beanstalk-dispatch (>=0.0.3 <=0.0.5), cklauth (>=0.1.0 <=0.3.0) +120 more potentially affected by CVE-2018-7537 via django (>=2.0.0 <=2.0.2)

django PYPI version =2.0.0, =0.0.3, =0.1.0, =0.5.0, =3.0.0, =2.1.0, =1.1.0, =0.0.7, =0.1.0, =0.0.2, =1.3.0, =2.0.0, =2.0.2 - django-cas-server =1.0.0 and more Source cves: CVE-2018-7537 Source advisory: OSV:GHSA-2F9X-5V75-3QV4...

ahserver (>=1.0.1 <=1.2.0), aiohttp-admin (>=0.1.0a0 <=0.1.0a3) +62 more potentially affected by CVE-2018-1000814 via aiohttp-session (>=0.8.0 <=2.1.0)

aiohttp-session PYPI version =0.8.0, =1.0.1, =0.1.0a0, =1.0.0, =0.0.1, =1.4.0, =0.3.0, =0.4.3, =0.0.1, =0.1.0, =1.0.0, =0.0.1, =22.3.0, =0.0.1, =0.0.2 and more Source cves: CVE-2018-1000814 Source advisory: OSV:GHSA-MR4X-C4V9-X729...

com.ge.research.semtk:arangoDbService (=2.2.2), com.ge.research.semtk:athenaService (=2.2.2) +136 more potentially affected by CVE-2018-1284 via org.apache.hive:hive-service (>=0.8.0 <=2.3.2)

org.apache.hive:hive-service MAVEN version =0.8.0, =2.2.1, =2.2.1, =2.2.1, =2.2.2 - com.ge.research.semtk:sparqlGraphResultsService =2.2.2 and more Source cves: CVE-2018-1284 Source advisory: OSV:GHSA-RXMR-C9JM-7MM8...

jp.co.ap-com:spring-oauth2-serializable (=0.0.1) potentially affected by CVE-2016-4977 via org.springframework.security.oauth:spring-security-oauth2 (=2.0.0.RELEASE)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version =2.0.0.RELEASE is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security.oauth:spring-security-oauth2 and may be impacted: -...

br.net.woodstock.rockframework:rockframework-core (>=1.2.1 <=1.2.2), com.alanpoi:alanpoi-all (>=1.3.5 <=3.0.0) +64 more potentially affected by CVE-2016-1000344 via org.bouncycastle:bcprov-jdk14 (>=1.38 <=1.55)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.38, =1.2.1, =1.3.5, =1.3.5, =2.0, =1.0, =1.6.1.P24, =1.7, =0.0.1, =1.0, =1.1 - com.github.lkkushan101.RestAssuredPDFReport:com.github.lkkushan101.RestAssuredPDFReport =1.00 - com.github.lkkushan101.appiumlocator:com.github.lkkushan101.appiumlocator...

org.apache.cxf.fediz.examples:jaxrsSpringSecurityWebapp (>=1.3.0 <=1.4.3), org.apache.cxf.fediz.examples:springPreauthWebapp (>=1.1.0 <=1.4.3) +6 more potentially affected by CVE-2018-8038 via org.apache.cxf.fediz:fediz-spring (>=1.1.0 <=1.4.3)

org.apache.cxf.fediz:fediz-spring MAVEN version =1.1.0, =1.3.0, =1.1.0, =1.1.0, =1.2.0, =1.2.0, =1.1.0, =1.1.0, =1.1.0, =1.4.3 Source cves: CVE-2018-8038 Source advisory: OSV:GHSA-W3GH-G32M-CVHR...

com.accelerate-experience:storm-metrics-statsd (>=1.0.0 <=1.0.1), com.accelerate-experience:storm-rabbitmq (=1.0.0) +70 more potentially affected by CVE-2017-9799 via org.apache.storm:storm-core (>=1.0.0 <=1.0.3)

org.apache.storm:storm-core MAVEN version =1.0.0, =1.0.0, =0.1.0, =1.0, =1.0, =1.0, =1.3, =1.0, =1.0, =1.0, =1.0.0, =1.0.4 - com.github.ptgoetz:storm-jms =1.0.2 - com.github.ptgoetz:storm-signals =1.0.3 and more Source cves: CVE-2017-9799 Source advisory: OSV:GHSA-X825-RJWW-2245...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1 <=1.0.2), aero.m-click:mcpdf (>=0.2.3 <=0.2.4) +6778 more potentially affected by CVE-2016-1000343 via org.bouncycastle:bcprov-jdk15on (>=1.46 <=1.55)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =0.42.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2016-1000343 Source advisory: OSV:GHSA-RRVX-PWF8-P59P...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0 <=1.1.0), au.com.turingg:turingg-files (=0.0.1) +1122 more potentially affected by CVE-2018-11761 via org.apache.tika:tika-core (>=0.10 <=1.19)

org.apache.tika:tika-core MAVEN version =0.10, =1.0.0, =4.2.0, =1.0.68, =3.6.1, =3.11.0, =1.0.0, =4.6.0, =5.6.100, =2.0.6, =1.0.10, =1.0.12, =1.0.32 and more Source cves: CVE-2018-11761 Source advisory: OSV:GHSA-6JQ2-789Q-FFF2...

at.researchstudio.sat:won-core (>=0.2 <=0.9), at.researchstudio.sat:won-cryptography (>=0.3 <=0.6) +673 more potentially affected by CVE-2015-0263 via org.apache.camel:camel-core (>=1.0.0 <=2.13.3)

org.apache.camel:camel-core MAVEN version =1.0.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.4, =0.9 and more Source cves: CVE-2015-0263 Source advisory: OSV:GHSA-3HRC-F439-727G...

cn.youweisoft:sparrow-permission (>=1.4.0 <=1.6.0), com.bucket4j:bucket4j-ignite (>=7.6.1 <=8.10.1) +257 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (>=1.0.0-RC1 <=2.3.0)

org.apache.ignite:ignite-core MAVEN version =1.0.0-RC1, =1.4.0, =7.6.1, =8.11.0, =8.11.0, =8.0.0, =1.0.0, =3.0.0-beta1, =0.9.1, =1.5.1, =2.0, =0.0.1, =1.0, =1.01 - com.github.rubanm:ignite-scala2.10 =0.0.1 and more Source cves: CVE-2018-1295 Source advisory: OSV:GHSA-CHP4-RV79-68J3...

@adriantombu/openstack-swift (>=0.0.1 <=0.0.5), @alicloud/fun (>=2.7.1 <=2.16.5) +637 more potentially affected by CVE-2018-3738 via protobufjs (>=2.0.4 <=5.0.2)

protobufjs NPM version =2.0.4, =0.0.1, =2.7.1, =0.1.0, =1.3.0, =5.0.0, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =0.2.2, =0.2.4-20180621213746, =0.1.0-20180815155955, =0.0.6, =0.5.0, =1.3.329, =3.7.539, =3.7.550 and more Source cves: CVE-2018-3738 Source advisory:...

com.slyak:slyak-web-bootstrap (>=1.0.3.RELEASE <=1.0.4.RELEASE), de.smartsquare.squit:de.smartsquare.squit.gradle.plugin (>=2.0.0 <=2.2.0) +23 more potentially affected by CVE-2018-14041 via org.webjars:bootstrap (>=4.0.0 <=4.1.1)

org.webjars:bootstrap MAVEN version =4.0.0, =1.0.3.RELEASE, =2.0.0, =2.1.0, =2.0.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.3 - org.orienteer:orienteer-architect =1.4 - org.orienteer:orienteer-birt =1.4 - org.orienteer:orienteer-bpm =1.4 - org.orienteer:orienteer-camel =1.4 -...

mercenary-core (>=2.19.0 <=2.62.3) potentially affected by CVE-2018-1000160 via @risingstack/protect (>=1.0.0 <=1.2.0)

@risingstack/protect NPM version =1.0.0, =2.19.0, =2.62.3 Source cves: CVE-2018-1000160 Source advisory: OSV:GHSA-VPCH-RXW3-FGX8...

37fis (>=1.0.0 <=1.0.2), @axerunners/p2pool-scanner (=0.0.2) +717 more potentially affected by CVE-2015-8856 via serve-index (>=1.0.0 <=1.6.2)

serve-index NPM version =1.0.0, =1.0.0, =1.0.1, =1.0.37, =0.0.1, =0.13.7, =1.0.4, =1.0.1, =1.0.0, =0.2.0, =1.0.3, =1.0.4, =1.0.13 and more Source cves: CVE-2015-8856 Source advisory: OSV:GHSA-V633-X5VV-HQWC...

acari-lib (>=0.1.1 <=0.1.8), acick (>=0.0.6 <=0.2.0-alpha.0) +1255 more potentially affected by CVE-2017-18587 via hyper (>=0.10.13 <=0.10.16)

hyper CARGO version =0.10.13, =0.1.1, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.4.1, =0.1.0, =0.2.0, =0.0.1, =0.3.2, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2017-18587 Source advisory: OSV:RUSTSEC-2017-0002...

h2 (=1.0.0) potentially affected by CVE-2016-6581 via hpack (=1.1.0)

hpack PYPI version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - h2 =1.0.0 Source cves: CVE-2016-6581 Source advisory: OSV:PYSEC-2017-87...

aa-rag (=0.4.3), acex (>=3.0.0 <=5.28.0) +825 more potentially affected by CVE-2026-32871 via fastmcp (>=0.1.0 <=3.1.1)

fastmcp PYPI version =0.1.0, =3.0.0, =0.2.0, =0.1.0, =0.1.7, =2.1.7, =0.1.0, =1.0.0, =0.4.6, =0.1.0, =1.8.0, =0.1.1, =0.1.5 and more Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

lightrft (=0.1.0), rl-square (=0.0.1.post1) potentially affected by CVE-2026-3060 via sglang (>=0.4.5 <=0.4.6.post5)

sglang PYPI version =0.4.5, =0.4.6.post5 is affected by a known vulnerability. The following packages have a transitive dependency on sglang and may be impacted: - lightrft =0.1.0 - rl-square =0.0.1.post1 Source cves: CVE-2026-3060 Source advisory: OSV:PYSEC-2026-537...

wafl-llm (>=0.0.80 <=0.1.0) potentially affected by CVE-2023-43654 via torchserve (=0.7.1)

torchserve PYPI version =0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2023-43654 Source advisory: OSV:PYSEC-2026-553...

adaptive-kmpc-py (>=0.1.0 <=0.1.1), aestetik (=0.1.0) +98 more potentially affected by CVE-2024-5452 via lightning (>=1.8.6 <=2.3.2)

lightning PYPI version =1.8.6, =0.1.0, =1.8.15, =1.8.17, =1.8.14, =0.8.3b20230916, =0.8.3b20230916, =0.8.3b20230916, =0.1.1, =0.0.1, =0.5.0a1, =0.0.1rc4796724275121, =0.0.1rc7078377068125 and more Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-385...

docsrag (>=0.1.0 <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (=0.0.25)

llama-hub PYPI version =0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.0, =0.1.6 Source cves: CVE-2024-23730 Source advisory: OSV:PYSEC-2026-393...

agenta (>=0.14.1a0 <=0.14.7a1), agentic-devops (>=0.0.5 <=0.0.9) +71 more potentially affected by CVE-2024-5751 via litellm (>=0.1.400 <=1.40.15)

litellm PYPI version =0.1.400, =0.14.1a0, =0.0.5, =0.0.4, =0.2.0, =0.29.0, =0.1.5, =0.1.0, =0.1.0, =0.0.1, =0.114.0, =0.0.1, =0.6.3, =0.7.10 and more Source cves: CVE-2024-5751 Source advisory: OSV:PYSEC-2026-389...

exposeq (>=4.1.3 <=4.6.1), squadds (>=0.0.0 <=0.0.3) potentially affected by CVE-2024-23752 via pandasai (>=1.3.3 <=1.5.11)

pandasai PYPI version =1.3.3, =4.1.3, =0.0.0, =0.0.3 Source cves: CVE-2024-23752 Source advisory: OSV:PYSEC-2026-446...

aana (>=0.2.1 <=0.2.2.2), ace-context-engineering (>=0.1.3 <=0.1.4) +801 more potentially affected by CVE-2024-3829 via qdrant-client (>=1.0.0 <=1.8.2)

qdrant-client PYPI version =1.0.0, =0.2.1, =0.1.3, =1.0.0, =0.8.1, =0.13.0, =0.1.0, =0.4.0, =1.0.0b251001, =0.1.0, =0.1.1, =0.0.1, =0.1.0 - agentclinic =0.1.0 and more Source cves: CVE-2024-3829 Source advisory: OSV:PYSEC-2026-509...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2024-0521 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves: CVE-2024-05...

eisen (=0.1.9), eisen-deploy (>=0.0.1 <=0.0.2) potentially affected by CVE-2024-35198 via torchserve (=0.0.1b20200409)

torchserve PYPI version =0.0.1b20200409 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - eisen =0.1.9 - eisen-deploy =0.0.1, =0.0.2 Source cves: CVE-2024-35198 Source advisory: OSV:PYSEC-2026-554...

cy-ai-trainer (>=0.0.1 <=0.0.2), llama-index-packs-vanna (>=0.0.1 <=0.1.4) potentially affected by CVE-2024-5565 via vanna (>=0.0.30 <=0.0.36)

vanna PYPI version =0.0.30, =0.0.1, =0.0.1, =0.1.4 Source cves: CVE-2024-5565 Source advisory: OSV:PYSEC-2026-561...

academic-chatgpt (>=0.3.0 <=0.4.1), agentverse (>=0.1.5 <=0.1.8.1) +121 more potentially affected by CVE-2024-1728 via gradio (>=1.7.7 <=4.19.1)

gradio PYPI version =1.7.7, =0.3.0, =0.1.5, =0.0.17, =0.0.2, =0.8.11, =0.7.0.dev134, =0.1.0rc1, =0.0.0, =0.6.14, =0.7.63 and more Source cves: CVE-2024-1728 Source advisory: OSV:PYSEC-2026-345...

abi-ds-utils (=1.0.1), acryl-datahub-airflow-plugin (>=0.8.44.4 <=0.11.0rc1) +147 more potentially affected by CVE-2024-25128 via flask-appbuilder (>=1.10.0 <=4.3.10)

flask-appbuilder PYPI version =1.10.0, =0.8.44.4, =0.1.0rc3, =0.1.0, =2022.9.19, =0.2.1, =0.2.9b1, =1.0.7, =0.5.1, =0.2.0, =0.1.0, =1.0.0, =0.0.7, =0.0.1, =0.0.3, =0.0.4 and more Source cves: CVE-2024-25128 Source advisory: OSV:PYSEC-2026-340...

a2grunnerp (>=0.1.0 <=0.1.8), academic-emotion (=0.1.2) +489 more potentially affected by CVE-2024-3660 via keras (>=1.2.1 <=2.13.1)

keras PYPI version =1.2.1, =0.1.0, =0.1.0, =1.3.0, =7.13.1, =1.1.1, =1.8.15, =1.8.17, =0.0.1, =0.0.157, =0.1.18, =1.8.14, =2.2.0 and more Source cves: CVE-2024-3660 Source advisory: OSV:PYSEC-2026-369...

0lever-utils (>=0.0.2 <=0.0.7), accuhit-db (=0.9.1) +484 more potentially affected by CVE-2024-36039 via pymysql (>=0.6.6 <=1.1.0)

pymysql PYPI version =0.6.6, =0.0.2, =2.0.0, =0.1.0, =1.1.4, =0.5.0, =1.0.0a1, =0.2.0, =3.0.0, =0.1.0, =4.2.1 and more Source cves: CVE-2024-36039 Source advisory: OSV:PYSEC-2026-502...

aiconsole (>=0.2.0 <=0.2.13), aiflows (>=0.1.5 <=1.1.1) +45 more potentially affected by CVE-2024-2952 via litellm (>=0.1.400 <=1.34.0)

litellm PYPI version =0.1.400, =0.2.0, =0.1.5, =0.1.0, =0.0.1, =0.114.0, =0.0.1, =0.6.3, =0.6.0, =0.2.0, =0.2.4, =0.1.11, =0.1.18 - emplode =0.1.0 and more Source cves: CVE-2024-2952 Source advisory: OSV:PYSEC-2026-387...

bento2seldon (>=0.1.0 <=0.4.0), bento2seldon4recsys (>=0.1.0 <=0.1.3) +15 more potentially affected by CVE-2024-2912 via bentoml (>=0.10.1 <=1.2.20)

bentoml PYPI version =0.10.1, =0.1.0, =0.1.0, =0.0.10, =0.0.5, =0.3.12, =0.0.1, =1.0.3, =0.0.10, =0.0.1, =0.0.1, =0.0.13 - tfhubartifact =0.0.4 and more Source cves: CVE-2024-2912 Source advisory: OSV:PYSEC-2026-296...

dsipts (>=1.1.5 <=1.1.19), llm-toys (=0.1.1) +2 more potentially affected by CVE-2024-2195 via aim (>=3.17.4 <=3.20.1)

aim PYPI version =3.17.4, =1.1.5, =0.0.20, =0.1.0, =0.5.6 Source cves: CVE-2024-2195 Source advisory: OSV:PYSEC-2026-260...

ait-dsn (=2.0.0), ait-gui (>=2.4.0 <=2.4.1) potentially affected by CVE-2024-35057 via ait-core (>=2.3.5 <=2.5.2)

ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2024-35057 Source advisory: OSV:PYSEC-2026-263...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2024-0917 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves: CVE-2024-09...

agentengine (>=0.1.5 <=0.1.8), deepmost (=0.5.2) +13 more potentially affected by CVE-2025-14931 via smolagents (>=0.1.3 <=1.23.0)

smolagents PYPI version =0.1.3, =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.16.0, =2.4.0, =0.0.1.dev0, =0.0.1, =0.3.0, =0.3.7 Source cves: CVE-2025-14931 Source advisory: OSV:PYSEC-2026-543...

sigstore (>=3.6.0 <=3.6.1) potentially affected by CVE-2025-52556 via rfc3161-client (>=0.0.4 <=0.1.2)

rfc3161-client PYPI version =0.0.4, =3.6.0, =3.6.1 Source cves: CVE-2025-52556 Source advisory: OSV:PYSEC-2026-525...

askbob (>=0.0.3 <=0.0.4), botstudio-sdk (>=0.0.3 <=0.0.25) +15 more potentially affected by CVE-2024-49375 via rasa (>=1.10.0 <=3.6.20)

rasa PYPI version =1.10.0, =0.0.3, =0.0.3, =0.0.3a2, =0.23.5, =1.0.2, =0.1.0, =0.2.0, =1.0.3, =0.3.0, =0.0.1a1, =0.1.0, =0.1.0, =1.0.0, =1.1.2 and more Source cves: CVE-2024-49375 Source advisory: OSV:PYSEC-2026-513...

agent-os-server (>=0.4.2 <=0.5.10), aiodatalayer (>=1.0.0 <=2.3.1) +59 more potentially affected by CVE-2025-65896 via asyncmy (>=0.2.10 <=0.2.11)

asyncmy PYPI version =0.2.10, =0.4.2, =1.0.0, =0.5.0, =1.0.8, =2.0.9, =1.0.8, =0.1.0, =1.0.0, =1.3.9, =0.1.1, =0.1.0, =0.2.0, =1.0.0, =0.1.0, =0.3.2 and more Source cves: CVE-2025-65896 Source advisory: OSV:PYSEC-2026-286...

aana (>=0.2.1 <=0.2.2), acdc-aws-etl-pipeline (>=0.1.7 <=0.5.9) +487 more potentially affected by CVE-2025-58367 via deepdiff (>=5.0.1 <=8.6.0)

deepdiff PYPI version =5.0.1, =0.2.1, =0.1.7, =3.0.0b853, =0.1.0, =0.0.1, =0.1.0, =1.8.15, =1.8.17, =1.8.14, =1.0.0, =2.8.5, =0.1.6, =0.2.0 and more Source cves: CVE-2025-58367 Source advisory: OSV:PYSEC-2026-327...

simmate (>=0.14.0 <=0.17.0), tvsd (>=1.4.0 <=1.4.1) potentially affected by CVE-2025-24370 via django-unicorn (>=0.50.0 <=0.59.0)

django-unicorn PYPI version =0.50.0, =0.14.0, =1.4.0, =1.4.1 Source cves: CVE-2025-24370 Source advisory: OSV:PYSEC-2026-329...

django-ninja-aio-crud (>=1.0.5 <=2.25.0) potentially affected by CVE-2025-65015 via joserfc (=1.4.1)

joserfc PYPI version =1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on joserfc and may be impacted: - django-ninja-aio-crud =1.0.5, =2.25.0 Source cves: CVE-2025-65015 Source advisory: OSV:PYSEC-2026-361...

ablator (>=0.0.1b1 <=0.0.1b2), ablator-ken-test (=0.0.1b2) +264 more potentially affected by CVE-2025-34351 via ray (>=0.5.0 <=2.51.2)

ray PYPI version =0.5.0, =0.0.1b1, =0.1.1, =0.0.3, =0.3.1, =0.1.16, =0.1.4, =0.2.1, =1.1.1, =0.1.3, =1.0.11 and more Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

a7a1234 (=1.0.0), aas2openapi (>=0.2.0 <=0.2.4) +2554 more potentially affected by CVE-2025-43859 via h11 (>=0.10.0 <=0.15.0)

h11 PYPI version =0.10.0, =0.2.0, =0.2.1, =1.2.1, =0.7.3.post0, =0.1.0, =2.0.0.1, =0.0.1, =0.1.0, =0.8.3, =0.1.0, =4.8.2, =0.1.0, =0.1.1 - adminui =1.5.2 and more Source cves: CVE-2025-43859 Source advisory: OSV:PYSEC-2026-348...

tashan-scispark (>=1.0.1 <=1.0.8) potentially affected by CVE-2024-8551 via agentscope (=0.1.0)

agentscope PYPI version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on agentscope and may be impacted: - tashan-scispark =1.0.1, =1.0.8 Source cves: CVE-2024-8551 Source advisory: OSV:PYSEC-2026-255...

ai-dynamo (=0.1.0), openllm (=0.6.19) potentially affected by CVE-2025-27520 via bentoml (>=1.4.0a2 <=1.4.1)

bentoml PYPI version =1.4.0a2, =1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - ai-dynamo =0.1.0 - openllm =0.6.19 Source cves: CVE-2025-27520 Source advisory: OSV:PYSEC-2026-294...

ablation (=0.1.0), acids-msprior (>=1.0.1 <=1.1.3) +521 more potentially affected by CVE-2024-8019 via pytorch-lightning (>=0.10.0 <=2.3.3)

pytorch-lightning PYPI version =0.10.0, =1.0.1, =2.1.16, =1.3.0, =1.8.15, =1.8.17, =1.8.14, =0.1.16, =0.2.2, =1.0.0.dev0 - arcagent =0.0.1 - arccmd =0.2.0 - arcmas =0.2.0 and more Source cves: CVE-2024-8019 Source advisory: OSV:PYSEC-2026-507...

a10-octavia (>=1.0.0 <=2.2.0) potentially affected by CVE-2021-3563 via keystone (>=15.0.1 <=18.0.0)

keystone PYPI version =15.0.1, =1.0.0, =2.2.0 Source cves: CVE-2021-3563 Source advisory: OSV:PYSEC-2026-370...