sapsan (>=0.6.1, <=0.6.2) potentially affected by CVE-2026-2614 via mlflow (1.25.0)

mlflow PYPI version 1.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sapsan =0.6.1, =0.6.2 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...

llm-foundry (>=0.9.1, <=0.10.0), mlflow-pytorch-exp (0.0.1) potentially affected by CVE-2026-2614 via mlflow (2.14.3)

mlflow PYPI version 2.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - llm-foundry =0.9.1, =0.10.0 - mlflow-pytorch-exp 0.0.1 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...

paoding (0.1.1), pytorch-segmentation-models-trainer (0.12.0) potentially affected by CVE-2026-31221 via pytorch-lightning (1.4.8)

pytorch-lightning PYPI version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - paoding 0.1.1 - pytorch-segmentation-models-trainer 0.12.0 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

formerbox (>=0.1.8, <=0.1.10), npvcc2016 (>=1.0.3, <=1.2.1) +2 more potentially affected by CVE-2026-31221 via pytorch-lightning (0.10.0)

pytorch-lightning PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - formerbox =0.1.8, =1.0.3, =1.2.1 - pytorch-forecasting 0.5.0 - pytorch-pqrnn 0.1.0 Source cves: CVE-2026-31221 Source advisor...

autogluon (>=0.4.1b20220511, <=0.5.3b20221005), autogluon-multimodal (>=0.4.3b20220616, <=0.5.3b20221005) +38 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.5.post0)

pytorch-lightning PYPI version 1.6.5.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.4.1b20220511, =0.4.3b20220616, =0.4.1b20220511, =1.0.0, =0.1.3, =0.5.33, =0.1.5, =0.6.0, =0.6.1, =0.47.0,...

bio-transformers (>=0.0.7, <=0.1.2), biome-text (>=3.0.0, <=3.2.1) +21 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.3.8)

pytorch-lightning PYPI version 1.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bio-transformers =0.0.7, =3.0.0, =0.5.9, =0.1.0, =0.0.22, =0.0.11, =0.7.1, =0.4.5, =0.4.6 and more Source cves: CVE-2026-31221...

cait (1.1.3), contextualized-ml (>=0.2.5, <=0.2.6) +4 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.9.4)

pytorch-lightning PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cait 1.1.3 - contextualized-ml =0.2.5, =0.3.0, =0.1.0, =0.2.0 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1128 more potentially affected by CVE-2026-44843 via langchain-core (>=0.0.1, <=0.3.84)

langchain-core PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =3.2.0, =2.1.7, =0.0.2, =0.0.5 - agentc-langchain 1.0.0 and more Source cves: CVE-2026-44843 Source advisory: OSV:PYSEC-2026-2564...

aalto-gpu (0.1.0), ballet-assemble (>=0.8.2, <=0.8.8) +41 more potentially affected by CVE-2026-42557 via jupyterlab (2.3.2)

jupyterlab PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - aalto-gpu 0.1.0 - ballet-assemble =0.8.2, =1.0.0rc1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =0.1.0, =0.0.2, =1.31.6, =0.1.0, =0.3.0, =0.3.0, =0.5.0...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) potentially affected by CVE-2026-42557 via jupyterlab (3.4.5)

jupyterlab PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.0.7 Source cves: CVE-2026-42557 Source advisory: OSV:PYSEC-2026-2537...

coiled-runtime (>=0.2.0, <=0.2.1), here-search-demo (>=0.8.0, <=0.8.5) +5 more potentially affected by CVE-2026-42557 via jupyterlab (3.5.0)

jupyterlab PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - coiled-runtime =0.2.0, =0.8.0, =0.2.0b2, =1.0.0, =0.0.3, =1.0.0a20, =1.0.1, =1.0.1.6 Source cves: CVE-2026-42557 Source advisory:...

10xscale-agentflow-cli (0.1.5), a2 (>=0.1.0, <=0.3.17) +984 more potentially affected by CVE-2026-42561 via python-multipart (>=0.0.5, <=0.0.26)

python-multipart PYPI version =0.0.5, =0.1.0, =0.2.1, =0.2.0, =0.5.1.dev0, =3.2.0, =1.5.2, =0.1.1, =0.1.4b1, =1.0.0, =0.1.8, =0.27.6 and more Source cves: CVE-2026-42561 Source advisory: OSV:PYSEC-2026-3039...

aaa-ml-datasets-course (1.0.0), ale-uy (1.5.0) +77 more potentially affected by CVE-2026-42557 via notebook (>=7.0.0, <=7.5.5)

notebook PYPI version =7.0.0, =1.0.1, =0.1.0, =1.6.4b1, =0.0.1, =0.3.1, =0.1.0, =0.0.1, =0.0.2, =1.0.6, =1.1.0 - credalabs-python-toolbox 0.1.1 - docualgo 0.4.2 and more Source cves: CVE-2026-42557 Source advisory: OSV:PYSEC-2026-2681...

invertedai-drive (0.1.0) potentially affected by CVE-2026-42557 via jupyterlab (3.4.4)

jupyterlab PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - invertedai-drive 0.1.0 Source cves: CVE-2026-42557 Source advisory: OSV:PYSEC-2026-2537...

atacworks (>=0.3.0, <=0.3.2) potentially affected by CVE-2026-42557 via jupyterlab (2.1.4)

jupyterlab PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks =0.3.0, =0.3.2 Source cves: CVE-2026-42557 Source advisory: OSV:PYSEC-2026-2537...

atacworks (0.3.3), john-toolbox (>=0.1.0, <=0.3.1) potentially affected by CVE-2026-42557 via jupyterlab (2.1.5)

jupyterlab PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks 0.3.3 - john-toolbox =0.1.0, =0.3.1 Source cves: CVE-2026-42557 Source advisory: OSV:PYSEC-2026-2537...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-42557 via jupyterlab (3.3.3)

jupyterlab PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-42557 Source advisory: OSV:PYSEC-2026-2537...

django-fab-deployer (>=0.0.4, <=0.0.11) potentially affected by CVE-2026-44405 via paramiko (1.15.1)

paramiko PYPI version 1.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - django-fab-deployer =0.0.4, =0.0.11 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

chaosmonkey (>=1.0.8, <=1.1.0), cloudmesh-client (>=4.5.0, <=4.7.3) +1 more potentially affected by CVE-2026-44405 via paramiko (2.1.1)

paramiko PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - chaosmonkey =1.0.8, =4.5.0, =0.8.0, =0.9.0 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

parallel-ssh (1.1.1) potentially affected by CVE-2026-44405 via paramiko (2.1.6)

paramiko PYPI version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - parallel-ssh 1.1.1 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...