0xrtest (1.0.0), 3nit-utils (>=0.30.0, <=1.0.2) +1388 more potentially affected by CVE-2026-81176 via devalue (>=1.1.1, <=5.9.0)

devalue NPM version =1.1.1, =0.30.0, =0.0.0-canary.0, =0.0.11, =0.1.0, =1.1.0, =1.0.1, =1.1.0, =0.0.27, =1.0.0, =0.2.2, =0.2.8 and more Source cves: CVE-2026-81176 Source advisory: MEND:CVE-2026-81176...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.platon.pulsar:browser4-agent-tools (>=4.13.5, <=4.14.0-rc.2) +4266 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (>=1.7.2, <=5.33.1)

com.rabbitmq:amqp-client MAVEN version =1.7.2, =0.5.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 - ai.platon.pulsar:browser4-seo 4.14.0-rc.2 and more Source cves: CVE-2026-75516 Source advisory: MEND:CVE-2026-75516...

ai.looktech.ltrpc.schema:app-server-linuxx64 (>=1.1.0, <=1.7.1), ai.looktech.ltrpc.schema:bt-server-linuxx64 (>=1.1.0, <=1.7.1) +16 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime-linuxx64 (>=3.2.0, <=6.4.1)

com.squareup.wire:wire-runtime-linuxx64 MAVEN version =3.2.0, =1.1.0, =1.1.0, =0.7, =0.7, =2.108.2, =3.2.0, =4.9.0, =4.9.0, =0.1.0, =2.85.0, =2.108.0 - io.github.ignaciodelatorrearias:ferrus-nexus-linuxx64 0.0.1 - io.github.ignaciodelatorrearias:greet-linuxx64 1.0.4 -...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Jenkins UI when displaying CWE values from Dependency-Check reports. An attacker can execute arbitrary JavaScript code in the context of other users by injecting malicious content into the CWE values, whi...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), ch.nerdin.keycloak.extensions:avatar-extension (0.0.1) +162 more potentially affected by CVE-2026-79651 via org.keycloak:keycloak-services (>=23.0.0, <=26.7.3)

org.keycloak:keycloak-services MAVEN version =23.0.0, =0.1.0, =24.3.0.0, =24.3.0.0, =1.0.0, =1.0.0, =1.2.0, =1.0.1, =1.0.1, =1.0.1, =1.2.0 and more Source cves: CVE-2026-79651 Source advisory: MEND:CVE-2026-79651https://vulners.com/mend/MEN...

@4verburga/alpine-spanishplus (>=1.6.6, <=3.0.2), @4xeverburga/alpine-spanishplus (>=3.0.1, <=3.2.0) +175 more potentially affected by CVE-2026-63671 via @nuxtjs/mdc (>=0.1.6, <=0.21.1)

@nuxtjs/mdc NPM version =0.1.6, =1.6.6, =3.0.1, =0.0.1, =0.0.1, =0.1.1, =4.0.0, =0.0.2, =1.0.7, =1.0.7, =0.0.1, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =1.3.0 and more Source cves: CVE-2026-63671 Source advisory: MEND:CVE-2026-63671...

CVE-2026-92136

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

MAL-2026-16223 Malicious code in @traktis/environment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9bdabc95f4e8bc70e348557c1cae7d2447d9bd1405ac7a23945ded47ec04a8 package.json declares preinstall and postinstall lifecycle scripts that invoke curl against the hardcoded cleartext endpoint...

org.jenkins-ci.plugins:influxdb (>=1.3, <=1.12.3) potentially affected by CVE-2026-92137 via org.jenkins-ci.plugins:robot (1.6.0)

org.jenkins-ci.plugins:robot MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:robot and may be impacted: - org.jenkins-ci.plugins:influxdb =1.3, =1.12.3 Source cves: CVE-2026-92137 Source advisory:...

EUVD-2026-80760

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

io.jenkins.plugins:autograding (4.2.0), io.jenkins.plugins:code-coverage-api (4.99.0) +3 more potentially affected by CVE-2026-92135 via io.jenkins.plugins:coverage (>=1.1.0, <=2.3139.v731d2e83ea_8a)

io.jenkins.plugins:coverage MAVEN version =1.1.0, =-rc6.886d29ff0f4d, =67.v35d155a1ffdf, =1554.v292f3d3479e6, =1556.vd9051bd6ef5d Source cves: CVE-2026-92135 Source advisory: MEND:CVE-2026-92135...

CVE-2026-92136

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2026-92136

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2026-92136

The Jenkins OWASP Dependency-Check Plugin version 5.6.4 and earlier is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is the failure to escape CWE values from Dependency-Check reports on the Jenkins UI. Attackers with Item/Configure permissions can exploit this to...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), au.com.versent.jenkins.plugins:ignore-committer-strategy (>=29.v7c3891a_434c3, <=63.v7e87d06b_a_30c) +425 more potentially affected by CVE-2026-92129 via org.jenkins-ci.plugins:script-security (>=1.4, <=1415.v9a_f9b_3a_c253d)

org.jenkins-ci.plugins:script-security MAVEN version =1.4, =29.v7c3891a434c3, =2.33.0, =4.1.0.506.v619d63bec9d8, =1.0.5.0, =0.2, =198.vfe106798d1a6, =66.v12c841920f7d, =1.9.2-beta, =1.151.vbca71ddd0bcf, =1.29, =1.28.0, =61.v68bd7264b643, =73.ve2b957fc2921 and more Source cves: CVE-2026-92129 Sour...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), au.com.versent.jenkins.plugins:ignore-committer-strategy (>=29.v7c3891a_434c3, <=63.v7e87d06b_a_30c) +425 more potentially affected by CVE-2026-92128 via org.jenkins-ci.plugins:script-security (>=1.4, <=1415.v9a_f9b_3a_c253d)

org.jenkins-ci.plugins:script-security MAVEN version =1.4, =29.v7c3891a434c3, =2.33.0, =4.1.0.506.v619d63bec9d8, =1.0.5.0, =0.2, =198.vfe106798d1a6, =66.v12c841920f7d, =1.9.2-beta, =1.151.vbca71ddd0bcf, =1.29, =1.28.0, =61.v68bd7264b643, =73.ve2b957fc2921 and more Source cves: CVE-2026-92128 Sour...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-59739 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.25 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

ai.platon.gora:gora-core (1.0.0), ai.platon.gora:gora-mongodb (1.0.0) +1515 more potentially affected by CVE-2026-59739 via org.apache.zookeeper:zookeeper (>=3.9.0, <=3.9.5)

org.apache.zookeeper:zookeeper MAVEN version =3.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =0.1.0, =7.2.0, =7.2.0, =7.2.0, =9.9.0 and more Source cves: CVE-2026-59739 Source advisory: SNYK:JAVA-ORGAPACHEZOOKEEPER-20158990...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-59969 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.25 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-84501 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.25 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...