app.cash.trifle:common (>=0.2.9, <=0.2.10), app.cash.trifle:jvm (>=0.1.0, <=0.2.10) +1030 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-jdk15to18 (>=1.63, <=1.85)

org.bouncycastle:bcpkix-jdk15to18 MAVEN version =1.63, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =3.5.0.0, =2.6.4, =2.6.4, =2.6.4, =2.6.4, =2.6.4, =3.0.8 and more Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536907...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.11.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.4.0, <=9.5.0) +19 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcutil-fips (>=2.0.3, <=2.0.6)

org.bouncycastle:bcutil-fips MAVEN version =2.0.3, =3.0.16.0, =9.4.0, =4.0.7.1, =4.0.7.1, =3.0.15, =3.22.0, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 and more Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536971...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.11.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.0.0, <=9.5.0) +10 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-fips (>=2.0.7, <=2.0.11)

org.bouncycastle:bcpkix-fips MAVEN version =2.0.7, =3.0.16.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536979...

app.cash.backfila:client-misk-hibernate (>=2025.07.28.193750-99c8949, <=2026.10.01.201111-ad9f619), app.cash.backfila:service (>=2025.07.28.193750-99c8949, <=2026.10.01.201111-ad9f619) +674 more potentially affected by CVE-2026-71886 via org.bouncycastle:bcpg-jdk18on (>=1.81, <=1.85)

org.bouncycastle:bcpg-jdk18on MAVEN version =1.81, =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949, =4.3.0.549.vf2adaad19b5e, =1.46.0, =0.0.78, =0.4.7, =0.4.7, =0.4.7, =0.4.7, =0.4.8 and more Source cves: CVE-2026-71886 Source advisory:...

io.github.epi155:promethium-pgp-jdk5 (0.5-b1), org.sonatype.nexus.api.extdirect:nexus-api-extdirect-common (>=3.84.0-03, <=3.88.0-08) +109 more potentially affected by CVE-2026-71886 via org.bouncycastle:bcpg-jdk15to18 (>=1.81, <=1.84)

org.bouncycastle:bcpg-jdk15to18 MAVEN version =1.81, =3.84.0-03, =3.84.0-03, =3.84.0-03, =3.84.0-03, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.92.3-01 and more S...

org.bouncycastle:bcmail-jdk14 (>=1.73, <=1.85), org.bouncycastle:bcpg-jdk14 (>=1.73, <=1.85) +11 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-jdk14 (>=1.73, <=1.85.1)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.73, =1.73, =1.73, =1.73, =1.73, =1.73, =0.2.5, =1.0.1-rc.1, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.3.2 Source cves: CVE-2026-18040 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536927...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19981 more potentially affected by CVE-2026-97873 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.85.2)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-97873 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536969...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) +4 more potentially affected by CVE-2026-97873 via org.bouncycastle:bcprov-debug-jdk15to18 (>=1.81, <=1.85.1)

org.bouncycastle:bcprov-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85.1 Source cves: CVE-2026-97873 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536964...

app.ductape:sdk (0.1.10), cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21) +449 more potentially affected by CVE-2026-97873 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.12.1)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-97873 Source advisory:...

app.cash.bittycity:outie (0.0.1), app.cash.bittycity:outie-jooq-provider (0.0.1) +1333 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-jdk15to18 (>=1.72, <=1.85.1)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.72, =0.0.2, =0.0.2.1, =0.2.9, =0.2.8, =0.2.8, =0.2.8, =0.1.0-m36, =0.1.0-m27, =1.0.1-rc14, =3.5.0.0, =3.5.5.3 - cn.lnkdoc.sdk:awesome-uia-alipay-sdk 3.0.0-rc1 and more Source cves: CVE-2026-18040 Source advisory: MEND:CVE-2026-18040...

io.github.epi155:promethium-pgp-jdk5 (0.5-b1), org.sonatype.nexus.api.extdirect:nexus-api-extdirect-common (>=3.84.0-03, <=3.88.0-08) +109 more potentially affected by CVE-2026-71886 via org.bouncycastle:bcpg-jdk15to18 (>=1.81, <=1.84)

org.bouncycastle:bcpg-jdk15to18 MAVEN version =1.81, =3.84.0-03, =3.84.0-03, =3.84.0-03, =3.84.0-03, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.92.3-01 and more S...

at.quickme.kotlinmailer:core (>=1.0.1-rc14, <=1.0.5), cn.gmkit:gmkit (0.10.1) +841 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-jdk15to18 (>=1.74, <=1.85)

org.bouncycastle:bcpkix-jdk15to18 MAVEN version =1.74, =1.0.1-rc14, =3.5.0.0, =2.8.6, =2.8.6, =2.8.6, =2.8.6, =2.8.6, =1.4.1, =3.3.0-rc1, =2.26.0, =2.26.0, =9.1.0.17, =9.3.0.10, =2.7.17, =3.2.1 and more Source cves: CVE-2026-71889 Source advisory: MEND:CVE-2026-71889...

app.cash.bittycity:outie (0.0.1), app.cash.bittycity:outie-jooq-provider (0.0.1) +1895 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcprov-jdk15to18 (>=1.63, <=1.85.2)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.63, =0.0.2, =0.0.1, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =0.1.0-m36, =0.1.0-m26, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =0.3.0 - ch.pontius.nio:smb-nio 0.9.0 and more Source cves: CVE-2026-71889 Source advisory: MEND:CVE-2026-71889...

Pentesting

⚡ Pentesting Toolkit v3.0 — AMAN EDITION Pentesting Toolkit e...

MAL-2026-17489 Malicious code in express-enhanced (npm)

[email protected] impersonates express it copies express's package metadata, including the description "Fast, unopinionated, minimalist web framework" and author TJ Holowaychuk and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

[SECURITY] Fedora 45 Update: xmlsec1-1.3.11-7.fc45

XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to support major XML security standards "XML Digital Signature" and "XML Encryption"...

[SECURITY] Fedora 45 Update: rarian-0.8.6-8.fc45

Rarian is a documentation meta-data library that allows access to documents, man pages and info pages. It was designed as a replacement for scrollkeeper...

[SECURITY] Fedora 45 Update: podofo-1.1.2-2.fc45

PoDoFo is a library to work with the PDF file format. The name comes from the first letter of PDF Portable Document Format. A few tools to work with PDF files are already included in the PoDoFo package. The PoDoFo library is a free, portable C++ library which includes classes to parse PDF files a...

[SECURITY] Fedora 45 Update: PDAL-2.10.2-5.fc45

PDAL is a BSD licensed library for translating and manipulating point cloud data of various formats. It is a library that is analogous to the GDAL raster library. PDAL is focused on reading, writing, and translating point cloud data from the ever-growing constellation of data formats. While PDAL ...

[SECURITY] Fedora 45 Update: m17n-lib-1.8.6-5.fc45

m17n-lib is a multilingual text library used primarily to allow the input of many languages with the input table maps from m17n-db. The package provides the core and input method backend libraries...