sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-6357 via pip (7.1.0)

pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

chalice (1.12.0), commandfrog (>=0.2.1, <=0.3.1) +12 more potentially affected by CVE-2026-6357 via pip (19.3.1)

pip PYPI version 19.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice 1.12.0 - commandfrog =0.2.1, =0.1.0, =0.8.1, =0.4.11, =0.0.3, =2.4.0.19073113, =0.0.1, =2019.10.25, =0.0.1a0, =0.1.1, =0.1.2 - smartleia 1.0.1...

backlogprocessing (>=0.0.0, <=0.0.2), commit-helper (>=3.4.15, <=3.4.16) +9 more potentially affected by CVE-2026-6357 via pip (19.0.3)

pip PYPI version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - backlogprocessing =0.0.0, =3.4.15, =0.0.37, =2.3.7.19022609, =1.4.0, =2019.3.2, =0.0.1, =0.0.14, =0.9.1, =0.9.2 Source cves: CVE-2026-6357 Source advisor...

airflow-clickhouse-plugin (1.3.0), airflow-toolkit (0.13.3) +12 more potentially affected by CVE-2026-40690 via apache-airflow (2.9.3)

apache-airflow PYPI version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin 1.3.0 - airflow-toolkit 0.13.3 - airflow-tools =0.1.1, =1.0.0rc1, =0.0.8, =1.7.3, =0.4.3, =0.0.44,...

cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2026-3219 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

aima (2023.2.4), appcensus-dynamic-repos (>=2.0.113, <=2.1.117) +28 more potentially affected by CVE-2026-41140 via poetry (>=2.0.1, <=2.3.3)

poetry PYPI version =2.0.1, =2.0.113, =0.0.2, =1.0.7, =0.1.1, =0.4.16.post1, =1.5.12, =0.2.0, =0.3.1, =0.4.3, =1.5.4, =1.5.7 and more Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-2890...

openfund-server (>=0.4.0, <=0.4.3) potentially affected by CVE-2026-41140 via poetry (1.8.4)

poetry PYPI version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - openfund-server =0.4.0, =0.4.3 Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-2890...

kkt (>=0.1.4, <=0.3.9) potentially affected by CVE-2026-41140 via poetry (1.0.0)

poetry PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - kkt =0.1.4, =0.3.9 Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-2890...

aaanalysis (>=0.1.2, <=1.0.0), abilian-devtools (>=0.5.14, <=0.5.17) +52 more potentially affected by CVE-2026-3219 via pip (23.3.2)

pip PYPI version 23.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =0.1.2, =0.5.14, =0.1.0, =1.0.0, =0.0.7, =1.0.2, =1.2.1.dev0, =2.4.0, =1.1.33, =1.30.0, =0.1.1, =0.1.5, =0.2.2 - cocodrilo 0.1.0 and more Sour...

adversarial-insight-ml (0.1.0), aiorobonect (>=0.2.6, <=0.2.8) +20 more potentially affected by CVE-2026-3219 via pip (23.2.1)

pip PYPI version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - adversarial-insight-ml 0.1.0 - aiorobonect =0.2.6, =2.0.3, =1.2.0, =1.0.0, =4.2.0, =0.0.2, =0.0.2, =0.0.5 - musclex 1.23.0 and more Source cves:...

diacamma-asso (>=2.3.0.18070322, <=2.3.11.19062511), diacamma-financial (>=2.3.0.18072813, <=2.3.11.19062210) +8 more potentially affected by CVE-2026-3219 via pip (19.1.1)

pip PYPI version 19.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - diacamma-asso =2.3.0.18070322, =2.3.0.18072813, =2.3.0.18073020, =2.3.10.19052414, =2.3.4.19022609, =2.3.2.19022615, =2.3.0.18070322, =1.4.5, =2019.5.6,...

notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2026-3219 via pip (19.0.2)

pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

khan-mongo (0.1.6), uranium (>=0.2.35, <=0.2.37) potentially affected by CVE-2026-3219 via pip (8.1.2)

pip PYPI version 8.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - khan-mongo 0.1.6 - uranium =0.2.35, =0.2.37 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

ais-dom (>=2022.8.2, <=2022.10.5), chalice (>=1.27.2, <=1.27.3) +14 more potentially affected by CVE-2026-3219 via pip (22.2.2)

pip PYPI version 22.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - ais-dom =2022.8.2, =1.27.2, =1.0.0, =0.1.1, =3.3.3, =1.1.2, =2022.8.0b0, =2022.8.0b0, =0.4.1, =4.0.0, =0.11.0, =1.9.0, =1.11.0 and more Source cves:...

agave (>=0.0.1.dev0, <=0.0.5.dev0), always-updates (>=5.1.0, <=8.0.0) +21 more potentially affected by CVE-2026-3219 via pip (20.2.4)

pip PYPI version 20.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.0.1.dev0, =5.1.0, =0.1.0, =0.0.0, =0.0.1, =1.17.0, =2021.6.0.dev1, =0.0.0, =0.118.5, =2021.4.0b0, =0.2.2, =0.0.0.1.dev0, =1.2.0, =2021.4.1,...

chalice (>=1.9.0, <=1.9.1), corgy-erp (>=0.0.1, <=1.0.7) potentially affected by CVE-2026-3219 via pip (19.2.0)

pip PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.9.0, =0.0.1, =1.0.7 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

geonode (>=4.0.0, <=4.0.0.post1), jpeglib (0.10.16) potentially affected by CVE-2026-3219 via pip (22.2.1)

pip PYPI version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - geonode =4.0.0, =4.0.0.post1 - jpeglib 0.10.16 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

c2cciutils (>=1.1.16, <=1.1.30), ddpw (2.0.0) +1 more potentially affected by CVE-2026-3219 via pip (22.0.3)

pip PYPI version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - c2cciutils =1.1.16, =0.4.2, =0.5.4 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

chalice (>=1.22.4, <=1.24.0), dpckan (>=0.0.1.9001, <=0.1.0) +6 more potentially affected by CVE-2026-3219 via pip (21.1.3)

pip PYPI version 21.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.22.4, =0.0.1.9001, =0.9.4, =1.0.0, =2.0.0, =2.1.0 - tikit 0.1.7 - wanikani-notifier 0.1.0 - yelpdataset2sql 0.0.2 Source cves: CVE-2026-3219...

nexus-uploader (1.0.14), uranium (>=0.2.38, <=1.1.0) potentially affected by CVE-2026-3219 via pip (8.1.1)

pip PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - nexus-uploader 1.0.14 - uranium =0.2.38, =1.1.0 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...