com.codbex.atlas:codbex-atlas-application (>=2.110.0, <=2.112.0), com.codbex.iapetus:codbex-iapetus-application (>=2.74.0, <=2.76.0) +24 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-sql MAVEN version =4.19.0, =2.110.0, =2.74.0, =2.76.0 - io.kaoto.forage:forage-jdbc 1.5.0 - io.kaoto.forage:forage-jdbc-common 1.5.0 - io.kaoto.forage:forage-jdbc-db2 1.5.0 - io.kaoto.forage:forage-jdbc-h2 1.5.0 - io.kaoto.forage:forage-jdbc-hsqldb 1.5.0 -...

com.codbex.atlas:codbex-atlas-application (>=2.98.0, <=2.109.0), com.codbex.iapetus:codbex-iapetus-application (>=2.68.0, <=2.73.0) +47 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.18.0, <=4.18.2)

org.apache.camel:camel-sql MAVEN version =4.18.0, =2.98.0, =2.68.0, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.3 and more Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cassandraql MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

com.codbex.atlas:codbex-atlas-application (>=2.79.0, <=2.83.1), org.apache.camel.kafkaconnector:camel-aws-redshift-sink-kafka-connector (>=4.14.0, <=4.14.5) +27 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.14.0, <=4.14.7)

org.apache.camel:camel-sql MAVEN version =4.14.0, =2.79.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14...

io.kaoto.forage:forage-jms (1.5.0), io.kaoto.forage:forage-jms-artemis (1.5.0) +30 more potentially affected by CVE-2026-43866 via org.apache.camel:camel-jms (>=4.19.0, <=4.20.0)

org.apache.camel:camel-jms MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.36.0 and more Source cves: CVE-2026-43866 Source advisory: OSV:GHSA-F755-XP6R-8Q84...

org.apache.camel.quarkus:camel-quarkus-integration-test-sjms-artemis-client (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sjms-qpid-amqp-client (>=3.35.0, <=3.36.0) +9 more potentially affected by CVE-2026-40860 +1 more via org.apache.camel:camel-sjms (>=4.19.0, <=4.20.0)

org.apache.camel:camel-sjms MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-40860, CVE-2026-43866 Source advisory: GHSA-F755-XP6R-8Q84...

@1337lawyers/design (>=0.1.0, <=0.1.38), @9188/w-cli (>=1.0.0, <=1.0.4) +50 more potentially affected by CVE-2026-14802 via react-dev-utils (>=5.0.0, <=5.0.1)

react-dev-utils NPM version =5.0.0, =0.1.0, =1.0.0, =0.4.1, =0.1.0-latest.1a450bb3, =1.0.5, =1.0.0-beta.28, =1.0.1, =1.0.0, =1.0.0, =0.26.4, =0.0.0-legacy, =3.10.0-beta.0, =0.1.0-alpha.0, =2.1.16, =2.3.5 - aqxy-common-ui 0.0.1 and more Source cves: CVE-2026-14802 Source advisory: GHSA-G9G6-GVQ9-J...

syunity-meteo (0.1.0) potentially affected by CVE-2026-24013 via apache-iotdb (1.3.4)

apache-iotdb PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-iotdb and may be impacted: - syunity-meteo 0.1.0 Source cves: CVE-2026-24013 Source advisory: OSV:PYSEC-2026-2080...

-react-file-list-components (1.1.1), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +40960 more potentially affected by CVE-2026-14802 via react-dev-utils (>=0.1.1, <=12.1.0-next.26)

react-dev-utils NPM version =0.1.1, =1.0.1, =0.1.0, =0.1.0, =0.1.6 - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 - 0scarclassf 1.0.1 - 0scarclassg 1.0.1 - 0scarclassh 1.0.1 - 0scarclassi 1.0.1 and more Source cves: CVE-2026-148...

org.apache.camel.kafkaconnector:camel-jms-amqp-10-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-jms-amqp-10-source-kafka-connector (4.18.0) +5 more potentially affected by CVE-2026-43866 via org.apache.camel:camel-amqp (>=4.15.0, <=4.18.2)

org.apache.camel:camel-amqp MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-43866 Source advisory: MEND:CVE-2026-43866...

org.apache.camel.quarkus:camel-quarkus-integration-test-sjms2-artemis-client (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sjms2-qpid-amqp-client (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-43866 via org.apache.camel:camel-sjms2 (>=4.19.0, <=4.20.0)

org.apache.camel:camel-sjms2 MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-43866 Source advisory: MEND:CVE-2026-43866...

dragonn (0.4.2), dream-on-gym (0.0.1) +5 more potentially affected by CVE-2022-35999 via tensorflow-gpu (1.15.0)

tensorflow-gpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - dragonn 0.4.2 - dream-on-gym 0.0.1 - ml4a =0.1.0, =0.0.3, =0.3.0, =0.9.0, =0.0.5, =0.0.88 Source cves: CVE-2022-35999 Source...

aio-tinder (>=0.1.1, <=0.1.8), aiobitcoin (>=0.5.2, <=0.75.14) +127 more potentially affected by CVE-2022-31116 via ujson (1.35.0)

ujson PYPI version 1.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - aio-tinder =0.1.1, =0.5.2, =0.1.0, =0.1.1, =0.1.3, =0.1.0, =0.1.0, =0.0.1a1, =2.0.3, =1.1.0rc6, =2.0.0, =1.0.1, =1.0.16.1 - ax 0.39.0 and more Source...

aiohttp-rapid (0.0.0), sap-computer-vision-package (>=1.0.12, <=1.1.7) potentially affected by CVE-2022-31116 via ujson (4.0.0)

ujson PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - aiohttp-rapid 0.0.0 - sap-computer-vision-package =1.0.12, =1.1.7 Source cves: CVE-2022-31116 Source advisory: OSV:PYSEC-2026-1057...

aiotdlib (>=0.8.2, <=0.10.0), bootleg (1.0.1) +15 more potentially affected by CVE-2022-31116 via ujson (4.0.2)

ujson PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - aiotdlib =0.8.2, =10.0.4, =0.1.0, =0.20.2, =1.0.0, =0.3.0a1, =1.2.1, =0.0.6, =0.9.0, =0.9.13 and more Source cves: CVE-2022-31116 Source advisory:...

blobxfer (1.3.1), kfserving (0.2.1.0) potentially affected by CVE-2022-30187 via azure-storage-blob (1.3.0)

azure-storage-blob PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - blobxfer 1.3.1 - kfserving 0.2.1.0 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-784...

agrothon (>=1.1.5, <=1.3.2), aiogeoip (0.0.4) +33 more potentially affected by CVE-2022-31116 via ujson (3.2.0)

ujson PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - agrothon =1.1.5, =1.0.20, =0.3.6, =0.0.3, =1.5.0, =0.1.0, =0.1.2, =0.4.0, =0.1.0, =0.0.0.2.5, =0.15.2, =0.15.4 - hammurabi 0.7.4 and more Source cves:...

audeep (>=0.9.2, <=0.9.6a1), cryocare (>=0.0.1, <=0.0.2) +17 more potentially affected by CVE-2022-29213 via tensorflow-gpu (1.15.5)

tensorflow-gpu PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - audeep =0.9.2, =0.0.1, =0.6.7a1, =0.2.5, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =1.3.0, =0.0.4, =0.1.3, =0.4.0, =0.0.6, =0.0.8 and more...

nuclear-python (>=0.14.4.1, <=0.14.6.2) potentially affected by CVE-2022-29213 via tensorflow-gpu (1.13.2)

tensorflow-gpu PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - nuclear-python =0.14.4.1, =0.14.6.2 Source cves: CVE-2022-29213 Source advisory: OSV:PYSEC-2026-952...

vcap (>=0.2.4.dev13, <=0.3.1) potentially affected by CVE-2022-29216 via tensorflow-gpu (1.15.4)

tensorflow-gpu PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - vcap =0.2.4.dev13, =0.3.1 Source cves: CVE-2022-29216 Source advisory: OSV:PYSEC-2026-963...