io.camunda.connector:connector-runtime-bundle (>=8.5.17, <=8.5.22), io.camunda.connector:connector-soap (>=8.5.17, <=8.9.0-alpha2) +2 more potentially affected by CVE-2026-41000 via org.springframework.ws:spring-ws-security (>=4.1.0, <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.1.0, =8.5.17, =8.5.17, =8.5.17, =7.3.0-rc2, =7.3.8.3 Source cves: CVE-2026-41000 Source advisory: MEND:CVE-2026-41000...

io.camunda.connector:connector-runtime-bundle (>=8.5.17, <=8.5.22), io.camunda.connector:connector-soap (>=8.5.17, <=8.9.0-alpha2) +2 more potentially affected by CVE-2026-40995 via org.springframework.ws:spring-ws-security (>=4.1.0, <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.1.0, =8.5.17, =8.5.17, =8.5.17, =7.3.0-rc2, =7.3.8.3 Source cves: CVE-2026-40995 Source advisory: MEND:CVE-2026-40995...

io.camunda.connector:connector-runtime-bundle (>=8.5.17, <=8.5.22), io.camunda.connector:connector-soap (>=8.5.17, <=8.9.0-alpha2) +2 more potentially affected by CVE-2026-40994 via org.springframework.ws:spring-ws-security (>=4.1.0, <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.1.0, =8.5.17, =8.5.17, =8.5.17, =7.3.0-rc2, =7.3.8.3 Source cves: CVE-2026-40994 Source advisory: MEND:CVE-2026-40994...

Font Generator for Embedded Bitmap and Color Glyph Pipeline Robustness Testing

This Python program constructs a handcrafted TrueType font file that combines multiple font subsystems - including embedded bitmap tables, color glyph definitions, glyph mapping structures, and minimal layout metadata - into a single synthetic test artifact...

PT-2026-48690

Name of the Vulnerable Software and Affected Versions OpenZeppelin Contracts Wizard versions prior to 0.10.9 Description OpenZeppelin Contracts Wizard is a web application used to interactively build contracts. The application generates Hardhat test/test.ts and Foundry test/.t.sol example test...

CVE-2026-49842

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, modverto's WebSocket frame loop intercepts a -prefixed speed-test protocol SPU / SPB / SP...

MAL-2026-5528 Malicious code in events-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac4806dc5c887c91db1f2570abcae5b98d62dfae36bea2ddb9e2449efd62eca Package name and description impersonate the popular events package Node's event emitter for all engines. The vendored events.js adds an undocumented...

CVE-2026-48859

Observable Timing Discrepancy vulnerability in Erlang/OTP ssh sshauth, sshoptions modules allows unauthenticated remote username enumeration via timing side-channel in password authentication. When the SSH daemon is configured with the userpasswords or password option, sshauth:checkpassword/3...

Turn specs into evals for any agent with ASSERT

Today, we’re releasing Adaptive Spec-driven Scoring for Evaluation and Regression Testing ASSERT, an open-source framework for turning natural-language behavior specifications into executable evaluations. Every team building an AI system starts with a clear intention for the behaviors they want t...

Turn specs into evals for any agent with ASSERT

Today, we’re releasing Adaptive Spec-driven Scoring for Evaluation and Regression Testing ASSERT, an open-source framework for turning natural-language behavior specifications into executable evaluations. Every team building an AI system starts with a clear intention for the behaviors they want t...

org.jenkins-ci.main:jenkins-test-harness (1.462), org.jenkins-ci.main:jenkins-war (1.462) +6 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.462)

org.jenkins-ci.main:jenkins-core MAVEN version 1.462 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.462 - org.jenkins-ci.main:jenkins-war 1.462 -...

org.jenkins-ci.main:jenkins-test-harness (1.447.2), org.jenkins-ci.main:jenkins-war (1.447.2) +2 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.447.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.447.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.447.2 - org.jenkins-ci.main:jenkins-war 1.447.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.473), org.jenkins-ci.main:jenkins-war (1.473) +5 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.473)

org.jenkins-ci.main:jenkins-core MAVEN version 1.473 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.473 - org.jenkins-ci.main:jenkins-war 1.473 -...

org.jenkins-ci.main:jenkins-test-harness (1.517), org.jenkins-ci.main:jenkins-war (1.517) +5 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.517)

org.jenkins-ci.main:jenkins-core MAVEN version 1.517 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.517 - org.jenkins-ci.main:jenkins-war 1.517 -...

org.jenkins-ci.main:jenkins-test-harness (1.462), org.jenkins-ci.main:jenkins-war (1.462) +6 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.462)

org.jenkins-ci.main:jenkins-core MAVEN version 1.462 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.462 - org.jenkins-ci.main:jenkins-war 1.462 -...

org.jenkins-ci.main:jenkins-test-harness (1.517), org.jenkins-ci.main:jenkins-war (1.517) +5 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.517)

org.jenkins-ci.main:jenkins-core MAVEN version 1.517 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.517 - org.jenkins-ci.main:jenkins-war 1.517 -...

org.jenkins-ci.main:jenkins-test-harness (1.628), org.jenkins-ci.main:jenkins-war (1.628) +3 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.628)

org.jenkins-ci.main:jenkins-core MAVEN version 1.628 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.628 - org.jenkins-ci.main:jenkins-war 1.628 -...

org.jenkins-ci.main:jenkins-test-harness (1.406), org.jenkins-ci.main:jenkins-war (1.406) +7 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.406)

org.jenkins-ci.main:jenkins-core MAVEN version 1.406 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.406 - org.jenkins-ci.main:jenkins-war 1.406 -...

org.jenkins-ci.main:jenkins-test-harness (1.473), org.jenkins-ci.main:jenkins-war (1.473) +5 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.473)

org.jenkins-ci.main:jenkins-core MAVEN version 1.473 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.473 - org.jenkins-ci.main:jenkins-war 1.473 -...

org.jenkins-ci.main:jenkins-test-harness (1.462), org.jenkins-ci.main:jenkins-war (1.462) +6 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.462)

org.jenkins-ci.main:jenkins-core MAVEN version 1.462 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.462 - org.jenkins-ci.main:jenkins-war 1.462 -...