0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +2970 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-mysql (>=0.15.0, <=0.66.0)

@opentelemetry/instrumentation-mysql NPM version =0.15.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =3.11.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.3.702, =0.0.65, =0.2.0, =0.2.0, =0.2.6 and more Source cves: CVE-2026-104872 Source advisory...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +3217 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-pg (>=0.15.0, <=0.72.0)

@opentelemetry/instrumentation-pg NPM version =0.15.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =3.11.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.3.702, =0.0.65, =0.2.0, =0.2.0, =0.2.6 and more Source cves: CVE-2026-104872 Source advisory:...

CLSA-2026-1790970528 TuxCare security update for org.springframework (27 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 27 CVEs. Fixed in 5.0.19.RELEASE-tuxcare.1...

dbnomics-data-model (>=0.11.0, <=0.12.1), git2effort (>=0.1.1, <=0.1.4) +2 more potentially affected by unknown CVE via dulwich (0.18.6)

dulwich PYPI version 0.18.6 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - dbnomics-data-model =0.11.0, =0.1.1, =0.1.2, =0.9.16, =0.12.24 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

graal (>=0.3.2rc1, <=0.3.2rc2), grimoire-elk (>=0.103.0rc1, <=0.103.0rc3) potentially affected by unknown CVE via dulwich (0.20.42)

dulwich PYPI version 0.20.42 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - graal =0.3.2rc1, =0.103.0rc1, =0.103.0rc3 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

errbot (6.1.9) potentially affected by unknown CVE via dulwich (0.20.31)

dulwich PYPI version 0.20.31 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - errbot 6.1.9 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

album (>=0.12.0, <=0.12.2), album-distributed (>=0.1.0, <=0.2.1) +30 more potentially affected by unknown CVE via dulwich (0.24.10)

dulwich PYPI version 0.24.10 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - album =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.1.0, =2023.12.1, =0.5.1, =0.1.0a1, =4.0.0, =0.3.1, =2024.11.2, =2025.2.2 and more Sour...

errbot-hl (>=8.0.5, <=8.0.6) potentially affected by unknown CVE via dulwich (0.23.1)

dulwich PYPI version 0.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - errbot-hl =8.0.5, =8.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

prowler (>=5.9.0, <=5.29.3), prowler-cloud (>=5.9.0, <=5.29.2) potentially affected by unknown CVE via dulwich (0.23.0)

dulwich PYPI version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - prowler =5.9.0, =5.9.0, =5.29.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

aptos-verify (1.0.4), kit-big-data-to-do-list (>=1.1.0, <=1.3.0) +3 more potentially affected by unknown CVE via dulwich (0.21.6)

dulwich PYPI version 0.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - aptos-verify 1.0.4 - kit-big-data-to-do-list =1.1.0, =0.103.0, =0.27.0, =1.0.0, =1.3.1 Source cves: unknown CVE Source advisory:...

edu-segmentation (>=0.0.88, <=0.0.115), qgis-deployment-toolbelt (>=0.17.0, <=0.23.0) +1 more potentially affected by unknown CVE via dulwich (0.21.3)

dulwich PYPI version 0.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - edu-segmentation =0.0.88, =0.17.0, =0.23.0 - vocode 0.1.104 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

bamp (>=1.0.2, <=1.2.0), derivatecustomer (>=0.5.0, <=0.6.3) +4 more potentially affected by unknown CVE via dulwich (0.19.16)

dulwich PYPI version 0.19.16 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - bamp =1.0.2, =0.5.0, =0.1.2, =0.2.1, =0.1.1, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grow (1.0.0a6) potentially affected by unknown CVE via dulwich (0.20.2)

dulwich PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grow 1.0.0a6 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

perceval-opnfv (>=0.2.2rc1, <=0.2.2rc2), perceval-puppet (>=0.2.2rc1, <=0.2.2rc2) +1 more potentially affected by unknown CVE via dulwich (0.20.34)

dulwich PYPI version 0.20.34 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - perceval-opnfv =0.2.2rc1, =0.2.2rc1, =0.2.2rc1, =0.2.2rc2 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

tracdap-runtime (>=0.5.15, <=0.6.0rc1) potentially affected by unknown CVE via dulwich (0.21.2)

dulwich PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - tracdap-runtime =0.5.15, =0.6.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

codehub (>=0.0.4.0, <=0.0.4.6), codetmpl (>=0.0.0.5, <=0.0.1.6) +5 more potentially affected by unknown CVE via dulwich (0.19.15)

dulwich PYPI version 0.19.15 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - codehub =0.0.4.0, =0.0.0.5, =0.0.1.0, =1.0.0a1, =0.29.0, =0.0.0.7, =0.0.0.3, =0.0.0.4 Source cves: unknown CVE Source advisory:...

tracdap-runtime (>=0.9.0rc2, <=0.10.0b2) potentially affected by unknown CVE via dulwich (0.23.2)

dulwich PYPI version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - tracdap-runtime =0.9.0rc2, =0.10.0b2 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

anji-common-addons (>=0.3.0, <=0.3.2), anji-core (>=0.8.3, <=0.8.11) +9 more potentially affected by unknown CVE via dulwich (>=1.0.0, <=1.2.6)

dulwich PYPI version =1.0.0, =0.3.0, =0.8.3, =1.10.0, =0.3.1, =5.30.0, =5.30.0, =0.1.9, =0.2.1 Source cves: unknown CVE Source advisory: GHSA-8MCX-5RQC-VHMF...

grimoirelab (>=1.8.0rc1, <=1.8.0) potentially affected by unknown CVE via dulwich (0.22.5)

dulwich PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.8.0rc1, =1.8.0 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

5gasp-cli (>=0.1.0, <=0.4.0), aia-read-svc (>=0.5.1, <=0.6.2) +385 more potentially affected by unknown CVE via dulwich (0.21.7)

dulwich PYPI version 0.21.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - 5gasp-cli =0.1.0, =0.5.1, =2023.2.21, =0.2.0rc3, =0.1.0, =0.1.1, =0.6.0.68, =0.0.1, =0.1.0rc7, =0.1.0, =1.2.2, =1.2.0, =1.2.2 and more Source cve...