al-for-design (0.0.1), autogluon (>=0.0.5, <=0.1.0b20210209) +48 more potentially affected by CVE-2026-55380 via pillow (6.2.1)

pillow PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - al-for-design 0.0.1 - autogluon =0.0.5, =0.0.15b20201014, =0.0.15b20201024, =0.0.16b20210114, =0.0.15b20201024, =0.0.121, =0.0.1, =0.0.1, =0.0.1,...

django-codenerix (1.0.0) potentially affected by CVE-2026-54060 via pillow (2.6.1)

pillow PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-codenerix 1.0.0 Source cves: CVE-2026-54060 Source advisory: OSV:PYSEC-2026-2254...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 170051277-trab-final-gces (>=0.3.0, <=0.5.0) +9200 more potentially affected by CVE-2026-55379 via pillow (>=2.0.0, <=12.2.0)

pillow PYPI version =2.0.0, =0.0.0, =0.3.0, =0.1.0, =0.5.0a0, =2.3.84, =0.1.0, =0.0.6, =0.1.0, =0.1.0, =1.0.2 and more Source cves: CVE-2026-55379 Source advisory: MEND:CVE-2026-55379...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35338 via uu_chmod (>=0.0.14, <=0.0.16)

uuchmod CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35338 Source advisory: OSV:GHSA-4C7Q-4928-8445...

agenticmem (>=0.1.4.1, <=0.1.5.0), biomni-bridge (>=0.3.1, <=0.3.3) +27 more potentially affected by CVE-2026-49452 via weasyprint (66.0.0)

weasyprint PYPI version 66.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - agenticmem =0.1.4.1, =0.3.1, =1.0.1, =0.1.2, =2025.1.0b3, =2026.3.0b2, =1.2.15, =2025.1.0b3, =1.0.3, =0.1.0, =1.59.6rc0, =1.67.4 and more...

mpi-cbs-mediforms (0.1.0a2) potentially affected by CVE-2026-49452 via weasyprint (58.0.0)

weasyprint PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms 0.1.0a2 Source cves: CVE-2026-49452 Source advisory: OSV:GHSA-JHHC-3HCP-QHM5...

io.kaoto.forage:forage-jms (1.5.0), io.kaoto.forage:forage-jms-artemis (1.5.0) +30 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-jms (>=4.19.0, <=4.20.0)

org.apache.camel:camel-jms MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.36.0 and more Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890710...

-react-file-list-components (1.1.1), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +41012 more potentially affected by CVE-2026-14802 via react-dev-utils (>=0.1.1, <=12.1.0-next.26)

react-dev-utils NPM version =0.1.1, =1.0.1, =0.1.0, =0.1.0, =0.1.6 - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 - 0scarclassf 1.0.1 - 0scarclassg 1.0.1 - 0scarclassh 1.0.1 - 0scarclassi 1.0.1 and more Source cves: CVE-2026-148...

dragonn (0.4.2), dream-on-gym (0.0.1) +5 more potentially affected by CVE-2022-35999 via tensorflow-gpu (1.15.0)

tensorflow-gpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - dragonn 0.4.2 - dream-on-gym 0.0.1 - ml4a =0.1.0, =0.0.3, =0.3.0, =0.9.0, =0.0.5, =0.0.88 Source cves: CVE-2022-35999 Source...

blobxfer (1.3.1), kfserving (0.2.1.0) potentially affected by CVE-2022-30187 via azure-storage-blob (1.3.0)

azure-storage-blob PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - blobxfer 1.3.1 - kfserving 0.2.1.0 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-784...

aio-tinder (>=0.1.1, <=0.1.8), aiobitcoin (>=0.5.2, <=0.75.14) +127 more potentially affected by CVE-2022-31116 via ujson (1.35.0)

ujson PYPI version 1.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - aio-tinder =0.1.1, =0.5.2, =0.1.0, =0.1.1, =0.1.3, =0.1.0, =0.1.0, =0.0.1a1, =2.0.3, =1.1.0rc6, =2.0.0, =1.0.1, =1.0.16.1 - ax 0.39.0 and more Source...

aiotdlib (>=0.8.2, <=0.10.0), bootleg (1.0.1) +15 more potentially affected by CVE-2022-31116 via ujson (4.0.2)

ujson PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - aiotdlib =0.8.2, =10.0.4, =0.1.0, =0.20.2, =1.0.0, =0.3.0a1, =1.2.1, =0.0.6, =0.9.0, =0.9.13 and more Source cves: CVE-2022-31116 Source advisory:...

agrothon (>=1.1.5, <=1.3.2), aiogeoip (0.0.4) +33 more potentially affected by CVE-2022-31116 via ujson (3.2.0)

ujson PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - agrothon =1.1.5, =1.0.20, =0.3.6, =0.0.3, =1.5.0, =0.1.0, =0.1.2, =0.4.0, =0.1.0, =0.0.0.2.5, =0.15.2, =0.15.4 - hammurabi 0.7.4 and more Source cves:...

datahtml (>=0.1.0, <=0.4.5), psychopy-lib (>=2022.1.4, <=2023.1.3) +1 more potentially affected by CVE-2022-31117 via ujson (4.2.0)

ujson PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - datahtml =0.1.0, =2022.1.4, =0.4.1, =0.4.2 Source cves: CVE-2022-31117 Source advisory: OSV:PYSEC-2026-1056...

anomalydetection (0.0.0.dev1), csh-ldap (>=2.2.1.dev6, <=2.3.1.dev4) +10 more potentially affected by CVE-2021-46823 via python-ldap (>=3.0.0, <=3.3.1)

python-ldap PYPI version =3.0.0, =2.2.1.dev6, =0.4.4a3, =1.0.0, =0.0.0, =1.0.0, =1.1.7, =0.4.4a3, =0.0.1, =1.3.3, =0.8.0, =0.9.2 Source cves: CVE-2021-46823 Source advisory: OSV:PYSEC-2026-912...

vcap (>=0.2.4.dev13, <=0.3.1) potentially affected by CVE-2022-29202 via tensorflow-gpu (1.15.4)

tensorflow-gpu PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - vcap =0.2.4.dev13, =0.3.1 Source cves: CVE-2022-29202 Source advisory: OSV:PYSEC-2026-983...

audeep (>=0.9.2, <=0.9.6a1), cryocare (>=0.0.1, <=0.0.2) +17 more potentially affected by CVE-2022-29197 via tensorflow-gpu (1.15.5)

tensorflow-gpu PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - audeep =0.9.2, =0.0.1, =0.6.7a1, =0.2.5, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =1.3.0, =0.0.4, =0.1.3, =0.4.0, =0.0.6, =0.0.8 and more...

verse16 (>=0.1.1, <=0.1.2) potentially affected by CVE-2022-29193 via tensorflow-gpu (1.15.3)

tensorflow-gpu PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - verse16 =0.1.1, =0.1.2 Source cves: CVE-2022-29193 Source advisory: OSV:PYSEC-2026-942...

altv (>=15.0.0-dev.0, <=16.1.1), altv_internal_core_resource (>=15.0.0-dev.0, <=16.1.1) +405 more potentially affected by unknown CVE via cxx (>=1.0.1, <=1.0.131)

cxx CARGO version =1.0.1, =15.0.0-dev.0, =15.0.0-dev.0, =15.0.0-dev2, =15.0.0-dev42, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1, =0.26.0 - autocxx-idalib 0.30.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0202...

a62-emotion (>=0.10.11, <=0.11.4), adcl (>=0.1.2, <=0.1.4) +160 more potentially affected by CVE-2026-12481 via keras (2.11.0)

keras PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.10.11, =0.1.2, =1.3.0, =1.2.36, =1.0.3, =0.3.1, =0.0.3, =0.2.4, =2.0.0, =0.1.10, =0.0.0, =0.3.1 - brainglobe-workflows 1.0.0 and more...