com.hazelcast:hazelcast-client (3.2.4), com.hazelcast:hazelcast-cloud (3.2.4) +17 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.2.4)

com.hazelcast:hazelcast MAVEN version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2.4 - com.hazelcast:hazelcast-cloud 3.2.4 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.2.5), com.hazelcast:hazelcast-cloud (3.2.5) +23 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.2.5)

com.hazelcast:hazelcast MAVEN version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2.5 - com.hazelcast:hazelcast-cloud 3.2.5 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.2.6), com.hazelcast:hazelcast-cloud (3.2.6) +6 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.2.6)

com.hazelcast:hazelcast MAVEN version 3.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2.6 - com.hazelcast:hazelcast-cloud 3.2.6 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.2.7), com.hazelcast:hazelcast-cloud (3.2.7) +6 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.2.7)

com.hazelcast:hazelcast MAVEN version 3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2.7 - com.hazelcast:hazelcast-cloud 3.2.7 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.3-ea), com.hazelcast:hazelcast-cloud (3.3-ea) +9 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3-ea)

com.hazelcast:hazelcast MAVEN version 3.3-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3-ea - com.hazelcast:hazelcast-cloud 3.3-ea - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.3-ea2), com.hazelcast:hazelcast-cloud (3.3-ea2) +9 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3-ea2)

com.hazelcast:hazelcast MAVEN version 3.3-ea2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3-ea2 - com.hazelcast:hazelcast-cloud 3.3-ea2 -...

com.hazelcast:hazelcast-client (3.3.1), com.hazelcast:hazelcast-cloud (3.3.1) +12 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3.1)

com.hazelcast:hazelcast MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.1 - com.hazelcast:hazelcast-cloud 3.3.1 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.3.2), com.hazelcast:hazelcast-cloud (3.3.2) +8 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3.2)

com.hazelcast:hazelcast MAVEN version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.2 - com.hazelcast:hazelcast-cloud 3.3.2 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.3.5), com.hazelcast:hazelcast-cloud (3.3.5) +12 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3.5)

com.hazelcast:hazelcast MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.5 - com.hazelcast:hazelcast-cloud 3.3.5 - com.hazelcast:hazelcast-hibernate...

com.github.lburgazzoli:hazelcast-discovery-dns (3.6-ea3), com.github.lburgazzoli:hazelcast-discovery-etcd (>=3.6-ea3, <=3.6-ea3.1) +11 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.6-ea3)

com.hazelcast:hazelcast MAVEN version 3.6-ea3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.github.lburgazzoli:hazelcast-discovery-dns 3.6-ea3 - com.github.lburgazzoli:hazelcast-discovery-etcd...

com.hazelcast:hazelcast-build-utils (3.6.8), com.hazelcast:hazelcast-client (3.6.8) +15 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.6.8)

com.hazelcast:hazelcast MAVEN version 3.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.6.8 - com.hazelcast:hazelcast-client 3.6.8 -...

com.hazelcast:hazelcast-client (3.4-ea), com.hazelcast:hazelcast-cloud (3.4-ea) +6 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.4-ea)

com.hazelcast:hazelcast MAVEN version 3.4-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.4-ea - com.hazelcast:hazelcast-cloud 3.4-ea - com.hazelcast:hazelcast-hibernate...

CVE-2026-107830

The Jivejdon software (from commit e0306088 through ee67a65e ) is vulnerable to a missing rate limiting issue on the unauthenticated /account/smsVRAction endpoint. This endpoint is handled by SmsQQAction , and the lack of restrictions allows for unlimited SMS sending. An attacker can first load n...

CVE-2026-107830 Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpoint

Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sending. Attackers can load newAccount.jsp to set session attributes, then repeatedly call the endpoint to harass arbitrary...

GO-2026-6665 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, google-cloud-otel-ops-collector, grafana-alloy, nrdot-collector...

buildbot-badges (>=1.7.0, <=1.8.2), no-cloud (0.0.8) potentially affected by CVE-2026-107378 via cairosvg (1.0.22)

cairosvg PYPI version 1.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on cairosvg and may be impacted: - buildbot-badges =1.7.0, =1.8.2 - no-cloud 0.0.8 Source cves: CVE-2026-107378 Source advisory: OSV:GHSA-C3JG-QH8M-J3H2...

Security Bulletin: IBM Cloud Pak System is affected by vulnerability [CVE-2026-13463]

Summary Vulnerabilities was addressed in IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2026-13463 DESCRIPTION: IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files. CWE:CWE-798: Use of...

GHSA-VMXC-H2X2-JMF3 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers

Summary When an application using Pydantic AI opts a URL into local network access — either a FileUrl with forcedownload='allow-local', or webfetchtoolallowlocalurls=True — the cloud-metadata blocklist could be bypassed by appending an IPv6 zone identifier to a metadata address for example...

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers

Summary When an application using Pydantic AI opts a URL into local network access — either a FileUrl with forcedownload='allow-local', or webfetchtoolallowlocalurls=True — the cloud-metadata blocklist could be bypassed by appending an IPv6 zone identifier to a metadata address for example...

CVE-2026-107289

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.56.0 until 1.107.6 and 2.44.0, applications that opt attacker-influenced URLs into local network access through FileUrl with forcedownload='allow-local' or webfetchtool with...