face-compare (>=1.0.1, <=1.0.2), pyhand-earth (>=0.0.11, <=1.1.0) potentially affected by CVE-2026-1462 via keras (2.4.2)

keras PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - face-compare =1.0.1, =0.0.11, =1.1.0 Source cves: CVE-2026-1462 Source advisory: OSV:PYSEC-2026-2547...

krummstab (>=0.2.0, <=1.2.1) potentially affected by CVE-2026-41168 via pypdf (3.1.0)

pypdf PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - krummstab =0.2.0, =1.2.1 Source cves: CVE-2026-41168 Source advisory: OSV:PYSEC-2026-3021...

pretix (>=4.17.0, <=4.17.1), providentia (2.4.0) potentially affected by CVE-2026-41168 via pypdf (3.4.1)

pypdf PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - pretix =4.17.0, =4.17.1 - providentia 2.4.0 Source cves: CVE-2026-41168 Source advisory: OSV:PYSEC-2026-3021...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +65 more potentially affected by CVE-2026-40260 via pypdf (>=6.0.0, <=6.9.2)

pypdf PYPI version =6.0.0, =0.0.0, =1.1.0, =1.0.0a3, =0.2.0, =3.1.0, =0.2.0, =0.2.0, =0.0.3, =0.4.1, =6.2.61, =1.0.20, =1.0.31 and more Source cves: CVE-2026-40260 Source advisory: OSV:PYSEC-2026-3006...

ai-enterprise-agent (>=0.0.4, <=0.0.9), almax-common (>=1.0.5.dev20240601224039, <=1.0.7.dev20240801212517) +25 more potentially affected by CVE-2026-40260 via pypdf (4.2.0)

pypdf PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - ai-enterprise-agent =0.0.4, =1.0.5.dev20240601224039, =2024.7.4, =0.6.22, =0.2.1, =0.2.0, =0.0.5, =0.2.1, =3.3.2, =0.1.0, =0.0.1, =4.7.1, =0.1.0, =0.1...

krummstab (>=0.2.0, <=1.2.1) potentially affected by CVE-2026-40260 via pypdf (3.1.0)

pypdf PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - krummstab =0.2.0, =1.2.1 Source cves: CVE-2026-40260 Source advisory: OSV:PYSEC-2026-3006...

indico (>=3.2.6, <=3.2.9) potentially affected by CVE-2026-40260 via pypdf (3.12.1)

pypdf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - indico =3.2.6, =3.2.9 Source cves: CVE-2026-40260 Source advisory: OSV:PYSEC-2026-3006...

mimir-ai (0.0.3), rara-digitizer (>=1.0.0, <=1.5.8) potentially affected by CVE-2026-40260 via pypdf (5.0.0)

pypdf PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - mimir-ai 0.0.3 - rara-digitizer =1.0.0, =1.5.8 Source cves: CVE-2026-40260 Source advisory: OSV:PYSEC-2026-3006...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-25219 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-25219 Source advisory: OSV:PYSEC-2026-2344...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-40260 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....

assert-files (>=0.1.0, <=0.1.3), vpplib (0.0.4) +1 more potentially affected by CVE-2026-41168 via pypdf (3.16.4)

pypdf PYPI version 3.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - assert-files =0.1.0, =0.61.0, =0.65.0 Source cves: CVE-2026-41168 Source advisory: OSV:PYSEC-2026-3021...

instawow (>=1.6.0, <=1.6.2.1), pycharsheet (>=0.0.1, <=0.0.4) potentially affected by CVE-2026-34444 via lupa (1.8.0)

lupa PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on lupa and may be impacted: - instawow =1.6.0, =0.0.1, =0.0.4 Source cves: CVE-2026-34444 Source advisory: OSV:PYSEC-2026-2613...

nexus-corr-discovery (0.0.1.post2) potentially affected by CVE-2026-35052 via dtale (3.12.0)

dtale PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on dtale and may be impacted: - nexus-corr-discovery 0.0.1.post2 Source cves: CVE-2026-35052 Source advisory: OSV:PYSEC-2026-2460...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2026-35029 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2026-35029 Source advisory: OSV:PYSEC-2026-2597...

open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-35029 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-35029 Source advisory: OSV:PYSEC-2026-2597...

iflow-mcp-kdoronin-figma-mcp (>=0.1.0, <=0.1.1), rootly-mcp-server (>=2.0.0, <=2.0.1) potentially affected by CVE-2025-64340 via fastmcp (2.4.0)

fastmcp PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-kdoronin-figma-mcp =0.1.0, =2.0.0, =2.0.1 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...

axiomatic-mcp (>=0.1.12, <=0.1.22), dr-agent (>=0.1.0, <=0.1.2) +8 more potentially affected by CVE-2025-64340 via fastmcp (2.11.3)

fastmcp PYPI version 2.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - axiomatic-mcp =0.1.12, =0.1.0, =0.1.0.4.post9.dev0, =1.4.5, =0.1.129rc1, =1.4.3, =1.4.8 Source cves: CVE-2025-64340 Source advisory:...

adins-prd-mcp (>=0.5.0, <=0.5.7), iflow-mcp-pickleton89-cbioportal-mcp (0.1.0) +2 more potentially affected by CVE-2025-64340 via fastmcp (2.3.3)

fastmcp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - adins-prd-mcp =0.5.0, =0.1.2, =0.1.6 - mseep-memory-plus 0.1.5 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...

iflow-mcp-winautowx (1.0.0) potentially affected by CVE-2025-64340 via fastmcp (2.0.0)

fastmcp PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-winautowx 1.0.0 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...

heaven-framework (>=0.1.15, <=0.1.22), oracle-oci-api-mcp-server (>=1.0.0, <=1.0.1) +18 more potentially affected by CVE-2025-64340 via fastmcp (2.12.2)

fastmcp PYPI version 2.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - heaven-framework =0.1.15, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source...