academic-metrics (>=0.1.0b0, <=1.0.99), accomate (>=1.0.4, <=2.0.0.6) +808 more potentially affected by CVE-2026-88029 via pymongo (>=4.0.0, <=4.18.0)

pymongo PYPI version =4.0.0, =0.1.0b0, =1.0.4, =0.9.0, =0.3.0, =0.1.0, =0.1.23, =0.22.0, =0.3.0, =0.2.0, =0.1.0, =0.8.1 - aind-metadata-mapper 0.12.4 - aind-metadata-mcp 0.1.0 and more Source cves: CVE-2026-88029 Source advisory: GHSA-8FVV-FGR5-F8CH...

academic-metrics (>=0.1.0b0, <=1.0.99), accomate (>=1.0.4, <=2.0.0.6) +808 more potentially affected by CVE-2026-88029 via pymongo (>=4.0.0, <=4.18.0)

pymongo PYPI version =4.0.0, =0.1.0b0, =1.0.4, =0.9.0, =0.3.0, =0.1.0, =0.1.23, =0.22.0, =0.3.0, =0.2.0, =0.1.0, =0.8.1 - aind-metadata-mapper 0.12.4 - aind-metadata-mcp 0.1.0 and more Source cves: CVE-2026-88029 Source advisory: OSV:GHSA-8FVV-FGR5-F8CH...

ai4rag (>=0.9.0, <=0.21.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105747 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105747 Source advisory: SNYK:PYTHON-DOCLINGSLIM-20537236...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.10.4) +42 more potentially affected by CVE-2026-105748 via docling (>=2.17.0, <=2.130.0)

docling PYPI version =2.17.0, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =0.0.51 and more Source cves: CVE-2026-105748 Source advisory: SNYK:PYTHON-DOCLING-20537237...

ai4rag (>=0.9.0, <=0.21.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105748 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105748 Source advisory: SNYK:PYTHON-DOCLINGSLIM-20537238...

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

EUVD-2026-75637

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs...

GHSA-8FXW-FMJ8-XP7J MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +291 more potentially affected by CVE-2026-100723 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

pipelinewise-tap-snowflake (2.0.1), snowday (>=0.1.3, <=0.1.5) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.9)

snowflake-connector-python PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.1 - snowday =0.1.3, =0.1.5 Source cves: CVE-2026-86597 Source advisory:...

io.apiman:apiman-manager-api-jpa (>=3.0.0.rc6, <=3.1.3.final), io.apiman:apiman-manager-api-micro (>=3.0.0.rc6, <=3.1.3.final) +8 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.21)

net.snowflake:snowflake-jdbc MAVEN version 3.13.21 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.apiman:apiman-manager-api-jpa =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =4.15.0, =16.17.1,...

net.snowflake:spark-snowflake_2.11 (>=2.7.2-spark_2.2, <=2.7.2-spark_2.4), net.snowflake:spark-snowflake_2.12 (2.7.2-spark_2.4) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.12.7)

net.snowflake:snowflake-jdbc MAVEN version 3.12.7 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 =2.7.2-spark2.2, =2.7.2-spark2.4 - net.snowflake:spark-snowflake2.12...

snowflake-cli-labs (>=3.0.0rc1, <=3.0.0rc2) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.1)

snowflake-connector-python PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli-labs =3.0.0rc1, =3.0.0rc2 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV...

piicatcher (>=0.10.1, <=0.12.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.7)

snowflake-connector-python PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - piicatcher =0.10.1, =0.12.1 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

net.snowflake:spark-snowflake_2.11 (>=2.6.0-spark_2.2, <=2.6.0-spark_2.4), net.snowflake:spark-snowflake_2.12 (2.6.0-spark_2.4) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.12.1)

net.snowflake:snowflake-jdbc MAVEN version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 =2.6.0-spark2.2, =2.6.0-spark2.4 - net.snowflake:spark-snowflake2.12...

com.linkedin.feathr:feathr_2.12 (>=0.1.0, <=0.1.1), com.snowflake:snowpark (>=1.2.0, <=1.7.2) +12 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.14)

net.snowflake:snowflake-jdbc MAVEN version 3.13.14 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.linkedin.feathr:feathr2.12 =0.1.0, =1.2.0, =0.2.10, =0.2.10, =2.3.0, =0.0.8, =2.9.3-spark2.4,...

net.snowflake:spark-snowflake_2.10 (>=2.4.5-spark_2.1, <=2.4.8-spark_2.2), net.snowflake:spark-snowflake_2.11 (>=2.4.5, <=2.4.8-spark_2.4_pre_release) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.6.8)

net.snowflake:snowflake-jdbc MAVEN version 3.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.10 =2.4.5-spark2.1, =2.4.5, =2.4.8-spark2.4prerelease Source cves:...

us.fatehi:schemacrawler-examplecode (16.19.11), us.fatehi:schemacrawler-jdbc-drivers (16.19.11) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.32)

net.snowflake:snowflake-jdbc MAVEN version 3.13.32 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - us.fatehi:schemacrawler-examplecode 16.19.11 - us.fatehi:schemacrawler-jdbc-drivers 16.19.11 -...

aladdinsdk (>=0.0.1a4.post0, <=2.0.0b6), icsdatavalidation (>=1.0.232, <=1.0.378) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.7.1)

snowflake-connector-python PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - aladdinsdk =0.0.1a4.post0, =1.0.232, =0.2.0, =0.1.0, =0.3.0 Source cves: CVE-2026-86597 Source advisory:...

com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.1), com.datasqrl:sqrl-planner (>=0.9.0-alpha1, <=0.9.1) +12 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.27.1)

net.snowflake:snowflake-jdbc MAVEN version 3.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =12.49.0, =12.49.0, =12.49.0,...