org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (>=1.2.0, <=1.3.0) +3 more potentially affected by CVE-2026-53917 via org.apache.activemq:apache-activemq (>=4.1.1, <=5.0.0)

org.apache.activemq:apache-activemq MAVEN version =4.1.1, =1.2.0, =1.1.0, =1.3.0 - org.apache.camel:camel-example-spring 1.2.0 - org.apache.camel:camel-example-spring-xquery 1.3.0 Source cves: CVE-2026-53917 Source advisory: MEND:CVE-2026-53917...

CVE-2026-50229

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

CVE-2026-50229

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

DEBIAN-CVE-2026-50229

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

CVE-2026-50229 Apache Tomcat: XSS in number guess example

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

CVE-2026-50229 Apache Tomcat: XSS in number guess example

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

EUVD-2026-40226

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

CVE-2026-50229

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

CVE-2026-50229

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

CVE-2026-50229

Apache Tomcat is vulnerable to a Basic XSS (Improper Neutralization of Script-Related HTML Tags) in the number guess example . This flaw allows an attacker to execute arbitrary code remotely, according to some reports, by exploiting deficiencies in web page structure protection. Affected versions...

PYSEC-2026-478 PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

Summary The first-party PraisonAI A2A server example combines three behaviors into a remotely exploitable Critical chain: 1. The example exposes an A2A server without configuring authtoken. 2. The same example binds the server to 0.0.0.0. 3. The example registers a calculateexpression tool...

example-pkg-naturalett (>=14.4.4, <=14.4.8) potentially affected by CVE-2023-25691 via apache-airflow-providers-google (4.0.0)

apache-airflow-providers-google PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - example-pkg-naturalett =14.4.4, =14.4.8 Source cves: CVE-2023-25691 Source advisory:...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2022-40189 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2022-40189 Source advisory:...

CVE-2026-50229: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

org.openidentityplatform.openam:openam-slf4j (>=16.0.1, <=16.0.6), org.openidentityplatform.opendj:opendj-dsml-servlet (>=5.0.1, <=5.1.0) +5 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (>=5.0.1, <=5.1.0)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =5.0.1, =16.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.1.0 Source cves: CVE-2026-46495 Source advisory: SNYK:JAVA-ORGOPENIDENTITYPLATFORMOPENDJ-17423204...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.15), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.15) +3 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.15)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.openam:embedded.opendj (>=14.6.1.1, <=14.6.1.2), org.openidentityplatform.openam:openam-slf4j (14.6.1) +3 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.9)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:embedded.opendj...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.14), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.14) +2 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.14)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.13), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.13) +2 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.13)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.12), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.12) +2 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.12)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...