aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +133 more potentially affected by CVE-2026-105752 via vllm (>=0.1.3, <=0.29.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.5.1 and more Source cves: CVE-2026-105752 Source advisory: SNYK:PYTHON-VLLM-20574182...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +133 more potentially affected by CVE-2025-46570 +1 more via vllm (>=0.1.3, <=0.29.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.5.1 and more Source cves: CVE-2025-46570, CVE-2026-105752 Source advisory: GHSA-935W-9G4M-P28P...

bentodev (>=0.1.17, <=2018.11.2), biweeklybudget (>=0.1.0, <=0.7.0) +4 more potentially affected by CVE-2026-102598 via werkzeug (0.12.1)

werkzeug PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - bentodev =0.1.17, =0.1.0, =0.1.48, =0.1.0, =0.2.5 - spiderkeeper-zam 1.2.2 Source cves: CVE-2026-102598 Source advisory: OSV:GHSA-G6X2-HCCM-HH4...

aaz-dev (>=1.0.2, <=2.10.1), adminui (1.5.2) +190 more potentially affected by CVE-2026-102598 via werkzeug (2.1.2)

werkzeug PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aaz-dev =1.0.2, =1.5.2, =0.14.0, =0.0.1a0, =1.5.0, =1.1.1, =2.6.0, =1.0.5, =1.7.1, =1.3.0, =3.1.0, =1.45.0, =1.47.0 and more Source cves:...

satosa (>=2.0.0, <=2.1.1) potentially affected by CVE-2026-102598 via werkzeug (0.11.2)

werkzeug PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - satosa =2.0.0, =2.1.1 Source cves: CVE-2026-102598 Source advisory: OSV:GHSA-G6X2-HCCM-HH4M...

autorad (>=0.1.2, <=0.2.5), aws-flask-lambda (>=0.1.0, <=0.1.2) +54 more potentially affected by CVE-2026-102598 via werkzeug (2.0.2)

werkzeug PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - autorad =0.1.2, =0.1.0, =0.0.1, =0.9.2, =0.0.1, =0.1.0, =0.4.9, =3.1.141, =0.8.0.dev6, =1.0.0, =1.0.0, =0.16.0, =0.1.0, =1.0.0 and more Source...

abilian-sbe (1.0.5), abilian-sbe-next (1.0.4) +159 more potentially affected by CVE-2026-102598 via werkzeug (2.0.3)

werkzeug PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - abilian-sbe 1.0.5 - abilian-sbe-next 1.0.4 - actinia-core 4.9.0 - aiqc =5.0.1, =0.3.2, =4.1.0, =3.11.0, =4.0.0, =0.8.0, =0.0.7, =5.2.15, =0.18.1...

anitya (1.8.1), datarobot-drum (>=1.10.0.dev2, <=1.10.11) +5 more potentially affected by CVE-2026-102598 via werkzeug (2.3.4)

werkzeug PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.1 - datarobot-drum =1.10.0.dev2, =0.0.13, =3.2.4, =3.9.0rc4, =4.1.3 Source cves: CVE-2026-102598 Source advisory:...

avalon-core (5.2.7), cheetay-logs (1.0.6) +24 more potentially affected by CVE-2026-96749 via pymongo (3.8.0)

pymongo PYPI version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - avalon-core 5.2.7 - cheetay-logs 1.0.6 - cloudmarker 0.1.0 - convo-nlu 0.1.0 - convo5 0.1.0 - convo6 0.1.0 - convo7 0.1.0 - convoxxx 0.1.0 -...

autotm (>=0.2.3.2, <=0.2.3.4), bolinette (>=0.7.7, <=0.10.0) +10 more potentially affected by CVE-2026-96749 via pymongo (3.11.3)

pymongo PYPI version 3.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - autotm =0.2.3.2, =0.7.7, =0.3.2, =2.0.34, =2.0.3, =0.1.0, =0.0.2, =0.1.19, =0.1.11, =0.1.33 Source cves: CVE-2026-96749 Source advisory:...

airvue-gn (>=0.0.1, <=0.0.2), ax-env (>=0.2.2, <=0.3.0) +22 more potentially affected by CVE-2026-96749 via pymongo (3.12.3)

pymongo PYPI version 3.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - airvue-gn =0.0.1, =0.2.2, =0.1.0, =0.1.12, =0.1.12, =0.1.21, =0.3.2, =0.1.0.dev1, =1.1.0b37, =3.1.1, =0.0.11, =0.0.12 and more Source cves:...

appkernel (>=1.0.1, <=1.2.4), blockchain-etl (>=0.1.29, <=0.1.31) +2 more potentially affected by CVE-2026-96749 via pymongo (3.7.1)

pymongo PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - appkernel =1.0.1, =0.1.29, =2.0.0, =2.7.2 - optimuspyspark 2.1.0 Source cves: CVE-2026-96749 Source advisory: OSV:GHSA-V4X9-3549-CRWV...

bolinette (>=0.6.11, <=0.7.6), cvexplore (>=0.1.3, <=0.1.6) +14 more potentially affected by CVE-2026-96749 via pymongo (3.11.2)

pymongo PYPI version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bolinette =0.6.11, =0.1.3, =0.0.1, =0.0.3, =1.1.0b1, =1.0.2, =1.1.2, =0.0.2, =0.0.6 - scrapy-plus 1.0.5 and more Source cves: CVE-2026-96749 Sour...

askbob (>=0.0.3, <=0.0.4), autoneuro-pypi (1.0.0) +46 more potentially affected by CVE-2026-96749 via pymongo (3.10.1)

pymongo PYPI version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - askbob =0.0.3, =1.1.0, =1.1.0, =0.0.3, =1.3.7, =0.0.5, =0.0.2, =0.0.0, =0.0.13 - deeppavlov-agent 2.3.0a0 - discord-fate-bot 0.1.1 - dragg 0.0.0 ...

2d6io-cryptobot (0.0.1), academic-metrics (>=0.1.0b0, <=1.0.99) +1383 more potentially affected by CVE-2026-96748 via pymongo (>=3.5.0, <=4.18.1)

pymongo PYPI version =3.5.0, =0.1.0b0, =1.0.4, =0.9.0, =0.4.2, =0.3.0, =3.6.0, =0.0.1.dev0, =0.1.0, =0.1.23, =1.1.5, =1.3.2 - ai-flow 0.3.1 and more Source cves: CVE-2026-96748 Source advisory: GHSA-VP6J-J7W5-5XJJ...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +133 more potentially affected by CVE-2026-105755 via vllm (>=0.1.3, <=0.29.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.5.1 and more Source cves: CVE-2026-105755 Source advisory: GHSA-2PHQ-3PHC-84PX...

appkernel (>=1.0.1, <=1.2.4), blockchain-etl (>=0.1.29, <=0.1.31) +2 more potentially affected by CVE-2026-88029 via pymongo (3.7.1)

pymongo PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - appkernel =1.0.1, =0.1.29, =2.0.0, =2.7.2 - optimuspyspark 2.1.0 Source cves: CVE-2026-88029 Source advisory: OSV:GHSA-8FVV-FGR5-F8CH...

edx-enterprise (>=0.40.6, <=0.42.0) potentially affected by CVE-2026-88029 via pymongo (3.5.0)

pymongo PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - edx-enterprise =0.40.6, =0.42.0 Source cves: CVE-2026-88029 Source advisory: OSV:GHSA-8FVV-FGR5-F8CH...

autotm (>=0.2.3.2, <=0.2.3.4), bolinette (>=0.7.7, <=0.10.0) +10 more potentially affected by CVE-2026-88029 via pymongo (3.11.3)

pymongo PYPI version 3.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - autotm =0.2.3.2, =0.7.7, =0.3.2, =2.0.34, =2.0.3, =0.1.0, =0.0.2, =0.1.19, =0.1.11, =0.1.33 Source cves: CVE-2026-88029 Source advisory:...

avalon-core (5.2.7), cheetay-logs (1.0.6) +24 more potentially affected by CVE-2026-88029 via pymongo (3.8.0)

pymongo PYPI version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - avalon-core 5.2.7 - cheetay-logs 1.0.6 - cloudmarker 0.1.0 - convo-nlu 0.1.0 - convo5 0.1.0 - convo6 0.1.0 - convo7 0.1.0 - convoxxx 0.1.0 -...