ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14) +919 more potentially affected by CVE-2026-66274 via org.apache.qpid:proton-j (>=0.7, <=0.34.1)

org.apache.qpid:proton-j MAVEN version =0.7, =1.7, =0.0.13, =1.13.3, =2.1.0, =1.0.1, =2.0.1, =1.0.0, =2.0.4, =3.0.0-beta.1, =2.0.0-beta.1, =2.14.0 and more Source cves: CVE-2026-66274 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19315986...

com.noumenadigital.contrib:npl-connectors-library (>=1.0.19, <=1.0.21), com.noumenadigital.platform:clients (>=2023.3.5, <=2026.1.5) +16 more potentially affected by CVE-2026-67591 via org.apache.qpid:protonj2 (>=1.0.0-m1, <=1.1.0)

org.apache.qpid:protonj2 MAVEN version =1.0.0-m1, =1.0.19, =2023.3.5, =2023.3.5, =2024.1.6, =2024.1.7, =2024.1.7, =2023.3.3, =1.0.0-m1, =1.0.0-m1, =9.3.0, =9.3.0, =4.1.0-m1, =4.2.0-m1 and more Source cves: CVE-2026-67591 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19317597...

svelte-mapping-metrics (1.0.0) potentially affected by unknown CVE via streak-calc-math (1.0.0)

streak-calc-math NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streak-calc-math and may be impacted: - svelte-mapping-metrics 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12114...

@ccfly/setup (0.1.9) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.9)

@ccfly/setup-darwin-arm64 NPM version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.5) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.5)

@ccfly/setup-darwin-arm64 NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.2) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.2)

@ccfly/setup-darwin-arm64 NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.13) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.13)

@ccfly/setup-darwin-arm64 NPM version 0.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.13 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.14) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.14)

@ccfly/setup-darwin-arm64 NPM version 0.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.14 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.7) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.7)

@ccfly/setup-darwin-arm64 NPM version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.7 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.10) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.10)

@ccfly/setup-darwin-arm64 NPM version 0.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.10 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.20) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.20)

@ccfly/setup-darwin-arm64 NPM version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.20 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68078 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68078 Source advisory: MEND:CVE-2026-68078...

com.noumenadigital.contrib:npl-connectors-library (>=1.0.19, <=1.0.21), com.noumenadigital.platform:clients (>=2023.3.5, <=2026.1.5) +16 more potentially affected by CVE-2026-67589 via org.apache.qpid:protonj2 (>=1.0.0-m1, <=1.1.0)

org.apache.qpid:protonj2 MAVEN version =1.0.0-m1, =1.0.19, =2023.3.5, =2023.3.5, =2024.1.6, =2024.1.7, =2024.1.7, =2023.3.3, =1.0.0-m1, =1.0.0-m1, =9.3.0, =9.3.0, =4.1.0-m1, =4.2.0-m1 and more Source cves: CVE-2026-67589 Source advisory: MEND:CVE-2026-67589...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70593 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70593 Source advisory: SNYK:JS-GHOST-18601956...

sign-alex (1.0.1) potentially affected by CVE-2026-70592 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-70592 Source advisory: SNYK:JS-GHOST-18612530...

sign-alex (1.0.1) potentially affected by CVE-2026-70592 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-70592 Source advisory: OSV:GHSA-CJ62-HVV2-2Q5H...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70591 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70591 Source advisory: OSV:GHSA-GCVV-72Q8-9V76...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70591 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70591 Source advisory: SNYK:JS-GHOST-18610058...

auth-token-django (>=0.0.1, <=0.0.5), directory-constants (23.1.0) +7 more potentially affected by CVE-2026-15307 via django (4.2.1)

django PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - auth-token-django =0.0.1, =2.0.0rc15, =0.0.18, =0.2.1, =1.2.8 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

admin-extra-urls (0.7.0), barbeque (0.2.1) +30 more potentially affected by CVE-2026-15307 via django (1.7.11)

django PYPI version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - admin-extra-urls 0.7.0 - barbeque 0.2.1 - django-active-users 0.0.1.4 - django-admin-enhancer 1.0.0 - django-babel =0.3.6, =0.1.0, =3.0.13, =1.0.0,...