cssfinder (>=0.3.0, <=0.8.0), cssfinder-backend-numpy (>=0.1.1, <=0.5.0) +3 more potentially affected by CVE-2026-106443 via weasyprint (58.1.0)

weasyprint PYPI version 58.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cssfinder =0.3.0, =0.1.1, =0.2.0, =0.3.0 - wh-m2p 0.0.1a0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

turandot (3.1.3) potentially affected by CVE-2026-106443 via weasyprint (61.1.0)

weasyprint PYPI version 61.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - turandot 3.1.3 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

mpi-cbs-mediforms (0.1.0a2) potentially affected by CVE-2026-106443 via weasyprint (58.0.0)

weasyprint PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms 0.1.0a2 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

enclose (>=1.0.4, <=1.0.9), pentest-report-generator (>=0.1.4, <=0.1.6) +4 more potentially affected by CVE-2026-106443 via weasyprint (57.2.0)

weasyprint PYPI version 57.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - enclose =1.0.4, =0.1.4, =1.43.1, =1.43.1, =1.43.1, =1.43.1, =1.50.3 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

terra-bonobo-nodes (>=0.1.1, <=0.1.4), terra-common (>=0.2.2, <=0.2.10) +1 more potentially affected by CVE-2026-106443 via weasyprint (57.0.0)

weasyprint PYPI version 57.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - terra-bonobo-nodes =0.1.1, =0.2.2, =0.2.10 - wagtail-meeting-guide 0.1.0.dev9 Source cves: CVE-2026-106443 Source advisory:...

turandot (>=3.1.4, <=3.1.5) potentially affected by CVE-2026-106443 via weasyprint (56.0.0)

weasyprint PYPI version 56.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - turandot =3.1.4, =3.1.5 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

phijax (>=0.1.0b1, <=0.2.0b5) potentially affected by CVE-2026-106439 via hydra-core (>=1.3.5, <=1.3.6)

hydra-core PYPI version =1.3.5, =0.1.0b1, =0.2.0b5 Source cves: CVE-2026-106439 Source advisory: OSV:PYSEC-2026-4222...

django-freeradius (0.1.0), genalog (>=0.1.0rc4, <=0.1.0) +6 more potentially affected by CVE-2026-106443 via weasyprint (51.0.0)

weasyprint PYPI version 51.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - django-freeradius 0.1.0 - genalog =0.1.0rc4, =0.1.0, =0.0.8, =3.4.0, =0.0.3, =1.0.0, =1.1.1 Source cves: CVE-2026-106443 Source advisory:...

booklab (>=0.7.0, <=0.10.0a68), criscostack (1.0.0) +5 more potentially affected by CVE-2026-106443 via weasyprint (59.0.0)

weasyprint PYPI version 59.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - booklab =0.7.0, =1.0.0, =1.1.0, =0.1.3, =21.5.0, =21.7.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

django-easy-quiz (>=4.0.1, <=4.2.0), memfs (>=0.1.6, <=0.1.8) +2 more potentially affected by CVE-2026-106443 via weasyprint (60.1.0)

weasyprint PYPI version 60.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - django-easy-quiz =4.0.1, =0.1.6, =0.1.0, =0.2.1 - proj2pdf 0.1.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

brs-xss (4.0.0), complio (0.1.2) +14 more potentially affected by CVE-2026-106443 via weasyprint (60.2.0)

weasyprint PYPI version 60.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - brs-xss 4.0.0 - complio 0.1.2 - gendazpack 0.1.0 - investments 0.2.0 - invocr =1.0.0, =0.1.0, =0.1.4.29, =0.1.0, =0.1.10, =21.8.0, =0.1.0,...

borisml (>=0.0.2, <=0.1.11), camphr (>=0.5.2, <=0.8.9) +13 more potentially affected by CVE-2026-106441 via hydra-core (0.11.3)

hydra-core PYPI version 0.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on hydra-core and may be impacted: - borisml =0.0.2, =0.5.2, =0.1.2, =0.3.18, =1.0.0, =23.3.0, =1.0.0, =0.1.0a2, =2.0.0, =0.0.1, =0.1.0.dev1, =1.3.0 Source cves: CVE-2026-10644...

ai-parrot (>=0.5.0, <=0.5.16), aleksis-app-order (>=0.1.1, <=0.7.0.dev0) +11 more potentially affected by CVE-2026-106443 via weasyprint (61.2.0)

weasyprint PYPI version 61.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - ai-parrot =0.5.0, =0.1.1, =1.0.0, =0.1.1, =3.3.0, =0.9.8, =21.9.1, =1.0.1, =3.12.27, =2.8.0, =2.10.1 - xblock-ai-eval 0.3.3 Source cves:...

omegaflow (>=0.2.0, <=0.4.0) potentially affected by CVE-2026-106439 via hydra-core (1.4.0.dev5)

hydra-core PYPI version 1.4.0.dev5 is affected by a known vulnerability. The following packages have a transitive dependency on hydra-core and may be impacted: - omegaflow =0.2.0, =0.4.0 Source cves: CVE-2026-106439 Source advisory: OSV:PYSEC-2026-4222...

lightnovel-crawler (>=2.11.0, <=2.11.1) potentially affected by CVE-2026-106443 via weasyprint (48.0.0)

weasyprint PYPI version 48.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - lightnovel-crawler =2.11.0, =2.11.1 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

documentsreader (1.1.5), midastrader (>=1.0.1, <=1.0.23) +1 more potentially affected by CVE-2026-106443 via weasyprint (62.1.0)

weasyprint PYPI version 62.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - documentsreader 1.1.5 - midastrader =1.0.1, =1.0.1, =1.0.7 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

cvgen (>=0.1.0, <=0.4.0) potentially affected by CVE-2026-106443 via weasyprint (47.0.0)

weasyprint PYPI version 47.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cvgen =0.1.0, =0.4.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

asrbench (0.1.0), asrbench-cli (0.1.0) +22 more potentially affected by CVE-2026-106443 via weasyprint (62.3.0)

weasyprint PYPI version 62.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - asrbench 0.1.0 - asrbench-cli 0.1.0 - billingyard 1.1.0 - cardtale =0.1.0, =10.0.0, =0.3.4, =0.1.0, =0.10.0, =0.2.2, =0.1.27, =0.1.0, =0.1....

alertwise (1.0.0), md2weasypdf (>=0.0.39, <=0.0.44) +1 more potentially affected by CVE-2026-106443 via weasyprint (63.0.0)

weasyprint PYPI version 63.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - alertwise 1.0.0 - md2weasypdf =0.0.39, =0.0.44 - sampledb 0.30.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

alphafold3-pytorch-lightning-hydra (>=0.2.126, <=0.4.28), cosyvoice-package (0.0.2) +7 more potentially affected by CVE-2026-106440 via hydra-optuna-sweeper (1.2.0)

hydra-optuna-sweeper PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on hydra-optuna-sweeper and may be impacted: - alphafold3-pytorch-lightning-hydra =0.2.126, =0.0.1, =0.0.1.dev4, =0.4.0, =2.2.0, =2.9.0 - reverse-distillation 0.1.0...

almos-kit (>=0.1.1, <=1.2.0), bas-air-unit-network-dataset (>=0.5.0, <=0.5.1) +15 more potentially affected by CVE-2026-106443 via weasyprint (63.1.0)

weasyprint PYPI version 63.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - almos-kit =0.1.1, =0.5.0, =0.0.3, =2.2.0, =3.3.6, =0.3.17, =0.1.2, =0.1.1, =0.10.0, =0.3.3, =2.0.0, =0.9.0, =0.14.0 - textpress 0.1.2 and...

body-organ-analysis (>=0.1.0, <=0.1.5), brena (>=0.0.1, <=0.0.2) +30 more potentially affected by CVE-2026-106443 via weasyprint (52.5.0)

weasyprint PYPI version 52.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - body-organ-analysis =0.1.0, =0.0.1, =0.1.0, =22.16.0, =1.0.0, =24.0.0, =1.1.3, =4.2.1, =0.2.1a0, =25.0.13, =1.0.2.post1, =0.0.1, =1.2.1,...

lightnovel-crawler (>=2.7.15, <=2.10.1) potentially affected by CVE-2026-106443 via weasyprint (45.0.0)

weasyprint PYPI version 45.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - lightnovel-crawler =2.7.15, =2.10.1 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

scout-browser (>=4.10.1, <=4.47.0) potentially affected by CVE-2026-106443 via weasyprint (0.42.3)

weasyprint PYPI version 0.42.3 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - scout-browser =4.10.1, =4.47.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

no-cloud (0.0.8) potentially affected by CVE-2026-106443 via weasyprint (0.34.0)

weasyprint PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - no-cloud 0.0.8 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

actpdf (>=0.1.0, <=0.12.0) potentially affected by CVE-2026-106443 via weasyprint (52.4.0)

weasyprint PYPI version 52.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - actpdf =0.1.0, =0.12.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

antipetros-discordbot (>=0.1.0, <=0.1.7) potentially affected by CVE-2026-106443 via weasyprint (52.2.0)

weasyprint PYPI version 52.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - antipetros-discordbot =0.1.0, =0.1.7 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

cars (>=1.1.0rc1, <=1.1.0), htmloverpdf (0.0.3) +1 more potentially affected by CVE-2026-106443 via weasyprint (53.0.0b2)

weasyprint PYPI version 53.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cars =1.1.0rc1, =0.7.0, =0.7.12 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

phijax (0.1.0b1) potentially affected by CVE-2026-106442 via hydra-core (1.3.5)

hydra-core PYPI version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on hydra-core and may be impacted: - phijax 0.1.0b1 Source cves: CVE-2026-106442 Source advisory: OSV:PYSEC-2026-4223...

blabel (0.1.5), pdf-reports (>=0.3.3, <=0.3.4) potentially affected by CVE-2026-106443 via weasyprint (52.0.0)

weasyprint PYPI version 52.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - blabel 0.1.5 - pdf-reports =0.3.3, =0.3.4 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

roc-punk (>=0.2.3, <=0.2.9) potentially affected by CVE-2026-106443 via weasyprint (0.28.0)

weasyprint PYPI version 0.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - roc-punk =0.2.3, =0.2.9 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

omegaflow (>=0.2.0, <=0.4.0) potentially affected by CVE-2026-106441 via hydra-core (1.4.0.dev5)

hydra-core PYPI version 1.4.0.dev5 is affected by a known vulnerability. The following packages have a transitive dependency on hydra-core and may be impacted: - omegaflow =0.2.0, =0.4.0 Source cves: CVE-2026-106441 Source advisory: OSV:PYSEC-2026-4221...

mpi-cbs-mediforms (>=0.1.0a3, <=0.3.1rc29) potentially affected by CVE-2026-106443 via weasyprint (53.0.0)

weasyprint PYPI version 53.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms =0.1.0a3, =0.3.1rc29 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

connect-cli (>=24.5.0, <=31.0.0), connect-reports-core (>=24.0.1, <=29.0.0) +3 more potentially affected by CVE-2026-106443 via weasyprint (53.4.0)

weasyprint PYPI version 53.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - connect-cli =24.5.0, =24.0.1, =24.3.0, =0.1.0, =1.0.0, =1.1.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

bpp-iplweb (>=202209.1088.0, <=202504.1174.0), circe-transformations-certic (0.0.3) +1 more potentially affected by CVE-2026-106443 via weasyprint (55.0.0)

weasyprint PYPI version 55.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - bpp-iplweb =202209.1088.0, =202504.1174.0 - circe-transformations-certic 0.0.3 - render50 8.0.0 Source cves: CVE-2026-106443 Source advisor...

agentlightning (>=1.0.0, <=1.0.2), aiagents4pharma (>=0.0.0, <=1.49.1) +221 more potentially affected by CVE-2026-106441 via hydra-core (>=1.0.0rc4, <=1.3.5)

hydra-core PYPI version =1.0.0rc4, =1.0.0, =0.0.0, =0.1.5, =1.0.0rc1, =0.2.126, =1.0.0, =0.7.0, =0.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-106441 Source advisory: OSV:PYSEC-2026-4221...

eml2pdf (>=0.1.0, <=2.0.2), markdowntopdf (>=0.1.2, <=0.1.3) +4 more potentially affected by CVE-2026-106443 via weasyprint (64.1.0)

weasyprint PYPI version 64.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - eml2pdf =0.1.0, =0.1.2, =0.0.45, =0.1.0, =0.1.0, =0.1.2 - strahlenexposition-uba 1.0.0 Source cves: CVE-2026-106443 Source advisory:...

mac-letterhead (>=0.6.5, <=0.14.0) potentially affected by CVE-2026-106443 via weasyprint (65.0.0)

weasyprint PYPI version 65.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mac-letterhead =0.6.5, =0.14.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

jf-langflow (>=1.10.0, <=1.10.0.post7), langflow-nightly (1.8.0.dev24) potentially affected by CVE-2026-105698 via langflow-base (>=0.7.2, <=0.10.0)

langflow-base PYPI version =0.7.2, =1.10.0, =1.10.0.post7 - langflow-nightly 1.8.0.dev24 Source cves: CVE-2026-105698 Source advisory: OSV:PYSEC-2026-4238...

omegaflow (>=0.2.0, <=0.4.0) potentially affected by CVE-2026-106442 via hydra-core (1.4.0.dev5)

hydra-core PYPI version 1.4.0.dev5 is affected by a known vulnerability. The following packages have a transitive dependency on hydra-core and may be impacted: - omegaflow =0.2.0, =0.4.0 Source cves: CVE-2026-106442 Source advisory: OSV:PYSEC-2026-4223...

anyvec (0.1.3), indico (>=3.3.10, <=3.3.12) +14 more potentially affected by CVE-2026-106443 via weasyprint (65.1.0)

weasyprint PYPI version 65.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - anyvec 0.1.3 - indico =3.3.10, =0.0.1, =0.0.48, =0.1.3b1, =0.31.0, =1.0.0, =0.1.0, =0.3.0, =0.1.37, =1.43.1, =1.43.1, =1.50.4, =1.50.4,...

agenticmem (>=0.1.4.1, <=0.1.5.0), biomni-bridge (>=0.3.1, <=0.3.3) +27 more potentially affected by CVE-2026-106443 via weasyprint (66.0.0)

weasyprint PYPI version 66.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - agenticmem =0.1.4.1, =0.3.1, =1.0.1, =0.1.2, =2025.1.0b3, =2026.3.0b2, =1.2.15, =2025.1.0b3, =1.0.3, =0.1.0, =1.59.6rc0, =1.67.5 and more...

coreason-scribe (>=0.1.0, <=0.3.0), django-afip (>=5.0.0, <=14.1.0) +8 more potentially affected by CVE-2026-106443 via weasyprint (67.0.0)

weasyprint PYPI version 67.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - coreason-scribe =0.1.0, =5.0.0, =6.0.0, =0.1.0, =1.3.0, =1.1.7.post1, =1.2.1, =0.1.0, =2.11.0, =2.11.1 Source cves: CVE-2026-106443 Source...

ai-parrot (>=0.20.3, <=0.23.12), riskforge (>=1.1.0, <=1.1.2) +1 more potentially affected by CVE-2026-106443 via weasyprint (68.0.0)

weasyprint PYPI version 68.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - ai-parrot =0.20.3, =1.1.0, =2.11.2, =2.12.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

arthexis (>=0.2.4, <=0.11.0), automathics (>=0.1.2, <=0.2.5) +17 more potentially affected by CVE-2026-106443 via weasyprint (68.1.0)

weasyprint PYPI version 68.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - arthexis =0.2.4, =0.1.2, =0.0.1.dev20250508, =2026.7.4, =1.10.1, =0.3.1, =0.1.0, =1.3.40, =0.1.0, =1.2.4, =0.3.1, =0.33.0, =0.33.1 and more...

bibforgery (>=1.10.1b0, <=1.10.22), body-organ-analysis (>=1.0.0, <=1.0.3) +37 more potentially affected by CVE-2026-106443 via weasyprint (69.0.0)

weasyprint PYPI version 69.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - bibforgery =1.10.1b0, =1.0.0, =0.0.1.dev20260720, =2026.8.23, =1.10.3, =0.274.0, =0.7.1, =13.0.0b3.dev0, =0.1.0, =0.0.4, =2026.0.0, =0.13.1...

knowledge-repo (>=0.9.2, <=0.9.3), render50 (>=7.0.2, <=8.0.2) potentially affected by CVE-2026-106443 via weasyprint (54.3.0)

weasyprint PYPI version 54.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - knowledge-repo =0.9.2, =7.0.2, =8.0.2 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

ezmote-cmdserver (>=0.7.2, <=0.7.11), geonode (4.0.1) +7 more potentially affected by CVE-2026-106454 via twisted (22.8.0)

twisted PYPI version 22.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - ezmote-cmdserver =0.7.2, =0.0.4, =0.1.0, =0.9.2, =1.5.2, =0.0.0, =1.0.0, =1.0.3 Source cves: CVE-2026-106454 Source advisory: OSV:PYSEC-2026-4304...

ayugespidertools (>=3.4.1, <=3.9.5), baotool (1.0.1) +32 more potentially affected by CVE-2026-106454 via twisted (22.10.0)

twisted PYPI version 22.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - ayugespidertools =3.4.1, =0.2.0, =3.9.2, =1.1.2.post3, =0.7.2, =1.0.0, =1.0.0b2, =0.8.0, =0.1.12, =4.0.2, =0.1.2, =0.5.1 - jaseci-serv 1.4.2.5 a...

apricot-server (>=0.0.1, <=0.0.4), nucypher (>=7.0.0, <=7.0.4) +2 more potentially affected by CVE-2026-106454 via twisted (23.8.0)

twisted PYPI version 23.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.1, =7.0.0, =0.2.0, =0.4.1 Source cves: CVE-2026-106454 Source advisory: OSV:PYSEC-2026-4304...