magms (>=1.1.0, <=2.0.2) potentially affected by CVE-2026-100843 via monai (0.9.1)

monai PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - magms =1.1.0, =2.0.2 Source cves: CVE-2026-100843 Source advisory: OSV:PYSEC-2026-4018...

monailabel (>=0.2.0rc2, <=0.2.0), monailabel-weekly (>=0.3.0.dev2139, <=0.3.0.dev2147) +1 more potentially affected by CVE-2026-100843 via monai (0.7.0)

monai PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - monailabel =0.2.0rc2, =0.3.0.dev2139, =0.1.0, =0.1.1 Source cves: CVE-2026-100843 Source advisory: OSV:PYSEC-2026-4018...

autorad (0.1.2), monailabel (0.3.0) +2 more potentially affected by CVE-2026-100843 via monai (0.8.0)

monai PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - autorad 0.1.2 - monailabel 0.3.0 - monailabel-weekly =0.3.0.dev2150, =0.1.2, =0.1.4 Source cves: CVE-2026-100843 Source advisory: OSV:PYSEC-2026-4018...

magms (>=1.1.0, <=2.0.2) potentially affected by CVE-2026-100844 via monai (0.9.1)

monai PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - magms =1.1.0, =2.0.2 Source cves: CVE-2026-100844 Source advisory: OSV:PYSEC-2026-4019...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +38 more potentially affected by CVE-2026-100843 via monai (>=1.0.0, <=1.5.2)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =1.0.1a5 and more Source cves: CVE-2026-100843 Source advisory: OSV:PYSEC-2026-4018...

monailabel (0.4.1), monailabel-weekly (0.4.0.dev2228) +2 more potentially affected by CVE-2026-100840 via monai (0.9.0)

monai PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - monailabel 0.4.1 - monailabel-weekly 0.4.0.dev2228 - neurips-cellseg-gc =0.0.1, =0.1.5, =0.1.10 Source cves: CVE-2026-100840 Source advisory:...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +38 more potentially affected by CVE-2026-100846 via monai (>=1.0.0, <=1.5.2)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =1.0.1a5 and more Source cves: CVE-2026-100846 Source advisory: MEND:CVE-2026-100846...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +52 more potentially affected by CVE-2026-100845 via monai (>=0.4.0, <=1.5.2)

monai PYPI version =0.4.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.1.0, =0.0.5, =0.1.0, =0.0.3, =6.0.0rc1, =6.1.1 and more Source cves: CVE-2026-100845 Source advisory: MEND:CVE-2026-100845...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +33 more potentially affected by CVE-2026-100844 via monai (>=1.2.0, <=1.5.2)

monai PYPI version =1.2.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.3.1, =0.0.3, =0.1.1, =1.0.1a4, =0.0.18.dev20240127, =0.1.6.dev20260211 - imsy-htc 0.0.10 and more Source cves: CVE-2026-100844 Source advisory: MEND:CVE-2026-100844...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +52 more potentially affected by CVE-2026-100841 via monai (>=0.4.0, <=1.6.0)

monai PYPI version =0.4.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.1.0, =0.0.5, =0.1.0, =0.0.3, =6.0.0rc1, =6.1.1 and more Source cves: CVE-2026-100841 Source advisory: MEND:CVE-2026-100841...

Malicious code in donutautosellsrc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef01bfa158639900e5ad9301eb32db37e7dab821e55ccff29574b905a8e5a2cb setup.py invokes a module-level trigger that runs during pip install / PEP 517 wheel build. The trigger calls donutautosellsrc.build.run, which...

MAL-2026-17192 Malicious code in donutautosellsrc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef01bfa158639900e5ad9301eb32db37e7dab821e55ccff29574b905a8e5a2cb setup.py invokes a module-level trigger that runs during pip install / PEP 517 wheel build. The trigger calls donutautosellsrc.build.run, which...

hubzoid (>=0.7.15, <=0.9.6) potentially affected by unknown CVE via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: unknown CVE Source advisory: MEND:WS-2026-0092...

MAL-2026-17191 Malicious code in requests-cache-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1655ea47fc7ccd39294203776ee3dcb01a394c40d93e05b7b527700b19de42c8 During installation and importing the module, the code downloads and executes an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in requests-cache-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1655ea47fc7ccd39294203776ee3dcb01a394c40d93e05b7b527700b19de42c8 During installation and importing the module, the code downloads and executes an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +132 more potentially affected by CVE-2026-100647 via vllm (>=0.1.3, <=0.28.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =0.0.38 and more Source cves: CVE-2026-100647 Source advisory: SNYK:PYTHON-VLLM-20158371...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +132 more potentially affected by CVE-2026-100650 via vllm (>=0.1.3, <=0.28.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =0.0.38 and more Source cves: CVE-2026-100650 Source advisory: SNYK:PYTHON-VLLM-20158368...

lazyllm-verl (0.3.2.dev1), londonaicentre-mesa-local (>=2.8.0, <=2.8.1) +1 more potentially affected by CVE-2026-100652 via vllm (>=0.22.0, <=0.23.0)

vllm PYPI version =0.22.0, =2.8.0, =2.1.3, =2.2.4 Source cves: CVE-2026-100652 Source advisory: SNYK:PYTHON-VLLM-20158366...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +133 more potentially affected by CVE-2026-100650 via vllm (>=0.1.3, <=0.29.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2026-100650 Source advisory: OSV:PYSEC-2026-4184...

lazyllm-verl (0.3.2.dev1), londonaicentre-mesa-local (>=2.8.0, <=2.8.1) +1 more potentially affected by CVE-2026-100652 via vllm (>=0.22.0, <=0.23.0)

vllm PYPI version =0.22.0, =2.8.0, =2.1.3, =2.2.4 Source cves: CVE-2026-100652 Source advisory: MEND:CVE-2026-100652...