ai.pipestream.proto-toolchain:ai.pipestream.proto-toolchain.gradle.plugin (>=0.7.24, <=0.7.26), ai.pipestream:quarkus-buf-grpc-generator (>=0.7.24, <=0.7.26) +2142 more potentially affected by CVE-2026-83557 via tools.jackson.core:jackson-databind (>=3.2.0, <=3.2.1)

tools.jackson.core:jackson-databind MAVEN version =3.2.0, =0.7.24, =0.7.24, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha6 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics...

ai.covia:covia-claude-code (>=0.9.3, <=0.9.10), ai.covia:covia-discord (>=0.9.4, <=0.9.9) +9469 more potentially affected by CVE-2026-83557 via com.fasterxml.jackson.core:jackson-databind (>=2.22.0, <=2.22.1)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.1.0-beta.1, =1.4.0, =1.4.0, =1.4.0, =2.0.0 and more Source cves: CVE-2026-83557 Source advisory: OSV:GHSA-GX83-3VF8-GH7J...

ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +34584 more potentially affected by CVE-2026-83557 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.5)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...

@aikidosec/broker-client (1.0.51), @app4you/n8n-nodes-portal-invoices (>=0.3.1, <=0.3.11) +42 more potentially affected by CVE-2026-101910 via ip-address (>=10.2.0, <=10.5.0)

ip-address NPM version =10.2.0, =0.3.1, =1.5.40, =1.6.0, =4.2.2, =0.17.1, =2.7.9, =4.0.3, =3.1.58, =2.6.55, =3.7.6, =2.7.130, =3.1.50, =4.0.4, =4.0.27 and more Source cves: CVE-2026-101910 Source advisory: OSV:GHSA-2VR4-CQ9G-PVRC...

360solutions-bc-mcp (>=0.5.3, <=0.5.7), a-beta-scalekit (>=2.3.0, <=4.0.2) +733 more potentially affected by CVE-2026-102274 via pyjwt (>=2.9.0, <=2.13.0)

pyjwt PYPI version =2.9.0, =0.5.3, =2.3.0, =1.1.0rc1, =1.0.1, =2.4.2rc9, =1.2.0, =0.1.1, =3.0.0, =0.1.8, =0.0.116, =0.1.31, =0.1.0, =0.1.5 and more Source cves: CVE-2026-102274 Source advisory: MEND:CVE-2026-102274...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.7) +2348 more potentially affected by CVE-2026-102271 via pyjwt (>=1.0.1, <=2.13.0)

pyjwt PYPI version =1.0.1, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =0.1.1, =1.8.8, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =0.8.44.4rc1, =0.9.2.1 and more Source cves: CVE-2026-102271 Source advisory: MEND:CVE-2026-102271...

360solutions-bc-mcp (0.5.7), acapy-agent (>=1.6.1rc0, <=1.7.0) +200 more potentially affected by CVE-2026-102266 via pyjwt (2.13.0)

pyjwt PYPI version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - 360solutions-bc-mcp 0.5.7 - acapy-agent =1.6.1rc0, =0.1.8, =0.0.116, =1.420.5, =26.6.0, =0.25.0, =0.57.0, =0.1.0, =0.1.0, =1.1.0, =3.8.0, =3.9.3 and...

ai.covia:covia-claude-code (>=0.9.3, <=0.9.10), ai.covia:covia-discord (>=0.9.4, <=0.9.9) +9469 more potentially affected by CVE-2026-68497 via com.fasterxml.jackson.core:jackson-databind (>=2.22.0, <=2.22.1)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.1.0-beta.1, =1.4.0, =1.4.0, =1.4.0, =2.0.0 and more Source cves: CVE-2026-68497 Source advisory: GHSA-Q4XH-88C3-WMH7...

ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +11720 more potentially affected by CVE-2026-68497 via tools.jackson.core:jackson-databind (>=3.0.0, <=3.1.5)

tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.2.0, =0.2.0, =0.2.0, =0.4.2 and more Source cves:...

ai.pipestream.proto-toolchain:ai.pipestream.proto-toolchain.gradle.plugin (>=0.7.24, <=0.7.26), ai.pipestream:quarkus-buf-grpc-generator (>=0.7.24, <=0.7.26) +2142 more potentially affected by CVE-2026-19032 via tools.jackson.core:jackson-databind (>=3.2.0, <=3.2.1)

tools.jackson.core:jackson-databind MAVEN version =3.2.0, =0.7.24, =0.7.24, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha6 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics...

ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +34584 more potentially affected by CVE-2026-19032 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.5)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...

ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +10376 more potentially affected by CVE-2026-77310 via tools.jackson.core:jackson-databind (>=3.0.0, <=3.1.4)

tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.0-alpha.4 -...

@142vip/egg-grpc-client (>=0.0.1-alpha.3, <=0.0.1-alpha.4), @142vip/egg-grpc-server (>=0.0.1-alpha.3, <=0.0.1-alpha.5) +246 more potentially affected by CVE-2026-101916 via @grpc/grpc-js (>=1.14.0, <=1.14.4)

@grpc/grpc-js NPM version =1.14.0, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.2, =0.26.4, =3.2.4, =1.13.0, =2.0.2, =0.1.0-alpha.0, =0.1.0, =2.1.0, =2.2.2, =2.0.0, =0.0.4, =0.0.33 and more Source cves: CVE-2026-101916 Source advisory: MEND:CVE-2026-101916...

@aikidosec/broker-client (1.0.51), @app4you/n8n-nodes-portal-invoices (>=0.3.1, <=0.3.11) +42 more potentially affected by CVE-2026-101910 via ip-address (>=10.2.0, <=10.5.0)

ip-address NPM version =10.2.0, =0.3.1, =1.5.40, =1.6.0, =4.2.2, =0.17.1, =2.7.9, =4.0.3, =3.1.58, =2.6.55, =3.7.6, =2.7.130, =3.1.50, =4.0.4, =4.0.27 and more Source cves: CVE-2026-101910 Source advisory: SNYK:JS-IPADDRESS-20250985...

-price-checker (>=1.0.0, <=1.0.5), 01_use_npm (1.0.0) +22105 more potentially affected by CVE-2026-101902 via axios (>=0.27.2, <=0.33.0)

axios NPM version =0.27.2, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0-beta.3 - 0g-vector-search 0.1.0 - 0g-vibekit 0.1.0 and more Source cves: CVE-2026-101902 Source advisory: SNYK:JS-AXIOS-20245050...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +18268 more potentially affected by CVE-2026-101902 via axios (>=1.0.0, <=1.19.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-20251106131028, =1.0.53, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-101902 Source advisory: SNYK:JS-AXIOS-20245050...

0xtrails (>=0.0.0-20251106131028, <=0.19.1), 123pancli (1.0.0) +4173 more potentially affected by CVE-2026-101905 via axios (>=1.15.2, <=1.19.0)

axios NPM version =1.15.2, =0.0.0-20251106131028, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.1.3-rc.0, =1.2.3 and mo...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +18268 more potentially affected by CVE-2026-101904 via axios (>=1.0.0, <=1.19.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-20251106131028, =1.0.53, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-101904 Source advisory: SNYK:JS-AXIOS-20244996...

Malicious code in simple-date-formatter-new-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd79db99adb8878673dd85db5a29661432808fa8fcc5e3d750b907418df8ae5f npm package [email protected] declares a postinstall lifecycle script in package.json that runs automatically on npm install. The...

MAL-2026-17229 Malicious code in simple-date-formatter-new-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd79db99adb8878673dd85db5a29661432808fa8fcc5e3d750b907418df8ae5f npm package [email protected] declares a postinstall lifecycle script in package.json that runs automatically on npm install. The...