colusa (0.11.0), tycho-api (>=0.0.0.dev0, <=1.13.0a1.dev3) potentially affected by CVE-2026-59890 via setuptools (60.9.2)

setuptools PYPI version 60.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colusa 0.11.0 - tycho-api =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-59930 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59930 Source advisory: OSV:GHSA-2HM2-HC3V-44H9...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-59922 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59922 Source advisory: OSV:GHSA-C8J7-8CV4-2XMQ...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-59926 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59926 Source advisory: OSV:GHSA-G97X-GVCM-X72H...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-59923 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59923 Source advisory: OSV:GHSA-8C25-4J27-2RV3...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-59925 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59925 Source advisory: OSV:GHSA-4J32-57V6-6G45...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-49851 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-49851 Source advisory: OSV:PYSEC-2026-2652...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-59930 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59930 Source advisory: OSV:PYSEC-2026-2218...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-59922 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59922 Source advisory: OSV:PYSEC-2026-2210...

colusa (0.11.0), tycho-api (>=0.0.0.dev0, <=1.13.0a1.dev3) potentially affected by CVE-2026-59890 via setuptools (60.9.2)

setuptools PYPI version 60.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colusa 0.11.0 - tycho-api =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-59923 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59923 Source advisory: OSV:PYSEC-2026-2211...

colusa (0.11.0), tycho-api (>=0.0.0.dev0, <=1.13.0a1.dev3) potentially affected by CVE-2024-6345 via setuptools (60.9.2)

setuptools PYPI version 60.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colusa 0.11.0 - tycho-api =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-44899 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-44899 Source advisory: OSV:PYSEC-2026-2209...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-44897 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-44897 Source advisory: OSV:GHSA-V87V-83H2-53W7...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-44896 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-44896 Source advisory: OSV:GHSA-58CW-G322-P94V...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-44708 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-44708 Source advisory: OSV:GHSA-8G87-J6Q8-G93X...

colusa (0.11.0), tycho-api (>=0.0.0.dev0, <=1.13.0a1.dev3) potentially affected by CVE-2025-47273 via setuptools (60.9.2)

setuptools PYPI version 60.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colusa 0.11.0 - tycho-api =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

colusa (0.11.0), tycho-api (>=0.0.0.dev0, <=1.13.0a1.dev3) potentially affected by CVE-2025-47273 via setuptools (60.9.2)

setuptools PYPI version 60.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colusa 0.11.0 - tycho-api =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

colusa (0.11.0), tycho-api (>=0.0.0.dev0, <=1.13.0a1.dev3) potentially affected by CVE-2024-6345 via setuptools (60.9.2)

setuptools PYPI version 60.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colusa 0.11.0 - tycho-api =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

colusa (0.11.0), tycho-api (>=0.0.0.dev0, <=1.13.0a1.dev3) potentially affected by CVE-2022-40897 via setuptools (60.9.2)

setuptools PYPI version 60.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colusa 0.11.0 - tycho-api =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...