conu (0.5.0), niapy (2.0.0rc2) +1 more potentially affected by CVE-2025-71176 via pytest (3.7.4)

pytest PYPI version 3.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - conu 0.5.0 - niapy 2.0.0rc2 - seleniumbase =1.15.5, =1.15.6 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

bpp-iplweb (>=202209.1088.0, <=202504.1174.0), circe-transformations-certic (0.0.3) +1 more potentially affected by CVE-2025-68616 via weasyprint (55.0.0)

weasyprint PYPI version 55.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - bpp-iplweb =202209.1088.0, =202504.1174.0 - circe-transformations-certic 0.0.3 - render50 8.0.0 Source cves: CVE-2025-68616 Source advisory...

aaz-dev (>=1.0.2, <=2.10.1), accurating (>=0.1.1, <=0.4.2) +569 more potentially affected by CVE-2025-71176 via pytest (6.2.5)

pytest PYPI version 6.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - aaz-dev =1.0.2, =0.1.1, =0.1.4, =0.1.3, =1.1.1, =0.0.3, =0.1.0, =2021.12.0.post0, =0.1.0, =0.0.9, =1.0.0, =0.6.5, =0.13.0 and more Source cves:...

aeonlang (4.0.0b0), aiagents4pharma (>=1.46.2, <=1.48.1) +68 more potentially affected by CVE-2025-71176 via pytest (8.4.1)

pytest PYPI version 8.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - aeonlang 4.0.0b0 - aiagents4pharma =1.46.2, =0.2.0, =0.9.60, =0.2.15rc5, =0.2.0, =0.1.46, =0.1.0, =0.1.4, =0.1.1, =0.1.2 and more Source cves:...

flexlate (>=0.14.1, <=0.14.2) potentially affected by CVE-2026-23968 via copier (6.0.0b0)

copier PYPI version 6.0.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - flexlate =0.14.1, =0.14.2 Source cves: CVE-2026-23968 Source advisory: OSV:PYSEC-2026-1274...

eml2pdf (>=0.1.0, <=2.0.2), markdowntopdf (>=0.1.2, <=0.1.3) +4 more potentially affected by CVE-2025-68616 via weasyprint (64.1.0)

weasyprint PYPI version 64.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - eml2pdf =0.1.0, =0.1.2, =0.0.45, =0.1.0, =0.1.0, =0.1.2 - strahlenexposition-uba 1.0.0 Source cves: CVE-2025-68616 Source advisory:...

airflow-provider-sqream-blue (>=0.0.1, <=0.0.3), async-web3 (>=0.1.0, <=0.3.1) +29 more potentially affected by CVE-2025-71176 via pytest (6.2.3)

pytest PYPI version 6.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - airflow-provider-sqream-blue =0.0.1, =0.1.0, =0.0.5, =0.0.1, =1.0.1, =0.1.0, =0.3.0, =1.0.0, =1.32.0, =0.0.1, =0.2.0 and more Source cves:...

pymilvus-orm (0.0.1), stlearn (>=0.1.3, <=0.1.6) potentially affected by CVE-2025-71176 via pytest (5.3.4)

pytest PYPI version 5.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - pymilvus-orm 0.0.1 - stlearn =0.1.3, =0.1.6 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

active-time-scheduling (>=1.0.0, <=1.0.2), alvin-cli (>=0.2.0, <=1.2.0rc14) +84 more potentially affected by CVE-2025-71176 via pytest (7.1.2)

pytest PYPI version 7.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - active-time-scheduling =1.0.0, =0.2.0, =0.0.1, =1.1.0, =0.2.6, =1.13.0, =0.1.0, =0.0.1, =7.2.0, =1.0.0, =1.0.0, =1.0.7 - datasika 1.0.3 and more...

agentic-dev-boilerplate (1.1.2), agentiva (>=0.1.0, <=0.1.5) +89 more potentially affected by CVE-2025-71176 via pytest (>=9.0.0, <=9.0.2)

pytest PYPI version =9.0.0, =0.1.0, =0.5.0rc4, =1.0.5, =1.0.83, =25.11.27, =0.2.0, =0.9.78, =1.70.2, =1.1.0, =13.0.10, =13.0.13 and more Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

adstoolbox (>=2025.12.2.2, <=2026.5.19), aiagents4pharma (>=1.0.0, <=1.46.1) +115 more potentially affected by CVE-2025-71176 via pytest (8.3.3)

pytest PYPI version 8.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - adstoolbox =2025.12.2.2, =1.0.0, =2.0.3, =0.1.6, =0.1.0, =1.0.5, =12.0.1, =1.0.4, =1.1.7 and more Source cves: CVE-2025-71176 Source advisory:...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-23986 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-23986 Source advisory: OSV:PYSEC-2026-1272...

amplo (>=0.8.2, <=0.12.0), amundsen-frontend (>=3.3.0, <=3.3.1) +28 more potentially affected by CVE-2025-71176 via pytest (6.2.1)

pytest PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - amplo =0.8.2, =3.3.0, =1.1.34, =0.5.6, =0.7.5, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =0.11.0, =0.14.0, =0.19.0, =0.9.0, =0.1.1, =1.1.4 and more Source cve...

electropy (0.1.0.dev0), pyhsiclasso (1.0.1) +1 more potentially affected by CVE-2025-71176 via pytest (3.6.0)

pytest PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - electropy 0.1.0.dev0 - pyhsiclasso 1.0.1 - regexgen 1.0.1 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

booklab (>=0.7.0, <=0.10.0a68), criscostack (1.0.0) +5 more potentially affected by CVE-2025-68616 via weasyprint (59.0.0)

weasyprint PYPI version 59.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - booklab =0.7.0, =1.0.0, =1.1.0, =0.1.3, =21.5.0, =21.7.0 Source cves: CVE-2025-68616 Source advisory: OSV:PYSEC-2026-2034...

agenticmem (>=0.1.4.1, <=0.1.5.0), biomni-bridge (>=0.3.1, <=0.3.3) +27 more potentially affected by CVE-2025-68616 via weasyprint (66.0.0)

weasyprint PYPI version 66.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - agenticmem =0.1.4.1, =0.3.1, =1.0.1, =0.1.2, =2025.1.0b3, =2026.3.0b2, =1.2.15, =2025.1.0b3, =1.0.3, =0.1.0, =1.59.6rc0, =1.67.5 and more...

no-cloud (0.0.8) potentially affected by CVE-2025-68616 via weasyprint (0.34.0)

weasyprint PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - no-cloud 0.0.8 Source cves: CVE-2025-68616 Source advisory: OSV:PYSEC-2026-2034...

agavepy (>=0.2.0, <=0.2.1), swagger-stub (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-71176 via pytest (2.7.0)

pytest PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - agavepy =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

dialogy (>=2.2.2, <=2.2.3) potentially affected by CVE-2026-23986 via copier (7.1.0)

copier PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dialogy =2.2.2, =2.2.3 Source cves: CVE-2026-23986 Source advisory: OSV:PYSEC-2026-1272...

swarm-plus (>=0.0.0.1, <=0.1.0) potentially affected by CVE-2025-68492 via chainlit (1.3.1)

chainlit PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - swarm-plus =0.0.0.1, =0.1.0 Source cves: CVE-2025-68492 Source advisory: OSV:PYSEC-2026-1238...