gophers (>=0.0.1, <=0.0.2), gupy-framework (>=0.0.1, <=0.5.8) +2 more potentially affected by CVE-2026-57175 via social-auth-core (4.5.4)

social-auth-core PYPI version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - gophers =0.0.1, =0.0.1, =0.1.1, =2.2.0, =2.9.3 Source cves: CVE-2026-57175 Source advisory: OSV:GHSA-VQ6G-G6C7-5F2J...

argus-server (>=1.23.0, <=1.34.1), bitcaster (>=2.1.0rc1, <=2.2.0) +14 more potentially affected by CVE-2026-57175 via social-auth-core (4.8.7)

social-auth-core PYPI version 4.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argus-server =1.23.0, =2.1.0rc1, =2.4.6, =2.0.9, =1.0.1, =0.16.0, =2024.1.0, =1.62.0, =5.7.0, =0.10.0, =5.6.0, =0.1.0, =0.12.0 a...

argus-notification-msteams (0.5.1), argus-server (>=1.2.1, <=1.22.1) +78 more potentially affected by CVE-2026-57175 via social-auth-core (4.9.1)

social-auth-core PYPI version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argus-notification-msteams 0.5.1 - argus-server =1.2.1, =1.30.0, =1.234.0, =0.4.3, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0,...

h2 (>=1.1.0, <=3.0.0), mitmproxy (>=0.18.2, <=0.18.3) +3 more potentially affected by CVE-2026-59980 via hpack (2.3.0)

hpack PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - h2 =1.1.0, =0.18.2, =0.9.0, =2.6.1, =3.10.2rc3 Source cves: CVE-2026-59980 Source advisory: OSV:GHSA-8V8H-HG4W-MVQ2...

aapns (>=19.11.0, <=23.7.0), abq (>=0.1.0, <=0.1.4) +282 more potentially affected by CVE-2026-59980 via hpack (3.0.0)

hpack PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - aapns =19.11.0, =0.1.0, =0.0.1, =0.4.0, =0.4.0, =2.1.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.2, =0.3.6, =0.5.0, =0.0.1, =0.0.2 and more Source cve...

h2 (1.0.0) potentially affected by CVE-2026-59980 via hpack (1.1.0)

hpack PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - h2 1.0.0 Source cves: CVE-2026-59980 Source advisory: OSV:GHSA-8V8H-HG4W-MVQ2...

vss-ctx-rag (>=0.5.0, <=0.5.1) potentially affected by unknown CVE via langchain-nvidia-ai-endpoints (0.3.7)

langchain-nvidia-ai-endpoints PYPI version 0.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-nvidia-ai-endpoints and may be impacted: - vss-ctx-rag =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-G28H-2CMM-RJ9X...

nvidia-nat-langchain (>=1.4.0a20260103, <=1.5.0a20260122), nvidia-pipecat (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via langchain-nvidia-ai-endpoints (1.0.4)

langchain-nvidia-ai-endpoints PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-nvidia-ai-endpoints and may be impacted: - nvidia-nat-langchain =1.4.0a20260103, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory:...

brad-agent (>=0.1.33, <=0.1.34) potentially affected by unknown CVE via langchain-nvidia-ai-endpoints (0.1.1)

langchain-nvidia-ai-endpoints PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-nvidia-ai-endpoints and may be impacted: - brad-agent =0.1.33, =0.1.34 Source cves: unknown CVE Source advisory: OSV:GHSA-G28H-2CMM-RJ9X...

llm-checks-common-functions (>=1.0.0, <=1.1.0) potentially affected by unknown CVE via langchain-nvidia-ai-endpoints (0.2.2)

langchain-nvidia-ai-endpoints PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-nvidia-ai-endpoints and may be impacted: - llm-checks-common-functions =1.0.0, =1.1.0 Source cves: unknown CVE Source advisory:...

nvidia-nat-langchain (>=1.4.0a20260103, <=1.5.0a20260122), nvidia-pipecat (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via langchain-nvidia-ai-endpoints (1.0.4)

langchain-nvidia-ai-endpoints PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-nvidia-ai-endpoints and may be impacted: - nvidia-nat-langchain =1.4.0a20260103, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory:...

2d6io-cryptobot (0.0.1), academic-metrics (>=0.1.0b0, <=1.0.99) +1153 more potentially affected by CVE-2026-96748 via pymongo (>=3.2.0, <=4.18.1)

pymongo PYPI version =3.2.0, =0.1.0b0, =1.0.4, =0.9.0, =0.4.2, =0.3.0, =3.6.0, =0.0.1.dev0, =0.1.23, =1.1.5, =2022.9.19, =2023.12.31 and more Source cves: CVE-2026-96748 Source advisory: MEND:CVE-2026-96748...

academic-metrics (>=0.1.0b0, <=1.0.99), accomate (>=1.0.4, <=2.0.0.6) +1065 more potentially affected by CVE-2026-96747 via pymongo (>=3.9.0, <=4.18.1)

pymongo PYPI version =3.9.0, =0.1.0b0, =1.0.4, =0.9.0, =0.3.0, =0.0.1.dev0, =0.1.23, =1.1.5, =2022.9.19, =0.22.0, =0.3.0, =0.2.0, =0.3.4 and more Source cves: CVE-2026-96747 Source advisory: SNYK:PYTHON-PYMONGO-20158824...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +136 more potentially affected by CVE-2026-57179 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57179 Source advisory: MEND:CVE-2026-57179...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +136 more potentially affected by CVE-2026-57178 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57178 Source advisory: MEND:CVE-2026-57178...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +136 more potentially affected by CVE-2026-57177 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57177 Source advisory: MEND:CVE-2026-57177...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +136 more potentially affected by CVE-2026-57175 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57175 Source advisory: MEND:CVE-2026-57175...

streamkeeper (>=1.1.0, <=2.0.1) potentially affected by CVE-2026-92164 via streamlink (1.7.0)

streamlink PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - streamkeeper =1.1.0, =2.0.1 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

liveproxy (>=0.0.1, <=0.1.1), pccold (>=0.12.0, <=0.32.0) potentially affected by CVE-2026-92164 via streamlink (0.14.2)

streamlink PYPI version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - liveproxy =0.0.1, =0.12.0, =0.32.0 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

gridplayer (>=0.4.0, <=0.4.3), tg-autoposter (>=3.1.1, <=3.1.2) potentially affected by CVE-2026-92164 via streamlink (4.2.0)

streamlink PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.4.0, =3.1.1, =3.1.2 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...