directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2026-15307 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2026-15307 Source...

directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2026-15307 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2026-15307 Source...

directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2026-15830 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2026-15830 Source...

directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2026-15830 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2026-15830 Source...

@polygonjs/plugin-mediapipe-facemesh (>=1.1.1, <=1.1.218), @polygonjs/polygonjs (>=1.1.124, <=1.1.239) +7 more potentially affected by CVE-2026-45820 via fflate (0.6.9)

fflate NPM version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on fflate and may be impacted: - @polygonjs/plugin-mediapipe-facemesh =1.1.1, =1.1.124, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =1.1.124-1, =1.1.239-1 Source cves:...

@polygonjs/plugin-mediapipe-facemesh (>=1.1.1, <=1.1.218), @polygonjs/polygonjs (>=1.1.124, <=1.1.239) +7 more potentially affected by CVE-2026-45820 via fflate (0.6.9)

fflate NPM version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on fflate and may be impacted: - @polygonjs/plugin-mediapipe-facemesh =1.1.1, =1.1.124, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =1.1.124-1, =1.1.239-1 Source cves:...

com.agorapulse:micronaut-snitch (3.0.0.rc1), io.micronaut.aws:micronaut-aws-distributed-configuration (>=5.0.0-m1, <=5.0.0) +228 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client-core (>=5.0.0-m1, <=5.0.0)

io.micronaut:micronaut-http-client-core MAVEN version =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =6.0.0-m1, =5.0.0-m1, =6.0.0-m1, =6.0.0-m1, =6.0.0-m1, =5.0.0-m1, =5.0.1 and more Source cves: unknown CVE Source advisory:...

com.c0x12c:module-ai-image (>=0.12.0, <=0.16.8), com.c0x12c:module-ai-module-impl (>=0.5.0, <=0.16.8) +293 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client-core (>=4.0.0-m1, <=4.10.23)

io.micronaut:micronaut-http-client-core MAVEN version =4.0.0-m1, =0.12.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.10.0, =0.8.0, =0.5.0, =0.2.15, =0.0.12, =0.0.14 - com.jongsoft.finance:bpmn-process 3.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-IOMICRONAUT-17912689...

com.agorapulse:gru-micronaut (1.4.0), com.agorapulse:micronaut-slack-http (>=1.0.1-micronaut-3.0, <=1.0.4-micronaut-3.0) +195 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client-core (>=2.0.0.m1, <=3.10.5)

io.micronaut:micronaut-http-client-core MAVEN version =2.0.0.m1, =1.0.1-micronaut-3.0, =1.2.0-micronaut-2.0, =1.3.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.7.2976, =1.16.0, =1.38.3 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-IOMICRONAUT-17912689...

com.agorapulse:micronaut-snitch (3.0.0.rc1), io.micronaut.aws:micronaut-aws-distributed-configuration (>=5.0.0-m1, <=5.0.0) +228 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client-core (>=5.0.0-m1, <=5.0.0)

io.micronaut:micronaut-http-client-core MAVEN version =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =6.0.0-m1, =5.0.0-m1, =6.0.0-m1, =6.0.0-m1, =6.0.0-m1, =5.0.0-m1, =5.0.1 and more Source cves: unknown CVE Source advisory:...

com.c0x12c:module-ai-image (>=0.12.0, <=0.16.8), com.c0x12c:module-ai-module-impl (>=0.5.0, <=0.16.8) +293 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client-core (>=4.0.0-m1, <=4.10.23)

io.micronaut:micronaut-http-client-core MAVEN version =4.0.0-m1, =0.12.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.10.0, =0.8.0, =0.5.0, =0.2.15, =0.0.12, =0.0.14 - com.jongsoft.finance:bpmn-process 3.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-IOMICRONAUT-17912691...

com.agorapulse:gru-micronaut (1.4.0), com.agorapulse:micronaut-slack-http (>=1.0.1-micronaut-3.0, <=1.0.4-micronaut-3.0) +182 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client-core (>=3.0.0-m1, <=3.10.6)

io.micronaut:micronaut-http-client-core MAVEN version =3.0.0-m1, =1.0.1-micronaut-3.0, =1.3.0, =3.0.0, =2.0.0, =2.4.0, =2.4.0, =1.7.2976, =1.16.0, =2.0.0, =1.0.0, =0.7.0, =0.0.0, =0.2.7 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-IOMICRONAUT-17912691...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop due to the lack of a maximum redirect count in the process handling HTTP redirections. An attacker can exhaust system resources and cause service disruption by triggering an infinite redirect loop. Remediation Upgrade...

com.17jee:e-cloud-authorize (>=3.0.0.release, <=3.0.1.1), com.17jee:e-security-jwt (3.0.0.release) +155 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.0.9.release)

org.springframework:spring-webmvc MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.17jee:e-cloud-authorize =3.0.0.release, =1.0.24-release, =1.0.22-release,...

com.coherentlogic.coherent.data-model:data-model-core (>=1.0.15-release, <=1.0.16-release), com.coherentlogic.coherent:data-model (>=1.0.15-release, <=1.0.16-release) +412 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.0.5.release)

org.springframework:spring-expression MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.coherentlogic.coherent.data-model:data-model-core =1.0.15-release,...

com.coherentlogic.coherent.data-model:data-model-core (>=1.0.15-release, <=1.0.16-release), com.coherentlogic.coherent:data-model (>=1.0.15-release, <=1.0.16-release) +155 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.0.5.release)

org.springframework:spring-webmvc MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.coherentlogic.coherent.data-model:data-model-core =1.0.15-release, =1.0.15-releas...

com.17jee:e-cloud-authorize (>=3.0.0.release, <=3.0.1.1), com.17jee:e-security-jwt (3.0.0.release) +155 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.0.9.release)

org.springframework:spring-webmvc MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.17jee:e-cloud-authorize =3.0.0.release, =1.0.24-release, =1.0.22-release,...

com.coherentlogic.coherent.data-model:data-model-core (>=1.0.15-release, <=1.0.16-release), com.coherentlogic.coherent:data-model (>=1.0.15-release, <=1.0.16-release) +155 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.0.5.release)

org.springframework:spring-webmvc MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.coherentlogic.coherent.data-model:data-model-core =1.0.15-release, =1.0.15-releas...

directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2026-8404 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2026-8404 Source...

directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2026-48587 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2026-48587 Source...