aero.albers.osmbse:mdzip-process-sources-maven-plugin (0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (0.0.1) +24288 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=1.0.4, <=3.6.0)

org.codehaus.plexus:plexus-utils MAVEN version =1.0.4, =1.9.0, =1.9.0, =1.9.0, =0.1, =0.1.0, =0.0.1, =0.0.6, =0.0.18 and more Source cves: CVE-2025-67030 Source advisory: MEND:CVE-2025-67030...

@amqp-contract/asyncapi (>=0.2.0, <=0.20.0), @c15t/backend (>=1.1.0-canary.0, <=1.8.5) +13 more potentially affected by CVE-2026-33331 via @orpc/openapi (>=1.0.0-beta.1, <=1.13.8)

@orpc/openapi NPM version =1.0.0-beta.1, =0.2.0, =1.1.0-canary.0, =1.1.0-canary.0, =1.2.0-canary.0, =1.2.2-canary-20250514183211, =1.2.0-canary.8, =1.2.0-canary.0, =0.1.0, =0.4.2, =1.0.0-beta.2, =0.0.0, =0.0.0, =1.0.0-beta.2, =1.0.0-beta.1, =1.2.0-canary.0, =1.8.5 Source cves: CVE-2026-33331 Sour...

@activepieces/piece-amazon-s3 (>=0.5.4, <=0.6.4), @activepieces/piece-amazon-ses (>=0.0.1, <=0.1.4) +1257 more potentially affected by CVE-2026-33349 via fast-xml-parser (>=5.0.1, <=5.5.6)

fast-xml-parser NPM version =5.0.1, =0.5.4, =0.0.1, =0.2.0, =0.1.3, =0.5.3, =0.2.1, =0.0.4, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.5.1 and more Source cves: CVE-2026-33349 Source advisory: MEND:CVE-2026-33349...

@chainless-js/biometric-ed25519 (>=1.2.4, <=1.2.6), @forwardemail/wildduck (>=1.40.10, <=4.0.3) +17 more potentially affected by unknown CVE via fido2-lib (>=3.2.5, <=3.5.6)

fido2-lib NPM version =3.2.5, =1.2.4, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =6.6.6, =0.0.2, =0.0.1, =1.0.0-alpha.1, =1.2.3, =6.0.0, =5.8.30, =1.46.1, =1.46.25 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G3QJ-J598-CXMQ...

@bigegg/parse-server-schema-config (>=1.0.5, <=1.0.10), @kontaa/subgraph (>=1.0.1, <=1.2.3) +27 more potentially affected by CVE-2026-33421 via parse-server (>=2.0.8, <=7.5.4)

parse-server NPM version =2.0.8, =1.0.5, =1.0.1, =1.2.1, =2.4.46, =2.4.8, =1.0.0, =1.0.0, =1.0.1, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.29 - parse-cli-server2 0.0.30 and more Source cves: CVE-2026-33421 Source advisory: MEND:CVE-2026-33421...

org.scala-sbt:sbt (>=0.99.2, <=1.0.0-m4), org.scala-sbt:scripted-plugin_2.10 (>=0.99.2, <=1.0.0-m4) +1 more potentially affected by CVE-2026-32948 via org.scala-sbt:main_2.11 (>=0.99.2, <=1.0.0-m4)

org.scala-sbt:main2.11 MAVEN version =0.99.2, =0.99.2, =0.99.2, =0.99.2, =1.0.0-m4 Source cves: CVE-2026-32948 Source advisory: SNYK:JAVA-ORGSCALASBT-15763414...

@fduenascoink/ui-sdk (>=18.0.0, <=18.0.4), @nextorders/avatar (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +2 more potentially affected by CVE-2026-33311 via @dicebear/core (>=9.0.0, <=9.4.0)

@dicebear/core NPM version =9.0.0, =18.0.0, =0.1.0-alpha.1, =0.1.0, =9.0.0, =9.4.0 Source cves: CVE-2026-33311 Source advisory: MEND:CVE-2026-33311...

com.mpay24.payment:mpay24-payment-sdk (1.0.0.0), com.mpay24.payment:mpay24-soap-base (1.0.0.0) +11 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.0.10.final)

io.undertow:undertow-core MAVEN version 1.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.mpay24.payment:mpay24-payment-sdk 1.0.0.0 - com.mpay24.payment:mpay24-soap-base 1.0.0.0 -...

cc.uncarbon.framework:helio-starter-web (>=1.9.0, <=1.11.1), cn.herodotus.engine:message-sdk-websocket (2.7.18.final) +232 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.28.final)

io.undertow:undertow-core MAVEN version 2.2.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cc.uncarbon.framework:helio-starter-web =1.9.0, =1.0.0, =1.0.0, =1.1.3, =1.3.1 -...

io.undertow:undertow-servlet (1.0.0.alpha21), io.undertow:undertow-websockets-jsr (1.0.0.alpha21) +26 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.0.0.alpha21)

io.undertow:undertow-core MAVEN version 1.0.0.alpha21 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha21 - io.undertow:undertow-websockets-jsr 1.0.0.alpha21 -...

io.undertow:undertow-servlet (1.3.33.final), io.undertow:undertow-websockets-jsr (1.3.33.final) +10 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.33.final)

io.undertow:undertow-core MAVEN version 1.3.33.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.33.final - io.undertow:undertow-websockets-jsr 1.3.33.final -...

com.datathings:greycat-taskide (>=1, <=5), com.datathings:greycat-websocket (>=1, <=8.4) +71 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.4.10.final)

io.undertow:undertow-core MAVEN version 1.4.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.datathings:greycat-taskide =1, =1, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4,...

cloud.piranha.http:piranha-http-undertow (>=22.11.0, <=22.12.0), cloud.piranha:debug (>=22.11.0, <=22.12.0) +266 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.3.0.final)

io.undertow:undertow-core MAVEN version 2.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cloud.piranha.http:piranha-http-undertow =22.11.0, =22.11.0, =22.10.1, =22.10.1, =22.10.1, =22.10.1,...

com.brinkus.labs:labs-cloud-starter-service (>=1.1.0, <=1.4.0), com.gitblit.fathom:fathom-core (0.8.4) +88 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.23.final)

io.undertow:undertow-core MAVEN version 1.3.23.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.brinkus.labs:labs-cloud-starter-service =1.1.0, =1.4.0 - com.gitblit.fathom:fathom-core 0.8.4 -...

de.chkal.backset:backset-core (1.0.0.alpha1), de.chkal.backset:backset-module-api (1.0.0.alpha1) +12 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.0.9.final)

io.undertow:undertow-core MAVEN version 1.0.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.chkal.backset:backset-core 1.0.0.alpha1 - de.chkal.backset:backset-module-api 1.0.0.alpha1 -...

com.gitblit.fathom:fathom-core (0.7.0), com.gitblit.fathom:fathom-eventbus (0.7.0) +50 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.5.final)

io.undertow:undertow-core MAVEN version 1.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.gitblit.fathom:fathom-core 0.7.0 - com.gitblit.fathom:fathom-eventbus 0.7.0 -...

django-webauthn (0.0.1), greengrasssdk (>=1.5.0, <=1.6.0) +7 more potentially affected by CVE-2026-26209 via cbor2 (4.1.2)

cbor2 PYPI version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on cbor2 and may be impacted: - django-webauthn 0.0.1 - greengrasssdk =1.5.0, =0.0.7, =2019.0.0a1.post0.dev0, =2019.0.0a1, =1.2.0rc2, =1.0.0rc2, =1.2.0 Source cves: CVE-2026-26209...

ai-box-lib (>=0.1.0, <=0.2.1), aligned-py (>=0.1.0, <=0.2.0a0) +99 more potentially affected by CVE-2026-26209 via cbor2 (>=5.0.1, <=5.8.0)

cbor2 PYPI version =5.0.1, =0.1.0, =0.1.0, =0.2.1, =0.13.0, =0.1.3, =0.5.5.post5, =0.5.5.post4, =0.2.0, =0.10.6, =0.7.1a0, =0.1.0, =4.2.10, =1.0.0, =1.2.0 and more Source cves: CVE-2026-26209 Source advisory: OSV:GHSA-3C37-WWVX-H642...

com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17), com.charlyghislain.keycloak:keycloak-importexport (16.0.0) +30 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (16.1.0)

org.keycloak:keycloak-services MAVEN version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.c4-soft.springaddons:keycloak-grants-mapper =3.1.13-jdk1.8, =1.3.17, =1.3.17, =1.3.17, =1.3.17...

fr.cnieg.keycloak:attribute-login-provider (1.3.5), io.phasetwo.keycloak:keycloak-magic-link (0.15) +14 more potentially affected by CVE-2026-4628 via org.keycloak:keycloak-services (21.1.2)

org.keycloak:keycloak-services MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.5 - io.phasetwo.keycloak:keycloak-magic-link 0.15 -...