airgoodies (>=0.0.1a0, <=0.0.4), py-orca (>=1.3.4, <=1.3.5) potentially affected by CVE-2026-33264 via apache-airflow (2.7.2)

apache-airflow PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airgoodies =0.0.1a0, =1.3.4, =1.3.5 Source cves: CVE-2026-33264 Source advisory: OSV:PYSEC-2026-2082...

SUSE CVE-2022-46289

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.nAtoms...

SUSE CVE-2022-46290

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.The loop that...

orca-sdk (>=0.0.78, <=0.1.1) potentially affected by CVE-2026-49119 via gradio (5.13.0)

gradio PYPI version 5.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - orca-sdk =0.0.78, =0.1.1 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

orca-sdk (>=0.0.78, <=0.1.1) potentially affected by CVE-2026-49119 via gradio (5.13.0)

gradio PYPI version 5.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - orca-sdk =0.0.78, =0.1.1 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

GHSA-5RFF-8F7C-8JMW Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)

Summary A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file. Details A second variant of the nAtoms out-of-bounds write in the ORCA reader: a different malformed-input path produced the same class of write past the end of the...

EUVD-2022-49108

Open Babel has out-of-bounds write in ORCA nAtoms parser second variant...

Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)

Summary A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file. Details A second variant of the nAtoms out-of-bounds write in the ORCA reader: a different malformed-input path produced the same class of write past the end of the...

GHSA-RJ4C-R689-CM87 Open Babel has out-of-bounds write in ORCA nAtoms parser

Summary A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the nAtoms handling of the ORCA reader. A malformed input caused the parser to write past the end of its destination buffer. Impact Open Babe...

Open Babel has out-of-bounds write in ORCA nAtoms parser

Summary A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the nAtoms handling of the ORCA reader. A malformed input caused the parser to write past the end of its destination buffer. Impact Open Babe...

PT-2026-55101

Summary A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file. Details A second variant of the nAtoms out-of-bounds write in the ORCA reader: a different malformed-input path produced the same class of write past the end of the...

PT-2026-55158

Summary A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the nAtoms handling of the ORCA reader. A malformed input caused the parser to write past the end of its destination buffer. Impact Open Babe...

io.spinnaker.kayenta:kayenta-atlas (main-321), io.spinnaker.kayenta:kayenta-aws (main-321) +65 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (main-321)

io.spinnaker.orca:orca-core MAVEN version main-321 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.kayenta:kayenta-atlas main-321 - io.spinnaker.kayenta:kayenta-aws main-321 -...

io.spinnaker.kayenta:kayenta-atlas (main-293), io.spinnaker.kayenta:kayenta-aws (main-293) +64 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (main-293)

io.spinnaker.orca:orca-core MAVEN version main-293 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.kayenta:kayenta-atlas main-293 - io.spinnaker.kayenta:kayenta-aws main-293 -...

io.spinnaker.kayenta:kayenta-atlas (main-336), io.spinnaker.kayenta:kayenta-aws (main-336) +65 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (main-336)

io.spinnaker.orca:orca-core MAVEN version main-336 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.kayenta:kayenta-atlas main-336 - io.spinnaker.kayenta:kayenta-aws main-336 -...

io.spinnaker.orca:orca-api-tck (8.44.0), io.spinnaker.orca:orca-applications (8.44.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.44.0)

io.spinnaker.orca:orca-core MAVEN version 8.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.44.0 - io.spinnaker.orca:orca-applications 8.44.0 -...

io.spinnaker.kayenta:kayenta-atlas (main-330), io.spinnaker.kayenta:kayenta-aws (main-330) +65 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (main-330)

io.spinnaker.orca:orca-core MAVEN version main-330 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.kayenta:kayenta-atlas main-330 - io.spinnaker.kayenta:kayenta-aws main-330 -...

Deserialization of Untrusted Data

Overview io.spinnaker.orca:orca-clouddriver is a Spinnaker Orca Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the YAML processing. An attacker can execute arbitrary code by supplying crafted YAML input that triggers unsafe class loading during operations...

io.spinnaker.kayenta:kayenta-atlas (2.43.0), io.spinnaker.kayenta:kayenta-aws (2.43.0) +64 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.60.0)

io.spinnaker.orca:orca-core MAVEN version 8.60.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.kayenta:kayenta-atlas 2.43.0 - io.spinnaker.kayenta:kayenta-aws 2.43.0 -...

io.spinnaker.orca:orca-api-tck (8.38.0), io.spinnaker.orca:orca-applications (8.38.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.38.0)

io.spinnaker.orca:orca-core MAVEN version 8.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.38.0 - io.spinnaker.orca:orca-applications 8.38.0 -...