@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +22 more potentially affected by CVE-2026-107391 +1 more via music-metadata (>=11.0.0, <=11.15.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =0.2.1, =0.2.2 and more Source cves: CVE-2026-107391, CVE-2026-32256 Source advisory: GHSA-F94X-6692-553Q...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +22 more potentially affected by CVE-2026-107388 via music-metadata (>=11.0.0, <=11.15.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =0.2.1, =0.2.2 and more Source cves: CVE-2026-107388 Source advisory: OSV:GHSA-JJPR-9CVF-CQ55...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +22 more potentially affected by CVE-2026-107389 via music-metadata (>=11.0.0, <=11.15.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =0.2.1, =0.2.2 and more Source cves: CVE-2026-107389 Source advisory: OSV:GHSA-5GFJ-9Q3V-QFP3...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +72 more potentially affected by CVE-2026-107286 via pydantic-ai-slim (>=2.10.0, <=2.52.0)

pydantic-ai-slim PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =0.2.2 - bonsai-core 0.1.0 and more Source cves: CVE-2026-107286 Source advisory: GHSA-6FQQ-452J-QHRP...

acpkit (>=1.5.0, <=1.10.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107286 via pydantic-ai (>=2.10.0, <=2.52.0)

pydantic-ai PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =2.10.0, =5.1.0, =0.1.8, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-107286 Source advisory: GHSA-6FQQ-452J-QHRP...

acpkit (>=1.5.0, <=1.10.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107286 via pydantic-ai (>=2.10.0, <=2.52.0)

pydantic-ai PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =2.10.0, =5.1.0, =0.1.8, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-107286 Source advisory: OSV:GHSA-6FQQ-452J-QHRP...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +72 more potentially affected by CVE-2026-107286 via pydantic-ai-slim (>=2.10.0, <=2.52.0)

pydantic-ai-slim PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =0.2.2 - bonsai-core 0.1.0 and more Source cves: CVE-2026-107286 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20849110...

acpkit (>=1.5.0, <=1.10.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107286 via pydantic-ai (>=2.10.0, <=2.52.0)

pydantic-ai PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =2.10.0, =5.1.0, =0.1.8, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-107286 Source advisory: SNYK:PYTHON-PYDANTICAI-20849111...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107385 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107385 Source advisory: SNYK:JS-MARIADB-20883243...

@aliceo2/infologger (>=1.16.0, <=1.18.0), @code-sentinel-cli/code-sentinel-cli (>=3.0.5, <=4.0.13) +2 more potentially affected by CVE-2026-107384 via mariadb (>=3.5.2, <=3.5.3)

mariadb NPM version =3.5.2, =1.16.0, =3.0.5, =8.1.0-dev.5, =8.1.0-dev.7 Source cves: CVE-2026-107384 Source advisory: SNYK:JS-MARIADB-20883242...

@dapp.xyz/node-common (>=1.0.0-alpha.0, <=1.0.0-alpha.10), @deedat5/keystone-core (1.0.0) +6 more potentially affected by CVE-2026-107384 via mariadb (>=3.2.0, <=3.2.3)

mariadb NPM version =3.2.0, =1.0.0-alpha.0, =7.0.0-beta.21, =0.0.11, =4.17.0-dev.6, =7.0.0-beta.21, =1.0.0, =1.1.0 Source cves: CVE-2026-107384 Source advisory: GHSA-V6PJ-GXXW-PHFW...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107384 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107384 Source advisory: GHSA-V6PJ-GXXW-PHFW...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107384 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107384 Source advisory: OSV:GHSA-V6PJ-GXXW-PHFW...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107384 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107384 Source advisory: SNYK:JS-MARIADB-20883242...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107383 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107383 Source advisory: SNYK:JS-MARIADB-20883241...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-107383 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-107383 Source advisory: GHSA-48QF-XH34-Q73R...

@aliceo2/infologger (>=1.14.0, <=1.18.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +35 more potentially affected by CVE-2026-107382 via mariadb (>=3.3.0, <=3.5.3)

mariadb NPM version =3.3.0, =1.14.0, =0.1.0, =0.1.0, =3.0.5, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.1.13-dev.2, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.85.0 and more Source cves: CVE-2026-107382 Source advisory: SNYK:JS-MARIADB-20883240...

CLSA-2026-1791488248 TuxCare security update for org.springframework.integration (1 CVE)

TuxCare rebuilt 5 org.springframework.integration packages to address 1 CVE. Fixed in 6.2.11-tuxcare.1...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +630 more potentially affected by CVE-2026-107608 via aws-cdk-lib (>=2.0.0-rc.4, <=2.266.0)

aws-cdk-lib NPM version =2.0.0-rc.4, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: CVE-2026-107608 Source advisory: MEND:CVE-2026-10760...

cloud.pianola:cdk-fluent-assertions (>=1.0.0, <=1.0.1), com.cloudcamphq:aws-runtime (0.0.1) +781 more potentially affected by CVE-2026-107608 via software.amazon.awscdk:aws-cdk-lib (>=2.0.0-rc.27, <=2.266.0)

software.amazon.awscdk:aws-cdk-lib MAVEN version =2.0.0-rc.27, =1.0.0, =1.0.8, =1.0.8, =1.0.8, =1.0.8, =1.0.8, =2.0.0 and more Source cves: CVE-2026-107608 Source advisory: MEND:CVE-2026-107608...