@semic/testing (=2.2.11), @vendure/dashboard (>=3.2.2 <=3.4.4) potentially affected by CVE-2026-40887 via @vendure/core (>=3.0.0 <=3.4.4)

@vendure/core NPM version =3.0.0, =3.2.2, =3.4.4 Source cves: CVE-2026-40887 Source advisory: SNYK:JS-VENDURECORE-16068909...

EUVD-2025-31283

Malicious code in bioql PyPI...

asksuite-core (>=1.0.93 <=2.32.81), machinepack-knwl (=1.0.0) potentially affected by CVE-2020-26306 via knwl.js (=1.0.2)

knwl.js NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on knwl.js and may be impacted: - asksuite-core =1.0.93, =2.32.81 - machinepack-knwl =1.0.0 Source cves: CVE-2020-26306 Source advisory: OSV:GHSA-68QG-G787-3RP5...

PT-2023-13809 · Qualcomm · Snapdragon +133

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption due to a stack-based buffer overflow. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

br.com.digisan:digisan-java (>=1.0.7 <=1.0.10), com.adaptrex:adaptrex-complete (>=0.9.1 <=0.9.10) +810 more potentially affected by CVE-2014-3643 via com.sun.jersey:jersey-core (>=1.0 <=1.12-b01)

com.sun.jersey:jersey-core MAVEN version =1.0, =1.0.7, =0.9.1, =0.1.1, =0.9.1, =v0.27.12, =2.0.4, =1.0.2, =1.0.2, =1.0.1-3, =2.0, =2.0, =1.1.0.1, =1.1.0.1, =4.2.0, =4.2.0, =5.4.3 and more Source cves: CVE-2014-3643 Source advisory: SNYK:JAVA-COMSUNJERSEY-10441493...

aimmo (>=0.61.9 <=0.69.1b348), ambition-edc (>=0.3.68 <=0.3.72) +57 more potentially affected by CVE-2019-11358 via django (>=2.2.0 <=2.2.19)

django PYPI version =2.2.0, =0.61.9, =0.3.68, =0.14.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =2.0.0, =2.2.0 - django-country-filter =0.0.1 and more Source cves: CVE-2019-11358 Source advisory: OSV:GHSA-6C3J-C64M-QHGQ...