co.easimart:vertx-util (1.1.0), com.consol.citrus:citrus-vertx (>=2.7.8, <=2.8.0) +67 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.8.2)

com.hazelcast:hazelcast MAVEN version 3.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - co.easimart:vertx-util 1.1.0 - com.consol.citrus:citrus-vertx =2.7.8, =3.5.0, =1.24.4, =1.24.4, =0.9.6, =2.1.0,...

cab.ml:coordinator (>=0.1.0-rc, <=0.1.1), cab.ml:kvcache (>=0.1.0-rc, <=0.1.1) +1059 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (>=5.0-beta-1, <=5.6.0)

com.hazelcast:hazelcast MAVEN version =5.0-beta-1, =0.1.0-rc, =0.1.0-rc, =0.1.0-rc, =0.1.0-rc, =0.1.0-rc, =21.11.0, =22.3.0, =25.1.0, =0.0.12, =0.0.14 - cn.vertxup:aeon-ambient 0.9.0 - cn.vertxup:aeon-aurora 0.9.0 - cn.vertxup:aeon-code 0.9.0 - cn.vertxup:aeon-cosmos 0.9.0 - cn.vertxup:aeon-ecolo...

com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.25-release, <=1.1.27-release), com.erudika:para-server (1.22.0) +46 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.7.4)

com.hazelcast:hazelcast MAVEN version 3.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.ahome-it:ahome-tooling-server-hazelcast =1.1.25-release, =1.0.4, =3.6.2, =1.5.0, =2.1.0-alpha13, =2.1.0-alpha...

com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.88-rc1, <=1.0.107-release), com.consol.citrus:citrus-vertx (>=2.3, <=2.4) +45 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.5)

com.hazelcast:hazelcast MAVEN version 3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.ahome-it:ahome-tooling-server-hazelcast =1.0.88-rc1, =2.3, =1.16, =0.4, =0.5 - com.hazelcast.simulator:dist 0.6...

com.hazelcast:hazelcast-client (2.6.3), com.hazelcast:hazelcast-cloud (2.6.3) +10 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (2.6.3)

com.hazelcast:hazelcast MAVEN version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 2.6.3 - com.hazelcast:hazelcast-cloud 2.6.3 - com.hazelcast:hazelcast-hibernate...

cab.ml:coordinator (>=0.1.0-rc, <=0.1.1), cab.ml:kvcache (>=0.1.0-rc, <=0.1.1) +1059 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (>=5.0-beta-1, <=5.6.0)

com.hazelcast:hazelcast MAVEN version =5.0-beta-1, =0.1.0-rc, =0.1.0-rc, =0.1.0-rc, =0.1.0-rc, =0.1.0-rc, =21.11.0, =22.3.0, =25.1.0, =0.0.12, =0.0.14 - cn.vertxup:aeon-ambient 0.9.0 - cn.vertxup:aeon-aurora 0.9.0 - cn.vertxup:aeon-code 0.9.0 - cn.vertxup:aeon-cosmos 0.9.0 - cn.vertxup:aeon-ecolo...

codes.oss.socketio:netty-socketio (2.0.14), com.corundumstudio.socketio:netty-socketio (2.0.14) +346 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (>=5.5.0, <=5.6.0)

com.hazelcast:hazelcast MAVEN version =5.5.0, =1.41.3, =0.12.9, =4.1.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.9.0 and more Source cves: CVE-2026-107725 Source advisory: MEND:CVE-2026-107725...

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107720 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107720 Source advisory: OSV:GHSA-8WPC-H4Q6-8FXV...

Exploit for Missing Authorization in Redis

Redis Lua Sandbox Escape CVE-2022-0543 Vulhubhttps://vul...

voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-107717 via banks (2.2.0)

banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-107717 Source advisory: MEND:CVE-2026-107717...

CLSA-2026-1791495450 TuxCare security update for com.fasterxml.jackson.core:jackson-core (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 5 CVEs. Fixed in 2.14.1-tuxcare.2...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +631 more potentially affected by CVE-2026-107608 via aws-cdk-lib (>=2.0.0-alpha.4, <=2.266.0)

aws-cdk-lib NPM version =2.0.0-alpha.4, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: CVE-2026-107608 Source advisory:...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.8.45) +51 more potentially affected by CVE-2026-77050 via django (>=6.0.0a1, <=6.0.8)

django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-77050 Source advisory: SNYK:PYTHON-DJANGO-20825030...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.8.45) +51 more potentially affected by CVE-2026-87890 via django (>=6.0.0a1, <=6.0.8)

django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-87890 Source advisory: SNYK:PYTHON-DJANGO-20825029...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.8.45) +51 more potentially affected by CVE-2026-87975 via django (>=6.0.0a1, <=6.0.8)

django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-87975 Source advisory: SNYK:PYTHON-DJANGO-20825028...

academic-metrics (>=0.1.0b0, <=1.0.99), accomate (>=1.0.4, <=2.0.0.6) +803 more potentially affected by CVE-2026-106435 via pymongo (>=4.0.0, <=4.18.2)

pymongo PYPI version =4.0.0, =0.1.0b0, =1.0.4, =0.9.0, =0.3.0, =0.1.0, =0.1.23, =0.22.0, =0.3.0, =0.2.0, =0.1.0, =0.8.1 - aind-metadata-mapper 0.12.4 - aind-metadata-mcp 0.1.0 and more Source cves: CVE-2026-106435 Source advisory: MEND:CVE-2026-106435...

CLSA-2026-1791490295 Fix CVE(s): CVE-2026-35189, CVE-2026-84782

SECURITY UPDATE: excessive memory use with relative CRL distribution point names - debian/patches/CVE-2026-35189.patch: build the full name of a nameRelativeToCRLIssuer distribution point only while matching a CRL instead of for every parsed certificate in crypto/x509v3/v3crld.c,...

RHLW-2026-CD97E66695607070 Lightwell Security Advisory: xalan-bcel-6.6.1 2.7.2.Final-rhlw-00004

Red Hat Lightwell has released xalan:xalan-bcel-6.6.1 2.7.2.Final-rhlw-00004 with a backported security fix. CVE-2022-34169: Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets This patched artifact is a drop-in replacement for...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +22 more potentially affected by CVE-2026-107391 +1 more via music-metadata (>=11.0.0, <=11.15.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =0.2.1, =0.2.2 and more Source cves: CVE-2026-107391, CVE-2026-32256 Source advisory: GHSA-F94X-6692-553Q...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +22 more potentially affected by CVE-2026-107388 via music-metadata (>=11.0.0, <=11.15.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =0.2.1, =0.2.2 and more Source cves: CVE-2026-107388 Source advisory: OSV:GHSA-JJPR-9CVF-CQ55...