a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107289 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107289 Source advisory: GHSA-VMXC-H2X2-JMF3...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107289 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107289 Source advisory: OSV:GHSA-VMXC-H2X2-JMF3...

ara-cli (>=0.1.14.13, <=0.1.14.14), clai (>=1.56.0, <=1.107.5) +32 more potentially affected by CVE-2026-107289 via pydantic-ai (>=1.56.0, <=1.107.5)

pydantic-ai PYPI version =1.56.0, =0.1.14.13, =1.56.0, =1.0.0, =1.0.0, =0.1.102, =26.1.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107289 Source advisory: OSV:GHSA-VMXC-H2X2-JMF3...

acpkit (>=1.5.0, <=1.9.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107289 via pydantic-ai (>=2.0.0b1, <=2.43.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.4.0 and more Source cves: CVE-2026-107289 Source advisory: GHSA-VMXC-H2X2-JMF3...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107289 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107289 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20848912...

@openinc/parse-server-opendash (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-105828 via parse-server (>=9.6.0-alpha.37, <=9.10.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.2.0 Source cves: CVE-2026-105828 Source advisory: SNYK:JS-PARSESERVER-21277859...

EUVD-2026-94534

Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2859 more potentially affected by CVE-2026-107285 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.0)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-107285 Source advisory: GHSA-3WP9-XFWM-RJJF...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +92 more potentially affected by CVE-2026-107285 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107285 Source advisory: OSV:GHSA-3WP9-XFWM-RJJF...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +92 more potentially affected by CVE-2026-107285 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107285 Source advisory: GHSA-3WP9-XFWM-RJJF...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2859 more potentially affected by CVE-2026-107280 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.0)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-107280 Source advisory: OSV:GHSA-F9M8-CV68-674W...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +92 more potentially affected by CVE-2026-107282 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107282 Source advisory: OSV:GHSA-JMQQ-X5G9-9P2W...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2859 more potentially affected by CVE-2026-107282 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.0)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-107282 Source advisory: GHSA-JMQQ-X5G9-9P2W...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +101 more potentially affected by CVE-2026-107231 via org.asynchttpclient:async-http-client (>=3.0.0.beta1, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0.beta1, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107231 Source advisory: GHSA-RQF5-2WXV-RJF4...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +101 more potentially affected by CVE-2026-107231 via org.asynchttpclient:async-http-client (>=3.0.0.beta1, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0.beta1, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107231 Source advisory: OSV:GHSA-RQF5-2WXV-RJF4...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107291 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107291 Source advisory: MEND:CVE-2026-107291...

Syed Balkhi Envira Gallery authorization issue vulnerability

Versions of Syed Balkhi Envira Gallery prior to 1.16.2 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks on the library conversion REST endpoint; it only verifies the editing permissions of the source article and relies on a hard-coded...

CLSA-2026-1791472866 TuxCare security update for org.antlr (1 CVE)

TuxCare rebuilt 6 org.antlr packages to address 1 CVE. Fixed in 4.11.1-tuxcare.1...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107289 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107289 Source advisory: MEND:CVE-2026-107289...

agent-utilities (>=0.41.0, <=0.51.0), ara-cli (>=0.1.14.13, <=0.1.14.14) +56 more potentially affected by CVE-2026-107289 via pydantic-ai-slim (>=1.56.0, <=1.107.5)

pydantic-ai-slim PYPI version =1.56.0, =0.41.0, =0.1.14.13, =1.56.0, =0.0.400, =1.0.0, =1.6.2, =1.0.0, =1.0.3, =0.1.102, =0.1.0, =26.1.0, =26.1.1 and more Source cves: CVE-2026-107289 Source advisory: MEND:CVE-2026-107289...