org.apache.atlas:atlas-webapp (0.8.1) potentially affected by CVE-2025-62198 via org.apache.atlas:atlas-dashboardv2 (0.8.1)

org.apache.atlas:atlas-dashboardv2 MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.atlas:atlas-dashboardv2 and may be impacted: - org.apache.atlas:atlas-webapp 0.8.1 Source cves: CVE-2025-62198 Source advisory:...

org.apache.atlas:atlas-webapp (0.8.3) potentially affected by CVE-2025-62198 via org.apache.atlas:atlas-dashboardv2 (0.8.3)

org.apache.atlas:atlas-dashboardv2 MAVEN version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.atlas:atlas-dashboardv2 and may be impacted: - org.apache.atlas:atlas-webapp 0.8.3 Source cves: CVE-2025-62198 Source advisory:...

org.apache.atlas:atlas-webapp (0.8.4) potentially affected by CVE-2025-62198 via org.apache.atlas:atlas-dashboardv2 (0.8.4)

org.apache.atlas:atlas-dashboardv2 MAVEN version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.atlas:atlas-dashboardv2 and may be impacted: - org.apache.atlas:atlas-webapp 0.8.4 Source cves: CVE-2025-62198 Source advisory:...

org.apache.atlas:atlas-webapp (2.4.0) potentially affected by CVE-2025-62198 via org.apache.atlas:atlas-dashboardv2 (2.4.0)

org.apache.atlas:atlas-dashboardv2 MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.atlas:atlas-dashboardv2 and may be impacted: - org.apache.atlas:atlas-webapp 2.4.0 Source cves: CVE-2025-62198 Source advisory:...

org.apache.atlas:atlas-webapp (>=0.8-incubating, <=2.4.0) potentially affected by CVE-2025-62198 via org.apache.atlas:atlas-dashboardv2 (>=0.8-incubating, <=2.4.0)

org.apache.atlas:atlas-dashboardv2 MAVEN version =0.8-incubating, =0.8-incubating, =2.4.0 Source cves: CVE-2025-62198 Source advisory: MEND:CVE-2025-62198...

de.digitalcollections:iiif-bookshelf-webapp (>=2.3.1, <=2.5.1), io.gumga:gumga-application (>=1.5.23, <=4.0.4) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.digitalcollections:iiif-bookshelf-webapp =2.3.1, =1.5.23,...

com.github.inspektr:inspektr-support-spring (1.0.0.ga), org.jasig.cas3.extensions:clearpass-impl (>=1.0.1.ga, <=1.0.5.ga) +25 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.0.1.release)

org.springframework:spring-webmvc MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.inspektr:inspektr-support-spring 1.0.0.ga -...

com.jdroidframework:jdroid-java-webapp-core (0.10.0), com.jdroidtools:jdroid-java-webapp-core (1.0.0) +18 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (3.2.18.release)

org.springframework:spring-webmvc MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.jdroidframework:jdroid-java-webapp-core 0.10.0 -...

WebApp Component UI Replacement

The vulnerability of the WebApp component of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

Chromium: CVE-2026-11008 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

autoreduce-db (>=0.1.0, <=22.0.0.dev1), autoreduce-frontend (>=21.1.1, <=21.1.3) +4 more potentially affected by CVE-2026-8404 via django (3.2.2)

django PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev0, =21.1.2, =21.1.4 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

Malicious code in @webapp-next/store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbad3803cdda40845fe2aa64e0963b9293f9ee523b3f9205a354da2ae1e317bf package.json declares "preinstall": "node index.js", which runs automatically on npm install. index.js collects os.hostname, os.platform, os.arch,...

com.github.jsimone:webapp-runner (7.0.84.0), org.apache.jspwiki:jspwiki-portable (>=2.10.3, <=2.10.4) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 7.0.84.0 -...

com.github.jsimone:webapp-runner (7.0.84.0), org.apache.jspwiki:jspwiki-portable (>=2.10.3, <=2.10.4) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 7.0.84.0 -...

com.github.jsimone:webapp-runner (7.0.84.0), org.apache.jspwiki:jspwiki-portable (>=2.10.3, <=2.10.4) +3 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 7.0.84.0 -...

com.github.jsimone:webapp-runner (7.0.85.0), net.unit8.waitt.server:waitt-tomcat7 (1.2.3) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.85)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.85 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 7.0.85.0 -...

com.github.jsimone:webapp-runner (7.0.85.0), net.unit8.waitt.server:waitt-tomcat7 (1.2.3) +3 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.85)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.85 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 7.0.85.0 -...

com.github.jsimone:webapp-runner (7.0.86.0), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.86) +1 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.86)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 7.0.86.0 -...

com.github.jsimone:webapp-runner (7.0.86.0), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.86) +1 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.86)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 7.0.86.0 -...

com.github.jsimone:webapp-runner (7.0.86.0), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.86) +1 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.86)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 7.0.86.0 -...