argus-notification-msteams (0.5.1), argus-server (>=1.2.1, <=1.22.1) +78 more potentially affected by CVE-2026-57176 via social-auth-core (4.9.1)

social-auth-core PYPI version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argus-notification-msteams 0.5.1 - argus-server =1.2.1, =1.30.0, =1.234.0, =0.4.3, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0,...

umap-project (3.1.0) potentially affected by CVE-2026-57175 via social-auth-core (4.6.1)

social-auth-core PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project 3.1.0 Source cves: CVE-2026-57175 Source advisory: OSV:GHSA-VQ6G-G6C7-5F2J...

masonite-socialite (>=0.0.1, <=0.0.5), richie (>=2.0.0b9, <=2.7.1) potentially affected by CVE-2026-57175 via social-auth-core (3.2.0)

social-auth-core PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - masonite-socialite =0.0.1, =2.0.0b9, =2.7.1 Source cves: CVE-2026-57175 Source advisory: OSV:GHSA-VQ6G-G6C7-5F2J...

@1sat/actions (>=0.0.173, <=0.0.190), @1sat/cli (>=0.0.75, <=0.0.90) +18 more potentially affected by CVE-2026-56744 via @bsv/wallet-toolbox (>=1.8.3, <=2.1.24)

@bsv/wallet-toolbox NPM version =1.8.3, =0.0.173, =0.0.75, =0.0.42, =0.0.34, =0.0.30, =0.0.3, =0.0.75, =0.0.56, =0.0.47, =0.0.25, =0.0.1, =0.1.0, =0.7.0, =0.2.0, =0.6.1 and more Source cves: CVE-2026-56744 Source advisory: OSV:GHSA-36F9-7RG5-CPF8...

@1sat/actions (>=0.0.173, <=0.0.190), @1sat/cli (>=0.0.75, <=0.0.90) +18 more potentially affected by CVE-2026-56744 via @bsv/wallet-toolbox (>=1.8.3, <=2.1.24)

@bsv/wallet-toolbox NPM version =1.8.3, =0.0.173, =0.0.75, =0.0.42, =0.0.34, =0.0.30, =0.0.3, =0.0.75, =0.0.56, =0.0.47, =0.0.25, =0.0.1, =0.1.0, =0.7.0, =0.2.0, =0.6.1 and more Source cves: CVE-2026-56744 Source advisory: GHSA-36F9-7RG5-CPF8...

2d6io-cryptobot (0.0.1), academic-metrics (>=0.1.0b0, <=1.0.99) +1409 more potentially affected by CVE-2026-96749 via pymongo (>=2.4.1, <=4.18.1)

pymongo PYPI version =2.4.1, =0.1.0b0, =1.0.4, =0.9.0, =0.4.2, =0.3.0, =3.6.0, =0.0.1.dev0, =0.1.0, =0.1.23, =1.1.5, =1.3.2 - ai-flow 0.3.1 and more Source cves: CVE-2026-96749 Source advisory: MEND:CVE-2026-96749...

com.azavea.geotrellis:geotrellis-server-stac-example_2.12 (4.4.0), com.azavea.geotrellis:geotrellis-stac-example_2.12 (4.3.0) +3 more potentially affected by CVE-2026-61741 via org.http4s:http4s-scala-xml_2.12 (>=0.18.0-m5, <=0.21.22)

org.http4s:http4s-scala-xml2.12 MAVEN version =0.18.0-m5, =0.1.3, =1.2.2, =0.1.0, =0.6.2 Source cves: CVE-2026-61741 Source advisory: MEND:CVE-2026-61741...

@atomicservice/ascf-toolkit (>=1.0.6, <=1.0.17), @atomicservice/ascf-toolkit-hvigor-plugin (>=1.0.1-beta.1, <=1.0.17) +70 more potentially affected by CVE-2026-61782 via @rsdoctor/sdk (>=1.0.0-alpha.0, <=1.5.15)

@rsdoctor/sdk NPM version =1.0.0-alpha.0, =1.0.6, =1.0.1-beta.1, =0.0.18-canary-d3f0f27b-20260319141130, =1.0.1, =3.7.0-beta.0, =0.1.0-next.21, =0.0.2-next.12, =0.0.2-next.12, =0.0.2-next.12, =3.0.0-0, =0.8.4, =0.8.4-canary-20250312-c1294cbe, =0.0.1, =1.0.0-alpha.0, =1.0.0-alpha.0, =1.5.15 and mo...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +137 more potentially affected by CVE-2026-57179 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57179 Source advisory: MEND:CVE-2026-57179...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +137 more potentially affected by CVE-2026-57175 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57175 Source advisory: MEND:CVE-2026-57175...

@bsv/amountinator (0.2.12), @bsv/cars-cli (>=1.2.0, <=1.2.9) +8 more potentially affected by CVE-2026-56744 via @bsv/wallet-toolbox-client (1.8.3)

@bsv/wallet-toolbox-client NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @bsv/wallet-toolbox-client and may be impacted: - @bsv/amountinator 0.2.12 - @bsv/cars-cli =1.2.0, =1.2.0, =1.0.0, =0.0.1, =0.2.1, =0.1.0, =0.0.3, =1.1.5,...

@1sat/actions (>=0.0.173, <=0.0.190), @1sat/cli (>=0.0.75, <=0.0.90) +18 more potentially affected by CVE-2026-56744 via @bsv/wallet-toolbox (>=1.8.3, <=2.1.24)

@bsv/wallet-toolbox NPM version =1.8.3, =0.0.173, =0.0.75, =0.0.42, =0.0.34, =0.0.30, =0.0.3, =0.0.75, =0.0.56, =0.0.47, =0.0.25, =0.0.1, =0.1.0, =0.7.0, =0.2.0, =0.6.1 and more Source cves: CVE-2026-56744 Source advisory: MEND:CVE-2026-56744...

DEBIAN-CVE-2026-93269

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

CVE-2026-93269

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

DEBIAN-CVE-2026-93252

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93252

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

UBUNTU-CVE-2026-93252

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93269 ext4: fix circular lock dependency in ext4_ext_migrate

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

CVE-2026-93269

The Linux kernel contains a circular lock dependency vulnerability in the ext4 filesystem within the ext4_ext_migrate function. The issue arises from a deadlock between s_writepages_rwsem and sb_internal (freeze protection) during concurrent EXT4_IOC_MIGRATE operations and orphan cleanup during m...

EUVD-2026-86141

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...