@kontaa/subgraph (>=1.0.1, <=1.2.3), @kontaa/utils (>=1.2.1, <=1.2.3) +4 more potentially affected by CVE-2026-55778 via parse-server (>=6.5.11, <=7.5.4)

parse-server NPM version =6.5.11, =1.0.1, =1.2.1, =2.4.46, =1.0.1, =1.0.0, =1.0.0, =1.0.1 Source cves: CVE-2026-55778 Source advisory: SNYK:JS-PARSESERVER-17420047...

@jupyterlab/pullrequests (>=2.0.0-alpha.0, <=3.0.2) potentially affected by CVE-2026-54527 via @jupyterlab/git (>=0.30.0, <=0.40.0)

@jupyterlab/git NPM version =0.30.0, =2.0.0-alpha.0, =3.0.2 Source cves: CVE-2026-54527 Source advisory: SNYK:JS-JUPYTERLABGIT-17391473...

@jupyterlab/pullrequests (>=2.0.0-alpha.0, <=3.0.2) potentially affected by CVE-2026-54527 via @jupyterlab/git (>=0.30.0, <=0.40.0)

@jupyterlab/git NPM version =0.30.0, =2.0.0-alpha.0, =3.0.2 Source cves: CVE-2026-54527 Source advisory: OSV:GHSA-F962-V9HR-PFG5...

homeassistant-stubs (2021.5.2) potentially affected by CVE-2026-54317 via homeassistant (2021.5.2)

homeassistant PYPI version 2021.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.5.2 Source cves: CVE-2026-54317 Source advisory: OSV:GHSA-X84V-G949-293W...

homeassistant-stubs (2022.9.6), mqtt-hass-base (>=4.0.9, <=4.0.10) +1 more potentially affected by CVE-2026-54317 via homeassistant (2022.9.6)

homeassistant PYPI version 2022.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.6 - mqtt-hass-base =4.0.9, =4.0.10 - pytest-homeassistant-custom-component 0.11.25 Source cves:...

homeassistant-stubs (2022.9.7), mqtt-hass-base (>=4.0.11, <=4.0.13) +1 more potentially affected by CVE-2026-54317 via homeassistant (2022.9.7)

homeassistant PYPI version 2022.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.7 - mqtt-hass-base =4.0.11, =4.0.13 - pytest-homeassistant-custom-component 0.11.26 Source cves:...

homeassistant-stubs (2022.3.5), pytest-homeassistant-custom-component (0.7.4) potentially affected by CVE-2026-54317 via homeassistant (2022.3.5)

homeassistant PYPI version 2022.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.5 - pytest-homeassistant-custom-component 0.7.4 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.3.8), pytest-homeassistant-custom-component (0.7.7) potentially affected by CVE-2026-54317 via homeassistant (2022.3.8)

homeassistant PYPI version 2022.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.8 - pytest-homeassistant-custom-component 0.7.7 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.4.0b0), pytest-homeassistant-custom-component (0.8.0) potentially affected by CVE-2026-54317 via homeassistant (2022.4.0b0)

homeassistant PYPI version 2022.4.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.0b0 - pytest-homeassistant-custom-component 0.8.0 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2023.5.0b7) potentially affected by CVE-2026-54317 via homeassistant (2023.5.0b7)

homeassistant PYPI version 2023.5.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.5.0b7 Source cves: CVE-2026-54317 Source advisory: OSV:GHSA-X84V-G949-293W...

homeassistant-stubs (2023.3.0b7), pytest-homeassistant-custom-component (0.13.3) potentially affected by CVE-2026-54317 via homeassistant (2023.3.0b7)

homeassistant PYPI version 2023.3.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.3.0b7 - pytest-homeassistant-custom-component 0.13.3 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2023.2.0), pytest-homeassistant-custom-component (0.12.52) potentially affected by CVE-2026-54317 via homeassistant (2023.2.0)

homeassistant PYPI version 2023.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.2.0 - pytest-homeassistant-custom-component 0.12.52 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.2.0b4), pytest-homeassistant-custom-component (0.6.3) potentially affected by CVE-2026-54317 via homeassistant (2022.2.0b4)

homeassistant PYPI version 2022.2.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0b4 - pytest-homeassistant-custom-component 0.6.3 Source cves: CVE-2026-54317 Source advisory:...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-53726 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-53726 Source advisory: OSV:GHSA-WMWX-JR2P-4J4R...

@openinc/parse-server-opendash (>=4.0.12, <=4.0.29) potentially affected by CVE-2026-53725 via parse-server (9.8.0)

parse-server NPM version 9.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-server and may be impacted: - @openinc/parse-server-opendash =4.0.12, =4.0.29 Source cves: CVE-2026-53725 Source advisory: OSV:GHSA-75V4-M273-5J49...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-53724 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-53724 Source advisory: OSV:GHSA-7WQV-XJF3-X35V...

@openinc/parse-server-opendash (>=4.0.12, <=4.0.29) potentially affected by CVE-2026-50008 via parse-server (9.8.0)

parse-server NPM version 9.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-server and may be impacted: - @openinc/parse-server-opendash =4.0.12, =4.0.29 Source cves: CVE-2026-50008 Source advisory: OSV:GHSA-P84R-H6RX-F2XR...

activity-browser (>=3.0.0b966, <=3.0.0b202610031934), aitraining (>=0.0.0, <=0.8.37.dev0) +32 more potentially affected by CVE-2026-23879 via py7zr (0.22.0)

py7zr PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - activity-browser =3.0.0b966, =0.0.0, =0.9.0, =0.8.26, =0.2.1, =0.9.0, =1.1.0, =2.1.7, =1.3.2, =0.0.71, =1.0.7, =3.5.1, =0.0.15, =0.2.4, =0.3.8 and mo...

aqtinstall (>=0.8.0a1, <=0.8.0) potentially affected by CVE-2026-23879 via py7zr (0.6.0)

py7zr PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - aqtinstall =0.8.0a1, =0.8.0 Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...

aqtinstall (>=0.7.4, <=0.7.9) potentially affected by CVE-2026-23879 via py7zr (0.5.5)

py7zr PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - aqtinstall =0.7.4, =0.7.9 Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...