org.keycloak:keycloak-account-freemarker (1.8.0.cr2), org.keycloak:keycloak-broker-oidc (1.8.0.cr2) +9 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (1.8.0.cr2)

org.keycloak:keycloak-services MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.0.cr2 - org.keycloak:keycloak-broker-oidc 1.8.0.cr...

com.github.vzakharchenko:chillispot-radius-plugin (1.2.6), com.github.vzakharchenko:cisco-radius-plugin (1.2.6) +18 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (11.0.0)

org.keycloak:keycloak-services MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.2.6 -...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2877 more potentially affected by CVE-2026-55688 via org.asynchttpclient:async-http-client (>=2.0.0-alpha13, <=2.15.0)

org.asynchttpclient:async-http-client MAVEN version =2.0.0-alpha13, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-55688 Source advisory: SNYK:JAVA-ORGASYNCHTTPCLIENT-17796414...

ai.hyacinth.framework:core-service-trigger-server (>=0.5.0, <=0.5.24), ai.stainless:grails-tika (0.1.0) +5025 more potentially affected by CVE-2026-55153 via com.mchange:mchange-commons-java (>=0.2.2, <=0.5.0)

com.mchange:mchange-commons-java MAVEN version =0.2.2, =0.5.0, =0.0.1, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 and more Source cves: CVE-2026-55153 Source advisory: SNYK:JAVA-COMMCHANGE-17796416...

@cloudcommerce/storefront (>=0.10.0, <=0.11.0), @gspenst/next (>=0.1.0, <=0.1.2) +6 more potentially affected by CVE-2026-55660 via @tinacms/app (>=0.0.0-a0a8cb3-20260817041004, <=2.5.5)

@tinacms/app NPM version =0.0.0-a0a8cb3-20260817041004, =0.10.0, =0.1.0, =0.1.0, =0.0.0-20220819182845, =0.0.2, =0.0.3, =0.1.1, =0.1.3 - ramidus 1.2.1 Source cves: CVE-2026-55660 Source advisory: MEND:CVE-2026-55660...

@bojidar-bg/tina-mdx-editor (>=0.1.0, <=0.1.1), @bojidar-bg/tina-simple-git-provider (>=0.1.0, <=0.1.1) +26 more potentially affected by CVE-2026-55661 via @tinacms/mdx (>=0.0.0-a0a8cb3-20260817041004, <=2.1.6)

@tinacms/mdx NPM version =0.0.0-a0a8cb3-20260817041004, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.0.0-20240315110821, =0.0.0-20230511135047, =0.0.0-20230511135047, =0.0.4, =0.0.85, =0.0.89, =0.0.26, =0.0.34, =0.0.0-20230329173503, =2.5.5 and more Source cves: CVE-2026-55661 Source advisory:...

@cyruslabs/install (>=0.1.0-alpha.6, <=0.1.0-alpha.12), @zantarix/cursus (>=0.3.0, <=0.5.0) potentially affected by CVE-2026-48815 via sigstore (>=4.0.0, <=4.1.0)

sigstore NPM version =4.0.0, =0.1.0-alpha.6, =0.3.0, =0.5.0 Source cves: CVE-2026-48815 Source advisory: OSV:GHSA-52V5-JR5W-GJXR...

@cyruslabs/install (>=0.1.0-alpha.6, <=0.1.0-alpha.12), @zantarix/cursus (>=0.3.0, <=0.5.0) potentially affected by CVE-2026-48815 via sigstore (>=4.0.0, <=4.1.0)

sigstore NPM version =4.0.0, =0.1.0-alpha.6, =0.3.0, =0.5.0 Source cves: CVE-2026-48815 Source advisory: SNYK:JS-SIGSTORE-17817054...

@donmai/core (>=0.9.0, <=0.9.5), @donmai/mcp-server (>=0.9.0, <=0.9.5) +14 more potentially affected by CVE-2026-48815 via @sigstore/verify (>=3.0.0, <=3.1.0)

@sigstore/verify NPM version =3.0.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.1.1, =0.0.0, =0.0.4 and more Source cves: CVE-2026-48815 Source advisory: SNYK:JS-SIGSTOREVERIFY-17817052...

@donmai/core (>=0.9.0, <=0.9.5), @donmai/mcp-server (>=0.9.0, <=0.9.5) +8 more potentially affected by CVE-2026-48816 via @sigstore/verify (3.1.0)

@sigstore/verify NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sigstore/verify and may be impacted: - @donmai/core =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.66 Source cves:...

@donmai/core (>=0.9.0, <=0.9.5), @donmai/mcp-server (>=0.9.0, <=0.9.5) +8 more potentially affected by CVE-2026-48816 via @sigstore/verify (3.1.0)

@sigstore/verify NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sigstore/verify and may be impacted: - @donmai/core =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.66 Source cves:...

@donmai/core (>=0.9.0, <=0.9.5), @donmai/mcp-server (>=0.9.0, <=0.9.5) +8 more potentially affected by CVE-2026-48816 via @sigstore/verify (3.1.0)

@sigstore/verify NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sigstore/verify and may be impacted: - @donmai/core =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.66 Source cves:...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.4), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +96 more potentially affected by CVE-2026-55688 via org.asynchttpclient:async-http-client (>=3.0.0.beta1, <=3.0.10)

org.asynchttpclient:async-http-client MAVEN version =3.0.0.beta1, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =2.7.3, =2.8.5 and more Source cves: CVE-2026-55688 Source advisory: MEND:CVE-2026-55688...

matanyone2-runtime (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-49119 via gradio (4.31.0)

gradio PYPI version 4.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - matanyone2-runtime =0.1.0, =0.2.0 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

africanwhisper (>=0.2.6, <=0.9.0), ominix-tts (0.1.0) potentially affected by CVE-2026-49119 via gradio (4.24.0)

gradio PYPI version 4.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - africanwhisper =0.2.6, =0.9.0 - ominix-tts 0.1.0 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

agentx (>=0.0.6, <=0.0.16), pixelyai-core (>=0.0.20, <=0.0.31) potentially affected by CVE-2026-49119 via gradio (4.25.0)

gradio PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - agentx =0.0.6, =0.0.20, =0.0.31 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

ai-agents (>=0.0.2, <=0.0.3), autotrain-advanced (>=0.6.15, <=0.6.31) potentially affected by CVE-2026-49119 via gradio (3.39.0)

gradio PYPI version 3.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - ai-agents =0.0.2, =0.6.15, =0.6.31 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

gradio-rerun (0.26.0a1), particleanalyzer (>=1.3.2, <=1.3.3) potentially affected by CVE-2026-49119 via gradio (5.47.2)

gradio PYPI version 5.47.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-rerun 0.26.0a1 - particleanalyzer =1.3.2, =1.3.3 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

biomni-bridge (>=0.3.1, <=0.3.3), github-pr-mcp-server (1.0.3) potentially affected by CVE-2026-49119 via gradio (5.39.0)

gradio PYPI version 5.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - biomni-bridge =0.3.1, =0.3.3 - github-pr-mcp-server 1.0.3 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

@briefhq/cli (>=0.1.6, <=0.1.11), @cobuild/review-gpt (>=0.5.10, <=0.5.96) +3 more potentially affected by CVE-2026-49988 via repomix (>=1.1.0, <=1.14.0)

repomix NPM version =1.1.0, =0.1.6, =0.5.10, =1.0.0, =0.63.0, =0.63.3 Source cves: CVE-2026-49988 Source advisory: OSV:GHSA-HWPP-H97W-2H3J...