aana (>=0.2.1, <=0.2.2.2), ado-vllm-performance (>=1.2.2, <=1.3.3) +119 more potentially affected by CVE-2026-116181 via vllm (>=0.4.1, <=0.28.0)

vllm PYPI version =0.4.1, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =1.0.1rc1, =1.1.8 - contrastive-lm 0.1.0 and more Source cves: CVE-2026-116181 Source advisory: MEND:CVE-2026-116181...

aana (>=0.2.1, <=0.2.2.2), ado-vllm-performance (>=1.2.2, <=1.3.3) +97 more potentially affected by CVE-2026-116175 via vllm (>=0.5.5, <=0.23.0)

vllm PYPI version =0.5.5, =0.2.1, =1.2.2, =2.3.5.dev0, =0.2.2, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =1.0.1rc1, =0.2.13, =0.1.0, =0.1.0a0, =0.0.2, =0.2.31 and more Source cves: CVE-2026-116175 Source advisory: MEND:CVE-2026-116175...

@openinc/parse-server-opendash (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-116165 via parse-server (>=9.6.0-alpha.37, <=9.10.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.2.0 Source cves: CVE-2026-116165 Source advisory: MEND:CVE-2026-116165...

@openinc/parse-server-opendash (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-116164 via parse-server (>=9.6.0-alpha.37, <=9.10.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.2.0 Source cves: CVE-2026-116164 Source advisory: MEND:CVE-2026-116164...

@openinc/parse-server-opendash (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-116163 via parse-server (>=9.6.0-alpha.37, <=9.10.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.2.0 Source cves: CVE-2026-116163 Source advisory: MEND:CVE-2026-116163...

@openinc/parse-server-opendash (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-116161 via parse-server (>=9.6.0-alpha.37, <=9.10.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.2.0 Source cves: CVE-2026-116161 Source advisory: MEND:CVE-2026-116161...

@openinc/parse-server-opendash (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-116162 via parse-server (>=9.6.0-alpha.37, <=9.10.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.2.0 Source cves: CVE-2026-116162 Source advisory: MEND:CVE-2026-116162...

@eventcatalog/cli (>=0.1.0, <=1.1.0-beta.2), @eventcatalog/core (>=3.12.6-beta.2, <=5.0.0-beta.36) +10 more potentially affected by CVE-2026-116046 via @eventcatalog/sdk (>=2.2.7, <=2.30.0-beta.2)

@eventcatalog/sdk NPM version =2.2.7, =0.1.0, =3.12.6-beta.2, =0.1.1, =5.1.2, =7.7.1, =0.6.1, =1.0.1, =0.0.2, =1.0.0, =0.18.14, =0.6.14, =0.6.19 Source cves: CVE-2026-116046 Source advisory: MEND:CVE-2026-116046...

atsfill (>=0.0.4.dev96, <=0.0.4.dev122), displayrws (>=0.1.3, <=0.1.4) +15 more potentially affected by CVE-2026-112907 via filelock (>=4.0.0, <=4.2.0)

filelock PYPI version =4.0.0, =0.0.4.dev96, =0.1.3, =5.4.2, =2026.10.0b1, =0.10.43, =0.10.43, =7.48.17, =0.10.43, =1.2.7, =0.2.1, =0.3.0, =2.2.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-112907 Source advisory: MEND:CVE-2026-112907...

atsfill (>=0.0.4.dev96, <=0.0.4.dev122), displayrws (>=0.1.3, <=0.1.4) +15 more potentially affected by CVE-2026-112913 via filelock (>=4.0.0, <=4.2.0)

filelock PYPI version =4.0.0, =0.0.4.dev96, =0.1.3, =5.4.2, =2026.10.0b1, =0.10.43, =0.10.43, =7.48.17, =0.10.43, =1.2.7, =0.2.1, =0.3.0, =2.2.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-112913 Source advisory: MEND:CVE-2026-112913...

2adif (0.2.1), 3robotics (0.0.1) +1496 more potentially affected by CVE-2026-83813 via twisted (>=26.4.0rc2, <=26.4.0)

twisted PYPI version =26.4.0rc2, =0.0.12, =3.0.9, =3.0.0, =0.1.0, =23.12.0rc1, =0.10.0, =0.0.1, =3.0.0, =0.1.4, =1.0.0, =1.0.2 - aha-scrapyd 1.3.0 and more Source cves: CVE-2026-83813 Source advisory: SNYK:PYTHON-TWISTED-21692668...

agent-api-server (>=2.1.7, <=2.1.13), alphasix-axiom (>=1.1.3, <=1.1.22) +19 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-postgres (>=3.0.0, <=3.1.2)

langgraph-checkpoint-postgres PYPI version =3.0.0, =2.1.7, =1.1.3, =1.9.0, =0.1.3, =0.1.18, =0.1.57, =0.13.0.post2, =0.13.0.post2, =0.1.0, =0.8.0, =0.11.1, =0.11.1, =1.0.0.dev7, =3.1.2 and more Source cves: CVE-2026-115883 Source advisory: SNYK:PYTHON-LANGGRAPHCHECKPOINTPOSTGRES-21663385...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +15 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.1)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.1.0, =0.2.0b1, =0.0.1, =2.0.0, =0.1.22, =0.1.61 and more Source cves: CVE-2026-115883 Source advisory: SNYK:PYTHON-LANGGRAPHCHECKPOINTSQLITE-21663386...

azureml-acft-image-components (>=0.0.7, <=0.0.45), azureml-evaluate-mlflow (>=0.0.0, <=0.0.91) +14 more potentially affected by CVE-2026-115886 via mlflow (>=3.12.0, <=3.16.1)

mlflow PYPI version =3.12.0, =0.0.7, =0.0.0, =0.9.1, =0.6.0, =0.2.9, =1.4.0, =0.0.4, =1.0.8, =0.1.0, =0.1.0, =0.1.3 and more Source cves: CVE-2026-115886 Source advisory: SNYK:PYTHON-MLFLOW-21691239...

swe-forge (>=0.2.2, <=0.2.3) potentially affected by CVE-2026-115885 via langgraph-cli (0.4.27)

langgraph-cli PYPI version 0.4.27 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-cli and may be impacted: - swe-forge =0.2.2, =0.2.3 Source cves: CVE-2026-115885 Source advisory: SNYK:PYTHON-LANGGRAPHCLI-21663377...

07-calito-router (>=0.0.2, <=0.0.4), @01.software/cli (>=0.3.0, <=0.10.3) +938 more potentially affected by CVE-2026-115895 via happy-dom (>=17.1.0, <=21.0.3)

happy-dom NPM version =17.1.0, =0.0.2, =0.3.0, =0.4.0, =0.45.2, =0.2.0, =0.2.0, =0.1.5, =0.1.0, =0.2.1 and more Source cves: CVE-2026-115895 Source advisory: SNYK:JS-HAPPYDOM-21691240...

atsfill (>=0.0.4.dev96, <=0.0.4.dev122), lilbee (0.6.90b449) +1 more potentially affected by CVE-2026-112937 via filelock (>=4.1.1, <=4.2.0)

filelock PYPI version =4.1.1, =0.0.4.dev96, =0.2.1, =0.2.2 Source cves: CVE-2026-112937 Source advisory: GHSA-JQC4-5CVW-7W85...

atsfill (>=0.0.4.dev96, <=0.0.4.dev122), lilbee (0.6.90b449) +1 more potentially affected by CVE-2026-112937 via filelock (>=4.1.1, <=4.2.0)

filelock PYPI version =4.1.1, =0.0.4.dev96, =0.2.1, =0.2.2 Source cves: CVE-2026-112937 Source advisory: OSV:GHSA-JQC4-5CVW-7W85...

0din-litellm-shield (>=0.2.0, <=0.3.0), 0token (>=0.1.0, <=0.4.0) +6077 more potentially affected by CVE-2026-112913 via filelock (>=3.20.4, <=4.2.0)

filelock PYPI version =3.20.4, =0.2.0, =0.1.0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.4.2 and more Source cves: CVE-2026-112913 Source advisory: SNYK:PYTHON-FILELOCK-21689161...

0din-litellm-shield (>=0.2.0, <=0.3.0), 0token (>=0.1.0, <=0.4.0) +6077 more potentially affected by CVE-2026-112913 via filelock (>=3.20.4, <=4.2.0)

filelock PYPI version =3.20.4, =0.2.0, =0.1.0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.4.2 and more Source cves: CVE-2026-112913 Source advisory: GHSA-9VHV-JXWW-XFM5...

0din-litellm-shield (>=0.2.0, <=0.3.0), 0token (>=0.1.0, <=0.4.0) +6077 more potentially affected by CVE-2026-112913 via filelock (>=3.20.4, <=4.2.0)

filelock PYPI version =3.20.4, =0.2.0, =0.1.0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.4.2 and more Source cves: CVE-2026-112913 Source advisory: OSV:GHSA-9VHV-JXWW-XFM5...

0din-litellm-shield (>=0.2.0, <=0.3.0), 0token (>=0.1.0, <=0.4.0) +6071 more potentially affected by CVE-2026-112907 via filelock (>=3.24.1, <=4.2.0)

filelock PYPI version =3.24.1, =0.2.0, =0.1.0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.4.2 and more Source cves: CVE-2026-112907 Source advisory: GHSA-567Q-5QVW-PF92...

0din-litellm-shield (>=0.2.0, <=0.3.0), 0token (>=0.1.0, <=0.4.0) +6071 more potentially affected by CVE-2026-112907 via filelock (>=3.24.1, <=4.2.0)

filelock PYPI version =3.24.1, =0.2.0, =0.1.0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.4.2 and more Source cves: CVE-2026-112907 Source advisory: OSV:GHSA-567Q-5QVW-PF92...

0din-litellm-shield (>=0.2.0, <=0.3.0), 0token (>=0.1.0, <=0.4.0) +6071 more potentially affected by CVE-2026-112907 via filelock (>=3.24.1, <=4.2.0)

filelock PYPI version =3.24.1, =0.2.0, =0.1.0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.4.2 and more Source cves: CVE-2026-112907 Source advisory: SNYK:PYTHON-FILELOCK-21689162...

chemscad (2.0.3), pcapprocessor (0.1.0) +3 more potentially affected by CVE-2026-113717 via virtualenv (20.8.1)

virtualenv PYPI version 20.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chemscad 2.0.3 - pcapprocessor 0.1.0 - pickley =3.0.6, =0.0.9, =1.61.0, =1.66.4 Source cves: CVE-2026-113717 Source advisory:...

dreem (>=0.0.0, <=0.1.16), riot (>=0.17.2, <=0.18.0) potentially affected by CVE-2026-113717 via virtualenv (20.20.0)

virtualenv PYPI version 20.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dreem =0.0.0, =0.17.2, =0.18.0 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

showenv (>=0.1.0, <=2.0.0) potentially affected by CVE-2026-113717 via virtualenv (20.0.23)

virtualenv PYPI version 20.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - showenv =0.1.0, =2.0.0 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

cabrita (>=2.2.2b1, <=2.2.2b2), kaze-python (>=0.7.8, <=0.8.9) +2 more potentially affected by CVE-2026-113717 via virtualenv (16.0.0)

virtualenv PYPI version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cabrita =2.2.2b1, =0.7.8, =0.7.2, =1.7.2, =1.11.0 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

ahead (>=0.1.0, <=0.6.0), pencil-pusher (>=1.2.0, <=1.6.0) potentially affected by CVE-2026-113717 via virtualenv (20.4.3)

virtualenv PYPI version 20.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ahead =0.1.0, =1.2.0, =1.6.0 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

appcensus-dynamic-repos (>=2.0.113, <=2.1.117), microscopemetrics (0.2.4) +11 more potentially affected by CVE-2026-113717 via virtualenv (20.32.0)

virtualenv PYPI version 20.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - appcensus-dynamic-repos =2.0.113, =0.6.0, =1.0.0, =0.1.1, =0.5.4, =1.0.1, =1.0.119 Source cves: CVE-2026-113717 Source advisory:...

backlogapi (>=0.1.3, <=0.1.5), dcoscli (>=0.4.10, <=0.6.1) +1 more potentially affected by CVE-2026-113717 via virtualenv (15.2.0)

virtualenv PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - backlogapi =0.1.3, =0.4.10, =0.6.7, =0.7.1 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

calendruparser (0.1.0), edx-repo-tools (0.8.2) +3 more potentially affected by CVE-2026-113717 via virtualenv (20.23.1)

virtualenv PYPI version 20.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - calendruparser 0.1.0 - edx-repo-tools 0.8.2 - engr131-2024 =0.0.1, =0.0.19, =0.1.5, =0.2.0 Source cves: CVE-2026-113717 Source advisory:...

dcoscli (>=0.1.1, <=0.1.8) potentially affected by CVE-2026-113717 via virtualenv (12.1.1)

virtualenv PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dcoscli =0.1.1, =0.1.8 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

titanic-mieuxqaloys (0.1.0) potentially affected by CVE-2026-113717 via virtualenv (20.29.2)

virtualenv PYPI version 20.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - titanic-mieuxqaloys 0.1.0 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

ezflow (>=0.2.1, <=0.2.4) potentially affected by CVE-2026-113717 via virtualenv (20.5.0)

virtualenv PYPI version 20.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ezflow =0.2.1, =0.2.4 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

b1ddi (0.0.2), delete-branches (>=1.0.0, <=1.1.3) +15 more potentially affected by CVE-2026-113717 via virtualenv (20.34.0)

virtualenv PYPI version 20.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - b1ddi 0.0.2 - delete-branches =1.0.0, =1.1.14, =1.0.0, =1.1.0, =1.17.0, =1.25.0 and more Source cves: CVE-2026-113717 Source advisory:...

buildpan (>=0.0.12, <=0.0.22), buildpan-cli (1.0.0) +6 more potentially affected by CVE-2026-113717 via virtualenv (20.6.0)

virtualenv PYPI version 20.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - buildpan =0.0.12, =0.1.0, =0.0.0, =0.0.1, =0.0.1, =3.0.2, =3.0.4 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

hmd-cli-repo (>=0.2.81, <=0.3.141), neuronsphere (>=1.0.2, <=1.0.50) +1 more potentially affected by CVE-2026-113717 via virtualenv (20.13.2)

virtualenv PYPI version 20.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hmd-cli-repo =0.2.81, =1.0.2, =1.0.50 - pytoil 0.27.0 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

dragg (0.0.0), dragg-gym (0.0.1) +1 more potentially affected by CVE-2026-113717 via virtualenv (20.0.18)

virtualenv PYPI version 20.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dragg 0.0.0 - dragg-gym 0.0.1 - muses-lpdp =0.2.2, =0.4.0rc1590080566 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26...

ciscoconfparse (>=1.6.53, <=1.7.3), pytoil (0.37.0) potentially affected by CVE-2026-113717 via virtualenv (20.16.7)

virtualenv PYPI version 20.16.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ciscoconfparse =1.6.53, =1.7.3 - pytoil 0.37.0 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

delete-branches (1.2.14), delete-workflow-runs (1.2.32) +6 more potentially affected by CVE-2026-113717 via virtualenv (20.35.3)

virtualenv PYPI version 20.35.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-branches 1.2.14 - delete-workflow-runs 1.2.32 - ironoc-pytest-conor-heffron =2.1.7, =2.2.0 - pkg-15903 0.1.100 - pkg-26548 1.3.32 -...

ersilia (>=0.1.0, <=0.1.1), pytoil (0.34.0) +1 more potentially affected by CVE-2026-113717 via virtualenv (20.15.1)

virtualenv PYPI version 20.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ersilia =0.1.0, =0.0.4, =0.0.7 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

c2cciutils (>=1.1.16, <=1.1.46), crl-devutils (>=1.3.1, <=1.4.0) potentially affected by CVE-2026-113717 via virtualenv (20.13.4)

virtualenv PYPI version 20.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.16, =1.3.1, =1.4.0 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

c2cciutils (>=1.1.47, <=1.1.58), dai-python-commons (5.4.16) +4 more potentially affected by CVE-2026-113717 via virtualenv (20.26.6)

virtualenv PYPI version 20.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.47, =0.20.0, =0.20.1 - rosettapy 0.2.3rc181.post1 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

azure-devops-artifacts-helpers (1.0.10), deepof (>=0.1.8, <=0.1.85) +7 more potentially affected by CVE-2026-113717 via virtualenv (20.14.1)

virtualenv PYPI version 20.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers 1.0.10 - deepof =0.1.8, =0.1.5, =0.30.0, =0.0.3, =1.0.1, =0.0.4, =0.3.0, =0.4.6 Source cves: CVE-2026-11371...

chicken-coop (>=0.0.1, <=0.0.5), im-openai (0.8.2) potentially affected by CVE-2026-113717 via virtualenv (20.24.2)

virtualenv PYPI version 20.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chicken-coop =0.0.1, =0.0.5 - im-openai 0.8.2 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

debpackager (>=0.1.0, <=0.2.1), scriptworker (0.2.1) +1 more potentially affected by CVE-2026-113717 via virtualenv (15.0.2)

virtualenv PYPI version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - debpackager =0.1.0, =0.2.35, =1.1.0 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

awsegy (0.1.4), azure-devops-artifacts-helpers (>=0.0.1, <=1.0.6) +1 more potentially affected by CVE-2026-113717 via virtualenv (20.1.0)

virtualenv PYPI version 20.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - awsegy 0.1.4 - azure-devops-artifacts-helpers =0.0.1, =1.0.0, =1.0.2 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

pickley (>=3.1.1, <=3.1.5), pytoil (0.28.0) potentially affected by CVE-2026-113717 via virtualenv (20.13.3)

virtualenv PYPI version 20.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pickley =3.1.1, =3.1.5 - pytoil 0.28.0 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...

delete-workflow-runs (>=1.0.0, <=1.1.6), edx-repo-tools (3.1.0) +2 more potentially affected by CVE-2026-113717 via virtualenv (20.33.1)

virtualenv PYPI version 20.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-workflow-runs =1.0.0, =1.1.0, =1.3.0 - setup-badge 1.0.11 Source cves: CVE-2026-113717 Source advisory: OSV:GHSA-CX28-75Q4-X26Q...