@b0ase/path402-api (4.0.0-alpha.1), @b0ase/path402-core (4.0.0-alpha.2) +28 more potentially affected by CVE-2026-86038 via @libp2p/gossipsub (>=15.0.1-425a42cdd, <=16.0.5-e86b39e5d)

@libp2p/gossipsub NPM version =15.0.1-425a42cdd, =0.1.0, =2.0.1, =2.0.0, =6.0.1-425a42cdd, =9.0.0, =0.1.0, =10.0.0-rc.8, =0.0.1-dev.1773506972.23bf9c0, =10.0.24 and more Source cves: CVE-2026-86038 Source advisory: MEND:CVE-2026-86038...

1942pyc (7.0.1), 667bot (1.0.0) +44 more potentially affected by CVE-2026-85078 via sanic (21.6.2)

sanic PYPI version 21.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - 1942pyc 7.0.1 - 667bot 1.0.0 - aerozbot =1.0.0, =0.0.1, =0.4.9, =0.0.1, =0.0.1, =0.1.101, =0.1.100, =0.1.119 and more Source cves: CVE-2026-85078...

@acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94), @apifactory/openapi-builder (>=1.0.0, <=1.0.5) +8 more potentially affected by CVE-2026-63225 via @redocly/cli (>=1.0.0-beta.123, <=1.34.5)

@redocly/cli NPM version =1.0.0-beta.123, =2.13.1, =1.0.0, =0.2.2-next-20230413194207, =1.0.0, =1.3.33, =8.0.1-fix-binary-778dccce.0, =1.2.13, =2.15.5, =2.16.3 Source cves: CVE-2026-63225 Source advisory: OSV:GHSA-657C-G7QC-R9J2...

pyplanet (>=0.5.0, <=0.5.2) potentially affected by CVE-2026-62949 via asyncssh (1.11.0)

asyncssh PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.5.0, =0.5.2 Source cves: CVE-2026-62949 Source advisory: OSV:GHSA-RW4J-R22C-9GC3...

app.cash.backfila:backfila-embedded (>=2023.08.14.172409-6d1d2a2, <=2024.08.23.143736-34a2a42), app.cash.backfila:client-base (>=2023.08.14.172409-6d1d2a2, <=2024.08.23.143736-34a2a42) +8 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (4.4.2)

com.squareup.wire:wire-runtime MAVEN version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila:backfila-embedded =2023.08.14.172409-6d1d2a2, =2023.08.14.172409-6d1d2a2,...

com.squareup.misk:misk (0.19.0), com.squareup.misk:misk-aws (0.19.0) +42 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (4.0.0-alpha.5)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk 0.19.0 - com.squareup.misk:misk-aws 0.19.0 -...

com.squareup.misk:misk (>=2025.08.05.111709-c1791a4, <=2025.08.06.225110-5b65cb9), com.squareup.misk:misk-admin (>=2025.08.05.111709-c1791a4, <=2025.08.06.225110-5b65cb9) +27 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (5.3.6)

com.squareup.wire:wire-runtime MAVEN version 5.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk =2025.08.05.111709-c1791a4, =2025.08.05.111709-c1791a4,...

ai.looktech.ltrpc.schema:app-server (>=2.0.0, <=2.7.0), ai.looktech.ltrpc.schema:bt-server (>=2.0.0, <=2.7.0) +102 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (>=6.0.0-alpha01, <=6.4.1)

com.squareup.wire:wire-runtime MAVEN version =6.0.0-alpha01, =2.0.0, =2.0.0, =0.1.2, =0.0.24, =0.1.7, =0.7.27, =0.7.27, =0.7.27, =0.1.33, =0.7.27, =0.7.27, =0.7.41 and more Source cves: CVE-2026-63126 Source advisory: OSV:GHSA-9RM7-3QHH-H2MC...

com.squareup.misk:misk (>=2025.08.07.142709-b2b6e6c, <=2025.08.08.100635-5aa9c39), com.squareup.misk:misk-admin (>=2025.08.07.142709-b2b6e6c, <=2025.08.08.100635-5aa9c39) +27 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (5.3.7)

com.squareup.wire:wire-runtime MAVEN version 5.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk =2025.08.07.142709-b2b6e6c, =2025.08.07.142709-b2b6e6c,...

ch.admin.bit.jeap:jeap-messaging-glue-schema-registry (>=8.51.0, <=15.2.0), com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=4.0.7, <=5.0.3) +83 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (5.2.0)

com.squareup.wire:wire-runtime MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - ch.admin.bit.jeap:jeap-messaging-glue-schema-registry =8.51.0, =4.0.7, =2.0.1, =3.0.14.0, =1.0.30,...

com.github.athieriot:jtaches (>=1.2, <=1.3), com.zanox.lib.rabbiteasy:rabbiteasy-cdi (>=1.0.1, <=1.2.0) +13 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (2.8.7)

com.rabbitmq:amqp-client MAVEN version 2.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.athieriot:jtaches =1.2, =1.0.1, =1.0.1, =1.0.1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m...

br.jus.stf.digital:core (>=0.2.0, <=1.6.0), com.github.jcustenborder.kafka.connect:kafka-connect-rabbitmq (>=0.0.2.6, <=0.0.2.9) +13 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.0.1)

com.rabbitmq:amqp-client MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core =0.2.0, =0.0.2.6, =1.1.0, =0.0.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1,...

net.leanix:leanix-dropkit (>=0.7.4, <=1.3.21), net.leanix:leanix-dropkit-persistence (>=1.0.0, <=1.1.6) +6 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.4.0)

com.rabbitmq:amqp-client MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.leanix:leanix-dropkit =0.7.4, =1.0.0, =1.6.4, =1.7.14 - net.liftmodules:amqp3.02.11 1.4.0 -...

com.ahome-it:ahome-tooling-server-core (1.1.0-release), com.ahome-it:ahome-tooling-server-hazelcast (1.1.0-release) +153 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.5.7)

com.rabbitmq:amqp-client MAVEN version 3.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.1.0-release - com.ahome-it:ahome-tooling-server-hazelcast 1.1.0-releas...

com.smoketurner.dropwizard:zipkin-core (>=1.3.5-2, <=1.3.5-5), io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.2, <=2.11.4) +3 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.7.0)

com.rabbitmq:amqp-client MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.5-2, =2.11.2, =2.7.7, =2.7.7, =2.11.2, =2.11.4 Source cves:...

com.coiney:akka-rabbit-core_2.10 (0.3.0), com.coiney:akka-rabbit-core_2.11 (0.3.0) +7 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.3.3)

com.rabbitmq:amqp-client MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.coiney:akka-rabbit-core2.10 0.3.0 - com.coiney:akka-rabbit-core2.11 0.3.0 - net.roboconf:roboconf-agent =0....

com.nesscomputing.components:ness-amqp (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (2.8.5)

com.rabbitmq:amqp-client MAVEN version 2.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.nesscomputing.components:ness-amqp =1.0.0, =1.1.0 Source cves: CVE-2026-75516 Source advisory:...

com.qaprosoft:carina-api (>=6.0.4, <=6.1.24), com.qaprosoft:carina-aws-s3 (>=6.0.4, <=6.1.24) +6 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.9.0)

com.rabbitmq:amqp-client MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.qaprosoft:carina-api =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =3.3.48, =4.0.58 -...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.3.4)

com.rabbitmq:amqp-client MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =0.10.0, =3.0.0, =2.14.0, =2.2.0, =5.0.3,...

aiconsole (>=0.2.0, <=0.2.7), fastrepl (>=0.0.19, <=0.0.20) potentially affected by CVE-2026-59823 via litellm (0.6.6)

litellm PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - aiconsole =0.2.0, =0.0.19, =0.0.20 Source cves: CVE-2026-59823 Source advisory: OSV:GHSA-HX8V-G79F-8W5F...