CVE-2026-93268

A flaw was found in the Linux kernel's ext4 file system. When mounting a file system, expanding extended attribute storage while holding an active journal lock can create a circular locking dependency. A local user capable of mounting or triggering file system recovery operations could exploit th...

@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +10 more potentially affected by CVE-2026-101043 via pnpm (>=10.8.1, <=10.33.0)

pnpm NPM version =10.8.1, =0.1.0, =1.1.1, =0.1.0-beta.3, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-101043 Source advisory: MEND:CVE-2026-101043...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-100722 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-100721 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

fedbiomed-cli (>=0.1.2, <=0.1.8) potentially affected by CVE-2026-100840 via monai (0.4.0)

monai PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - fedbiomed-cli =0.1.2, =0.1.8 Source cves: CVE-2026-100840 Source advisory: OSV:PYSEC-2026-4015...

fedbiomed-cli (>=0.1.2, <=0.1.8) potentially affected by CVE-2026-100843 via monai (0.4.0)

monai PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - fedbiomed-cli =0.1.2, =0.1.8 Source cves: CVE-2026-100843 Source advisory: OSV:PYSEC-2026-4018...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +290 more potentially affected by CVE-2026-100722 via vm2 (>=1.0.1, <=3.11.6)

vm2 NPM version =1.0.1, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

io.zerows:zero-boot-actor (1.0.50), io.zerows:zero-boot-cloud-actor (1.0.50) +17 more potentially affected by CVE-2026-94399 via org.elasticsearch:elasticsearch (>=9.0.0, <=9.4.6)

org.elasticsearch:elasticsearch MAVEN version =9.0.0, =0.102.0, =9.4.0, =9.4.0, =9.0.0, =9.4.6 and more Source cves: CVE-2026-94399 Source advisory: MEND:CVE-2026-94399...

io.camunda:camunda-zeebe (>=8.9.0-alpha5-rc1, <=8.9.0-alpha5), io.camunda:tasklist-webapp (>=8.9.0-alpha5-rc1, <=8.9.0-alpha5) +15 more potentially affected by CVE-2026-94398 via org.elasticsearch:elasticsearch (>=8.12.0, <=8.19.21)

org.elasticsearch:elasticsearch MAVEN version =8.12.0, =8.9.0-alpha5-rc1, =8.9.0-alpha5-rc1, =main-272, =main-272, =main-272, =0.87.0, =7.25.0, =8.12.0.0, =8.12.0.0, =8.12.0.0, =8.12.0.0, =8.12.0, =8.12.0, =2.1, =3.0.0 - org.opennms.elasticsearch:elasticsearch-drift-plugin-8.18.2 2.0.7 and more...

io.zerows:zero-boot-actor (1.0.50), io.zerows:zero-boot-cloud-actor (1.0.50) +17 more potentially affected by CVE-2026-82294 via org.elasticsearch:elasticsearch (>=9.0.0, <=9.4.5)

org.elasticsearch:elasticsearch MAVEN version =9.0.0, =0.102.0, =9.4.0, =9.4.0, =9.0.0, =9.4.5 and more Source cves: CVE-2026-82294 Source advisory: MEND:CVE-2026-82294...

CVE-2026-100668

Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The array filter and its identical function form is on the sandbox allowlist but is registered without the needsissandboxed guard that printr, vardump, jsonencode, yamlencode and string carry, and its implementation calls toArray — ...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +133 more potentially affected by CVE-2026-100650 via vllm (>=0.1.3, <=0.29.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2026-100650 Source advisory: OSV:PYSEC-2026-4184...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +13377 more potentially affected by CVE-2026-100700 via nodemailer (>=0.1.5, <=10.0.3)

nodemailer NPM version =0.1.5, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 and more Source cves: CVE-2026-100700 Source advisory: MEND:CVE-2026-100700...

@bigegg/parse-server-schema-config (>=1.0.5, <=1.0.10), @kontaa/subgraph (>=1.0.1, <=1.2.3) +27 more potentially affected by CVE-2026-100631 via parse-server (>=2.0.8, <=7.5.4)

parse-server NPM version =2.0.8, =1.0.5, =1.0.1, =1.2.1, =2.4.46, =2.4.8, =1.0.0, =1.0.0, =1.0.1, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.29 - parse-cli-server2 0.0.30 and more Source cves: CVE-2026-100631 Source advisory: MEND:CVE-2026-100631...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.34) +13 more potentially affected by CVE-2026-100547 via openclaw (>=2026.4.5, <=2026.7.1)

openclaw NPM version =2026.4.5, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.0.1-release20260506, =0.1.38, =0.3.1-next.0, =1.0.0, =1.3.1 Source cves: CVE-2026-100547 Source advisory: SNYK:JS-OPENCLAW-20186829...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.34) +13 more potentially affected by CVE-2026-100549 via openclaw (>=2026.4.5, <=2026.7.1)

openclaw NPM version =2026.4.5, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.0.1-release20260506, =0.1.38, =0.3.1-next.0, =1.0.0, =1.3.1 Source cves: CVE-2026-100549 Source advisory: SNYK:JS-OPENCLAW-20186827...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.34) +14 more potentially affected by CVE-2026-100574 via openclaw (>=0.0.1, <=2026.7.1)

openclaw NPM version =0.0.1, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.0.1-release20260506, =0.1.38, =0.3.1-next.0, =1.0.0, =1.3.1 and more Source cves: CVE-2026-100574 Source advisory: MEND:CVE-2026-100574...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.34) +14 more potentially affected by CVE-2026-100573 via openclaw (>=0.0.1, <=2026.7.1)

openclaw NPM version =0.0.1, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.0.1-release20260506, =0.1.38, =0.3.1-next.0, =1.0.0, =1.3.1 and more Source cves: CVE-2026-100573 Source advisory: MEND:CVE-2026-100573...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.34) +13 more potentially affected by CVE-2026-100535 via openclaw (>=2026.4.5, <=2026.7.1)

openclaw NPM version =2026.4.5, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.0.1-release20260506, =0.1.38, =0.3.1-next.0, =1.0.0, =1.3.1 Source cves: CVE-2026-100535 Source advisory: MEND:CVE-2026-100535...

SUSE CVE-2026-93252

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...