363297 matches found
aiidalab (>=22.6.0, <=26.9.0), aiidalab-dlpoly (>=0.1.0, <=0.2.0) +139 more potentially affected by CVE-2026-114098 via dulwich (>=0.22.5, <=1.2.6)
dulwich PYPI version =0.22.5, =22.6.0, =0.1.0, =0.1.0, =1.3.4, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.3.0, =0.8.3, =2.0.113, =2.1.117 and more Source cves: CVE-2026-114098 Source advisory: OSV:GHSA-CM62-GVXX-VMXX...
CVE-2026-94637
A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leadin...
CLSA-2026-1790966173 TuxCare security update for fastify (1 CVE)
TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.11.3-tuxcare.5...
org.webjars.npm:npmcli__query (4.0.1) potentially affected by CVE-2026-104844 via org.webjars.npm:postcss-selector-parser (7.1.0)
org.webjars.npm:postcss-selector-parser MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:postcss-selector-parser and may be impacted: - org.webjars.npm:npmcliquery 4.0.1 Source cves: CVE-2026-104844 Source advisory:...
@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0), @brabander/config-eslint (>=0.1.1, <=0.5.3) +176 more potentially affected by CVE-2026-104853 via nx (>=23.0.0, <=23.2.0)
nx NPM version =23.0.0, =1.0.0-rc.24, =0.1.1, =1.0.0-alpha.0, =0.3.1, =1.0.0-rc.39, =0.0.2-10, =1.1.0-alpha.3, =0.4.0, =0.20.2, =23.0.0, =23.0.0, =23.0.0, =23.2.0 and more Source cves: CVE-2026-104853 Source advisory: SNYK:JS-NX-20417216...
@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0-rc.87), @brabander/config-eslint (>=0.1.1, <=0.5.3) +174 more potentially affected by CVE-2026-104854 via nx (>=23.0.0, <=23.1.1)
nx NPM version =23.0.0, =1.0.0-rc.24, =0.1.1, =1.0.0-alpha.0, =0.3.1, =1.0.0-rc.39, =0.0.2-10, =1.1.0-alpha.3, =0.20.2, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.1.1 and more Source cves: CVE-2026-104854 Source advisory: SNYK:JS-NX-20417219...
@0xdeepak/wallets (0.0.2), @10xsai/cloudflare-router-nx-plugin (1.0.0) +1180 more potentially affected by CVE-2026-104854 via nx (>=14.6.0, <=22.7.8)
nx NPM version =14.6.0, =1.2.1, =2.0.0-beta.1, =2.0.0-beta.1, =2.0.0-beta.1, =2.0.0-beta.1, =2.2.1, =0.0.1, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2026-104854 Source advisory: SNYK:JS-NX-20417219...
CLSA-2026-1790965371 TuxCare security update for cookie (1 CVE)
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.1.0-tuxcare.1...
CLSA-2026-1790965180 TuxCare security update for devalue (3 CVEs)
TuxCare rebuilt devalue to address 3 CVEs. Fixed in 5.9.0-tuxcare.3...
CLSA-2026-1790965158 TuxCare security update for browserslist (1 CVE)
TuxCare rebuilt browserslist to address 1 CVE. Fixed in 2.11.3-tuxcare.3...
CLSA-2026-1790963499 TuxCare security update for tar-fs (3 CVEs)
TuxCare rebuilt tar-fs to address 3 CVEs. Fixed in 2.1.1-tuxcare.1...
@hatung/nx-nest-ddd (>=1.0.0, <=1.1.2), @naxodev/nx-cloudflare (>=5.0.0-rc.0, <=5.0.2) +8 more potentially affected by CVE-2026-104859 via @nx/docker (>=21.4.0, <=22.7.7)
@nx/docker NPM version =21.4.0, =1.0.0, =5.0.0-rc.0, =0.1.29, =0.2.3, =21.4.0, =21.4.0, =21.4.0, =0.7.6, =0.0.3, =0.3.5 - @ziacik/azure-func 5.0.0 Source cves: CVE-2026-104859 Source advisory: MEND:CVE-2026-104859...
@nx/express (>=23.0.0, <=23.1.0), @nx/nest (>=23.0.0, <=23.1.0) +1 more potentially affected by CVE-2026-104859 via @nx/docker (>=23.0.0, <=23.1.0)
@nx/docker NPM version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.1.0 Source cves: CVE-2026-104859 Source advisory: MEND:CVE-2026-104859...
@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0), @brabander/config-eslint (>=0.1.1, <=0.5.3) +176 more potentially affected by CVE-2026-104853 via nx (>=23.0.0, <=23.2.0)
nx NPM version =23.0.0, =1.0.0-rc.24, =0.1.1, =1.0.0-alpha.0, =0.3.1, =1.0.0-rc.39, =0.0.2-10, =1.1.0-alpha.3, =0.4.0, =0.20.2, =23.0.0, =23.0.0, =23.0.0, =23.2.0 and more Source cves: CVE-2026-104853 Source advisory: MEND:CVE-2026-104853...
3lc (>=2.3.84, <=2.22.0), 3lc-ultralytics (>=0.1.0, <=0.2.1) +2576 more potentially affected by CVE-2026-104851 via fsspec (>=0.9.0, <=2026.4.0)
fsspec PYPI version =0.9.0, =2.3.84, =0.1.0, =0.3.2, =1.1.0, =0.1.0, =0.2.1, =0.1.3, =2.0.0, =0.1.0, =0.0.5a0, =1.3.0, =1.4.1 and more Source cves: CVE-2026-104851 Source advisory: MEND:CVE-2026-104851...
abliterix (>=1.1.0, <=1.12.2), adasoft (>=0.1.0, <=0.1.1) +397 more potentially affected by CVE-2026-104851 via fsspec (>=2026.1.0, <=2026.4.0)
fsspec PYPI version =2026.1.0, =1.1.0, =0.1.0, =0.4.0, =0.2.14, =2.0.4, =0.1.0, =0.0.7, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.2.0rc1 and more Source cves: CVE-2026-104851 Source advisory: SNYK:PYTHON-FSSPEC-20419437...
CLSA-2026-1790958488 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 3.7.16-tuxcare.2...
@9troisquarts/ant-form (>=2.0.1, <=4.0.5), @activepieces/piece-jira-cloud (>=0.1.13, <=0.3.6) +674 more potentially affected by CVE-2026-104847 via prosemirror-view (>=0.11.2, <=1.42.2)
prosemirror-view NPM version =0.11.2, =2.0.1, =0.1.13, =3.0.0-beta.4, =0.4.0, =11.21.3, =0.1.0, =11.19.4, =11.13.0, =0.0.1, =0.0.1, =13.1.0, =1.7.5, =4.0.4 and more Source cves: CVE-2026-104847 Source advisory: MEND:CVE-2026-104847...