seleniumbase (1.34.26) potentially affected by CVE-2025-64512 via pdfminer-six (20200121.0.0)

pdfminer-six PYPI version 20200121.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - seleniumbase 1.34.26 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

bankruptcy (>=0.0.2, <=0.0.5), copy-spotter (>=0.1.12, <=0.1.16) +7 more potentially affected by CVE-2025-64512 via pdfminer-six (20200517.0.0)

pdfminer-six PYPI version 20200517.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bankruptcy =0.0.2, =0.1.12, =1.1.1, =0.1.0a1, =9.8.1, =0.4.0, =1.38.2, =1.42.15 Source cves: CVE-2025-64512 Source advisory:...

amazon-ad-sdk (0.2.23), seleniumbase (1.50.5) potentially affected by CVE-2025-50181 via urllib3 (1.26.1)

urllib3 PYPI version 1.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - amazon-ad-sdk 0.2.23 - seleniumbase 1.50.5 Source cves: CVE-2025-50181 Source advisory: OSV:PYSEC-2026-1999...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2024-28219 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2024-28219 Source advisory: OSV:PYSEC-2026-1793...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2024-0727 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2024-0727 Source advisory:...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-55798 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-55798 Source advisory: OSV:PYSEC-2026-2257...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-54059 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-54059 Source advisory: OSV:PYSEC-2026-2253...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-54060 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-54060 Source advisory: OSV:PYSEC-2026-2254...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2023-50447 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2023-50447 Source advisory: OSV:PYSEC-2026-457...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-42308 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-42308 Source advisory: OSV:PYSEC-2026-165...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-42308 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-42308 Source advisory: OSV:GHSA-WJX4-4JCJ-G98J...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2026-34073 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2026-34073 Source advisory:...

ais-dom (>=0.109.0b0, <=0.109.7), aws-gate (0.8.8) +10 more potentially affected by CVE-2026-34073 via cryptography (2.9.0)

cryptography PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.109.0b0, =0.3.0a0, =0.109.0b0, =2.0.0rc1, =2.3.7, =1.37.1, =1.37.8 - tornado-widgets 0.0.17 Source cves: CVE-2026-34073 Sourc...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2026-34073 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2026-34073 Source advisory:...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2026-26007 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2026-26007 Source advisory:...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2026-26007 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2026-26007 Source advisory:...

c2cwsgiutils (>=0.29.1, <=1.1.0), nlpknowledge (>=0.0.1, <=0.0.2.7) +4 more potentially affected by CVE-2025-71176 via pytest (3.2.3)

pytest PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - c2cwsgiutils =0.29.1, =0.0.1, =1.4.9, =0.1.0, =1.4.0.dev8, =1.4.0.dev9 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

cheetajwt (>=1.0.0, <=1.2.0), datalogue (>=0.29.3, <=0.39.0) +3 more potentially affected by CVE-2025-71176 via pytest (3.6.3)

pytest PYPI version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - cheetajwt =1.0.0, =0.29.3, =1.12.0, =1.14.5 - syne 0.0.1 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

inmanta-dev-dependencies (2.67.0), nerv (0.1.1) +2 more potentially affected by CVE-2025-71176 via pytest (7.3.0)

pytest PYPI version 7.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - inmanta-dev-dependencies 2.67.0 - nerv 0.1.1 - nmmo =2.0.4, =4.13.22, =4.13.24 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

c2cwsgiutils (>=1.2.0, <=1.3.0), masterqa (1.1.3) +4 more potentially affected by CVE-2025-71176 via pytest (3.2.5)

pytest PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - c2cwsgiutils =1.2.0, =1.0.1, =2.0.9, =1.4.13, =1.4.16 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...