323947 matches found
acmer (>=0.0.1, <=0.0.4), auth-proxy (>=0.0.1, <=0.1.1) +463 more potentially affected by CVE-2026-18140 via aws-smithy-json (>=0.27.0-alpha.1, <=0.56.1)
aws-smithy-json CARGO version =0.27.0-alpha.1, =0.0.1, =0.0.1, =0.2.36, =0.0.18, =0.0.42, =0.0.1, =0.0.22-alpha, =0.0.1, =0.0.24, =0.0.1, =0.1.0, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.34.0 and more Source cves: CVE-2026-18140 Source advisory: GHSA-8FFR-XGWF-XJ56...
0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +887 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-oracledb (>=0.27.0, <=0.45.0)
@opentelemetry/instrumentation-oracledb NPM version =0.27.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.7, =5.1.1-staging.260347880488, =5.1.1-staging.260347880488, =5.1.1-staging.260347880488,...
0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +3244 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-pg (>=0.15.0, <=0.72.0)
@opentelemetry/instrumentation-pg NPM version =0.15.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =3.11.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.3.702, =0.0.65, =0.2.0, =0.2.0, =0.2.6 and more Source cves: CVE-2026-104872 Source advisory:...
0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +2901 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-tedious (>=0.4.0, <=0.39.0)
@opentelemetry/instrumentation-tedious NPM version =0.4.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =3.11.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.3.702, =0.0.65, =0.2.0, =0.2.0, =0.2.6 and more Source cves: CVE-2026-104872 Source advisor...
CLSA-2026-1790970528 TuxCare security update for org.springframework (27 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 27 CVEs. Fixed in 5.0.19.RELEASE-tuxcare.1...
CVE-2026-94637
A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leadin...
CLSA-2026-1790966173 TuxCare security update for fastify (1 CVE)
TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.11.3-tuxcare.5...
CLSA-2026-1790965371 TuxCare security update for cookie (1 CVE)
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.1.0-tuxcare.1...
CLSA-2026-1790965180 TuxCare security update for devalue (3 CVEs)
TuxCare rebuilt devalue to address 3 CVEs. Fixed in 5.9.0-tuxcare.3...
CLSA-2026-1790965158 TuxCare security update for browserslist (1 CVE)
TuxCare rebuilt browserslist to address 1 CVE. Fixed in 2.11.3-tuxcare.3...
CLSA-2026-1790963499 TuxCare security update for tar-fs (3 CVEs)
TuxCare rebuilt tar-fs to address 3 CVEs. Fixed in 2.1.1-tuxcare.1...
3lc (>=2.3.84, <=2.22.0), 3lc-ultralytics (>=0.1.0, <=0.2.1) +2607 more potentially affected by CVE-2026-104851 via fsspec (>=0.9.0, <=2026.4.0)
fsspec PYPI version =0.9.0, =2.3.84, =0.1.0, =0.3.2, =1.1.0, =0.1.0, =0.2.1, =0.1.3, =2.0.0, =0.1.0, =0.0.5a0, =1.3.0, =1.4.1 and more Source cves: CVE-2026-104851 Source advisory: MEND:CVE-2026-104851...
abliterix (>=1.1.0, <=1.12.2), adasoft (>=0.1.0, <=0.1.1) +394 more potentially affected by CVE-2026-104851 via fsspec (>=2026.1.0, <=2026.4.0)
fsspec PYPI version =2026.1.0, =1.1.0, =0.1.0, =0.4.0, =0.2.14, =2.0.4, =0.1.0, =0.0.0, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.2.0rc1 and more Source cves: CVE-2026-104851 Source advisory: SNYK:PYTHON-FSSPEC-20419437...
CLSA-2026-1790958488 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 3.7.16-tuxcare.2...
@9troisquarts/ant-form (>=2.0.1, <=4.0.5), @activepieces/piece-jira-cloud (>=0.1.13, <=0.3.6) +672 more potentially affected by CVE-2026-104847 via prosemirror-view (>=0.11.2, <=1.42.2)
prosemirror-view NPM version =0.11.2, =2.0.1, =0.1.13, =3.0.0-beta.4, =0.4.0, =11.21.3, =0.1.0, =11.19.4, =11.13.0, =0.0.1, =0.0.1, =13.1.0, =1.7.5, =4.0.4 and more Source cves: CVE-2026-104847 Source advisory: MEND:CVE-2026-104847...
CLSA-2026-1790952864 TuxCare security update for org.springframework (13 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 13 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.6...
CLSA-2026-1790952166 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.5...
CLSA-2026-1790951905 TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 2.7.16-tuxcare.2...
0lever-utils (>=0.1.0, <=0.1.6), agents-schema (>=0.0.8, <=0.0.11) +252 more potentially affected by CVE-2026-94654 via thrift (>=0.9.2, <=0.24.0)
thrift PYPI version =0.9.2, =0.1.0, =0.0.8, =0.1.0, =0.1.0, =0.0.1, =1.0.1, =0.1.0, =0.13.3, =0.6.6, =1.0.6, =2.7.0rc1, =0.1.0, =0.0.32, =0.1.9, =0.1.12 and more Source cves: CVE-2026-94654 Source advisory: SNYK:PYTHON-THRIFT-20571817...