Authentication Bypass org.apache.tomcat:tomcat-catalina Dependency in Jira Service Management Data Center

This is a vulnerability in a non-Atlassian dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Authentication Bypass vulnerability was introduced in versions 5.16.0, 5.17.0, 10.0.1, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0,...

Unsafe Dependency Resolution

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Unsafe Dependency Resolution in the model initialization process when the trustremotecode parameter is overridden by untrusted configuration data. An...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the loadRawSpec function when parsing BTF collection specifications. An attacker can cause excessive memory allocation or parsing failures by supplying a malicious collection specification to a process...

20231122-npm (1.0.0), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +6010 more potentially affected by CVE-2026-5078 via morgan (>=1.2.0, <=1.10.1)

morgan NPM version =1.2.0, =1.0.2, =1.0.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.0, =1.15.2 and more Source cves: CVE-2026-5078 Source advisory: SNYK:JS-MORGAN-17135841...

5dee (0.1.0), a2 (>=0.1.0, <=0.7.0) +4994 more potentially affected by CVE-2026-10705 via dask (>=0.11.0, <=2026.7.1)

dask PYPI version =0.11.0, =0.1.0, =0.4.0, =0.9.1.dev0, =25.9.23, =0.1.0, =0.4.5, =1.0.0, =0.4.1, =0.0.1, =2026.4.17, =0.1.14, =0.1.0, =0.1.12 and more Source cves: CVE-2026-10705 Source advisory: SNYK:PYTHON-DASK-17138893...

deebo-prototype (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-10691 via @wonderwhy-er/desktop-commander (0.1.39)

@wonderwhy-er/desktop-commander NPM version 0.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on @wonderwhy-er/desktop-commander and may be impacted: - deebo-prototype =1.0.0, =1.0.1 Source cves: CVE-2026-10691 Source advisory:...

deebo-prototype (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-10690 via @wonderwhy-er/desktop-commander (0.1.39)

@wonderwhy-er/desktop-commander NPM version 0.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on @wonderwhy-er/desktop-commander and may be impacted: - deebo-prototype =1.0.0, =1.0.1 Source cves: CVE-2026-10690 Source advisory:...

deebo-prototype (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-10690 via @wonderwhy-er/desktop-commander (0.1.39)

@wonderwhy-er/desktop-commander NPM version 0.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on @wonderwhy-er/desktop-commander and may be impacted: - deebo-prototype =1.0.0, =1.0.1 Source cves: CVE-2026-10690 Source advisory: OSV:GHSA-5XX3-J724-WMX...

deebo-prototype (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-10691 via @wonderwhy-er/desktop-commander (0.1.39)

@wonderwhy-er/desktop-commander NPM version 0.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on @wonderwhy-er/desktop-commander and may be impacted: - deebo-prototype =1.0.0, =1.0.1 Source cves: CVE-2026-10691 Source advisory: OSV:GHSA-R87G-78MX-3WG...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the regulator core module not correctly holding the regulatorlistmutex lock in the wrong path of...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper dependency checks in the work queue WQMEMRECLAIM, potentially leading to warnings...

@accounter/client (>=0.0.6-alpha-20250716191627-847a4f732a66f2443e3141d5ef77222a6579ded3, <=0.0.11-alpha-20260328161521-814e4fc7c5b0b6b919590e293c0fac45b7c2513d), @boxyhq/react-ui (>=3.5.2, <=3.5.3) +153 more potentially affected by CVE-2026-33245 via react-router (>=7.7.0, <=7.13.1-pre.0)

react-router NPM version =7.7.0, =0.0.6-alpha-20250716191627-847a4f732a66f2443e3141d5ef77222a6579ded3, =3.5.2, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =3.3.7, =3.0.0-alpha.2, =3.2.0-beta.0, =0.1.9, =0.0.1, =1.21.9, =1.21.9, =0.3.1, =0.5.1 - @depup/react-router-dom 7.13.1-depup...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.11-alpha-20260404002702-9340365def1af08a5cdbbf734a87d1d4839bdaff) +285 more potentially affected by CVE-2026-34077 via react-router (>=7.0.0, <=7.13.2-pre.0)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =0.1.0, =0.3.3 and more Source cves: CVE-2026-34077 Source advisory: SNYK:JS-REACTROUTER-17138883...

@0xmike/web-kit (>=0.0.6, <=0.1.1), @abundiko/expo-template (1.0.0) +320 more potentially affected by CVE-2026-34077 via turbo-stream (2.4.1)

turbo-stream NPM version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on turbo-stream and may be impacted: - @0xmike/web-kit =0.0.6, =4.0.0-beta.10, =4.15.0, =1.4.0, =0.0.1, =1.2.0, =1.2.0, =0.1.0, =1.0.10, =1.0.0, =0.0.2, =0.0.1, =1.0.6, =2.1.0 ...

@1023-ventures/merope2 (>=0.2.1, <=0.2.9), @1023-ventures/vega-core (>=0.5.0, <=0.6.2) +1203 more potentially affected by CVE-2026-40181 via react-router (>=6.7.0, <=6.30.3-pre-v6.0)

react-router NPM version =6.7.0, =0.2.1, =0.5.0, =0.0.1, =0.0.1, =3.0.0, =0.0.0-beta-20260120211922, =1.0.0, =1.0.0, =1.0.0, =2.7.0, =0.0.1, =0.1.0, =0.0.0, =2.13.1, =2.13.94 and more Source cves: CVE-2026-40181 Source advisory: SNYK:JS-REACTROUTER-17138887...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260421081155-bb6cc4c0b0b59fff41df172e2f4212eca6906193) +287 more potentially affected by CVE-2026-40181 via react-router (>=7.0.0, <=7.14.0-pre.0)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =1.0.8 and more Source cves: CVE-2026-40181 Source advisory: SNYK:JS-REACTROUTER-17138887...

@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +25 more potentially affected by CVE-2026-42342 via @remix-run/server-runtime (>=2.10.0, <=2.17.4)

@remix-run/server-runtime NPM version =2.10.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.1.36, =2.10.0-pre.0, =2.10.0-pre.0, =2.10.0-pre.0, =2.10.0-pre.0, =2.10.0-pre.0, =2.10.0-pre.0, =2.17.4 and more Source cves: CVE-2026-42342 Source advisory:...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260508071110-20f5becdec9522d09c6a97f123f7c572407661fb) +375 more potentially affected by CVE-2026-42342 via react-router (>=7.0.0, <=7.14.2)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =3.4.0, =2026.511.1, =0.2.3, =0.3.7 and more Source cves: CVE-2026-42342 Source advisory: SNYK:JS-REACTROUTER-17138701...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260427054851-6925deba4595cf0c72d3875df0a094608b394a27) +290 more potentially affected by CVE-2026-42211 via react-router (>=7.0.0, <=7.14.1)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =1.0.8 and more Source cves: CVE-2026-42211 Source advisory: SNYK:JS-REACTROUTER-17137394...

@cyberskill/cyber-editor (>=3.8.8, <=3.9.0), @shopify/dev-mcp (>=1.7.2, <=1.8.0) +2 more potentially affected by CVE-2026-33244 via @react-router/dev (>=7.6.0, <=7.13.1)

@react-router/dev NPM version =7.6.0, =3.8.8, =1.7.2, =0.0.2, =0.0.19 - deploy.sh 3.0.0 Source cves: CVE-2026-33244 Source advisory: SNYK:JS-REACTROUTERDEV-17137488...