com.hazelcast:hazelcast-client (3.3), com.hazelcast:hazelcast-cloud (3.3) +16 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3)

com.hazelcast:hazelcast MAVEN version 3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3 - com.hazelcast:hazelcast-cloud 3.3 - com.hazelcast:hazelcast-hibernate 3.3 -...

com.englishtown:vertx-mod-hk2 (>=1.0.0-beta1, <=1.0.0-beta5), com.englishtown:vertx-mod-jersey (>=1.0.0-beta1, <=1.0.0-beta5) +11 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (2.5.1)

com.hazelcast:hazelcast MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.englishtown:vertx-mod-hk2 =1.0.0-beta1, =1.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =1.0.0-beta1, =2.0.0-beta1,...

com.corundumstudio.socketio:netty-socketio (2.0.14), com.erudika:para-cache-hazelcast (>=1.41.5, <=1.43.0) +221 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (5.6.0)

com.hazelcast:hazelcast MAVEN version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.corundumstudio.socketio:netty-socketio 2.0.14 - com.erudika:para-cache-hazelcast =1.41.5, =1.8.0, =3.2.3,...

ch.mobi.mobitor:mobitor-base (>=3.1.305, <=3.1.313), cloud.piranha.extension:piranha-extension-hazelcast (21.10.0) +47 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.2.2)

com.hazelcast:hazelcast MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - ch.mobi.mobitor:mobitor-base =3.1.305, =1.37.0, =3.1.5, =0.5.0, =0.6.0, =0.9.0 and more Source cves:...

br.com.ingenieux:jbake-maven-plugin (>=0.0.3, <=0.0.9), com.darylteo:vertx-gradle-plugin (1.1.0-alpha1) +79 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (2.6)

com.hazelcast:hazelcast MAVEN version 2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - br.com.ingenieux:jbake-maven-plugin =0.0.3, =1.0.0, =1.0.0-final, =1.0.0-final, =1.0.0-cr2, =1.0.0-cr2, =1.0.0-fina...

cn.vertxup:vertx-co (0.4.10), cn.vertxup:vertx-ifx (0.4.10) +49 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.12)

com.hazelcast:hazelcast MAVEN version 3.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.vertxup:vertx-co 0.4.10 - cn.vertxup:vertx-ifx 0.4.10 - cn.vertxup:vertx-import 0.4.10 - cn.vertxup:vertx-pin...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.10, <=2.0.5), com.gitee.zhan5:starter (1.0.1) +35 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.7.8)

com.hazelcast:hazelcast MAVEN version 3.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.10, =2.0.5 - com.gitee.zhan5:starter 1.0.1...

@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107722 +1 more via fast-jwt (6.2.4)

fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107721 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107721 Source advisory: GHSA-687G-22H4-J4W4...

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107724 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107724 Source advisory: MEND:CVE-2026-107724...

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107723 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107723 Source advisory: MEND:CVE-2026-107723...

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107721 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107721 Source advisory: MEND:CVE-2026-107721...

laravel-framework

About Laravel Note: This repository contains the core code of the Laravel framework. If you want to build an application using Laravel, visit the main Laravel repository. Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable, creative...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107385 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107385 Source advisory: OSV:GHSA-R3RV-JM3R-62Q2...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-107385 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-107385 Source advisory: GHSA-R3RV-JM3R-62Q2...

@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.158) +62 more potentially affected by CVE-2026-107383 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107383 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107383 Source advisory: OSV:GHSA-48QF-XH34-Q73R...

cved

CVED Uno strumento per gestire container docker vulnerabili INSTALLAZIONE qt = 5.x docker git qmake make sudo make install UTILIZZO Crea il gruppo docker se non esiste già. sudo groupadd docker Aggiungi il tuo utente al gruppo docker. sudo usermod -aG docker $USER Esci e accedi di nuovo affinché ...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +19 more potentially affected by CVE-2026-107392 via music-metadata (>=11.0.0, <=11.14.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =1.0.44, =1.0.64 and more Source cves: CVE-2026-107392 Source advisory: MEND:CVE-2026-107392...

Malicious code in @dransay/db (npm)

Source: amazon-inspector dc3d55a63787b5f45312d0b8433f6e782b2a6b28e89ef6377e24e5d26c757a61 On npm install, the package's preinstall hook executes beacon.js, which performs a DNS lookup and HTTPS GET to a hardcoded interactsh OAST subdomain under oast.site, embedding the package name in the path. T...