org.eclipse.dirigible:dirigible-application (>=9.1.1, <=10.6.18) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.34)

net.snowflake:snowflake-jdbc MAVEN version 3.13.34 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.eclipse.dirigible:dirigible-application =9.1.1, =10.6.18 Source cves: CVE-2026-86597 Source...

org.apache.hop:hop-transform-snowflake-bulkloader (>=2.7.0, <=2.9.0), org.apache.nifi:nifi-snowflake-processors (>=1.24.0, <=2.0.0-m1) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.3)

net.snowflake:snowflake-jdbc MAVEN version 3.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.apache.hop:hop-transform-snowflake-bulkloader =2.7.0, =1.24.0, =1.24.0, =1.24.0, =1.24.0, =1.24.0,...

com.codbex.atlas:codbex-atlas-application (>=2.48.0, <=2.53.0), com.codbex.gaia:codbex-gaia-application (>=2.55.0, <=2.57.0) +17 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.24.0)

net.snowflake:snowflake-jdbc MAVEN version 3.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.48.0, =2.55.0, =2.42.0, =2.42.0, =2.42.0, =2.42.0, =2.42....

io.trino:trino-iceberg (>=464, <=468), io.trino:trino-snowflake (>=464, <=468) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.19.1)

net.snowflake:snowflake-jdbc MAVEN version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =464, =464, =1.7.0, =10.6.32, =10.6.32, =10.6.32, =10.6.34 Source cves:...

io.trino:trino-iceberg (>=454, <=456), io.trino:trino-snowflake (>=454, <=456) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.18.0)

net.snowflake:snowflake-jdbc MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =454, =454, =2.2.1, =10.6.19, =0.1.0, =16.22.1, =16.22.1, =16.22.1, =16.22.1,...

com.codbex.atlas:codbex-atlas-application (>=1.4.0, <=2.1.0), com.codbex.hades:codbex-hades-application (>=1.6.0, <=2.1.0) +17 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.22.0)

net.snowflake:snowflake-jdbc MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =1.4.0, =1.6.0, =2.0.0, =1.6.0, =1.4.0, =1.3.0, =1.6.0, =470...

com.codbex.atlas:codbex-atlas-application (>=2.54.0, <=2.57.0), com.codbex.gaia:codbex-gaia-application (2.58.0) +8 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.24.1)

net.snowflake:snowflake-jdbc MAVEN version 3.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.54.0, =2.47.0, =2.47.0, =11.47.7, =11.47.7, =11.47.7,...

com.codbex.atlas:codbex-atlas-application (>=2.77.0, <=2.79.0), com.codbex.gaia:codbex-gaia-application (>=2.68.0, <=2.70.0) +19 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.26.1)

net.snowflake:snowflake-jdbc MAVEN version 3.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.77.0, =2.68.0, =2.60.0, =2.65.0, =2.59.0, =2.61.0, =3.21....

com.snowflake:snowpark (1.9.0), io.github.stewartbryson.snowflake:io.github.stewartbryson.snowflake.gradle.plugin (>=2.1.5, <=2.1.11) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.1)

net.snowflake:snowflake-jdbc MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowpark 1.9.0 -...

com.codbex.atlas:codbex-atlas-application (>=2.71.0, <=2.75.0), com.codbex.gaia:codbex-gaia-application (>=2.65.0, <=2.67.0) +13 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.25.0)

net.snowflake:snowflake-jdbc MAVEN version 3.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.71.0, =2.65.0, =2.57.0, =2.62.0, =2.56.0, =2.58.0, =3.17....

com.datasqrl:sqrl-discovery (0.7.2), com.datasqrl:sqrl-planner (0.7.2) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.26.0)

net.snowflake:snowflake-jdbc MAVEN version 3.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.datasqrl:sqrl-discovery 0.7.2 - com.datasqrl:sqrl-planner 0.7.2 -...

com.codbex.atlas:codbex-atlas-application (>=2.2.0, <=2.10.0), com.codbex.hades:codbex-hades-application (>=2.2.0, <=2.10.0) +15 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.23.0)

net.snowflake:snowflake-jdbc MAVEN version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0, =2.2.0, =11.5.0,...

CVE-2026-77226

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

EUVD-2026-92791

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

CVE-2026-77226 Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

CVE-2026-77226 Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

CVE-2026-77226

The Camunda engine, specifically versions 7.24.0 before 7.24.15 , is vulnerable to an incorrect authorization flaw in the Admin web application's first-run setup endpoint. The SetupResource component incorrectly determines setup availability by only counting direct members of the camunda-admin gr...

CVE-2026-105392

A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the component JWT Signing. The manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . Remote...

CVE-2026-105392 Lybbn Django-Vue-Lyadmin JWT Signing settings.py hard-coded key

A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the component JWT Signing. The manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . Remote...

CVE-2026-105392 Lybbn Django-Vue-Lyadmin JWT Signing settings.py hard-coded key

A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the component JWT Signing. The manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . Remote...