adfotg (0.4.0), aihqrating (>=0.0.3, <=0.0.7) +308 more potentially affected by CVE-2026-102598 via werkzeug (2.3.8)

werkzeug PYPI version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - adfotg 0.4.0 - aihqrating =0.0.3, =1.1.9, =0.56.0, =0.9.9, =1.0.0, =0.3.18, =3.0.0, =3.2.2, =1.1.0, =0.1.0, =3.0.0, =9.0.0a7 and more Source cve...

animo-trainer (1.0.2), ankml (>=1.0.1, <=1.0.7) +31 more potentially affected by CVE-2026-102598 via werkzeug (2.3.7)

werkzeug PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - animo-trainer 1.0.2 - ankml =1.0.1, =0.9.5, =3.2.0, =1.0.5, =0.2.18, =1.0.0, =0.1.0, =2.0.0, =1.0.1, =1.0.4 and more Source cves: CVE-2026-10259...

actinia-core (>=4.9.1, <=4.10.0), adeso (>=0.0.1, <=0.0.4) +28 more potentially affected by CVE-2026-102598 via werkzeug (2.3.6)

werkzeug PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - actinia-core =4.9.1, =0.0.1, =0.1.23, =0.6.14, =1.0.1, =1.0.0, =1.1.0, =2024.1.1, =0.0.1, =0.0.1, =0.0.25, =0.2.27 - fortigate-vpn-login 0.5.0 a...

abilian-sbe (1.0.5), abilian-sbe-next (1.0.4) +159 more potentially affected by CVE-2026-102598 via werkzeug (2.0.3)

werkzeug PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - abilian-sbe 1.0.5 - abilian-sbe-next 1.0.4 - actinia-core 4.9.0 - aiqc =5.0.1, =0.3.2, =4.1.0, =3.11.0, =4.0.0, =0.8.0, =0.0.7, =5.2.15, =0.18.1...

apilogicserver (>=9.1.32, <=17.0.0), archivy (>=1.7.5, <=1.7.7) +14 more potentially affected by CVE-2026-102598 via werkzeug (2.3.3)

werkzeug PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - apilogicserver =9.1.32, =1.7.5, =0.1.0, =0.1.0, =0.2.0, =0.1.6, =0.1.0, =0.9.0, =1.0.5, =0.8.0, =2.9.0, =0.7.1.dev0, =1.0.5, =0.1.0, =0.4.0 and...

oarepo (11.0.28) potentially affected by CVE-2026-102598 via werkzeug (2.3.2)

werkzeug PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - oarepo 11.0.28 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2026-102598 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

abstra (>=1.8.26, <=2.5.1), acceldata-o2a (1.0.0) +241 more potentially affected by CVE-2026-102598 via werkzeug (2.2.3)

werkzeug PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - abstra =1.8.26, =0.2.1, =1.1.0rc2, =0.0.1, =0.1.1, =0.0.4, =0.0.1, =2023.8.1.11, =0.58.0, =2.7.3rc1, =1.0.0rc1, =1.6.0b1 and more Source cves:...

a2grunnerp (>=0.1.0, <=0.1.8), agentuniverse (>=0.0.6.dev1, <=0.0.7) +142 more potentially affected by CVE-2026-102598 via werkzeug (2.2.2)

werkzeug PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - a2grunnerp =0.1.0, =0.0.6.dev1, =0.3.0rc5, =0.10.0, =2022.8.1, =0.1.0, =7.0.1, =0.0.2, =1.0.0, =1.0.2 - dareyou 1.0.0 and more Source cves:...

jupyterreviewer (>=0.0.4, <=0.0.5), nepal-stock-price (1.0.0) +3 more potentially affected by CVE-2026-102598 via werkzeug (2.2.1)

werkzeug PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - jupyterreviewer =0.0.4, =0.8.3, =0.6.2, =0.6.16 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

edisgo (0.2.0), opencv-browser-camera (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-102598 via werkzeug (2.2.0)

werkzeug PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - edisgo 0.2.0 - opencv-browser-camera =0.1.0, =0.1.2 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

aiida-core (>=2.1.0, <=2.2.2), sepal-ui (>=2.10.3, <=2.13.0) potentially affected by CVE-2026-102598 via werkzeug (2.2.0a1)

werkzeug PYPI version 2.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aiida-core =2.1.0, =2.10.3, =2.13.0 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

aaz-dev (>=1.0.2, <=2.10.1), adminui (1.5.2) +190 more potentially affected by CVE-2026-102598 via werkzeug (2.1.2)

werkzeug PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aaz-dev =1.0.2, =1.5.2, =0.14.0, =0.0.1a0, =1.5.0, =1.1.1, =2.6.0, =1.0.5, =1.7.1, =1.3.0, =3.1.0, =1.45.0, =1.47.0 and more Source cves:...

dbmsbenchmarker (>=0.13.0, <=0.13.1), fittrackee (>=0.6.11, <=0.7.6) +2 more potentially affected by CVE-2026-102598 via werkzeug (2.1.0)

werkzeug PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - dbmsbenchmarker =0.13.0, =0.6.11, =0.15.0, =10.10.10, =10.14.0 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

addok (>=0.1.0, <=0.1.4), mezmorize (0.16.1) +4 more potentially affected by CVE-2026-102598 via werkzeug (0.9.6)

werkzeug PYPI version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - addok =0.1.0, =0.0.2, =0.33.0, =0.43.1 - shrunk 0.6.1 - swaggery 1.0.0a1 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

clastic (0.5.0) potentially affected by CVE-2026-102598 via werkzeug (0.9.4)

werkzeug PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - clastic 0.5.0 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

mettle (>=0.7.12, <=0.7.14) potentially affected by CVE-2026-102598 via werkzeug (0.10.1)

werkzeug PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - mettle =0.7.12, =0.7.14 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

timo-zappa (>=0.45.1, <=0.45.1.4), zappa (>=0.41.0, <=0.45.1) potentially affected by CVE-2026-102598 via werkzeug (0.12.0)

werkzeug PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - timo-zappa =0.45.1, =0.41.0, =0.45.1 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

ai4rag (>=0.9.0, <=0.15.0), askbase (>=1.0.0, <=1.0.2) +9 more potentially affected by CVE-2026-105750 via docling-slim (>=2.92.0, <=2.118.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =2.92.0, =0.3.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.6.27, =0.0.6, =0.0.13 Source cves: CVE-2026-105750 Source advisory: OSV:PYSEC-2026-4215...

adoc (>=0.1.0, <=0.1.5), adr (>=0.4.0, <=0.5.0) +285 more potentially affected by CVE-2026-102991 via mako (>=1.0.1, <=1.4.1)

mako PYPI version =1.0.1, =0.1.0, =0.4.0, =0.1.0rc3, =2022.9.19, =1.1.0, =2.0.0b1, =0.0.4rc1, =0.0.0, =0.1.0.dev1, =5.2.15, =5.3.33 and more Source cves: CVE-2026-102991 Source advisory: OSV:PYSEC-2026-4243...

aleph-alpha-inference (1.0.0), evoke-vllm (>=0.1.0, <=0.1.1) +6 more potentially affected by CVE-2026-105758 via vllm (>=0.24.0, <=0.29.0)

vllm PYPI version =0.24.0, =0.1.0, =2.9.0, =2.3.0, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-105758 Source advisory: OSV:PYSEC-2026-4310...

aleph-alpha-inference (1.0.0), evoke-vllm (>=0.1.0, <=0.1.1) +7 more potentially affected by CVE-2026-105760 via vllm (>=0.23.0, <=0.29.0)

vllm PYPI version =0.23.0, =0.1.0, =2.9.0, =2.2.2, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-105760 Source advisory: OSV:PYSEC-2026-4307...

academic-metrics (>=0.1.0b0, <=1.0.99), accomate (>=1.0.4, <=2.0.0.6) +1311 more potentially affected by CVE-2026-96747 via pymongo (>=3.9.0, <=4.18.1)

pymongo PYPI version =3.9.0, =0.1.0b0, =1.0.4, =0.9.0, =0.3.0, =0.0.1.dev0, =0.1.0, =0.1.23, =1.1.5, =2022.9.19, =0.22.0, =0.3.0, =1.2.0 and more Source cves: CVE-2026-96747 Source advisory: OSV:PYSEC-2026-4295...

ai-stp-cli (>=0.0.23, <=0.0.33), pygpt-net (>=2.8.27, <=2.9.1) +1 more potentially affected by CVE-2026-104843 via uv (>=0.12.10, <=0.12.15)

uv PYPI version =0.12.10, =0.0.23, =2.8.27, =2.9.1 - uvenv 3.11.1 Source cves: CVE-2026-104843 Source advisory: OSV:PYSEC-2026-4305...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +133 more potentially affected by CVE-2026-105754 via vllm (>=0.1.3, <=0.29.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2026-105754 Source advisory: OSV:PYSEC-2026-4309...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +133 more potentially affected by CVE-2026-105756 via vllm (>=0.1.3, <=0.29.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2026-105756 Source advisory: OSV:PYSEC-2026-4306...

adversarial-workflow (>=0.4.0, <=0.9.8), agentiva (>=0.1.0, <=0.1.5) +169 more potentially affected by CVE-2026-104874 via multidict (>=6.7.0, <=6.8.0)

multidict PYPI version =6.7.0, =0.4.0, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =1.0.5, =25.11.0, =0.7.0, =0.1.3, =0.1.4 - audience-framework 1.0.0 and more Source cves: CVE-2026-104874 Source advisory: OSV:PYSEC-2026-4244...

mongoext (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-88029 via pymongo (3.0.0)

pymongo PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongoext =0.3.0, =0.4.0 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

apartment-browser (0.0.1), arctic (>=1.81.1, <=1.82.2) +29 more potentially affected by CVE-2026-88029 via pymongo (3.11.0)

pymongo PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - apartment-browser 0.0.1 - arctic =1.81.1, =1.0.0, =0.1.0, =1.1.1, =0.1.0, =0.1.5, =0.1.0a5, =0.4.0, =0.5.7 and more Source cves: CVE-2026-88029...

2d6io-cryptobot (0.0.1), almanac-bot (>=0.3.1, <=0.3.2) +19 more potentially affected by CVE-2026-88029 via pymongo (3.5.1)

pymongo PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - 2d6io-cryptobot 0.0.1 - almanac-bot =0.3.1, =0.1.5, =0.1.2a0, =1.1.0, =0.4.11, =1.3.9, =0.43.0, =1.0.0, =1.0.4, =13.0.0, =11.1.0, =0.1.0, =1.0.1,...

capreolus (>=0.1.0, <=0.1.5), ckanext-nhm (>=3.7.1, <=6.9.8) +19 more potentially affected by CVE-2026-88029 via pymongo (3.9.0)

pymongo PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - capreolus =0.1.0, =3.7.1, =3.0.2, =3.7.0, =0.2.0, =0.0.2, =0.0.2, =0.9.2rc1, =0.0.2, =0.1.2, =0.0.1, =0.0.8 and more Source cves: CVE-2026-88029...

inmanta (2016.6.0) potentially affected by CVE-2026-88029 via pymongo (2.7.0)

pymongo PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - inmanta 2016.6.0 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

bolinette (>=0.12.1, <=0.14.0), clean-architecture-mongodb-adapter (0.1.3) +16 more potentially affected by CVE-2026-88029 via pymongo (3.12.1)

pymongo PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bolinette =0.12.1, =0.0.3, =1.0.38, =0.0.0, =0.2.22, =0.1.3, =1.0.0, =0.0.7, =0.3.6, =0.1.7, =1.1.1, =1.5.0 - spreg-satosa-sync 1.1.3 and more...

appkernel (>=0.1.0, <=1.0.0), cg (>=12.1.3, <=16.3.4) +9 more potentially affected by CVE-2026-88029 via pymongo (3.6.1)

pymongo PYPI version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - appkernel =0.1.0, =12.1.3, =0.0.1, =0.0.6, =1.5.0, =0.0.1, =1.0.0, =4.1.1, =0.0.29, =0.0.1, =0.0.2 Source cves: CVE-2026-88029 Source advisory:...

academic-metrics (>=0.1.0b0, <=1.0.99), accomate (>=1.0.4, <=2.0.0.6) +807 more potentially affected by CVE-2026-88029 via pymongo (>=4.0.0, <=4.18.0)

pymongo PYPI version =4.0.0, =0.1.0b0, =1.0.4, =0.9.0, =0.3.0, =0.1.0, =0.1.23, =0.22.0, =0.3.0, =0.2.0, =0.1.0, =0.8.1 - aind-metadata-mapper 0.12.4 - aind-metadata-mcp 0.1.0 and more Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

appkernel (>=1.0.1, <=1.2.4), blockchain-etl (>=0.1.29, <=0.1.31) +2 more potentially affected by CVE-2026-88029 via pymongo (3.7.1)

pymongo PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - appkernel =1.0.1, =0.1.29, =2.0.0, =2.7.2 - optimuspyspark 2.1.0 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

amoniak (1.0.2), aws-scripts (>=0.0.20, <=0.1.12) +6 more potentially affected by CVE-2026-88029 via pymongo (2.9.5)

pymongo PYPI version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - amoniak 1.0.2 - aws-scripts =0.0.20, =0.4.2, =2.0.3, =0.1.3, =2.0.0, =2.3.0 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

csv-to-snowflake (>=0.1.0, <=0.2.1), dbt (>=0.18.0rc1, <=0.19.0b1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.10)

snowflake-connector-python PYPI version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - csv-to-snowflake =0.1.0, =0.18.0rc1, =0.2.3, =0.3.0 Source cves: CVE-2026-86597 Source advisory:...

soda-sql (>=2.0.0b17, <=2.0.0b27), soda-sql-snowflake (>=2.1.0b12, <=2.1.6) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.0)

snowflake-connector-python PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - soda-sql =2.0.0b17, =2.1.0b12, =2.1.6 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

dagster-snowflake (>=0.4.0rc2, <=0.6.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (1.7.11)

snowflake-connector-python PYPI version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.4.0rc2, =0.6.1 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

gakp-pylib (>=0.2.7, <=0.9.3), khan-mongo (0.1.6) +1 more potentially affected by CVE-2026-88029 via pymongo (3.2.2)

pymongo PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - gakp-pylib =0.2.7, =1.3.0, =1.4.0 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

ansible-mongodb-store (>=0.1.0, <=0.3.0), bson-extra (0.0.4) +6 more potentially affected by CVE-2026-88029 via pymongo (3.12.2)

pymongo PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - ansible-mongodb-store =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.15.2, =0.1.1, =0.2.14 - ss-daily-tools 1.0.0 Source cves: CVE-2026-88029 Source advisory...

bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-88029 via pymongo (3.11.1)

pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

autotm (>=0.2.3.2, <=0.2.3.4), bolinette (>=0.7.7, <=0.10.0) +10 more potentially affected by CVE-2026-88029 via pymongo (3.11.3)

pymongo PYPI version 3.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - autotm =0.2.3.2, =0.7.7, =0.3.2, =2.0.34, =2.0.3, =0.1.0, =0.0.2, =0.1.19, =0.1.11, =0.1.33 Source cves: CVE-2026-88029 Source advisory:...

mongoext (>=0.2.0, <=0.2.3), mongoops (>=0.0.1, <=1.0.1) potentially affected by CVE-2026-88029 via pymongo (2.8.0)

pymongo PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongoext =0.2.0, =0.0.1, =1.0.1 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

hera-ingestion (1.12.6.30), ingestr (>=0.14.142, <=0.14.155) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.0)

snowflake-connector-python PYPI version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - hera-ingestion 1.12.6.30 - ingestr =0.14.142, =0.4.36, =3.13.0, =3.13.0, =3.16.0 Source cves: CVE-2026-8659...

aquests (>=0.7.8.5b1, <=0.7.16.18), clink (>=0.9.0, <=0.23.0) +9 more potentially affected by CVE-2026-88029 via pymongo (3.4.0)

pymongo PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - aquests =0.7.8.5b1, =0.9.0, =0.0.1, =0.2.3, =0.8.5rc2, =1.3.3, =0.0.4, =1.0.0, =0.0.1, =0.1.0 Source cves: CVE-2026-88029 Source advisory:...

mtaf (>=1.0.28, <=1.0.47) potentially affected by CVE-2026-88029 via pymongo (3.3.1)

pymongo PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mtaf =1.0.28, =1.0.47 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

agave (>=0.0.1.dev0, <=0.2.3.dev0), agrothon (>=1.1.5, <=1.3.2) +348 more potentially affected by CVE-2026-88029 via pymongo (3.13.0)

pymongo PYPI version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - agave =0.0.1.dev0, =1.1.5, =2022.9.19, =0.0.4, =0.0.1, =0.1.7, =0.2.0, =0.1.0, =0.7.1a0, =0.7.1a0, =0.7.1a0, =0.7.1a0, =0.7.1a3, =0.0.1, =2.2.0 a...

chatterbot (>=0.2.4, <=0.2.5), monasca-agent (1.1.20) +2 more potentially affected by CVE-2026-88029 via pymongo (3.0.3)

pymongo PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - chatterbot =0.2.4, =0.1.0, =2.2.0 - robotoff 1.0.13 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...