@payloadcms/plugin-search (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105866 via @payloadcms/next (>=4.0.0-canary.0, <=4.0.0-canary.33)

@payloadcms/next NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105866 Source advisory: SNYK:JS-PAYLOADCMSNEXT-20570506...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +36 more potentially affected by CVE-2026-105866 via payload (>=3.0.0-alpha.49, <=3.89.0)

payload NPM version =3.0.0-alpha.49, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.4, =1.0.1-beta.0, =0.14.0, =1.0.0, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =1.1.8 - @payloadcms/figma 0.0.1-alpha.0 and more Source cves: CVE-2026-105866 Source advisory: SNYK:JS-PAYLOAD-20570505...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +36 more potentially affected by CVE-2026-105866 via payload (>=3.0.0-alpha.49, <=3.89.0)

payload NPM version =3.0.0-alpha.49, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.4, =1.0.1-beta.0, =0.14.0, =1.0.0, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =1.1.8 - @payloadcms/figma 0.0.1-alpha.0 and more Source cves: CVE-2026-105866 Source advisory: OSV:GHSA-V5GF-VPJC-PC7W...

@adenta/cms (>=0.0.6, <=1.1.1-0), @otherdev-software/canvas (1.0.0) potentially affected by CVE-2026-105868 via @payloadcms/payload-cloud (>=3.53.0, <=3.61.0)

@payloadcms/payload-cloud NPM version =3.53.0, =0.0.6, =1.1.1-0 - @otherdev-software/canvas 1.0.0 Source cves: CVE-2026-105868 Source advisory: SNYK:JS-PAYLOADCMSPAYLOADCLOUD-20570538...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +36 more potentially affected by CVE-2026-105859 via payload (>=3.0.0-alpha.49, <=3.89.0)

payload NPM version =3.0.0-alpha.49, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.4, =1.0.1-beta.0, =0.14.0, =1.0.0, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =1.1.8 - @payloadcms/figma 0.0.1-alpha.0 and more Source cves: CVE-2026-105859 Source advisory: OSV:GHSA-F7HX-52Q9-HCRF...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=1.0, <=1.1), org.jenkins-ci.plugins:rabbitmq-consumer (>=1.0, <=1.1) potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.0.3)

com.rabbitmq:amqp-client MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger =1.0, =1.0, =1.1 Source cves: CVE-2026-106122 Source advisory:...

com.threerings:ooo-messaging (1.1), net.liftmodules:amqp_2.10 (>=2.5-m4-1.2, <=2.5-rc4-1.2) +15 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (1.7.2)

com.rabbitmq:amqp-client MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.threerings:ooo-messaging 1.1 - net.liftmodules:amqp2.10 =2.5-m4-1.2, =2.5-m1-1.1, =2.5-m1-1.1, =2.5-m1-1.1,...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +5 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (2.8.4)

com.rabbitmq:amqp-client MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =1.1.2.release, =2.2.0.release, =2.2.7.release Source cves:...

org.apache.airavata:airavata-api-server (>=0.12, <=0.14), org.apache.airavata:airavata-client-api (>=0.9, <=0.14) +30 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.1.2)

com.rabbitmq:amqp-client MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.airavata:airavata-api-server =0.12, =0.9, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12,...

br.jus.stf.digital:core (>=2.0.0, <=2.3.1), cn.hyperchain.javasdk:hyperchainsdk (>=4.2.1, <=4.2.3) +123 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.0.2)

com.rabbitmq:amqp-client MAVEN version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core =2.0.0, =4.2.1, =1.1.0, =0.10, =0.10, =1.2.0, =1.2.0, =0.10, =0.10, =1.0.0-rc1,...

@alauda/dp-dynamic-plugin-backend-core (>=0.1.11, <=0.1.12), @alithya-oss/backstage-plugin-aws-apps-backend (>=0.4.5, <=0.4.7) +303 more potentially affected by CVE-2026-106492 via @backstage/backend-defaults (>=0.0.0-nightly-20240929023448, <=0.17.7)

@backstage/backend-defaults NPM version =0.0.0-nightly-20240929023448, =0.1.11, =0.4.5, =1.0.0, =2.0.6, =0.3.10, =3.0.5, =0.4.1, =2.0.3, =0.3.6, =2.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.2, =0.2.2 and more Source cves: CVE-2026-106492 Source advisory: OSV:GHSA-CQ7V-RFGC-5C7V...

com.ahome-it:ahome-tooling-server-core (1.1.0-release), com.ahome-it:ahome-tooling-server-hazelcast (1.1.0-release) +153 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (3.5.7)

com.rabbitmq:amqp-client MAVEN version 3.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.1.0-release - com.ahome-it:ahome-tooling-server-hazelcast 1.1.0-releas...

io.zipkin.zipkin2:zipkin-collector-rabbitmq (>=2.14.1, <=2.14.2), org.apache.zipkin.reporter2:zipkin-reporter-spring-beans (2.8.3) +2 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.11.0)

com.rabbitmq:amqp-client MAVEN version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.zipkin2:zipkin-collector-rabbitmq =2.14.1, =2.14.2 -...

io.motown.domain:domain-utils (0.8.2), io.motown.ocpp:ocpp-soap-utils (0.8.2) +7 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (3.2.3)

com.rabbitmq:amqp-client MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.motown.domain:domain-utils 0.8.2 - io.motown.ocpp:ocpp-soap-utils 0.8.2 - io.motown.ocpp:ocpp-v12-soap 0.8.2...

com.al333z:bunny_2.11 (>=0.0.3, <=0.0.4), com.al333z:bunny_2.12 (>=0.0.1, <=0.0.4) +75 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.0.0)

com.rabbitmq:amqp-client MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.al333z:bunny2.11 =0.0.3, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.3.0, =1.3.2 -...

com.rabbitmq.jms:rabbitmq-jms (1.10.0), com.smoketurner.dropwizard:zipkin-core (1.3.7-1) +8 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.8.1)

com.rabbitmq:amqp-client MAVEN version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq.jms:rabbitmq-jms 1.10.0 - com.smoketurner.dropwizard:zipkin-core 1.3.7-1 -...

com.devebot.opflow:opflow-core (>=0.1.22, <=0.1.23), com.github.gvolpe:fs2-rabbit-circe_2.11 (>=0.6, <=1.0-rc1) +17 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.6.0)

com.rabbitmq:amqp-client MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.devebot.opflow:opflow-core =0.1.22, =0.6, =0.6, =0.6, =0.6, =1.3.2-1, =2.7.2, =2.7.2, =2.8.4 and more Sourc...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (3.3.4)

com.rabbitmq:amqp-client MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =0.10.0, =3.0.0, =2.14.0, =2.2.0, =5.0.3,...

cn.home1:spring-cloud-config-monitor (>=0.0.1, <=1.0.1.u1), cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp (1.0.2) +173 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.0.3)

com.rabbitmq:amqp-client MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.home1:spring-cloud-config-monitor =0.0.1, =1.0.0, =1.0.0, =9.00.2110.07.220316, =1.0.1, =1.0.0, =1.3.6.2,...

com.bluelock:camel-spring-amqp (>=1.6.2, <=1.6.3), com.nummulus.amqp.driver:amqp-driver-blackbox_2.10 (0.1.0) +13 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (3.1.3)

com.rabbitmq:amqp-client MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.6.2, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =2.12.0, =1.6, =1.6, =1.0.1,...