ch.mobi.mobitor:mobitor-base (>=3.1.185, <=3.1.237), com.corundumstudio.socketio:netty-socketio (1.7.19) +34 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.12.7)

com.hazelcast:hazelcast MAVEN version 3.12.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - ch.mobi.mobitor:mobitor-base =3.1.185, =2.5, =0.4.4, =1.0.5.release, =2.2.3, =4.10.1, =3.3.0, =3.3.7, =3.3.7,...

com.hazelcast:hazelcast-client (3.3.4), com.hazelcast:hazelcast-cloud (3.3.4) +10 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3.4)

com.hazelcast:hazelcast MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.4 - com.hazelcast:hazelcast-cloud 3.3.4 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (2.6.3), com.hazelcast:hazelcast-cloud (2.6.3) +10 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (2.6.3)

com.hazelcast:hazelcast MAVEN version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 2.6.3 - com.hazelcast:hazelcast-cloud 2.6.3 - com.hazelcast:hazelcast-hibernate...

com.bucket4j:bucket4j-hazelcast-3 (>=7.6.1, <=8.9.0), com.bucket4j:bucket4j_jdk8-hazelcast-3 (>=8.0.0, <=8.9.0) +34 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.8)

com.hazelcast:hazelcast MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.bucket4j:bucket4j-hazelcast-3 =7.6.1, =8.0.0, =1.24.0, =0.9.0, =0.9.0, =0.3, =0.3, =0.3, =0.3, =0.3, =0.0.2,...

com.hazelcast:hazelcast-client (3.2-rc1), com.hazelcast:hazelcast-cloud (3.2-rc1) +6 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.2-rc1)

com.hazelcast:hazelcast MAVEN version 3.2-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2-rc1 - com.hazelcast:hazelcast-cloud 3.2-rc1 -...

am.ik.hazelcast:hazelcast-dns-service-discovery (1.0.0), cn.vertxup:up-apollo (0.4.5) +42 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.9.2)

com.hazelcast:hazelcast MAVEN version 3.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - am.ik.hazelcast:hazelcast-dns-service-discovery 1.0.0 - cn.vertxup:up-apollo 0.4.5 - cn.vertxup:up-athena 0.4.5 -...

com.hazelcast:hazelcast-aws (2.4), com.hazelcast:hazelcast-build-utils (3.12-beta-1) +3 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.12-beta-1)

com.hazelcast:hazelcast MAVEN version 3.12-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-aws 2.4 - com.hazelcast:hazelcast-build-utils 3.12-beta-1 -...

cab.ml:coordinator (>=0.1.0-rc, <=0.1.1), cab.ml:kvcache (>=0.1.0-rc, <=0.1.1) +1059 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (>=5.0-beta-1, <=5.6.0)

com.hazelcast:hazelcast MAVEN version =5.0-beta-1, =0.1.0-rc, =0.1.0-rc, =0.1.0-rc, =0.1.0-rc, =0.1.0-rc, =21.11.0, =22.3.0, =25.1.0, =0.0.12, =0.0.14 - cn.vertxup:aeon-ambient 0.9.0 - cn.vertxup:aeon-aurora 0.9.0 - cn.vertxup:aeon-code 0.9.0 - cn.vertxup:aeon-cosmos 0.9.0 - cn.vertxup:aeon-ecolo...

codes.oss.socketio:netty-socketio (2.0.14), com.corundumstudio.socketio:netty-socketio (2.0.14) +346 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (>=5.5.0, <=5.6.0)

com.hazelcast:hazelcast MAVEN version =5.5.0, =1.41.3, =0.12.9, =4.1.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.9.0 and more Source cves: CVE-2026-107725 Source advisory: MEND:CVE-2026-107725...

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107720 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107720 Source advisory: OSV:GHSA-8WPC-H4Q6-8FXV...

Exploit for Missing Authorization in Redis

Redis Lua Sandbox Escape CVE-2022-0543 Vulhubhttps://vul...

voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-107717 via banks (2.2.0)

banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-107717 Source advisory: MEND:CVE-2026-107717...

CLSA-2026-1791495450 TuxCare security update for com.fasterxml.jackson.core:jackson-core (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 5 CVEs. Fixed in 2.14.1-tuxcare.2...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +631 more potentially affected by CVE-2026-107608 via aws-cdk-lib (>=2.0.0-alpha.4, <=2.266.0)

aws-cdk-lib NPM version =2.0.0-alpha.4, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: CVE-2026-107608 Source advisory:...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.8.45) +51 more potentially affected by CVE-2026-77050 via django (>=6.0.0a1, <=6.0.8)

django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-77050 Source advisory: SNYK:PYTHON-DJANGO-20825030...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.8.45) +51 more potentially affected by CVE-2026-87890 via django (>=6.0.0a1, <=6.0.8)

django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-87890 Source advisory: SNYK:PYTHON-DJANGO-20825029...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.8.45) +51 more potentially affected by CVE-2026-87975 via django (>=6.0.0a1, <=6.0.8)

django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-87975 Source advisory: SNYK:PYTHON-DJANGO-20825028...

academic-metrics (>=0.1.0b0, <=1.0.99), accomate (>=1.0.4, <=2.0.0.6) +803 more potentially affected by CVE-2026-106435 via pymongo (>=4.0.0, <=4.18.2)

pymongo PYPI version =4.0.0, =0.1.0b0, =1.0.4, =0.9.0, =0.3.0, =0.1.0, =0.1.23, =0.22.0, =0.3.0, =0.2.0, =0.1.0, =0.8.1 - aind-metadata-mapper 0.12.4 - aind-metadata-mcp 0.1.0 and more Source cves: CVE-2026-106435 Source advisory: MEND:CVE-2026-106435...

CLSA-2026-1791490295 Fix CVE(s): CVE-2026-35189, CVE-2026-84782

SECURITY UPDATE: excessive memory use with relative CRL distribution point names - debian/patches/CVE-2026-35189.patch: build the full name of a nameRelativeToCRLIssuer distribution point only while matching a CRL instead of for every parsed certificate in crypto/x509v3/v3crld.c,...

RHLW-2026-CD97E66695607070 Lightwell Security Advisory: xalan-bcel-6.6.1 2.7.2.Final-rhlw-00004

Red Hat Lightwell has released xalan:xalan-bcel-6.6.1 2.7.2.Final-rhlw-00004 with a backported security fix. CVE-2022-34169: Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets This patched artifact is a drop-in replacement for...