@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by CVE-2026-48147 via @budibase/backend-core (>=3.0.0, <=3.2.26)

@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-48147 Source advisory: OSV:GHSA-WXQ7-X3QP-VCR8...

@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by CVE-2026-48147 via @budibase/backend-core (>=3.0.0, <=3.2.26)

@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-48147 Source advisory: SNYK:JS-BUDIBASEBACKENDCORE-17675455...

argo-kedro (>=0.1.0, <=0.1.41), causallift (>=1.0.0, <=1.1.0) +90 more potentially affected by CVE-2026-3840 via kedro (>=0.15.9, <=1.5.0)

kedro PYPI version =0.15.9, =0.1.0, =1.0.0, =1.4.0, =0.1.0, =0.0.2, =1.0.0, =0.1.0, =0.0.3, =0.1.0, =0.1.9, =0.1.0, =0.0.18, =0.0.279 - if-etl-sdk 0.1.0 and more Source cves: CVE-2026-3840 Source advisory: SNYK:PYTHON-KEDRO-17752561...

DoS (Denial of Service) org.postgresql:postgresql Dependency in Bamboo Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.2.0, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5, 10.2.6, 10.2.7, 10.2.8, 10.2.9, 10.2.10, 10.2.11, 10.2.12, 10.2.13, 10.2.14, 10.2.15, 10.2.16, 10.2.18, and 10.2.19 of Bamboo Data Center. This DoS Denial of Service...

01os (>=0.0.5, <=0.0.13), 1claw-crewai-tools (>=0.1.0, <=0.2.0) +2063 more potentially affected by CVE-2026-45831 via chromadb (>=0.3.4, <=1.5.9)

chromadb PYPI version =0.3.4, =0.0.5, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.1.1, =0.0.4.dev0, =0.0.4 - adaline-crewai 0.1.0 and more Source cves: CVE-2026-45831 Source advisory: SNYK:PYTHON-CHROMADB-17337045...

Malicious code in voyager-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f4f15201378ec6cee4268469e85e17e50f3f5299d94a250031d6c2693177b8 package.json declares both preinstall and postinstall lifecycle hooks that execute callback.js on npm install. callback.js collects installer-side...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +90 more potentially affected by CVE-2026-53722 via nuxt (>=3.0.0, <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-53722 Source advisory: SNYK:JS-NUXT-17328106...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-53722 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-53722 Source advisory: SNYK:JS-NUXT-17328106...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-53721 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-53721 Source advisory: SNYK:JS-NUXT-17337027...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +33 more potentially affected by CVE-2026-53721 via nuxt (>=3.11.2, <=3.20.1)

nuxt NPM version =3.11.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.2.1, =1.2.0, =1.1.0, =1.0.0-29304822.f444f03, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.0, =1.1.2 and more Source cves: CVE-2026-53721 Source advisory: SNYK:JS-NUXT-17337027...

budibase (>=0.0.3, <=0.0.31) potentially affected by CVE-2026-48128 via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-48128 Source advisory: SNYK:JS-BUDIBASESERVER-17818152...

@flutchai/flutch-sdk (>=0.2.7, <=0.5.0) potentially affected by CVE-2026-48121 via @langchain/langgraph-checkpoint-mongodb (1.0.0)

@langchain/langgraph-checkpoint-mongodb NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @langchain/langgraph-checkpoint-mongodb and may be impacted: - @flutchai/flutch-sdk =0.2.7, =0.5.0 Source cves: CVE-2026-48121 Source advisory:...

actix-postgres (>=0.1.0, <=0.4.0), actyxos_data_flow (0.1.0) +484 more potentially affected by unknown CVE via tokio-postgres (>=0.4.0-rc.2, <=0.7.17)

tokio-postgres CARGO version =0.4.0-rc.2, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.3.5, =0.2.0, =0.13.2, =0.14.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0178...

actix-postgres (>=0.1.0, <=0.4.0), actyx_sdk (>=0.1.0, <=0.3.0) +555 more potentially affected by unknown CVE via postgres-protocol (>=0.4.0, <=0.6.10)

postgres-protocol CARGO version =0.4.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0179...

actix-postgres (>=0.1.0, <=0.4.0), actyx_sdk (>=0.1.0, <=0.3.0) +567 more potentially affected by unknown CVE via postgres-protocol (>=0.1.1, <=0.6.10)

postgres-protocol CARGO version =0.1.1, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0180...

SUSE-SU-2026:22133-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: Update to version 20260430.00: Update dependencies and go version to 1.26.2 607 bsc1265762, CVE-2026-33814 Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 604 bsc1260264, CVE-2026-33186 Backport oslogin changes for sles16 to...

OPENSUSE-SU-2026:20948-1 Security update for enc

This update for enc fixes the following issues: Changes in enc: - CVE-2026-1229: Fix incorrect value bsc1265533 Bump circl to 1.6.3 - Update to 1.1.5: Update dependencies 10 - Update to 1.1.4: Update all dependencies 9...

@steipete/summarize (>=0.7.0, <=0.16.3), custom-command-example (>=1.3.0, <=1.3.2) potentially affected by CVE-2026-53781 via @steipete/summarize-core (>=0.7.0, <=0.16.3)

@steipete/summarize-core NPM version =0.7.0, =0.7.0, =1.3.0, =1.3.2 Source cves: CVE-2026-53781 Source advisory: OSV:GHSA-Q9XM-F36C-XM3Q...

@steipete/summarize (>=0.7.0, <=0.16.3), custom-command-example (>=1.3.0, <=1.3.2) potentially affected by CVE-2026-53781 via @steipete/summarize-core (>=0.7.0, <=0.16.3)

@steipete/summarize-core NPM version =0.7.0, =0.7.0, =1.3.0, =1.3.2 Source cves: CVE-2026-53781 Source advisory: SNYK:JS-STEIPETESUMMARIZECORE-17812779...

@steipete/summarize (>=0.7.0, <=0.16.3), custom-command-example (>=1.3.0, <=1.3.2) potentially affected by CVE-2026-53782 via @steipete/summarize-core (>=0.7.0, <=0.16.3)

@steipete/summarize-core NPM version =0.7.0, =0.7.0, =1.3.0, =1.3.2 Source cves: CVE-2026-53782 Source advisory: SNYK:JS-STEIPETESUMMARIZECORE-17812777...