ai4rag (>=0.9.0, <=0.21.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105747 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105747 Source advisory: SNYK:PYTHON-DOCLINGSLIM-20537236...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.10.4) +42 more potentially affected by CVE-2026-105748 via docling (>=2.17.0, <=2.130.0)

docling PYPI version =2.17.0, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =0.0.51 and more Source cves: CVE-2026-105748 Source advisory: SNYK:PYTHON-DOCLING-20537237...

ai4rag (>=0.9.0, <=0.21.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105748 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105748 Source advisory: SNYK:PYTHON-DOCLINGSLIM-20537238...

EUVD-2026-75637

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs...

GHSA-8FXW-FMJ8-XP7J MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +291 more potentially affected by CVE-2026-100723 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

io.squashql:squashql-snowflake (>=1.4.0, <=1.4.2), org.eclipse.dirigible:dirigible-application (>=8.16.0, <=8.18.4) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.2)

net.snowflake:snowflake-jdbc MAVEN version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.squashql:squashql-snowflake =1.4.0, =8.16.0, =16.20.5, =16.20.5, =16.20.5, =16.20.5, =16.20.6 Sourc...

com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.1), com.datasqrl:sqrl-planner (>=0.9.0-alpha1, <=0.9.1) +12 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.27.1)

net.snowflake:snowflake-jdbc MAVEN version 3.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =12.49.0, =12.49.0, =12.49.0,...

piicatcher (>=0.10.1, <=0.12.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.7)

snowflake-connector-python PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - piicatcher =0.10.1, =0.12.1 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

net.snowflake:spark-snowflake_2.10 (>=2.4.5-spark_2.1, <=2.4.8-spark_2.2), net.snowflake:spark-snowflake_2.11 (>=2.4.5, <=2.4.8-spark_2.4_pre_release) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.6.8)

net.snowflake:snowflake-jdbc MAVEN version 3.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.10 =2.4.5-spark2.1, =2.4.5, =2.4.8-spark2.4prerelease Source cves:...

dagster-snowflake (>=0.6.4rc0, <=0.6.5), data-lineage (>=0.5.1, <=0.9.0) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.1)

snowflake-connector-python PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.6.4rc0, =0.5.1, =0.8.3, =1.0.7, =2.43.2, =0.16.0, =0.1.0.dev3, =0.1.2 Source cves:...

pipelinewise-tap-snowflake (2.0.1), snowday (>=0.1.3, <=0.1.5) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.9)

snowflake-connector-python PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.1 - snowday =0.1.3, =0.1.5 Source cves: CVE-2026-86597 Source advisory:...

io.apiman:apiman-manager-api-jpa (>=3.0.0.rc6, <=3.1.3.final), io.apiman:apiman-manager-api-micro (>=3.0.0.rc6, <=3.1.3.final) +8 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.21)

net.snowflake:snowflake-jdbc MAVEN version 3.13.21 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.apiman:apiman-manager-api-jpa =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =4.15.0, =16.17.1,...

dbt-gen (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.4)

snowflake-connector-python PYPI version 2.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-gen =0.1.1, =0.1.4 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

com.codbex.atlas:codbex-atlas-application (2.76.0), com.datasqrl:sqrl-discovery (0.7.1) +12 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.25.1)

net.snowflake:snowflake-jdbc MAVEN version 3.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application 2.76.0 - com.datasqrl:sqrl-discovery 0.7.1 -...

net.snowflake:spark-snowflake_2.11 (>=2.7.2-spark_2.2, <=2.7.2-spark_2.4), net.snowflake:spark-snowflake_2.12 (2.7.2-spark_2.4) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.12.7)

net.snowflake:snowflake-jdbc MAVEN version 3.12.7 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 =2.7.2-spark2.2, =2.7.2-spark2.4 - net.snowflake:spark-snowflake2.12...

com.linkedin.iceberg:iceberg-snowflake (>=v1.2.0.1-1-gadc43b8, <=1.2.0.25), dev.ocpd.liquibase.ext:liquibase-hibernate5 (4.18.0-b6) +12 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.22)

net.snowflake:snowflake-jdbc MAVEN version 3.13.22 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.linkedin.iceberg:iceberg-snowflake =v1.2.0.1-1-gadc43b8, =9.15.2, =0.5.0, =2.11.0-spark3.1,...

net.snowflake:spark-snowflake_2.10 (2.4.14-spark_2.2), net.snowflake:spark-snowflake_2.11 (>=2.4.14-spark_2.2, <=2.4.14-spark_2.4) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.8.0)

net.snowflake:snowflake-jdbc MAVEN version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.10 2.4.14-spark2.2 - net.snowflake:spark-snowflake2.11 =2.4.14-spark2.2,...

soda-sql (>=2.0.0b17, <=2.0.0b27), soda-sql-snowflake (>=2.1.0b12, <=2.1.6) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.0)

snowflake-connector-python PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - soda-sql =2.0.0b17, =2.1.0b12, =2.1.6 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...