17236 matches found
bio.ferlab:fhavro (>=0.0.9, <=0.0.10), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.5.0, <=5.5.7) +76 more potentially affected by CVE-2026-34359 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.4.10)
ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.4.10 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - bio.ferlab:fhavro =0.0.9, =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0...
ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=6.2.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (>=6.2.0, <=6.2.5) +119 more potentially affected by CVE-2026-34359 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.68)
ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.68 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =6.2.0, =6.2.0, =6.2.0,...
@tinacms/app (>=0.0.0-07588d1-20260311013317, <=2.4.0), @tinacms/cli (>=0.0.0-07588d1-20260311013317, <=2.2.0) +4 more potentially affected by CVE-2026-33949 via @tinacms/graphql (>=2.0.0, <=2.2.1)
@tinacms/graphql NPM version =2.0.0, =0.0.0-07588d1-20260311013317, =0.0.0-07588d1-20260311013317, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-07588d1-20260311013317, =0.0.0-07588d1-20260311013317, =3.7.0 Source cves: CVE-2026-33949 Source advisory: GHSA-V9P7-GF3Q-H779...
CVE-2026-33941 Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the Handlebars CLI precompiler bin/handlebars / lib/precompiler.js concatenates user-controlled strings — template file names and several CLI options — directly into the JavaScript it...
CVE-2026-33941
Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the Handlebars CLI precompiler "bin/handlebars" / "lib/precompiler.js" concatenates user-controlled strings — template file names and several CLI options — directly into the JavaScript ...
azure-cli (>=2.0.58, <=2.0.66), azure-cli-appservice (>=0.2.13, <=0.2.20) +27 more potentially affected by CVE-2026-34073 via cryptography (2.4.2)
cryptography PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - azure-cli =2.0.58, =0.2.13, =1.5.5, =1.0.0b6, =18.4.0, =0.3.0rc1, =1.0.3, =0.1.0, =1.2.8, =1.0.5, =2.1.12 and more Source cves:...
moca (0.3.3), oraclebmc (>=1.1.0, <=1.1.1) +2 more potentially affected by CVE-2026-34073 via cryptography (1.5.2)
cryptography PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - moca 0.3.3 - oraclebmc =1.1.0, =2.1.0, =2.1.3 - teamvault 0.6.1 Source cves: CVE-2026-34073 Source advisory: OSV:GHSA-M959-CC7F-WV43...
askflow-cli (1.0.0), atlassian-jwt-auth (>=8.0.2, <=9.0.0) +68 more potentially affected by CVE-2026-34073 via cryptography (3.2.1)
cryptography PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - askflow-cli 1.0.0 - atlassian-jwt-auth =8.0.2, =0.0.9, =0.2.7a0, =0.0.2, =0.0.1a12, =0.6.0, =3.1.12, =2.1.0, =1.0.0, =0.0.19, =0.7.1,...
acmetk (0.0.2), aioasuswrt (1.3.3) +137 more potentially affected by CVE-2026-34073 via cryptography (3.3.2)
cryptography PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - acmetk 0.0.2 - aioasuswrt 1.3.3 - ais-dom =2021.3.0b4, =1.6.0, =10.0.0, =1.10.0, =1.8.0, =2.20.0, =2.20.0, =1.0.1, =0.3.27, =0.5.6, =0.8...
agent-nebula-platform (>=5.0.0, <=5.0.1), agent-nebula-sdk (>=5.0.0, <=5.0.2) +272 more potentially affected by CVE-2026-34073 via cryptography (>=46.0.0, <=46.0.5)
cryptography PYPI version =46.0.0, =5.0.0, =5.0.0, =0.5.0rc4, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.0.1, =0.0.3 and more Source cves: CVE-2026-34073 Source advisory: OSV:GHSA-M959-CC7F-WV43...
algorin-cli (>=0.0.1, <=0.21.0), alita-sdk (>=0.0.1, <=0.0.16) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.1.30)
langchain-core PYPI version 0.1.30 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - algorin-cli =0.0.1, =0.0.1, =0.0.2, =0.0.6 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...
pdd-cli (>=0.0.28, <=0.0.94) potentially affected by CVE-2026-34070 via langchain-core (0.3.56)
langchain-core PYPI version 0.3.56 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - pdd-cli =0.0.28, =0.0.94 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...
datasetpipeline (>=0.1.7, <=0.2.1), document-qa-engine (>=0.5.1, <=0.6.0) +2 more potentially affected by CVE-2026-34070 via langchain-core (0.3.61)
langchain-core PYPI version 0.3.61 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - datasetpipeline =0.1.7, =0.5.1, =0.1.1, =0.1.7 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...
ai-parrot (>=0.5.0, <=0.5.17), aiagents4pharma (>=0.0.0, <=1.49.1) +4 more potentially affected by CVE-2026-34070 via langchain-core (0.3.40)
langchain-core PYPI version 0.3.40 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ai-parrot =0.5.0, =0.0.0, =0.0.18, =0.0.21 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...
Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
Summary The Handlebars CLI precompiler bin/handlebars / lib/precompiler.js concatenates user-controlled strings — template file names and several CLI options — directly into the JavaScript it emits, without any escaping or sanitization. An attacker who can influence template filenames or CLI...
@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +28 more potentially affected by CVE-2026-33750 via brace-expansion (>=0.0.0, <=1.1.11)
brace-expansion NPM version =0.0.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =0.0.0, =0.0.3, =0.1.0 and more Source cves: CVE-2026-33750 Source advisory: MEND:CVE-2026-33750...
jo-cli (1.0.2) potentially affected by CVE-2026-33750 via brace-expansion (3.0.0)
brace-expansion NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli 1.0.2 Source cves: CVE-2026-33750 Source advisory: MEND:CVE-2026-33750...
GHSA-4VRQ-3VRQ-G6GG vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, conftest, podman, osv-scanner, kaniko, scorecard, skaffold, trivy, kubescape, trivy-operator, zot, docker-compose, buildah, guac...