org.apache.hbase:hbase-assembly (>=2.6.0, <=2.6.4-hadoop3), org.apache.hbase:hbase-examples (>=2.6.0, <=2.6.4-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-thrift (>=2.6.0, <=2.6.4-hadoop3)

org.apache.hbase:hbase-thrift MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.6.4-hadoop3 Source cves: CVE-2026-49326 Source advisory: SNYK:JAVA-ORGAPACHEHBASE-19500661...

org.apache.hbase:hbase-assembly (>=2.5.0, <=2.5.13-hadoop3), org.apache.hbase:hbase-examples (>=2.5.0, <=2.5.13-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-thrift (>=2.5.0, <=2.5.13-hadoop3)

org.apache.hbase:hbase-thrift MAVEN version =2.5.0, =2.5.0, =2.5.0, =2.5.13-hadoop3 Source cves: CVE-2026-49326 Source advisory: SNYK:JAVA-ORGAPACHEHBASE-19500661...

org.apache.hbase:hbase-assembly (>=3.0.0-alpha-1, <=3.0.0-beta-1), org.apache.hbase:hbase-examples (>=3.0.0-alpha-1, <=3.0.0-beta-1) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-rest (>=3.0.0-alpha-1, <=3.0.0-beta-1)

org.apache.hbase:hbase-rest MAVEN version =3.0.0-alpha-1, =3.0.0-alpha-1, =3.0.0-alpha-1, =3.0.0-beta-1 Source cves: CVE-2026-49326 Source advisory: MEND:CVE-2026-49326...

org.apache.hbase:hbase-assembly (>=3.0.0-alpha-1, <=3.0.0-beta-1), org.apache.hbase:hbase-examples (>=3.0.0-alpha-1, <=3.0.0-beta-1) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-thrift (>=3.0.0-alpha-1, <=3.0.0-beta-1)

org.apache.hbase:hbase-thrift MAVEN version =3.0.0-alpha-1, =3.0.0-alpha-1, =3.0.0-alpha-1, =3.0.0-beta-1 Source cves: CVE-2026-49326 Source advisory: MEND:CVE-2026-49326...

org.apache.hbase:hbase-assembly (>=2.6.0, <=2.6.4-hadoop3), org.apache.hbase:hbase-examples (>=2.6.0, <=2.6.4-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-thrift (>=2.6.0, <=2.6.4-hadoop3)

org.apache.hbase:hbase-thrift MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.6.4-hadoop3 Source cves: CVE-2026-49326 Source advisory: MEND:CVE-2026-49326...

org.apache.hbase:hbase-assembly (>=2.5.0, <=2.5.13-hadoop3), org.apache.hbase:hbase-examples (>=2.5.0, <=2.5.13-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-rest (>=2.5.0, <=2.5.13-hadoop3)

org.apache.hbase:hbase-rest MAVEN version =2.5.0, =2.5.0, =2.5.0, =2.5.13-hadoop3 Source cves: CVE-2026-49326 Source advisory: MEND:CVE-2026-49326...

org.apache.hbase:hbase-assembly (>=2.5.0, <=2.5.13-hadoop3), org.apache.hbase:hbase-examples (>=2.5.0, <=2.5.13-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-thrift (>=2.5.0, <=2.5.13-hadoop3)

org.apache.hbase:hbase-thrift MAVEN version =2.5.0, =2.5.0, =2.5.0, =2.5.13-hadoop3 Source cves: CVE-2026-49326 Source advisory: MEND:CVE-2026-49326...

org.apache.hbase:hbase-assembly (>=2.6.0, <=2.6.4-hadoop3), org.apache.hbase:hbase-examples (>=2.6.0, <=2.6.4-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-rest (>=2.6.0, <=2.6.4-hadoop3)

org.apache.hbase:hbase-rest MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.6.4-hadoop3 Source cves: CVE-2026-49326 Source advisory: MEND:CVE-2026-49326...

MAL-2026-10996 Malicious code in init-js-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6005f6b51f3286b65f92b6c8dd73d51c744f89428bbb238f2186b61b7112e6c2 The package's postinstall lifecycle hook runs setup.js, which opens a TCP socket to the hardcoded remote endpoint 130.61.90.45:4443 and wires the...

[SECURITY] Fedora 44 Update: mupdf-1.27.2-2.fc44

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

batchkit-examples-speechsdk (0.9.1), stringlifier (>=0.1.0.0, <=0.1.0.9) potentially affected by CVE-2026-59890 via setuptools (46.0.0)

setuptools PYPI version 46.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - batchkit-examples-speechsdk 0.9.1 - stringlifier =0.1.0.0, =0.1.0.9 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

clai (>=2.0.0b1, <=2.0.0b2), pydantic-ai (>=2.0.0b1, <=2.0.0b2) +2 more potentially affected by CVE-2026-48782 via pydantic-ai-slim (>=2.0.0b1, <=2.0.0b2)

pydantic-ai-slim PYPI version =2.0.0b1, =2.0.0b1, =2.0.0b1, =2.0.0b1, =2.0.0b1, =2.0.0b2 Source cves: CVE-2026-48782 Source advisory: OSV:PYSEC-2026-2981...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2026-40961 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2026-40961 Source advisory: OSV:PYSEC-2026-2345...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2026-42358 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2026-42358 Source advisory: OSV:PYSEC-2026-2343...

omnipy (>=0.15.3, <=0.15.12), omnipy-examples (>=0.6.5, <=0.6.8) potentially affected by CVE-2026-3515 via prefect (2.13.8)

prefect PYPI version 2.13.8 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - omnipy =0.15.3, =0.6.5, =0.6.8 Source cves: CVE-2026-3515 Source advisory: OSV:PYSEC-2026-2957...

omnipy (>=0.15.3, <=0.15.12), omnipy-examples (>=0.6.5, <=0.6.8) potentially affected by CVE-2026-7724 via prefect (2.13.8)

prefect PYPI version 2.13.8 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - omnipy =0.15.3, =0.6.5, =0.6.8 Source cves: CVE-2026-7724 Source advisory: OSV:PYSEC-2026-2959...

omnipy (>=0.15.3, <=0.15.12), omnipy-examples (>=0.6.5, <=0.6.8) potentially affected by CVE-2026-7725 via prefect (2.13.8)

prefect PYPI version 2.13.8 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - omnipy =0.15.3, =0.6.5, =0.6.8 Source cves: CVE-2026-7725 Source advisory: OSV:PYSEC-2026-2955...

omnipy (>=0.15.3, <=0.15.12), omnipy-examples (>=0.6.5, <=0.6.8) potentially affected by CVE-2026-7722 via prefect (2.13.8)

prefect PYPI version 2.13.8 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - omnipy =0.15.3, =0.6.5, =0.6.8 Source cves: CVE-2026-7722 Source advisory: OSV:PYSEC-2026-2956...

omnipy (>=0.15.3, <=0.15.12), omnipy-examples (>=0.6.5, <=0.6.8) potentially affected by CVE-2026-7723 via prefect (2.13.8)

prefect PYPI version 2.13.8 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - omnipy =0.15.3, =0.6.5, =0.6.8 Source cves: CVE-2026-7723 Source advisory: OSV:PYSEC-2026-2958...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2026-40690 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2026-40690 Source advisory: OSV:PYSEC-2026-2356...