com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +23 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (14.0.0)

org.keycloak:keycloak-services MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

@amedia/brick-mcp (>=0.0.0-vSNAPSHOT-20260217144000, <=1.0.0), @area15/ticket-component (0.1.0) +107 more potentially affected by CVE-2026-3419 via fastify (>=5.7.2, <=5.7.4)

fastify NPM version =5.7.2, =0.0.0-vSNAPSHOT-20260217144000, =0.5.2, =0.5.2, =0.5.2, =0.5.2, =0.2.11, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.11.6, =5.1.19, =2.21.2, =2.21.2, =2.21.3 and more Source cves: CVE-2026-3419 Source advisory: OSV:GHSA-573F-X89G-HQP9...

@amedia/brick-mcp (>=0.0.0-vSNAPSHOT-20260217144000, <=1.0.0), @area15/ticket-component (0.1.0) +107 more potentially affected by CVE-2026-3419 via fastify (>=5.7.2, <=5.7.4)

fastify NPM version =5.7.2, =0.0.0-vSNAPSHOT-20260217144000, =0.5.2, =0.5.2, =0.5.2, =0.5.2, =0.2.11, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.11.6, =5.1.19, =2.21.2, =2.21.2, =2.21.3 and more Source cves: CVE-2026-3419 Source advisory: SNYK:JS-FASTIFY-15428269...

bws-web-server (>=0.1.0, <=0.1.1), pingora (>=0.1.0, <=0.6.0) +3 more potentially affected by CVE-2026-2836 via pingora-cache (>=0.1.1, <=0.6.0)

pingora-cache CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.6.0 - revoke-gateway 0.3.0 - static-files-module 0.1.0 Source cves: CVE-2026-2836 Source advisory: OSV:GHSA-F93W-PCJ3-RGGC...

bws-web-server (>=0.1.0, <=0.1.1), pingora (>=0.1.0, <=0.6.0) +6 more potentially affected by CVE-2026-2833 via pingora-core (>=0.1.1, <=0.6.0)

pingora-core CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.7 - revoke-gateway 0.3.0 - static-files-module 0.1.0 Source cves: CVE-2026-2833 Source advisory: OSV:GHSA-XQ2H-P299-VJWV...

ado-vllm-performance (>=1.2.2, <=1.3.3), agentics-py (>=0.0.0, <=0.0.5) +68 more potentially affected by CVE-2026-25048 via xgrammar (>=0.1.11, <=0.1.29)

xgrammar PYPI version =0.1.11, =1.2.2, =0.0.0, =2.3.5.dev0, =0.8.4, =0.2.2, =0.1.0, =0.1.0, =1.0.1rc1, =0.0.2, =0.1.1, =0.1.10, =0.0.2, =1.1.2, =1.1.5 and more Source cves: CVE-2026-25048 Source advisory: OSV:GHSA-7RGV-GQHR-FXG3...

web3.db-fileconnector (>=1.4.0, <=1.8.6) potentially affected by CVE-2025-64166 via mercurius (16.1.0)

mercurius NPM version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mercurius and may be impacted: - web3.db-fileconnector =1.4.0, =1.8.6 Source cves: CVE-2025-64166 Source advisory: SNYK:JS-MERCURIUS-15428327...

web3.db-fileconnector (>=1.4.0, <=1.8.6) potentially affected by CVE-2025-64166 via mercurius (16.1.0)

mercurius NPM version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mercurius and may be impacted: - web3.db-fileconnector =1.4.0, =1.8.6 Source cves: CVE-2025-64166 Source advisory: OSV:GHSA-V66J-6WWF-JC57...

ai.agentscentral:agentj-jetty (>=0.0.4, <=0.0.6), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +9824 more potentially affected by CVE-2025-11143 via org.eclipse.jetty:jetty-server (>=9.4.0.m0, <=12.0.30)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.m0, =0.0.4, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.1.7, =0.1.7, =3.30.0.7, =3.30.0.7, =3.46.0.12 and more Source cves: CVE-2025-11143 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-15426540...

grooveshop-django-api (>=0.36.0, <=0.37.4) potentially affected by CVE-2026-27982 via django-allauth (0.58.0)

django-allauth PYPI version 0.58.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api =0.36.0, =0.37.4 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V67J...

df-site (0.1.0), grooveshop-django-api (>=0.156.0, <=0.162.2) +1 more potentially affected by CVE-2026-27982 via django-allauth (64.2.1)

django-allauth PYPI version 64.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - df-site 0.1.0 - grooveshop-django-api =0.156.0, =0.162.2 - ov-wag 0.7.0 Source cves: CVE-2026-27982 Source advisory:...

grooveshop-django-api (>=0.38.0, <=0.40.2) potentially affected by CVE-2026-27982 via django-allauth (0.58.1)

django-allauth PYPI version 0.58.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api =0.38.0, =0.40.2 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V67J...

grooveshop-django-api (0.65.0) potentially affected by CVE-2026-27982 via django-allauth (0.61.0)

django-allauth PYPI version 0.61.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api 0.65.0 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...

df-site (0.1.0), grooveshop-django-api (>=0.156.0, <=0.162.2) +1 more potentially affected by CVE-2026-27982 via django-allauth (64.2.1)

django-allauth PYPI version 64.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - df-site 0.1.0 - grooveshop-django-api =0.156.0, =0.162.2 - ov-wag 0.7.0 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026...

@abyedev/hono-dotenv (1.0.0), @affectively/relay (>=5.0.0, <=6.0.1) +739 more potentially affected by CVE-2026-29085 via hono (>=3.8.4, <=4.12.3)

hono NPM version =3.8.4, =5.0.0, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.0.1, =0.0.16 and more Source cves: CVE-2026-29085 Source advisory: SNYK:JS-HONO-15423717...

@agentforce/adk (>=0.9.0, <=0.12.1), @agentkit-ai/bff-hono (1.0.0) +490 more potentially affected by CVE-2026-29045 via hono (>=4.0.0, <=4.12.3)

hono NPM version =4.0.0, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =0.0.31 and more Source cves: CVE-2026-29045 Source advisory: SNYK:JS-HONO-15419466...

@abyedev/hono-dotenv (1.0.0), @affectively/relay (>=5.0.0, <=6.0.1) +768 more potentially affected by CVE-2026-29086 via hono (>=0.5.10, <=4.12.3)

hono NPM version =0.5.10, =5.0.0, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.0.1, =0.0.16 and more Source cves: CVE-2026-29086 Source advisory: SNYK:JS-HONO-15418360...

@adenta/cms (>=0.0.6, <=1.1.1-0), @adobe/helix-deploy (>=11.0.19, <=11.1.15) +536 more potentially affected by CVE-2026-29786 via tar (>=7.0.0, <=7.5.9)

tar NPM version =7.0.0, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =0.1.1, =0.1.1, =2.17.11, =1.9.5, =8.8.3, =8.11.4 - @altipla/directus-sdk-utils 0.7.2 - @applitools/core 4.20.0 - @applitools/core-base 1.17.0 - @applitools/ec-client 1.9.6 - @applitools/eyes 1.23.0 - @applitools/eyes-playwright 1.29.1 and...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +246 more potentially affected by CVE-2026-29074 via svgo (>=3.0.0, <=3.3.2)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-29074 Source advisory: OSV:GHSA-XPQW-6GX7-V673...

5ug-cli (>=1.0.72, <=1.4.0), @343dev/optimizt (6.0.0) +85 more potentially affected by CVE-2026-29074 via svgo (>=2.1.0, <=2.8.0)

svgo NPM version =2.1.0, =1.0.72, =1.1.2, =2.0.0-fix-trigger-remove-colors-config-e26731597751d1581014163b7e73df159cf80be3.1, =0.0.2-0, =4.55.0, =2.12.3-canary.621.15219.0, =2.1.0-beta-1, =2.1.0-beta-1, =2.1.8, =5.0.0, =0.0.1, =2.7.4, =3.59.1--canary.1316.b3452bb.0, =4.0.0--canary.2146.fe4f461.0...