pypi / topos-node / 1.5.43
Artifact
- topos_node-1.5.43-py3-none-any.whlarchive · retained · retained
Checks
17 of 19 clear Known vulnerabilities Build-time dependency advisoriesBuild behavior✓✓✓✓✓✓✓✓✓✓✓
Supply chain▲▲✓✓✓✓✓
Pipeline✓
Detections0
Network
4 peers- github.com:443 unjudged
- ollama.com:443 unjudged
- release-assets.githubusercontent.com:443 unjudged
- files.pythonhosted.org:8080 ecosystem
| Vulnerabilities9 | Fix | Severity | |
|---|---|---|---|
| Dependencies | |||
| pip 25.1.1 | >=26.2.0 | ||
| CVE-2025-8869 | pip's fallback tar extraction doesn't check symbolic links point to extraction directory | medium | |
| CVE-2026-13346 | pip would incorrectly handle doubly-encoded package URLs from indexes | medium | |
| CVE-2026-3219 | pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files | medium | |
| CVE-2026-6357 | pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere | medium | |
| CVE-2026-8643 | pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory | medium | |
| CVE-2026-1703 | pip Path Traversal vulnerability | low | |
| setuptools 81.0.0 | >=84.1.0 | ||
| CVE-2026-59890 | setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ | medium | |
| GHSA-xmj3-9gf7-h52w | setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description | low | |
| torch 2.12.1 | >=2.13.0 | ||
| CVE-2025-3000 | PyTorch is vulnerable to memory corruption through its torch.jit.script function | low | |
Versions136
1.5.45criticallow11h ago1.5.44nonelow1d ago1.5.43nonelow1d ago1.5.42nonelow2d ago1.5.41nonenone3d ago1.5.40nonenone3d ago1.5.39nonenone4d ago1.5.38nonenone5d ago1.5.37nonenone5d ago1.5.36nonenone5d ago1.5.35nonenone5d ago1.5.34nonenone6d ago1.5.33nonenone6d ago1.5.32nonenone7d ago1.5.31did not build9d ago1.5.30did not build9d ago1.5.29did not build9d ago1.5.28did not build11d ago1.5.27did not build11d ago1.5.26did not build12d ago1.5.25did not build12d ago1.5.24did not build12d ago1.5.23did not build13d ago1.5.22not analyzed13d ago1.5.21did not build13d ago1.5.20not analyzed13d ago1.5.19did not build13d ago1.5.18not analyzed2026-10-231.5.17not analyzed2026-10-231.5.16did not build2026-10-231.5.15not analyzed2026-10-221.5.14not analyzed2026-10-201.5.13not analyzed2026-10-181.5.12not analyzed2026-10-171.5.11not analyzed2026-10-171.5.10not analyzed2026-10-171.5.9not analyzed2026-10-151.5.8not analyzed2026-10-131.5.7not analyzed2026-10-121.5.6not analyzed2026-10-111.5.5not analyzed2026-10-111.5.4not analyzed2026-10-111.5.3not analyzed2026-10-101.5.2not analyzed2026-10-091.5.1not analyzed2026-10-091.5.0not analyzed2026-10-081.4.4not analyzed2026-10-021.4.3not analyzed2026-10-021.4.2not analyzed2026-09-291.4.1not analyzed2026-09-251.4.0not analyzed2026-09-241.3.57not analyzed2026-09-141.3.56not analyzed2026-09-111.3.55not analyzed2026-09-101.3.54not analyzed2026-09-081.3.53not analyzed2026-09-071.3.52not analyzed2026-09-071.3.51not analyzed2026-09-051.3.50not analyzed2026-09-041.3.49not analyzed2026-09-041.3.48not analyzed2026-09-031.3.47not analyzed2026-09-031.3.46not analyzed2026-09-031.3.45not analyzed2026-09-031.3.44not analyzed2026-09-031.3.43not analyzed2026-09-021.3.42not analyzed2026-09-021.3.41not analyzed2026-09-021.3.40not analyzed2026-09-021.3.39not analyzed2026-08-311.3.38not analyzed2026-08-301.3.37not analyzed2026-08-291.3.36not analyzed2026-08-291.3.35not analyzed2026-08-281.3.34not analyzed2026-08-281.3.33not analyzed2026-08-271.3.32not analyzed2026-08-261.3.24not analyzed2026-08-211.3.23not analyzed2026-08-211.3.22not analyzed2026-08-181.3.21not analyzed2026-08-181.3.20not analyzed2026-08-171.3.19not analyzed2026-08-171.3.18not analyzed2026-08-171.3.17not analyzed2026-08-161.3.16not analyzed2026-08-151.3.15not analyzed2026-08-131.3.14not analyzed2026-08-121.3.13not analyzed2026-08-111.3.11not analyzed2026-08-091.3.10not analyzed2026-08-091.3.9not analyzed2026-08-091.3.8not analyzed2026-08-091.3.7not analyzed2026-08-091.3.6not analyzed2026-08-071.3.5not analyzed2026-08-061.3.4not analyzed2026-07-301.3.3not analyzed2026-07-291.3.2not analyzed2026-07-291.3.1not analyzed2026-07-291.3.0not analyzed2026-07-291.2.7not analyzed2026-07-221.2.6not analyzed2026-07-171.2.5not analyzed2026-07-161.2.4not analyzed2026-07-141.2.3not analyzed2026-07-101.2.2not analyzed2026-07-101.2.1not analyzed2026-07-101.2.0not analyzed2026-07-101.1.0not analyzed2026-07-061.0.8not analyzed2026-07-061.0.7not analyzed2026-07-041.0.6not analyzed2026-07-031.0.5not analyzed2026-07-031.0.2not analyzed2026-06-301.0.1not analyzed2026-06-291.0.0not analyzed2026-06-290.1.18not analyzed2026-06-190.1.17not analyzed2026-06-180.1.16not analyzed2026-06-180.1.15not analyzed2026-06-160.1.14not analyzed2026-06-160.1.13not analyzed2026-06-100.1.12not analyzed2026-06-090.1.11not analyzed2026-06-090.1.10not analyzed2026-06-090.1.9not analyzed2026-06-040.1.8not analyzed2026-06-040.1.7not analyzed2026-06-010.1.6not analyzed2026-06-010.1.5not analyzed2026-06-010.1.4not analyzed2026-06-010.1.3not analyzed2026-06-010.1.2not analyzed2026-06-010.1.1not analyzed2026-06-010.1.0not analyzed2026-06-01
1 of 1 jobs captured: build-import success · Generated 2026-11-05 · run e73d1a27-b7b0-4cac-a242-d975f907cfbd
analysis 0.1.0 · 2026-11-04 · bfee307 · graph v2