korvath (1.0.0) potentially affected by unknown CVE via korvica (1.0.0)

korvica NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on korvica and may be impacted: - korvath 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-KORVICA-18503747...

async-smtp-lite (>=0.1.0, <=0.1.2), br-email (>=0.1.2, <=1.0.9) +21 more potentially affected by CVE-2026-46428 via lettre (>=0.10.1, <=0.10.4)

lettre CARGO version =0.10.1, =0.1.0, =0.1.2, =1.6.4, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.5.2, =0.0.1, =0.1.0, =3.0.0-alpha.8, =1.2.0, =1.4.3 - kagou 0.1.21 and more Source cves: CVE-2026-46428 Source advisory: OSV:GHSA-4PJ9-G833-QX53...

ai.alumnium:alumnium (>=0.21.0-alpha.2, <=0.24.0-alpha.2), co.verisoft:selenium4-junit5 (>=0.0.6, <=0.0.8) +257 more potentially affected by CVE-2026-43910 via io.appium:java-client (>=8.2.1, <=10.1.0)

io.appium:java-client MAVEN version =8.2.1, =0.21.0-alpha.2, =0.0.6, =5.39.0, =3.1.0, =3.1.0, =2022.12.16, =2.3.1, =0.0.115, =0.0.68, =1.5.0, =1.4.11, =0.0.5, =1.4.2, =1.4.4 and more Source cves: CVE-2026-43910 Source advisory: GHSA-28F5-38XR-JH2W...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), ch.nerdin.keycloak.extensions:avatar-extension (0.0.1) +241 more potentially affected by CVE-2026-18201 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.5)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18201 Source advisory: SNYK:JAVA-ORGKEYCLOAK-19006721...

org.apache.axis2:axis2-integration (>=1.4, <=1.6.3), org.apache.axis2:axis2-webapp (>=1.6.0, <=2.0.0) potentially affected by CVE-2026-66713 via org.apache.axis2:axis2-clustering (>=1.4, <=2.0.0)

org.apache.axis2:axis2-clustering MAVEN version =1.4, =1.4, =1.6.0, =2.0.0 Source cves: CVE-2026-66713 Source advisory: MEND:CVE-2026-66713...

be.yildiz-games:module-messaging-activemq (>=1.0.0, <=1.0.1), cn.codeforfun:jfinal-activemq (0.3) +334 more potentially affected by CVE-2026-61487 via org.apache.activemq:activemq-all (>=4.1.2, <=5.19.8)

org.apache.activemq:activemq-all MAVEN version =4.1.2, =1.0.0, =6.0.03, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.6, =8.0.0-beta1, =2.0.0, =2.3.0 - com.freedomotic:base-objects 3.0 - com.freedomotic:essential 3.0 - com.freedomotic:freedomotic-core 5.6 and more...

org.apache.camel.quarkus:camel-quarkus-as2 (>=3.0.0-rc1, <=3.10.0), org.apache.camel.quarkus:camel-quarkus-as2-deployment (>=3.0.0-rc1, <=3.10.0) +4 more potentially affected by CVE-2024-14041 via org.bouncycastle:bcprov-debug-jdk18on (>=1.74, <=1.77)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.74, =3.0.0-rc1, =3.0.0-rc1, =3.2.0, =3.20.7, =3.20.7, =3.20.7, =4.5.0 Source cves: CVE-2024-14041 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18390229...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +6941 more potentially affected by CVE-2024-14041 via org.bouncycastle:bcprov-jdk18on (>=1.73, <=1.77)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.73, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =1.7.0-alpha01, =1.3.0-alpha01, =1.3.0-alpha02, =2025.01.23.182856-596558a, =2025.01.23.182856-596558a, =2025.05.12.160240-6152e21 and more Source cves:...

cn.jarkata:jarkata-encrypt (1.0.0), com.amazonaws:aws-encryption-sdk-java (>=2.4.1, <=3.0.0) +237 more potentially affected by CVE-2024-14041 via org.bouncycastle:bcprov-ext-jdk18on (>=1.73, <=1.77)

org.bouncycastle:bcprov-ext-jdk18on MAVEN version =1.73, =2.4.1, =3.0.0 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams2.12 2.9.1 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams2.13 2.9.1 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams3 2.9.1 - com.clever-cloud.pulsar4s:pulsar4s-avro2.12...

app.cash.lilbitcoinj:lilbitcoinj-core (>=0.0.2, <=0.0.3), app.cash.lninvoice:ln-invoice (>=0.0.2.1, <=0.0.6) +696 more potentially affected by CVE-2024-14041 via org.bouncycastle:bcprov-jdk15to18 (>=1.73, <=1.77)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.73, =0.0.2, =0.0.2.1, =1.0.1-rc14, =2.1.0, =1.2.2, =0.9.1, =0.0.1, =3.1.2, =10.1.2, =0.0.27, =0.0.56, =1.5.2, =1.0.4, =1.8.9 and more Source cves: CVE-2024-14041 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18390234...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +6941 more potentially affected by CVE-2024-14041 via org.bouncycastle:bcprov-jdk18on (>=1.73, <=1.77)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.73, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =1.7.0-alpha01, =1.3.0-alpha01, =1.3.0-alpha02, =2025.01.23.182856-596558a, =2025.01.23.182856-596558a, =2025.05.12.160240-6152e21 and more Source cves:...

org.apache.camel.quarkus:camel-quarkus-as2 (>=3.0.0-rc1, <=3.10.0), org.apache.camel.quarkus:camel-quarkus-as2-deployment (>=3.0.0-rc1, <=3.10.0) +4 more potentially affected by CVE-2024-14041 via org.bouncycastle:bcprov-debug-jdk18on (>=1.74, <=1.77)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.74, =3.0.0-rc1, =3.0.0-rc1, =3.2.0, =3.20.7, =3.20.7, =3.20.7, =4.5.0 Source cves: CVE-2024-14041 Source advisory: MEND:CVE-2024-14041...

@exclipz/baileys (10.0.1), @exclipz/bails (>=2.0.3, <=2.0.7) +1 more potentially affected by unknown CVE via @shinzepelly/libsignal-node (2.2.4)

@shinzepelly/libsignal-node NPM version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on @shinzepelly/libsignal-node and may be impacted: - @exclipz/baileys 10.0.1 - @exclipz/bails =2.0.3, =2.0.7 - @shinzepelly/baileys 1.0.8 Source cves: unknown C...

@pmate/account-sdk (>=0.6.1, <=0.10.1), @pmate/agent-sdk (>=1.0.2, <=2.0.1) +3 more potentially affected by unknown CVE via @pmate/utils (1.1.4)

@pmate/utils NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @pmate/utils and may be impacted: - @pmate/account-sdk =0.6.1, =1.0.2, =0.1.3, =0.12.0, =0.2.0, =0.5.0 Source cves: unknown CVE Source advisory: SNYK:JS-PMATEUTILS-18550696...

venturo-playwright (1.0.10) potentially affected by unknown CVE via venturo-playwright-runner (1.0.6)

venturo-playwright-runner NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.10 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

venturo-playwright (1.0.16) potentially affected by unknown CVE via venturo-playwright-runner (1.0.12)

venturo-playwright-runner NPM version 1.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.16 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

venturo-playwright (1.0.13) potentially affected by unknown CVE via venturo-playwright-runner (1.0.9)

venturo-playwright-runner NPM version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.13 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

venturo-playwright (1.0.12) potentially affected by unknown CVE via venturo-playwright-runner (1.0.8)

venturo-playwright-runner NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.12 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

@godscene/playground-electron (1.7.22), @godscene/visualizer (1.7.22) potentially affected by unknown CVE via @godscene/web (1.7.22)

@godscene/web NPM version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on @godscene/web and may be impacted: - @godscene/playground-electron 1.7.22 - @godscene/visualizer 1.7.22 Source cves: unknown CVE Source advisory: SNYK:JS-GODSCENEWEB-18550...

shadowmd (8.6.87), shadowmd-baileys (>=8.6.49, <=8.6.91) potentially affected by unknown CVE via @shadowmd/libsignal-node (8.6.59)

@shadowmd/libsignal-node NPM version 8.6.59 is affected by a known vulnerability. The following packages have a transitive dependency on @shadowmd/libsignal-node and may be impacted: - shadowmd 8.6.87 - shadowmd-baileys =8.6.49, =8.6.91 Source cves: unknown CVE Source advisory:...