@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27193 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27193 Source advisory: OSV:GHSA-9M9C-VPV5-9G85...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27193 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27193 Source advisory: SNYK:JS-FEATHERSJSAUTHENTICATIONOAUTH-15325870...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27191 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27191 Source advisory: SNYK:JS-FEATHERSJSAUTHENTICATIONOAUTH-15325872...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27191 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27191 Source advisory: OSV:GHSA-PPF9-4FFW-HH4P...

EUVD-2025-199359

Malicious code in prompt-eng-server npm...

org.finos.legend.depot:legend-depot-server (>=1.2.3, <=2.98.2), org.finos.legend.depot:legend-depot-store-server (>=1.2.3, <=2.98.2) +19 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (8.0)

com.nimbusds:nimbus-jose-jwt MAVEN version 8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - org.finos.legend.depot:legend-depot-server =1.2.3, =1.2.3, =release-4.96.3, =2.36.0, =release-4.96.3,...

org.apache.seatunnel:connector-console-seatunnel-e2e (>=2.3.0, <=2.3.10), org.apache.seatunnel:connector-seatunnel-e2e-base (>=2.3.0, <=2.3.10) +2 more potentially affected by CVE-2025-32896 via org.apache.seatunnel:seatunnel-engine-server (>=2.3.0, <=2.3.10)

org.apache.seatunnel:seatunnel-engine-server MAVEN version =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.4, =2.3.10 Source cves: CVE-2025-32896 Source advisory: SNYK:JAVA-ORGAPACHESEATUNNEL-10442152...

org.apache.seatunnel:connector-console-seatunnel-e2e (>=2.3.0, <=2.3.10), org.apache.seatunnel:connector-seatunnel-e2e-base (>=2.3.0, <=2.3.10) +2 more potentially affected by CVE-2025-32896 via org.apache.seatunnel:seatunnel-engine-server (>=2.3.0, <=2.3.10)

org.apache.seatunnel:seatunnel-engine-server MAVEN version =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.4, =2.3.10 Source cves: CVE-2025-32896 Source advisory: GHSA-9X53-GR7P-4QF5...

org.apache.seatunnel:connector-console-seatunnel-e2e (>=2.3.0, <=2.3.10), org.apache.seatunnel:connector-seatunnel-e2e-base (>=2.3.0, <=2.3.10) +2 more potentially affected by CVE-2025-32896 via org.apache.seatunnel:seatunnel-engine-server (>=2.3.0, <=2.3.10)

org.apache.seatunnel:seatunnel-engine-server MAVEN version =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.4, =2.3.10 Source cves: CVE-2025-32896 Source advisory: OSV:GHSA-9X53-GR7P-4QF5...

org.apache.linkis:linkis-engineplugin-seatunnel (>=1.4.0, <=1.8.0), org.apache.seatunnel:connector-console-seatunnel-e2e (>=2.3.0, <=2.3.10) +7 more potentially affected by CVE-2025-32896 via org.apache.seatunnel:seatunnel-engine-common (>=2.3.0-beta, <=2.3.10)

org.apache.seatunnel:seatunnel-engine-common MAVEN version =2.3.0-beta, =1.4.0, =2.3.0, =2.3.0, =1.0.0, =2.3.0-beta, =2.3.0-beta, =2.3.0, =2.3.4, =2.3.0-beta, =2.3.10 Source cves: CVE-2025-32896 Source advisory: GHSA-9X53-GR7P-4QF5...

org.apache.seatunnel:connector-console-seatunnel-e2e (>=2.3.0, <=2.3.10), org.apache.seatunnel:connector-seatunnel-e2e-base (>=2.3.0, <=2.3.10) +2 more potentially affected by CVE-2025-32896 via org.apache.seatunnel:seatunnel-engine-server (>=2.3.0, <=2.3.10)

org.apache.seatunnel:seatunnel-engine-server MAVEN version =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.4, =2.3.10 Source cves: CVE-2025-32896 Source advisory: MEND:CVE-2025-32896...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.10.1), org.bonitasoft.engine:bonita-engine-standalone (7.10.1) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.10.1)

org.bonitasoft.platform:platform-resources MAVEN version 7.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.10.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (8.0.0), org.bonitasoft.engine:bonita-engine-standalone (8.0.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (8.0.0)

org.bonitasoft.platform:platform-resources MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 8.0.0 -...

org.bonitasoft.connectors:bonita-connector-rest (>=1.4.0, <=1.5.1), org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.14.0) +3 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.14.0)

org.bonitasoft.platform:platform-resources MAVEN version 7.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.connectors:bonita-connector-rest =1.4.0, =1.5.1 -...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (5.0.5)

@feathersjs/transport-commons NPM version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @ir-engine/server-core 1.6.0 - @ir-engine/taskserver 1.6.0 Source cves: CVE-2023-37899 Source advisory:...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (5.0.5)

@feathersjs/transport-commons NPM version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @ir-engine/server-core 1.6.0 - @ir-engine/taskserver 1.6.0 Source cves: CVE-2023-37899 Source advisory:...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (5.0.5)

@feathersjs/transport-commons NPM version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @ir-engine/server-core 1.6.0 - @ir-engine/taskserver 1.6.0 Source cves: CVE-2023-37899 Source advisory:...

SUSE CVE-2014-9351

engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial of service crash via unspecified vectors...

teeworlds Linux DoS

The vulnerability of the CServer::SendMsg function located in engine/server/server.cpp of the teeworlds package on Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2018-15542

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java Web Container and HTTP Service versions 7.10 through 7.11, 7.30, 7.31, 7.40, 7.50 J2EE Engine Server Core versions 7.11, 7.30, 7.31, 7.40, 7.50 Description The issue arises from insufficient encoding of...