ai.h2o:h2o-algos (0.2.3.6), ai.h2o:h2o-app (0.2.3.6) +2 more potentially affected by CVE-2026-3960 via ai.h2o:h2o-core (0.2.3.6)

ai.h2o:h2o-core MAVEN version 0.2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.2.3.6 - ai.h2o:h2o-app 0.2.3.6 - ai.h2o:h2o-persist-hdfs 0.2.3.6 - ai.h2o:h2o-scala2.10 0.2.3.6 Source cves:...

ai.h2o:h2o-algos (0.1.20), ai.h2o:h2o-app (0.1.20) +3 more potentially affected by CVE-2026-3960 via ai.h2o:h2o-core (0.1.20)

ai.h2o:h2o-core MAVEN version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.1.20 - ai.h2o:h2o-app 0.1.20 - ai.h2o:h2o-scala2.10 0.1.20 - ai.h2o:sparkling-water-core2.10 =0.2.2, =0.2.3 -...

ai.h2o:h2o-app (0.1.17), ai.h2o:sparkling-water-core_2.10 (0.2.1) potentially affected by CVE-2026-3960 via ai.h2o:h2o-core (0.1.17)

ai.h2o:h2o-core MAVEN version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-app 0.1.17 - ai.h2o:sparkling-water-core2.10 0.2.1 Source cves: CVE-2026-3960 Source advisory: OSV:GHSA-QMCV-HH7C-3M5...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.9), ai.h2o:h2o-algos (>=3.0.0.5, <=3.46.0.9) +48 more potentially affected by CVE-2026-3960 via ai.h2o:h2o-core (>=3.0.0.5, <=3.46.0.9)

ai.h2o:h2o-core MAVEN version =3.0.0.5, =3.34.0.1, =3.0.0.5, =3.0.0.5, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.9 and more Source cves: CVE-2026-3960 Source advisory: OSV:GHSA-QMCV-HH7C-3M56...

ai.h2o:h2o-algos (0.1.19), ai.h2o:h2o-app (0.1.19) +1 more potentially affected by CVE-2026-3960 via ai.h2o:h2o-core (0.1.19)

ai.h2o:h2o-core MAVEN version 0.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.1.19 - ai.h2o:h2o-app 0.1.19 - ai.h2o:h2o-scala2.10 0.1.19 Source cves: CVE-2026-3960 Source advisory:...

ai.h2o:h2o-algos (0.1.11), ai.h2o:h2o-app (0.1.11) +1 more potentially affected by CVE-2026-3960 via ai.h2o:h2o-core (0.1.11)

ai.h2o:h2o-core MAVEN version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.1.11 - ai.h2o:h2o-app 0.1.11 - ai.h2o:h2o-scala2.10 0.1.11 Source cves: CVE-2026-3960 Source advisory:...

ai.h2o:h2o-algos (0.1.16), ai.h2o:h2o-app (0.1.16) +1 more potentially affected by CVE-2026-3960 via ai.h2o:h2o-core (0.1.16)

ai.h2o:h2o-core MAVEN version 0.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.1.16 - ai.h2o:h2o-app 0.1.16 - ai.h2o:h2o-scala2.10 0.1.16 Source cves: CVE-2026-3960 Source advisory:...

ai.h2o:h2o-app (0.1.15) potentially affected by CVE-2026-3960 via ai.h2o:h2o-core (0.1.15)

ai.h2o:h2o-core MAVEN version 0.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-app 0.1.15 Source cves: CVE-2026-3960 Source advisory: OSV:GHSA-QMCV-HH7C-3M56...

CVE-2026-29198

In Rocket.Chat 8.3.0, 8.2.1, 8.1.2, 8.0.3, 7.13.5, 7.12.6, 7.11.6, and 7.10.9, a NoSQL injection vulnerability can lead to account takeover of the first user with a generated token when an OAuth app is configured...

SUSE SLES15 Security Update : flatpak (SUSE-SU-2026:1541-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1541-1 advisory. - CVE-2026-34078: improper processing of app-controlled symlinks by sandbox-expose can lead to sandbox escape, host file access and...

CVE-2026-29198: Improper Neutralization of Special Elements used in an SQL Command

In Rocket.Chat 8.3.0, 8.2.1, 8.1.2, 8.0.3, 7.13.5, 7.12.6, 7.11.6, and 7.10.9, a NoSQL injection vulnerability can lead to account takeover of the first user with a generated token when an OAuth app is configured...

ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0, <=0.3.0) +5571 more potentially affected by CVE-2026-40975 via org.springframework.boot:spring-boot (>=4.0.0-m1, <=4.0.5)

org.springframework.boot:spring-boot MAVEN version =4.0.0-m1, =0.1.0, =0.1.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.7.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-2, =2.0.0 and more Source cves: CVE-2026-40975 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-16191649...

CVE-2026-29198

In Rocket.Chat 8.3.0, 8.2.1, 8.1.2, 8.0.3, 7.13.5, 7.12.6, 7.11.6, and 7.10.9, a NoSQL injection vulnerability can lead to account takeover of the first user with a generated token when an OAuth app is configured...

CVE-2026-29198

In Rocket.Chat 8.3.0, 8.2.1, 8.1.2, 8.0.3, 7.13.5, 7.12.6, 7.11.6, and 7.10.9, a NoSQL injection vulnerability can lead to account takeover of the first user with a generated token when an OAuth app is configured...

CVE-2026-29198

In Rocket.Chat 8.3.0, 8.2.1, 8.1.2, 8.0.3, 7.13.5, 7.12.6, 7.11.6, and 7.10.9, a NoSQL injection vulnerability can lead to account takeover of the first user with a generated token when an OAuth app is configured...

CVE-2026-41586

creationtimestamp| type| source ---|---|--- 2026-04-22 12:54:53+00:00| published-proof-of-concept| https://github.com/hyperledger/fabric/security/advisories/GHSA-prf8-cf2x-rhx7 2026-04-22 12:54:53+00:00| published-proof-of-concept|...

CVE-2026-1395

creationtimestamp| type| source ---|---|--- 2026-04-22 12:53:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3k4ghwtd2v 2026-04-24 08:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mka4imhovm2h...

CVE-2026-6515

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-24 07:57:51+00:00| seen| https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately...

CVE-2026-33259

creationtimestamp| type| source ---|---|--- 2026-04-22 12:18:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3i6brvav2t...

Wiz at Google Next: Machine-Speed Defense for Any Cloud, Any Platform, Any AI

Announcing new capabilities at Google Cloud Next that extend and deepen Wiz AI-APP coverage: From the first line of AI-generated code, across AI and agent studios, to the edge of the cloud...