meltanolabs-tap-snowflake (>=0.2.0, <=0.3.0), snowflake-data-exchange-agent (>=0.0.21, <=1.0.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.4)

snowflake-connector-python PYPI version 3.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - meltanolabs-tap-snowflake =0.2.0, =0.0.21, =1.0.1 Source cves: CVE-2026-86597 Source advisory:...

pipelinewise-target-snowflake (1.11.1), rappiflow-dag-operators (>=0.2.6, <=0.3.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.1)

snowflake-connector-python PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake 1.11.1 - rappiflow-dag-operators =0.2.6, =0.3.1 Source cves: CVE-2026-86597...

dbt (>=0.16.0b2, <=0.18.0b2), dbt-schema-builder (>=0.1.0, <=0.2.2) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.1)

snowflake-connector-python PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.16.0b2, =0.1.0, =0.16.0b2, =0.2.0, =0.2.5 - snowshu 0.0.1b3 Source cves: CVE-2026-86597 Source...

dynamiq (>=0.17.0, <=0.44.0), mcp-snowflake-server (0.4.0) +8 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.13.2)

snowflake-connector-python PYPI version 3.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dynamiq =0.17.0, =0.4.3, =0.4.0, =0.0.27.post2, =0.4.0, =3.13.0, =3.14.2 - snowflake-cli 3.4.1 -...

acedeploy (>=2.4.15, <=2.4.115), covalent-blueprints-ai (>=0.4.0, <=0.5.0rc1) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.2)

snowflake-connector-python PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - acedeploy =2.4.15, =0.4.0, =3.0.1, =3.0.0rc3, =3.1.0 - tulona 0.12.0 Source cves: CVE-2026-86597 Source...

pipelinewise-target-snowflake (>=1.2.0, <=1.8.0), schemaql (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.3)

snowflake-connector-python PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake =1.2.0, =0.0.2, =0.0.4 Source cves: CVE-2026-86597 Source advisory:...

monosi (>=0.0.1.post1, <=0.0.2.post5), monosi-server (0.0.1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.2)

snowflake-connector-python PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - monosi =0.0.1.post1, =0.0.2.post5 - monosi-server 0.0.1 - snowshu 0.0.4a1 Source cves: CVE-2026-86597 Source...

dbt-schema-builder (>=0.4.3, <=0.4.4), dbt-snowflake (>=1.0.0rc1, <=1.0.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.10)

snowflake-connector-python PYPI version 2.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-schema-builder =0.4.3, =1.0.0rc1, =0.1.1, =0.2.7 - elementary-lineage 0.1.0 Source cves: CVE-2026-86597...

dbnd-snowflake (>=0.48.0, <=1.0.4.22), dbt (>=0.21.0b1, <=0.21.1) +7 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.5.1)

snowflake-connector-python PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbnd-snowflake =0.48.0, =0.21.0b1, =0.21.0a17, =0.4.1, =0.21.0b1, =0.1.0, =0.1.1, =0.0.1, =0.3.0, =0.4.0...

omnata-cli (>=0.1.8, <=0.1.12), omnata-plugin-devkit (>=0.1.2, <=0.1.95) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.2.0)

snowflake-connector-python PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-cli =0.1.8, =0.1.2, =0.0.16, =0.0.1a2, =1.1.1, =1.2.5 Source cves: CVE-2026-86597 Source advisory:...

inthub-cli (>=0.1.4, <=0.1.26), omnata-plugin-devkit (>=0.5.3, <=0.11.0) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.0)

snowflake-connector-python PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - inthub-cli =0.1.4, =0.5.3, =0.5.0a112, =0.11.9 - snowflake-cli-labs 3.0.0rc0 Source cves: CVE-2026-86597...

omnata-cli (>=0.1.4, <=0.1.7), omnata-snowcli-fork (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.3)

snowflake-connector-python PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-cli =0.1.4, =0.3.0, =0.2.0, =0.0.1, =0.0.11 Source cves: CVE-2026-86597 Source advisory:...

dataligo (0.7.3), udps (0.1.21) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.2)

snowflake-connector-python PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dataligo 0.7.3 - udps 0.1.21 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

snowbim (>=1.0.7, <=1.0.10) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.3)

snowflake-connector-python PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowbim =1.0.7, =1.0.10 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

airbyte (>=0.0.1.dev7, <=0.10.5), airbyte-lib (>=0.1.0.dev1, <=0.1.0) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.6.0)

snowflake-connector-python PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - airbyte =0.0.1.dev7, =0.1.0.dev1, =1.0.23, =0.1.0, =0.1.1 - refractbatch 1.24.1 - snowflake-cli-labs 2.0.0rc...

snowpark-checkpoints (0.1.1), snowpark-checkpoints-collectors (0.1.1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.13.0)

snowflake-connector-python PYPI version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowpark-checkpoints 0.1.1 - snowpark-checkpoints-collectors 0.1.1 - snowpark-checkpoints-validators 0.1.1...

piicatcher (>=0.10.1, <=0.12.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.7)

snowflake-connector-python PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - piicatcher =0.10.1, =0.12.1 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

kpc-nifi-utils (0.2.3) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.0)

snowflake-connector-python PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - kpc-nifi-utils 0.2.3 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

acedeploy (>=2.4.119, <=2.4.366.dev1), alation-data-quality-sdk (>=1.0.6, <=1.0.7) +16 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.14.0)

snowflake-connector-python PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - acedeploy =2.4.119, =1.0.6, =1.12.3.6, =1.12.3.4, =1.12.6.10, =1.12.1.6, =0.13.18, =0.0.56, =0.1.1a0, =0.1....

snowflake-sqlalchemy (>=1.0.9, <=1.1.14), target-snowflake (0.0.2) potentially affected by CVE-2026-86597 via snowflake-connector-python (1.9.1)

snowflake-connector-python PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-sqlalchemy =1.0.9, =1.1.14 - target-snowflake 0.0.2 Source cves: CVE-2026-86597 Source advisory:...

ewah (>=0.1.25, <=0.2.5), fivetran-autogen (>=0.0.1rc8, <=0.0.1rc9) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.2)

snowflake-connector-python PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - ewah =0.1.25, =0.0.1rc8, =0.0.2, =2.2.0, =0.14.1, =0.110.1, =2.0.0, =2.1.0 - spswarehouse-airflow 0.6.3 Sour...

datupapi (>=0.5.19, <=1.0.3) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.5.0)

snowflake-connector-python PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - datupapi =0.5.19, =1.0.3 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

snowchange (0.0.4.post2) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.8)

snowflake-connector-python PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowchange 0.0.4.post2 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

3lc (>=2.3.84, <=2.22.0), 3lc-ultralytics (>=0.1.0, <=0.2.1) +2572 more potentially affected by CVE-2026-104851 via fsspec (>=0.9.0, <=2026.4.0)

fsspec PYPI version =0.9.0, =2.3.84, =0.1.0, =0.3.2, =1.1.0, =0.1.0, =0.2.1, =0.1.3, =2.0.0, =0.1.0, =0.0.5a0, =1.3.0, =1.4.1 and more Source cves: CVE-2026-104851 Source advisory: OSV:PYSEC-2026-4217...

edx-enterprise (>=0.40.6, <=0.42.0) potentially affected by CVE-2026-88029 via pymongo (3.5.0)

pymongo PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - edx-enterprise =0.40.6, =0.42.0 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

lathermail (>=0.3.1, <=0.4.2) potentially affected by CVE-2026-88029 via pymongo (2.7.1)

pymongo PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - lathermail =0.3.1, =0.4.2 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

bolinette (>=0.6.11, <=0.7.6), cvexplore (>=0.1.3, <=0.1.6) +14 more potentially affected by CVE-2026-88029 via pymongo (3.11.2)

pymongo PYPI version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bolinette =0.6.11, =0.1.3, =0.0.1, =0.0.3, =1.1.0b1, =1.0.2, =1.1.2, =0.0.2, =0.0.6 - scrapy-plus 1.0.5 and more Source cves: CVE-2026-88029 Sour...

aiogram-utils (>=0.0.1, <=0.0.3), algorithmic-trader (>=0.0.2, <=0.0.6) +35 more potentially affected by CVE-2026-88029 via pymongo (3.12.0)

pymongo PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - aiogram-utils =0.0.1, =0.0.2, =1.1.1, =1.0.4, =0.11.0, =0.2.1, =0.4.0, =0.2.2, =0.2.5.5, =0.3.4, =1.0.0, =0.1.0, =1.5.2, =0.1.2, =0.1.14 and more...

bloomtechlib (0.0.1), cocktail-apikit (>=0.1.20, <=0.1.22) +30 more potentially affected by CVE-2026-88029 via pymongo (3.11.4)

pymongo PYPI version 3.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bloomtechlib 0.0.1 - cocktail-apikit =0.1.20, =0.1.8, =0.0.3, =1.0.0, =0.1.3, =0.1.0, =0.2.1, =1.0.1, =0.11.0, =0.0.23, =1.0.1, =1.0.0, =1.2.5 an...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +470 more potentially affected by CVE-2026-104873 via langgraph-sdk (>=0.1.48, <=0.4.3)

langgraph-sdk PYPI version =0.1.48, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-104873 Source advisory: OSV:PYSEC-2026-4240...

general-tools (>=0.1.4, <=0.2.1), happymongo-py3 (0.1.2) +3 more potentially affected by CVE-2026-88029 via pymongo (3.7.0)

pymongo PYPI version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - general-tools =0.1.4, =0.1.0, =23.0.3, =23.0.7 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

askbob (>=0.0.3, <=0.0.4), autoneuro-pypi (1.0.0) +46 more potentially affected by CVE-2026-88029 via pymongo (3.10.1)

pymongo PYPI version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - askbob =0.0.3, =1.1.0, =1.1.0, =0.0.3, =1.3.7, =0.0.5, =0.0.2, =0.0.0, =0.0.13 - deeppavlov-agent 2.3.0a0 - discord-fate-bot 0.1.1 - dragg 0.0.0 ...

airvue-gn (>=0.0.1, <=0.0.2), ax-env (>=0.2.2, <=0.3.0) +22 more potentially affected by CVE-2026-88029 via pymongo (3.12.3)

pymongo PYPI version 3.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - airvue-gn =0.0.1, =0.2.2, =0.1.0, =0.1.12, =0.1.12, =0.1.21, =0.3.2, =0.1.0.dev1, =1.1.0b37, =3.1.1, =0.0.11, =0.0.12 and more Source cves:...

quokka (>=0.0.1.dev84, <=0.4.1.dev22) potentially affected by CVE-2026-88029 via pymongo (2.4.1)

pymongo PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

auto-qchem (>=0.1.1, <=1.2.6), crsmongo (>=1.0.0, <=1.0.6) +5 more potentially affected by CVE-2026-88029 via pymongo (3.10.0)

pymongo PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - auto-qchem =0.1.1, =1.0.0, =0.1.24, =0.0.1, =0.1.0, =0.1.10, =2.0.7, =2.3.2 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

mongodb-migrations (0.1.1), rolabesti (>=0.1.0, <=0.5.3) potentially affected by CVE-2026-88029 via pymongo (3.2.1)

pymongo PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongodb-migrations 0.1.1 - rolabesti =0.1.0, =0.5.3 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

adyanutils (>=0.4.2, <=0.8.6), batch-automation (0.0.3) +5 more potentially affected by CVE-2026-88029 via pymongo (3.6.0)

pymongo PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - adyanutils =0.4.2, =0.55.5, =0.62.0 - hanita 0.1.3 - jetengine 0.1.3 - scout-browser 4.1.0 - yy-spider 1.0.0 Source cves: CVE-2026-88029 Source...

ai4rag (>=0.9.0, <=0.10.4), distlk (0.1.0rc1) +3 more potentially affected by CVE-2026-105751 via docling (>=2.107.0, <=2.118.1)

docling PYPI version =2.107.0, =0.9.0, =0.3.0, =0.3.0, =0.3.2 Source cves: CVE-2026-105751 Source advisory: OSV:PYSEC-2026-4207...

allennlp (>=0.8.0, <=0.8.2), cloudless (0.0.0) +6 more potentially affected by CVE-2024-33663 +1 more via python-jose (2.0.2)

python-jose PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - allennlp =0.8.0, =1.0.0, =1.3.4, =0.4.3, =0.0.25, =0.0.26 Source cves: CVE-2024-33663, CVE-2026-85394 Source advisory: OSV:PYSEC-2026-4298...

core-devoops (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-33663 +1 more via python-jose (1.4.0)

python-jose PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - core-devoops =0.0.1, =0.0.2 Source cves: CVE-2024-33663, CVE-2026-85394 Source advisory: OSV:PYSEC-2026-4298...

datawire-cloudtools (0.2.6) potentially affected by CVE-2024-33663 +1 more via python-jose (0.5.5)

python-jose PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - datawire-cloudtools 0.2.6 Source cves: CVE-2024-33663, CVE-2026-85394 Source advisory: OSV:PYSEC-2026-4298...

mcpuniverse (>=1.0.0, <=1.1.3), mseep-mcpuniverse (1.0.4) potentially affected by CVE-2026-66004 via blender-mcp (1.1.3)

blender-mcp PYPI version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on blender-mcp and may be impacted: - mcpuniverse =1.0.0, =1.1.3 - mseep-mcpuniverse 1.0.4 Source cves: CVE-2026-66004 Source advisory: OSV:PYSEC-2026-4203...

scdata (>=0.1.0, <=1.5.1), workoutizer (>=0.4.1, <=0.5.1) potentially affected by CVE-2026-77387 via geopy (1.21.0)

geopy PYPI version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopy and may be impacted: - scdata =0.1.0, =0.4.1, =0.5.1 Source cves: CVE-2026-77387 Source advisory: OSV:PYSEC-2026-4218...

hrisapi (0.0.2) potentially affected by CVE-2026-77387 via geopy (1.19.0)

geopy PYPI version 1.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopy and may be impacted: - hrisapi 0.0.2 Source cves: CVE-2026-77387 Source advisory: OSV:PYSEC-2026-4218...

liveisstracker (>=0.0.2, <=1.1.7), pci (0.2.3) +3 more potentially affected by CVE-2026-77387 via geopy (1.20.0)

geopy PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopy and may be impacted: - liveisstracker =0.0.2, =0.5.1, =0.2.0, =0.2.1 - wethr 0.0.1 Source cves: CVE-2026-77387 Source advisory: OSV:PYSEC-2026-4218...

avwx-engine (>=1.2.5, <=1.4.6), azely (>=0.4.0, <=0.6.0) +2 more potentially affected by CVE-2026-77387 via geopy (1.23.0)

geopy PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopy and may be impacted: - avwx-engine =1.2.5, =0.4.0, =0.2.4, =0.2.4, =0.2.8 Source cves: CVE-2026-77387 Source advisory: OSV:PYSEC-2026-4218...

aau-gomapedge-etl (>=0.3.2, <=0.4.1), agentgateway (>=0.1.0, <=1.1.9) +135 more potentially affected by CVE-2026-77387 via geopy (>=2.0.0rc1, <=2.4.1)

geopy PYPI version =2.0.0rc1, =0.3.2, =0.1.0, =0.20.5, =0.1.0, =3.2.0, =0.2.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.2b0, =0.0.9b0 - commonroad-geometric 0.1.2 and more Source cves: CVE-2026-77387 Source advisory: OSV:PYSEC-2026-4218...

betty (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-77387 via geopy (1.18.1)

geopy PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on geopy and may be impacted: - betty =0.1.0, =0.1.1 Source cves: CVE-2026-77387 Source advisory: OSV:PYSEC-2026-4218...

mc-coppel (>=4.0.9, <=4.1.3), msc (>=1.0.0, <=1.1.20) +2 more potentially affected by CVE-2026-77387 via geopy (1.17.0)

geopy PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopy and may be impacted: - mc-coppel =4.0.9, =1.0.0, =1.0.0, =0.3.0, =0.4.1 Source cves: CVE-2026-77387 Source advisory: OSV:PYSEC-2026-4218...

ding0 (0.1.12), taxi-simulator (>=0.1.2, <=0.2.0) potentially affected by CVE-2026-77387 via geopy (1.11.0)

geopy PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopy and may be impacted: - ding0 0.1.12 - taxi-simulator =0.1.2, =0.2.0 Source cves: CVE-2026-77387 Source advisory: OSV:PYSEC-2026-4218...