duniterpy (0.40.8), jenkins-epo (>=1.159.0, <=1.160.0) potentially affected by CVE-2026-54274 via aiohttp (2.0.0rc1)

aiohttp PYPI version 2.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - duniterpy 0.40.8 - jenkins-epo =1.159.0, =1.160.0 Source cves: CVE-2026-54274 Source advisory: OSV:PYSEC-2026-2108...

botstory (>=0.0.33, <=0.0.37) potentially affected by CVE-2026-54273 via aiohttp (1.1.1)

aiohttp PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory =0.0.33, =0.0.37 Source cves: CVE-2026-54273 Source advisory: OSV:PYSEC-2026-2107...

botstory (>=0.0.33, <=0.0.37) potentially affected by CVE-2026-54274 via aiohttp (1.1.1)

aiohttp PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory =0.0.33, =0.0.37 Source cves: CVE-2026-54274 Source advisory: OSV:PYSEC-2026-2108...

muffin (>=0.4.0, <=0.4.2) potentially affected by CVE-2026-54274 via aiohttp (0.19.0)

aiohttp PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.4.0, =0.4.2 Source cves: CVE-2026-54274 Source advisory: OSV:PYSEC-2026-2108...

muffin (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-54274 via aiohttp (0.17.4)

aiohttp PYPI version 0.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.2.0, =0.2.1 Source cves: CVE-2026-54274 Source advisory: OSV:PYSEC-2026-2108...

aioservice (0.0.1), devtools-proxy (0.0.4) +4 more potentially affected by CVE-2026-54273 via aiohttp (1.1.5)

aiohttp PYPI version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioservice 0.0.1 - devtools-proxy 0.0.4 - fastcli 0.1.0 - goblin 1.0.0b2 - metadoc =0.9.1, =0.10.5 - python-functionsclient 0.0.1 Source cves:...

muffin (>=0.0.46, <=0.0.52) potentially affected by CVE-2026-54274 via aiohttp (0.15.0)

aiohttp PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.46, =0.0.52 Source cves: CVE-2026-54274 Source advisory: OSV:PYSEC-2026-2108...

homeassistant (0.42.1) potentially affected by CVE-2026-54274 via aiohttp (2.0.6)

aiohttp PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - homeassistant 0.42.1 Source cves: CVE-2026-54274 Source advisory: OSV:PYSEC-2026-2108...

aiopixiv (1.0.5) potentially affected by CVE-2026-54274 via aiohttp (2.0.4)

aiohttp PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiopixiv 1.0.5 Source cves: CVE-2026-54274 Source advisory: OSV:PYSEC-2026-2108...

muffin (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-54273 via aiohttp (0.17.2)

aiohttp PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.1, =0.1.4 Source cves: CVE-2026-54273 Source advisory: OSV:PYSEC-2026-2107...

hassmart-homeassistant (>=0.59.2, <=0.59.2.1), homeassistant (>=0.59.0, <=0.59.2) potentially affected by CVE-2026-54273 via aiohttp (2.3.5)

aiohttp PYPI version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hassmart-homeassistant =0.59.2, =0.59.0, =0.59.2 Source cves: CVE-2026-54273 Source advisory: OSV:PYSEC-2026-2107...

muffin (>=0.10.0, <=0.10.2), mutaprops (>=0.6.0, <=0.6.1) potentially affected by CVE-2026-54273 via aiohttp (1.0.2)

aiohttp PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.10.0, =0.6.0, =0.6.1 Source cves: CVE-2026-54273 Source advisory: OSV:PYSEC-2026-2107...

devtools-proxy (>=0.0.2, <=0.0.3) potentially affected by CVE-2026-50269 via aiohttp (1.1.4)

aiohttp PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - devtools-proxy =0.0.2, =0.0.3 Source cves: CVE-2026-50269 Source advisory: OSV:PYSEC-2026-2106...

polyswarm-api (>=0.1.0, <=0.2.2), polyswarm-client (>=1.0.0rc0, <=1.0.2) +1 more potentially affected by CVE-2026-50269 via aiohttp (2.3.1)

aiohttp PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - polyswarm-api =0.1.0, =1.0.0rc0, =0.2.0a7, =0.2.0a10 Source cves: CVE-2026-50269 Source advisory: OSV:PYSEC-2026-2106...

@aaravpos/appointment-barber-booking (>=1.0.0, <=5.0.0), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.9) +207 more potentially affected by CVE-2026-53663 via react-router (>=7.12.0, <=7.15.0)

react-router NPM version =7.12.0, =1.0.0, =1.0.1, =0.0.9-alpha-20260107202750-16b04dcbaa92c7fc2bbb580dbc1da723c76a5225, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.5.2, =2026.511.1, =1.0.1-LOG-1857-ui-tooltip-defined-mode.0, =0.0.1, =2.0.0-alpha.1 and more Source cves: CVE-2026-53663 Sourc...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +927 more potentially affected by CVE-2026-54293 via nltk (>=2.0.4, <=3.9.4)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-54293 Source advisory: MEND:CVE-2026-54293...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +1005 more potentially affected by CVE-2026-53540 via python-multipart (>=0.0.5, <=0.0.30)

python-multipart PYPI version =0.0.5, =0.5.3, =0.1.0, =0.2.1, =0.2.0, =0.5.1.dev0, =3.2.0, =1.5.2, =0.1.1, =0.1.4b1, =1.0.0, =1.5.5 - agbenchmark 0.0.10 and more Source cves: CVE-2026-53540 Source advisory: MEND:CVE-2026-53540...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +1005 more potentially affected by CVE-2026-53539 via python-multipart (>=0.0.5, <=0.0.29)

python-multipart PYPI version =0.0.5, =0.5.3, =0.1.0, =0.2.1, =0.2.0, =0.5.1.dev0, =3.2.0, =1.5.2, =0.1.1, =0.1.4b1, =1.0.0, =1.5.5 - agbenchmark 0.0.10 and more Source cves: CVE-2026-53539 Source advisory: MEND:CVE-2026-53539...

0x20bf (0.0.1), 2keys (0.5.1) +3561 more potentially affected by CVE-2026-54273 via aiohttp (>=0.6.4, <=3.14.0)

aiohttp PYPI version =0.6.4, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-54273 Source advisory: MEND:CVE-2026-54273...

0x20bf (0.0.1), 2keys (0.5.1) +3561 more potentially affected by CVE-2026-54279 via aiohttp (>=0.6.4, <=3.14.0)

aiohttp PYPI version =0.6.4, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-54279 Source advisory: MEND:CVE-2026-54279...