mimir-ai (0.0.3), rara-digitizer (>=1.0.0, <=1.5.8) potentially affected by CVE-2026-54651 via pypdf (5.0.0)

pypdf PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - mimir-ai 0.0.3 - rara-digitizer =1.0.0, =1.5.8 Source cves: CVE-2026-54651 Source advisory: OSV:PYSEC-2026-3018...

calibreweb (0.6.21), sysnet-pdffiller (>=1.1.0, <=1.2.1) potentially affected by CVE-2026-54651 via pypdf (3.15.5)

pypdf PYPI version 3.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - calibreweb 0.6.21 - sysnet-pdffiller =1.1.0, =1.2.1 Source cves: CVE-2026-54651 Source advisory: OSV:PYSEC-2026-3018...

chellow (>=1688456919.0.0, <=1692616986.0.0), cybrex (>=1.0.1, <=1.0.7) potentially affected by CVE-2026-54651 via pypdf (3.12.0)

pypdf PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chellow =1688456919.0.0, =1.0.1, =1.0.7 Source cves: CVE-2026-54651 Source advisory: OSV:PYSEC-2026-3018...

ai-enterprise-agent (>=0.0.4, <=0.0.9), almax-common (>=1.0.5.dev20240601224039, <=1.0.7.dev20240801212517) +25 more potentially affected by CVE-2026-54651 via pypdf (4.2.0)

pypdf PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - ai-enterprise-agent =0.0.4, =1.0.5.dev20240601224039, =2024.7.4, =0.6.22, =0.2.1, =0.2.0, =0.0.5, =0.2.1, =3.3.2, =0.1.0, =0.0.1, =4.7.1, =0.1.0, =0.1...

render50 (9.2.2) potentially affected by CVE-2026-54651 via pypdf (3.15.3)

pypdf PYPI version 3.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - render50 9.2.2 Source cves: CVE-2026-54651 Source advisory: OSV:PYSEC-2026-3018...

cewler (1.2.0.post1), python-xdoc (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-54651 via pypdf (4.0.1)

pypdf PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cewler 1.2.0.post1 - python-xdoc =0.1.0, =0.1.1 Source cves: CVE-2026-54651 Source advisory: OSV:PYSEC-2026-3018...

joulescope (>=1.1.14, <=1.5.0), joulescope-ui (>=1.0.30, <=1.4.2) potentially affected by CVE-2026-53720 via pymonocypher (3.1.3.6)

pymonocypher PYPI version 3.1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on pymonocypher and may be impacted: - joulescope =1.1.14, =1.0.30, =1.4.2 Source cves: CVE-2026-53720 Source advisory: OSV:PYSEC-2026-3000...

ailingo (>=0.2.0, <=0.4.0), articulo (>=0.3.1, <=0.5.1) +153 more potentially affected by CVE-2026-49825 via lxml-html-clean (>=0.1.0, <=0.4.4)

lxml-html-clean PYPI version =0.1.0, =0.2.0, =0.3.1, =0.1.19, =0.0.550, =0.70.0, =0.46.0, =0.1.0, =4.10.0, =1.0.0, =2.0.0, =0.1.0, =3.0.0, =1.0.0, =1.6.7, =2.1.1 and more Source cves: CVE-2026-49825 Source advisory: OSV:PYSEC-2026-2614...

wlhosted (2025.1.0) potentially affected by CVE-2026-50127 via weblate (5.16.2)

weblate PYPI version 5.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on weblate and may be impacted: - wlhosted 2025.1.0 Source cves: CVE-2026-50127 Source advisory: OSV:PYSEC-2026-3416...

almos-kit (>=0.1.1, <=1.2.0), bas-air-unit-network-dataset (>=0.5.0, <=0.5.1) +15 more potentially affected by CVE-2026-49452 via weasyprint (63.1.0)

weasyprint PYPI version 63.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - almos-kit =0.1.1, =0.5.0, =0.0.3, =2.2.0, =3.3.6, =0.3.17, =0.1.2, =0.1.1, =0.10.0, =0.3.3, =2.0.0, =0.9.0, =0.14.0 - textpress 0.1.2 and...

brs-xss (4.0.0), complio (0.1.2) +14 more potentially affected by CVE-2026-49452 via weasyprint (60.2.0)

weasyprint PYPI version 60.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - brs-xss 4.0.0 - complio 0.1.2 - gendazpack 0.1.0 - investments 0.2.0 - invocr =1.0.0, =0.1.0, =0.1.4.29, =0.1.0, =0.1.10, =21.8.0, =0.1.0,...

antipetros-discordbot (>=0.1.0, <=0.1.7) potentially affected by CVE-2026-49452 via weasyprint (52.2.0)

weasyprint PYPI version 52.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - antipetros-discordbot =0.1.0, =0.1.7 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

mpi-cbs-mediforms (>=0.1.0a3, <=0.3.1rc29) potentially affected by CVE-2026-49452 via weasyprint (53.0.0)

weasyprint PYPI version 53.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms =0.1.0a3, =0.3.1rc29 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

roc-punk (>=0.2.3, <=0.2.9) potentially affected by CVE-2026-49452 via weasyprint (0.28.0)

weasyprint PYPI version 0.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - roc-punk =0.2.3, =0.2.9 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

blabel (0.1.5), pdf-reports (>=0.3.3, <=0.3.4) potentially affected by CVE-2026-49452 via weasyprint (52.0.0)

weasyprint PYPI version 52.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - blabel 0.1.5 - pdf-reports =0.3.3, =0.3.4 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

cdbt (>=0.4.13, <=0.4.26), mdbt (>=0.4.27, <=0.6.2) potentially affected by CVE-2026-49360 via recce (0.35.0)

recce PYPI version 0.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on recce and may be impacted: - cdbt =0.4.13, =0.4.27, =0.6.2 Source cves: CVE-2026-49360 Source advisory: OSV:PYSEC-2026-3049...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2022-46295 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2022-46295 Source advisory: OSV:PYSEC-2026-2780...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2025-11000 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2025-11000 Source advisory: OSV:PYSEC-2026-2785...

pycham (>=2.1.3, <=2.1.7) potentially affected by CVE-2026-2704 via openbabel (2.4.0)

openbabel PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on openbabel and may be impacted: - pycham =2.1.3, =2.1.7 Source cves: CVE-2026-2704 Source advisory: OSV:PYSEC-2026-2774...

aioambient (>=0.1.2, <=0.1.3) potentially affected by CVE-2026-48802 via python-engineio (3.3.2)

python-engineio PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient =0.1.2, =0.1.3 Source cves: CVE-2026-48802 Source advisory: OSV:PYSEC-2026-3032...