@holocronlab/botruntime-adk (2.6.3), @holocronlab/brt (0.9.7) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.3)

@holocronlab/botruntime-runtime NPM version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.3 - @holocronlab/brt 0.9.7 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.6.1), @holocronlab/brt (0.9.5) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.1)

@holocronlab/botruntime-runtime NPM version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.1 - @holocronlab/brt 0.9.5 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.5.4), @holocronlab/brt (0.9.3) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.5.4)

@holocronlab/botruntime-runtime NPM version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.5.4 - @holocronlab/brt 0.9.3 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.4.2), @holocronlab/brt (0.7.25) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.4.2)

@holocronlab/botruntime-runtime NPM version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.4.2 - @holocronlab/brt 0.7.25 Source cves: unknown CVE Source advisor...

@holocronlab/botruntime-adk (2.2.7), @holocronlab/brt (0.7.7) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.2.7)

@holocronlab/botruntime-runtime NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.2.7 - @holocronlab/brt 0.7.7 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.2.5), @holocronlab/brt (0.7.5) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.2.5)

@holocronlab/botruntime-runtime NPM version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.2.5 - @holocronlab/brt 0.7.5 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (>=2.0.10, <=2.9.7), @holocronlab/brt (>=0.5.8, <=0.12.3) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.9.7)

@holocronlab/botruntime-runtime NPM version 2.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk =2.0.10, =0.5.8, =0.12.3 Source cves: unknown CVE Source advisory:...

com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), com.oviva.telematik:epa4all-client (>=1.2.0, <=1.2.4) +163 more potentially affected by CVE-2026-65432 via org.apache.cxf:cxf-rt-wsdl (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-wsdl MAVEN version =4.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =3.2.1, =3.2.1, =4.0.0 - io.github.a09090443:web-service-spring-boot-starter 4.0.0.1 - io.kaoto.forage:forage-cxf 1.5.0 - io.kaoto.forage:forage-cxf-soap 1.5.0 - io.kaoto.forage:forage-cxf-starter 1.5...

com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), com.codbex.atlas:codbex-atlas-application (>=2.98.0, <=2.116.0) +338 more potentially affected by CVE-2026-64958 via org.apache.cxf:cxf-core (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-core MAVEN version =4.2.0, =2.98.0, =4.0.0-beta.1, =4.0.0-beta.1, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.4 - io.camelbee:camelbee-quarkus-core 3.2.1 - io.camelbee:camelbee-quarkus-dependencies 3.2.1 - io.camelbee:camelbee-quarkus-security 3.2.1 and more Source cve...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-57818 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.7 and more Source cves: CVE-2026-57818 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342222...

@ccfly/setup (0.1.3) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.3)

@ccfly/setup-linux-x64 NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.9) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.9)

@ccfly/setup-linux-x64 NPM version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.10) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.10)

@ccfly/setup-linux-x64 NPM version 0.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.10 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.17) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.17)

@ccfly/setup-linux-x64 NPM version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.17 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.19) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.19)

@ccfly/setup-linux-x64 NPM version 0.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.19 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.4) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.4)

@ccfly/setup-linux-x64 NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.14) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.14)

@ccfly/setup-linux-x64 NPM version 0.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.14 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.2) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.2)

@ccfly/setup-linux-x64 NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@apicity/mcp-server (0.8.2) potentially affected by unknown CVE via @apicity/meta (0.8.2)

@apicity/meta NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

@apicity/mcp-server (0.8.6) potentially affected by unknown CVE via @apicity/meta (0.8.6)

@apicity/meta NPM version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.6 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...