daphne (>=0.14.2, <=0.14.3), paradrop (>=0.13.2, <=0.13.3a8) +1 more potentially affected by unknown CVE via twisted (16.2.0)

twisted PYPI version 16.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - daphne =0.14.2, =0.13.2, =2.2.0, =3.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-VPP8-G58W-M8MP...

geonode (3.3.3) potentially affected by unknown CVE via twisted (22.4.0rc1)

twisted PYPI version 22.4.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - geonode 3.3.3 Source cves: unknown CVE Source advisory: OSV:GHSA-VPP8-G58W-M8MP...

waldiez (>=0.1.6, <=0.1.7), waldiez-jupyter (>=0.1.6, <=0.1.8) potentially affected by unknown CVE via twisted (24.10.0)

twisted PYPI version 24.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - waldiez =0.1.6, =0.1.6, =0.1.8 Source cves: unknown CVE Source advisory: OSV:GHSA-VPP8-G58W-M8MP...

nucypher (2.1.0b1) potentially affected by unknown CVE via twisted (20.3.0rc1)

twisted PYPI version 20.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - nucypher 2.1.0b1 Source cves: unknown CVE Source advisory: OSV:GHSA-VPP8-G58W-M8MP...

yabgp (0.5.0) potentially affected by unknown CVE via twisted (16.0.0)

twisted PYPI version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - yabgp 0.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-VPP8-G58W-M8MP...

carly (>=0.1.0, <=0.10.1), carml (>=18.4.0, <=19.0.0) +10 more potentially affected by unknown CVE via twisted (18.9.0)

twisted PYPI version 18.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carly =0.1.0, =18.4.0, =2019.5.0, =0.1.0a2, =0.0.12, =0.100.2rc4, =1.2.1.0, =0.1.0, =0.1.1 - tx 0.0.2 Source cves: unknown CVE Source advisory:...

carml (>=22.7.0, <=22.7.1), clutch-co-scraper (1.0.0) +6 more potentially affected by unknown CVE via twisted (22.4.0)

twisted PYPI version 22.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carml =22.7.0, =4.1.0, =4.0.0rc1, =0.0.1, =0.0.2 - nucypher 6.1.0 - pterodactyl-exporter 0.1.0 Source cves: unknown CVE Source advisory:...

@auto-nomos/cedar (>=0.0.0, <=0.0.2), @auto-nomos/core (>=0.0.1, <=0.0.4) +10 more potentially affected by unknown CVE via @cedar-policy/cedar-wasm (>=4.3.3, <=4.11.0)

@cedar-policy/cedar-wasm NPM version =4.3.3, =0.0.0, =0.0.1, =0.0.7, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =0.14.0-alpha.0, =0.14.0-alpha.0, =0.19.0 - cedar-mcp-server 1.0.0 Source cves: unknown CVE Source advisory: GHSA-C33X-VCV4-VG3G...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +6103 more potentially affected by unknown CVE via @modelcontextprotocol/sdk (>=1.10.0, <=1.30.0)

@modelcontextprotocol/sdk NPM version =1.10.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.0, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =1.0.0, =1.2.1, =1.2.7 and more Source cves: unknown CVE Source advisory: GHSA-F897-62HF-6GXQ...

@0pvalencia/academic-linter-mcp (>=0.1.0, <=0.1.1), @0pvalencia/app-screenshot-mcp (>=0.1.0, <=0.1.1) +1028 more potentially affected by unknown CVE via @modelcontextprotocol/server (2.0.0)

@modelcontextprotocol/server NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server and may be impacted: - @0pvalencia/academic-linter-mcp =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.38.0,...

@0pvalencia/academic-linter-mcp (>=0.1.0, <=0.1.1), @0pvalencia/app-screenshot-mcp (>=0.1.0, <=0.1.1) +1028 more potentially affected by unknown CVE via @modelcontextprotocol/server (2.0.0)

@modelcontextprotocol/server NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server and may be impacted: - @0pvalencia/academic-linter-mcp =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.38.0,...

helical (3.1.5), phijax (>=0.2.0b1, <=0.2.0b5) potentially affected by unknown CVE via hydra-core (>=1.3.6, <=1.3.7)

hydra-core PYPI version =1.3.6, =0.2.0b1, =0.2.0b5 Source cves: unknown CVE Source advisory: OSV:GHSA-WF6J-7HVR-GR93...

helical (3.1.5), phijax (>=0.2.0b1, <=0.2.0b5) potentially affected by unknown CVE via hydra-core (>=1.3.6, <=1.3.7)

hydra-core PYPI version =1.3.6, =0.2.0b1, =0.2.0b5 Source cves: unknown CVE Source advisory: GHSA-WF6J-7HVR-GR93...

ag-ui-strands (0.1.0a3), amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0) +7 more potentially affected by unknown CVE via strands-agents (>=1.14.0, <=1.35.0)

strands-agents PYPI version =1.14.0, =1.0.60.0, =1.0.9, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: GHSA-763V-5PJM-FX36...

open-interpreter (>=0.1.12, <=0.1.17), promptmodel (>=0.0.25, <=0.0.31) potentially affected by unknown CVE via litellm (0.13.2)

litellm PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.12, =0.0.25, =0.0.31 Source cves: unknown CVE Source advisory: OSV:GHSA-G5FF-637F-6Q2M...

otter-ai (>=0.0.0a0, <=0.0.0a5) potentially affected by unknown CVE via litellm (0.1.400)

litellm PYPI version 0.1.400 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - otter-ai =0.0.0a0, =0.0.0a5 Source cves: unknown CVE Source advisory: OSV:GHSA-G5FF-637F-6Q2M...

aiconsole (>=0.2.0, <=0.2.7), fastrepl (>=0.0.19, <=0.0.20) potentially affected by unknown CVE via litellm (0.6.6)

litellm PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - aiconsole =0.2.0, =0.0.19, =0.0.20 Source cves: unknown CVE Source advisory: OSV:GHSA-G5FF-637F-6Q2M...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by unknown CVE via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: unknown CVE Source advisory: OSV:GHSA-G5FF-637F-6Q2M...

autollm (>=0.0.1, <=0.0.3) potentially affected by unknown CVE via litellm (0.8.4)

litellm PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autollm =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-G5FF-637F-6Q2M...

@abiyz/identity (>=0.2.0, <=0.2.6), @adaptcom/server (>=0.1.0-next-20260909201057, <=0.1.0-next-20260911225825) +340 more potentially affected by unknown CVE via @better-auth/drizzle-adapter (>=1.6.17, <=1.7.6)

@better-auth/drizzle-adapter NPM version =1.6.17, =0.2.0, =0.1.0-next-20260909201057, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.0.7, =0.1.10, =0.12.0, =0.28.0, =0.1.1, =1.0.0, =1.4.4, =1.4.7 - @arxen/access-control 0.2.0 - @arxen/cli 0.2.0 - @arxen/core 0.2.0 and more Source cves...