adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +63 more potentially affected by CVE-2026-105782 via scrapy (>=2.0.1, <=2.14.1)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =0.0.3, =1.1.9, =2.8.3, =1.0.6, =0.2.0, =0.0.1, =0.3.0, =0.0.2, =0.2.4.dev1, =0.0.2, =0.3.0a0, =0.4.0rc1 and more Source cves: CVE-2026-105782 Source advisory: MEND:CVE-2026-105782...

aleph-alpha-inference (1.0.0), evoke-vllm (>=0.1.0, <=0.1.1) +7 more potentially affected by CVE-2026-105760 via vllm (>=0.23.0, <=0.29.0)

vllm PYPI version =0.23.0, =0.1.0, =2.9.0, =2.2.2, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-105760 Source advisory: MEND:CVE-2026-105760...

airbyte (>=0.11.0, <=0.27.0), airbyte-destination-pgvector (>=0.1.0, <=0.1.4) +119 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.1)

snowflake-connector-python PYPI version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - airbyte =0.11.0, =0.1.0, =0.0.1, =0.1.5, =0.1.1, =0.4.6, =0.0.25, =0.1.9, =1.0.5, =1.0.1, =2.0.2, =2.1.0 an...

cadpr (>=0.1.0, <=0.1.1), nikeca (>=0.0.83, <=0.2.13) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.0)

snowflake-connector-python PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cadpr =0.1.0, =0.0.83, =0.2.13 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

database-factory (>=1.0.5, <=1.0.6), rcd-dev-kit (>=1.4.0, <=2.0.4) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.9)

snowflake-connector-python PYPI version 2.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - database-factory =1.0.5, =1.4.0, =2.0.4 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

acedeploy (>=2.4.119, <=2.4.366.dev1), alation-data-quality-sdk (>=1.0.6, <=1.0.7) +16 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.14.0)

snowflake-connector-python PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - acedeploy =2.4.119, =1.0.6, =1.12.3.6, =1.12.3.4, =1.12.6.10, =1.12.1.6, =0.13.18, =0.0.56, =0.1.1a0, =0.1....

bizzflow-toolkit (2.3.0.dev3), dbt (>=0.19.0rc1, <=0.19.2) +11 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.3.6)

snowflake-connector-python PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - bizzflow-toolkit 2.3.0.dev3 - dbt =0.19.0rc1, =0.3.1, =1.9.1, =0.5.0, =0.1.0, =2.8.1, =1.0.11, =2.4.0,...

target-snowflake (0.0.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (1.8.7)

snowflake-connector-python PYPI version 1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - target-snowflake 0.0.0 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

pipelinewise-tap-snowflake (>=1.1.1, <=2.0.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.2)

snowflake-connector-python PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake =1.1.1, =2.0.0 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CX...

piicatcher (>=0.10.1, <=0.12.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.7)

snowflake-connector-python PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - piicatcher =0.10.1, =0.12.1 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

pipelinewise-target-snowflake (1.11.1), rappiflow-dag-operators (>=0.2.6, <=0.3.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.1)

snowflake-connector-python PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake 1.11.1 - rappiflow-dag-operators =0.2.6, =0.3.1 Source cves: CVE-2026-86597...

ewah (>=0.1.25, <=0.2.5), fivetran-autogen (>=0.0.1rc8, <=0.0.1rc9) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.2)

snowflake-connector-python PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - ewah =0.1.25, =0.0.1rc8, =0.0.2, =2.2.0, =0.14.1, =0.110.1, =2.0.0, =2.1.0 - spswarehouse-airflow 0.6.3 Sour...

snowflake-cli (3.11.0), snowflake-cli-labs (3.11.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.2)

snowflake-connector-python PYPI version 3.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli 3.11.0 - snowflake-cli-labs 3.11.0 Source cves: CVE-2026-86597 Source advisory:...

aleph-alpha-inference (1.0.0), evoke-vllm (>=0.1.0, <=0.1.1) +7 more potentially affected by CVE-2026-105756 via vllm (>=0.21.0, <=0.29.0)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-105756 Source advisory: MEND:CVE-2026-105756...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.10.4) +42 more potentially affected by CVE-2026-105748 via docling (>=2.17.0, <=2.130.0)

docling PYPI version =2.17.0, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =0.0.51 and more Source cves: CVE-2026-105748 Source advisory: MEND:CVE-2026-105748...

MAL-2026-17628 Malicious code in erc7730-hackathon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9020d8cb4fe701c7e0981ae140af20039845d5d0e0a638c68f3ca3e29adeb221 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in erc7730-hackathon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9020d8cb4fe701c7e0981ae140af20039845d5d0e0a638c68f3ca3e29adeb221 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

ROOT-APP-PYPI-CVE-2024-12797 CVE-2024-12797 in cryptography - Patched by Root

Root has patched CVE-2024-12797 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-62611 CVE-2025-62611 in aiomysql - Patched by Root

Root has patched CVE-2025-62611 in the aiomysql package for Root:PyPI. Multiple fixed versions available...

Malicious code in anthropic-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500869e36b3f76202b63e8db9087adcfc42c8281a27a4402a21285aabde7a511 The package publishes as anthropic-sdk and re-exports the official anthropic client's symbols from anthropic import ; re-exports of...