com.hazelcast:hazelcast-client (3.3-rc1), com.hazelcast:hazelcast-cloud (3.3-rc1) +6 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.3-rc1)

com.hazelcast:hazelcast MAVEN version 3.3-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3-rc1 - com.hazelcast:hazelcast-cloud 3.3-rc1 -...

com.hazelcast:hazelcast-client (3.3-rc2), com.hazelcast:hazelcast-cloud (3.3-rc2) +8 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.3-rc2)

com.hazelcast:hazelcast MAVEN version 3.3-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3-rc2 - com.hazelcast:hazelcast-cloud 3.3-rc2 -...

com.hazelcast:hazelcast-client (3.3-rc3), com.hazelcast:hazelcast-cloud (3.3-rc3) +6 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.3-rc3)

com.hazelcast:hazelcast MAVEN version 3.3-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3-rc3 - com.hazelcast:hazelcast-cloud 3.3-rc3 -...

com.hazelcast:hazelcast-client (3.3), com.hazelcast:hazelcast-cloud (3.3) +16 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.3)

com.hazelcast:hazelcast MAVEN version 3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3 - com.hazelcast:hazelcast-cloud 3.3 - com.hazelcast:hazelcast-hibernate 3.3 -...

com.hazelcast:hazelcast-client (3.3-ea2), com.hazelcast:hazelcast-cloud (3.3-ea2) +9 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.3-ea2)

com.hazelcast:hazelcast MAVEN version 3.3-ea2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3-ea2 - com.hazelcast:hazelcast-cloud 3.3-ea2 -...

com.hazelcast:hazelcast-client (3.3.1), com.hazelcast:hazelcast-cloud (3.3.1) +12 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.3.1)

com.hazelcast:hazelcast MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.1 - com.hazelcast:hazelcast-cloud 3.3.1 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.3.2), com.hazelcast:hazelcast-cloud (3.3.2) +8 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.3.2)

com.hazelcast:hazelcast MAVEN version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.2 - com.hazelcast:hazelcast-cloud 3.3.2 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.3.4), com.hazelcast:hazelcast-cloud (3.3.4) +10 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.3.4)

com.hazelcast:hazelcast MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.4 - com.hazelcast:hazelcast-cloud 3.3.4 - com.hazelcast:hazelcast-hibernate...

com.hazelcast.simulator:hazelcast-simulator-dist (0.4), com.hazelcast.simulator:simulator (0.4) +22 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.4)

com.hazelcast:hazelcast MAVEN version 3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.simulator:hazelcast-simulator-dist 0.4 - com.hazelcast.simulator:simulator 0.4 -...

com.hazelcast:hazelcast-client (3.4-ea), com.hazelcast:hazelcast-cloud (3.4-ea) +6 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.4-ea)

com.hazelcast:hazelcast MAVEN version 3.4-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.4-ea - com.hazelcast:hazelcast-cloud 3.4-ea - com.hazelcast:hazelcast-hibernate...

com.eurodyn.qlack2.util:qlack2-util-cluster-hazelcast (>=2.2.1, <=2.3.19), com.hazelcast:hazelcast-build-utils (3.4.6) +8 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.4.6)

com.hazelcast:hazelcast MAVEN version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.eurodyn.qlack2.util:qlack2-util-cluster-hazelcast =2.2.1, =2.3.19 - com.hazelcast:hazelcast-build-utils 3.4.6...

com.ahome-it:ahome-tooling-server-hazelcast (1.0.109-release), com.bestellensoftware:jsync.io (>=1.9.0-alpha-1, <=1.9.1-alpha-2) +34 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.5.1)

com.hazelcast:hazelcast MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.ahome-it:ahome-tooling-server-hazelcast 1.0.109-release - com.bestellensoftware:jsync.io =1.9.0-alpha-1,...

com.github.lburgazzoli:hazelcast-discovery-dns (3.6-ea3), com.github.lburgazzoli:hazelcast-discovery-etcd (>=3.6-ea3, <=3.6-ea3.1) +11 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.6-ea3)

com.hazelcast:hazelcast MAVEN version 3.6-ea3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.github.lburgazzoli:hazelcast-discovery-dns 3.6-ea3 - com.github.lburgazzoli:hazelcast-discovery-etcd...

com.ahome-it:ahome-tooling-server-hazelcast (1.1.10-release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.0, <=1.0.1) +23 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.6.5)

com.hazelcast:hazelcast MAVEN version 3.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.ahome-it:ahome-tooling-server-hazelcast 1.1.10-release -...

Indico: Incomplete Server-Side Request Forgery (SSRF) check

Impact Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part of Indico's functionality, but of course it is never intended to let you access "special" targets such as localhost or cloud metadata endpoints. The previous fix CVE-2026-25738 did n...

com.hazelcast:hazelcast-all (1.9.4), com.hazelcast:hazelcast-client (1.9.4) +18 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.9.4)

com.hazelcast:hazelcast MAVEN version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4 - com.hazelcast:hazelcast-client 1.9.4 - com.hazelcast:hazelcast-cloud 1.9.4 -...

com.hazelcast:hazelcast-all (1.9.4.2), com.hazelcast:hazelcast-client (1.9.4.2) +5 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.9.4.2)

com.hazelcast:hazelcast MAVEN version 1.9.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.2 - com.hazelcast:hazelcast-client 1.9.4.2 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (1.9.4.3), com.hazelcast:hazelcast-client (1.9.4.3) +5 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.9.4.3)

com.hazelcast:hazelcast MAVEN version 1.9.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.3 - com.hazelcast:hazelcast-client 1.9.4.3 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (1.9.4.4), com.hazelcast:hazelcast-client (1.9.4.4) +8 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.9.4.4)

com.hazelcast:hazelcast MAVEN version 1.9.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.4 - com.hazelcast:hazelcast-client 1.9.4.4 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (1.9.4.5), com.hazelcast:hazelcast-client (1.9.4.5) +5 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.9.4.5)

com.hazelcast:hazelcast MAVEN version 1.9.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.5 - com.hazelcast:hazelcast-client 1.9.4.5 - com.hazelcast:hazelcast-cloud...