@frontmcp/plugin-skilled-openapi (>=0.0.1, <=1.5.5) potentially affected by unknown CVE via @frontmcp/adapters (>=1.0.4, <=1.5.5)

@frontmcp/adapters NPM version =1.0.4, =0.0.1, =1.5.5 Source cves: unknown CVE Source advisory: OSV:GHSA-8Q49-2H5H-434X...

@frontmcp/plugin-skilled-openapi (>=0.0.1, <=1.5.5) potentially affected by unknown CVE via @frontmcp/adapters (>=1.0.4, <=1.5.5)

@frontmcp/adapters NPM version =1.0.4, =0.0.1, =1.5.5 Source cves: unknown CVE Source advisory: GHSA-8Q49-2H5H-434X...

stitchlab-agentcore (>=0.1.0, <=1.0.2), strands-compose-agentcore (0.1.1) potentially affected by CVE-2026-16796 via bedrock-agentcore (>=1.1.1, <=1.7.0)

bedrock-agentcore PYPI version =1.1.1, =0.1.0, =1.0.2 - strands-compose-agentcore 0.1.1 Source cves: CVE-2026-16796 Source advisory: SNYK:PYTHON-BEDROCKAGENTCORE-18313116...

@bedrock/quasar (>=10.0.1, <=11.0.0), @cabloy/front-quasar (>=5.0.82, <=5.0.96) +11 more potentially affected by CVE-2026-73647 via quasar (>=2.0.0-beta.1, <=2.18.6)

quasar NPM version =2.0.0-beta.1, =10.0.1, =5.0.82, =2.0.1, =0.1.1-beta.0, =0.15.0, =1.0.25-alpha.11, =1.0.183, =1.0.0, =5.0.97, =5.0.215 Source cves: CVE-2026-73647 Source advisory: OSV:GHSA-3R53-75J5-3G7J...

co.luminositylabs.oss.ica.migration:legacy-data-viewer-webapp (0.2.0), com.aripd:aricom (1.0) +13 more potentially affected by CVE-2026-102695 via org.omnifaces:omnifaces (>=2.0, <=2.7.1)

org.omnifaces:omnifaces MAVEN version =2.0, =2.0.4, =2.0.4, =2.0.4, =2.0.4, =2.0.4, =1.0.0-rc1, =1.0.0-rc1, =0.1, =0.14 Source cves: CVE-2026-102695 Source advisory: OSV:GHSA-FP43-VJ7G-PG92...

com.flowlogix.depchain:shiro-jakarta (>=18, <=100), com.flowlogix:jee-examples (>=6.0, <=9.0.3) +40 more potentially affected by CVE-2026-102695 via org.omnifaces:omnifaces (>=4.0, <=4.7.10)

org.omnifaces:omnifaces MAVEN version =4.0, =18, =6.0, =7.0.0-pre-release, =7.0.0-pre-release, =7.0.0-pre-release, =7.0.0-pre-release, =7.0.0-pre-release, =7.0.0-pre-release, =7.0.0-pre-release, =7.0.0-m3, =7.0.0-m2, =7.0.0-m2, =7.0.0-m1, =7.0.0-m1, =7.0.0-m7 and more Source cves: CVE-2026-102695...

cloud.opencode.base:opencode-base-token (1.0.0), com.flowlogix:faces-affinity (>=0.6, <=0.8) +40 more potentially affected by unknown CVE via org.omnifaces:omnifaces (>=3.0, <=3.14.21)

org.omnifaces:omnifaces MAVEN version =3.0, =0.6, =3.0, =3.0, =3.0, =3.0, =3.0, =4.0, =4.0, =3.0, =1.1.0, =1.1.0, =1.4.0 - com.github.adminfaces:quarkus-omnifaces-st 1.4.0 - fr.lixbox.lixbox-ui:lixbox-ui-faces 11.1.2.5 - fr.lixbox.lixbox-ui:lixbox-ui-faces-preview 11.1.2.5 and more Source cves:...

com.flowlogix.depchain:shiro-jakarta (>=105, <=128), de.muehlencord.pf-adm:pf-adm-spring-boot-autoconfigure (>=0.2.0, <=0.4.1) +10 more potentially affected by CVE-2026-102695 +1 more via org.omnifaces:omnifaces (>=5.0, <=5.4.1)

org.omnifaces:omnifaces MAVEN version =5.0, =105, =0.2.0, =0.2.0, =0.2.0, =1.6.0, =5.0, =5.0, =4.21.0, =4.21.0, =3.0.0-alpha-1, =6.0.2, =6.0.2, =6.1.0 Source cves: CVE-2026-102695, CVE-2026-41883 Source advisory: GHSA-FP43-VJ7G-PG92...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by unknown CVE via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319522...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: GHSA-GM3R-Q2WP-HW87...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: OSV:GHSA-GM3R-Q2WP-HW87...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73411 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73411 Source advisory: OSV:GHSA-Q53C-4PRM-W95Q...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by unknown CVE via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319527...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by unknown CVE via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319518...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73414 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73414 Source advisory: GHSA-W4HW-QCX7-56PR...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73412 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73412 Source advisory: GHSA-6V4M-FW66-8R4X...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73412 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73412 Source advisory: OSV:GHSA-6V4M-FW66-8R4X...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by unknown CVE via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319526...

io.github.valdemargr:gql-http4s_2.13 (>=0.1-a2fae94, <=0.1-6257648), io.github.valdemargr:gql-server-http4s_2.13 (>=0.1-5acc59b, <=0.2.8-23-b552e1c) +3 more potentially affected by CVE-2026-73495 via org.http4s:blaze-http_2.13 (>=1.0.0-m33, <=1.0.0-m41)

org.http4s:blaze-http2.13 MAVEN version =1.0.0-m33, =0.1-a2fae94, =0.1-5acc59b, =1.0.0-m33, =1.0.0-m33, =1.0.0-m33, =1.0.0-m41 Source cves: CVE-2026-73495 Source advisory: GHSA-46Q4-43PH-C6FR...

com.clovellytech:h4sm-auth_2.12 (0.0.14), com.clovellytech:h4sm-dbtesting_2.12 (0.0.14) +7 more potentially affected by unknown CVE via org.http4s:http4s-blaze-server_2.12 (>=1.0.0-m20, <=1.0-234-d1a2b53)

org.http4s:http4s-blaze-server2.12 MAVEN version =1.0.0-m20, =1.0.0-rc1, =0.1, =0.12.0-rc1+85-6d61581e, =0.12.0-rc1+125-f68e01bd Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGHTTP4S-18313139...