com.github.cafaudit:caf-audit-binding-elasticsearch (>=5.0.3-1321, <=5.0.4-1329), com.github.cafaudit:caf-audit-monkey-container (>=5.0.3-1321, <=5.0.4-1329) +15 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcutil-fips (>=2.1.4, <=2.1.7)

org.bouncycastle:bcutil-fips MAVEN version =2.1.4, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =3.1.2-822, =3.1.2-822, =3.1.2-822, =3.1.2-822, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =5.2.0 and more Source cves: CVE-2026-71888https://vulners.com...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85) potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-debug-jdk14 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk14 MAVEN version =1.81, =1.81, =1.85 Source cves: CVE-2026-71892 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536911...

io.github.jinahya:jinahya-bcprov (0.0.1), org.apache.camel.karaf:camel-as2 (>=4.7.0, <=4.10.7) +14 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-debug-jdk18on (>=1.74, <=1.85)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.74, =4.7.0, =4.7.0, =3.0.0-rc1, =3.0.0-rc1, =3.2.0, =3.20.7, =3.20.7, =3.20.7, =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85 and more Source cves: CVE-2026-18040 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536926...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19442 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-jdk18on (>=1.73, <=1.85.2)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.73, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-18040 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536929...

app.cash.backfila:client-misk-hibernate (>=2025.05.13.195510-03b951f, <=2026.10.01.201111-ad9f619), app.cash.backfila:service (>=2025.05.13.195510-03b951f, <=2026.10.01.201111-ad9f619) +1079 more potentially affected by CVE-2026-85515 via org.bouncycastle:bcpg-jdk18on (>=1.74, <=1.85)

org.bouncycastle:bcpg-jdk18on MAVEN version =1.74, =2025.05.13.195510-03b951f, =2025.05.13.195510-03b951f, =2025.05.13.195510-03b951f, =1.0.0, =1.0.0, =4.3.0.549.vf2adaad19b5e, =1.5.0, =0.1.0, =0.1.5 -...

org.opensearch:opensearch-plugin-cli (>=2.17.0, <=3.2.0) potentially affected by CVE-2026-85515 via org.bouncycastle:bcpg-fips (>=2.0.9, <=2.0.11)

org.bouncycastle:bcpg-fips MAVEN version =2.0.9, =2.17.0, =3.2.0 Source cves: CVE-2026-85515 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536961...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19645 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-jdk18on (>=1.72, <=1.85)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.72, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-18040 Source advisory: MEND:CVE-2026-18040...

ai.covia:covia-claude-code (>=0.9.3, <=0.9.8), ai.covia:covia-core (>=0.4.0, <=0.9.8) +11056 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.85)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.9.2 and more Source cves: CVE-2026-71888 Source advisory: MEND:CVE-2026-71888...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +20040 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.85.2)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-71889 Source advisory: MEND:CVE-2026-71889...

com.itextpdf:bouncy-castle-fips-adapter (>=9.6.0, <=9.8.0), com.pkixops:pkixops-crypto (1.5.2) +165 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-fips (>=2.1.8, <=2.1.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.1.8, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =2.56.0 and more Source cves: CVE-2026-71889 Source advisory: MEND:CVE-2026-71889...

ai.covia:covia-claude-code (>=0.9.3, <=0.9.8), ai.covia:covia-core (>=0.4.0, <=0.9.8) +9996 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-jdk18on (>=1.74, <=1.85)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.74, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.9.2 and more Source cves: CVE-2026-71889 Source advisory: MEND:CVE-2026-71889...

org.opensearch:opensearch-plugin-cli (>=3.3.0, <=3.9.0), org.sonatype.nexus.api.extdirect:nexus-api-extdirect-common (>=3.81.0-08, <=3.88.0-08) +111 more potentially affected by CVE-2026-85515 via org.bouncycastle:bcpg-fips (>=2.1.11, <=2.1.13)

org.bouncycastle:bcpg-fips MAVEN version =2.1.11, =3.3.0, =3.81.0-08, =3.81.0-08, =3.81.0-08, =3.81.0-08, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.97.0-13 and more Sourc...

[SECURITY] Fedora 45 Update: libsolv-0.7.40-2.fc45

A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package...

20mk-utils (>=1.0.0, <=1.0.3), 2d-spirograph (>=1.0.2, <=1.0.4) +2100 more potentially affected by CVE-2026-104477 via showdown (>=0.0.1, <=2.1.0)

showdown NPM version =0.0.1, =1.0.0, =1.0.2, =2.0.4, =1.0.6, =13.351.0, =13.351.0, =7.10.0, =7.10.0, =0.0.3, =1.0.0, =0.0.1, =0.0.39 and more Source cves: CVE-2026-104477 Source advisory: SNYK:JS-SHOWDOWN-20510286...

0xble (>=22.0.0, <=23.2.2), 0xsodium (>=0.2.0, <=0.14.0) +14135 more potentially affected by CVE-2026-19481 via @fastify/busboy (>=1.0.0, <=3.2.0)

@fastify/busboy NPM version =1.0.0, =22.0.0, =0.2.0, =0.0.1, =1.0.0, =0.2.0, =0.4.0, =0.1.0, =0.0.1, =1.0.21, =0.6.0, =0.6.2 and more Source cves: CVE-2026-19481 Source advisory: OSV:GHSA-X8MW-P69M-V3MX...

@awmottaz/grackle (>=3.0.0, <=3.2.0), @beiguancyc/parse-server (>=9.9.0-ruixiang.1, <=9.10.0-ruixiang.4) +14 more potentially affected by CVE-2026-19484 via @fastify/busboy (>=3.1.1, <=3.2.0)

@fastify/busboy NPM version =3.1.1, =3.0.0, =9.9.0-ruixiang.1, =0.37.0, =0.8.22, =0.9.21, =1.0.4, =1.0.0, =4.5.0-blowfish-pre, =11.1.1-9.0, =6.1.1, =3.31.25, =9.2.8-0, =9.10.0-1, =0.27.0, =4.0.0, =4.2.0 and more Source cves: CVE-2026-19484 Source advisory: GHSA-XJH9-V7X6-24JW...

aau-gomapedge-etl (>=0.3.2, <=0.4.1), agentgateway (>=0.1.0, <=1.1.9) +135 more potentially affected by CVE-2026-77387 via geopy (>=2.0.0rc1, <=2.4.1)

geopy PYPI version =2.0.0rc1, =0.3.2, =0.1.0, =0.20.5, =0.1.0, =3.2.0, =0.2.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.2b0, =0.0.9b0 - commonroad-geometric 0.1.2 and more Source cves: CVE-2026-77387 Source advisory: GHSA-MHVH-FQ92-PFMR...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +470 more potentially affected by CVE-2026-104873 via langgraph-sdk (>=0.1.48, <=0.4.3)

langgraph-sdk PYPI version =0.1.48, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-104873 Source advisory: SNYK:PYTHON-LANGGRAPHSDK-20417225...

adversarial-workflow (>=0.4.0, <=0.9.8), agentiva (>=0.1.0, <=0.1.5) +169 more potentially affected by CVE-2026-104874 via multidict (>=6.7.0, <=6.8.0)

multidict PYPI version =6.7.0, =0.4.0, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =1.0.5, =25.11.0, =0.7.0, =0.1.3, =0.1.4 - audience-framework 1.0.0 and more Source cves: CVE-2026-104874 Source advisory: SNYK:PYTHON-MULTIDICT-20510280...

actscene-ocr (>=0.1.3, <=0.1.5), adversarial-workflow (>=0.4.0, <=0.9.8) +288 more potentially affected by CVE-2026-104874 via multidict (>=6.3.0, <=6.8.0)

multidict PYPI version =6.3.0, =0.1.3, =0.4.0, =0.1.0, =0.1.0, =0.87.2.dev9, =0.80.1, =0.1.0.dev19, =1.3.0, =0.1.0, =1.0.5, =25.4.0, =26.5.0 and more Source cves: CVE-2026-104874 Source advisory: MEND:CVE-2026-104874...