alpha-data-py (>=1.0.0, <=1.0.9), beeper-hangups (>=0.5.0a1, <=0.5.0a5) +7 more potentially affected by CVE-2025-4565 via protobuf (3.16.0)

protobuf PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - alpha-data-py =1.0.0, =0.5.0a1, =0.0.34, =0.20.5rc3, =0.2.0b1, =0.1.1.1, =4.4.0, =1.0.0, =1.0.1 Source cves: CVE-2025-4565 Source advisory:...

pylocalsmtp (>=0.2.1, <=0.4.2) potentially affected by CVE-2025-47287 via tornado (3.0.1)

tornado PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - pylocalsmtp =0.2.1, =0.4.2 Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-1974...

stashpy (>=0.2.0, <=0.2.1) potentially affected by CVE-2025-47287 via tornado (4.3.0b2)

tornado PYPI version 4.3.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - stashpy =0.2.0, =0.2.1 Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-1974...

3d-rcnet (>=0.1.0, <=0.2.3), alignn (>=2022.11.6, <=2023.1.10) +58 more potentially affected by CVE-2025-3730 via torch (1.12.0)

torch PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - 3d-rcnet =0.1.0, =2022.11.6, =2022.10.23, =1.44.0, =0.1.3, =3.6.0, =0.1.1, =0.0.5, =0.1.0, =1.5.0, =1.2.0, =0.0.16, =0.2.4, =2.3.1, =2.3.9 and more...

adaswarm (>=0.0.1, <=0.0.2), allennlp (>=2.8.0, <=2.9.1) +81 more potentially affected by CVE-2025-3730 via torch (1.10.2)

torch PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - adaswarm =0.0.1, =2.8.0, =2.8.0, =0.1.0, =0.2.1b20210731, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.40.0, =0.1.0, =0.1.2, =0.2.8 -...

allennlp (>=0.9.1.dev20200404, <=0.9.1.dev20200413), pygaggle (0.0.1) potentially affected by CVE-2025-1194 via transformers (2.7.0)

transformers PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200404, =0.9.1.dev20200413 - pygaggle 0.0.1 Source cves: CVE-2025-1194 Source advisory: OSV:PYSEC-2026-1984...

django-rest-authemail (1.6.0) potentially affected by CVE-2026-53877 via django (1.11.17)

django PYPI version 1.11.17 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail 1.6.0 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

aiida-core (1.0.0) potentially affected by CVE-2026-48588 via django (1.11.25)

django PYPI version 1.11.25 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aiida-core 1.0.0 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

django-database-conn-pool (>=1.1.0, <=1.1.1), django-learngual (>=0.39.0, <=0.895.0) +2 more potentially affected by CVE-2026-48588 via django (4.0.8)

django PYPI version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-database-conn-pool =1.1.0, =0.39.0, =0.11.21, =0.50.3 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

ashley (>=1.0.0b6, <=1.1.2), autoreduce-db (>=22.0.0.dev2, <=22.0.0.dev6) +10 more potentially affected by CVE-2026-53877 via django (3.2.4)

django PYPI version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ashley =1.0.0b6, =22.0.0.dev2, =22.0.0.dev0, =22.0.0.dev1, =22.0.0.dev0, =22.0.0.dev10, =0.0.15, =1.0.0, =0.19.0, =0.21.1 Source cves: CVE-2026-5387...

drf-tus (1.21.1), richie (0.1.0) potentially affected by CVE-2026-48588 via django (1.11.14)

django PYPI version 1.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - drf-tus 1.21.1 - richie 0.1.0 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

boorunaut (0.4.3), caluma (>=6.3.2, <=6.4.0) potentially affected by CVE-2026-53877 via django (2.2.15)

django PYPI version 2.2.15 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - boorunaut 0.4.3 - caluma =6.3.2, =6.4.0 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

nemo (>=1.22.0, <=1.22.1), patchman (>=1.2.3, <=1.2.4) potentially affected by CVE-2026-48588 via django (1.11.27)

django PYPI version 1.11.27 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - nemo =1.22.0, =1.2.3, =1.2.4 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

aimmo (>=2.7.1, <=2.9.0), aistudio-scheduler-lock (>=1.0.6a1, <=1.0.6) +23 more potentially affected by CVE-2026-53877 via django (3.2.19)

django PYPI version 3.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.7.1, =1.0.6a1, =0.1.28, =6.30.5, =6.30.5, =0.105.0rc2, =0.106.0 - grimoire-elk-public-inbox 0.1.0 and more Source cves: CVE-2026-53877...

django-canary-endpoint (0.1.2), django-debug-toolbar (>=0.10.0, <=0.10.2) potentially affected by CVE-2026-53878 via django (1.5.12)

django PYPI version 1.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-canary-endpoint 0.1.2 - django-debug-toolbar =0.10.0, =0.10.2 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...

alcali (3003.1.0), ashley (1.0.0b5) +8 more potentially affected by CVE-2026-53878 via django (3.1.7)

django PYPI version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali 3003.1.0 - ashley 1.0.0b5 - castordashboard =2.2.0, =20.24.0, =1.0.9, =0.3.8, =9.999.0, =10.0.0 - papermerge-core 2.0.0rc46 Source cves:...

@edgebrix-sdk/react (>=0.0.58, <=0.0.74), @kimia_software/tellair-wc (0.0.0) +16 more potentially affected by CVE-2026-56812 via phoenix (>=1.6.2, <=1.6.16)

phoenix NPM version =1.6.2, =0.0.58, =0.8.10, =0.1.8, =0.1.5, =0.1.0-rc0, =0.8.1, =0.0.1, =0.0.1, =0.0.0-PR-1--182e1d3, =19.0.0-beta.1, =1.0.23, =0.3.0, =0.1.1, =0.1.6 and more Source cves: CVE-2026-56812 Source advisory: OSV:EEF-CVE-2026-56812...

@absinthe/graphql-playground (>=1.3.1, <=1.3.5), @absinthe/socket (>=0.1.0, <=0.2.0) +52 more potentially affected by CVE-2026-56812 via phoenix (>=1.3.0, <=1.5.12)

phoenix NPM version =1.3.0, =1.3.1, =0.1.0, =0.1.2, =0.1.0, =0.1.2, =1.7.5, =1.5.1, =1.7.5, =1.8.1, =1.0.0, =1.5.6, =1.8.1, =1.8.1, =1.7.26, =1.7.26, =1.16.6-beta-eaa4d39d and more Source cves: CVE-2026-56812 Source advisory: OSV:EEF-CVE-2026-56812...

@knocklabs/client (>=0.21.6, <=0.22.1), @knocklabs/expo (>=0.5.0, <=0.6.9) +8 more potentially affected by CVE-2026-56812 via phoenix (>=1.8.0, <=1.8.7)

phoenix NPM version =1.8.0, =0.21.6, =0.5.0, =0.11.0, =0.13.0, =0.8.0, =0.0.2, =0.0.1, =0.0.2, =0.0.1, =2.1.8, =2.5.4 Source cves: CVE-2026-56812 Source advisory: OSV:EEF-CVE-2026-56812...

@abtnode/analytics (>=1.16.13-beta-0086a35d, <=1.17.13-beta-20260613-094425-b81920c8), @abtnode/auth (>=1.3.13, <=1.17.13-beta-20260613-094425-b81920c8) +185 more potentially affected by CVE-2026-56812 via phoenix (>=1.7.2, <=1.7.21)

phoenix NPM version =1.7.2, =1.16.13-beta-0086a35d, =1.3.13, =1.1.12, =1.6.23, =1.16.6-beta-08670107, =1.0.0, =1.16.33-beta-20241105-141729-e4608175, =1.0.0, =1.0.35, =1.16.33-beta-20241105-141729-e4608175, =1.0.2, =1.16.33-beta-20241105-141729-e4608175, =1.16.33-beta-20241105-141729-e4608175,...