

5gasp-cli (>=0.1.0, <=0.4.0), appcensus-dynamic-repos (0.6.1.91) +33 more potentially affected by CVE-2026-102938 via virtualenv (20.21.1)

virtualenv PYPI version 20.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - 5gasp-cli =0.1.0, =1.1.2, =1.3.0rc1, =1.5.9, =2.3.0, =0.0.88, =0.7.7, =1.0.3, =24.9.958497, =0.5.2, =0.6.0, =0.6.4 and more Source cves:...

pkg-15903 (>=0.1.10, <=0.1.18), py-package-updater (>=0.1.1, <=0.1.3) +3 more potentially affected by CVE-2026-102938 via virtualenv (20.29.3)

virtualenv PYPI version 20.29.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pkg-15903 =0.1.10, =0.1.1, =0.1.1, =1.0.9 - ten8t 0.0.22 - tidyfiles 0.6.3 Source cves: CVE-2026-102938 Source advisory:...

hip-data-ml-utils (>=1.0.1, <=1.0.2), pytoil (0.35.0) potentially affected by CVE-2026-102938 via virtualenv (20.16.3)

virtualenv PYPI version 20.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hip-data-ml-utils =1.0.1, =1.0.2 - pytoil 0.35.0 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

ablator (0.0.1b3), apollo-sdk (>=0.2.0, <=0.2.11) +29 more potentially affected by CVE-2026-102938 via virtualenv (20.21.0)

virtualenv PYPI version 20.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ablator 0.0.1b3 - apollo-sdk =0.2.0, =0.8.3b20231012, =0.8.3b20231012, =0.6.1, =1.2.1, =0.1.3, =0.7.2, =0.2.8, =0.0.1, =1.7.16, =0.4.0rc6,...

aeso-mcp (>=0.2.0, <=0.3.0), aia-read-svc (>=0.5.1, <=0.6.2) +468 more potentially affected by CVE-2026-102938 via virtualenv (20.39.1)

virtualenv PYPI version 20.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aeso-mcp =0.2.0, =0.5.1, =2023.2.21, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.6.4, =0.2.0rc3, =0.1.0, =0.1.8 - api-buddy 0.5.0...

algo-crawler (>=0.0.1, <=0.0.2), omdenalore (0.2.10) +1 more potentially affected by CVE-2026-102938 via virtualenv (20.7.2)

virtualenv PYPI version 20.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - algo-crawler =0.0.1, =0.1.2, =0.1.3 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

pokpok-sdk (>=0.1.3, <=0.1.6) potentially affected by CVE-2026-102938 via virtualenv (20.29.1)

virtualenv PYPI version 20.29.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pokpok-sdk =0.1.3, =0.1.6 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

chemscad (>=2.0.1.post4, <=2.0.2) potentially affected by CVE-2026-102938 via virtualenv (20.0.31)

virtualenv PYPI version 20.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chemscad =2.0.1.post4, =2.0.2 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

hmd-cli-repo (>=0.2.81, <=0.3.141), neuronsphere (>=1.0.2, <=1.0.50) +1 more potentially affected by CVE-2026-102938 via virtualenv (20.13.2)

virtualenv PYPI version 20.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hmd-cli-repo =0.2.81, =1.0.2, =1.0.50 - pytoil 0.27.0 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

chemscad (2.0.3), pcapprocessor (0.1.0) +3 more potentially affected by CVE-2026-102938 via virtualenv (20.8.1)

virtualenv PYPI version 20.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chemscad 2.0.3 - pcapprocessor 0.1.0 - pickley =3.0.6, =0.0.9, =1.61.0, =1.66.4 Source cves: CVE-2026-102938 Source advisory:...

pattooshared (>=0.0.95, <=0.0.120) potentially affected by CVE-2026-102938 via virtualenv (20.0.30)

virtualenv PYPI version 20.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pattooshared =0.0.95, =0.0.120 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

nova-prompt-optimizer (>=1.0.48, <=1.1.0), pkg-15903 (>=0.1.20, <=0.1.55) +9 more potentially affected by CVE-2026-102938 via virtualenv (20.31.2)

virtualenv PYPI version 20.31.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - nova-prompt-optimizer =1.0.48, =0.1.20, =0.1.1, =0.1.0, =1.0.0, =0.4.9, =0.5.3 Source cves: CVE-2026-102938 Source advisory:...

aiida-core (>=1.0.0, <=1.5.3), aiogremlin (>=3.3.3, <=3.3.4) +80 more potentially affected by CVE-2026-103261 via tornado (4.5.3)

tornado PYPI version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - aiida-core =1.0.0, =3.3.3, =1.1.8, =3.9.0, =0.11.0rc1, =1.0.0, =0.1.1, =0.27.1, =2.0.3, =0.15.0, =0.1.0, =0.0.0, =0.0.3 and more Source cves:...

bokcolmaps (>=0.1.0, <=0.2.1), bokodapviewer (>=0.1.0, <=0.1.1) +8 more potentially affected by CVE-2026-103261 via tornado (4.4.2)

tornado PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - bokcolmaps =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.4, =0.1.7, =0.0.1, =0.0.14 Source cves: CVE-2026-103261 Source advisory: OSV:GHSA-3HV7-MJH2-FV65...

torext (0.10.0) potentially affected by CVE-2026-103261 via tornado (3.0.0)

tornado PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - torext 0.10.0 Source cves: CVE-2026-103261 Source advisory: OSV:GHSA-3HV7-MJH2-FV65...

monasca-agent (1.1.20), rejected (>=3.12.0, <=3.19.9) +1 more potentially affected by CVE-2026-103261 via tornado (4.2.1)

tornado PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - monasca-agent 1.1.20 - rejected =3.12.0, =1.0.0, =1.4.0 Source cves: CVE-2026-103261 Source advisory: OSV:GHSA-3HV7-MJH2-FV65...

abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +779 more potentially affected by unknown CVE via tornado (>=6.0.0b1, <=6.5.8)

tornado PYPI version =6.0.0b1, =0.0.0, =0.2.2, =0.7.3, =0.3.0, =0.4.0, =0.2.0, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.3.1 and more Source cves: unknown CVE Source advisory: GHSA-3HV7-MJH2-FV65...