aipose (>=0.4.0, <=3.2.0), classla (>=1.2.0, <=2.2.3) +11 more potentially affected by CVE-2026-0994 via protobuf (4.21.2)

protobuf PYPI version 4.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aipose =0.4.0, =1.2.0, =1.1.2, =0.0.9, =0.0.2, =0.0.1, =0.1.4, =1.0.0, =2023.8.17.1, =0.0.3, =0.1.0, =0.1.1 Source cves: CVE-2026-0994 Source...

cogdata (>=0.0.6, <=0.0.7), icetk (>=0.0.5, <=0.0.7) +3 more potentially affected by CVE-2026-0994 via protobuf (3.19.0rc2)

protobuf PYPI version 3.19.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cogdata =0.0.6, =0.0.5, =3.0.0a2, =4.7.2 - motion-master-proto 5.2.0 - tensorflow-checkpoint-reader 0.1.2 Source cves: CVE-2026-0994 Source...

d2m-apigen (>=1.0.1, <=2.1.7), dm-apigen (>=0.0.0, <=1.0.0) +3 more potentially affected by CVE-2026-24132 via @orval/mock (>=7.0.0, <=7.19.0)

@orval/mock NPM version =7.0.0, =1.0.1, =0.0.0, =1.2.0, =7.0.0, =7.1.0, =7.13.2 Source cves: CVE-2026-24132 Source advisory: SNYK:JS-ORVALMOCK-15091570...

aaaai (>=0.1.3, <=0.3.0), act-workflow (>=4.8.2, <=4.8.399) +580 more potentially affected by CVE-2025-67221 via orjson (>=3.0.0, <=3.11.5)

orjson PYPI version =3.0.0, =0.1.3, =4.8.2, =0.1.3, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.31, =0.0.1, =0.0.2, =0.0.3, =0.2.0, =0.5.3, =0.5.5 and more Source cves: CVE-2025-67221 Source advisory: OSV:GHSA-HX9Q-6W63-J58V...

apologies (>=0.1.5, <=0.1.24), buvar (>=0.6.0, <=0.11.0) +5 more potentially affected by CVE-2025-67221 via orjson (2.6.8)

orjson PYPI version 2.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on orjson and may be impacted: - apologies =0.1.5, =0.6.0, =0.1.0, =0.8.0, =0.1.0, =0.2.6, =0.0.10, =0.0.12 Source cves: CVE-2025-67221 Source advisory: OSV:GHSA-HX9Q-6W63-J58V...

io4it (>=2.0.0, <=3.0.4.1), leettools (>=1.0.14, <=1.0.17) potentially affected by CVE-2020-14343 +1 more via docling-core (>=2.21.1, <=2.26.3)

docling-core PYPI version =2.21.1, =2.0.0, =1.0.14, =1.0.17 Source cves: CVE-2020-14343, CVE-2026-24009 Source advisory: GHSA-VQXF-V2GG-X3HC...

@aexol/opencode-tui (>=0.2.5, <=0.2.10), @agent-qofeno/agentx-cli (>=1.20.47, <=1.20.52) +115 more potentially affected by CVE-2026-24006 via seroval (>=1.0.7, <=1.3.2)

seroval NPM version =1.0.7, =0.2.5, =1.20.47, =2.11.0, =1.0.0, =1.0.0, =1.1.54, =1.1.54, =1.0.24, =0.1.0, =0.3.0, =0.3.2 - @entropy-tamer/reynard-config 0.1.2 - @entropy-tamer/reynard-i18n 1.2.0 - @entropy-tamer/reynard-validation 0.2.0 and more Source cves: CVE-2026-24006 Source advisory:...

@typebot.io/nextjs (>=0.3.23, <=0.6.0), @typebot.io/react (>=0.3.23, <=0.9.14) potentially affected by CVE-2025-65098 via @typebot.io/js (>=0.3.23, <=0.9.14)

@typebot.io/js NPM version =0.3.23, =0.3.23, =0.3.23, =0.9.14 Source cves: CVE-2025-65098 Source advisory: SNYK:JS-TYPEBOTIOJS-15060538...

bugbug (0.0.137) potentially affected by CVE-2025-67221 via orjson (2.1.0)

orjson PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on orjson and may be impacted: - bugbug 0.0.137 Source cves: CVE-2025-67221 Source advisory: OSV:PYSEC-2026-107...

ch.qos.logback:logback-access (0.9.14), ch.qos.logback:logback-classic (0.9.14) +13 more potentially affected by CVE-2026-1225 via ch.qos.logback:logback-core (0.9.14)

ch.qos.logback:logback-core MAVEN version 0.9.14 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.14 - ch.qos.logback:logback-classic 0.9.14 -...

170051277-trab-final-gces (>=0.3.0, <=0.5.0), aamt (>=0.0.1, <=0.2.5) +1330 more potentially affected by CVE-2025-71176 via pytest (7.4.4)

pytest PYPI version 7.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - 170051277-trab-final-gces =0.3.0, =0.0.1, =0.1.0, =0.1.3, =0.0.1, =0.0.0.post225, =0.0.1, =1.0.0, =0.0.1, =0.1.12, =0.1.0, =0.1.1 and more Source...

python-dev-tools (2019.11.15) potentially affected by CVE-2025-71176 via pytest (5.2.3)

pytest PYPI version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - python-dev-tools 2019.11.15 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

agentfoundry (>=1.3.9, <=1.3.10), album-of-the-year-api (>=0.2.0, <=0.2.12) +52 more potentially affected by CVE-2025-71176 via pytest (7.0.1)

pytest PYPI version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - agentfoundry =1.3.9, =0.2.0, =1.2.2, =0.0.1, =1.0.28, =1.15.15, =0.0.5, =1.0.0.dev20230925230542, =0.0.2, =0.0.7 and more Source cves: CVE-2025-7117...

bestpractice (0.0.1), cg4 (0.0.2) +22 more potentially affected by CVE-2025-71176 via pytest (5.2.1)

pytest PYPI version 5.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bestpractice 0.0.1 - cg4 0.0.2 - cgr 0.0.2 - coge =0.0.2, =0.0.1, =0.1.0, =0.19.11, =1.1.1, =0.0.2, =0.0.7 - mac-mathpix-ocr 0.0.1 and more Source...

jsox-code-retreat (>=0.2.0, <=0.6.0) potentially affected by CVE-2025-71176 via pytest (2.5.2)

pytest PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - jsox-code-retreat =0.2.0, =0.6.0 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

seleniumbase (>=1.15.0, <=1.15.4) potentially affected by CVE-2025-71176 via pytest (3.7.3)

pytest PYPI version 3.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - seleniumbase =1.15.0, =1.15.4 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

arched-emailer (>=0.1.5, <=0.4.6), axsi (>=0.0.15, <=0.0.17) +25 more potentially affected by CVE-2025-71176 via pytest (8.0.0)

pytest PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - arched-emailer =0.1.5, =0.0.15, =0.2.0, =0.1.3, =0.1.0, =0.0.6, =0.3.2, =1.27.11, =1.34.0 and more Source cves: CVE-2025-71176 Source advisory:...

agentic-dev-boilerplate (1.1.2), agentiva (>=0.1.0, <=0.1.5) +88 more potentially affected by CVE-2025-71176 via pytest (>=9.0.0, <=9.0.2)

pytest PYPI version =9.0.0, =0.1.0, =0.5.0rc4, =1.0.5, =1.0.83, =25.11.27, =0.2.0, =0.9.78, =1.70.2, =1.1.0, =13.0.10, =13.0.13 and more Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

ersilia (>=0.0.1, <=0.0.3), invoicing (>=2.1.0, <=2.1.1) potentially affected by CVE-2025-71176 via pytest (3.10.0)

pytest PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - ersilia =0.0.1, =2.1.0, =2.1.1 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

alfrodull (0.1.0), bcdc-apitests (>=0.2.0, <=1.0.4) +4 more potentially affected by CVE-2025-71176 via pytest (4.6.2)

pytest PYPI version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - alfrodull 0.1.0 - bcdc-apitests =0.2.0, =0.2.6, =2019.6.4, =1.0.1, =1.0.7 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...