label-sorter (>=0.2.0, <=0.3.0), sereto (0.3.5) potentially affected by CVE-2026-33123 via pypdf (5.8.0)

pypdf PYPI version 5.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - label-sorter =0.2.0, =0.3.0 - sereto 0.3.5 Source cves: CVE-2026-33123 Source advisory: OSV:PYSEC-2026-3023...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2026-33123 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2026-33123 Source advisory: OSV:PYSEC-2026-3023...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +60 more potentially affected by CVE-2026-33123 via pypdf (>=6.0.0, <=6.8.0)

pypdf PYPI version =6.0.0, =0.0.0, =1.0.0a3, =0.2.0, =3.1.0, =0.2.0, =0.2.0, =0.0.3, =6.2.61, =1.0.20, =0.12.0, =0.12.2 - calibreweb 0.6.26 and more Source cves: CVE-2026-33123 Source advisory: OSV:PYSEC-2026-3023...

criscostack (1.0.0), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-33123 via pypdf (3.9.1)

pypdf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - criscostack 1.0.0 - neumai =0.0.9, =0.0.17, =2023.6.0, =2024.4.0 Source cves: CVE-2026-33123 Source advisory: OSV:PYSEC-2026-3023...

pspdfutils (>=3.0.5, <=3.0.7) potentially affected by CVE-2026-33123 via pypdf (3.10.0)

pypdf PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - pspdfutils =3.0.5, =3.0.7 Source cves: CVE-2026-33123 Source advisory: OSV:PYSEC-2026-3023...

aana (>=0.2.1, <=0.2.2), acdc-aws-etl-pipeline (>=0.1.7, <=0.5.9) +485 more potentially affected by CVE-2026-33155 via deepdiff (>=5.0.1, <=8.6.1)

deepdiff PYPI version =5.0.1, =0.2.1, =0.1.7, =3.0.0b853, =0.0.1, =0.1.0, =1.8.15, =1.8.17, =0.112.0, =1.8.14, =1.0.0, =2.8.5, =2.9.958 and more Source cves: CVE-2026-33155 Source advisory: OSV:PYSEC-2026-2445...

aiops-ml (>=1.0.0, <=1.0.1), architxt (>=0.3.1, <=0.5.2) +49 more potentially affected by CVE-2025-15031 via mlflow (>=3.0.0rc2, <=3.8.1)

mlflow PYPI version =3.0.0rc2, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.0.1rc1, =2.5.0, =0.2.1, =0.0.1, =0.0.1, =0.8.0, =0.8.1 and more Source cves: CVE-2025-15031 Source advisory: OSV:PYSEC-2026-2656...

birm-nm-foo (1.5.0), hip-data-ml-utils (1.2.6) +6 more potentially affected by CVE-2025-15031 via mlflow (2.5.0)

mlflow PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - birm-nm-foo 1.5.0 - hip-data-ml-utils 1.2.6 - hive-ml =1.0.0a0.post2, =0.2.0, =1.6.0, =1.4.1, =1.5.5 - t2r2 0.0.1 Source cves: CVE-2025-15031 Source...

ml-management (>=0.1.0, <=0.4.0), telemed-sk (>=1.1.0, <=1.2.5) +1 more potentially affected by CVE-2025-15031 via mlflow (2.4.0)

mlflow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-management =0.1.0, =1.1.0, =1.0.0, =1.1.37 Source cves: CVE-2025-15031 Source advisory: OSV:PYSEC-2026-2656...

octopi (>=1.0.0, <=1.1.0) potentially affected by CVE-2025-15031 via mlflow (2.17.0)

mlflow PYPI version 2.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - octopi =1.0.0, =1.1.0 Source cves: CVE-2025-15031 Source advisory: OSV:PYSEC-2026-2656...

dagster-mlflow (>=0.19.11, <=0.21.4), databricks-session (0.1.9) +14 more potentially affected by CVE-2025-15031 via mlflow (1.27.0)

mlflow PYPI version 1.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.19.11, =0.3.0, =0.0.4.dev3, =3.0.1, =4.0.2, =0.1.0, =3.2.18, =0.1.0, =0.0.1.dev202206240024, =0.1.0, =0.1.5 and more Source cves:...

dbnd-mlflow (>=0.25.14, <=0.81.4), nerblackbox (>=0.0.5, <=0.0.10) potentially affected by CVE-2025-15031 via mlflow (1.6.0)

mlflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dbnd-mlflow =0.25.14, =0.0.5, =0.0.10 Source cves: CVE-2025-15031 Source advisory: OSV:PYSEC-2026-2656...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2025-15031 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2025-15031 Source advisory: OSV:PYSEC-2026-2656...

arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +7 more potentially affected by CVE-2026-3989 via sglang (>=0.1.26, <=0.5.2)

sglang PYPI version =0.1.26, =0.1.0, =1.1.0rc1, =0.4.0, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2026-3989 Source advisory: OSV:PYSEC-2026-3063...

dbnd-mlflow (>=0.25.14, <=0.81.4), nerblackbox (>=0.0.5, <=0.0.10) potentially affected by CVE-2025-14287 via mlflow (1.6.0)

mlflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dbnd-mlflow =0.25.14, =0.0.5, =0.0.10 Source cves: CVE-2025-14287 Source advisory: OSV:PYSEC-2026-2661...

docat (1.0.0) potentially affected by CVE-2026-31826 via pypdf (4.0.0)

pypdf PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docat 1.0.0 Source cves: CVE-2026-31826 Source advisory: OSV:PYSEC-2026-3019...

assert-files (>=0.1.0, <=0.1.3), vpplib (0.0.4) +1 more potentially affected by CVE-2026-31826 via pypdf (3.16.4)

pypdf PYPI version 3.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - assert-files =0.1.0, =0.61.0, =0.65.0 Source cves: CVE-2026-31826 Source advisory: OSV:PYSEC-2026-3019...

aiexec-base (0.6.4), ano-code (>=0.1.6, <=0.1.11) +38 more potentially affected by CVE-2026-31826 via pypdf (5.1.0)

pypdf PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - aiexec-base 0.6.4 - ano-code =0.1.6, =0.0.1, =1.0.0, =0.6.0, =0.0.3, =0.1.0, =0.3.1, =3.3.6, =1.0.16, =0.2.37, =1.0.0, =0.1.11, =0.1.24 and more Sourc...

calibreweb (0.6.21), sysnet-pdffiller (>=1.1.0, <=1.2.1) potentially affected by CVE-2026-31826 via pypdf (3.15.5)

pypdf PYPI version 3.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - calibreweb 0.6.21 - sysnet-pdffiller =1.1.0, =1.2.1 Source cves: CVE-2026-31826 Source advisory: OSV:PYSEC-2026-3019...

render50 (9.2.2) potentially affected by CVE-2026-31826 via pypdf (3.15.3)

pypdf PYPI version 3.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - render50 9.2.2 Source cves: CVE-2026-31826 Source advisory: OSV:PYSEC-2026-3019...