org.xwiki.rendering:xwiki-rendering-macro-html (6.4.4), org.xwiki.rendering:xwiki-rendering-standalone (6.4.4) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.4.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.4.4 -...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +4887 more potentially affected by CVE-2026-93573 via io.netty:netty-codec-http (>=4.2.12.final, <=4.2.17.final)

io.netty:netty-codec-http MAVEN version =4.2.12.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.8.0, =1.8.0, =4.13.5, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-93573 Source advisory: MEND:CVE-2026-93573...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_2.4_2.11 (>=1.0.6, <=1.2.7) +6845 more potentially affected by CVE-2026-93568 via io.netty:netty-all (>=4.1.64.final, <=4.1.137.final)

io.netty:netty-all MAVEN version =4.1.64.final, =0.0.1, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2026-93568 Source advisory: MEND:CVE-2026-93568...

ai.pipestream.module:module-proxy (>=0.1.4, <=0.1.5), com.bucket4j:bucket4j_jdk17-infinispan (8.21.0) +413 more potentially affected by CVE-2026-10832 via org.wildfly.security:wildfly-elytron-asn1 (>=2.9.0.final, <=2.9.2.sp1)

org.wildfly.security:wildfly-elytron-asn1 MAVEN version =2.9.0.final, =0.1.4, =5.0.5, =5.0.5, =1.10.0, =3.7.0.alpha2, =3.7.0.alpha2, =3.7.0.beta1, =6.1.0, =4.1.0, =3.36.0, =2.10.0, =2.10.0, =2.11.0 and more Source cves: CVE-2026-10832 Source advisory: MEND:CVE-2026-10832...

@accordproject/cicero-cli (>=0.23.0-20220318211856, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.23.0-20220318211856, <=0.24.1-20230627140514) +178 more potentially affected by CVE-2026-93606 via vm2 (>=3.9.6, <=3.11.6)

vm2 NPM version =3.9.6, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220317205016, =0.23.0-20220317205016, =0.23.0-20220317205016, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =0.0.2, =1.0.2, =3.0.34 and more Source...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3) +12925 more potentially affected by CVE-2026-93561 via io.netty:netty-all (>=4.1.0.beta1, <=4.1.137.final)

io.netty:netty-all MAVEN version =4.1.0.beta1, =0.0.1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.10 and more Source cves: CVE-2026-93561 Source advisory: MEND:CVE-2026-93561...

CLEANSTART-2026-RW47187 Security fix for GHSA-5xrh-qmmq-w6ch applied in: apache-hive 4.2.0-r5, hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

GHSA-5xrh-qmmq-w6ch affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BL91899 Security fix for CVE-2024-52011 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3

CVE-2024-52011 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

com.flipkart.krystal:lattice-graphql-rest (>=0.1.5, <=0.1.6), com.flipkart.krystal:lattice-rest (>=0.1.5, <=0.1.6) +197 more potentially affected by CVE-2026-89059 via org.jboss.resteasy:resteasy-core (>=7.0.0.alpha1, <=7.0.4.final)

org.jboss.resteasy:resteasy-core MAVEN version =7.0.0.alpha1, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.2.0, =0.9.0, =0.9.7 and more Source cves: CVE-2026-89059 Source advisory: SNYK:JAVA-ORGJBOSSRESTEASY-20044968...

c2cciutils (>=1.1.47, <=1.1.58), dai-python-commons (5.4.16) +4 more potentially affected by CVE-2026-102925 via virtualenv (20.26.6)

virtualenv PYPI version 20.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.47, =0.20.0, =0.20.1 - rosettapy 0.2.3rc181.post1 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

gllm-core-binary (>=0.0.0.dev0, <=0.4.4b3), gllm-inference-binary (0.5.51b3) +5 more potentially affected by CVE-2026-102925 via virtualenv (20.30.0)

virtualenv PYPI version 20.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - gllm-core-binary =0.0.0.dev0, =0.3.149, =0.1.0, =1.0.51, =0.4.4, =0.4.8 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

ersilia (>=0.1.0, <=0.1.1), pytoil (0.34.0) +1 more potentially affected by CVE-2026-102925 via virtualenv (20.15.1)

virtualenv PYPI version 20.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ersilia =0.1.0, =0.0.4, =0.0.7 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

pytoil (0.36.0), team13hackertype (>=1.0.1, <=1.0.4) potentially affected by CVE-2026-102925 via virtualenv (20.16.6)

virtualenv PYPI version 20.16.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pytoil 0.36.0 - team13hackertype =1.0.1, =1.0.4 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

5gasp-cli (>=0.1.0, <=0.4.0), appcensus-dynamic-repos (0.6.1.91) +33 more potentially affected by CVE-2026-102925 via virtualenv (20.21.1)

virtualenv PYPI version 20.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - 5gasp-cli =0.1.0, =1.1.2, =1.3.0rc1, =1.5.9, =2.3.0, =0.0.88, =0.7.7, =1.0.3, =24.9.958497, =0.5.2, =0.6.0, =0.6.4 and more Source cves:...

baotool (1.0.1), farcaster-py (>=0.0.2, <=0.0.4) +6 more potentially affected by CVE-2026-102925 via virtualenv (20.24.5)

virtualenv PYPI version 20.24.5 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - baotool 1.0.1 - farcaster-py =0.0.2, =2.0.0, =0.103.0, =0.1.0, =1.0.0, =1.3.1 - zoish 4.6.0 Source cves: CVE-2026-102925 Source advisory:...

appcensus-dynamic-repos (>=2.0.113, <=2.1.117), microscopemetrics (0.2.4) +11 more potentially affected by CVE-2026-102925 via virtualenv (20.32.0)

virtualenv PYPI version 20.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - appcensus-dynamic-repos =2.0.113, =0.6.0, =1.0.0, =0.1.1, =0.5.4, =1.0.1, =1.0.119 Source cves: CVE-2026-102925 Source advisory:...

bento-cli (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-102925 via virtualenv (16.7.5)

virtualenv PYPI version 16.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - bento-cli =0.1.0, =0.1.1 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

ablator (0.0.1b3), apollo-sdk (>=0.2.0, <=0.2.11) +29 more potentially affected by CVE-2026-102925 via virtualenv (20.21.0)

virtualenv PYPI version 20.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ablator 0.0.1b3 - apollo-sdk =0.2.0, =0.8.3b20231012, =0.8.3b20231012, =0.6.1, =1.2.1, =0.1.3, =0.7.2, =0.2.8, =0.0.1, =1.7.16, =0.4.0rc6,...

aiap-model (0.0.0), getsome (0.1.1) +6 more potentially affected by CVE-2026-102925 via virtualenv (20.13.0)

virtualenv PYPI version 20.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aiap-model 0.0.0 - getsome 0.1.1 - invenio-cli =1.0.4, =0.0.1, =0.0.1, =0.17.0, =1.0.1.dev3, =0.0.1, =0.0.3 Source cves: CVE-2026-102925...

ddwrt-tracker (>=0.0.1.dev33, <=0.0.1.dev34), dokos-cli (>=2.0.0, <=2.1.0) +3 more potentially affected by CVE-2026-102925 via virtualenv (16.6.0)

virtualenv PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ddwrt-tracker =0.0.1.dev33, =2.0.0, =5.0.0, =0.0.0, =0.0.0, =1.9.1 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...