bigquery-fdw (>=2.1.1, <=2.1.2), bxsolana-trader (1.7.0) +6 more potentially affected by CVE-2026-0994 via protobuf (4.21.8)

protobuf PYPI version 4.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bigquery-fdw =2.1.1, =0.0.13, =0.2.0, =0.0.2, =0.4.0, =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: tflint, knative-eventing, litestream, kubernetes-csi-node-driver-registrar, wuzz, kubernetes-event-exporter, kubernetes-dashboard-auth, kserve-rest-proxy, logstash-exporter, kubernetes-ingress-defaultbackend, rancher-agent, pdfcpu, influx, kuberlr,...