aiida-core (>=2.7.0rc0, <=2.9.2), aiida-gromacs (2.2.2) +103 more potentially affected by CVE-2026-62949 via asyncssh (>=2.0.1, <=2.23.1)

asyncssh PYPI version =2.0.1, =2.7.0rc0, =0.4.1, =0.7.2, =1.2.7, =0.0.1, =1.5.0.dev202411111555, =1.44.2, =0.6.0, =1.7.3, =1.46.0, =0.0.2, =2.0.15, =2.1.8 and more Source cves: CVE-2026-62949 Source advisory: OSV:PYSEC-2026-4026...

ai-services (>=0.1.0, <=0.5.0rc12), circe-certic (>=0.0.37, <=0.0.40) +12 more potentially affected by CVE-2026-85078 via sanic (22.12.0)

sanic PYPI version 22.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - ai-services =0.1.0, =0.0.37, =0.1.4, =0.1.0, =3.14.0.dev8, =3.8.0b1.dev2, =2.0.0, =0.25.0, =0.1.0, =0.1.0, =0.2.2 Source cves: CVE-2026-85078 Source...

artificienlib (>=0.1.1, <=0.1.6), syft (>=0.2.8, <=0.2.9) +8 more potentially affected by CVE-2026-76825 via restrictedpython (5.4.0)

restrictedpython PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - artificienlib =0.1.1, =0.2.8, =0.0.333, =0.0.27, =0.0.70, =0.0.126, =0.0.31, =0.0.30, =0.0.14, =0.0.26 Source cves: CVE-2026-768...

aclients (>=1.0.0b31, <=1.0.1b1), iconrpcserver (>=1.2.10, <=1.4.9) +12 more potentially affected by CVE-2026-85078 via sanic (18.12.0)

sanic PYPI version 18.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - aclients =1.0.0b31, =1.2.10, =0.1.0, =0.1.0, =0.24.0, =0.14.0a8, =0.0.0.post2, =0.0.1, =2.0.0, =0.1.0, =0.2.2 Source cves: CVE-2026-85078 Source...

systembridgebackend (>=3.4.4, <=3.4.5.dev7) potentially affected by CVE-2026-85078 via sanic (22.6.1)

sanic PYPI version 22.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - systembridgebackend =3.4.4, =3.4.5.dev7 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

ai-services (>=0.5.0rc15, <=0.5.0rc16), sanic-beskar (>=2.2.9, <=2.2.10) potentially affected by CVE-2026-85078 via sanic (23.3.0)

sanic PYPI version 23.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - ai-services =0.5.0rc15, =2.2.9, =2.2.10 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

discodo (>=2.3.12.2, <=2.3.13), ssh2http (0.1.0) +1 more potentially affected by CVE-2026-85078 via sanic (20.12.2)

sanic PYPI version 20.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - discodo =2.3.12.2, =1.0.0a5, =1.1.0.1 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

apoplast (>=1.0.3, <=3.0.7), ark-server-certic (>=0.0.12, <=0.0.14) +68 more potentially affected by CVE-2026-85078 via sanic (23.12.2)

sanic PYPI version 23.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - apoplast =1.0.3, =0.0.12, =1.0.0, =0.1.1, =1.0.0, =1.0.1, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =8.0.0 - foam-rodeo 0.0.1 and more Source...

rsanic (>=0.1.1, <=0.4.0) potentially affected by CVE-2026-85078 via sanic (0.3.1)

sanic PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - rsanic =0.1.1, =0.4.0 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

sanic-dispatcher (>=0.5.0, <=0.5.0.1) potentially affected by CVE-2026-85078 via sanic (0.5.0)

sanic PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-dispatcher =0.5.0, =0.5.0.1 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

discodo (>=2.3.3, <=2.3.6), klldfn (>=1.9.9, <=2.8.12) potentially affected by CVE-2026-85078 via sanic (20.12.0)

sanic PYPI version 20.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - discodo =2.3.3, =1.9.9, =2.8.12 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2026-59823 via litellm (0.1.7713)

litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2026-59823 Sourc...

ios-notification (0.0.4) potentially affected by CVE-2026-15307 via django (1.11.1)

django PYPI version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ios-notification 0.0.4 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

alcali (>=2018.3.1, <=2019.2.1.post0), kiwitcms (7.0.0) +10 more potentially affected by CVE-2026-15307 via django (2.2.5)

django PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.1, =0.31.14, =0.8.0, =0.3.1, =0.0.1, =0.0.1, =0.0.1, =0.0.5 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

mailman-web (0.0.5) potentially affected by CVE-2026-15307 via django (3.1.0rc1)

django PYPI version 3.1.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - mailman-web 0.0.5 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

nemo (>=1.11.1, <=1.14.0), opencensus-ext-django (>=0.1.0, <=0.3.1) potentially affected by CVE-2026-15307 via django (1.11.20)

django PYPI version 1.11.20 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - nemo =1.11.1, =0.1.0, =0.3.1 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

caluma (>=6.0.0, <=6.3.1), mycms (>=0.1.9, <=0.1.12) +1 more potentially affected by CVE-2026-15307 via django (2.2.14)

django PYPI version 2.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =6.0.0, =0.1.9, =0.1.12 - x-net-django-color-field 1.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

aldryn-django (4.1.12.0), djangodjangodjango (4.1.12) potentially affected by CVE-2026-15307 via django (4.1.12)

django PYPI version 4.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.1.12.0 - djangodjangodjango 4.1.12 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

ambition-edc (>=0.3.63, <=0.3.66), capreolus (0.1.3) +7 more potentially affected by CVE-2026-15307 via django (2.2.9)

django PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ambition-edc =0.3.63, =1.1.35, =1.13.0.dev5, =0.1.0, =2.1.0, =2.2.1 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

arches (7.6.0a2), coldfront (1.1.6) +12 more potentially affected by CVE-2026-15307 via django (4.2.11)

django PYPI version 4.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - arches 7.6.0a2 - coldfront 1.1.6 - django-graphbox =1.4.1, =0.5.73, =0.2.14, =4.6.2, =0.3.6, =6.0.0, =6.0.2, =0.2.0, =0.2.0a0, =0.2.0rc1 Source cve...