magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-13346 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-13346 via pip (7.1.0)

pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-13346 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-13346 via pip (7.1.0)

pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...

pex (>=0.9.0, <=1.1.1), revscoring (>=0.6.4, <=2.0.4) +3 more potentially affected by CVE-2026-59890 via setuptools (15.2.0)

setuptools PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.9.0, =0.6.4, =1.4.1, =0.3.0, =0.3.2 - yt-formula-node 0.0.4 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-6357 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-6357 via pip (7.1.0)

pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-3219 via pip (7.1.0)

pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-3219 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-1703 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2025-8869 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

pex (>=0.9.0, <=1.1.1), revscoring (>=0.6.4, <=2.0.4) +3 more potentially affected by CVE-2024-6345 via setuptools (15.2.0)

setuptools PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.9.0, =0.6.4, =1.4.1, =0.3.0, =0.3.2 - yt-formula-node 0.0.4 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-8643 via pip (7.1.0)

pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-8643 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-8643 Source advisory: OSV:GHSA-WF93-45JW-7689...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-8643 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-8643 Source advisory: OSV:PYSEC-2026-196...

sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-8643 via pip (7.1.0)

pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-8643 Source advisory: OSV:PYSEC-2026-196...

sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-6357 via pip (7.1.0)

pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-6357 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-3219 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...

sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-3219 via pip (7.1.0)

pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...