aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2026-102598 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2026-102598 Source advisory: OSV:GHSA-G6X2-HCCM-HH4M...

bio-corgi (0.4.0), sepal-ui (>=2.10.1, <=2.10.2) potentially affected by CVE-2026-84380 via httpx2 (0.0.0)

httpx2 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpx2 and may be impacted: - bio-corgi 0.4.0 - sepal-ui =2.10.1, =2.10.2 Source cves: CVE-2026-84380 Source advisory: OSV:PYSEC-2026-3849...

bio-corgi (0.4.0), sepal-ui (>=2.10.1, <=2.10.2) potentially affected by CVE-2026-84379 via httpx2 (0.0.0)

httpx2 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpx2 and may be impacted: - bio-corgi 0.4.0 - sepal-ui =2.10.1, =2.10.2 Source cves: CVE-2026-84379 Source advisory: OSV:PYSEC-2026-3848...

bio-corgi (0.4.0), sepal-ui (>=2.10.1, <=2.10.2) potentially affected by CVE-2026-84382 via httpx2 (0.0.0)

httpx2 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpx2 and may be impacted: - bio-corgi 0.4.0 - sepal-ui =2.10.1, =2.10.2 Source cves: CVE-2026-84382 Source advisory: OSV:PYSEC-2026-3846...

bio-corgi (0.4.0), sepal-ui (>=2.10.1, <=2.10.2) potentially affected by CVE-2026-84382 via httpx2 (0.0.0)

httpx2 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpx2 and may be impacted: - bio-corgi 0.4.0 - sepal-ui =2.10.1, =2.10.2 Source cves: CVE-2026-84382 Source advisory: OSV:GHSA-8XX6-HGC6-GC2M...

bio-corgi (0.4.0), sepal-ui (>=2.10.1, <=2.10.2) potentially affected by CVE-2026-84380 via httpx2 (0.0.0)

httpx2 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpx2 and may be impacted: - bio-corgi 0.4.0 - sepal-ui =2.10.1, =2.10.2 Source cves: CVE-2026-84380 Source advisory: OSV:GHSA-PF96-P4FJ-6566...

bio-corgi (0.4.0), sepal-ui (>=2.10.1, <=2.10.2) potentially affected by CVE-2026-84379 via httpx2 (0.0.0)

httpx2 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpx2 and may be impacted: - bio-corgi 0.4.0 - sepal-ui =2.10.1, =2.10.2 Source cves: CVE-2026-84379 Source advisory: OSV:GHSA-H4X7-GW46-3WM6...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2026-21860 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2026-21860 Source advisory: OSV:PYSEC-2026-2044...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2025-66221 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2024-49766 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2024-34069 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2024-34069 Source advisory: OSV:PYSEC-2026-2043...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2026-27199 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2026-27199 Source advisory: OSV:PYSEC-2026-2320...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2026-27199 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2026-27199 Source advisory: OSV:GHSA-29VQ-49WR-VM6X...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2026-21860 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2026-21860 Source advisory: OSV:GHSA-87HC-H4R5-73F7...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2025-66221 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2025-66221 Source advisory: OSV:GHSA-HGF8-39GV-G3F2...

EUVD-2008-4852

Malware in sbrugna...

MAL-2025-8908 Malicious code in @malware-test-sepal-reify-trets-reeds/test-mlw3-sepal-reify-trets-reeds (npm)

The package @malware-test-sepal-reify-trets-reeds/test-mlw3-sepal-reify-trets-reeds was found to contain malicious code...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2024-49766 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2024-49766 Source advisory: OSV:GHSA-F9VJ-2WH5-FJ8J...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2024-34069 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2024-34069 Source advisory: OSV:GHSA-2G68-C3QC-8985...

groundingmeasurementapplication (>=0.0.1, <=0.0.2), voici (>=0.4.5, <=0.4.6) +1 more potentially affected by CVE-2024-30265 via voila (>=0.5.0a4, <=0.5.5)

voila PYPI version =0.5.0a4, =0.0.1, =0.4.5, =0.4.6 - voila-sepal-ui 0.5.0 Source cves: CVE-2024-30265 Source advisory: MEND:CVE-2024-30265...