org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.3.4), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.3.4) +1 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.117)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.117 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.3.4 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.66), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.66) potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.66)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.66 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.66 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.2.23), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.2.23) +1 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.85)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.85 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.2.23 -...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.1.9), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.1.9) +1 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.0.21)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.1.9 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=8.10.0), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.5) +188 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=6.0.0, <=6.9.10)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.4.0, =8.12.1 and more Source cves: CVE-2026-81875 Source advisory: SNYK:JAVA-CAUHNHAPIFHIR-19963999...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.1.26), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.1.26) +1 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.13)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.1.26 -...

acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=1.1.1rc4), aepsych (>=0.3.0, <=0.4.0) +202 more potentially affected by CVE-2026-86049 via jupyter-server (1.24.0)

jupyter-server PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - acryl-datahub-gx-plugin =0.14.0.3rc1, =0.3.0, =0.1.0b0, =0.1.0, =0.2.2, =0.0.2, =0.0.2, =0.1.0, =0.2.0, =0.3.0 -...

jupyterlab (>=3.0.0b2, <=3.0.0rc13), jupyterlab-server (>=2.0.0b1, <=2.0.0rc7) +1 more potentially affected by CVE-2026-86049 via jupyter-server (1.0.11)

jupyter-server PYPI version 1.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - jupyterlab =3.0.0b2, =2.0.0b1, =0.2.0rc4, =0.2.4 Source cves: CVE-2026-86049 Source advisory: OSV:GHSA-C3MW-737P-C7G2...

voila (>=0.2.0a2, <=0.2.2), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2026-86049 via jupyter-server (0.3.0)

jupyter-server PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a4 Source cves: CVE-2026-86049 Source advisory: OSV:GHSA-C3MW-737P-C7G2...

aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), categorical-encoding (>=0.0.0, <=0.3.0) +33 more potentially affected by CVE-2026-86049 via jupyter-server (1.15.6)

jupyter-server PYPI version 1.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - aiidalab-widgets-base =1.3.4, =0.0.0, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =0.0.0,...

@alexkroman1/aai (>=6.1.0, <=9.2.0), @alexkroman1/aai-cli (>=6.1.0, <=9.2.0) +83 more potentially affected by CVE-2026-81176 via devalue (>=5.0.0, <=5.9.0)

devalue NPM version =5.0.0, =6.1.0, =6.1.0, =7.0.0, =6.1.0, =0.3.0, =0.0.9, =0.6.3, =1.22.35, =1.21.52-beta.0, =1.22.4-beta.development.0, =1.22.13-beta.development.0, =1.22.39, =1.22.11-beta.development.0, =1.21.56-beta.0, =1.21.83-beta.0 and more Source cves: CVE-2026-81176 Source advisory:...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.30.1 Release.

Red Hat OpenShift Dev Spaces 3.30.1 has been released. The 3.30.1 release fixes the regression CRW-13015 Get Started / sample cards on the dashboard are empty after upgrade to 3.30. This release provides additional CVE fixes and container dependency updates to Dev Spaces 3.30. Red Hat OpenShift D...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (26.7.3.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (26.7.3.0) +48 more potentially affected by CVE-2026-90997 via org.keycloak:keycloak-model-jpa (>=26.7.0, <=26.7.3)

org.keycloak:keycloak-model-jpa MAVEN version =26.7.0, =6.0.0, =6.0.0, =3.0.0, =0.3.0, =0.1.3, =9.6, =9.6, =26.7.0, =26.7.0, =26.7.0, =26.7.0, =26.7.0, =26.7.0, =26.7.3 and more Source cves: CVE-2026-90997https://vulners.com/cve/CVE-2026-9099...

@abaxxlabs/agents (>=0.12.5, <=0.42.1), @agent-p2p/cli (>=0.0.1, <=0.0.7) +352 more potentially affected by CVE-2026-86039 via @libp2p/peer-store (>=8.2.1-05abd49f, <=12.0.24-e86b39e5d)

@libp2p/peer-store NPM version =8.2.1-05abd49f, =0.12.5, =0.0.1, =0.0.1, =1.0.0, =0.2.1, =0.3.1, =0.2.1, =0.4.1, =1.3.0, =0.0.2, =1.1.3, =0.2.0, =0.2.5 - @axonsdk/cli 0.1.6 and more Source cves: CVE-2026-86039 Source advisory: SNYK:JS-LIBP2PPEERSTORE-20044965...

@abaxxlabs/agents (>=0.12.5, <=0.42.1), @agent-p2p/cli (>=0.0.1, <=0.0.7) +352 more potentially affected by CVE-2026-86039 via @libp2p/peer-store (>=8.2.1-05abd49f, <=12.0.24-e86b39e5d)

@libp2p/peer-store NPM version =8.2.1-05abd49f, =0.12.5, =0.0.1, =0.0.1, =1.0.0, =0.2.1, =0.3.1, =0.2.1, =0.4.1, =1.3.0, =0.0.2, =1.1.3, =0.2.0, =0.2.5 - @axonsdk/cli 0.1.6 and more Source cves: CVE-2026-86039 Source advisory: OSV:GHSA-VRF4-MX87-P53W...

@abaxxlabs/agents (>=0.12.5, <=0.42.1), @agent-p2p/cli (>=0.0.1, <=0.0.7) +352 more potentially affected by CVE-2026-86039 via @libp2p/peer-store (>=8.2.1-05abd49f, <=12.0.24-e86b39e5d)

@libp2p/peer-store NPM version =8.2.1-05abd49f, =0.12.5, =0.0.1, =0.0.1, =1.0.0, =0.2.1, =0.3.1, =0.2.1, =0.4.1, =1.3.0, =0.0.2, =1.1.3, =0.2.0, =0.2.5 - @axonsdk/cli 0.1.6 and more Source cves: CVE-2026-86039 Source advisory: GHSA-VRF4-MX87-P53W...

@b0ase/path402-api (4.0.0-alpha.1), @b0ase/path402-core (4.0.0-alpha.2) +28 more potentially affected by CVE-2026-86038 via @libp2p/gossipsub (>=15.0.1-425a42cdd, <=16.0.5-e86b39e5d)

@libp2p/gossipsub NPM version =15.0.1-425a42cdd, =0.1.0, =2.0.1, =2.0.0, =6.0.1-425a42cdd, =9.0.0, =0.1.0, =10.0.0-rc.8, =0.0.1-dev.1773506972.23bf9c0, =10.0.24 and more Source cves: CVE-2026-86038 Source advisory: SNYK:JS-LIBP2PGOSSIPSUB-20044966...

@b0ase/path402-api (4.0.0-alpha.1), @b0ase/path402-core (4.0.0-alpha.2) +28 more potentially affected by CVE-2026-86038 via @libp2p/gossipsub (>=15.0.1-425a42cdd, <=16.0.5-e86b39e5d)

@libp2p/gossipsub NPM version =15.0.1-425a42cdd, =0.1.0, =2.0.1, =2.0.0, =6.0.1-425a42cdd, =9.0.0, =0.1.0, =10.0.0-rc.8, =0.0.1-dev.1773506972.23bf9c0, =10.0.24 and more Source cves: CVE-2026-86038 Source advisory: OSV:GHSA-C3GV-825Q-FVMP...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2862 more potentially affected by CVE-2026-85721 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.0)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-85721 Source advisory: GHSA-7GRG-JCF7-RPMX...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +132 more potentially affected by CVE-2026-69147 via vllm (>=0.1.3, <=0.27.1)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =0.0.38 and more Source cves: CVE-2026-69147 Source advisory: GHSA-8PW2-6JV3-MJ5J...