walletlib (0.1.0) potentially affected by CVE-2025-14010 via ansible (2.8.4)

ansible PYPI version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - walletlib 0.1.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

cloudmesh-client (4.2.6) potentially affected by CVE-2025-14010 via ansible (2.0.2.0)

ansible PYPI version 2.0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

haywire-core (0.0.2), openorchestrator (>=2.0.0rc1, <=3.0.0) +1 more potentially affected by CVE-2025-66645 via nicegui (2.22.2)

nicegui PYPI version 2.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - haywire-core 0.0.2 - openorchestrator =2.0.0rc1, =3.0.0 - space-stream 0.1.3 Source cves: CVE-2025-66645 Source advisory: OSV:PYSEC-2026-1700...

rosys (0.7.1) potentially affected by CVE-2025-66469 via nicegui (1.0.4)

nicegui PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.7.1 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

rosys (>=0.3.3, <=0.4.5) potentially affected by CVE-2025-66469 via nicegui (0.6.5)

nicegui PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.3, =0.4.5 Source cves: CVE-2025-66469 Source advisory: OSV:PYSEC-2026-1697...

sagecreator (>=0.1.1.4, <=0.1.1.6) potentially affected by CVE-2025-14010 via ansible (2.7.8)

ansible PYPI version 2.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - sagecreator =0.1.1.4, =0.1.1.6 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

aggmap (>=1.1.1, <=1.2.1), ai-music-remixer (3.0.0) +112 more potentially affected by CVE-2025-12060 via keras (2.10.0rc1)

keras PYPI version 2.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aggmap =1.1.1, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.1.1, =0.1.9 - automea 0.0.13 - avici 1.0.5 - basic-pitch 0.2.3 and more...

eve (>=0.9.1, <=0.9.2), fancy-nlp (>=0.0.1, <=0.0.4) +15 more potentially affected by CVE-2025-66221 via werkzeug (0.15.4)

werkzeug PYPI version 0.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - eve =0.9.1, =0.0.1, =0.1.3, =2.0.0, =0.1.0a23, =0.1.0, =1.0.2, =1.0.0, =0.100.4, =0.1.0, =0.10.0 - revelation 1.1.0 and more Source cves:...

alo7-airflow (>=1.10.0, <=1.10.0.7), amundsen-metadata (1.0.17) +65 more potentially affected by CVE-2025-66221 via werkzeug (0.14.1)

werkzeug PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - alo7-airflow =1.10.0, =1.10.3b1, =0.6.7.post3, =0.1.1, =0.6.4, =0.1.0, =0.1.0, =1.0.5, =1.0.4, =0.1.3a0, =0.5.4rc0, =0.5.4rc0, =0.2.0rc0, =0.2....

bentodev (>=0.1.17, <=2018.11.2), biweeklybudget (>=0.1.0, <=0.7.0) +4 more potentially affected by CVE-2025-66221 via werkzeug (0.12.1)

werkzeug PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - bentodev =0.1.17, =0.1.0, =0.1.48, =0.1.0, =0.2.5 - spiderkeeper-zam 1.2.2 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

satosa (>=2.0.0, <=2.1.1) potentially affected by CVE-2025-66221 via werkzeug (0.11.2)

werkzeug PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - satosa =2.0.0, =2.1.1 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2025-66221 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

a2grunnerp (>=0.1.0, <=0.1.8), academic-emotion (0.1.2) +113 more potentially affected by CVE-2025-12060 via keras (2.10.0)

keras PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.0.2, =0.1.0, =7.2.0, =0.1.3, =0.1.8 and more Source cves: CVE-2025-12060 Source advisory: OSV:PYSEC-2026-1486...

autorad (>=0.1.2, <=0.2.5), aws-flask-lambda (>=0.1.0, <=0.1.2) +54 more potentially affected by CVE-2025-66221 via werkzeug (2.0.2)

werkzeug PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - autorad =0.1.2, =0.1.0, =0.0.1, =0.9.2, =0.0.1, =0.1.0, =0.4.9, =3.1.141, =0.8.0.dev6, =1.0.0, =1.0.0, =0.16.0, =0.1.0, =1.0.0 and more Source...

oarepo (11.0.28) potentially affected by CVE-2025-66221 via werkzeug (2.3.2)

werkzeug PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - oarepo 11.0.28 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

abilian-sbe (1.0.5), abilian-sbe-next (1.0.4) +159 more potentially affected by CVE-2025-66221 via werkzeug (2.0.3)

werkzeug PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - abilian-sbe 1.0.5 - abilian-sbe-next 1.0.4 - actinia-core 4.9.0 - aiqc =5.0.1, =0.3.2, =4.1.0, =3.11.0, =4.0.0, =0.8.0, =0.0.7, =5.2.15, =0.18.1...

apilogicserver (>=9.1.32, <=17.0.0), archivy (>=1.7.5, <=1.7.7) +14 more potentially affected by CVE-2025-66221 via werkzeug (2.3.3)

werkzeug PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - apilogicserver =9.1.32, =1.7.5, =0.1.0, =0.1.0, =0.2.0, =0.1.6, =0.1.0, =0.9.0, =1.0.5, =0.8.0, =2.9.0, =0.7.1.dev0, =1.0.5, =0.1.0, =0.4.0 and...

adpred (1.3.2), africanwhisper (>=0.2.3, <=0.9.0) +82 more potentially affected by CVE-2025-12060 via keras (>=3.0.0, <=3.11.3)

keras PYPI version =3.0.0, =0.2.3, =0.1.2, =0.1.0, =1.3.0.dev4, =1.1.8, =1.3.3, =0.1.1, =0.1.0, =0.2.3 and more Source cves: CVE-2025-12060 Source advisory: OSV:PYSEC-2026-1486...

m9s-account-banking-import (>=5.2.0, <=5.2.7), m9s-account-banking-import-hibiscus (>=5.2.0, <=5.2.4) +218 more potentially affected by CVE-2025-66422 via trytond (5.2.20)

trytond PYPI version 5.2.20 is affected by a known vulnerability. The following packages have a transitive dependency on trytond and may be impacted: - m9s-account-banking-import =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.2, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.4 and more Source...

automateboringstuff3 (2024.10.1), calibreweb (0.6.24) +6 more potentially affected by CVE-2025-66019 via pypdf (5.0.1)

pypdf PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - automateboringstuff3 2024.10.1 - calibreweb 0.6.24 - forgy =0.1.0, =0.1.0rc1, =0.0.12, =0.0.16 Source cves: CVE-2025-66019 Source advisory:...