@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107297 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107297 Source advisory: MEND:CVE-2026-107297...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107296 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107296 Source advisory: MEND:CVE-2026-107296...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +20 more potentially affected by CVE-2026-107295 via pydantic-ai-slim (>=2.0.0b1, <=2.27.1)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0, =0.1.0rc0, =0.7.0rc2, =0.0.2, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =0.2.2 and more Source cves: CVE-2026-107295 Source advisory: MEND:CVE-2026-107295...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +62 more potentially affected by CVE-2026-107295 via pydantic-ai-slim (>=1.34.0, <=1.107.2)

pydantic-ai-slim PYPI version =1.34.0, =0.41.0, =0.1.14.13, =0.0.2, =1.34.0, =0.0.400, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =20260622135108.0.0.dev0 and more Source cves: CVE-2026-107295 Source advisory: MEND:CVE-2026-107295...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +79 more potentially affected by CVE-2026-107294 via pydantic-ai-slim (>=1.0.0b1, <=1.107.1)

pydantic-ai-slim PYPI version =1.0.0b1, =0.41.0, =0.1.14.13, =0.0.2, =1.0.0b1, =0.0.193, =1.0.0, =0.1.0, =0.10.0, =1.2.0 - eea-genai-blocks 1.0.0 - eea-genai-core 1.2.0 - eea-genai-summary 1.0.0 and more Source cves: CVE-2026-107294 Source advisory: MEND:CVE-2026-107294...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +16 more potentially affected by CVE-2026-107294 via pydantic-ai-slim (>=2.0.0b1, <=2.23.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0rc0, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =2.0.0b1, =1.0.1, =0.26.0, =0.36.0 and more Source cves: CVE-2026-107294 Source advisory: MEND:CVE-2026-107294...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +3 more potentially affected by CVE-2026-107294 via pydantic-ai (>=2.0.0b1, <=2.23.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =0.26.0, =0.35.0 Source cves: CVE-2026-107294 Source advisory: MEND:CVE-2026-107294...

clai (>=1.77.0, <=1.107.1), compas-lca (>=1.0.0, <=1.0.2) +18 more potentially affected by CVE-2026-107294 via pydantic-ai (>=1.77.0, <=1.107.1)

pydantic-ai PYPI version =1.77.0, =1.77.0, =1.0.0, =1.1.0, =0.1.102, =26.1.0, =0.2.0, =26.1.0rc1, =0.9.1, =1.2.2 - murmur-runtime 0.1.0 - open-aura 0.1.0 - opsmith-cli 0.4.6b0 - peven 0.2.3 and more Source cves: CVE-2026-107294 Source advisory: MEND:CVE-2026-107294...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +79 more potentially affected by CVE-2026-107293 via pydantic-ai-slim (>=1.0.0b1, <=1.107.2)

pydantic-ai-slim PYPI version =1.0.0b1, =0.41.0, =0.1.14.13, =0.0.2, =1.0.0b1, =0.0.193, =1.0.0, =0.1.0, =0.10.0, =1.2.0 - eea-genai-blocks 1.0.0 - eea-genai-core 1.2.0 - eea-genai-summary 1.0.0 and more Source cves: CVE-2026-107293 Source advisory: MEND:CVE-2026-107293...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +18 more potentially affected by CVE-2026-107293 via pydantic-ai-slim (>=2.0.0b1, <=2.27.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0rc0, =0.0.2, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =2.0.0b1, =1.0.1, =1.1.0 and more Source cves: CVE-2026-107293 Source advisory: MEND:CVE-2026-107293...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2024-53990 +1 more via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2024-53990, CVE-2026-107228 Source advisory: GHSA-2JWH-9RMR-J4XFhttps://vuln...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107228 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107228 Source advisory: OSV:GHSA-2JWH-9RMR-J4XF...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2429 more potentially affected by CVE-2024-53990 +1 more via org.asynchttpclient:async-http-client (>=2.1.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2024-53990, CVE-2026-107228 Source advisory: GHSA-2JWH-9RMR-J4XF...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2429 more potentially affected by CVE-2026-107228 via org.asynchttpclient:async-http-client (>=2.1.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-107228 Source advisory: OSV:GHSA-2JWH-9RMR-J4XF...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2453 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=2.1.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-107226 Source advisory: SNYK:JAVA-ORGASYNCHTTPCLIENT-20574185...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2429 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=2.1.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-107226 Source advisory: OSV:GHSA-P2JM-6HJ6-9RJG...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107226 Source advisory: GHSA-P2JM-6HJ6-9RJG...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107226 Source advisory: OSV:GHSA-P2JM-6HJ6-9RJG...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2429 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=2.1.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-107226 Source advisory: GHSA-P2JM-6HJ6-9RJG...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2422 more potentially affected by CVE-2026-107227 via org.asynchttpclient:async-http-client (>=2.2.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.2.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-107227 Source advisory: GHSA-X8V2-478Q-2HVG...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107227 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107227 Source advisory: GHSA-X8V2-478Q-2HVG...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2422 more potentially affected by CVE-2026-107227 via org.asynchttpclient:async-http-client (>=2.2.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.2.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-107227 Source advisory: OSV:GHSA-X8V2-478Q-2HVG...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107227 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107227 Source advisory: OSV:GHSA-X8V2-478Q-2HVG...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107230 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107230 Source advisory: GHSA-V2J5-22FR-J62R...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2863 more potentially affected by CVE-2026-107230 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-107230 Source advisory: OSV:GHSA-V2J5-22FR-J62R...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107230 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107230 Source advisory: OSV:GHSA-V2J5-22FR-J62R...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2863 more potentially affected by CVE-2026-107230 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-107230 Source advisory: GHSA-V2J5-22FR-J62R...

clai (>=1.77.0, <=1.107.5), compas-lca (>=1.0.0, <=1.0.2) +20 more potentially affected by CVE-2026-107290 via pydantic-ai (>=1.77.0, <=1.107.5)

pydantic-ai PYPI version =1.77.0, =1.77.0, =1.0.0, =1.1.0, =0.1.102, =26.1.0, =0.2.0, =26.1.0rc1, =0.9.1, =1.2.2 - murmur-runtime 0.1.0 - open-aura 0.1.0 - opsmith-cli 0.4.6b0 and more Source cves: CVE-2026-107290 Source advisory: OSV:GHSA-FPF4-VWCP-V4HP...

acpkit (>=1.5.0, <=1.9.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107290 via pydantic-ai (>=2.0.0b1, <=2.43.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.4.0 and more Source cves: CVE-2026-107290 Source advisory: OSV:GHSA-FPF4-VWCP-V4HP...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107290 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107290 Source advisory: OSV:GHSA-FPF4-VWCP-V4HP...

agent-utilities (>=0.41.0, <=0.51.0), clai (>=1.77.0, <=1.107.5) +37 more potentially affected by CVE-2026-107290 via pydantic-ai-slim (>=1.77.0, <=1.107.5)

pydantic-ai-slim PYPI version =1.77.0, =0.41.0, =1.77.0, =0.0.445, =1.0.0, =1.1.0, =1.0.25, =0.1.102, =26.1.0, =0.1.1, =0.2.0, =0.2.1 - jupydeep 0.1.6 and more Source cves: CVE-2026-107290 Source advisory: OSV:GHSA-FPF4-VWCP-V4HP...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107290 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107290 Source advisory: GHSA-FPF4-VWCP-V4HP...

acpkit (>=1.5.0, <=1.9.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107290 via pydantic-ai (>=2.0.0b1, <=2.43.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.4.0 and more Source cves: CVE-2026-107290 Source advisory: SNYK:PYTHON-PYDANTICAI-20848929...

clai (>=1.77.0, <=1.107.5), compas-lca (>=1.0.0, <=1.0.2) +20 more potentially affected by CVE-2026-107290 via pydantic-ai (>=1.77.0, <=1.107.5)

pydantic-ai PYPI version =1.77.0, =1.77.0, =1.0.0, =1.1.0, =0.1.102, =26.1.0, =0.2.0, =26.1.0rc1, =0.9.1, =1.2.2 - murmur-runtime 0.1.0 - open-aura 0.1.0 - opsmith-cli 0.4.6b0 and more Source cves: CVE-2026-107290 Source advisory: SNYK:PYTHON-PYDANTICAI-20848929...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107290 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107290 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20848928...

agent-utilities (>=0.41.0, <=0.51.0), clai (>=1.77.0, <=1.107.5) +37 more potentially affected by CVE-2026-107290 via pydantic-ai-slim (>=1.77.0, <=1.107.5)

pydantic-ai-slim PYPI version =1.77.0, =0.41.0, =1.77.0, =0.0.445, =1.0.0, =1.1.0, =1.0.25, =0.1.102, =26.1.0, =0.1.1, =0.2.0, =0.2.1 - jupydeep 0.1.6 and more Source cves: CVE-2026-107290 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20848928...

acpkit (>=1.5.0, <=1.9.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107290 via pydantic-ai (>=2.0.0b1, <=2.43.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.4.0 and more Source cves: CVE-2026-107290 Source advisory: GHSA-FPF4-VWCP-V4HP...

clai (>=1.77.0, <=1.107.5), compas-lca (>=1.0.0, <=1.0.2) +20 more potentially affected by CVE-2026-107290 via pydantic-ai (>=1.77.0, <=1.107.5)

pydantic-ai PYPI version =1.77.0, =1.77.0, =1.0.0, =1.1.0, =0.1.102, =26.1.0, =0.2.0, =26.1.0rc1, =0.9.1, =1.2.2 - murmur-runtime 0.1.0 - open-aura 0.1.0 - opsmith-cli 0.4.6b0 and more Source cves: CVE-2026-107290 Source advisory: GHSA-FPF4-VWCP-V4HP...

agent-utilities (>=0.41.0, <=0.51.0), clai (>=1.77.0, <=1.107.5) +37 more potentially affected by CVE-2026-107290 via pydantic-ai-slim (>=1.77.0, <=1.107.5)

pydantic-ai-slim PYPI version =1.77.0, =0.41.0, =1.77.0, =0.0.445, =1.0.0, =1.1.0, =1.0.25, =0.1.102, =26.1.0, =0.1.1, =0.2.0, =0.2.1 - jupydeep 0.1.6 and more Source cves: CVE-2026-107290 Source advisory: GHSA-FPF4-VWCP-V4HP...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +58 more potentially affected by CVE-2026-107291 via pydantic-ai (>=0.3.4, <=1.107.5)

pydantic-ai PYPI version =0.3.4, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.9.0, =20250930132735.0.0.dev0, =0.1.102, =2.2.0, =0.6.3, =26.0.0, =26.1.1 and more Source cves: CVE-2026-107291 Source advisory: SNYK:PYTHON-PYDANTICAI-20583783...

acpkit (>=1.5.0, <=1.9.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107291 via pydantic-ai (>=2.0.0b1, <=2.43.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.4.0 and more Source cves: CVE-2026-107291 Source advisory: OSV:GHSA-4X9P-G9WM-8Q7F...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107291 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107291 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20583782...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107291 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107291 Source advisory: OSV:GHSA-4X9P-G9WM-8Q7F...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107291 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107291 Source advisory: GHSA-4X9P-G9WM-8Q7F...

acpkit (>=1.5.0, <=1.9.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107291 via pydantic-ai (>=2.0.0b1, <=2.43.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.4.0 and more Source cves: CVE-2026-107291 Source advisory: GHSA-4X9P-G9WM-8Q7F...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +90 more potentially affected by CVE-2026-107291 via pydantic-ai-slim (>=0.3.4, <=1.107.5)

pydantic-ai-slim PYPI version =0.3.4, =0.41.0, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.1.0, =0.9.0, =1.2.0 - eea-genai-blocks 1.0.0 - eea-genai-core 1.2.0 - eea-genai-summary 1.0.0 and more Source cves: CVE-2026-107291 Source advisory: OSV:GHSA-4X9P-G9WM-8Q7F...

acpkit (>=1.5.0, <=1.9.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107291 via pydantic-ai (>=2.0.0b1, <=2.43.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.4.0 and more Source cves: CVE-2026-107291 Source advisory: SNYK:PYTHON-PYDANTICAI-20583783...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +58 more potentially affected by CVE-2026-107291 via pydantic-ai (>=0.3.4, <=1.107.5)

pydantic-ai PYPI version =0.3.4, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.9.0, =20250930132735.0.0.dev0, =0.1.102, =2.2.0, =0.6.3, =26.0.0, =26.1.1 and more Source cves: CVE-2026-107291 Source advisory: OSV:GHSA-4X9P-G9WM-8Q7F...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +58 more potentially affected by CVE-2026-107291 via pydantic-ai (>=0.3.4, <=1.107.5)

pydantic-ai PYPI version =0.3.4, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.9.0, =20250930132735.0.0.dev0, =0.1.102, =2.2.0, =0.6.3, =26.0.0, =26.1.1 and more Source cves: CVE-2026-107291 Source advisory: GHSA-4X9P-G9WM-8Q7F...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +90 more potentially affected by CVE-2026-107291 via pydantic-ai-slim (>=0.3.4, <=1.107.5)

pydantic-ai-slim PYPI version =0.3.4, =0.41.0, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.1.0, =0.9.0, =1.2.0 - eea-genai-blocks 1.0.0 - eea-genai-core 1.2.0 - eea-genai-summary 1.0.0 and more Source cves: CVE-2026-107291 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20583782...