atlassian-jwt-auth (>=2.7.0, <=3.0.0), credential-shield-fdelgados (>=0.0.1, <=2.0.0) +11 more potentially affected by CVE-2026-102269 via pyjwt (1.4.2)

pyjwt PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - atlassian-jwt-auth =2.7.0, =0.0.1, =0.5.0, =0.1.1, =1.0.0a2, =0.4.15, =0.1.1, =0.0.1, =0.9.0, =5.4.0, =0.8.0, =0.3.3, =0.4.0 Source cves:...

aap-client-python (>=0.1.1, <=0.1.3), gcb-web-auth (>=0.6.0, <=2.0.0) +4 more potentially affected by CVE-2026-102270 via pyjwt (1.5.2)

pyjwt PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aap-client-python =0.1.1, =0.6.0, =0.2775.0, =0.3.0, =0.0.1, =4.0.0, =4.0.1 Source cves: CVE-2026-102270 Source advisory: OSV:PYSEC-2026-4148...

umap-project (>=3.4.1, <=3.5.0) potentially affected by CVE-2026-57175 via social-auth-core (4.8.1)

social-auth-core PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =3.4.1, =3.5.0 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

umap-project (>=1.3.0a0, <=1.14.0a5) potentially affected by CVE-2026-57175 via social-auth-core (4.4.2)

social-auth-core PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =1.3.0a0, =1.14.0a5 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

galaxy-app (>=23.0.1, <=24.0.3), galaxy-data (>=22.1.1, <=24.1.3) +13 more potentially affected by CVE-2026-57175 via social-auth-core (4.0.3)

social-auth-core PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy-app =23.0.1, =22.1.1, =23.0.1, =23.0.2, =21.9.0, =23.2.1, =0.4.0, =0.0.1, =0.13.0, =0.6.0, =0.1.0, =0.8.0, =0.1.0, =0.9.1...

umap-project (>=2.0.0a0, <=2.0.0a2) potentially affected by CVE-2026-57175 via social-auth-core (4.5.2)

social-auth-core PYPI version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =2.0.0a0, =2.0.0a2 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

gophers (>=0.0.1, <=0.0.2), gupy-framework (>=0.0.1, <=0.5.8) +2 more potentially affected by CVE-2026-57175 via social-auth-core (4.5.4)

social-auth-core PYPI version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - gophers =0.0.1, =0.0.1, =0.1.1, =2.2.0, =2.9.3 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

umap-project (>=3.4.1, <=3.5.0) potentially affected by CVE-2026-57177 via social-auth-core (4.8.1)

social-auth-core PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =3.4.1, =3.5.0 Source cves: CVE-2026-57177 Source advisory: OSV:PYSEC-2026-4169...

netbox-types (>=4.5.4, <=4.6.5), umap-project (>=3.6.2, <=3.7.3) potentially affected by CVE-2026-57175 via social-auth-core (4.8.5)

social-auth-core PYPI version 4.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - netbox-types =4.5.4, =3.6.2, =3.7.3 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

umap-project (>=0.8.0, <=0.8.2) potentially affected by CVE-2026-57175 via social-auth-core (1.1.0)

social-auth-core PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =0.8.0, =0.8.2 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

argus-server (>=1.23.0, <=1.34.1), bitcaster (>=2.1.0rc1, <=2.2.0) +14 more potentially affected by CVE-2026-57175 via social-auth-core (4.8.7)

social-auth-core PYPI version 4.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argus-server =1.23.0, =2.1.0rc1, =2.4.6, =2.0.9, =1.0.1, =0.16.0, =2024.1.0, =1.62.0, =5.7.0, =0.10.0, =5.6.0, =0.1.0, =0.12.0 a...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57175 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

linhub (0.1.1) potentially affected by CVE-2026-57175 via social-auth-core (4.4.1)

social-auth-core PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - linhub 0.1.1 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

edx-oauth2-wordpress-backend (>=1.0.0, <=1.0.4), richie (>=2.13.0, <=2.14.1) +2 more potentially affected by CVE-2026-57175 via social-auth-core (4.2.0)

social-auth-core PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-oauth2-wordpress-backend =1.0.0, =2.13.0, =14.0.0, =4.11.0, =4.12.2 Source cves: CVE-2026-57175 Source advisory:...

aapns (>=19.11.0, <=23.7.0), abq (>=0.1.0, <=0.1.4) +282 more potentially affected by CVE-2026-59980 via hpack (3.0.0)

hpack PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - aapns =19.11.0, =0.1.0, =0.0.1, =0.4.0, =0.4.0, =2.1.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.2, =0.3.6, =0.5.0, =0.0.1, =0.0.2 and more Source cve...

h2 (>=1.1.0, <=3.0.0), mitmproxy (>=0.18.2, <=0.18.3) +3 more potentially affected by CVE-2026-59980 via hpack (2.3.0)

hpack PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - h2 =1.1.0, =0.18.2, =0.9.0, =2.6.1, =3.10.2rc3 Source cves: CVE-2026-59980 Source advisory: OSV:PYSEC-2026-4053...

b9gemyaeix (>=4.14.0, <=4.14.1), edx-oauth2-wordpress-backend (>=1.0.7, <=1.0.8) +15 more potentially affected by CVE-2026-57177 via social-auth-core (4.3.0)

social-auth-core PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - b9gemyaeix =4.14.0, =1.0.7, =1.0.0, =1.0.0, =1.0.0rc1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.5.0rc4, =4.0.0rc6,...

bittensor (>=1.0.0, <=1.0.4), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-77528 via autobahn (20.7.1)

autobahn PYPI version 20.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - bittensor =1.0.0, =0.2.0, =3.0.0b0, =4.4.0 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

ezbeq (>=2.5.0, <=2.8.0), fiduswriter (>=4.1.1, <=5.0.0a2) +6 more potentially affected by CVE-2026-77528 via autobahn (25.12.2)

autobahn PYPI version 25.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - ezbeq =2.5.0, =4.1.1, =3.11.3, =1.3.9, =0.28.0, =2.0.0, =2.1.9 - senbai 0.0.1 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

engel (>=0.3.0, <=0.3.1) potentially affected by CVE-2026-77528 via autobahn (0.13.0)

autobahn PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - engel =0.3.0, =0.3.1 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...