biocontext-kb (>=0.1.0, <=0.1.1), chatmcp-memory (>=0.0.2, <=0.0.8) +9 more potentially affected by CVE-2026-27124 via fastmcp (2.10.5)

fastmcp PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - biocontext-kb =0.1.0, =0.0.2, =0.0.2, =0.3.5, =1.0.0, =0.9.8, =2.0.2, =0.0.5, =0.1.0.dev20, =0.2.1rc1 Source cves: CVE-2026-27124 Source advisory...

agentfetch-mcp (>=1.0.0, <=1.0.1), constitute-mcp (>=0.1.18, <=0.1.27) +31 more potentially affected by CVE-2026-27124 via fastmcp (0.4.1)

fastmcp PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agentfetch-mcp =1.0.0, =0.1.18, =2.0.2, =1.0.0, =0.1.0, =0.1.41, =1.0.0, =1.0.1 - iflow-mcp-philschmid-code-sandbox-mcp 0.1.0 -...

databricks-genai (>=1.2.0a0, <=1.2.0a6), deeptrees (>=1.6.0, <=1.8.2) +1 more potentially affected by CVE-2025-15381 via mlflow (2.18.0)

mlflow PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - databricks-genai =1.2.0a0, =1.6.0, =0.15.1, =0.18.0 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...

insurautoml (>=0.2.2.10, <=0.2.3), ntcore (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2025-15381 via mlflow (1.21.0)

mlflow PYPI version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - insurautoml =0.2.2.10, =0.0.1, =3.0.0, =2.6.3, =2.6.4 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...

mlfields (0.0.0), poms (0.0.0) potentially affected by CVE-2025-15381 via mlflow (1.20.1)

mlflow PYPI version 1.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlfields 0.0.0 - poms 0.0.0 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...

graphmb (>=0.2.0rc0, <=0.2.3), openstef (>=3.2.43, <=3.2.60) +1 more potentially affected by CVE-2025-15381 via mlflow (2.1.1)

mlflow PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - graphmb =0.2.0rc0, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...

sapsan (>=0.6.1, <=0.6.2) potentially affected by CVE-2025-15381 via mlflow (1.25.0)

mlflow PYPI version 1.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sapsan =0.6.1, =0.6.2 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...

autorad (>=0.2.2, <=0.2.5), katonic (>=1.3.0, <=1.6.0) potentially affected by CVE-2025-15381 via mlflow (1.23.1)

mlflow PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - autorad =0.2.2, =1.3.0, =1.6.0 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...

ml-management (>=0.1.0, <=0.4.0), telemed-sk (>=1.1.0, <=1.2.5) +1 more potentially affected by CVE-2025-15381 via mlflow (2.4.0)

mlflow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-management =0.1.0, =1.1.0, =1.0.0, =1.1.37 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...

aiops-ml (>=1.0.0, <=1.0.1), architxt (>=0.3.1, <=0.5.2) +49 more potentially affected by CVE-2025-15381 via mlflow (>=3.0.0rc2, <=3.8.1)

mlflow PYPI version =3.0.0rc2, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.0.1rc1, =2.5.0, =0.2.1, =0.0.1, =0.0.1, =0.8.0, =0.8.1 and more Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...

api-python-bet-project (>=0.1.9, <=0.1.22), bir-mlflow-export-import (1.2.0) +10 more potentially affected by CVE-2025-15381 via mlflow (2.19.0)

mlflow PYPI version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - api-python-bet-project =0.1.9, =1.1.5, =0.14.0, =0.14.0, =0.14.0, =1.4.4, =1.0.0, =0.1.0a0, =0.3.5, =0.3.9 Source cves: CVE-2025-15381 Source...

krummstab (>=0.2.0, <=1.2.1) potentially affected by CVE-2026-33699 via pypdf (3.1.0)

pypdf PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - krummstab =0.2.0, =1.2.1 Source cves: CVE-2026-33699 Source advisory: OSV:PYSEC-2026-3012...

docrx (>=0.0.1, <=0.0.10), paperreview (0.1.0) +1 more potentially affected by CVE-2026-33699 via pypdf (3.15.0)

pypdf PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docrx =0.0.1, =1.1.11, =1.1.13 Source cves: CVE-2026-33699 Source advisory: OSV:PYSEC-2026-3012...

docat (1.0.0) potentially affected by CVE-2026-33699 via pypdf (4.0.0)

pypdf PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docat 1.0.0 Source cves: CVE-2026-33699 Source advisory: OSV:PYSEC-2026-3012...

chellow (>=1692799408.0.0, <=1698672999.0.0), pspdfutils (>=3.1.2, <=3.2.0) potentially affected by CVE-2026-33699 via pypdf (3.15.2)

pypdf PYPI version 3.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chellow =1692799408.0.0, =3.1.2, =3.2.0 Source cves: CVE-2026-33699 Source advisory: OSV:PYSEC-2026-3012...

bondai (>=0.1.0, <=0.3.0b2) potentially affected by CVE-2026-33699 via pypdf (3.15.1)

pypdf PYPI version 3.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - bondai =0.1.0, =0.3.0b2 Source cves: CVE-2026-33699 Source advisory: OSV:PYSEC-2026-3012...

sereto (0.2.1), ten8t (>=0.0.14, <=0.0.21) potentially affected by CVE-2026-33699 via pypdf (5.3.1)

pypdf PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - sereto 0.2.1 - ten8t =0.0.14, =0.0.21 Source cves: CVE-2026-33699 Source advisory: OSV:PYSEC-2026-3012...

assert-files (>=0.1.0, <=0.1.3), vpplib (0.0.4) +1 more potentially affected by CVE-2026-33123 via pypdf (3.16.4)

pypdf PYPI version 3.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - assert-files =0.1.0, =0.61.0, =0.65.0 Source cves: CVE-2026-33123 Source advisory: OSV:PYSEC-2026-3023...

calibreweb (0.6.21), sysnet-pdffiller (>=1.1.0, <=1.2.1) potentially affected by CVE-2026-33123 via pypdf (3.15.5)

pypdf PYPI version 3.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - calibreweb 0.6.21 - sysnet-pdffiller =1.1.0, =1.2.1 Source cves: CVE-2026-33123 Source advisory: OSV:PYSEC-2026-3023...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-33123 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....