bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-96749 via pymongo (3.11.1)

pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

apartment-browser (0.0.1), arctic (>=1.81.1, <=1.82.2) +29 more potentially affected by CVE-2026-96749 via pymongo (3.11.0)

pymongo PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - apartment-browser 0.0.1 - arctic =1.81.1, =1.0.0, =0.1.0, =1.1.1, =0.1.0, =0.1.5, =0.1.0a5, =0.4.0, =0.5.7 and more Source cves: CVE-2026-96749...

askbob (>=0.0.3, <=0.0.4), autoneuro-pypi (1.0.0) +46 more potentially affected by CVE-2026-96749 via pymongo (3.10.1)

pymongo PYPI version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - askbob =0.0.3, =1.1.0, =1.1.0, =0.0.3, =1.3.7, =0.0.5, =0.0.2, =0.0.0, =0.0.13 - deeppavlov-agent 2.3.0a0 - discord-fate-bot 0.1.1 - dragg 0.0.0 ...

auto-qchem (>=0.1.1, <=1.2.6), crsmongo (>=1.0.0, <=1.0.6) +5 more potentially affected by CVE-2026-96749 via pymongo (3.10.0)

pymongo PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - auto-qchem =0.1.1, =1.0.0, =0.1.24, =0.0.1, =0.1.0, =0.1.10, =2.0.7, =2.3.2 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

capreolus (>=0.1.0, <=0.1.5), ckanext-nhm (>=3.7.1, <=6.9.8) +19 more potentially affected by CVE-2026-96749 via pymongo (3.9.0)

pymongo PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - capreolus =0.1.0, =3.7.1, =3.0.2, =3.7.0, =0.2.0, =0.0.2, =0.0.2, =0.9.2rc1, =0.0.2, =0.1.2, =0.0.1, =0.0.8 and more Source cves: CVE-2026-96749...

avalon-core (5.2.7), cheetay-logs (1.0.6) +24 more potentially affected by CVE-2026-96749 via pymongo (3.8.0)

pymongo PYPI version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - avalon-core 5.2.7 - cheetay-logs 1.0.6 - cloudmarker 0.1.0 - convo-nlu 0.1.0 - convo5 0.1.0 - convo6 0.1.0 - convo7 0.1.0 - convoxxx 0.1.0 -...

2d6io-cryptobot (0.0.1), academic-metrics (>=0.1.0b0, <=1.0.99) +1382 more potentially affected by CVE-2026-96748 via pymongo (>=3.5.0, <=4.18.1)

pymongo PYPI version =3.5.0, =0.1.0b0, =1.0.4, =0.9.0, =0.4.2, =0.3.0, =3.6.0, =0.0.1.dev0, =0.1.0, =0.1.23, =1.1.5, =1.3.2 - ai-flow 0.3.1 and more Source cves: CVE-2026-96748 Source advisory: OSV:PYSEC-2026-4297...

mongoext (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-96749 via pymongo (3.0.0)

pymongo PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongoext =0.3.0, =0.4.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

appkernel (>=1.0.1, <=1.2.4), blockchain-etl (>=0.1.29, <=0.1.31) +2 more potentially affected by CVE-2026-96749 via pymongo (3.7.1)

pymongo PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - appkernel =1.0.1, =0.1.29, =2.0.0, =2.7.2 - optimuspyspark 2.1.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

mtaf (>=1.0.28, <=1.0.47) potentially affected by CVE-2026-96749 via pymongo (3.3.1)

pymongo PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mtaf =1.0.28, =1.0.47 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

gakp-pylib (>=0.2.7, <=0.9.3), khan-mongo (0.1.6) +1 more potentially affected by CVE-2026-96749 via pymongo (3.2.2)

pymongo PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - gakp-pylib =0.2.7, =1.3.0, =1.4.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

mongodb-migrations (0.1.1), rolabesti (>=0.1.0, <=0.5.3) potentially affected by CVE-2026-96749 via pymongo (3.2.1)

pymongo PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongodb-migrations 0.1.1 - rolabesti =0.1.0, =0.5.3 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

sd-python-wrapper (>=0.1.2, <=0.1.26) potentially affected by CVE-2026-96749 via pymongo (3.2.0)

pymongo PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - sd-python-wrapper =0.1.2, =0.1.26 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

chatterbot (>=0.2.4, <=0.2.5), monasca-agent (1.1.20) +2 more potentially affected by CVE-2026-96749 via pymongo (3.0.3)

pymongo PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - chatterbot =0.2.4, =0.1.0, =2.2.0 - robotoff 1.0.13 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

amoniak (1.0.2), aws-scripts (>=0.0.20, <=0.1.12) +6 more potentially affected by CVE-2026-96749 via pymongo (2.9.5)

pymongo PYPI version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - amoniak 1.0.2 - aws-scripts =0.0.20, =0.4.2, =2.0.3, =0.1.3, =2.0.0, =2.3.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

edx-enterprise (>=0.40.6, <=0.42.0) potentially affected by CVE-2026-96749 via pymongo (3.5.0)

pymongo PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - edx-enterprise =0.40.6, =0.42.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

general-tools (>=0.1.4, <=0.2.1), happymongo-py3 (0.1.2) +3 more potentially affected by CVE-2026-96749 via pymongo (3.7.0)

pymongo PYPI version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - general-tools =0.1.4, =0.1.0, =23.0.3, =23.0.7 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

afs2-datasource (>=3.6.0, <=3.8.2), amanzi-orca (>=0.5.2, <=0.5.3) +23 more potentially affected by CVE-2026-96749 via pymongo (3.7.2)

pymongo PYPI version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - afs2-datasource =3.6.0, =0.5.2, =1.1.0rc1, =0.0.2.dev1, =0.0.4, =0.5.0, =1.0.8a5, =0.2.1, =0.0.1, =0.0.1, =4.0.9, =0.0.3, =0.0.13 and more Source...

alo7-airflow (>=1.10.0, <=1.10.0.7), amundsen-metadata (1.0.17) +65 more potentially affected by CVE-2026-102598 via werkzeug (0.14.1)

werkzeug PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - alo7-airflow =1.10.0, =1.10.3b1, =0.6.7.post3, =0.1.1, =0.6.4, =0.1.0, =0.1.0, =1.0.5, =1.0.4, =0.1.3a0, =0.5.4rc0, =0.5.4rc0, =0.2.0rc0, =0.2....

kyoukai (>=2.2.0, <=2.2.1), mezmorize (>=0.18.1, <=0.25.0) +2 more potentially affected by CVE-2026-102598 via werkzeug (0.13.0)

werkzeug PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - kyoukai =2.2.0, =0.18.1, =0.49.2, =0.0.0.1, =0.0.3 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

appenginetaskutils (>=0.4.3.dev2, <=0.4.3), asc (>=0.1.0, <=0.3.1) +20 more potentially affected by CVE-2026-102598 via werkzeug (0.12.2)

werkzeug PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - appenginetaskutils =0.4.3.dev2, =0.1.0, =1.0.18, =0.1.0, =0.12.0, =2.10.60, =2.0.2, =0.1.0, =0.1.0, =0.5.0 - nailpack-flask 0.1.0 - nails 0.2.0...

eve (>=0.9.1, <=0.9.2), fancy-nlp (>=0.0.1, <=0.0.4) +15 more potentially affected by CVE-2026-102598 via werkzeug (0.15.4)

werkzeug PYPI version 0.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - eve =0.9.1, =0.0.1, =0.1.3, =2.0.0, =0.1.0a23, =0.1.0, =1.0.2, =1.0.0, =0.100.4, =0.1.0, =0.10.0 - revelation 1.1.0 and more Source cves:...

amundsen-metadata (>=1.0.18, <=2.5.4), amundsen-search (>=2.4.1, <=2.5.1) +8 more potentially affected by CVE-2026-102598 via werkzeug (0.15.3)

werkzeug PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - amundsen-metadata =1.0.18, =2.4.1, =0.0.1, =0.0.6, =0.9.94, =0.0.1, =0.0.1, =0.0.1, =0.1.2 Source cves: CVE-2026-102598 Source advisory:...

discourse-sso-oidc-bridge-consideratio (>=0.1.8, <=0.1.9), enochecker (0.0.5) +7 more potentially affected by CVE-2026-102598 via werkzeug (0.15.2)

werkzeug PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - discourse-sso-oidc-bridge-consideratio =0.1.8, =0.0.2, =1.0.22, =1.0.28.3 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

drmlapp (1.0.6), python-webex-bot (0.51.0) potentially affected by CVE-2026-102598 via werkzeug (0.15.1)

werkzeug PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - drmlapp 1.0.6 - python-webex-bot 0.51.0 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

flask-autocrud (2.1.0), miscan (1.1.1) potentially affected by CVE-2026-102598 via werkzeug (0.15.0)

werkzeug PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - flask-autocrud 2.1.0 - miscan 1.1.1 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

bentodev (>=0.1.17, <=2018.11.2), biweeklybudget (>=0.1.0, <=0.7.0) +4 more potentially affected by CVE-2026-102598 via werkzeug (0.12.1)

werkzeug PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - bentodev =0.1.17, =0.1.0, =0.1.48, =0.1.0, =0.2.5 - spiderkeeper-zam 1.2.2 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2026-102598 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

netify (>=0.1.1, <=0.2.0), odooku-odoo-account-invoicing (>=11.0.0, <=11.0.6) +36 more potentially affected by CVE-2026-102598 via werkzeug (0.11.11)

werkzeug PYPI version 0.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - netify =0.1.1, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0,...

cloudmesh-client (>=4.2.6, <=4.4.0), nginxauthdaemon (>=1.0.0a1, <=1.1.0) +1 more potentially affected by CVE-2026-102598 via werkzeug (0.11.10)

werkzeug PYPI version 0.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.2.6, =1.0.0a1, =1.1.0 - picopayments-hub 0.0.11 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

puppetboard (0.2.2), talisker (>=0.4.0, <=0.4.1) potentially affected by CVE-2026-102598 via werkzeug (0.11.5)

werkzeug PYPI version 0.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - puppetboard 0.2.2 - talisker =0.4.0, =0.4.1 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

planadversity (1.0.2) potentially affected by CVE-2026-102598 via werkzeug (0.11.4)

werkzeug PYPI version 0.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - planadversity 1.0.2 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

addok (0.5.0) potentially affected by CVE-2026-102598 via werkzeug (0.11.3)

werkzeug PYPI version 0.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - addok 0.5.0 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

satosa (>=2.0.0, <=2.1.1) potentially affected by CVE-2026-102598 via werkzeug (0.11.2)

werkzeug PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - satosa =2.0.0, =2.1.1 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

coil (>=1.2.1, <=1.3.7), dkcloudcommand (>=1.0.22, <=1.0.131) +2 more potentially affected by CVE-2026-102598 via werkzeug (0.10.4)

werkzeug PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - coil =1.2.1, =1.0.22, =1.1.1, =2.0.1 - typedjsonrpc 0.4.0 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

amundsen-metadata (>=2.5.5, <=3.5.0), bspider (>=0.0.5a0, <=0.0.8) +13 more potentially affected by CVE-2026-102598 via werkzeug (0.15.5)

werkzeug PYPI version 0.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - amundsen-metadata =2.5.5, =0.0.5a0, =1.3.1, =1.2.3, =0.1.3, =0.0.1, =0.0.9, =0.50.0, =1.0.6, =0.1.0, =4.2.0, =0.10.21, =0.15.37 Source cves:...

ai4rag (>=0.9.0, <=0.24.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105747 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105747 Source advisory: OSV:PYSEC-2026-4209...

celery-director (>=0.5.0, <=0.7.0), elementary-flask (>=0.0.1.dev7, <=0.0.1.dev12) +11 more potentially affected by CVE-2026-102598 via werkzeug (2.1.1)

werkzeug PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - celery-director =0.5.0, =0.0.1.dev7, =0.0.1, =1.0.0, =1.3.0, =0.7.0b10, =1.1.2, =1.1.8 Source cves: CVE-2026-102598 Source advisory:...

autorad (>=0.1.2, <=0.2.5), aws-flask-lambda (>=0.1.0, <=0.1.2) +54 more potentially affected by CVE-2026-102598 via werkzeug (2.0.2)

werkzeug PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - autorad =0.1.2, =0.1.0, =0.0.1, =0.9.2, =0.0.1, =0.1.0, =0.4.9, =3.1.141, =0.8.0.dev6, =1.0.0, =1.0.0, =0.16.0, =0.1.0, =1.0.0 and more Source...

agent-manager-sdk (>=0.1.1, <=0.1.2), aipack (>=0.0.1, <=0.0.5) +42 more potentially affected by CVE-2026-102598 via werkzeug (2.0.1)

werkzeug PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - agent-manager-sdk =0.1.1, =0.0.1, =1.0.1, =0.5.5, =0.0.3, =0.2.1, =1.0.0.dev1, =1.5.0rc4, =1.1.4, =0.2.1, =0.2.4 - face-preprocessor 0.0.1 - fam...

aprsd (>=2.3.0, <=2.5.9), cacaodocs (>=0.1.3, <=0.1.14) +19 more potentially affected by CVE-2026-102598 via werkzeug (2.0.0)

werkzeug PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aprsd =2.3.0, =0.1.3, =1.9.4rc2, =0.1.1, =1.5.3, =0.12.0, =1.0.0, =2.9.1, =0.28.1, =1.0.0, =0.3.0.0, =4.2.11.10, =4.2.11.11 - quickboard 0.1.1 a...

biuletyn-bip (>=0.6.2, <=0.7.1), dallinger (>=7.4.0, <=8.1.0) +188 more potentially affected by CVE-2026-102598 via werkzeug (2.0.0rc5)

werkzeug PYPI version 2.0.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - biuletyn-bip =0.6.2, =7.4.0, =2.1.2, =0.0.3, =0.0.4, =5.6.0, =5.2.0, =5.2.21, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =6.0.5 and more Source...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), actinia-core (4.2.0) +696 more potentially affected by CVE-2026-102598 via werkzeug (1.0.1)

werkzeug PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.4.7, =0.1.0rc3, =2022.9.19, =1.0.2, =0.1.1, =0.1.6, =0.5.1, =0.2.0, =1.0.0, =0.0.3, =0.0.4 and mor...

activedirectoryenum (>=0.4.0, <=0.4.6), airiam (>=0.1.2, <=0.1.8) +29 more potentially affected by CVE-2026-102598 via werkzeug (1.0.0)

werkzeug PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - activedirectoryenum =0.4.0, =0.1.2, =0.3.0, =0.0.3, =1.3.0, =1.0.0, =1.0.1, =0.8.0, =0.1.1, =1.0.0, =2.0.0b4, =2.1.0b1 - ors3handler 0.0.31 and...

ablog (>=0.10.3, <=0.10.7), acumos (>=0.9.3, <=0.9.4) +13 more potentially affected by CVE-2026-102598 via werkzeug (1.0.0rc1)

werkzeug PYPI version 1.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - ablog =0.10.3, =0.9.3, =0.7.0rc0, =0.26.0, =0.26.0, =5.0.19, =0.2.11, =0.51.0, =0.51.6, =0.52.0, =0.52.0, =0.53.0, =0.53.4 Source cves:...

a4t-sale-discount (5.0.2), acumos (0.9.2) +414 more potentially affected by CVE-2026-102598 via werkzeug (0.16.1)

werkzeug PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - a4t-sale-discount 5.0.2 - acumos 0.9.2 - airflow-aggua-plugin =1.0.7, =0.5.6, =0.1.0, =0.0.7, =0.0.1, =0.1.6, =0.0.2, =1.0.0, =4.0.0, =1.3.0,...

agwui (>=0.0.3, <=0.0.6), awehflow (1.10.6.1) +53 more potentially affected by CVE-2026-102598 via werkzeug (0.16.0)

werkzeug PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - agwui =0.0.3, =0.2.1, =0.3.4, =2.1.0, =0.0.2, =0.4.0, =0.2.0, =0.0.1, =0.7.0, =0.16.1, =0.16.3 and more Source cves: CVE-2026-102598 Source...

anitya (1.8.1), datarobot-drum (>=1.10.0.dev2, <=1.10.11) +5 more potentially affected by CVE-2026-102598 via werkzeug (2.3.4)

werkzeug PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.1 - datarobot-drum =1.10.0.dev2, =0.0.13, =3.2.4, =3.9.0rc4, =4.1.3 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

canonicalwebteam-flask-base (>=0.3.3, <=0.9.3), flexget (>=2.21.21, <=3.1.104) +4 more potentially affected by CVE-2026-102598 via werkzeug (0.15.6)

werkzeug PYPI version 0.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - canonicalwebteam-flask-base =0.3.3, =2.21.21, =0.1.0a27, =0.1.0, =0.15.0, =0.2.0, =0.2.1 Source cves: CVE-2026-102598 Source advisory:...

abilian-sbe (>=1.1.0, <=1.1.12), acfx (>=0.3.1, <=0.3.7.dev2) +766 more potentially affected by CVE-2026-102598 via werkzeug (>=3.0.0, <=3.1.8)

werkzeug PYPI version =3.0.0, =1.1.0, =0.3.1, =4.11.0, =2.9.0, =1.0.0, =0.1.3, =0.2.4.1, =0.0.1, =1.3.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...