nova-prompt-optimizer (>=1.0.48, <=1.1.0), pkg-15903 (>=0.1.20, <=0.1.55) +9 more potentially affected by CVE-2026-102938 via virtualenv (20.31.2)

virtualenv PYPI version 20.31.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - nova-prompt-optimizer =1.0.48, =0.1.20, =0.1.1, =0.1.0, =1.0.0, =0.4.9, =0.5.3 Source cves: CVE-2026-102938 Source advisory:...

bblib (>=0.1.1, <=3.1.0), beambusters (>=1.0.0, <=3.1.0) +7 more potentially affected by CVE-2026-102938 via virtualenv (20.25.1)

virtualenv PYPI version 20.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - bblib =0.1.1, =1.0.0, =1.0.1, =0.8.4, =0.0.2, =0.0.1, =0.7.30, =1.0.0, =1.0.3, =1.0.8 Source cves: CVE-2026-102938 Source advisory:...

hmd-cli-repo (>=0.2.81, <=0.3.141), neuronsphere (>=1.0.2, <=1.0.50) +1 more potentially affected by CVE-2026-102938 via virtualenv (20.13.2)

virtualenv PYPI version 20.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hmd-cli-repo =0.2.81, =1.0.2, =1.0.50 - pytoil 0.27.0 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

ablator (0.0.1b3), apollo-sdk (>=0.2.0, <=0.2.11) +29 more potentially affected by CVE-2026-102938 via virtualenv (20.21.0)

virtualenv PYPI version 20.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ablator 0.0.1b3 - apollo-sdk =0.2.0, =0.8.3b20231012, =0.8.3b20231012, =0.6.1, =1.2.1, =0.1.3, =0.7.2, =0.2.8, =0.0.1, =1.7.16, =0.4.0rc6,...

geotify (>=0.1.0, <=0.2.0), plutomanager (0.2.0) potentially affected by CVE-2026-102938 via virtualenv (20.25.2)

virtualenv PYPI version 20.25.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - geotify =0.1.0, =0.2.0 - plutomanager 0.2.0 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

foxbms-fox-cli (1.12.0), ironoc-pytest-conor-heffron (>=2.3.4, <=2.5.1) +8 more potentially affected by CVE-2026-102938 via virtualenv (>=21.1.0, <=21.7.4)

virtualenv PYPI version =21.1.0, =2.3.4, =0.1.4, =0.1.0, =0.3.1, =0.0.3, =1.5.1, =1.1.0, =1.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-102938 Source advisory: GHSA-9H9J-4VRJ-GF7G...

optimizo (>=1.2.0, <=1.3.0), pencil-pusher (1.6.1) potentially affected by CVE-2026-102938 via virtualenv (20.4.7)

virtualenv PYPI version 20.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - optimizo =1.2.0, =1.3.0 - pencil-pusher 1.6.1 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

hugo-jupyter (>=0.2.1, <=0.3.0), kitehistory (1.4.0) +2 more potentially affected by CVE-2026-103262 via tornado (4.5.1)

tornado PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - hugo-jupyter =0.2.1, =0.3.1, =1.5.1 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

ppg-common (>=1.2.0, <=1.67.0) potentially affected by CVE-2026-103262 via tornado (4.5.0)

tornado PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - ppg-common =1.2.0, =1.67.0 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

billomapy (2.4.0), prawoauth2 (0.1.5) potentially affected by CVE-2026-103262 via tornado (4.2.0)

tornado PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - billomapy 2.4.0 - prawoauth2 0.1.5 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

stashpy (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-103262 via tornado (4.3.0b2)

tornado PYPI version 4.3.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - stashpy =0.2.0, =0.2.1 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

bokcolmaps (>=0.1.0, <=0.2.1), bokodapviewer (>=0.1.0, <=0.1.1) +8 more potentially affected by CVE-2026-103262 via tornado (4.4.2)

tornado PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - bokcolmaps =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.4, =0.1.7, =0.0.1, =0.0.14 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

pylocalsmtp (>=0.2.1, <=0.4.2) potentially affected by CVE-2026-103262 via tornado (3.0.1)

tornado PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - pylocalsmtp =0.2.1, =0.4.2 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +778 more potentially affected by CVE-2026-49855 via tornado (>=6.0.0b1, <=6.5.8)

tornado PYPI version =6.0.0b1, =0.0.0, =0.2.2, =0.7.3, =0.3.0, =0.4.0, =0.2.0, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-49855 Source advisory: GHSA-CHX6-46F5-W4VP...

brew-view (>=2.4.0, <=2.4.21), fast-explain (>=0.0.49, <=0.0.91) +6 more potentially affected by CVE-2026-103262 via tornado (5.1.0)

tornado PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - brew-view =2.4.0, =0.0.49, =0.9.0.2, =0.1.2, =0.10.2, =0.5.23, =0.6.0 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

catsup (>=0.3.8, <=0.3.11), pylocalsmtp (>=0.5.0, <=1.0.0) +1 more potentially affected by CVE-2026-103262 via tornado (3.2.0)

tornado PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - catsup =0.3.8, =0.5.0, =0.1.1, =0.1.2 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...

elemeno-ai-sdk (>=0.0.5, <=0.0.20), foresthog (>=0.9.0, <=1.3.6) +7 more potentially affected by CVE-2026-100689 via gitpython (2.1.1)

gitpython PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elemeno-ai-sdk =0.0.5, =0.9.0, =0.1.0, =0.4.0, =0.0.5, =0.0.1, =1.0.0, =1.0.4, =1.0.10 Source cves: CVE-2026-100689 Source advisory:...

cabrita (>=2.2.2b1, <=2.2.2b2), cico (>=0.1.0, <=0.1.8) +4 more potentially affected by CVE-2026-100689 via gitpython (2.1.10)

gitpython PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - cabrita =2.2.2b1, =0.1.0, =0.1.0, =3.11.1, =0.9.0, =0.9.7.2 Source cves: CVE-2026-100689 Source advisory: OSV:GHSA-59CR-6R3X-644W...

sealights-python-agent (>=0.2.213, <=0.2.247) potentially affected by CVE-2026-100689 via gitpython (2.1.13)

gitpython PYPI version 2.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - sealights-python-agent =0.2.213, =0.2.247 Source cves: CVE-2026-100689 Source advisory: OSV:GHSA-59CR-6R3X-644W...

elib (>=0.1.55, <=0.1.57), emiz (>=0.1.35, <=2018.4.2.1) +11 more potentially affected by CVE-2026-100689 via gitpython (2.1.8)

gitpython PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elib =0.1.55, =0.1.35, =0.2.4a149, =0.0.1, =1.0.0, =0.4233.0, =0.2354.0, =0.2354.0, =0.1.7, =0.2.120, =1.0.0, =0.1.0, =2.1.1 Source cves:...