@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107297 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107297 Source advisory: MEND:CVE-2026-107297...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +17 more potentially affected by CVE-2026-107295 via pydantic-ai-slim (>=2.0.0b1, <=2.27.1)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0, =0.1.0rc0, =0.0.2, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =2.0.0b1, =1.0.1, =1.1.0 and more Source cves: CVE-2026-107295 Source advisory: MEND:CVE-2026-107295...

clai (>=1.77.0, <=1.107.1), compas-lca (>=1.0.0, <=1.0.2) +18 more potentially affected by CVE-2026-107294 via pydantic-ai (>=1.77.0, <=1.107.1)

pydantic-ai PYPI version =1.77.0, =1.77.0, =1.0.0, =1.1.0, =0.1.102, =26.1.0, =0.2.0, =26.1.0rc1, =0.9.1, =1.2.2 - murmur-runtime 0.1.0 - open-aura 0.1.0 - opsmith-cli 0.4.6b0 - peven 0.2.3 and more Source cves: CVE-2026-107294 Source advisory: MEND:CVE-2026-107294...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +77 more potentially affected by CVE-2026-107294 via pydantic-ai-slim (>=1.0.0b1, <=1.107.1)

pydantic-ai-slim PYPI version =1.0.0b1, =0.41.0, =0.1.14.13, =0.0.2, =1.0.0b1, =0.0.193, =1.0.0, =0.1.0, =0.10.0, =1.2.0 - eea-genai-blocks 1.0.0 - eea-genai-core 1.2.0 - eea-genai-summary 1.0.0 and more Source cves: CVE-2026-107294 Source advisory: MEND:CVE-2026-107294...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +77 more potentially affected by CVE-2026-107293 via pydantic-ai-slim (>=1.0.0b1, <=1.107.2)

pydantic-ai-slim PYPI version =1.0.0b1, =0.41.0, =0.1.14.13, =0.0.2, =1.0.0b1, =0.0.193, =1.0.0, =0.1.0, =0.10.0, =1.2.0 - eea-genai-blocks 1.0.0 - eea-genai-core 1.2.0 - eea-genai-summary 1.0.0 and more Source cves: CVE-2026-107293 Source advisory: MEND:CVE-2026-107293...

EUVD-2026-94527

Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107228 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107228 Source advisory: OSV:GHSA-2JWH-9RMR-J4XF...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2425 more potentially affected by CVE-2026-107228 via org.asynchttpclient:async-http-client (>=2.1.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-107228 Source advisory: OSV:GHSA-2JWH-9RMR-J4XF...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2024-53990 +1 more via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2024-53990, CVE-2026-107228 Source advisory: GHSA-2JWH-9RMR-J4XFhttps://vuln...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2425 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=2.1.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-107226 Source advisory: GHSA-P2JM-6HJ6-9RJG...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107226 Source advisory: GHSA-P2JM-6HJ6-9RJG...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2425 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=2.1.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-107226 Source advisory: OSV:GHSA-P2JM-6HJ6-9RJG...

ROOT-APP-NPM-GHSA-G9R4-XPMJ-MJ65 GHSA-g9r4-xpmj-mj65 in handlebars - Patched by Root

Root has patched GHSA-g9r4-xpmj-mj65 in the handlebars package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-106446 CVE-2026-106446 in handlebars - Patched by Root

Root has patched CVE-2026-106446 in the handlebars package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2019-20920 CVE-2019-20920 in handlebars - Patched by Root

Root has patched CVE-2019-20920 in the handlebars package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2019-19919 CVE-2019-19919 in handlebars - Patched by Root

Root has patched CVE-2019-19919 in the handlebars package for Root:npm. Multiple fixed versions available...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107230 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107230 Source advisory: OSV:GHSA-V2J5-22FR-J62R...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2859 more potentially affected by CVE-2026-107230 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-107230 Source advisory: GHSA-V2J5-22FR-J62R...

agent-utilities (>=0.41.0, <=0.51.0), clai (>=1.77.0, <=1.107.5) +37 more potentially affected by CVE-2026-107290 via pydantic-ai-slim (>=1.77.0, <=1.107.5)

pydantic-ai-slim PYPI version =1.77.0, =0.41.0, =1.77.0, =0.0.445, =1.0.0, =1.1.0, =1.0.25, =0.1.102, =26.1.0, =0.1.1, =0.2.0, =0.2.1 - jupydeep 0.1.6 and more Source cves: CVE-2026-107290 Source advisory: OSV:GHSA-FPF4-VWCP-V4HP...

acpkit (>=1.5.0, <=1.9.0), akgentic-llm (>=2.1.0, <=2.2.0) +26 more potentially affected by CVE-2026-107290 via pydantic-ai (>=2.0.0b1, <=2.43.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =2.1.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =1.2.3 - isek 0.3.0 - kubeagent-cli 1.0.0 and more Source cves: CVE-2026-107290 Source advisory: OSV:GHSA-FPF4-VWCP-V4HP...