pex (>=0.9.0, <=1.1.1), revscoring (>=0.6.4, <=2.0.4) +3 more potentially affected by CVE-2026-59890 via setuptools (15.2.0)

setuptools PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.9.0, =0.6.4, =1.4.1, =0.3.0, =0.3.2 - yt-formula-node 0.0.4 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

c2cwsgiutils (>=1.2.0, <=1.3.0), masterqa (1.1.3) +4 more potentially affected by CVE-2025-71176 via pytest (3.2.5)

pytest PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - c2cwsgiutils =1.2.0, =1.0.1, =2.0.9, =1.4.13, =1.4.16 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

pex (>=0.9.0, <=1.1.1), revscoring (>=0.6.4, <=2.0.4) +3 more potentially affected by CVE-2024-6345 via setuptools (15.2.0)

setuptools PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.9.0, =0.6.4, =1.4.1, =0.3.0, =0.3.2 - yt-formula-node 0.0.4 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

c2cwsgiutils (>=1.2.0, <=1.3.0), masterqa (1.1.3) +4 more potentially affected by CVE-2025-71176 via pytest (3.2.5)

pytest PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - c2cwsgiutils =1.2.0, =1.0.1, =2.0.9, =1.4.13, =1.4.16 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

pex (>=0.9.0, <=1.1.1), revscoring (>=0.6.4, <=2.0.4) +3 more potentially affected by CVE-2025-47273 via setuptools (15.2.0)

setuptools PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.9.0, =0.6.4, =1.4.1, =0.3.0, =0.3.2 - yt-formula-node 0.0.4 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

pex (>=0.9.0, <=1.1.1), revscoring (>=0.6.4, <=2.0.4) +3 more potentially affected by CVE-2024-6345 via setuptools (15.2.0)

setuptools PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.9.0, =0.6.4, =1.4.1, =0.3.0, =0.3.2 - yt-formula-node 0.0.4 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

iepy (0.9.5), revscoring (>=0.6.4, <=0.7.11) +1 more potentially affected by CVE-2024-5206 via scikit-learn (0.15.2)

scikit-learn PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - iepy 0.9.5 - revscoring =0.6.4, =0.7.11 - skll 1.0.0 Source cves: CVE-2024-5206 Source advisory: OSV:GHSA-JW8X-6495-233V...

iepy (0.9.5), revscoring (>=0.6.4, <=0.7.11) +1 more potentially affected by CVE-2024-5206 via scikit-learn (0.15.2)

scikit-learn PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - iepy 0.9.5 - revscoring =0.6.4, =0.7.11 - skll 1.0.0 Source cves: CVE-2024-5206 Source advisory: OSV:PYSEC-2024-110...

kraken (0.4.3), revscoring (0.6.4) +1 more potentially affected by CVE-2023-29824 via scipy (0.14.0)

scipy PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on scipy and may be impacted: - kraken 0.4.3 - revscoring 0.6.4 - sparselsh 1.1.3 Source cves: CVE-2023-29824 Source advisory: OSV:PYSEC-2023-114...

revscoring (>=0.6.5, <=0.7.11) potentially affected by CVE-2023-29824 via scipy (0.16.1)

scipy PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on scipy and may be impacted: - revscoring =0.6.5, =0.7.11 Source cves: CVE-2023-29824 Source advisory: OSV:PYSEC-2023-114...

moodleinspire (0.0.10), moodlemlbackend (>=0.0.2, <=1.0.0) +3 more potentially affected by CVE-2023-29824 via scipy (0.17.1)

scipy PYPI version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on scipy and may be impacted: - moodleinspire 0.0.10 - moodlemlbackend =0.0.2, =2.5.0, =1.0.1, =0.3.0, =0.3.2 Source cves: CVE-2023-29824 Source advisory: OSV:PYSEC-2023-114...

kraken (0.4.3), revscoring (0.6.4) +1 more potentially affected by CVE-2023-25399 via scipy (0.14.0)

scipy PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on scipy and may be impacted: - kraken 0.4.3 - revscoring 0.6.4 - sparselsh 1.1.3 Source cves: CVE-2023-25399 Source advisory: OSV:PYSEC-2023-102...

moodleinspire (0.0.10), moodlemlbackend (>=0.0.2, <=1.0.0) +3 more potentially affected by CVE-2023-25399 via scipy (0.17.1)

scipy PYPI version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on scipy and may be impacted: - moodleinspire 0.0.10 - moodlemlbackend =0.0.2, =2.5.0, =1.0.1, =0.3.0, =0.3.2 Source cves: CVE-2023-25399 Source advisory: OSV:PYSEC-2023-102...

revscoring (>=0.6.5, <=0.7.11) potentially affected by CVE-2023-25399 via scipy (0.16.1)

scipy PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on scipy and may be impacted: - revscoring =0.6.5, =0.7.11 Source cves: CVE-2023-25399 Source advisory: OSV:PYSEC-2023-102...

pex (>=0.9.0, <=1.1.1), revscoring (>=0.6.4, <=2.0.4) +3 more potentially affected by CVE-2022-40897 via setuptools (15.2.0)

setuptools PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.9.0, =0.6.4, =1.4.1, =0.3.0, =0.3.2 - yt-formula-node 0.0.4 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...