CVE-2026-23654

Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network...

CVE-2026-23654

Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network...

studiocms (>=0.1.0-beta.26, <=0.1.0) potentially affected by CVE-2026-30944 via @withstudiocms/auth-kit (0.1.0-beta.6)

@withstudiocms/auth-kit NPM version 0.1.0-beta.6 is affected by a known vulnerability. The following packages have a transitive dependency on @withstudiocms/auth-kit and may be impacted: - studiocms =0.1.0-beta.26, =0.1.0 Source cves: CVE-2026-30944 Source advisory:...

@studiocms/migrator (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-30944 via studiocms (>=0.2.0, <=0.3.0)

studiocms NPM version =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2026-30944 Source advisory: SNYK:JS-STUDIOCMS-15518582...

@studiocms/migrator (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-30944 via studiocms (>=0.2.0, <=0.3.0)

studiocms NPM version =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2026-30944 Source advisory: OSV:GHSA-667W-MMH7-MRR4...

Jailbreaking the F-35 Fighter Jet

Countries around the world are becoming increasingly concerned about their dependencies on the US. If you've purchase US-made F-35 fighter jets, you are dependent on the US for software maintenance. The Dutch Defense Secretary recently said that he could jailbreak the planes to accept third-party...

CVE-2025-11143 vulnerabilities

Vulnerabilities for packages: apache-tika, solr, cassandra-reaper, cloudwatch-exporter, dependency-track, zookeeper, confluent-kafka, akhq, strimzi-kafka-operator, spark, trino, kafka, druid...

GHSA-WJPW-4J6X-6RWH vulnerabilities

Vulnerabilities for packages: apache-tika, solr, cassandra-reaper, cloudwatch-exporter, dependency-track, zookeeper, confluent-kafka, akhq, strimzi-kafka-operator, spark, trino, kafka, druid...

GHSA-WJPW-4J6X-6RWH vulnerabilities

Vulnerabilities for packages: confluent-kafka, kafka, apache-hop, apache-hop-fips, cruise-control-fips, solr, spark-kubernetes-operator, reposilite, dependency-track, confluent-kafka-jre-bcfips, spark-fips, cruise-control, zookeeper, pinot, druid, neo4j, trino, apache-tika,...

CVE-2025-11143 vulnerabilities

Vulnerabilities for packages: confluent-kafka, kafka, apache-hop, apache-hop-fips, cruise-control-fips, solr, spark-kubernetes-operator, reposilite, dependency-track, confluent-kafka-jre-bcfips, spark-fips, cruise-control, zookeeper, pinot, druid, neo4j, trino, apache-tika,...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469597...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: OSV:GHSA-CW6X-MW64-Q6PV...

@oneuptime/cli (>=10.0.15, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.15, <=10.0.20)

@oneuptime/common NPM version =10.0.15, =10.0.15, =10.0.20 Source cves: CVE-2026-30957 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469296...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30957 Source advisory: OSV:GHSA-JW8Q-GJVG-8W4Q...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30956 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30956 Source advisory: OSV:GHSA-R5V6-2599-9G3M...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30956 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30956 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469212...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +127 more potentially affected by CVE-2026-30952 via liquidjs (>=10.2.0, <=10.24.0)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0, =1.0.10 and more Source cves: CVE-2026-30952 Source advisory: SNYK:JS-LIQUIDJS-15443434...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +127 more potentially affected by CVE-2026-30952 via liquidjs (>=10.2.0, <=10.24.0)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0, =1.0.10 and more Source cves: CVE-2026-30952 Source advisory: OSV:GHSA-WMFP-5Q7X-987X...

@powersync/cli-core (>=0.0.0-dev-20260305082615, <=0.9.2), @powersync/cli-plugin-config-edit (>=0.0.0-dev-20260305082615, <=0.9.2) +20 more potentially affected by CVE-2026-30870 via @powersync/service-sync-rules (>=0.0.0-dev-20240918082156, <=0.32.0)

@powersync/service-sync-rules NPM version =0.0.0-dev-20240918082156, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20250827072023, =0.0.0-dev-20260114113449, =0.0.0-dev-20250827072023, =0.0.0-dev.57b1a567,...

MCP Atlassian 代码问题漏洞

MCP Atlassian is an MCP server developed by Hyeonsoo Lee, which connects AI assistants with project management tools. Versions of MCP Atlassian prior to 0.17.0 contained code vulnerabilities. These vulnerabilities stemmed from defects in the HTTP middleware and dependency injection layer,...