@forgeax/game (>=0.3.0, <=0.3.10), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +11 more potentially affected by CVE-2026-59195 via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.1.0-beta.3, =0.1.0-rc.20, =0.2.0-alpha.7, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: CVE-2026-59195 Source advisory: MEND:CVE-2026-59195...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1467 more potentially affected by CVE-2026-59152 via langsmith (>=0.0.5, <=0.8.5)

langsmith PYPI version =0.0.5, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =0.1.0, =0.1.1, =2.1.7, =0.1.1, =0.1.3 and more Source cves: CVE-2026-59152 Source advisory: MEND:CVE-2026-59152...

io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +14 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.8.0, <=4.18.2)

org.apache.camel:camel-langchain4j-tools MAVEN version =4.8.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =4.8.1, =3.27.0, =3.24.0, =3.26.0, =3.26.0, =3.15.0, =3.15.0, =4.14.0, =4.8.0, =4.18.2 and more Source cves: CVE-2026-49042 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17822330...

io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +9 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-agent (>=4.14.0, <=4.18.2)

org.apache.camel:camel-langchain4j-agent MAVEN version =4.14.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =4.14.5, =3.27.0, =3.26.0, =3.26.0, =4.14.0, =4.18.2 Source cves: CVE-2026-49042 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17822331...

io.kaoto.forage:forage-memory-infinispan (1.5.0), io.kaoto.forage:forage-memory-message-window (1.5.0) +5 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-agent (>=4.19.0, <=4.20.0)

org.apache.camel:camel-langchain4j-agent MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49042 Source advisory: OSV:GHSA-HH8R-75R6-QRG9...

flytekitplugins-airflow (>=1.14.4, <=1.16.29) potentially affected by CVE-2026-49297 via apache-airflow-providers-google (12.0.0rc2)

apache-airflow-providers-google PYPI version 12.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - flytekitplugins-airflow =1.14.4, =1.16.29 Source cves: CVE-2026-49297 Source advisory:...

dagtool (>=0.0.8, <=0.0.11) potentially affected by CVE-2026-49297 via apache-airflow-providers-google (15.1.0)

apache-airflow-providers-google PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dagtool =0.0.8, =0.0.11 Source cves: CVE-2026-49297 Source advisory: OSV:PYSEC-2026-2084...

ca.islandora.alpaca:islandora-alpaca-app (>=2.0.0, <=2.2.0), ca.islandora.alpaca:islandora-connector-derivative (>=2.0.0, <=2.2.0) +28 more potentially affected by CVE-2026-43866 via org.apache.camel:camel-activemq (>=3.0.0, <=4.14.7)

org.apache.camel:camel-activemq MAVEN version =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =0.46, =0.3, =0.5, =0.1, =0.1, =6.0.0, =1.6.0, =0.1.0, =0.11.5 and more Source cves: CVE-2026-43866 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17875276...

org.apache.camel.quarkus:camel-quarkus-integration-test-sjms2-artemis-client (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sjms2-qpid-amqp-client (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-43866 via org.apache.camel:camel-sjms2 (>=4.19.0, <=4.20.0)

org.apache.camel:camel-sjms2 MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-43866 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17875274...

com.codbex.atlas:codbex-atlas-application (>=2.85.0, <=2.109.0), com.codbex.iapetus:codbex-iapetus-application (>=2.64.0, <=2.73.0) +47 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.15.0, <=4.18.2)

org.apache.camel:camel-sql MAVEN version =4.15.0, =2.85.0, =2.64.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.3 and more Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890720...

com.codbex.atlas:codbex-atlas-application (>=2.79.0, <=2.83.1), org.apache.camel.kafkaconnector:camel-aws-redshift-sink-kafka-connector (>=4.14.0, <=4.14.5) +27 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.14.0, <=4.14.7)

org.apache.camel:camel-sql MAVEN version =4.14.0, =2.79.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14...

io.kaoto.forage:forage-jms (1.5.0), io.kaoto.forage:forage-jms-artemis (1.5.0) +30 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-jms (>=4.19.0, <=4.20.0)

org.apache.camel:camel-jms MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.36.0 and more Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890710...

io.camelbee:camelbee-quarkus-core (3.2.1), io.camelbee:camelbee-quarkus-security (3.2.1) +18 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-common (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-common MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 and more Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879244...

strawberryfields-gpu (>=0.7.3, <=0.10.0) potentially affected by CVE-2022-35935 via tensorflow-gpu (1.6.0)

tensorflow-gpu PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - strawberryfields-gpu =0.7.3, =0.10.0 Source cves: CVE-2022-35935 Source advisory: OSV:PYSEC-2026-974...

vcap (>=0.2.4.dev13, <=0.3.1) potentially affected by CVE-2022-35935 via tensorflow-gpu (1.15.4)

tensorflow-gpu PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - vcap =0.2.4.dev13, =0.3.1 Source cves: CVE-2022-35935 Source advisory: OSV:PYSEC-2026-974...

dragonn (0.4.2), dream-on-gym (0.0.1) +5 more potentially affected by CVE-2022-35997 via tensorflow-gpu (1.15.0)

tensorflow-gpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - dragonn 0.4.2 - dream-on-gym 0.0.1 - ml4a =0.1.0, =0.0.3, =0.3.0, =0.9.0, =0.0.5, =0.0.88 Source cves: CVE-2022-35997 Source...

animl (>=1.1.2, <=1.1.4), audio-classification-models (1.0.1) +44 more potentially affected by CVE-2022-35997 via tensorflow-gpu (>=2.0.0, <=2.7.0)

tensorflow-gpu PYPI version =2.0.0, =1.1.2, =0.0.1, =0.0.9, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.1.0, =0.1.5, =0.2.0, =0.2.1 and more Source cves: CVE-2022-35997 Source advisory: OSV:PYSEC-2026-1024...

no.basis.integrationplatform:integration-platform-adapter-camel-quarkus (>=0.3.1, <=0.4.0-rc1), org.apache.camel.kafkaconnector:camel-aws-bedrock-agent-runtime-sink-kafka-connector (4.18.0) +232 more potentially affected by CVE-2026-49098 via org.apache.camel:camel-kafka (>=4.15.0, <=4.18.2)

org.apache.camel:camel-kafka MAVEN version =4.15.0, =0.3.1, =0.4.0-rc1 - org.apache.camel.kafkaconnector:camel-aws-bedrock-agent-runtime-sink-kafka-connector 4.18.0 - org.apache.camel.kafkaconnector:camel-aws-bedrock-text-sink-kafka-connector 4.18.0 -...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-49365 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.14.7)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49365 Source advisory: OSV:GHSA-42Q5-XW42-XF9G...

io.kaoto.forage:forage-security-keycloak (1.3), org.apache.camel.karaf:camel-keycloak (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-46455 via org.apache.camel:camel-keycloak (>=4.18.0, <=4.18.2)

org.apache.camel:camel-keycloak MAVEN version =4.18.0, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-46455 Source advisory: OSV:GHSA-MQWC-6QWC-V9GQ...