ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-59739 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.25 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

ai.platon.gora:gora-core (1.0.0), ai.platon.gora:gora-mongodb (1.0.0) +1515 more potentially affected by CVE-2026-59739 via org.apache.zookeeper:zookeeper (>=3.9.0, <=3.9.5)

org.apache.zookeeper:zookeeper MAVEN version =3.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =0.1.0, =7.2.0, =7.2.0, =7.2.0, =9.9.0 and more Source cves: CVE-2026-59739 Source advisory: SNYK:JAVA-ORGAPACHEZOOKEEPER-20158990...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-59969 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.25 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-84501 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.25 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

ai.platon.gora:gora-core (1.0.0), ai.platon.gora:gora-mongodb (1.0.0) +1515 more potentially affected by CVE-2026-84501 via org.apache.zookeeper:zookeeper (>=3.9.0, <=3.9.5)

org.apache.zookeeper:zookeeper MAVEN version =3.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =0.1.0, =7.2.0, =7.2.0, =7.2.0, =9.9.0 and more Source cves: CVE-2026-84501 Source advisory: MEND:CVE-2026-84501...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-84501 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.25 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

ai.platon.gora:gora-core (1.0.0), ai.platon.gora:gora-mongodb (1.0.0) +1515 more potentially affected by CVE-2026-59969 via org.apache.zookeeper:zookeeper (>=3.9.0, <=3.9.5)

org.apache.zookeeper:zookeeper MAVEN version =3.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =0.1.0, =7.2.0, =7.2.0, =7.2.0, =9.9.0 and more Source cves: CVE-2026-59969 Source advisory: MEND:CVE-2026-59969...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-59969 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.25 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-59739 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.25 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

acceldata-o2a (1.0.0), acryl-datahub-airflow-plugin (>=0.9.5.1rc1, <=1.3.1.5rc6) +122 more potentially affected by CVE-2026-82311 via apache-airflow-providers-fab (>=1.0.2b0, <=2.4.4)

apache-airflow-providers-fab PYPI version =1.0.2b0, =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.4.0, =0.1.0a1, =1.3.0, =0.1.1, =0.1.1, =0.10.2, =0.0.1, =0.1.2 and more Source cves: CVE-2026-82311 Source advisory: MEND:CVE-2026-82311...

acme2certifier (>=0.45.0.dev1, <=0.46.2), acmen (>=0.5.0, <=0.5.1) +138 more potentially affected by CVE-2026-92091 via jwcrypto (>=0.4.0, <=1.6.0)

jwcrypto PYPI version =0.4.0, =0.45.0.dev1, =0.5.0, =0.0.3, =0.2.0, =0.1.0, =1.0.0, =1.0.0rc2, =1.8.2b1, =0.1.0, =0.1.0, =0.1.0, =0.11.0rc1, =0.4.0a0, =2.0.0, =2.2.3 - automa-ai 0.2.4 and more Source cves: CVE-2026-92091 Source advisory: MEND:CVE-2026-92091...

PT-2026-93779

Name of the Vulnerable Software and Affected Versions Jenkins OWASP Dependency-Check Plugin versions prior to 5.6.5 Description The Jenkins UI fails to escape CWE values from Dependency-Check reports, leading to a stored cross-site scripting XSS issue. This allows attackers with Item/Configure...

CVE-2026-92136: Improper Neutralization of Input During Web Page Generation

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2026-89976: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix job completion fence cleanup ethosuioctlsubmitjob allocates donefence before validating buffer handles. Errors after allocation call ethosujoberrcleanup, which frees the job but leaks the uninitialized fence. A...

Stored XSS vulnerability in dependency-check-jenkins-plugin

dependency-check-jenkins-plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. TIP: On Jenkins 2.539 and newer, LTS 2.541.1 and...

reasongate v0.4.0

ReasonGate A self-hostable gate that inspects the text going into and out of an LLM and returns an explainable allow / flag / block decision with a machine-readable audit record for every call. What this is The open-source core is rule-based. It does four things: recognizes known prompt-injection...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

io.jobial:scase-http4s_2.13 (>=2.1.0, <=2.2.2), io.jobial:scase_2.13 (>=2.1.0, <=2.2.2) +1 more potentially affected by CVE-2026-69209 via org.http4s:http4s-ember-server_2.13 (>=1.0.0-m30, <=1.0.0-m37)

org.http4s:http4s-ember-server2.13 MAVEN version =1.0.0-m30, =2.1.0, =2.1.0, =2.2.2 - io.taig:taigless-storage-http4s-server2.13 0.15.0 Source cves: CVE-2026-69209 Source advisory: SNYK:JAVA-ORGHTTP4S-19851898...

dev.i10416:slackapis-core_2.13 (>=0.0.1, <=0.0.2), es.weso:rdfshape-server_2.13 (>=0.0.73, <=0.2.14) +16 more potentially affected by CVE-2026-69216 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m2, <=1.0.0-m46)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m2, =0.0.1, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.1.91, =0.1.109, =0.1.91, =0.1.101, =0.0.82, =0.1.91, =0.1.0, =2.1.0, =2.1.0, =2.2.2 and more Source cves: CVE-2026-69216 Source advisory: SNYK:JAVA-ORGHTTP4S-19858861...

dev.i10416:slackapis-core_2.13 (>=0.0.1, <=0.0.2), es.weso:rdfshape-server_2.13 (>=0.0.73, <=0.2.14) +16 more potentially affected by CVE-2026-69204 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m2, <=1.0.0-m46)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m2, =0.0.1, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.1.91, =0.1.109, =0.1.91, =0.1.101, =0.0.82, =0.1.91, =0.1.0, =2.1.0, =2.1.0, =2.2.2 and more Source cves: CVE-2026-69204 Source advisory: SNYK:JAVA-ORGHTTP4S-19869275...