ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +926 more potentially affected by CVE-2026-56820 via io.netty:netty-handler-ssl-ocsp (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-handler-ssl-ocsp MAVEN version =4.2.0.final, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-handler-ssl-ocsp and may be impacted: - ai.catboost:catboost-spark4.02.13 1.2.10 - ai.catboost:catboost-spark4.12.1...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +2493 more potentially affected by CVE-2026-56816 via io.netty:netty-codec-http3 (>=4.2.2.final, <=4.2.15.final)

io.netty:netty-codec-http3 MAVEN version =4.2.2.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-56816 Source advisory: OSV:GHSA-HPCC-26XQ-25FV...

ai.spice:spiceai (0.6.0), ch.zzeekk.spark:spark-temporalquery_2.13 (4.0.0) +1312 more potentially affected by CVE-2026-55851 via io.netty:netty-codec-haproxy (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-haproxy MAVEN version =4.2.0.final, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-haproxy and may be impacted: - ai.spice:spiceai 0.6.0 - ch.zzeekk.spark:spark-temporalquery2.13 4.0.0 -...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7) +5881 more potentially affected by CVE-2026-55831 via io.netty:netty-codec-http (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-http MAVEN version =4.2.0.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-55831 Source advisory: SNYK:JAVA-IONETTY-18233079...

abyo-crdt (0.4.0-alpha.1), bml (0.2.0) +118 more potentially affected by unknown CVE via smallstr (>=0.1.0, <=0.3.1)

smallstr CARGO version =0.1.0, =0.1.0, =0.1.0, =0.8.7, =0.1.0, =0.4.0-beta.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0215...

abscissa (>=0.4.0, <=0.6.0-pre.1), abscissa_core (>=0.4.0, <=0.6.0-pre.1) +83 more potentially affected by unknown CVE via gumdrop (>=0.1.0, <=0.8.1)

gumdrop CARGO version =0.1.0, =0.4.0, =0.4.0, =0.6.0-pre.1, =0.1.1, =0.1.0, =0.2.0, =1.0.0, =1.0.6, =1.0.8, =1.0.9, =1.0.8, =1.0.9, =1.0.6, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0214...

@1delta/aggregators (>=0.1.0, <=0.1.6), @1delta/bridge-configs (>=0.1.0, <=0.1.9) +429 more potentially affected by CVE-2026-45820 via fflate (>=0.8.0, <=0.8.2)

fflate NPM version =0.8.0, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.5.3, =0.13.6, =0.13.6, =0.13.6, =0.1.0, =0.1.1 and more Source cves: CVE-2026-45820 Source advisory: GHSA-PX8P-9VWX-VF98...

@bugreels/web-script (0.0.9), @dysonic/web-replay-chrome-extensions (>=0.1.0-beta.0, <=0.1.0) +7 more potentially affected by CVE-2026-45820 via fflate (0.4.8)

fflate NPM version 0.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on fflate and may be impacted: - @bugreels/web-script 0.0.9 - @dysonic/web-replay-chrome-extensions =0.1.0-beta.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.13,...

@polygonjs/plugin-mediapipe-facemesh (>=1.1.1, <=1.1.218), @polygonjs/polygonjs (>=1.1.124, <=1.1.239) +7 more potentially affected by CVE-2026-45820 via fflate (0.6.9)

fflate NPM version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on fflate and may be impacted: - @polygonjs/plugin-mediapipe-facemesh =1.1.1, =1.1.124, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =1.1.124-1, =1.1.239-1 Source cves:...

@1delta/aggregators (>=0.1.0, <=0.1.6), @1delta/bridge-configs (>=0.1.0, <=0.1.9) +429 more potentially affected by CVE-2026-45820 via fflate (>=0.8.0, <=0.8.2)

fflate NPM version =0.8.0, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.5.3, =0.13.6, =0.13.6, =0.13.6, =0.1.0, =0.1.1 and more Source cves: CVE-2026-45820 Source advisory: OSV:GHSA-PX8P-9VWX-VF98...

@2gis/deck2gis-layer (>=3.0.0, <=3.0.13), @3cr/viewer-browser (>=0.0.327, <=0.0.333) +816 more potentially affected by CVE-2026-45820 via fflate (>=0.7.1, <=0.7.4)

fflate NPM version =0.7.1, =3.0.0, =0.0.327, =0.0.308, =1.0.29, =0.1.0, =3.0.17, =3.0.0-b.2, =1.3.1-isan.0, =1.3.3-isan.0, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =1.0.1, =2.7.3 and more Source cves: CVE-2026-45820 Source advisory: OSV:GHSA-PX8P-9VWX-VF98...

@bugreels/web-script (0.0.9), @dysonic/web-replay-chrome-extensions (>=0.1.0-beta.0, <=0.1.0) +7 more potentially affected by CVE-2026-45820 via fflate (0.4.8)

fflate NPM version 0.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on fflate and may be impacted: - @bugreels/web-script 0.0.9 - @dysonic/web-replay-chrome-extensions =0.1.0-beta.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.13,...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7) +5881 more potentially affected by CVE-2026-56745 via io.netty:netty-codec-http (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-http MAVEN version =4.2.0.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-56745 Source advisory: SNYK:JAVA-IONETTY-18170213...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +5 more potentially affected by CVE-2026-16221 via fast-uri (>=3.0.1, <=3.1.3)

fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =1.25.0, =2.2.0, =2.3.1 Source cves: CVE-2026-16221 Source advisory: GHSA-V2HH-GCRM-F6HX...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +21764 more potentially affected by CVE-2026-35590 via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-35590 Source advisory: SNYK:JS-SHARP-18184416...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +21764 more potentially affected by CVE-2026-33327 via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-33327 Source advisory: SNYK:JS-SHARP-18184259...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +21764 more potentially affected by CVE-2026-33328 via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-33328 Source advisory: SNYK:JS-SHARP-18184262...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +21764 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F88M-G3JW-G9CJ...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +21764 more potentially affected by CVE-2026-35591 via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-35591 Source advisory: SNYK:JS-SHARP-18184418...

org.webjars.npm:image-thumbnail (1.0.15), org.webjars.npm:tabler__icons-webfont (3.35.0) potentially affected by CVE-2026-35591 via org.webjars.npm:sharp (>=0.30.4, <=0.33.5)

org.webjars.npm:sharp MAVEN version =0.30.4, =0.33.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sharp and may be impacted: - org.webjars.npm:image-thumbnail 1.0.15 - org.webjars.npm:tablericons-webfont 3.35.0 Source cves:...