aiconsole (>=0.2.0, <=0.2.7), fastrepl (>=0.0.19, <=0.0.20) potentially affected by CVE-2026-59823 via litellm (0.6.6)

litellm PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - aiconsole =0.2.0, =0.0.19, =0.0.20 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

autollm (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-59823 via litellm (0.8.4)

litellm PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autollm =0.0.1, =0.0.3 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

fastrepl (>=0.0.21, <=0.0.25), funcflow (0.0.3) +2 more potentially affected by CVE-2026-59823 via litellm (0.8.6)

litellm PYPI version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - fastrepl =0.0.21, =0.0.5, =0.0.9 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

promptulate (1.9.0) potentially affected by CVE-2026-59823 via litellm (0.12.12)

litellm PYPI version 0.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - promptulate 1.9.0 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2026-59823 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

open-interpreter (>=0.1.12, <=0.1.17), promptmodel (>=0.0.25, <=0.0.31) potentially affected by CVE-2026-59823 via litellm (0.13.2)

litellm PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.12, =0.0.25, =0.0.31 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

pyplanet (>=0.6.0rc1, <=0.6.0) potentially affected by CVE-2026-62949 via asyncssh (1.12.2)

asyncssh PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.6.0rc1, =0.6.0 Source cves: CVE-2026-62949 Source advisory: OSV:PYSEC-2026-4026...

netdev (>=0.9.1, <=0.9.3), pyplanet (>=0.7.0rc1, <=0.11.12) +2 more potentially affected by CVE-2026-62949 via asyncssh (1.18.0)

asyncssh PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - netdev =0.9.1, =0.7.0rc1, =0.0.1, =0.2.1 Source cves: CVE-2026-62949 Source advisory: OSV:PYSEC-2026-4026...

aiida-core (>=2.7.0rc0, <=2.9.2), aiida-gromacs (2.2.2) +103 more potentially affected by CVE-2026-62949 via asyncssh (>=2.0.1, <=2.23.1)

asyncssh PYPI version =2.0.1, =2.7.0rc0, =0.4.1, =0.7.2, =1.2.7, =0.0.1, =1.5.0.dev202411111555, =1.44.2, =0.6.0, =1.7.3, =1.46.0, =0.0.2, =2.0.15, =2.1.8 and more Source cves: CVE-2026-62949 Source advisory: OSV:PYSEC-2026-4026...

dektools (>=0.1.0, <=0.1.117), dothttp-req (>=0.0.41a1, <=0.0.42a1) potentially affected by CVE-2026-76825 via restrictedpython (5.2.0)

restrictedpython PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dektools =0.1.0, =0.0.41a1, =0.0.42a1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

otter-ai (>=0.0.0a0, <=0.0.0a5) potentially affected by CVE-2026-59823 via litellm (0.1.400)

litellm PYPI version 0.1.400 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - otter-ai =0.0.0a0, =0.0.0a5 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

docindex (>=0.8.0, <=0.9.0) potentially affected by CVE-2026-59823 via litellm (0.1.2291)

litellm PYPI version 0.1.2291 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - docindex =0.8.0, =0.9.0 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...

hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87015 via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87015 Source advisory: OSV:PYSEC-2026-4124...

hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87011 via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87011 Source advisory: OSV:PYSEC-2026-4117...

hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87014 via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87014 Source advisory: OSV:PYSEC-2026-4127...

hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87013 via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87013 Source advisory: OSV:PYSEC-2026-4121...

mailman-web (0.0.5) potentially affected by CVE-2026-15307 via django (3.1.0rc1)

django PYPI version 3.1.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - mailman-web 0.0.5 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

backstage-oauth2 (>=0.1.7, <=0.1.8), dbaas-aclapi (>=0.1.17, <=1.0.14) +1 more potentially affected by CVE-2026-15307 via django (1.6.10)

django PYPI version 1.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - backstage-oauth2 =0.1.7, =0.1.17, =1.0.14 - django-pesapal 0.2.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

iepy (0.9.5) potentially affected by CVE-2026-15307 via django (1.7.6)

django PYPI version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - iepy 0.9.5 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

django-l10n (>=0.0.1, <=0.0.7), django-rulengine (>=0.0.2, <=0.0.3) potentially affected by CVE-2026-15307 via django (1.7.10)

django PYPI version 1.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-l10n =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...