0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16443 more potentially affected by CVE-2026-77301 via adm-zip (>=0.1.4, <=0.6.0)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-77301 Source advisory: SNYK:JS-ADMZIP-19963965...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16443 more potentially affected by CVE-2026-77301 via adm-zip (>=0.1.4, <=0.6.0)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-77301 Source advisory: GHSA-7Q85-XJ36-VMFC...

5mghost-rover (>=0.0.1, <=0.0.3), aaaai (>=0.1.3, <=0.3.0) +853 more potentially affected by CVE-2026-63374 via anyio (>=4.0.0rc1, <=4.14.1)

anyio PYPI version =4.0.0rc1, =0.0.1, =0.1.3, =0.6.0, =0.0.32, =0.0.1, =4.8.2, =0.1.3, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.1.31, =0.1.0, =0.0.2, =0.4.0rc1, =0.7.1 and more Source cves: CVE-2026-63374 Source advisory: OSV:GHSA-82R6-8W77-94W6...

aio-net-events (0.2.0), aio-usb-hotplug (>=2.0.0, <=3.0.1) +11 more potentially affected by CVE-2026-63374 via anyio (2.2.0)

anyio PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - aio-net-events 0.2.0 - aio-usb-hotplug =2.0.0, =0.9.1, =0.6.0, =0.1.0, =1.6.3, =0.0.1, =3.0.0, =0.1.0, =0.2.0 Source cves: CVE-2026-63374 Source...

ircrobots (>=0.2.4, <=0.3.5) potentially affected by CVE-2026-64847 via anyio (1.3.0)

anyio PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - ircrobots =0.2.4, =0.3.5 Source cves: CVE-2026-64847 Source advisory: OSV:GHSA-5P39-CFHJ-2XMP...

fennel (0.3.0), runnel (>=0.1.0a2, <=0.1.0b1) +1 more potentially affected by CVE-2026-64847 via anyio (3.0.0rc4)

anyio PYPI version 3.0.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - fennel 0.3.0 - runnel =0.1.0a2, =0.8.0, =0.13.0 Source cves: CVE-2026-64847 Source advisory: OSV:GHSA-5P39-CFHJ-2XMP...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.6) +5640 more potentially affected by CVE-2026-93579 via io.netty:netty-codec-http2 (>=4.2.0.final, <=4.2.17.final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-93579 Source advisory: MEND:CVE-2026-93579...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +291 more potentially affected by CVE-2026-93604 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +291 more potentially affected by CVE-2026-93605 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

org.xwiki.rendering:xwiki-rendering-macro-html (6.4.4), org.xwiki.rendering:xwiki-rendering-standalone (6.4.4) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.4.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.4.4 -...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.6), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.6) +4831 more potentially affected by CVE-2026-93573 via io.netty:netty-codec-http (>=4.2.12.final, <=4.2.17.final)

io.netty:netty-codec-http MAVEN version =4.2.12.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.8.0, =1.8.0, =4.13.5, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-93573 Source advisory: MEND:CVE-2026-93573...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_2.4_2.11 (>=1.0.6, <=1.2.7) +6827 more potentially affected by CVE-2026-93568 via io.netty:netty-all (>=4.1.64.final, <=4.1.137.final)

io.netty:netty-all MAVEN version =4.1.64.final, =0.0.1, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2026-93568 Source advisory: MEND:CVE-2026-93568...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3) +12907 more potentially affected by CVE-2026-93561 via io.netty:netty-all (>=4.1.0.beta1, <=4.1.137.final)

io.netty:netty-all MAVEN version =4.1.0.beta1, =0.0.1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.10 and more Source cves: CVE-2026-93561 Source advisory: MEND:CVE-2026-93561...

CLEANSTART-2026-RW47187 Security fix for GHSA-5xrh-qmmq-w6ch applied in: apache-hive 4.2.0-r5, hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

GHSA-5xrh-qmmq-w6ch affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BL91899 Security fix for CVE-2024-52011 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3

CVE-2024-52011 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

com.flipkart.krystal:lattice-graphql-rest (>=0.1.5, <=0.1.6), com.flipkart.krystal:lattice-rest (>=0.1.5, <=0.1.6) +197 more potentially affected by CVE-2026-89059 via org.jboss.resteasy:resteasy-core (>=7.0.0.alpha1, <=7.0.4.final)

org.jboss.resteasy:resteasy-core MAVEN version =7.0.0.alpha1, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.2.0, =0.9.0, =0.9.6 and more Source cves: CVE-2026-89059 Source advisory: SNYK:JAVA-ORGJBOSSRESTEASY-20044968...

geotify (>=0.1.0, <=0.2.0), plutomanager (0.2.0) potentially affected by CVE-2026-102930 via virtualenv (20.25.2)

virtualenv PYPI version 20.25.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - geotify =0.1.0, =0.2.0 - plutomanager 0.2.0 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

lftools (0.31.2) potentially affected by CVE-2026-102930 via virtualenv (20.0.9)

virtualenv PYPI version 20.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - lftools 0.31.2 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

cashu (0.15.1), cfg-analysis-tool-py (0.1.0) +7 more potentially affected by CVE-2026-102930 via virtualenv (20.25.0)

virtualenv PYPI version 20.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cashu 0.15.1 - cfg-analysis-tool-py 0.1.0 - edx-repo-tools 0.8.3 - mamba-toolbox =1.2.5.22, =0.2.1, =2.0.2, =0.1.15, =0.0.7, =0.0.8 Source...

buildpan (>=0.0.12, <=0.0.22), buildpan-cli (1.0.0) +6 more potentially affected by CVE-2026-102930 via virtualenv (20.6.0)

virtualenv PYPI version 20.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - buildpan =0.0.12, =0.1.0, =0.0.0, =0.0.1, =0.0.1, =3.0.2, =3.0.4 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...