umap-project (>=2.0.0a0, <=2.0.0a2) potentially affected by CVE-2026-62322 via social-auth-core (4.5.2)

social-auth-core PYPI version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =2.0.0a0, =2.0.0a2 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

umap-project (>=1.2.2, <=1.2.3) potentially affected by CVE-2026-62322 via social-auth-core (3.3.2)

social-auth-core PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =1.2.2, =1.2.3 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

netbox-types (>=4.5.4, <=4.6.5), umap-project (>=3.6.2, <=3.7.3) potentially affected by CVE-2026-62322 via social-auth-core (4.8.5)

social-auth-core PYPI version 4.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - netbox-types =4.5.4, =3.6.2, =3.7.3 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

argus-notification-msteams (0.5.1), argus-server (>=1.2.1, <=1.22.1) +78 more potentially affected by CVE-2026-62322 via social-auth-core (4.9.1)

social-auth-core PYPI version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argus-notification-msteams 0.5.1 - argus-server =1.2.1, =1.30.0, =1.234.0, =0.4.3, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0,...

galaxy (>=25.0.1, <=25.0.4) potentially affected by CVE-2026-62322 via social-auth-core (4.6.0)

social-auth-core PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy =25.0.1, =25.0.4 Source cves: CVE-2026-62322 Source advisory: OSV:GHSA-526J-582W-7FM9...

@adula/kit (>=0.2.0-alpha.1, <=1.2.0), @dbu6/app (>=0.1.0, <=0.2.1) +4 more potentially affected by CVE-2026-111172 via @casl/ability (>=7.0.0, <=7.0.1)

@casl/ability NPM version =7.0.0, =0.2.0-alpha.1, =0.1.0, =0.1.0, =0.0.0, =0.149.0, =2.0.0, =2.1.0 Source cves: CVE-2026-111172 Source advisory: MEND:CVE-2026-111172...

@age.nt/engine (0.8.1), @age.nt/nt (0.8.1) +11 more potentially affected by CVE-2026-87029 via undici (>=8.12.0, <=8.12.1)

undici NPM version =8.12.0, =2.2.22, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.9.0, =0.1.0, =0.8.4, =0.1.0, =0.1.1 Source cves: CVE-2026-87029 Source advisory:...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai-sdk-letta/server (>=0.20.0, <=0.23.0) +157 more potentially affected by CVE-2026-87029 via undici (7.30.0)

undici NPM version 7.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on undici and may be impacted: - @agent-harness-experimental/workflow =0.0.1, =0.20.0, =0.1.0, =0.3.2, =0.0.1, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7,...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +137 more potentially affected by CVE-2026-62322 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-62322 Source advisory: MEND:CVE-2026-62322...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2230 more potentially affected by CVE-2026-109932 via undici (>=6.0.0, <=6.29.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =2.1.1 and more Source cves: CVE-2026-109932 Source advisory: MEND:CVE-2026-109932...

@01.software/cli (>=0.1.1, <=0.10.3), @01.software/sdk (>=0.0.1-251008.90016, <=0.29.0) +3002 more potentially affected by CVE-2026-109932 via undici (>=7.0.0, <=7.30.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.4.0, =1.0.0, =0.6.0, =0.1.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.18.2 - @abcnews/components-builder 1.2.0 and more Source cves: CVE-2026-109932 Source advisory: MEND:CVE-2026-109932...

2pi-agent (0.3.0), 3xhaustpi (>=0.1.3, <=0.2.5) +2165 more potentially affected by CVE-2026-109932 via undici (>=8.0.0, <=8.12.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.8, =0.3.5, =1.0.0, =0.2.0, =0.0.1, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a and more...

@adonisjs/core (>=5.0.5-canary-rc-1, <=6.21.0), @akago/akago_backend_commands (>=1.0.0, <=1.2.8) +53 more potentially affected by CVE-2026-104150 via @adonisjs/http-server (>=5.12.0, <=7.8.1)

@adonisjs/http-server NPM version =5.12.0, =5.0.5-canary-rc-1, =1.0.0, =1.0.1, =1.0.0, =0.0.3, =1.0.0, =1.0.0, =1.0.3, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =1.0.3, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-104150 Source advisory: MEND:CVE-2026-104150...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai-sdk-letta/server (>=0.20.0, <=0.23.0) +157 more potentially affected by CVE-2026-87018 via undici (7.30.0)

undici NPM version 7.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on undici and may be impacted: - @agent-harness-experimental/workflow =0.0.1, =0.20.0, =0.1.0, =0.3.2, =0.0.1, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7,...

@age.nt/engine (0.8.1), @age.nt/nt (0.8.1) +11 more potentially affected by CVE-2026-87018 via undici (>=8.12.0, <=8.12.1)

undici NPM version =8.12.0, =2.2.22, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.9.0, =0.1.0, =0.8.4, =0.1.0, =0.1.1 Source cves: CVE-2026-87018 Source advisory:...

@8medusa/medusa-oas-cli (>=2.7.0, <=2.12.8), @apify/openapi (>=0.0.29, <=0.0.123) +91 more potentially affected by CVE-2026-87018 via undici (6.29.0)

undici NPM version 6.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on undici and may be impacted: - @8medusa/medusa-oas-cli =2.7.0, =0.0.29, =1.0.7, =1.0.1, =2.4.0, =5.3.0-beta.0, =0.1.55-beta.2, =0.6.6-beta.0, =2.3.1, =1.0.6, =1.3.1, =6.1.2-beta.1...

au.gov.qld.services.selenium:selenium-helper (>=4.46.0.001, <=4.46.0.002), com.nordstrom.ui-tools:htmlunit-remote (4.46.0) +5 more potentially affected by CVE-2026-104828 via org.htmlunit:neko-htmlunit (5.3.0)

org.htmlunit:neko-htmlunit MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.htmlunit:neko-htmlunit and may be impacted: - au.gov.qld.services.selenium:selenium-helper =4.46.0.001, =26.8.0, =26.8.0, =26.8.0, =26.8.1 -...

@8medusa/medusa-oas-cli (>=2.7.0, <=2.12.8), @apify/openapi (>=0.0.29, <=0.0.123) +91 more potentially affected by CVE-2026-109383 via undici (6.29.0)

undici NPM version 6.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on undici and may be impacted: - @8medusa/medusa-oas-cli =2.7.0, =0.0.29, =1.0.7, =1.0.1, =2.4.0, =5.3.0-beta.0, =0.1.55-beta.2, =0.6.6-beta.0, =2.3.1, =1.0.6, =1.3.1, =6.1.2-beta.1...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai-sdk-letta/server (>=0.20.0, <=0.23.0) +157 more potentially affected by CVE-2026-109383 via undici (7.30.0)

undici NPM version 7.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on undici and may be impacted: - @agent-harness-experimental/workflow =0.0.1, =0.20.0, =0.1.0, =0.3.2, =0.0.1, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7,...

@age.nt/engine (0.8.1), @age.nt/nt (0.8.1) +11 more potentially affected by CVE-2026-109383 via undici (>=8.12.0, <=8.12.1)

undici NPM version =8.12.0, =2.2.22, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.9.0, =0.1.0, =0.8.4, =0.1.0, =0.1.1 Source cves: CVE-2026-109383 Source advisory:...

nci-cidc-api-modules (>=1.5.12, <=1.5.16) potentially affected by CVE-2026-102946 via joserfc (1.7.3)

joserfc PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on joserfc and may be impacted: - nci-cidc-api-modules =1.5.12, =1.5.16 Source cves: CVE-2026-102946 Source advisory: MEND:CVE-2026-102946...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai-sdk-letta/server (>=0.20.0, <=0.23.0) +157 more potentially affected by CVE-2026-109829 via undici (7.30.0)

undici NPM version 7.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on undici and may be impacted: - @agent-harness-experimental/workflow =0.0.1, =0.20.0, =0.1.0, =0.3.2, =0.0.1, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7,...

@age.nt/engine (0.8.1), @age.nt/nt (0.8.1) +11 more potentially affected by CVE-2026-109829 via undici (>=8.12.0, <=8.12.1)

undici NPM version =8.12.0, =2.2.22, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.9.0, =0.1.0, =0.8.4, =0.1.0, =0.1.1 Source cves: CVE-2026-109829 Source advisory:...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai-sdk-letta/server (>=0.20.0, <=0.23.0) +157 more potentially affected by CVE-2026-109841 via undici (7.30.0)

undici NPM version 7.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on undici and may be impacted: - @agent-harness-experimental/workflow =0.0.1, =0.20.0, =0.1.0, =0.3.2, =0.0.1, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7,...

@age.nt/engine (0.8.1), @age.nt/nt (0.8.1) +11 more potentially affected by CVE-2026-109841 via undici (>=8.12.0, <=8.12.1)

undici NPM version =8.12.0, =2.2.22, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.0.0-next.223530078e805974a41e729efe18f1c3fae2a1ff, =0.9.0, =0.1.0, =0.8.4, =0.1.0, =0.1.1 Source cves: CVE-2026-109841 Source advisory:...

nl.nl-portal:berichten (>=3.0.0, <=3.0.2), nl.nl-portal:openproduct (>=3.0.0, <=3.0.2) +2 more potentially affected by CVE-2026-54683 via nl.nl-portal:documenten-api (>=0.0.0-test20250707-0, <=3.0.2)

nl.nl-portal:documenten-api MAVEN version =0.0.0-test20250707-0, =3.0.0, =3.0.0, =0.0.0-test20250707-0, =0.0.0-test20250707-0, =3.0.2 Source cves: CVE-2026-54683 Source advisory: MEND:CVE-2026-54683...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +1079 more potentially affected by CVE-2026-97370 via com.github.junrar:junrar (>=0.7, <=7.6.0)

com.github.junrar:junrar MAVEN version =0.7, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.9.2 - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 - ai.mattmann.mnemosyne:cas-pge 1.11.0 - ai.mattmann.mnemosyne:cas-product 1.11...

@01.software/cli (>=0.1.1, <=0.10.3), @01.software/sdk (>=0.0.1-251008.90016, <=0.29.0) +3002 more potentially affected by CVE-2026-109924 via undici (>=7.0.0, <=7.30.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.4.0, =1.0.0, =0.6.0, =0.1.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.18.2 - @abcnews/components-builder 1.2.0 and more Source cves: CVE-2026-109924 Source advisory: MEND:CVE-2026-109924...

2pi-agent (0.3.0), 3xhaustpi (>=0.1.3, <=0.2.5) +2165 more potentially affected by CVE-2026-109924 via undici (>=8.0.0, <=8.12.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.8, =0.3.5, =1.0.0, =0.2.0, =0.0.1, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a and more...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2220 more potentially affected by CVE-2026-109924 via undici (>=6.5.0, <=6.29.0)

undici NPM version =6.5.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =2.1.1 and more Source cves: CVE-2026-109924 Source advisory: MEND:CVE-2026-109924...

2pi-agent (0.3.0), 3xhaustpi (>=0.1.3, <=0.2.5) +2165 more potentially affected by CVE-2026-109869 via undici (>=8.0.0, <=8.12.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.8, =0.3.5, =1.0.0, =0.2.0, =0.0.1, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a and more...

@8medusa/medusa-oas-cli (>=2.7.0, <=2.12.8), @aido.ai/proxima (>=0.2.8, <=0.2.14) +274 more potentially affected by CVE-2026-109869 via undici (>=6.23.0, <=6.29.0)

undici NPM version =6.23.0, =2.7.0, =0.2.8, =0.25.0, =5.52.1-fa.2, =5.52.1-fa.5, =0.1.0-rc.27, =0.1.0-rc.27, =0.0.29, =1.0.7, =1.0.1, =0.29.0, =2.4.0, =2.4.21 and more Source cves: CVE-2026-109869 Source advisory: MEND:CVE-2026-109869...

@01.software/cli (>=0.1.1, <=0.10.3), @01.software/sdk (>=0.1.0-dev.260119.0a66443, <=0.29.0) +2787 more potentially affected by CVE-2026-109869 via undici (>=7.18.0, <=7.30.0)

undici NPM version =7.18.0, =0.1.1, =0.1.0-dev.260119.0a66443, =0.4.0, =1.0.0, =0.6.0, =0.1.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.18.2 - @abcnews/components-builder 1.2.0 and more Source cves: CVE-2026-109869 Source advisory: MEND:CVE-2026-1098...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +92 more potentially affected by CVE-2026-102740 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-102740 Source advisory: MEND:CVE-2026-102740...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2862 more potentially affected by CVE-2026-102740 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.0)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-102740 Source advisory: MEND:CVE-2026-102740...

bsh-file-validation (>=0.0.4, <=0.0.21), crewai-files (>=1.11.1.dev20260324, <=1.15.28) +4 more potentially affected by CVE-2026-104266 via tinytag (>=2.1.0, <=2.2.1)

tinytag PYPI version =2.1.0, =0.0.4, =1.11.1.dev20260324, =0.95.0, =0.11.12rc1, =1.128.0, =1.137.0 Source cves: CVE-2026-104266 Source advisory: MEND:CVE-2026-104266...

better-auth-cloudflare (0.1.0), next-ai-draw-io (0.4.10) potentially affected by CVE-2026-100409 via @opennextjs/cloudflare (>=1.0.1, <=1.14.8)

@opennextjs/cloudflare NPM version =1.0.1, =1.14.8 is affected by a known vulnerability. The following packages have a transitive dependency on @opennextjs/cloudflare and may be impacted: - better-auth-cloudflare 0.1.0 - next-ai-draw-io 0.4.10 Source cves: CVE-2026-100409 Source advisory:...

@uxfront/layer-app (>=0.1.0, <=0.2.0), docus (>=5.12.2, <=5.12.3) potentially affected by CVE-2026-102527 via nuxt-og-image (6.6.0)

nuxt-og-image NPM version 6.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt-og-image and may be impacted: - @uxfront/layer-app =0.1.0, =5.12.2, =5.12.3 Source cves: CVE-2026-102527 Source advisory: MEND:CVE-2026-102527...

changedetection-io (>=0.38.2, <=0.39.17.2) potentially affected by CVE-2026-59180 via apprise (0.9.9)

apprise PYPI version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on apprise and may be impacted: - changedetection-io =0.38.2, =0.39.17.2 Source cves: CVE-2026-59180 Source advisory: OSV:PYSEC-2026-4200...

apprise-transactions (1.0.0) potentially affected by CVE-2026-59180 via apprise (0.8.5)

apprise PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on apprise and may be impacted: - apprise-transactions 1.0.0 Source cves: CVE-2026-59180 Source advisory: OSV:PYSEC-2026-4200...

target-apprise (0.0.1) potentially affected by CVE-2026-59180 via apprise (0.9.7)

apprise PYPI version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on apprise and may be impacted: - target-apprise 0.0.1 Source cves: CVE-2026-59180 Source advisory: OSV:PYSEC-2026-4200...

changedetection-io (>=0.39.13, <=0.39.14.1) potentially affected by CVE-2026-59180 via apprise (0.9.8.3)

apprise PYPI version 0.9.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on apprise and may be impacted: - changedetection-io =0.39.13, =0.39.14.1 Source cves: CVE-2026-59180 Source advisory: OSV:PYSEC-2026-4200...

better-social-notifications (>=1.0.0, <=20260529145048.0.0.dev0), changedetection-io (>=0.39.18, <=0.60.3) +20 more potentially affected by CVE-2026-59180 via apprise (>=1.0.0, <=1.10.0)

apprise PYPI version =1.0.0, =1.0.0, =0.39.18, =1.0.0, =0.1.0, =0.95.0, =1.3.0, =0.8.0, =0.3.0rc1, =0.0.6, =0.0.25 - proxy-rotator-toolkit 0.0.26 and more Source cves: CVE-2026-59180 Source advisory: OSV:PYSEC-2026-4200...

photfun (>=0.1.0, <=0.1.15), pycompound (>=0.0.9, <=0.1.22) +4 more potentially affected by CVE-2026-108258 via shiny (1.4.0)

shiny PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on shiny and may be impacted: - photfun =0.1.0, =0.0.9, =0.0.1a0, =0.2.1, =0.1.2, =0.1.3 Source cves: CVE-2026-108258 Source advisory: OSV:PYSEC-2026-4300...

airo-camera-toolkit (>=2025.4.0, <=2025.7.1), airo-dataset-tools (>=2025.4.0, <=2026.5.0) +35 more potentially affected by CVE-2026-107727 via strawberry-graphql (>=0.312.4, <=0.327.1)

strawberry-graphql PYPI version =0.312.4, =2025.4.0, =2025.4.0, =0.9.0, =26.4.0rc1, =0.1.0a1, =0.2.0, =1.0.1, =0.1.0, =1.17.0, =0.1.0, =0.0.246, =2.0.0, =0.0.1a0, =0.1.26, =1.1.3, =2.4.1 and more Source cves: CVE-2026-107727 Source advisory: OSV:PYSEC-2026-4302...

voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-107717 via banks (2.2.0)

banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-107717 Source advisory: OSV:PYSEC-2026-4202...

voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-107716 via banks (2.2.0)

banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-107716 Source advisory: OSV:PYSEC-2026-4201...

airo-camera-toolkit (>=2025.4.0, <=2025.7.1), airo-dataset-tools (>=2025.4.0, <=2026.5.0) +77 more potentially affected by CVE-2026-107728 via strawberry-graphql (>=0.217.0, <=0.325.0)

strawberry-graphql PYPI version =0.217.0, =2025.4.0, =2025.4.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =25.13.0rc1, =1.2.0, =0.1.0a1, =0.2.0, =1.0.1, =2.2.1 - dictatorgenai 0.1.0 and more Source cves: CVE-2026-107728 Source advisory: OSV:PYSEC-2026-4303...

agency-swarm (>=1.10.0, <=1.11.0), appai (1.0.1) +7 more potentially affected by CVE-2026-107377 via datamodel-code-generator (>=0.59.1, <=0.76.2)

datamodel-code-generator PYPI version =0.59.1, =1.10.0, =0.61.0, =0.7.0, =1.3.0, =0.1.1, =0.5.0, =0.1.0, =0.2.0 Source cves: CVE-2026-107377 Source advisory: OSV:PYSEC-2026-4205...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +70 more potentially affected by CVE-2026-107286 via pydantic-ai-slim (>=2.10.0, <=2.52.0)

pydantic-ai-slim PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =0.2.2 - bonsai-core 0.1.0 and more Source cves: CVE-2026-107286 Source advisory: OSV:PYSEC-2026-4285...