CLSA-2026-1791033793 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 16 @angular packages to address 1 CVE. Fixed in 17.3.12-tuxcare.18...

Malicious Package

Overview voxcpmtts3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CLSA-2026-1791029776 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 16 @angular packages to address 1 CVE. Fixed in 18.1.2-tuxcare.8...

CLSA-2026-1791028234 TuxCare security update for undici (3 CVEs)

TuxCare rebuilt undici to address 3 CVEs. Fixed in 7.28.0-tuxcare.7...

CLSA-2026-1791028139 TuxCare security update for ip-address (1 CVE)

TuxCare rebuilt ip-address to address 1 CVE. Fixed in 6.4.0-tuxcare.6...

CLSA-2026-1791028128 TuxCare security update for fastify (1 CVE)

TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.7.4-tuxcare.4...

CLSA-2026-1791028126 TuxCare security update for minimatch (2 CVEs)

TuxCare rebuilt minimatch to address 2 CVEs. Fixed in 10.1.1-tuxcare.1...

CLSA-2026-1791028079 TuxCare security update for undici (11 CVEs)

TuxCare rebuilt undici to address 11 CVEs. Fixed in 6.19.5-tuxcare.2...

CLSA-2026-1791028065 TuxCare security update for piscina (1 CVE)

TuxCare rebuilt piscina to address 1 CVE. Fixed in 4.4.0-tuxcare.1...

CLSA-2026-1791028060 TuxCare security update for karma (1 CVE)

TuxCare rebuilt karma to address 1 CVE. Fixed in 5.2.3-tuxcare.1...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-debug-jdk15to18 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536973...

com.itextpdf:bouncy-castle-fips-adapter (>=9.6.0, <=9.8.0), com.pkixops:pkixops-crypto (1.5.2) +164 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-fips (>=2.1.8, <=2.1.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.1.8, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =2.56.0 and more Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536909...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85) potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-debug-jdk14 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk14 MAVEN version =1.81, =1.81, =1.85 Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536903...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.11.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.4.0, <=9.5.0) +19 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcutil-fips (>=2.0.3, <=2.0.6)

org.bouncycastle:bcutil-fips MAVEN version =2.0.3, =3.0.16.0, =9.4.0, =4.0.7.1, =4.0.7.1, =3.0.15, =3.22.0, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 and more Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536971...

app.cash.trifle:common (>=0.2.9, <=0.2.10), app.cash.trifle:jvm (>=0.1.0, <=0.2.10) +1030 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-jdk15to18 (>=1.63, <=1.85)

org.bouncycastle:bcpkix-jdk15to18 MAVEN version =1.63, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =3.5.0.0, =2.6.4, =2.6.4, =2.6.4, =2.6.4, =2.6.4, =3.0.8 and more Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536907...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.11.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.0.0, <=9.5.0) +10 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-fips (>=2.0.7, <=2.0.11)

org.bouncycastle:bcpkix-fips MAVEN version =2.0.7, =3.0.16.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536979...

app.cash.backfila:client-misk-hibernate (>=2025.07.28.193750-99c8949, <=2026.10.01.201111-ad9f619), app.cash.backfila:service (>=2025.07.28.193750-99c8949, <=2026.10.01.201111-ad9f619) +674 more potentially affected by CVE-2026-71886 via org.bouncycastle:bcpg-jdk18on (>=1.81, <=1.85)

org.bouncycastle:bcpg-jdk18on MAVEN version =1.81, =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949, =4.3.0.549.vf2adaad19b5e, =1.46.0, =0.0.78, =0.4.7, =0.4.7, =0.4.7, =0.4.7, =0.4.8 and more Source cves: CVE-2026-71886 Source advisory:...

io.github.epi155:promethium-pgp-jdk5 (0.5-b1), org.sonatype.nexus.api.extdirect:nexus-api-extdirect-common (>=3.84.0-03, <=3.88.0-08) +109 more potentially affected by CVE-2026-71886 via org.bouncycastle:bcpg-jdk15to18 (>=1.81, <=1.84)

org.bouncycastle:bcpg-jdk15to18 MAVEN version =1.81, =3.84.0-03, =3.84.0-03, =3.84.0-03, =3.84.0-03, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.92.3-01 and more S...

org.bouncycastle:bcmail-jdk14 (>=1.73, <=1.85), org.bouncycastle:bcpg-jdk14 (>=1.73, <=1.85) +11 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-jdk14 (>=1.73, <=1.85.1)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.73, =1.73, =1.73, =1.73, =1.73, =1.73, =0.2.5, =1.0.1-rc.1, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.3.2 Source cves: CVE-2026-18040 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536927...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19981 more potentially affected by CVE-2026-97873 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.85.2)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-97873 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536969...