amlr (>=0.3.6 <=0.4.1), arsa-ml (>=0.1.0 <=0.1.13) +29 more potentially affected by CVE-2025-6544 via h2o (>=3.18.0.8 <=3.46.0.7)

h2o PYPI version =3.18.0.8, =0.3.6, =0.1.0, =0.0.92, =1.0.81, =2019.9.10.14.39.5, =1.0.1, =0.1.20, =0.1.0, =0.1.2, =0.3.2, =0.3.0, =1.0.1.1.4, =0.4.0.dev3, =0.1.0, =3.0.1, =5.4.1 and more Source cves: CVE-2025-6544 Source advisory: OSV:PYSEC-2026-349...

aana (>=0.2.1 <=0.2.2), acdc-aws-etl-pipeline (>=0.1.7 <=0.5.9) +487 more potentially affected by CVE-2025-58367 via deepdiff (>=5.0.1 <=8.6.0)

deepdiff PYPI version =5.0.1, =0.2.1, =0.1.7, =3.0.0b853, =0.1.0, =0.0.1, =0.1.0, =1.8.15, =1.8.17, =1.8.14, =1.0.0, =2.8.5, =0.1.6, =0.2.0 and more Source cves: CVE-2025-58367 Source advisory: OSV:PYSEC-2026-327...

agentengine (>=0.1.5 <=0.1.8), iflow-mcp-maxim-saplin-mcp-safe-local-python-executor (=0.1.0) +11 more potentially affected by CVE-2025-5120 via smolagents (>=0.1.3 <=1.16.1)

smolagents PYPI version =0.1.3, =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.16.0, =0.0.1.dev0, =0.0.1, =0.3.0, =0.3.7 Source cves: CVE-2025-5120 Source advisory: OSV:PYSEC-2026-542...

date-a-scientist (>=0.1.0 <=0.1.19), exposeq (>=4.0.7 <=4.6.1) +3 more potentially affected by CVE-2024-12366 via pandasai (>=1.3.3 <=2.4.2)

pandasai PYPI version =1.3.3, =0.1.0, =4.0.7, =0.0.0, =0.0.3 Source cves: CVE-2024-12366 Source advisory: OSV:PYSEC-2026-448...

ablator (>=0.0.1b1 <=0.0.1b2), ablator-ken-test (=0.0.1b2) +264 more potentially affected by CVE-2025-34351 via ray (>=0.5.0 <=2.51.2)

ray PYPI version =0.5.0, =0.0.1b1, =0.1.1, =0.0.3, =0.3.1, =0.1.16, =0.1.4, =0.2.1, =1.1.1, =0.1.3, =1.0.11 and more Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

ablator (>=0.0.1b1 <=0.0.1b2), ablator-ken-test (=0.0.1b2) +264 more potentially affected by CVE-2025-62593 via ray (>=0.5.0 <=2.51.2)

ray PYPI version =0.5.0, =0.0.1b1, =0.1.1, =0.0.3, =0.3.1, =0.1.16, =0.1.4, =0.2.1, =1.1.1, =0.1.3, =1.0.11 and more Source cves: CVE-2025-62593 Source advisory: OSV:PYSEC-2026-520...

simmate (>=0.14.0 <=0.17.0), tvsd (>=1.4.0 <=1.4.1) potentially affected by CVE-2025-24370 via django-unicorn (>=0.50.0 <=0.59.0)

django-unicorn PYPI version =0.50.0, =0.14.0, =1.4.0, =1.4.1 Source cves: CVE-2025-24370 Source advisory: OSV:PYSEC-2026-329...

django-ninja-aio-crud (>=1.0.5 <=2.25.0) potentially affected by CVE-2025-65015 via joserfc (=1.4.1)

joserfc PYPI version =1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on joserfc and may be impacted: - django-ninja-aio-crud =1.0.5, =2.25.0 Source cves: CVE-2025-65015 Source advisory: OSV:PYSEC-2026-361...

tashan-scispark (>=1.0.1 <=1.0.8) potentially affected by CVE-2024-8551 via agentscope (=0.1.0)

agentscope PYPI version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on agentscope and may be impacted: - tashan-scispark =1.0.1, =1.0.8 Source cves: CVE-2024-8551 Source advisory: OSV:PYSEC-2026-255...

a7a1234 (=1.0.0), aas2openapi (>=0.2.0 <=0.2.4) +2554 more potentially affected by CVE-2025-43859 via h11 (>=0.10.0 <=0.15.0)

h11 PYPI version =0.10.0, =0.2.0, =0.2.1, =1.2.1, =0.7.3.post0, =0.1.0, =2.0.0.1, =0.0.1, =0.1.0, =0.8.3, =0.1.0, =4.8.2, =0.1.0, =0.1.1 - adminui =1.5.2 and more Source cves: CVE-2025-43859 Source advisory: OSV:PYSEC-2026-348...

ai-dynamo (=0.1.0), openllm (=0.6.19) potentially affected by CVE-2025-27520 via bentoml (>=1.4.0a2 <=1.4.1)

bentoml PYPI version =1.4.0a2, =1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - ai-dynamo =0.1.0 - openllm =0.6.19 Source cves: CVE-2025-27520 Source advisory: OSV:PYSEC-2026-294...

amlr (>=0.3.6 <=0.4.1), atlantic (>=0.0.92 <=2.0.30) +27 more potentially affected by CVE-2024-10553 via h2o (>=3.18.0.8 <=3.46.0.11)

h2o PYPI version =3.18.0.8, =0.3.6, =0.0.92, =1.0.81, =2019.9.10.14.39.5, =1.0.1, =0.1.20, =0.1.0, =0.1.2, =0.3.2, =0.3.0, =1.0.1.1.4, =0.4.0.dev3, =0.1.0, =0.1.7 - mgoaiwrkpi =0.0.4 - mi =2020.3.4.13.39.35 and more Source cves: CVE-2024-10553 Source advisory: OSV:PYSEC-2026-351...

llm-toys (=0.1.1), tcbench (>=0.0.20 <=0.0.22) +1 more potentially affected by CVE-2024-6829 via aim (>=3.17.4 <=3.19.3)

aim PYPI version =3.17.4, =0.0.20, =0.1.0, =0.5.6 Source cves: CVE-2024-6829 Source advisory: OSV:PYSEC-2026-259...

dsipts (>=1.1.5 <=1.1.19), llm-toys (=0.1.1) +2 more potentially affected by CVE-2024-8769 via aim (>=3.17.4 <=3.20.1)

aim PYPI version =3.17.4, =1.1.5, =0.0.20, =0.1.0, =0.5.6 Source cves: CVE-2024-8769 Source advisory: OSV:PYSEC-2026-258...

corradin-opioid-project (=0.1.0), eensight (>=1.0.0 <=1.0.2) +44 more potentially affected by CVE-2024-9701 via kedro (>=0.15.9 <=0.19.8)

kedro PYPI version =0.15.9, =1.0.0, =0.1.0, =0.1.0, =0.1.9, =0.1.0, =0.0.4, =0.1.0, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2024-9701 Source advisory: OSV:PYSEC-2026-367...

tashan-scispark (>=1.0.1 <=1.0.8) potentially affected by CVE-2024-8537 via agentscope (=0.1.0)

agentscope PYPI version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on agentscope and may be impacted: - tashan-scispark =1.0.1, =1.0.8 Source cves: CVE-2024-8537 Source advisory: OSV:PYSEC-2026-254...

ablation (=0.1.0), acids-msprior (>=1.0.1 <=1.1.3) +521 more potentially affected by CVE-2024-8019 via pytorch-lightning (>=0.10.0 <=2.3.3)

pytorch-lightning PYPI version =0.10.0, =1.0.1, =2.1.16, =1.3.0, =1.8.15, =1.8.17, =1.8.14, =0.1.16, =0.2.2, =1.0.0.dev0 - arcagent =0.0.1 - arccmd =0.2.0 - arcmas =0.2.0 and more Source cves: CVE-2024-8019 Source advisory: OSV:PYSEC-2026-507...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2022-46741 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves:...

ai-dynamo (=0.1.0), bento-sgl-router (>=0.0.1 <=0.0.6) +32 more potentially affected by CVE-2024-9070 via bentoml (>=0.10.1 <=1.4.39)

bentoml PYPI version =0.10.1, =0.0.1, =0.1.0, =0.1.0, =0.2.3, =0.1.0, =0.0.1, =0.0.10, =0.1.0, =0.2.0, =0.0.5, =0.1.1 - fusionmllib =0.1.0 - kazemlstack =0.1.0 and more Source cves: CVE-2024-9070 Source advisory: OSV:PYSEC-2026-295...

acceldata-o2a (=1.0.0), acryl-datahub-airflow-plugin (>=0.8.44.4 <=1.3.1.post1) +129 more potentially affected by CVE-2022-38649 via apache-airflow (>=1.8.2 <=2.2.5)

apache-airflow PYPI version =1.8.2, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =0.4.0, =0.1.0a1, =0.6.0, =0.1.1, =0.1.1, =0.2.0, =0.11.0 and more Source cves: CVE-2022-38649 Source advisory: OSV:PYSEC-2026-267...

acceldata-o2a (=1.0.0), acryl-datahub-airflow-plugin (>=0.8.44.4 <=1.3.1.post1) +129 more potentially affected by CVE-2022-40189 via apache-airflow (>=1.8.2 <=2.2.5)

apache-airflow PYPI version =1.8.2, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =0.4.0, =0.1.0a1, =0.6.0, =0.1.1, =0.1.1, =0.2.0, =0.11.0 and more Source cves: CVE-2022-40189 Source advisory: OSV:PYSEC-2026-270...

a10-octavia (>=1.0.0 <=2.2.0) potentially affected by CVE-2021-3563 via keystone (>=15.0.1 <=18.0.0)

keystone PYPI version =15.0.1, =1.0.0, =2.2.0 Source cves: CVE-2021-3563 Source advisory: OSV:PYSEC-2026-370...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2022-45908 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves:...

plone-app-z3cform (>=4.0.0a1 <=4.0.0a10) potentially affected by CVE-2020-7941 via plone-app-contenttypes (=2.2.2)

plone-app-contenttypes PYPI version =2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-contenttypes and may be impacted: - plone-app-z3cform =4.0.0a1, =4.0.0a10 Source cves: CVE-2020-7941 Source advisory: OSV:PYSEC-2026-459...

acentoweb-addusergroup (>=1.0.0 <=1.0.0a1), affinitic-privatefolder (=1.0.1) +391 more potentially affected by CVE-2020-7941 via plone-app-contenttypes (=5.0.0)

plone-app-contenttypes PYPI version =5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-contenttypes and may be impacted: - acentoweb-addusergroup =1.0.0, =1.0.0a17, =3.0.7, =2.2.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0b1 and more Source cves:...

GuiNistRs (=0.1.0), LemoGUI (=0.0.1-nightly) +1932 more potentially affected by unknown CVE via ttf-parser (>=0.10.1 <=0.9.0)

ttf-parser CARGO version =0.10.1, =0.0.1, =0.2.10, =0.2.10, =0.2.1, =0.1.0, =0.1.0, =0.0.2, =0.1.2, =0.1.1, =0.1.26, =0.1.23, =0.1.9, =0.3.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0192...

@backstage-community/plugin-multi-source-security-viewer (>=0.15.3 <=0.17.0) potentially affected by unknown CVE via @immobiliarelabs/backstage-plugin-gitlab (=7.0.1)

@immobiliarelabs/backstage-plugin-gitlab NPM version =7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @immobiliarelabs/backstage-plugin-gitlab and may be impacted: - @backstage-community/plugin-multi-source-security-viewer =0.15.3, =0.17.0 Source...

@aws/plugin-aws-apps-for-backstage (>=0.3.4 <=0.3.5), @backstage-community/plugin-multi-source-security-viewer (>=0.7.1 <=0.15.2) potentially affected by unknown CVE via @immobiliarelabs/backstage-plugin-gitlab (=6.13.0)

@immobiliarelabs/backstage-plugin-gitlab NPM version =6.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on @immobiliarelabs/backstage-plugin-gitlab and may be impacted: - @aws/plugin-aws-apps-for-backstage =0.3.4, =0.7.1, =0.15.2 Source cves: unknown...

@agrada_digital/pbm (>=0.0.88 <=0.2.7), @bella-ui/components (>=1.0.0 <=1.0.10) +179 more potentially affected by unknown CVE via pnpm (>=0.21.0 <=10.34.2)

pnpm NPM version =0.21.0, =0.0.88, =1.0.0, =0.1.5, =1.0.0, =1.0.0, =0.2.2, =2.1.1, =0.1.16, =0.2.1, =0.1.0, =0.1.0, =0.8.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QRV3-253H-G69C...

@agrada_digital/pbm (>=0.0.88 <=0.2.7), @bella-ui/components (>=1.0.0 <=1.0.10) +179 more potentially affected by unknown CVE via pnpm (>=0.21.0 <=10.34.2)

pnpm NPM version =0.21.0, =0.0.88, =1.0.0, =0.1.5, =1.0.0, =1.0.0, =0.2.2, =2.1.1, =0.1.16, =0.2.1, =0.1.0, =0.1.0, =0.8.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-72R4-9C5J-MJ57...

@pnpm/building.commands (>=1100.0.4 <=1100.1.3), @pnpm/deps.compliance.commands (>=1101.1.1 <=1101.3.3) +9 more potentially affected by unknown CVE via @pnpm/installing.deps-installer (>=1101.0.0 <=1101.8.0)

@pnpm/installing.deps-installer NPM version =1101.0.0, =1100.0.4, =1101.1.1, =1100.1.3, =1101.0.2, =1100.0.4, =1100.0.4, =1100.1.2, =1100.0.4, =1100.2.0, =0.0.2, =0.5.0, =0.5.2 Source cves: unknown CVE Source advisory: SNYK:JS-PNPMINSTALLINGDEPSINSTALLER-17660539...

@pnpm/building.commands (>=1100.0.0 <=1100.1.3), @pnpm/deps.compliance.commands (>=1100.0.0 <=1101.3.3) +11 more potentially affected by unknown CVE via @pnpm/installing.deps-resolver (>=1100.0.0 <=1100.2.1)

@pnpm/installing.deps-resolver NPM version =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =0.0.1, =0.5.0, =0.5.2 Source cves: unknown CVE Source advisory: SNYK:JS-PNPMINSTALLINGDEPSRESOLVER-17660540...

@icebreakers/monorepo (>=4.0.0 <=4.0.13), @pnpm/building.commands (>=1100.0.0 <=1100.1.3) +15 more potentially affected by unknown CVE via @pnpm/fs.symlink-dependency (>=1100.0.0 <=1100.0.8)

@pnpm/fs.symlink-dependency NPM version =1100.0.0, =4.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =0.0.1, =0.0.21 and more Source cves: unknown CVE Source advisory:...

@agrada_digital/pbm (>=0.0.88 <=0.2.7), @bella-ui/components (>=1.0.0 <=1.0.10) +179 more potentially affected by unknown CVE via pnpm (>=0.21.0 <=10.34.2)

pnpm NPM version =0.21.0, =0.0.88, =1.0.0, =0.1.5, =1.0.0, =1.0.0, =0.2.2, =2.1.1, =0.1.16, =0.2.1, =0.1.0, =0.1.0, =0.8.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-FR4H-3CPH-29XV...

@pnpm/building.commands (>=1100.0.4 <=1100.1.3), @pnpm/deps.compliance.commands (>=1101.1.1 <=1101.3.3) +10 more potentially affected by unknown CVE via @pnpm/installing.deps-restorer (>=1101.0.0 <=1101.1.10)

@pnpm/installing.deps-restorer NPM version =1101.0.0, =1100.0.4, =1101.1.1, =1100.1.3, =1101.0.2, =1100.0.4, =1100.0.4, =1100.1.2, =1101.0.0, =1100.0.4, =1100.2.0, =0.0.2, =0.5.0, =0.5.2 Source cves: unknown CVE Source advisory: SNYK:JS-PNPMINSTALLINGDEPSRESTORER-17660541...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-55699 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-55699 Source advisory: OSV:GHSA-4GXM-V5V7-FQC4...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-55698 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-55698 Source advisory: OSV:GHSA-W466-C33R-3GJP...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-55487 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-55487 Source advisory: OSV:GHSA-5WX6-MG75-V57R...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-55180 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-55180 Source advisory: OSV:GHSA-3QHV-2RGH-X77R...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-50015 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-50015 Source advisory: OSV:GHSA-RXHJ-4M44-96R4...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-50017 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-50017 Source advisory: OSV:GHSA-CJHR-43R9-CFMW...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-50016 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-50016 Source advisory: OSV:GHSA-HWX4-2J3J-G496...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-50014 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-50014 Source advisory: OSV:GHSA-P4XF-RF54-RJ3X...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-50021 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-50021 Source advisory: OSV:GHSA-Q6J5-FJX5-2MC3...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-50573 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-50573 Source advisory: OSV:GHSA-54HH-G5MX-JQCP...

@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-48995 via pnpm (>=0.21.0 <=10.33.2)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.0.2, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-48995 Source advisory: OSV:GHSA-HG3W-7F8C-63HP...

armory_cli (>=0.3.3 <=0.3.28), armory_lib (>=0.1.0 <=0.3.28) +142 more potentially affected by CVE-2026-5223 via cargo (>=0.10.0 <=0.8.0)

cargo CARGO version =0.10.0, =0.3.3, =0.1.0, =0.10.0, =0.10.0, =0.1.0, =0.3.1, =0.0.1, =0.1.0, =0.1.0, =0.2.2, =0.6.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-5223 Source advisory: OSV:GHSA-JQ42-7MFV-HM57...

armory_cli (>=0.3.3 <=0.3.28), armory_lib (>=0.1.0 <=0.3.28) +142 more potentially affected by CVE-2026-5222 via cargo (>=0.10.0 <=0.8.0)

cargo CARGO version =0.10.0, =0.3.3, =0.1.0, =0.10.0, =0.10.0, =0.1.0, =0.3.1, =0.0.1, =0.1.0, =0.1.0, =0.2.2, =0.6.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-5222 Source advisory: OSV:GHSA-P688-R7JV-FM6F...

async-media-agents (>=0.1.0 <=0.1.2), cmdbsyncer (>=3.12.7 <=4.1.4) +6 more potentially affected by CVE-2026-48990 via joserfc (>=1.4.1 <=1.6.5)

joserfc PYPI version =1.4.1, =0.1.0, =3.12.7, =1.0.5, =3.0.6, =4.5.0, =1.2.79, =0.9.0, =0.4.4, =0.4.5 Source cves: CVE-2026-48990 Source advisory: OSV:GHSA-WPHV-VFRH-23Q5...

aica-api (>=2.1.0 <=4.0.2), aj (>=2.2.12 <=2.2.15) +140 more potentially affected by CVE-2026-48804 via python-socketio (>=5.0.0 <=5.16.1)

python-socketio PYPI version =5.0.0, =2.1.0, =2.2.12, =2.2.12, =0.110.0, =0.53.0, =0.1.2, =1.0.0, =1.3.46, =0.0.2, =4.5.0, =0.1.1, =4.1.0, =5.0.0 and more Source cves: CVE-2026-48804 Source advisory: SNYK:PYTHON-PYTHONSOCKETIO-17660883...