© 2025-2026 PySpect
| Package | Optional | Group |
|---|---|---|
| comet-ml | false | |
| conda-lock | false | |
| doccmd | false | |
| dvc | false | |
| dvc-studio-client | false |
Source: ClickPy
8 known vulnerabilitiesLatest: GHSA-gfhv-vqv2-4544 — Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload View all →