coop (0.7.0) potentially affected by CVE-2026-25517 via wagtail (1.12.6)

wagtail PYPI version 1.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop 0.7.0 Source cves: CVE-2026-25517 Source advisory: OSV:PYSEC-2026-2030...

amzn-nova-customization-sdk (>=1.0.29, <=1.0.83), anymodality (0.1.0) +29 more potentially affected by CVE-2026-1778 via sagemaker (>=2.16.1, <=2.254.1)

sagemaker PYPI version =2.16.1, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.17, =0.1.0, =0.1.1, =0.9.0, =1.0.0, =1.97.0.dev0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.1.2, =0.4.9 and more Source cves: CVE-2026-1778 Source advisory: OSV:PYSEC-2026-1886...

coop (2.15.1), django-oscar-elasticsearch (>=2.0.3, <=2.0.7) +18 more potentially affected by CVE-2026-25517 via wagtail (2.15.6)

wagtail PYPI version 2.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop 2.15.1 - django-oscar-elasticsearch =2.0.3, =0.0.1, =0.1.0, =0.9.5, =0.2.0, =0.0.1, =1.2.0, =1.2.1 - wagtail-trash 0.2.0 and more Source cve...

ezsmdeploy (>=0.2.8, <=0.3.1) potentially affected by CVE-2026-1778 via sagemaker (1.58.2)

sagemaker PYPI version 1.58.2 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - ezsmdeploy =0.2.8, =0.3.1 Source cves: CVE-2026-1778 Source advisory: OSV:PYSEC-2026-1886...

ezsmdeploy (0.2.9) potentially affected by CVE-2026-1777 via sagemaker (1.60.0)

sagemaker PYPI version 1.60.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - ezsmdeploy 0.2.9 Source cves: CVE-2026-1777 Source advisory: OSV:PYSEC-2026-1888...

aaanalysis (>=0.1.2, <=1.0.0), abilian-devtools (>=0.5.14, <=0.5.17) +52 more potentially affected by CVE-2026-1703 via pip (23.3.2)

pip PYPI version 23.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =0.1.2, =0.5.14, =0.1.0, =1.0.0, =0.0.7, =1.0.2, =1.2.1.dev0, =2.4.0, =1.1.33, =1.30.0, =0.1.1, =0.1.5, =0.2.2 - cocodrilo 0.1.0 and more Sour...

cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2026-1703 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

hyperpod-elastic-agent (>=1.1.0, <=1.1.3), jupyter-quant (>=2509.1.0, <=2510.1.0) +5 more potentially affected by CVE-2026-1703 via pip (25.2.0)

pip PYPI version 25.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - hyperpod-elastic-agent =1.1.0, =2509.1.0, =0.1.0, =0.20.0, =3.13.0, =3.13.0, =3.14.0 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

chalice (>=1.9.0, <=1.9.1), corgy-erp (>=0.0.1, <=1.0.7) potentially affected by CVE-2026-1703 via pip (19.2.0)

pip PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.9.0, =0.0.1, =1.0.7 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

pycellfit (>=0.2.0, <=0.2.3) potentially affected by CVE-2026-1703 via pip (20.2.0)

pip PYPI version 20.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - pycellfit =0.2.0, =0.2.3 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

dsframework (>=0.1.9, <=0.1.12), hes-off (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-1703 via pip (21.1.1)

pip PYPI version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - dsframework =0.1.9, =1.0.0, =1.0.1 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

ais-dom (>=2022.8.2, <=2022.10.5), chalice (>=1.27.2, <=1.27.3) +14 more potentially affected by CVE-2026-1703 via pip (22.2.2)

pip PYPI version 22.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - ais-dom =2022.8.2, =1.27.2, =1.0.0, =0.1.1, =3.3.3, =1.1.2, =2022.8.0b0, =2022.8.0b0, =0.4.1, =4.0.0, =0.11.0, =1.9.0, =1.11.0 and more Source cves:...

magellan (1.0.0b0), sprinter (1.4.1) potentially affected by CVE-2026-1703 via pip (6.1.1)

pip PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - magellan 1.0.0b0 - sprinter 1.4.1 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

cfn-docgen (>=0.2.0, <=0.2.3), chalice (>=1.13.0, <=1.14.0) +8 more potentially affected by CVE-2026-1703 via pip (20.0.2)

pip PYPI version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cfn-docgen =0.2.0, =1.13.0, =0.2.0, =0.0.1, =0.8.2, =0.3.1, =0.0.16, =0.0.24 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

c2cciutils (1.1.32), lenstozotero (>=0.1.2, <=0.1.4) +15 more potentially affected by CVE-2026-1703 via pip (23.3.1)

pip PYPI version 23.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - c2cciutils 1.1.32 - lenstozotero =0.1.2, =0.0.15, =0.0.1, =1.1.1, =0.0.1, =0.4.7, =0.0.6, =0.0.3, =0.0.1, =1.0.1, =0.1.0, =0.6.2, =0.12.3 - vg-management...

whs4_ays (>=1.0.0, <=1.0.1) potentially affected by unknown CVE via whs4_npm (0.0.1-security)

whs4npm NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on whs4npm and may be impacted: - whs4ays =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-WHS4NPM-17881408...

ml-deploy (2.0.0), waveletai (>=0.2.5, <=0.2.11) potentially affected by CVE-2025-10279 via mlflow (1.18.0)

mlflow PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-deploy 2.0.0 - waveletai =0.2.5, =0.2.11 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...

azureml-contrib-run (>=1.0.18.2, <=1.0.21.1) potentially affected by CVE-2025-10279 via mlflow (0.8.2)

mlflow PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-contrib-run =1.0.18.2, =1.0.21.1 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2025-10279 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2025-10279 Source advisory:...

dbnd-mlflow (>=0.25.14, <=0.81.4), nerblackbox (>=0.0.5, <=0.0.10) potentially affected by CVE-2025-10279 via mlflow (1.6.0)

mlflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dbnd-mlflow =0.25.14, =0.0.5, =0.0.10 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...