ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +545 more potentially affected by CVE-2026-59641 via org.bouncycastle:bcmail-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcmail-jdk18on MAVEN version =1.71, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =1.1, =2.2.1, =2.2.6 and more Source cves: CVE-2026-59641 Source advisory: MEND:CVE-2026-59641...

io.cloudslang.content:cs-mail (0.0.67) potentially affected by CVE-2026-59641 via org.bouncycastle:bcjmail-fips (2.0.5)

org.bouncycastle:bcjmail-fips MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcjmail-fips and may be impacted: - io.cloudslang.content:cs-mail 0.0.67 Source cves: CVE-2026-59641 Source advisory: MEND:CVE-2026-59641...

ai.mindconnect:mc-agent-admin-ui-app (>=0.0.2, <=0.8.4), ai.mindconnect:mc-agent-api-app (>=0.0.2, <=0.8.4) +424 more potentially affected by CVE-2026-59641 via org.bouncycastle:bcjmail-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcjmail-jdk18on MAVEN version =1.71, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =1.2.4, =1.1.0-rc1, =1.1.16, =25.4.0, =1.0.3.1-jdk21, =1.0.0, =1.1.7 and more Source cves: CVE-2026-59641 Source advisory: MEND:CVE-2026-59641...

com.artipie:debian-adapter (>=v0.30.15, <=v1.17.13), org.demoiselle.signer:chain-icp-brasil (4.6.0) +13 more potentially affected by CVE-2026-59641 via org.bouncycastle:bcmail-lts8on (>=2.73.5, <=2.73.11)

org.bouncycastle:bcmail-lts8on MAVEN version =2.73.5, =v0.30.15, =v1.17.13 - org.demoiselle.signer:chain-icp-brasil 4.6.0 - org.demoiselle.signer:chain-icp-brasil-homolog 4.6.0 - org.demoiselle.signer:chain-iti 4.6.0 - org.demoiselle.signer:chain-iti-homolog 4.6.0 -...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +10857 more potentially affected by CVE-2026-59642 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-59642 Source advisory: MEND:CVE-2026-59642...

com.omnistrate.licensing:omnistrate-licensing-sdk-java (0.1.37), net.corda:corda-jackson (>=4.12.3, <=4.14.2) +54 more potentially affected by CVE-2026-59645 via org.bouncycastle:bcutil-lts8on (>=2.73.6, <=2.73.11)

org.bouncycastle:bcutil-lts8on MAVEN version =2.73.6, =4.12.3, =4.12.3, =7.2, =7.2, =7.2, =7.2, =7.2, =7.2, =2.73.8, =2.73.8, =2.73.8, =2.73.8, =2.73.8, =2.73.11 and more Source cves: CVE-2026-59645 Source advisory: MEND:CVE-2026-59645...

com.srcclr:srcclr-maven-plugin (>=3.1.23, <=3.1.25), org.apache.camel.quarkus:camel-quarkus-opensearch (3.24.0) +20 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-fips (>=1.0.9, <=1.0.19)

org.bouncycastle:bctls-fips MAVEN version =1.0.9, =3.1.23, =19.0.0, =14.6.5.3, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.6.4, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.9.4 and more Source cves: CVE-2026-59646 Source advisory: MEND:CVE-2026-59646...

co.elastic.apm:apm-agent-attach-cli (>=1.50.0, <=1.57.0), org.opensearch:opensearch-plugin-cli (>=1.3.20, <=2.16.0) potentially affected by CVE-2026-59648 via org.bouncycastle:bcpg-fips (1.0.7.1)

org.bouncycastle:bcpg-fips MAVEN version 1.0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcpg-fips and may be impacted: - co.elastic.apm:apm-agent-attach-cli =1.50.0, =1.3.20, =2.16.0 Source cves: CVE-2026-59648 Source advisory...

app.cash.backfila:client-misk-hibernate (>=2025.05.13.195510-03b951f, <=2026.10.01.201111-ad9f619), app.cash.backfila:service (>=2025.05.13.195510-03b951f, <=2026.10.01.201111-ad9f619) +1204 more potentially affected by CVE-2026-59648 via org.bouncycastle:bcpg-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpg-jdk18on MAVEN version =1.71, =2025.05.13.195510-03b951f, =2025.05.13.195510-03b951f, =2025.05.13.195510-03b951f, =1.0.0, =1.0.0, =1.1, =4.3.0.549.vf2adaad19b5e, =1.5.0, =0.1.0, =0.1.5 and more Source cves: CVE-2026-59648 Source advisory: MEND:CVE-2026-59648...

org.opensearch:opensearch-plugin-cli (>=2.17.0, <=3.2.0) potentially affected by CVE-2026-59649 via org.bouncycastle:bcpg-fips (>=2.0.9, <=2.0.11)

org.bouncycastle:bcpg-fips MAVEN version =2.0.9, =2.17.0, =3.2.0 Source cves: CVE-2026-59649 Source advisory: MEND:CVE-2026-59649...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19640 more potentially affected by CVE-2026-59651 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.4.0, =0.4.0, =0.4.0, =0.8.1, =0.31.0, =0.5.0, =0.6.0, =0.5.0, =0.6.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-59651 Source advisory: MEND:CVE-2026-59651...

app.cash.bittycity:outie (0.0.1), app.cash.bittycity:outie-jooq-provider (0.0.1) +1889 more potentially affected by CVE-2026-59652 via org.bouncycastle:bcprov-jdk15to18 (>=1.63, <=1.84)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.63, =0.0.2, =0.0.1, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =0.1.0-m36, =0.1.0-m26, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =0.3.0 - ch.pontius.nio:smb-nio 0.9.0 and more Source cves: CVE-2026-59652 Source advisory: MEND:CVE-2026-59652...

cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (1.0.3-jdk21) +432 more potentially affected by CVE-2026-12185 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.11)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-12185 Source advisory:...

cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (1.0.3-jdk21) +432 more potentially affected by CVE-2026-8763 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.11)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-8763 Source advisory:...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19640 more potentially affected by CVE-2026-15055 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.4.0, =0.4.0, =0.4.0, =0.8.1, =0.31.0, =0.5.0, =0.6.0, =0.5.0, =0.6.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-15055 Source advisory: MEND:CVE-2026-15055...

aidriver (0.1.0), lama-cleaner (>=0.18.0, <=0.23.0) +3 more potentially affected by CVE-2026-9856 via transformers (4.20.0)

transformers PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aidriver 0.1.0 - lama-cleaner =0.18.0, =1.0.0, =2022.6.23, =2022.6.29.post2 Source cves: CVE-2026-9856 Source advisory:...

agentkb (>=0.1.0, <=0.3.0), ai-voice-interconnector (>=0.10.6, <=0.10.7) +226 more potentially affected by CVE-2026-9856 via transformers (>=5.0.0rc0, <=5.9.0)

transformers PYPI version =5.0.0rc0, =0.1.0, =0.10.6, =1.1.8, =0.1.0, =1.1.0, =2026.5.22, =0.7.0, =2.0.0, =3.1.0, =3.9.11, =0.2.2, =0.2.5 and more Source cves: CVE-2026-9856 Source advisory: GHSA-XRQW-3RRV-VX5W...

dataflow-421 (>=0.1.8, <=0.2.12), easyroutine (>=1.1.1, <=1.1.5) +2 more potentially affected by CVE-2026-9856 via transformers (4.51.1)

transformers PYPI version 4.51.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dataflow-421 =0.1.8, =1.1.1, =1.0.10, =1.18.0, =1.27.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

agent-memory-jojo (0.1.3), airunner (>=3.2.0, <=4.1.1) +45 more potentially affected by CVE-2026-9856 via transformers (4.50.3)

transformers PYPI version 4.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agent-memory-jojo 0.1.3 - airunner =3.2.0, =0.1.0, =0.4.3, =0.0.3, =0.2.2, =0.1.0, =0.20.0, =1.0.9, =0.6.4, =2.8.0rc1, =2.8.2 and more...

algorin-cli (>=0.0.1, <=0.21.0), autotrain-advanced (>=0.7.2, <=0.7.7) +8 more potentially affected by CVE-2026-9856 via transformers (4.38.1)

transformers PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - algorin-cli =0.0.1, =0.7.2, =0.1.0, =0.0.92, =0.2.5, =2.0.0a12, =0.1.0, =0.1.4 Source cves: CVE-2026-9856 Source advisory:...