a2grunnerp (>=0.1.0, <=0.1.8), abejacli (>=2.2.0rc3, <=2.2.8) +282 more potentially affected by CVE-2026-59205 via pillow (9.4.0)

pillow PYPI version 9.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - a2grunnerp =0.1.0, =2.2.0rc3, =1.8.15, =1.8.17, =0.0.1, =1.8.14, =1.2.0, =1.2.0, =0.5.9, =0.5.10 and more Source cves: CVE-2026-59205 Source advisor...

adversarial-robustness-toolbox (1.2.0), aristote-malo (1.9.5) +79 more potentially affected by CVE-2026-59199 via pillow (7.0.0)

pillow PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adversarial-robustness-toolbox 1.2.0 - aristote-malo 1.9.5 - auto-annotate =1.0.0, =1.0.2, =0.1.0.dev31, =1.0.1, =0.2.3, =0.0.1.25, =0.2.1, =0.0.2,...

adaptgym (>=0.1.0, <=0.1.2), agave-pyclient (>=1.0.0, <=1.1.2) +138 more potentially affected by CVE-2026-59199 via pillow (8.2.0)

pillow PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adaptgym =0.1.0, =1.0.0, =1.1.5, =1.2.3, =0.0.21, =1.0.1, =0.0.7, =0.15.0, =0.14.0, =0.3.0, =0.4.0 - arcor2-dobot 0.2.3 - arcor2-execution 0.16.0 -...

groupyapi (0.7.1) potentially affected by CVE-2026-59199 via pillow (2.5.3)

pillow PYPI version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - groupyapi 0.7.1 Source cves: CVE-2026-59199 Source advisory: OSV:PYSEC-2026-3451...

aamutils (>=0.0.1, <=0.0.10), aau-gomapedge-etl (>=0.3.2, <=0.4.1) +326 more potentially affected by CVE-2026-59199 via pillow (10.3.0)

pillow PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aamutils =0.0.1, =0.3.2, =0.1.0, =1.7.0, =0.9.5, =0.1.0, =0.1.10, =24.5.0, =1.0.5, =0.1.0, =0.1.1 - arcplot 1.0.0 and more Source cves:...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 170051277-trab-final-gces (>=0.3.0, <=0.5.0) +8999 more potentially affected by CVE-2026-59198 via pillow (>=5.2.0, <=12.2.0)

pillow PYPI version =5.2.0, =0.0.0, =0.3.0, =0.1.0, =0.5.0a0, =2.3.84, =0.1.0, =0.0.6, =0.1.0, =0.1.0, =2.0.0, =2.0.2 and more Source cves: CVE-2026-59198 Source advisory: MEND:CVE-2026-59198...

alchemy-modelgen (>=0.1.6, <=0.1.6.1), altimate-dataminion (>=0.0.1, <=0.2.5) +52 more potentially affected by CVE-2026-15736 via snowflake-sqlalchemy (>=1.2.0, <=1.9.0)

snowflake-sqlalchemy PYPI version =1.2.0, =0.1.6, =0.0.1, =1.0.0, =1.0.0rc1, =0.1.0, =1.0.1, =0.5.1, =1.0.5, =2.15.2, =0.2.1, =0.1.1, =0.1.0, =0.1.0a4, =0.0.7, =0.1.30, =0.9.5 and more Source cves: CVE-2026-15736 Source advisory: OSV:GHSA-8G6F-QW9X-4Q6Q...

ai.tock:bot-test (>=25.9.0, <=26.3.4), ai.tock:bot-test-base (>=25.9.0, <=26.3.4) +1174 more potentially affected by CVE-2026-15075 via io.vertx:vertx-core (>=5.0.0.cr1, <=5.1.4)

io.vertx:vertx-core MAVEN version =5.0.0.cr1, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.4 and more Source cves: CVE-2026-15075 Source advisory: SNYK:JAVA-IOVERTX-19433234...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +178 more potentially affected by CVE-2026-12482 via keras (2.8.0rc1)

keras PYPI version 2.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =0.1.11, =0.1.11, =0.6.3, =0.0.6, =0.0.1, =1.1.2, =1.1.17 and more Source cves: CVE-2026-12482 Sourc...

aggmap (>=1.1.1, <=1.2.1), ai-music-remixer (3.0.0) +112 more potentially affected by CVE-2026-12482 via keras (2.10.0rc1)

keras PYPI version 2.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aggmap =1.1.1, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.1.1, =0.1.9 - automea 0.0.13 - avici 1.0.5 - basic-pitch 0.2.3 and more...

subdependancy-packages-approuter (0.0.1) potentially affected by CVE-2026-27690 via @sap/approuter (20.8.3)

@sap/approuter NPM version 20.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/approuter and may be impacted: - subdependancy-packages-approuter 0.0.1 Source cves: CVE-2026-27690 Source advisory: OSV:GHSA-8M85-WQG7-C529...

subdependancy-packages-approuter (0.0.1) potentially affected by CVE-2026-27690 via @sap/approuter (20.8.3)

@sap/approuter NPM version 20.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/approuter and may be impacted: - subdependancy-packages-approuter 0.0.1 Source cves: CVE-2026-27690 Source advisory: GHSA-8M85-WQG7-C529...

@ynhcj/xiaoyi-channel (>=0.0.1-release20260506, <=0.0.232-next) potentially affected by CVE-2026-62191 via openclaw (2026.6.6)

openclaw NPM version 2026.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @ynhcj/xiaoyi-channel =0.0.1-release20260506, =0.0.232-next Source cves: CVE-2026-62191 Source advisory: SNYK:JS-OPENCLAW-17970561...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.18) +11 more potentially affected by CVE-2026-62192 via openclaw (>=2026.4.5, <=2026.6.6)

openclaw NPM version =2026.4.5, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.0.1-release20260506, =0.1.38, =1.0.0, =1.3.1 Source cves: CVE-2026-62192 Source advisory: SNYK:JS-OPENCLAW-17970202...

@openclaw/kitchen-sink (0.2.9), @shadowob/openclaw-shadowob (>=1.1.50, <=1.1.64) +1 more potentially affected by CVE-2026-62193 via openclaw (>=2026.6.5, <=2026.6.6)

openclaw NPM version =2026.6.5, =1.1.50, =0.0.1-release20260506, =0.0.232-next Source cves: CVE-2026-62193 Source advisory: SNYK:JS-OPENCLAW-17970567...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.9.17, <=0.9.18) +3 more potentially affected by CVE-2026-62195 via openclaw (>=2026.5.20, <=2026.6.5)

openclaw NPM version =2026.5.20, =0.1.8, =0.9.17, =0.2.6, =1.1.50, =1.0.0, =1.3.1 Source cves: CVE-2026-62195 Source advisory: SNYK:JS-OPENCLAW-17970568...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.9.17, <=0.9.18) +4 more potentially affected by CVE-2026-62194 via openclaw (>=2026.5.20, <=2026.6.6)

openclaw NPM version =2026.5.20, =0.1.8, =0.9.17, =0.2.6, =1.1.50, =0.0.1-release20260506, =1.0.0, =1.3.1 Source cves: CVE-2026-62194 Source advisory: SNYK:JS-OPENCLAW-17970210...

@0xwork/connect (0.1.9), @chrysb/alphaclaw (>=0.9.17, <=0.9.18) +2 more potentially affected by CVE-2026-62198 via openclaw (>=2026.5.28, <=2026.6.5)

openclaw NPM version =2026.5.28, =0.9.17, =0.2.8, =1.1.50, =1.1.64 Source cves: CVE-2026-62198 Source advisory: SNYK:JS-OPENCLAW-17966763...

langflow-base (0.1.1), langflow-base-nightly (>=0.1.0.dev7, <=0.1.1.dev6) +1 more potentially affected by CVE-2026-62240 via crewai-tools (0.17.0)

crewai-tools PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on crewai-tools and may be impacted: - langflow-base 0.1.1 - langflow-base-nightly =0.1.0.dev7, =0.1.1.dev6 - langinfra-base 0.1.1 Source cves: CVE-2026-62240 Source advisory...

@ynhcj/xiaoyi-channel (>=0.0.1-release20260506, <=0.0.232-next) potentially affected by CVE-2026-62191 via openclaw (2026.6.6)

openclaw NPM version 2026.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @ynhcj/xiaoyi-channel =0.0.1-release20260506, =0.0.232-next Source cves: CVE-2026-62191 Source advisory: MEND:CVE-2026-62191...