engel (>=0.3.0, <=0.3.1) potentially affected by CVE-2026-77528 via autobahn (0.13.0)

autobahn PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - engel =0.3.0, =0.3.1 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

psdtojpg (0.1.0) potentially affected by CVE-2026-59991 via psd-tools (0.10.0)

psd-tools PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on psd-tools and may be impacted: - psdtojpg 0.1.0 Source cves: CVE-2026-59991 Source advisory: OSV:PYSEC-2026-4139...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) +2 more potentially affected by CVE-2026-86049 via jupyter-server (1.18.1)

jupyter-server PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

basketball-reference-scraper (>=1.0.1, <=1.0.31), bsdownloader (>=0.2.0, <=0.2.1) +21 more potentially affected by CVE-2026-85999 via soupsieve (1.9.5)

soupsieve PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - basketball-reference-scraper =1.0.1, =0.2.0, =0.0.31, =0.1.0, =0.4.0, =0.1.2.5, =3.1.7, =2.3.0, =0.1.1, =0.0.1, =0.0.2, =0.0.3 and more Source...

vitamin-b (>=0.1.0, <=0.2.2) potentially affected by CVE-2026-85999 via soupsieve (1.9.3)

soupsieve PYPI version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - vitamin-b =0.1.0, =0.2.2 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

9gag-scraper (>=0.0.6, <=0.0.7), euroleague-scrapping (>=0.0.1.dev10, <=0.0.1.dev21) potentially affected by CVE-2026-86000 via soupsieve (1.9.6)

soupsieve PYPI version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - 9gag-scraper =0.0.6, =0.0.1.dev10, =0.0.1.dev21 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

boj2md (>=0.0.1, <=0.0.2), desktopscoreviewer (>=1.0.2, <=1.0.3) +3 more potentially affected by CVE-2026-85999 via soupsieve (1.9.1)

soupsieve PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - boj2md =0.0.1, =1.0.2, =0.2.0, =1.3.7, =1.4.4 - subtidal 1.0.0 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

basketball-reference-scraper (>=1.0.1, <=1.0.31), bsdownloader (>=0.2.0, <=0.2.1) +21 more potentially affected by CVE-2026-86000 via soupsieve (1.9.5)

soupsieve PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - basketball-reference-scraper =1.0.1, =0.2.0, =0.0.31, =0.1.0, =0.4.0, =0.1.2.5, =3.1.7, =2.3.0, =0.1.1, =0.0.1, =0.0.2, =0.0.3 and more Source...

aio-net-events (0.2.0), aio-usb-hotplug (>=2.0.0, <=3.0.1) +11 more potentially affected by CVE-2026-64847 via anyio (2.2.0)

anyio PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aio-net-events 0.2.0 - aio-usb-hotplug =2.0.0, =0.9.1, =0.6.0, =0.1.0, =1.6.3, =0.0.1, =3.0.0, =0.1.0, =0.2.0 Source cves: CVE-2026-64847 Source...

octomachinery (>=0.2.3, <=0.3.11), purerpc (>=0.2.0, <=0.3.2) potentially affected by CVE-2026-64847 via anyio (2.0.0rc2)

anyio PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - octomachinery =0.2.3, =0.2.0, =0.3.2 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

ohmyi3 (>=0.1.0, <=0.1.4), uvicore (>=0.1.15, <=0.1.25) potentially affected by CVE-2026-63374 via anyio (3.2.1)

anyio PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - ohmyi3 =0.1.0, =0.1.15, =0.1.25 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

geometron (>=0.0.1.dev7, <=0.0.3), metaplex-python-api (>=1.0.0, <=1.3.0) +1 more potentially affected by CVE-2026-63374 via anyio (3.3.4)

anyio PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - geometron =0.0.1.dev7, =1.0.0, =1.4.46, =3.0.3 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

5mghost-rover (>=0.0.1, <=0.0.3), aaaai (>=0.1.3, <=0.3.0) +853 more potentially affected by CVE-2026-64847 via anyio (>=4.0.0rc1, <=4.14.1)

anyio PYPI version =4.0.0rc1, =0.0.1, =0.1.3, =0.6.0, =0.0.32, =0.0.1, =4.8.2, =0.1.3, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.1.31, =0.1.0, =0.0.2, =0.4.0rc1, =0.7.1 and more Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

agl-ocr-reader (1.1.1), app-ocr (>=0.0.1, <=1.2.14) +7 more potentially affected by CVE-2026-63374 via anyio (3.7.0)

anyio PYPI version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - agl-ocr-reader 1.1.1 - app-ocr =0.0.1, =0.1.0, =0.0.1, =0.1.0, =1.2.0 - yt-fts 0.1.6 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

aiojarm (>=0.2.0, <=0.2.1), aiometer (>=0.1.0, <=0.2.1) +11 more potentially affected by CVE-2026-64847 via anyio (1.4.0)

anyio PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aiojarm =0.2.0, =0.1.0, =0.2.0, =0.2.0rc1, =0.1.3, =0.0.15, =0.0.2, =0.1.3, =0.4.1, =0.6.1 - roboto-telegram 0.3.0 - runnel 0.1.0a1 - sitemaps 0.1.0...

fennel (0.3.0), runnel (>=0.1.0a2, <=0.1.0b1) +1 more potentially affected by CVE-2026-63374 via anyio (3.0.0rc4)

anyio PYPI version 3.0.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - fennel 0.3.0 - runnel =0.1.0a2, =0.8.0, =0.13.0 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

geometron (>=0.0.1.dev7, <=0.0.3), metaplex-python-api (>=1.0.0, <=1.3.0) +1 more potentially affected by CVE-2026-64847 via anyio (3.3.4)

anyio PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - geometron =0.0.1.dev7, =1.0.0, =1.4.46, =3.0.3 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

5mghost-rover (>=0.0.1, <=0.0.3), aaaai (>=0.1.3, <=0.3.0) +853 more potentially affected by CVE-2026-63374 via anyio (>=4.0.0rc1, <=4.14.1)

anyio PYPI version =4.0.0rc1, =0.0.1, =0.1.3, =0.6.0, =0.0.32, =0.0.1, =4.8.2, =0.1.3, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.1.31, =0.1.0, =0.0.2, =0.4.0rc1, =0.7.1 and more Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

octomachinery (>=0.2.3, <=0.3.11), purerpc (>=0.2.0, <=0.3.2) potentially affected by CVE-2026-63374 via anyio (2.0.0rc2)

anyio PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - octomachinery =0.2.3, =0.2.0, =0.3.2 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

antistasi-logbook (>=0.3.2, <=0.4.2), anubis-policy-api (>=0.3.0, <=0.6.0) +9 more potentially affected by CVE-2026-64847 via anyio (3.5.0)

anyio PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - antistasi-logbook =0.3.2, =0.3.0, =1.0.0, =0.2.4, =0.1.7, =1.0.20.post9, =0.1.0, =0.18.2, =0.14.0, =0.15.0 - xircuits 1.3.0 Source cves: CVE-2026-6484...