agave (>=0.0.1.dev0, <=0.0.5.dev0), always-updates (>=5.1.0, <=8.0.0) +21 more potentially affected by CVE-2026-3219 via pip (20.2.4)

pip PYPI version 20.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.0.1.dev0, =5.1.0, =0.1.0, =0.0.0, =0.0.1, =1.17.0, =2021.6.0.dev1, =0.0.0, =0.118.5, =2021.4.0b0, =0.2.2, =0.0.0.1.dev0, =1.2.0, =2021.4.1,...

bighummingbird (>=0.0.2024070102, <=0.0.2024072501) potentially affected by CVE-2026-3219 via pip (24.1.1)

pip PYPI version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - bighummingbird =0.0.2024070102, =0.0.2024072501 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

diacamma-asso (>=2.3.0.18070322, <=2.3.11.19062511), diacamma-financial (>=2.3.0.18072813, <=2.3.11.19062210) +8 more potentially affected by CVE-2026-3219 via pip (19.1.1)

pip PYPI version 19.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - diacamma-asso =2.3.0.18070322, =2.3.0.18072813, =2.3.0.18073020, =2.3.10.19052414, =2.3.4.19022609, =2.3.2.19022615, =2.3.0.18070322, =1.4.5, =2019.5.6,...

notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2026-3219 via pip (19.0.2)

pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

aaanalysis (>=1.0.1, <=1.0.2), airunner (>=5.0.0, <=5.6.1) +52 more potentially affected by CVE-2026-3219 via pip (25.3.0)

pip PYPI version 25.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =1.0.1, =5.0.0, =0.1.3, =0.13.0, =1.1.56, =0.1.0, =0.22.1, =0.3.3, =5.4.0, =0.10.0, =0.9.0, =0.1.0a12, =0.2.3 and more Source cves:...

dagit (0.8.3), dagster-airflow (0.8.3) potentially affected by CVE-2026-41490 via dagster (0.8.3)

dagster PYPI version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.8.3 - dagster-airflow 0.8.3 Source cves: CVE-2026-41490 Source advisory: OSV:PYSEC-2026-2432...

dagit (0.7.5), dagster-airflow (0.7.5) potentially affected by CVE-2026-41490 via dagster (0.7.5)

dagster PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.7.5 - dagster-airflow 0.7.5 Source cves: CVE-2026-41490 Source advisory: OSV:PYSEC-2026-2432...

dagit (0.7.8), dagster-airflow (0.7.8) potentially affected by CVE-2026-41490 via dagster (0.7.8)

dagster PYPI version 0.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.7.8 - dagster-airflow 0.7.8 Source cves: CVE-2026-41490 Source advisory: OSV:PYSEC-2026-2432...

dagit (0.10.7rc0), dagster-airflow (0.10.7rc0) potentially affected by CVE-2026-41490 via dagster (0.10.7rc0)

dagster PYPI version 0.10.7rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.10.7rc0 - dagster-airflow 0.10.7rc0 Source cves: CVE-2026-41490 Source advisory: OSV:PYSEC-2026-2432...

dagit (0.11.2rc0), dagster-airflow (0.11.2rc0) potentially affected by CVE-2026-41490 via dagster (0.11.2rc0)

dagster PYPI version 0.11.2rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.11.2rc0 - dagster-airflow 0.11.2rc0 Source cves: CVE-2026-41490 Source advisory: OSV:PYSEC-2026-2432...

dagit (0.11.7rc14), dagster-airflow (0.11.7rc14) potentially affected by CVE-2026-41490 via dagster (0.11.7rc14)

dagster PYPI version 0.11.7rc14 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.11.7rc14 - dagster-airflow 0.11.7rc14 Source cves: CVE-2026-41490 Source advisory: OSV:PYSEC-2026-2432...

dagit (0.11.13rc1) potentially affected by CVE-2026-41490 via dagster (0.11.13rc1)

dagster PYPI version 0.11.13rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.11.13rc1 Source cves: CVE-2026-41490 Source advisory: OSV:PYSEC-2026-2432...

dagit (0.8.10), dagster-airflow (0.8.10) potentially affected by CVE-2026-41490 via dagster (0.8.10)

dagster PYPI version 0.8.10 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.8.10 - dagster-airflow 0.8.10 Source cves: CVE-2026-41490 Source advisory: OSV:PYSEC-2026-2432...

dagit (0.12.2), dagster-airflow (0.12.2) +28 more potentially affected by CVE-2026-41490 via dagster (0.12.2)

dagster PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.2 - dagster-airflow 0.12.2 - dagster-aws 0.12.2 - dagster-azure 0.12.2 - dagster-cloud 0.12.2 - dagster-dask 0.12.2 - dagster-databric...

dagit (0.12.14), dagster-airflow (0.12.14) +31 more potentially affected by CVE-2026-41490 via dagster (0.12.14)

dagster PYPI version 0.12.14 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.14 - dagster-airflow 0.12.14 - dagster-aws 0.12.14 - dagster-azure 0.12.14 - dagster-celery 0.12.14 - dagster-celery-docker 0.12.14 -...

dagit (0.12.1rc0), dagster-airflow (0.12.1rc0) +28 more potentially affected by CVE-2026-41490 via dagster (0.12.1rc0)

dagster PYPI version 0.12.1rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.1rc0 - dagster-airflow 0.12.1rc0 - dagster-aws 0.12.1rc0 - dagster-azure 0.12.1rc0 - dagster-cloud 0.12.1rc0 - dagster-dask 0.12.1r...

ascii-library (>=0.1.0.dev419, <=1.2.42), catalystcoop-pudl (>=2023.12.1, <=2024.11.0) +104 more potentially affected by CVE-2026-41490 via dagster (>=1.0.0rc2, <=1.13.0)

dagster PYPI version =1.0.0rc2, =0.1.0.dev419, =2023.12.1, =1.0.0rc2, =0.16.0rc2, =0.16.0rc2, =0.16.0rc2, =0.16.0rc2, =1.7.13, =0.16.0rc2, =0.16.0rc2, =0.16.0rc2, =0.16.0rc2, =1.0.0rc2, =1.7.5, =1.0.0rc2, =1.13.0 and more Source cves: CVE-2026-41490 Source advisory: OSV:PYSEC-2026-2432...

indico (>=3.2.6, <=3.2.9) potentially affected by CVE-2026-41314 via pypdf (3.12.1)

pypdf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - indico =3.2.6, =3.2.9 Source cves: CVE-2026-41314 Source advisory: OSV:PYSEC-2026-3026...

docrx (>=0.0.1, <=0.0.10), paperreview (0.1.0) +1 more potentially affected by CVE-2026-41313 via pypdf (3.15.0)

pypdf PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docrx =0.0.1, =1.1.11, =1.1.13 Source cves: CVE-2026-41313 Source advisory: OSV:PYSEC-2026-3007...

automateboringstuff3 (2024.10.1), calibreweb (0.6.24) +6 more potentially affected by CVE-2026-41314 via pypdf (5.0.1)

pypdf PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - automateboringstuff3 2024.10.1 - calibreweb 0.6.24 - forgy =0.1.0, =0.1.0rc1, =0.0.12, =0.0.16 Source cves: CVE-2026-41314 Source advisory:...