confinedbrowniananalysis (>=1.0.1, <=1.0.3), hocmo (1.0.1) +3 more potentially affected by CVE-2026-40171 via jupyterlab (3.4.8)

jupyterlab PYPI version 3.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - confinedbrowniananalysis =1.0.1, =0.2.10, =0.3.5 - retrolab 0.3.21 - wraplorenzmie 1.0.0 Source cves: CVE-2026-40171 Source advisory:...

ibis-vega-transform (4.0.0), pangsitpy (0.0.3) +1 more potentially affected by CVE-2026-40171 via jupyterlab (2.0.0)

jupyterlab PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ibis-vega-transform 4.0.0 - pangsitpy 0.0.3 - pyomu 0.2.2 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

muvimaker (0.3.0) potentially affected by CVE-2026-40171 via jupyterlab (3.2.5)

jupyterlab PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - muvimaker 0.3.0 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

jaeger-lab-to-nwb (0.1.1), xircuits (1.3.0) potentially affected by CVE-2026-40171 via jupyterlab (3.3.2)

jupyterlab PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jaeger-lab-to-nwb 0.1.1 - xircuits 1.3.0 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

atacworks (0.3.4), atoti-jupyterlab (0.5.0) +4 more potentially affected by CVE-2026-40171 via jupyterlab (3.0.18)

jupyterlab PYPI version 3.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks 0.3.4 - atoti-jupyterlab 0.5.0 - jupyterlab-apod 0.1.0 - jupyterlab-kernelspy =3.0.0, =1.0.0a0, =1.1.0, =1.2.3 Source cves:...

airflow-clickhouse-plugin (1.4.0), dataflow-airflow (>=2.10.5, <=2.10.10) +15 more potentially affected by CVE-2026-38743 via apache-airflow (2.10.5)

apache-airflow PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin 1.4.0 - dataflow-airflow =2.10.5, =1.7.15, =1.8.0rc2, =5.1.0, =1.4.23, =0.21.6, =1.6.35, =1.23.18, =1.19....

contra-rotor (0.1.0), etl-server (>=0.0.6, <=0.0.7) potentially affected by CVE-2026-38743 via apache-airflow (1.10.13)

apache-airflow PYPI version 1.10.13 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - contra-rotor 0.1.0 - etl-server =0.0.6, =0.0.7 Source cves: CVE-2026-38743 Source advisory: OSV:PYSEC-2026-2351...

0xpwn (0.1.1), a2a-acl (0.0.14) +302 more potentially affected by CVE-2026-42203 via litellm (>=1.80.5, <=1.83.4)

litellm PYPI version =1.80.5, =0.7.3, =1.0.1, =1.0.2, =0.4.0, =0.1.46, =0.25.4a2, =0.1.2, =0.1.0a6, =0.1.0, =0.2.1 - aider-chat 0.86.2 and more Source cves: CVE-2026-42203 Source advisory: OSV:PYSEC-2026-2602...

agent-plugin-builder (>=0.1.0, <=0.6.0), aider-chat (>=0.68.0, <=0.72.3) +94 more potentially affected by CVE-2026-6357 via pip (24.3.1)

pip PYPI version 24.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agent-plugin-builder =0.1.0, =0.68.0, =0.2.0, =0.6.17, =0.3.6, =24.2.0, =0.1.3, =1.3.0, =0.1.13, =0.1.0, =5.3.0, =5.3.1 and more Source cves: CVE-2026-63...

wolf-core (2.0.1) potentially affected by CVE-2026-6357 via pip (22.0.0)

pip PYPI version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - wolf-core 2.0.1 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

aadetools (>=0.0.3, <=0.0.5), autocut3d (0.1.0) +14 more potentially affected by CVE-2026-6357 via pip (19.2.3)

pip PYPI version 19.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aadetools =0.0.3, =1.10.0, =0.1.4, =0.4.2, =2.0.0, =0.0.4, =0.2.4, =2019.9.2, =2019.10.22 - rtopy 0.1.0 - student-mixture 0.1.10 and more Source cves:...

python-dev-tools (>=2019.8.14, <=2019.8.24) potentially affected by CVE-2026-6357 via pip (19.2.2)

pip PYPI version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.8.14, =2019.8.24 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

chalice (>=1.6.2, <=1.8.0), commit-helper (3.4.13) +6 more potentially affected by CVE-2026-6357 via pip (18.1.0)

pip PYPI version 18.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.6.2, =0.1.6, =0.0.3, =3.2.0, =4.0.0 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2026-6357 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

justuse (>=0.6.0, <=0.6.1) potentially affected by CVE-2026-6357 via pip (21.2.1)

pip PYPI version 21.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - justuse =0.6.0, =0.6.1 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

cryptobot-python (0.1.5), ops-py-azure-key-vault-alert (>=7.0.0, <=7.0.1) +2 more potentially affected by CVE-2026-6357 via pip (24.1.0)

pip PYPI version 24.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cryptobot-python 0.1.5 - ops-py-azure-key-vault-alert =7.0.0, =1.3.1, =2.0.1 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

aaanalysis (>=0.1.2, <=1.0.0), abilian-devtools (>=0.5.14, <=0.5.17) +52 more potentially affected by CVE-2026-6357 via pip (23.3.2)

pip PYPI version 23.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =0.1.2, =0.5.14, =0.1.0, =1.0.0, =0.0.7, =1.0.2, =1.2.1.dev0, =2.4.0, =1.1.33, =1.30.0, =0.1.1, =0.1.5, =0.2.2 - cocodrilo 0.1.0 and more Sour...

aihandler (1.9.7), airunner (>=1.9.4, <=1.9.5) potentially affected by CVE-2026-6357 via pip (23.1.0)

pip PYPI version 23.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aihandler 1.9.7 - airunner =1.9.4, =1.9.5 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

ais-dom (>=2022.8.2, <=2022.10.5), chalice (>=1.27.2, <=1.27.3) +14 more potentially affected by CVE-2026-6357 via pip (22.2.2)

pip PYPI version 22.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - ais-dom =2022.8.2, =1.27.2, =1.0.0, =0.1.1, =3.3.3, =1.1.2, =2022.8.0b0, =2022.8.0b0, =0.4.1, =4.0.0, =0.11.0, =1.9.0, =1.11.0 and more Source cves:...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-6357 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...