@appium/base-driver (>=10.3.0, <=10.7.1), @appium/base-plugin (>=3.2.0, <=3.3.2) +19 more potentially affected by CVE-2026-103975 +1 more via @appium/support (>=7.1.0, <=7.2.5)

@appium/support NPM version =7.1.0, =10.3.0, =3.2.0, =2.3.0, =6.0.4, =4.2.0, =4.2.0, =1.1.0, =4.1.0, =2.1.4, =3.0.10, =1.0.0, =1.0.0, =2.107.37, =2.107.37, =2.136.0 - @silakagent/android-runner 0.1.0 and more Source cves: CVE-2026-103975, CVE-2026-30973 Source advisory: GHSA-QFXX-C367-67F8...

bsh-file-validation (>=0.0.4, <=0.0.21), crewai-files (>=1.11.1.dev20260324, <=1.15.28) +4 more potentially affected by CVE-2026-104266 via tinytag (>=2.1.0, <=2.2.1)

tinytag PYPI version =2.1.0, =0.0.4, =1.11.1.dev20260324, =0.95.0, =0.11.12rc1, =1.128.0, =1.137.0 Source cves: CVE-2026-104266 Source advisory: GHSA-24CC-9352-H2PG...

bsh-file-validation (>=0.0.4, <=0.0.21), crewai-files (>=1.11.1.dev20260324, <=1.15.28) +4 more potentially affected by CVE-2026-104266 via tinytag (>=2.1.0, <=2.2.1)

tinytag PYPI version =2.1.0, =0.0.4, =1.11.1.dev20260324, =0.95.0, =0.11.12rc1, =1.128.0, =1.137.0 Source cves: CVE-2026-104266 Source advisory: OSV:GHSA-24CC-9352-H2PG...

abstractagent (>=0.2.0, <=0.3.19), abstractassistant (>=0.4.0, <=0.14.3) +132 more potentially affected by CVE-2026-104250 via unstructured (>=0.5.2, <=0.24.0)

unstructured PYPI version =0.5.2, =0.2.0, =0.4.0, =0.3.0, =0.3.0, =0.1.1, =0.1.0, =0.4.26, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =1.9.2 and more Source cves: CVE-2026-104250 Source advisory: GHSA-V5MQ-3XHG-98M9...

abstractagent (>=0.2.0, <=0.3.19), abstractassistant (>=0.4.0, <=0.14.3) +132 more potentially affected by CVE-2026-104250 via unstructured (>=0.5.2, <=0.24.0)

unstructured PYPI version =0.5.2, =0.2.0, =0.4.0, =0.3.0, =0.3.0, =0.1.1, =0.1.0, =0.4.26, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =1.9.2 and more Source cves: CVE-2026-104250 Source advisory: OSV:GHSA-V5MQ-3XHG-98M9...

@uxfront/layer-app (>=0.1.0, <=0.2.0), docus (>=5.12.2, <=5.12.3) potentially affected by CVE-2026-102527 via nuxt-og-image (6.6.0)

nuxt-og-image NPM version 6.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt-og-image and may be impacted: - @uxfront/layer-app =0.1.0, =5.12.2, =5.12.3 Source cves: CVE-2026-102527 Source advisory: OSV:GHSA-2X6F-RP82-PPMJ...

@uxfront/layer-app (>=0.1.0, <=0.2.0), docus (>=5.12.2, <=5.12.3) potentially affected by CVE-2026-102527 via nuxt-og-image (6.6.0)

nuxt-og-image NPM version 6.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt-og-image and may be impacted: - @uxfront/layer-app =0.1.0, =5.12.2, =5.12.3 Source cves: CVE-2026-102527 Source advisory: GHSA-2X6F-RP82-PPMJ...

better-auth-cloudflare (0.1.0), next-ai-draw-io (0.4.10) potentially affected by CVE-2026-100409 via @opennextjs/cloudflare (>=1.0.1, <=1.14.8)

@opennextjs/cloudflare NPM version =1.0.1, =1.14.8 is affected by a known vulnerability. The following packages have a transitive dependency on @opennextjs/cloudflare and may be impacted: - better-auth-cloudflare 0.1.0 - next-ai-draw-io 0.4.10 Source cves: CVE-2026-100409 Source advisory:...

better-auth-cloudflare (0.1.0), next-ai-draw-io (0.4.10) potentially affected by CVE-2026-100409 via @opennextjs/cloudflare (>=1.0.1, <=1.14.8)

@opennextjs/cloudflare NPM version =1.0.1, =1.14.8 is affected by a known vulnerability. The following packages have a transitive dependency on @opennextjs/cloudflare and may be impacted: - better-auth-cloudflare 0.1.0 - next-ai-draw-io 0.4.10 Source cves: CVE-2026-100409 Source advisory:...

5mghost-rover (>=0.0.1, <=0.0.3), a4ui-agent (0.1.0) +420 more potentially affected by CVE-2026-59951 via mcp (>=2.0.0, <=2.1.1)

mcp PYPI version =2.0.0, =0.0.1, =0.6.0, =0.1.0, =0.1.0a1, =0.32.1, =0.1.0, =0.21.0, =0.8.0, =0.10.0, =0.21.0 and more Source cves: CVE-2026-59951 Source advisory: OSV:GHSA-84M7-P3X7-PCFV...

1claw-crewai-tools (>=0.1.0, <=0.3.4), 1xn-vmcp (>=0.5.2, <=0.6.1) +1518 more potentially affected by CVE-2026-59951 via mcp (>=1.8.0, <=1.29.1)

mcp PYPI version =1.8.0, =0.1.0, =0.5.2, =0.1.1rc0, =0.0.2, =0.2.0, =0.1.0, =0.1.7rc1, =0.1.0, =0.1.2 and more Source cves: CVE-2026-59951 Source advisory: OSV:GHSA-84M7-P3X7-PCFV...

5mghost-rover (>=0.0.1, <=0.0.3), a4ui-agent (0.1.0) +420 more potentially affected by CVE-2026-59951 via mcp (>=2.0.0, <=2.1.1)

mcp PYPI version =2.0.0, =0.0.1, =0.6.0, =0.1.0, =0.1.0a1, =0.32.1, =0.1.0, =0.21.0, =0.8.0, =0.10.0, =0.21.0 and more Source cves: CVE-2026-59951 Source advisory: GHSA-84M7-P3X7-PCFV...

1claw-crewai-tools (>=0.1.0, <=0.3.4), 1xn-vmcp (>=0.5.2, <=0.6.1) +1518 more potentially affected by CVE-2026-59951 via mcp (>=1.8.0, <=1.29.1)

mcp PYPI version =1.8.0, =0.1.0, =0.5.2, =0.1.1rc0, =0.0.2, =0.2.0, =0.1.0, =0.1.7rc1, =0.1.0, =0.1.2 and more Source cves: CVE-2026-59951 Source advisory: GHSA-84M7-P3X7-PCFV...

com.github.junrar:commons-vfs-rar (1.0.0) potentially affected by CVE-2026-97370 via com.github.junrar:junrar (5.0.0)

com.github.junrar:junrar MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - com.github.junrar:commons-vfs-rar 1.0.0 Source cves: CVE-2026-97370 Source advisory: OSV:GHSA-H9H9-2RMF-RVHP...

cloud.testload:jmeter-clickhouse-listener (2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (0.0.1) +99 more potentially affected by CVE-2026-97370 via com.github.junrar:junrar (2.0.0)

com.github.junrar:junrar MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - cloud.testload:jmeter-clickhouse-listener 2.00 - com.bobpaulin.jmeter:aws-include-controller-plugin 0.0.1 -...

com.checkmarx.maven:checkmarx-maven-plugin (9.00.3), com.checkmarx:cx-client-common (>=2021.1.135, <=2023.1.7) +19 more potentially affected by CVE-2026-97370 via com.github.junrar:junrar (1.0.1)

com.github.junrar:junrar MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - com.checkmarx.maven:checkmarx-maven-plugin 9.00.3 - com.checkmarx:cx-client-common =2021.1.135, =20.0.10,...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +645 more potentially affected by CVE-2026-97370 via com.github.junrar:junrar (>=7.4.0, <=7.6.0)

com.github.junrar:junrar MAVEN version =7.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-97370 Source advisory: GHSA-H9H9-2RMF-RVHP...

com.checkmarx.jenkins:checkmarx (>=8.90.1, <=8.90.4), com.checkmarx:cx-client-common (>=8.90.3, <=8.90.5) +14 more potentially affected by CVE-2026-97370 via com.github.junrar:junrar (3.0.0)

com.github.junrar:junrar MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - com.checkmarx.jenkins:checkmarx =8.90.1, =8.90.3, =2.1.3, =3.1.0, =2.1.3, =2.1.3, =3.1.0, =2.1.5, =2.1.10,...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +645 more potentially affected by CVE-2026-97370 via com.github.junrar:junrar (>=7.4.0, <=7.6.0)

com.github.junrar:junrar MAVEN version =7.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-97370 Source advisory: OSV:GHSA-H9H9-2RMF-RVHP...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +415 more potentially affected by CVE-2026-97370 via com.github.junrar:junrar (0.7)

com.github.junrar:junrar MAVEN version 0.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 - ai.mattmann.mnemosyne:cas-p...

ai.stainless:grails-tika (0.1.0), com.antkorwin:mimetype (>=0.1, <=0.2) +113 more potentially affected by CVE-2026-97370 via com.github.junrar:junrar (4.0.0)

com.github.junrar:junrar MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - ai.stainless:grails-tika 0.1.0 - com.antkorwin:mimetype =0.1, =0.1.2, =0.2.0, =0.7.0 and more Source cves:...

astrapi-backup (>=26.8.1, <=26.8.16), b9gemyaeix (>=4.14.0, <=4.14.1) +5 more potentially affected by CVE-2026-62268 via borgbackup (>=1.1.13, <=1.4.4)

borgbackup PYPI version =1.1.13, =26.8.1, =4.14.0, =0.1.3.dev1, =0.12.0, =4.9.0, =2026.7.1 - weblate-fedora-messaging 0.6.0 Source cves: CVE-2026-62268 Source advisory: GHSA-GFP8-W835-V44J...

astrapi-backup (>=26.8.1, <=26.8.16), b9gemyaeix (>=4.14.0, <=4.14.1) +5 more potentially affected by CVE-2026-62268 via borgbackup (>=1.1.13, <=1.4.4)

borgbackup PYPI version =1.1.13, =26.8.1, =4.14.0, =0.1.3.dev1, =0.12.0, =4.9.0, =2026.7.1 - weblate-fedora-messaging 0.6.0 Source cves: CVE-2026-62268 Source advisory: OSV:GHSA-GFP8-W835-V44J...

argus-server (>=1.23.0, <=1.34.1), bitcaster (>=2.1.0rc1, <=2.2.0) +14 more potentially affected by CVE-2026-62322 via social-auth-core (4.8.7)

social-auth-core PYPI version 4.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argus-server =1.23.0, =2.1.0rc1, =2.4.6, =2.0.9, =1.0.1, =0.16.0, =2024.1.0, =1.62.0, =5.7.0, =0.10.0, =5.6.0, =0.1.0, =0.12.0 a...

galaxy-data (>=20.9.1, <=21.9.0), umap-project (>=1.2.0, <=1.2.1) potentially affected by CVE-2026-62322 via social-auth-core (3.3.0)

social-auth-core PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy-data =20.9.1, =1.2.0, =1.2.1 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

masonite-socialite (>=0.0.1, <=0.0.5), richie (>=2.0.0b9, <=2.7.1) potentially affected by CVE-2026-62322 via social-auth-core (3.2.0)

social-auth-core PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - masonite-socialite =0.0.1, =2.0.0b9, =2.7.1 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

linhub (0.1.1) potentially affected by CVE-2026-62322 via social-auth-core (4.4.1)

social-auth-core PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - linhub 0.1.1 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-62322 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

mycms (>=0.1.9, <=0.1.12) potentially affected by CVE-2026-62322 via social-auth-core (3.3.3)

social-auth-core PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - mycms =0.1.9, =0.1.12 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

misago (>=0.39.0, <=0.39.6) potentially affected by CVE-2026-62322 via social-auth-core (4.5.1)

social-auth-core PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - misago =0.39.0, =0.39.6 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

galaxy (>=25.1.0, <=25.1.2), galaxy-ng (>=4.8.0, <=4.9.2) +6 more potentially affected by CVE-2026-62322 via social-auth-core (4.7.0)

social-auth-core PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy =25.1.0, =4.8.0, =0.9.0, =1.40.0, =1.111.0, =1.2.6, =4.16.3, =5.5.5 - weblate-fedora-messaging 0.6.0 Source cves:...

galaxy-app (>=23.0.1, <=24.0.3), galaxy-data (>=22.1.1, <=24.1.3) +13 more potentially affected by CVE-2026-62322 via social-auth-core (4.0.3)

social-auth-core PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy-app =23.0.1, =22.1.1, =23.0.1, =23.0.2, =21.9.0, =23.2.1, =0.4.0, =0.0.1, =0.13.0, =0.6.0, =0.1.0, =0.8.0, =0.1.0, =0.9.1...

b9gemyaeix (>=4.14.0, <=4.14.1), edx-oauth2-wordpress-backend (>=1.0.7, <=1.0.8) +15 more potentially affected by CVE-2026-62322 via social-auth-core (4.3.0)

social-auth-core PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - b9gemyaeix =4.14.0, =1.0.7, =1.0.0, =1.0.0, =1.0.0rc1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.5.0rc4, =4.0.0rc6,...

rest-social-auth (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-62322 via social-auth-core (0.2.1)

social-auth-core PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - rest-social-auth =1.0.0, =1.1.0 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

misago (>=0.37.0, <=0.39.0b1) potentially affected by CVE-2026-62322 via social-auth-core (4.5.0)

social-auth-core PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - misago =0.37.0, =0.39.0b1 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

edx-oauth2-wordpress-backend (>=1.0.0, <=1.0.4), richie (>=2.13.0, <=2.14.1) +2 more potentially affected by CVE-2026-62322 via social-auth-core (4.2.0)

social-auth-core PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-oauth2-wordpress-backend =1.0.0, =2.13.0, =14.0.0, =4.11.0, =4.12.2 Source cves: CVE-2026-62322 Source advisory:...

umap-project (3.1.0) potentially affected by CVE-2026-62322 via social-auth-core (4.6.1)

social-auth-core PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project 3.1.0 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

argilla-server (>=1.24.0rc3, <=2.8.0), extralit (0.1.0a5) +2 more potentially affected by CVE-2026-62322 via social-auth-core (4.5.6)

social-auth-core PYPI version 4.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argilla-server =1.24.0rc3, =0.2.0, =3.0.0, =3.4.0 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

gophers (>=0.0.1, <=0.0.2), gupy-framework (>=0.0.1, <=0.5.8) +2 more potentially affected by CVE-2026-62322 via social-auth-core (4.5.4)

social-auth-core PYPI version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - gophers =0.0.1, =0.0.1, =0.1.1, =2.2.0, =2.9.3 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

umap-project (>=2.0.0a3, <=2.2.0b0) potentially affected by CVE-2026-62322 via social-auth-core (4.5.3)

social-auth-core PYPI version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =2.0.0a3, =2.2.0b0 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

django-auth0-user (>=0.15.0, <=0.16.5), django-rest-social-email-allauth (0.1.0) +6 more potentially affected by CVE-2026-62322 via social-auth-core (3.4.0)

social-auth-core PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - django-auth0-user =0.15.0, =3.0.0, =4.4.0a1, =0.2.0, =2.0.0, =0.0.5, =1.0.2 - social-auth-mitxpro 0.1.0 Source cves:...

edx-auth-backends (>=1.0.1, <=2.0.2), pixelcms-server (>=0.4.1, <=0.4.2) +5 more potentially affected by CVE-2026-62322 via social-auth-core (1.7.0)

social-auth-core PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-auth-backends =1.0.1, =0.4.1, =1.2.0, =0.0.2, =0.2.0, =0.8.3, =1.0.0rc8 Source cves: CVE-2026-62322 Source advisory:...

umap-project (>=3.4.1, <=3.5.0) potentially affected by CVE-2026-62322 via social-auth-core (4.8.1)

social-auth-core PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =3.4.1, =3.5.0 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

django-globus-portal-framework (>=0.3.23, <=0.3.24), unicef-security (0.7.0) potentially affected by CVE-2026-62322 via social-auth-core (4.0.2)

social-auth-core PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - django-globus-portal-framework =0.3.23, =0.3.24 - unicef-security 0.7.0 Source cves: CVE-2026-62322 Source advisory:...

umap-project (>=1.1.0, <=1.1.2) potentially affected by CVE-2026-62322 via social-auth-core (3.1.0)

social-auth-core PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =1.1.0, =1.1.2 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

richie (>=2.8.0, <=2.12.0), weblate (>=4.9.0, <=4.10.1) potentially affected by CVE-2026-62322 via social-auth-core (4.1.0)

social-auth-core PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - richie =2.8.0, =4.9.0, =4.10.1 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

social-auth-liu (0.0.1) potentially affected by CVE-2026-62322 via social-auth-core (1.2.0)

social-auth-core PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - social-auth-liu 0.0.1 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

umap-project (>=1.0.0rc9, <=1.0.0) potentially affected by CVE-2026-62322 via social-auth-core (3.0.0)

social-auth-core PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =1.0.0rc9, =1.0.0 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

umap-project (>=0.8.0, <=0.8.2) potentially affected by CVE-2026-62322 via social-auth-core (1.1.0)

social-auth-core PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =0.8.0, =0.8.2 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

umap-project (>=1.3.0a0, <=1.14.0a5) potentially affected by CVE-2026-62322 via social-auth-core (4.4.2)

social-auth-core PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =1.3.0a0, =1.14.0a5 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...