app.cash.backfila:client-misk-hibernate (>=2025.07.28.193750-99c8949, <=2026.10.01.201111-ad9f619), app.cash.backfila:service (>=2025.07.28.193750-99c8949, <=2026.10.01.201111-ad9f619) +679 more potentially affected by CVE-2026-71887 via org.bouncycastle:bcpg-jdk18on (>=1.81, <=1.85)

org.bouncycastle:bcpg-jdk18on MAVEN version =1.81, =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949, =4.3.0.549.vf2adaad19b5e, =1.46.0, =0.0.78, =0.4.7, =0.4.7, =0.4.7, =0.4.7, =0.4.8 and more Source cves: CVE-2026-71887 Source advisory: MEND:CVE-2026-71887...

app.ductape:sdk (0.1.10), cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21) +423 more potentially affected by CVE-2026-71883 via org.bouncycastle:bcprov-lts8on (>=2.73.4, <=2.73.12.1)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.4, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.3-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-71883 Source advisory: MEND:CVE-2026-71883...

app.cash.trifle:common (>=0.2.9, <=0.2.10), app.cash.trifle:jvm (>=0.1.0, <=0.2.10) +1030 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-jdk15to18 (>=1.63, <=1.85)

org.bouncycastle:bcpkix-jdk15to18 MAVEN version =1.63, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =3.5.0.0, =2.6.4, =2.6.4, =2.6.4, =2.6.4, =2.6.4, =3.0.8 and more Source cves: CVE-2026-71888 Source advisory: MEND:CVE-2026-71888...

com.itextpdf:bouncy-castle-fips-adapter (>=9.6.0, <=9.8.0), com.pkixops:pkixops-crypto (1.5.2) +165 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-fips (>=2.1.8, <=2.1.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.1.8, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =2.56.0 and more Source cves: CVE-2026-71888 Source advisory: MEND:CVE-2026-71888...

com.ascentstream.pulsar:bcfips-include-test (>=2.10.6.9, <=3.0.8.0-snapshot-16a7bcc), com.ascentstream.pulsar:bouncy-castle-bcfips (>=2.10.6.9, <=3.0.14.1) +20 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-fips (>=1.0.1, <=1.0.12)

org.bouncycastle:bcpkix-fips MAVEN version =1.0.1, =2.10.6.9, =2.10.6.9, =2.1.2, =8.0.0, =1.2.0, =1.17.0, =1.17.0, =1.0.0, =1.0.0, =3.0.0-rc1, =3.0.0-rc6, =1.0.0, =1.0.1 - io.skuber:skuber-examples2.12 2.6.3 - io.skuber:skuber-examples2.13 2.6.3 and more Source cves: CVE-2026-71888 Source advisor...

app.cash.bittycity:outie (0.0.1), app.cash.bittycity:outie-jooq-provider (0.0.1) +1895 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcprov-jdk15to18 (>=1.63, <=1.85.2)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.63, =0.0.2, =0.0.1, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =0.1.0-m36, =0.1.0-m26, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =0.3.0 - ch.pontius.nio:smb-nio 0.9.0 and more Source cves: CVE-2026-71889 Source advisory: MEND:CVE-2026-71889...

at.quickme.kotlinmailer:core (>=1.0.1-rc14, <=1.0.5), cn.gmkit:gmkit (0.10.1) +841 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-jdk15to18 (>=1.74, <=1.85)

org.bouncycastle:bcpkix-jdk15to18 MAVEN version =1.74, =1.0.1-rc14, =3.5.0.0, =2.8.6, =2.8.6, =2.8.6, =2.8.6, =2.8.6, =1.4.1, =3.3.0-rc1, =2.26.0, =2.26.0, =9.1.0.17, =9.3.0.10, =2.7.17, =3.2.1 and more Source cves: CVE-2026-71889 Source advisory: MEND:CVE-2026-71889...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.14.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.0.0, <=9.5.0) +10 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-fips (>=2.0.7, <=2.0.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.0.7, =3.0.16.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 Source cves: CVE-2026-71889 Source advisory: MEND:CVE-2026-71889...

cn.gmkit:gmkit (0.10.1), cn.herodotus.engine:facility-tencent-spring-boot-starter (>=3.5.0.0, <=3.5.5.3) +781 more potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-jdk15to18 (>=1.78, <=1.85)

org.bouncycastle:bcpkix-jdk15to18 MAVEN version =1.78, =3.5.0.0, =2.8.6, =2.8.6, =2.8.6, =2.8.6, =2.8.6, =9.2.0.26, =9.3.0.20, =1.0.0-beta0001, =1.0.0-beta0001, =1.0.0-beta0002 and more Source cves: CVE-2026-71892 Source advisory: MEND:CVE-2026-71892...

com.itextpdf:bouncy-castle-fips-adapter (>=9.6.0, <=9.8.0), com.pkixops:pkixops-crypto (1.5.2) +165 more potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-fips (>=2.1.8, <=2.1.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.1.8, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =2.56.0 and more Source cves: CVE-2026-71892 Source advisory: MEND:CVE-2026-71892...

Pentesting

⚡ Pentesting Toolkit v3.0 — AMAN EDITION Pentesting Toolkit e...

app.cash.backfila:client-misk-hibernate (>=2025.05.13.195510-03b951f, <=2026.10.01.201111-ad9f619), app.cash.backfila:service (>=2025.05.13.195510-03b951f, <=2026.10.01.201111-ad9f619) +1141 more potentially affected by CVE-2026-85515 via org.bouncycastle:bcpg-jdk18on (>=1.72, <=1.85)

org.bouncycastle:bcpg-jdk18on MAVEN version =1.72, =2025.05.13.195510-03b951f, =2025.05.13.195510-03b951f, =2025.05.13.195510-03b951f, =1.0.0, =1.0.0, =1.1, =4.3.0.549.vf2adaad19b5e, =1.5.0, =0.1.0, =0.1.5 and more Source cves: CVE-2026-85515 Source advisory: MEND:CVE-2026-85515...

MAL-2026-17489 Malicious code in express-enhanced (npm)

[email protected] impersonates express it copies express's package metadata, including the description "Fast, unopinionated, minimalist web framework" and author TJ Holowaychuk and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

[SECURITY] Fedora 45 Update: xmlsec1-1.3.11-7.fc45

XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to support major XML security standards "XML Digital Signature" and "XML Encryption"...

[SECURITY] Fedora 45 Update: rarian-0.8.6-8.fc45

Rarian is a documentation meta-data library that allows access to documents, man pages and info pages. It was designed as a replacement for scrollkeeper...

[SECURITY] Fedora 45 Update: podofo-1.1.2-2.fc45

PoDoFo is a library to work with the PDF file format. The name comes from the first letter of PDF Portable Document Format. A few tools to work with PDF files are already included in the PoDoFo package. The PoDoFo library is a free, portable C++ library which includes classes to parse PDF files a...

[SECURITY] Fedora 45 Update: PDAL-2.10.2-5.fc45

PDAL is a BSD licensed library for translating and manipulating point cloud data of various formats. It is a library that is analogous to the GDAL raster library. PDAL is focused on reading, writing, and translating point cloud data from the ever-growing constellation of data formats. While PDAL ...

[SECURITY] Fedora 45 Update: m17n-lib-1.8.6-5.fc45

m17n-lib is a multilingual text library used primarily to allow the input of many languages with the input table maps from m17n-db. The package provides the core and input method backend libraries...

[SECURITY] Fedora 45 Update: libxklavier-5.4-32.fc45

libxklavier is a library providing a high-level API for the X Keyboard Extension XKB. This library is intended to support XFree86 and other commercial X servers. It is useful for creating XKB-related software layout indicators etc...

[SECURITY] Fedora 45 Update: libsoup-2.74.3-12.fc45

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...