azure-devtools (0.2.1) potentially affected by unknown CVE via vcrpy (1.10.3)

vcrpy PYPI version 1.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - azure-devtools 0.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...

renku-lock (>=1.6.0, <=1.7.1) potentially affected by unknown CVE via vcrpy (4.2.0)

vcrpy PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - renku-lock =1.6.0, =1.7.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...

cityfront (>=0.1.0, <=1.0.0), commonmeta-py (0.6.0) +15 more potentially affected by unknown CVE via vcrpy (4.4.0)

vcrpy PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - cityfront =0.1.0, =0.7.1, =0.6.10, =0.1.0, =0.1.2, =0.1.23, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.1.4 and more Source cves: unkno...

@chaibuilder/sdk (>=0.1.0, <=1.2.19), @coderrental/csp-categorytree (>=1.1.0, <=1.1.7) +2 more potentially affected by CVE-2026-55091 via flat-to-nested (>=1.1.0, <=1.1.1)

flat-to-nested NPM version =1.1.0, =0.1.0, =1.1.0, =1.0.17, =1.0.18 - flow-dg-category-module 0.0.0 Source cves: CVE-2026-55091 Source advisory: OSV:GHSA-HP36-V28F-W3R4...

@ajna-inc/npmvc (>=0.1.0, <=0.3.4), @cra-ready/cli (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-55849 via @cyclonedx/cyclonedx-npm (>=3.1.0, <=4.2.1)

@cyclonedx/cyclonedx-npm NPM version =3.1.0, =0.1.0, =0.1.0, =1.0.8, =1.1.3 - @raj-dev/guardrail 1.0.0 Source cves: CVE-2026-55849 Source advisory: OSV:GHSA-V75R-VX73-82PJ...

@ajna-inc/npmvc (>=0.1.0, <=0.3.4), @cra-ready/cli (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-55849 via @cyclonedx/cyclonedx-npm (>=3.1.0, <=4.2.1)

@cyclonedx/cyclonedx-npm NPM version =3.1.0, =0.1.0, =0.1.0, =1.0.8, =1.1.3 - @raj-dev/guardrail 1.0.0 Source cves: CVE-2026-55849 Source advisory: GHSA-V75R-VX73-82PJ...

@ajna-inc/npmvc (>=0.1.0, <=0.3.4), @cra-ready/cli (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-55849 via @cyclonedx/cyclonedx-npm (>=3.1.0, <=4.2.1)

@cyclonedx/cyclonedx-npm NPM version =3.1.0, =0.1.0, =0.1.0, =1.0.8, =1.1.3 - @raj-dev/guardrail 1.0.0 Source cves: CVE-2026-55849 Source advisory: SNYK:JS-CYCLONEDXCYCLONEDXNPM-17817903...

anf-feed (>=0.0.1.dev2, <=0.0.1.dev3), apartment-browser (0.0.1) +9 more potentially affected by CVE-2026-54911 via ujson (4.0.1)

ujson PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - anf-feed =0.0.1.dev2, =0.1.2, =20.11.12, =1.4.0, =0.16.0, =0.1.0, =1.0.3.dev0, =0.4.0, =0.1.7, =0.6.3, =0.6.4.1 Source cves: CVE-2026-54911 Source...

auto-augment (1.0.0), betfairlightweight (>=0.0.0b14, <=2.7.0) +13 more potentially affected by CVE-2026-54911 via ujson (3.0.0)

ujson PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - auto-augment 1.0.0 - betfairlightweight =0.0.0b14, =10.0.0, =1.6.8, =0.13.2, =0.1.0, =4.1.0, =0.7.4, =0.0.1b1, =0.12.1, =0.0.1, =1.14.9, =1.0.21,...

@kozou/api (>=1.0.0, <=1.8.0), @kozou/codegen (>=1.0.0, <=1.8.0) +5 more potentially affected by unknown CVE via @kozou/core (>=1.0.0, <=1.8.0)

@kozou/core NPM version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0, =1.0.0, =1.8.0 Source cves: unknown CVE Source advisory: SNYK:JS-KOZOUCORE-17818146...

kozou (>=1.0.0, <=1.8.0) potentially affected by unknown CVE via @kozou/api (>=1.0.0, <=1.8.0)

@kozou/api NPM version =1.0.0, =1.0.0, =1.8.0 Source cves: unknown CVE Source advisory: SNYK:JS-KOZOUAPI-17818148...

kozou (>=1.0.0, <=1.8.0) potentially affected by unknown CVE via @kozou/mcp (>=1.0.0, <=1.8.0)

@kozou/mcp NPM version =1.0.0, =1.0.0, =1.8.0 Source cves: unknown CVE Source advisory: SNYK:JS-KOZOUMCP-17818147...

kozou (>=1.0.0, <=1.8.0) potentially affected by unknown CVE via @kozou/api (>=1.0.0, <=1.8.0)

@kozou/api NPM version =1.0.0, =1.0.0, =1.8.0 Source cves: unknown CVE Source advisory: OSV:GHSA-V52W-28XH-V562...

kozou (>=1.0.0, <=1.8.0) potentially affected by unknown CVE via @kozou/mcp (>=1.0.0, <=1.8.0)

@kozou/mcp NPM version =1.0.0, =1.0.0, =1.8.0 Source cves: unknown CVE Source advisory: OSV:GHSA-V52W-28XH-V562...

@kozou/api (>=1.0.0, <=1.8.0), @kozou/codegen (>=1.0.0, <=1.8.0) +5 more potentially affected by unknown CVE via @kozou/core (>=1.0.0, <=1.8.0)

@kozou/core NPM version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0, =1.0.0, =1.8.0 Source cves: unknown CVE Source advisory: OSV:GHSA-V52W-28XH-V562...

pharia-inference-sdk (0.1.0), solace-agent-mesh (>=1.8.0, <=1.28.4) potentially affected by CVE-2026-55865 via python-liquid (>=2.0.2, <=2.2.0)

python-liquid PYPI version =2.0.2, =1.8.0, =1.28.4 Source cves: CVE-2026-55865 Source advisory: SNYK:PYTHON-PYTHONLIQUID-17458912...

pharia-inference-sdk (0.1.0), solace-agent-mesh (>=1.8.0, <=1.28.4) potentially affected by CVE-2026-55865 via python-liquid (>=2.0.2, <=2.2.0)

python-liquid PYPI version =2.0.2, =1.8.0, =1.28.4 Source cves: CVE-2026-55865 Source advisory: OSV:GHSA-VQ2F-VCC9-J8MV...

plainqafact (>=0.4.0, <=1.1.0), python-fhir-converter (0.0.21) potentially affected by CVE-2026-55865 via python-liquid (1.10.2)

python-liquid PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-liquid and may be impacted: - plainqafact =0.4.0, =1.1.0 - python-fhir-converter 0.0.21 Source cves: CVE-2026-55865 Source advisory: OSV:GHSA-VQ2F-VCC9-J8MV...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-55778 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-55778 Source advisory: OSV:GHSA-V8X7-R927-CC93...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-55778 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-55778 Source advisory: SNYK:JS-PARSESERVER-17420047...