ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18214 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18214 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752077...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18215 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18215 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752074...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +445 more potentially affected by CVE-2026-17459 via com.sparkjava:spark-core (>=1.0, <=2.9.4)

com.sparkjava:spark-core MAVEN version =1.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.6.1,...

ch.j3t:zio-prefetcher_2.12 (>=0.3.0, <=0.8.0-rc6), com.akolov:doorman-core_2.12 (0.0.5) +148 more potentially affected by CVE-2026-73493 via org.http4s:http4s-blaze-server_2.12 (>=0.15.0a, <=1.0-234-d1a2b53)

org.http4s:http4s-blaze-server2.12 MAVEN version =0.15.0a, =0.3.0, =0.3.0, =0.18.1, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.0.6-m4, =0.0.6-m4, =0.0.13, =0.0.13, =0.0.30 and more Source cves: CVE-2026-73493 Source advisory: SNYK:JAVA-ORGHTTP4S-18313134...

ch.j3t:zio-prefetcher_2.12 (>=0.3.0, <=0.8.0-rc6), com.47deg:embedded-cassandra-core_2.12 (0.0.7) +231 more potentially affected by CVE-2026-73493 via org.http4s:http4s-blaze-core_2.12 (>=0.10.0-m10, <=1.0-234-d1a2b53)

org.http4s:http4s-blaze-core2.12 MAVEN version =0.10.0-m10, =0.3.0, =0.22.0, =0.13.2, =0.2.6, =0.3.0, =0.18.1, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.19.3 and more Source cves: CVE-2026-73493 Source advisory: SNYK:JAVA-ORGHTTP4S-18313135...

ch.j3t:zio-prefetcher_2.12 (>=0.3.0, <=0.8.0-rc6), com.akolov:doorman-core_2.12 (0.0.5) +148 more potentially affected by CVE-2026-73495 via org.http4s:http4s-blaze-server_2.12 (>=0.15.0a, <=1.0-234-d1a2b53)

org.http4s:http4s-blaze-server2.12 MAVEN version =0.15.0a, =0.3.0, =0.3.0, =0.18.1, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.0.6-m4, =0.0.6-m4, =0.0.13, =0.0.13, =0.0.30 and more Source cves: CVE-2026-73495 Source advisory: SNYK:JAVA-ORGHTTP4S-18313125...

ch.j3t:zio-prefetcher_2.12 (>=0.3.0, <=0.8.0-rc6), com.akolov:doorman-core_2.12 (0.0.5) +148 more potentially affected by unknown CVE via org.http4s:http4s-blaze-server_2.12 (>=0.15.0a, <=1.0-234-d1a2b53)

org.http4s:http4s-blaze-server2.12 MAVEN version =0.15.0a, =0.3.0, =0.3.0, =0.18.1, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.0.6-m4, =0.0.6-m4, =0.0.13, =0.0.13, =0.0.30 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGHTTP4S-18313139...

io.javalin.community.openapi:javalin-redoc-plugin (>=5.0.0, <=5.2.0), io.javalin.community.openapi:openapi-test (>=5.0.0, <=5.0.1) +41 more potentially affected by CVE-2026-73643 via org.webjars.npm:js-yaml (>=3.1.0, <=4.3.1)

org.webjars.npm:js-yaml MAVEN version =3.1.0, =5.0.0, =5.0.0, =9.0.6, =2.0.0, =2.1.3, =0.1.3, =1.1.4, =2.1.0, =4.0.3 and more Source cves: CVE-2026-73643 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-18313071...

ca.wheatstalk:cdk-ecs-keycloak (>=0.0.28, <=0.0.164), com.cloudcamphq:aws-runtime (>=0.0.1-alpha.8, <=0.0.1-alpha.9) +25 more potentially affected by unknown CVE via software.amazon.awscdk:codebuild (>=0.8.0, <=1.204.0)

software.amazon.awscdk:codebuild MAVEN version =0.8.0, =0.0.28, =0.0.1-alpha.8, =0.1.0, =0.5.2, =0.0.10, =1.0.60, =0.5.232, =1.7.11, =0.1.3, =0.0.11, =0.0.16, =0.0.6, =0.0.13, =1.28.0, =0.15.0, =1.204.0 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-SOFTWAREAMAZONAWSCDK-18318523...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18218 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18218 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752084...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-17059 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-17059 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752090...

Oracle Linux 8 : maven:3.8 (ELSA-2026-40841)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-40841 advisory. - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165339 Tenable has extracted the preceding description block directly from the...

ROOT-APP-MAVEN-CVE-2023-2976 CVE-2023-2976 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2023-2976 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-10237 CVE-2018-10237 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2018-10237 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-42503 CVE-2023-42503 in io.root.org.apache.commons:commons-compress - Patched by Root

Root has patched CVE-2023-42503 in the io.root.org.apache.commons:commons-compress package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-25710 CVE-2024-25710 in io.root.org.apache.commons:commons-compress - Patched by Root

Root has patched CVE-2024-25710 in the io.root.org.apache.commons:commons-compress package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-26308 CVE-2024-26308 in io.root.org.apache.commons:commons-compress - Patched by Root

Root has patched CVE-2024-26308 in the io.root.org.apache.commons:commons-compress package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-49270 CVE-2026-49270 in io.root.org.apache.activemq:activemq-broker - Patched by Root

Root has patched CVE-2026-49270 in the io.root.org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-66168 CVE-2025-66168 in io.root.org.apache.activemq:activemq-mqtt - Patched by Root

Root has patched CVE-2025-66168 in the io.root.org.apache.activemq:activemq-mqtt package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-33227 CVE-2026-33227 in io.root.org.apache.activemq:activemq-client - Patched by Root

Root has patched CVE-2026-33227 in the io.root.org.apache.activemq:activemq-client package for Root:Maven. Multiple fixed versions available...