org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68080 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68080 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352510...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68077 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68077 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352520...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to unchecked AMQP 1.0 type nesting in the SectionDecoderImpl and related codec constructors in broker-plugins/amqp-1-0-protocol. An unauthenticated attacker can trigger a StackOverflowError by sending a crafte...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68073 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68073 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19350837...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68078 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68078 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19500652...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68075 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68075 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19351108...

Mr.SIP — Updated!

SIP Security, Attack and Audit Framework Mr.SIP is a simple, console-bas...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68080 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68080 Source advisory: MEND:CVE-2026-68080...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68078 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68078 Source advisory: MEND:CVE-2026-68078...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68077 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68077 Source advisory: MEND:CVE-2026-68077...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68075 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68075 Source advisory: MEND:CVE-2026-68075...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68073 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68073 Source advisory: MEND:CVE-2026-68073...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68060 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68060 Source advisory: MEND:CVE-2026-68060...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68074 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68074 Source advisory: MEND:CVE-2026-68074...

Malicious code in ckcc-protocol (npm)

Source: ossf-package-analysis 61a440517bf97875e91920faabc309da8fa1bfe264e510fa54e5ffa210bd1d15 The OpenSSF Package Analysis project identified 'ckcc-protocol' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

slater v0.24.4

Slater Current version:v0.25.2 — all releases. In one line: Slater serves graphs that don't fit in memory — hundreds of millions of nodes and billions of edges in low hundreds of MB of RAM — over standard Bolt , so any neo4j driver just works, with disk-native vector search sitting next to the...

Access of Resource Using Incompatible Type ('Type Confusion')

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' in ProtocolMappersClientRegistrationPolicy via th...

MAL-2026-12064 Malicious code in ckcc-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebcdc07616ec6ab418a9005e1486d05f3753dc4d37f6ce61c5daed495d31e25 The npm package [email protected] typosquats the legitimate Coldcard ckcc-protocol tool and ships no functionality index.js exports . Its...

Malicious code in ckcc-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebcdc07616ec6ab418a9005e1486d05f3753dc4d37f6ce61c5daed495d31e25 The npm package [email protected] typosquats the legitimate Coldcard ckcc-protocol tool and ships no functionality index.js exports . Its...

Vulnerability in Cosminexus HTTP Server

Overview VulnerabilityCVE-2026-48913 has been found in Cosminexus HTTP Server. This vulnerability does not apply if HTTP/2 protocol is disabled. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the...