@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107384 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107384 Source advisory: GHSA-V6PJ-GXXW-PHFW...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107384 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107384 Source advisory: OSV:GHSA-V6PJ-GXXW-PHFW...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107384 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107384 Source advisory: SNYK:JS-MARIADB-20883242...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107383 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107383 Source advisory: SNYK:JS-MARIADB-20883241...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-107383 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-107383 Source advisory: GHSA-48QF-XH34-Q73R...

@aliceo2/infologger (>=1.14.0, <=1.18.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +35 more potentially affected by CVE-2026-107382 via mariadb (>=3.3.0, <=3.5.3)

mariadb NPM version =3.3.0, =1.14.0, =0.1.0, =0.1.0, =3.0.5, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.1.13-dev.2, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.85.0 and more Source cves: CVE-2026-107382 Source advisory: SNYK:JS-MARIADB-20883240...

CLSA-2026-1791488248 TuxCare security update for org.springframework.integration (1 CVE)

TuxCare rebuilt 5 org.springframework.integration packages to address 1 CVE. Fixed in 6.2.11-tuxcare.1...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +630 more potentially affected by CVE-2026-107608 via aws-cdk-lib (>=2.0.0-rc.4, <=2.266.0)

aws-cdk-lib NPM version =2.0.0-rc.4, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: CVE-2026-107608 Source advisory: MEND:CVE-2026-10760...

cloud.pianola:cdk-fluent-assertions (>=1.0.0, <=1.0.1), com.cloudcamphq:aws-runtime (0.0.1) +781 more potentially affected by CVE-2026-107608 via software.amazon.awscdk:aws-cdk-lib (>=2.0.0-rc.27, <=2.266.0)

software.amazon.awscdk:aws-cdk-lib MAVEN version =2.0.0-rc.27, =1.0.0, =1.0.8, =1.0.8, =1.0.8, =1.0.8, =1.0.8, =2.0.0 and more Source cves: CVE-2026-107608 Source advisory: MEND:CVE-2026-107608...

UBUNTU-CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

2app (>=1.2.7, <=1.2.8), @01/service-core (>=2.0.1, <=2.1.4) +1600 more potentially affected by CVE-2026-107709 via decompress-zip (>=0.0.2, <=0.3.3)

decompress-zip NPM version =0.0.2, =1.2.7, =2.0.1, =0.0.3, =1.0.7, =0.0.0, =2.0.0, =0.6.0, =1.0.6, =1.0.0, =3.0.0-alpha.0, =3.0.0-next.36, =3.8.4, =4.0.17 and more Source cves: CVE-2026-107709 Source advisory: SNYK:JS-DECOMPRESSZIP-20883330...

CLSA-2026-1791486041 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.17.2-tuxcare.2...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +22 more potentially affected by CVE-2026-107387 via music-metadata (>=11.0.0, <=11.15.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =0.2.1, =0.2.2 and more Source cves: CVE-2026-107387 Source advisory: MEND:CVE-2026-107387...

CLSA-2026-1791485698 TuxCare security update for com.fasterxml.jackson.core:jackson-core (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 6 CVEs. Fixed in 2.17.1-tuxcare.1...

@aliceo2/bookkeeping (>=0.27.0, <=1.21.0), @azteam/mysql-model (>=1.0.70, <=1.0.158) +59 more potentially affected by CVE-2026-107385 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-107385 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-107385 Source advisory: MEND:CVE-2026-107385...

AZL-107451 CVE-2026-95184 affecting package gnutls 3.8.13-1

Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...

aksharify (0.2.0), chem-eclipse (0.1.0) +56 more potentially affected by CVE-2026-107378 via cairosvg (>=2.1.3, <=2.9.0)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-107378 Source advisory: MEND:CVE-2026-107378...

agency-swarm (>=1.10.0, <=1.11.0), appai (1.0.1) +7 more potentially affected by CVE-2026-107377 via datamodel-code-generator (>=0.59.1, <=0.76.2)

datamodel-code-generator PYPI version =0.59.1, =1.10.0, =0.61.0, =0.7.0, =1.3.0, =0.1.1, =0.5.0, =0.1.0, =0.2.0 Source cves: CVE-2026-107377 Source advisory: SNYK:PYTHON-DATAMODELCODEGENERATOR-20574179...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3928 more potentially affected by CVE-2026-106444 via handlebars (>=4.0.0, <=4.7.9)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-106444 Source advisory: OSV:GHSA-XW65-4HP5-5HC7...