aiidalab (>=22.6.0, <=26.9.0), aiidalab-dlpoly (>=0.1.0, <=0.2.0) +114 more potentially affected by unknown CVE via dulwich (>=0.23.1, <=1.2.6)

dulwich PYPI version =0.23.1, =22.6.0, =0.1.0, =0.1.0, =1.3.4, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.3.0, =0.8.3, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5FQC-MRG8-W798...

aiidalab (>=22.6.0, <=26.9.0), aiidalab-dlpoly (>=0.1.0, <=0.2.0) +114 more potentially affected by unknown CVE via dulwich (>=0.23.1, <=1.2.6)

dulwich PYPI version =0.23.1, =22.6.0, =0.1.0, =0.1.0, =1.3.4, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.3.0, =0.8.3, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DULWICH-20416730...

aiidalab (>=22.6.0, <=26.9.0), aiidalab-dlpoly (>=0.1.0, <=0.2.0) +139 more potentially affected by unknown CVE via dulwich (>=0.22.5, <=1.2.6)

dulwich PYPI version =0.22.5, =22.6.0, =0.1.0, =0.1.0, =1.3.4, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.3.0, =0.8.3, =2.0.113, =2.1.117 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DULWICH-20416731...

aiidalab (>=22.6.0, <=26.9.0), aiidalab-dlpoly (>=0.1.0, <=0.2.0) +139 more potentially affected by unknown CVE via dulwich (>=0.22.5, <=1.2.6)

dulwich PYPI version =0.22.5, =22.6.0, =0.1.0, =0.1.0, =1.3.4, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.3.0, =0.8.3, =2.0.113, =2.1.117 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CM62-GVXX-VMXX...

CVE-2026-94637

A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leadin...

CLSA-2026-1790966173 TuxCare security update for fastify (1 CVE)

TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.11.3-tuxcare.5...

@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0), @brabander/config-eslint (>=0.1.1, <=0.5.3) +175 more potentially affected by CVE-2026-104853 via nx (>=23.0.0, <=23.2.0)

nx NPM version =23.0.0, =1.0.0-rc.24, =0.1.1, =1.0.0-alpha.0, =0.3.1, =1.0.0-rc.39, =0.0.2-10, =1.1.0-alpha.3, =0.4.0, =0.20.2, =23.0.0, =23.0.0, =23.0.0, =23.2.0 and more Source cves: CVE-2026-104853 Source advisory: SNYK:JS-NX-20417216...

@0xdeepak/wallets (0.0.2), @10xsai/cloudflare-router-nx-plugin (1.0.0) +1138 more potentially affected by CVE-2026-104854 via nx (>=14.6.0, <=22.7.8)

nx NPM version =14.6.0, =1.2.1, =2.0.0-beta.1, =2.0.0-beta.1, =2.0.0-beta.1, =2.0.0-beta.1, =2.2.1, =0.0.1, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2026-104854 Source advisory: SNYK:JS-NX-20417219...

@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0-rc.87), @brabander/config-eslint (>=0.1.1, <=0.5.3) +173 more potentially affected by CVE-2026-104854 via nx (>=23.0.0, <=23.1.1)

nx NPM version =23.0.0, =1.0.0-rc.24, =0.1.1, =1.0.0-alpha.0, =0.3.1, =1.0.0-rc.39, =0.0.2-10, =1.1.0-alpha.3, =0.20.2, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.1.1 and more Source cves: CVE-2026-104854 Source advisory: SNYK:JS-NX-20417219...

CLSA-2026-1790965371 TuxCare security update for cookie (1 CVE)

TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.1.0-tuxcare.1...

CLSA-2026-1790965180 TuxCare security update for devalue (3 CVEs)

TuxCare rebuilt devalue to address 3 CVEs. Fixed in 5.9.0-tuxcare.3...

CLSA-2026-1790965158 TuxCare security update for browserslist (1 CVE)

TuxCare rebuilt browserslist to address 1 CVE. Fixed in 2.11.3-tuxcare.3...

CLSA-2026-1790963499 TuxCare security update for tar-fs (3 CVEs)

TuxCare rebuilt tar-fs to address 3 CVEs. Fixed in 2.1.1-tuxcare.1...

@hatung/nx-nest-ddd (>=1.0.0, <=1.1.2), @naxodev/nx-cloudflare (>=5.0.0-rc.0, <=5.0.2) +8 more potentially affected by CVE-2026-104859 via @nx/docker (>=21.4.0, <=22.7.7)

@nx/docker NPM version =21.4.0, =1.0.0, =5.0.0-rc.0, =0.1.29, =0.2.3, =21.4.0, =21.4.0, =21.4.0, =0.7.6, =0.0.3, =0.3.5 - @ziacik/azure-func 5.0.0 Source cves: CVE-2026-104859 Source advisory: MEND:CVE-2026-104859...

@nx/express (>=23.0.0, <=23.1.0), @nx/nest (>=23.0.0, <=23.1.0) +1 more potentially affected by CVE-2026-104859 via @nx/docker (>=23.0.0, <=23.1.0)

@nx/docker NPM version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.1.0 Source cves: CVE-2026-104859 Source advisory: MEND:CVE-2026-104859...

@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0), @brabander/config-eslint (>=0.1.1, <=0.5.3) +175 more potentially affected by CVE-2026-104853 via nx (>=23.0.0, <=23.2.0)

nx NPM version =23.0.0, =1.0.0-rc.24, =0.1.1, =1.0.0-alpha.0, =0.3.1, =1.0.0-rc.39, =0.0.2-10, =1.1.0-alpha.3, =0.4.0, =0.20.2, =23.0.0, =23.0.0, =23.0.0, =23.2.0 and more Source cves: CVE-2026-104853 Source advisory: MEND:CVE-2026-104853...

3lc (>=2.3.84, <=2.22.0), 3lc-ultralytics (>=0.1.0, <=0.2.1) +2572 more potentially affected by CVE-2026-104851 via fsspec (>=0.9.0, <=2026.4.0)

fsspec PYPI version =0.9.0, =2.3.84, =0.1.0, =0.3.2, =1.1.0, =0.1.0, =0.2.1, =0.1.3, =2.0.0, =0.1.0, =0.0.5a0, =1.3.0, =1.4.1 and more Source cves: CVE-2026-104851 Source advisory: MEND:CVE-2026-104851...

abliterix (>=1.1.0, <=1.12.2), adasoft (>=0.1.0, <=0.1.1) +395 more potentially affected by CVE-2026-104851 via fsspec (>=2026.1.0, <=2026.4.0)

fsspec PYPI version =2026.1.0, =1.1.0, =0.1.0, =0.4.0, =0.2.14, =2.0.4, =0.1.0, =0.0.7, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.2.0rc1 and more Source cves: CVE-2026-104851 Source advisory: SNYK:PYTHON-FSSPEC-20419437...

CLSA-2026-1790958488 TuxCare security update for org.springframework.data (1 CVE)

TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 3.7.16-tuxcare.2...

@9troisquarts/ant-form (>=2.0.1, <=4.0.5), @activepieces/piece-jira-cloud (>=0.1.13, <=0.3.6) +672 more potentially affected by CVE-2026-104847 via prosemirror-view (>=0.11.2, <=1.42.2)

prosemirror-view NPM version =0.11.2, =2.0.1, =0.1.13, =3.0.0-beta.4, =0.4.0, =11.21.3, =0.1.0, =11.19.4, =11.13.0, =0.0.1, =0.0.1, =13.1.0, =1.7.5, =4.0.4 and more Source cves: CVE-2026-104847 Source advisory: MEND:CVE-2026-104847...