lftools (0.31.2) potentially affected by CVE-2026-102937 via virtualenv (20.0.9)

virtualenv PYPI version 20.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - lftools 0.31.2 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

clearml-agent (>=0.17.0, <=0.17.2), manven (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2026-102937 via virtualenv (16.7.12)

virtualenv PYPI version 16.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - clearml-agent =0.17.0, =0.1.0, =0.4.0, =0.0.1, =0.3.0.dev0, =0.13.2rc2, =0.16.3 Source cves: CVE-2026-102937 Source advisory:...

cosmic-ray (>=6.1.1, <=8.3.5), fauxpy (>=0.1.0, <=0.7.0) +1 more potentially affected by CVE-2026-102937 via virtualenv (16.7.10)

virtualenv PYPI version 16.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cosmic-ray =6.1.1, =0.1.0, =0.7.0 - pickley 2.0.14 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

akc-mamba (>=2.0.1, <=2.0.2), pangsitpy (0.0.3) potentially affected by CVE-2026-102937 via virtualenv (16.7.9)

virtualenv PYPI version 16.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - akc-mamba =2.0.1, =2.0.2 - pangsitpy 0.0.3 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

pickley (1.9.19), thaispoon (0.0.1) potentially affected by CVE-2026-102937 via virtualenv (16.7.7)

virtualenv PYPI version 16.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pickley 1.9.19 - thaispoon 0.0.1 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

bento-cli (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-102937 via virtualenv (16.7.5)

virtualenv PYPI version 16.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - bento-cli =0.1.0, =0.1.1 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

ezflow (>=0.2.1, <=0.2.4) potentially affected by CVE-2026-102937 via virtualenv (20.5.0)

virtualenv PYPI version 20.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ezflow =0.2.1, =0.2.4 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

optimizo (>=1.2.0, <=1.3.0), pencil-pusher (1.6.1) potentially affected by CVE-2026-102937 via virtualenv (20.4.7)

virtualenv PYPI version 20.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - optimizo =1.2.0, =1.3.0 - pencil-pusher 1.6.1 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

aibro (>=1.0.9, <=1.1.5), cospy (>=0.4.0, <=0.4.2) potentially affected by CVE-2026-102937 via virtualenv (20.4.6)

virtualenv PYPI version 20.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aibro =1.0.9, =0.4.0, =0.4.2 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

autocleus (0.1.1), poetry (>=1.2.0a1, <=1.2.0a2) +2 more potentially affected by CVE-2026-102937 via virtualenv (20.4.4)

virtualenv PYPI version 20.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - autocleus 0.1.1 - poetry =1.2.0a1, =0.1.2, =0.0.1, =0.4.1 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

ahead (>=0.1.0, <=0.6.0), pencil-pusher (>=1.2.0, <=1.6.0) potentially affected by CVE-2026-102937 via virtualenv (20.4.3)

virtualenv PYPI version 20.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ahead =0.1.0, =1.2.0, =1.6.0 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

azure-devops-artifacts-helpers (>=1.0.8, <=1.0.9), hip-data-ml-utils (>=0.3.7, <=1.0.0) +2 more potentially affected by CVE-2026-102937 via virtualenv (20.4.2)

virtualenv PYPI version 20.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers =1.0.8, =0.3.7, =8.2.1, =0.9.2, =1.1.0 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

chicken-coop (>=0.0.1, <=0.0.5), im-openai (0.8.2) potentially affected by CVE-2026-102937 via virtualenv (20.24.2)

virtualenv PYPI version 20.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chicken-coop =0.0.1, =0.0.5 - im-openai 0.8.2 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

sym-sdk (>=0.0.1, <=0.0.22) potentially affected by CVE-2026-102937 via virtualenv (20.4.1)

virtualenv PYPI version 20.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - sym-sdk =0.0.1, =0.0.22 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

aprsd (1.6.0), costsekondi (0.0.1) potentially affected by CVE-2026-102937 via virtualenv (20.4.0)

virtualenv PYPI version 20.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aprsd 1.6.0 - costsekondi 0.0.1 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

aprsd (>=1.5.0, <=1.5.1), ttp-sros-parser (>=0.0.1, <=0.1.4) potentially affected by CVE-2026-102937 via virtualenv (20.2.2)

virtualenv PYPI version 20.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aprsd =1.5.0, =0.0.1, =0.1.4 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

azure-devops-artifacts-helpers (1.0.7) potentially affected by CVE-2026-102937 via virtualenv (20.2.1)

virtualenv PYPI version 20.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers 1.0.7 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

awsegy (0.1.4), azure-devops-artifacts-helpers (>=0.0.1, <=1.0.6) +1 more potentially affected by CVE-2026-102937 via virtualenv (20.1.0)

virtualenv PYPI version 20.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - awsegy 0.1.4 - azure-devops-artifacts-helpers =0.0.1, =1.0.0, =1.0.2 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

chemscad (>=2.0.1.post4, <=2.0.2) potentially affected by CVE-2026-102937 via virtualenv (20.0.31)

virtualenv PYPI version 20.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chemscad =2.0.1.post4, =2.0.2 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

foxbms-fox-cli (1.12.0), ironoc-pytest-conor-heffron (>=2.3.4, <=2.5.1) +8 more potentially affected by CVE-2026-102937 via virtualenv (>=21.1.0, <=21.7.4)

virtualenv PYPI version =21.1.0, =2.3.4, =0.1.4, =0.1.0, =0.3.1, =0.0.3, =1.5.1, =1.1.0, =1.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...