ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.4.0, <=5.4.2), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.4.0, <=5.4.2) +68 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.4.0)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.6.0, <=5.6.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (5.6.5) +27 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.5.7)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 5.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.6.0, =5.6.0, =5.6.0, =5.6.0, =5.6.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=4.0.1), ca.uhn.hapi.fhir:hapi-fhir-igpacks (>=4.0.0, <=4.0.1) +7 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (4.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.2.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (4.2.0) +53 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (4.2.0)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.2.0 - ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver 4.2.0...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.1.3) +68 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.36)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.36 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.7.0, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.7.7, <=5.7.9) +48 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (5.6.27)

ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version 5.6.27 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4b and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.7.0, =5.7.7, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.5.0, <=5.5.7), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.5.0, <=5.5.7) +37 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.4.10)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.4.10 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (6.4.1), ca.uhn.hapi.fhir:hapi-fhir-cli-app (6.4.1) +29 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.97)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.97 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 6.4.1 - ca.uhn.hapi.fhir:hapi-fhir-cli-app 6.4.1 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.2.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.2.0, <=6.2.5) +84 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.68)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.68 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.2.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.2.0, <=5.2.1) +38 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.2.0)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.2, <=6.4.7) +72 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.971)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.971 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.4.0, =6.4.2, =6.4.2, =6.4.2, =6.4.2, =6.4.2, =6.4.2,...

bio.ferlab:fhavro (>=0.0.9, <=0.0.10), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.5.0, <=5.5.7) +64 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.4.10)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.4.10 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - bio.ferlab:fhavro =0.0.9, =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.2.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.2.0, <=5.2.1) +59 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.2.0)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0,...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.9.1), org.jenkins-ci.main:jenkins-test-harness (1.448) +10 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.448)

org.jenkins-ci.main:jenkins-core MAVEN version 1.448 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =1.3.0, =1.0.5, =2.6, =2.17 -...

GHSA-PHHV-63FH-RRC8 Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation

Jenkins 2.442 through 2.554 both inclusive, LTS 2.426.3 through LTS 2.541.2 both inclusive performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable t...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-33123 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-33123 Source advisory: OSV:GHSA-QPXP-75PX-XJCP...

Insecure Temporary File

Overview @capgo/cli is an A CLI to upload to capgo servers Affected versions of this package are vulnerable to Insecure Temporary File via unsafe file operations that follow symlinks and do not enforce secure permissions. An attacker can overwrite arbitrary files or expose sensitive credential...

CVE-2026-33002

Jenkins 2.442 through 2.554 both inclusive, LTS 2.426.3 through LTS 2.541.2 both inclusive performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable t...

MAL-2026-1802 Malicious code in node-cli-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7df6bef20ed41b1a5c7e3ca57da4665f799cfcc6d6cf27b6dc87f8fa0560bc The package node-cli-dotenv was found to contain malicious code...

Malicious code in dotenv-mono-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e4774845081c77828c11c246f1224738c74e91df84182defb19b32ff6a8757 The package dotenv-mono-cli was found to contain malicious code...