aio-tinder (>=0.1.7, <=0.1.8) potentially affected by CVE-2024-30251 via aiohttp (1.0.1)

aiohttp PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.7, =0.1.8 Source cves: CVE-2024-30251 Source advisory: OSV:PYSEC-2026-1098...

aiohttp-cors (0.3.0), aslack (0.11.0) +1 more potentially affected by CVE-2024-30251 via aiohttp (0.20.2)

aiohttp PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiohttp-cors 0.3.0 - aslack 0.11.0 - muffin =0.5.2, =0.5.12 Source cves: CVE-2024-30251 Source advisory: OSV:PYSEC-2026-1098...

muffin (>=0.0.107, <=0.1.0) potentially affected by CVE-2024-30251 via aiohttp (0.17.1)

aiohttp PYPI version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.107, =0.1.0 Source cves: CVE-2024-30251 Source advisory: OSV:PYSEC-2026-1098...

botstory (>=0.0.33, <=0.0.37) potentially affected by CVE-2024-30251 via aiohttp (1.1.1)

aiohttp PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory =0.0.33, =0.0.37 Source cves: CVE-2024-30251 Source advisory: OSV:PYSEC-2026-1098...

botstory (0.0.63) potentially affected by CVE-2024-30251 via aiohttp (2.0.1)

aiohttp PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory 0.0.63 Source cves: CVE-2024-30251 Source advisory: OSV:PYSEC-2026-1098...

homeassistant (>=0.58.0, <=0.58.1), pyplanet (>=0.5.0, <=0.5.2) +1 more potentially affected by CVE-2024-27306 via aiohttp (2.3.2)

aiohttp PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - homeassistant =0.58.0, =0.5.0, =0.6.0, =0.6.2 Source cves: CVE-2024-27306 Source advisory: OSV:PYSEC-2026-1102...

pyatv (>=0.1.2, <=0.1.3) potentially affected by CVE-2024-27306 via aiohttp (1.3.0)

aiohttp PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pyatv =0.1.2, =0.1.3 Source cves: CVE-2024-27306 Source advisory: OSV:PYSEC-2026-1102...

scriptworker (0.2.1) potentially affected by CVE-2024-27306 via aiohttp (0.22.0a0)

aiohttp PYPI version 0.22.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - scriptworker 0.2.1 Source cves: CVE-2024-27306 Source advisory: OSV:PYSEC-2026-1102...

aiogremlin (3.2.6rc1), aiopogo (>=2.0.2, <=2.0.4) +22 more potentially affected by CVE-2024-27306 via aiohttp (2.2.5)

aiohttp PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin 3.2.6rc1 - aiopogo =2.0.2, =0.1.1, =1.0.1, =1.0.0, =1.0.0, =2.1.0rc1, =2.0.0, =0.51.0, =0.2.0, =0.0.0, =0.1.1, =1.6.2, =1.6.6 and more...

dagster-mlflow (>=0.19.11, <=0.21.4), databricks-session (0.1.9) +14 more potentially affected by CVE-2024-1558 via mlflow (1.27.0)

mlflow PYPI version 1.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.19.11, =0.3.0, =0.0.4.dev3, =3.0.1, =4.0.2, =0.1.0, =3.2.18, =0.1.0, =0.0.1.dev202206240024, =0.1.0, =0.1.5 and more Source cves:...

apeiron (0.9.0) potentially affected by CVE-2024-3772 via pydantic (0.8.0)

pydantic PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - apeiron 0.9.0 Source cves: CVE-2024-3772 Source advisory: OSV:PYSEC-2026-1812...

flown (>=0.0.1, <=0.1.0) potentially affected by CVE-2024-1594 via mlflow (1.17.0)

mlflow PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flown =0.0.1, =0.1.0 Source cves: CVE-2024-1594 Source advisory: OSV:PYSEC-2026-1655...

openstef (>=3.2.0a0, <=3.2.6) potentially affected by CVE-2024-1594 via mlflow (1.25.1)

mlflow PYPI version 1.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - openstef =3.2.0a0, =3.2.6 Source cves: CVE-2024-1594 Source advisory: OSV:PYSEC-2026-1655...

africanwhisper (>=0.2.8, <=0.9.0), aishell (>=2023.3.3, <=2023.4.11) +81 more potentially affected by CVE-2024-22423 via yt-dlp (>=2021.9.2, <=2024.3.10)

yt-dlp PYPI version =2021.9.2, =0.2.8, =2023.3.3, =0.1.0, =0.3.0, =0.0.4, =0.9.0, =1.4.0, =1.1.1, =0.1.0, =1.0.2, =1.0.1.1, =2.0.0a1, =0.1.3, =0.1.9 and more Source cves: CVE-2024-22423 Source advisory: OSV:PYSEC-2026-2066...

acapy-patched-old (0.5.6), agl-predict-endo-frame (0.1.1) +271 more potentially affected by CVE-2024-28219 via pillow (7.2.0)

pillow PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - acapy-patched-old 0.5.6 - agl-predict-endo-frame 0.1.1 - ailab-lite =0.1.1, =0.0.2, =0.3.10, =0.1.0, =2020.1.0, =0.9.0, =0.9.0, =0.8.1, =0.8.1,...

memegen-desktop (>=0.0.1, <=0.1.1), moca (0.3.3) +1 more potentially affected by CVE-2024-28219 via pillow (3.3.1)

pillow PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - memegen-desktop =0.0.1, =0.0.4.dev68, =0.0.5.dev3 Source cves: CVE-2024-28219 Source advisory: OSV:PYSEC-2026-1793...

acmetk (0.0.2), aioasuswrt (1.3.3) +136 more potentially affected by CVE-2023-50782 via cryptography (3.3.2)

cryptography PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - acmetk 0.0.2 - aioasuswrt 1.3.3 - ais-dom =2021.3.0b4, =1.6.0, =10.0.0, =1.10.0, =1.8.0, =2.20.0, =2.20.0, =1.0.1, =0.3.27, =0.5.6, =0.8...

activedirectoryenum (>=0.4.0, <=0.4.6), adversarial-labeller (0.1.8) +117 more potentially affected by CVE-2023-50782 via cryptography (2.8.0)

cryptography PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - activedirectoryenum =0.4.0, =0.1.2, =0.105.2b1, =5.0.3, =0.6.1, =1.0.0.104260, =0.0.2, =1.1.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0,...

aepp-sdk (>=0.18.0.3, <=0.18.0.4), atlassian-jwt-auth (>=3.3.1, <=4.0.1) +19 more potentially affected by CVE-2023-50782 via cryptography (2.2.2)

cryptography PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aepp-sdk =0.18.0.3, =3.3.1, =0.2.2, =0.1.1, =0.16.8, =0.10.4, =1.6.517, =3.0.4, =0.6.7, =0.3.7, =1.4.5, =2.0.1 and more Source cves:...

airflow-run (0.4.9), ais-dom (>=0.117.0b0, <=2021.2.4) +49 more potentially affected by CVE-2024-0727 via cryptography (3.2.0)

cryptography PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - airflow-run 0.4.9 - ais-dom =0.117.0b0, =2.0.1.dev14, =2.0.2 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 -...