atlassian-jwt-auth (>=2.0.0, <=2.6.0), clink (>=0.10.0, <=0.23.0) +7 more potentially affected by CVE-2026-48526 via pyjwt (1.4.0)

pyjwt PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - atlassian-jwt-auth =2.0.0, =0.10.0, =0.0.1.dev1, =0.0.1.dev3, =0.4.0, =3.1.0, =1.1.0, =0.8.0, =0.9.0 Source cves: CVE-2026-48526 Source advisory:...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +2257 more potentially affected by CVE-2026-48524 via pyjwt (>=0.2.1, <=2.12.1)

pyjwt PYPI version =0.2.1, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =0.1.1, =1.8.26, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =0.8.44.4rc1, =0.9.2.1 and more Source cves: CVE-2026-48524 Source advisory: MEND:CVE-2026-48524...

aiida-core (>=2.9.0rc0, <=2.9.2), grpc-pve-cloud (>=3.2.0, <=3.6.3rc0) +11 more potentially affected by CVE-2026-45309 via asyncssh (2.22.0)

asyncssh PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - aiida-core =2.9.0rc0, =3.2.0, =0.0.12, =3.1.0, =3.2.0, =3.1.0, =0.11.0, =0.1.4rc0, =0.2.0.dev14, =0.0.10, =0.0.12 - waldiez-runner 0.7.1 Source...

agoras-platforms (>=2.0.0, <=2.0.1), apheris-auth (0.23.0) +2 more potentially affected by CVE-2026-44681 via authlib (1.7.0)

authlib PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - agoras-platforms =2.0.0, =0.51.0, =1.3.0b1, =1.3.0 Source cves: CVE-2026-44681 Source advisory: MEND:CVE-2026-44681...

gridplayer (>=0.5.0, <=0.5.1), holodex-cli (0.1.5) potentially affected by CVE-2026-44353 via streamlink (5.5.1)

streamlink PYPI version 5.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.5.0, =0.5.1 - holodex-cli 0.1.5 Source cves: CVE-2026-44353 Source advisory: OSV:PYSEC-2026-180...

@budibase/cli (>=0.0.1, <=3.2.26), @budibase/pro (>=0.0.1, <=3.2.26) +4 more potentially affected by CVE-2026-46424 via @budibase/backend-core (>=0.0.1, <=3.2.26)

@budibase/backend-core NPM version =0.0.1, =0.0.1, =0.0.1, =0.0.999-alpha.30, =0.0.1, =3.2.26 - @devlego/server 1.1.29-alpha.1 - @devlego/worker 1.1.29-alpha.1 Source cves: CVE-2026-46424 Source advisory: MEND:CVE-2026-46424...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: syft, docker-cli-buildx, cilium-cli, flux, flux-image-automation-controller, melange, argocd-image-updater, trivy-operator, act, rancher, scorecard, k9s, zot, osv-scanner, chisel, argo-cd, containerd, opentelemetry-collector, snyk-cli, kine, grype,...

CVE-2026-39832 vulnerabilities

Vulnerabilities for packages: syft, docker-cli-buildx, cilium-cli, flux, flux-image-automation-controller, melange, argocd-image-updater, step, trivy-operator, act, rancher, scorecard, k9s, zot, osv-scanner, argo-cd, containerd, opentelemetry-collector, snyk-cli, buildah, kine, grype,...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: snyk-cli, buildah, cert-manager, docker-cli-buildx, istio, kine, cilium-cli, flux, prometheus, helm, cloud-provider-aws, kyverno, external-dns, kubernetes-dashboard, mattermost, telegraf, nerdctl, podman, loki, rancher-agent, fscrypt, spire-server, gitlab-kas, minio,...

CVE-2026-46595 vulnerabilities

Vulnerabilities for packages: snyk-cli, cert-manager, istio, kine, cilium-cli, flux, prometheus, helm, cloud-provider-aws, kyverno, flux-image-automation-controller, argocd-image-updater, external-dns, kubernetes-dashboard, mattermost, telegraf, nerdctl, loki, rancher-agent, fscrypt, spire-server...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: syft, docker-cli-buildx, tflint, cilium-cli, flux, flux-image-automation-controller, melange, argocd-image-updater, step, trivy-operator, act, vault-benchmark, policy-controller, flux-kustomize-controller, glab, rancher, crossplane-provider-azure-authorization, k9s,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: syft, docker-cli-buildx, tflint, cilium-cli, flux, flux-image-automation-controller, melange, argocd-image-updater, step, trivy-operator, act, vault-benchmark, policy-controller, flux-kustomize-controller, glab, rancher, crossplane-provider-azure-authorization, k9s,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: syft, snyk-cli, cert-manager, istio, kine, terragrunt, cilium-cli, dagger, grype, opentofu, pulumi-kubernetes-operator, flux, prometheus, guac, helm, cloud-provider-aws, gomplate, kyverno, flux-image-automation-controller, nuclei, melange, pulumi-language-yaml, nfpm,...

CVE-2026-39827 vulnerabilities

Vulnerabilities for packages: flux-source-controller, argo-events, grype-db, podman-fips, kube-conformance, frankenphp-8.4, traefik, commercial-grafana, kube-arangodb-fips, knative-kafka-broker-fips, frankenphp-8.5, argo-workflows-fips, cert-manager, knative-serving-fips, rootlesskit-fips,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: atlantis, crossplane-provider-azure-operationalinsights, flux-source-controller, argo-events, grype-db, podman-fips, kube-conformance, frankenphp-8.4, fulcio, commercial-grafana, kube-arangodb-fips, flux-kustomize-controller, frankenphp-8.5, argo-workflows-fips,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: atlantis, crossplane-provider-azure-operationalinsights, flux-source-controller, argo-events, grype-db, podman-fips, kube-conformance, frankenphp-8.4, fulcio, commercial-grafana, kube-arangodb-fips, flux-kustomize-controller, frankenphp-8.5, argo-workflows-fips,...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: podman-fips, kube-conformance, frankenphp-8.4, traefik, commercial-grafana, kube-arangodb-fips, knative-kafka-broker-fips, frankenphp-8.5, argo-workflows-fips, cert-manager, knative-serving-fips, tekton-pipelines, tigera-operator, harbor, grafana-fips, minio,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: flux-source-controller, argo-events, grype-db, podman-fips, kube-conformance, frankenphp-8.4, traefik, commercial-grafana, kube-arangodb-fips, knative-kafka-broker-fips, frankenphp-8.5, argo-workflows-fips, cert-manager, knative-serving-fips, tekton-pipelines,...

CVE-2026-39828 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kube-conformance, frankenphp-8.4, traefik, commercial-grafana, kube-arangodb-fips, knative-kafka-broker-fips, frankenphp-8.5, argo-workflows-fips, cert-manager, knative-serving-fips, tekton-pipelines, kubescape, cloudbeat, cloudbeat-fips,...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: flux-source-controller, argo-events, grype-db, podman-fips, kube-conformance, frankenphp-8.4, traefik, commercial-grafana, kube-arangodb-fips, knative-kafka-broker-fips, frankenphp-8.5, argo-workflows-fips, cert-manager, knative-serving-fips, rootlesskit-fips,...