@chrysb/alphaclaw (>=0.8.8, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +2 more potentially affected by CVE-2026-43566 via openclaw (>=2026.4.9, <=2026.4.12)

openclaw NPM version =2026.4.9, =0.8.8, =0.1.0, =0.1.8 - morpho-vault-manager 0.1.0 - openclaw-morpho-vault-manager 0.2.0 Source cves: CVE-2026-43566 Source advisory: SNYK:JS-OPENCLAW-16109663...

@adobe/helix-importer-jcr-packaging (>=2.0.2, <=2.0.16), @aidin36/xmp (>=0.1.0, <=0.2.2) +49 more potentially affected by CVE-2026-41672 via @xmldom/xmldom (>=0.9.0, <=0.9.9)

@xmldom/xmldom NPM version =0.9.0, =2.0.2, =0.1.0, =5.5.3, =1.0.22, =1.35.0, =1.5.1-beta.1723, =0.1.0, =2.1.2, =2.6.1, =2.98.0, =2.0.0, =2.2.0, =2.108.11 and more Source cves: CVE-2026-41672 Source advisory: SNYK:JS-XMLDOMXMLDOM-16133132...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +12683 more potentially affected by CVE-2026-41672 via xmldom (>=0.1.2, <=0.6.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.2, =1.0.3, =1.0.23, =1.0.1, =1.3.1 and more Source cves: CVE-2026-41672 Source advisory: SNYK:JS-XMLDOM-16133133...

org.webjars.npm:adal-node (0.1.28), org.webjars.npm:canvg (>=1.5.2, <=1.5.3) +15 more potentially affected by CVE-2026-41672 via org.webjars.npm:xmldom (>=0.1.31, <=0.6.0)

org.webjars.npm:xmldom MAVEN version =0.1.31, =1.5.2, =0.7.2, =0.14.0, =0.11.0, =7.14.0, =7.14.1 and more Source cves: CVE-2026-41672 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16133135...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4390 more potentially affected by CVE-2026-41672 via @xmldom/xmldom (>=0.7.0, <=0.8.12)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.0.1, =0.0.2 - @abcd19/st-grid 3.1.0 and more Source cves: CVE-2026-41672 Source advisory: SNYK:JS-XMLDOMXMLDOM-16133132...

locizify (>=7.0.0, <=9.0.9), locizify-ssg (>=1.1.12, <=2.0.6) potentially affected by CVE-2026-41692 via i18nextify (>=4.0.0, <=4.0.7)

i18nextify NPM version =4.0.0, =7.0.0, =1.1.12, =2.0.6 Source cves: CVE-2026-41692 Source advisory: SNYK:JS-I18NEXTIFY-16415525...

ai.grakn:grakn-dist (>=0.15.0, <=0.17.0), ai.grakn:janus-factory (>=0.17.0, <=0.18.0) +5820 more potentially affected by CVE-2026-5598 via org.bouncycastle:bcprov-jdk18on (>=1.82, <=1.83)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.82, =0.15.0, =0.17.0, =0.15.0, =0.1.9, =0.1.9, =0.1.9, =3.30.1.1, =3.10.0.5, =3.10.0.7, =0.2.3.5, =0.1.9, =1.2.3, =1.2.3, =2.0.0-beta-2, =2.0.0 - ai.timefold.solver.enterprise:timefold-solver-enterprise-jackson 2.0.0 and more Source cves:...

ai.mindconnect:mc-agent-admin-ui-app (>=0.0.2, <=0.8.4), ai.mindconnect:mc-agent-api-app (>=0.0.2, <=0.8.4) +3675 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk18on (1.81)

org.bouncycastle:bcprov-jdk18on MAVEN version 1.81 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcprov-jdk18on and may be impacted: - ai.mindconnect:mc-agent-admin-ui-app =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =1.2....

com.github.bjlhx15:common-pdf (0.0.4), com.github.rjolly:flying-saucer (>=9.1.20, <=9.1.25) +81 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk14 (>=1.59, <=1.80)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.59, =9.1.20, =0.1.1, =ibanity-java-1.1.20180605145337, =2.2, =2.0.1, =7.0-rc2, =1.5, =12.3, =1.2.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.2.6 and more Source cves: CVE-2025-14813 Source advisory: GHSA-574F-3G2M-X479...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +15387 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.80)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.31.0, =0.5.0, =0.6.0, =0.5.0, =0.6.0, =0.5.0, =0.9.1, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.9.0 and more Source cves: CVE-2025-14813 Source advisory: GHSA-574F-3G2M-X479...

io.github.epi155:promethium-pgp-jdk5 (0.5-b1), io.github.hworblehat:nexus3-external-auth-plugin (0.1.0) +220 more potentially affected by CVE-2026-3505 via org.bouncycastle:bcpg-jdk15to18 (>=1.65, <=1.82)

org.bouncycastle:bcpg-jdk15to18 MAVEN version =1.65, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-beta3, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.10.0 and more Source cves: CVE-2026-3505 Source advisory: GHSA-CJ8J-37RH-84...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +17716 more potentially affected by CVE-2026-0636 via org.bouncycastle:bcprov-jdk18on (>=1.74, <=1.83)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.74, =0.2.0, =0.31.0, =0.5.0, =0.6.0, =0.5.0, =0.6.0, =0.5.0, =0.9.1, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.9.0 and more Source cves: CVE-2026-0636 Source advisory: OSV:GHSA-C3FC-8QFF-9HWX...

io.github.compyoot:utilities-and-generic-tools (0.3.11), org.scala-sbt.ivy:ivy (>=2.3.0-sbt-a8f9eb5bf09d0539ea3658a2c2d4e09755b5133e, <=2.3.0-sbt-5681e1a77a149b93a4cfbe4a86d0263d7bd223eb) potentially affected by CVE-2026-3505 via org.bouncycastle:bcpg-jdk14 (1.45)

org.bouncycastle:bcpg-jdk14 MAVEN version 1.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcpg-jdk14 and may be impacted: - io.github.compyoot:utilities-and-generic-tools 0.3.11 - org.scala-sbt.ivy:ivy...

ai.rev.speechtotext:revai-java-sdk-speechtotext (>=1.0.0, <=1.4.0), ai.rev:revai-java-sdk (>=2.1.0, <=2.5.0) +13 more potentially affected by CVE-2026-3505 via org.bouncycastle:bcpg-jdk15 (>=1.45, <=1.46)

org.bouncycastle:bcpg-jdk15 MAVEN version =1.45, =1.0.0, =2.1.0, =1.0.alpha1, =0.0.1, =1.2-2, =1.3-2, =1.2-2, =1.2-2, =0.0.2, =1.0, =1.1 Source cves: CVE-2026-3505 Source advisory: OSV:GHSA-CJ8J-37RH-8475...

io.buji:buji-pac4j (>=2.0.0, <=2.0.1), net.binggl:ninja-google-oauth-module (1.0.5) +97 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.9.1)

org.pac4j:pac4j-core MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j =2.0.0, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3,...

io.buji:buji-pac4j-core (1.4.0), io.buji:buji-pac4j-servlet (1.4.0) +19 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.8.1)

org.pac4j:pac4j-core MAVEN version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j-core 1.4.0 - io.buji:buji-pac4j-servlet 1.4.0 - org.apache.knox:gateway-provider-security-pac4j...

io.github.baseinsight:plugin-springsecurity-rest-db-starter (>=0.2.0, <=0.2.1), io.github.baseinsight:plugin-springsecurity-rest-redis-starter (>=0.2.0, <=0.2.1) +17 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (3.9.0)

org.pac4j:pac4j-core MAVEN version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.github.baseinsight:plugin-springsecurity-rest-db-starter =0.2.0, =0.2.0, =0.2.0, =0.1.3, =2.0.0, =2.0.0, =2.0.1 -...

com.github.susom:vertx-base (>=1.0, <=1.3), com.github.susom:vertx-parent (>=1.0, <=1.2) +109 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.9.4)

org.pac4j:pac4j-core MAVEN version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.github.susom:vertx-base =1.0, =1.0, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4,...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +32991 more potentially affected by CVE-2026-22745 via org.springframework:spring-core (>=6.0.0, <=6.2.17)

org.springframework:spring-core MAVEN version =6.0.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 - ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo 0.1.0 -...

@saltcorn/cli (>=1.0.0-beta.1, <=1.4.5), @saltcorn/mobile-builder (>=1.0.0-beta.1, <=1.4.5) potentially affected by CVE-2026-42259 via @saltcorn/server (>=1.0.0-beta.1, <=1.4.5)

@saltcorn/server NPM version =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.1, =1.4.5 Source cves: CVE-2026-42259 Source advisory: GHSA-F3G8-9XV5-77GV...