org.sonatype.nexus.api.extdirect:nexus-api-extdirect-common (>=3.81.0-08 <=3.87.2-01), org.sonatype.nexus.api.extdirect:nexus-api-extdirect-selfhosted (>=3.81.0-08 <=3.87.2-01) +49 more potentially affected by CVE-2026-0601 via org.sonatype.nexus:nexus-extdirect (>=3.10.0-04 <=3.87.2-01)

org.sonatype.nexus:nexus-extdirect MAVEN version =3.10.0-04, =3.81.0-08, =3.81.0-08, =3.81.0-08, =3.81.0-08, =3.4.0-02, =3.60.0-02, =3.4.0-02, =3.21.0-01, =3.12.0-01, =3.4.0-02, =3.12.0-01, =3.4.0-02, =3.57.0-01, =3.23.0-01, =3.87.2-01 and more Source cves: CVE-2026-0601https://vulners.com/cve/C...

io.github.hWorblehat:nexus3-external-auth-plugin (=0.1.0), org.sonatype.nexus.api.extdirect:nexus-api-extdirect-common (>=3.81.0-08 <=3.87.2-01) +112 more potentially affected by CVE-2026-0600 via org.sonatype.nexus:nexus-validation (>=3.0.0-b2015061001 <=3.87.2-01)

org.sonatype.nexus:nexus-validation MAVEN version =3.0.0-b2015061001, =3.81.0-08, =3.81.0-08, =3.81.0-08, =3.81.0-08, =3.4.0-02, =3.60.0-02, =3.4.0-02, =3.21.0-01, =3.0.0-03, =3.4.0-02, =0.6.1, =0.10.2, =0.14.0 - org.sonatype.nexus.plugins:nexus-blobstore-restore =3.4.0-02 and more Source cves:...

@0k.io/prettier (>=0.0.2 <=0.0.3), @0k/prettier (>=0.2.0 <=0.2.1) +319 more potentially affected by CVE-2026-24001 via diff (>=4.0.1 <=4.0.2)

diff NPM version =4.0.1, =0.0.2, =0.2.0, =1.2.0, =0.3.2, =0.4.0-next.6, =7.0.0-alpha.0, =7.0.0-alpha.0, =7.0.0-alpha.0, =7.0.0-alpha.0, =7.0.0-alpha.0, =0.4.0, =1.5.0, =4.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2026-24001 Source advisory: OSV:GHSA-73RR-HH4G-FPGX...

@01.software/sdk (>=0.0.1-251008.90016 <=0.1.0-dev.260109.7cf07c9), @adenta/cms (>=0.0.6 <=1.1.1-0) +257 more potentially affected by CVE-2026-22036 via undici (>=7.0.0 <=7.18.0)

undici NPM version =7.0.0, =0.0.1-251008.90016, =0.0.6, =0.0.2, =0.0.33, =0.0.1, =1.0.0, =21.0.0, =0.5.0, =1.0.1-dev.120, =12.6.9, =0.1.6, =0.13.70, =1.13.0, =1.21.0 and more Source cves: CVE-2026-22036 Source advisory: OSV:GHSA-G9MF-H72J-4RW9...

@frontmcp/adapters (>=0.5.0 <=0.6.3), @frontmcp/plugins (>=0.5.0 <=0.6.3) +4 more potentially affected by CVE-2026-22686 via enclave-vm (=1.0.3)

enclave-vm NPM version =1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on enclave-vm and may be impacted: - @frontmcp/adapters =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.6.1, =0.6.3 - frontmcp =0.5.0 Source cves: CVE-2026-22686 Source advisory:...

org.apache.camel.springboot:camel-neo4j-starter (>=4.14.0 <=4.14.2) potentially affected by CVE-2025-66169 via org.apache.camel:camel-neo4j (>=4.14.0 <=4.14.2)

org.apache.camel:camel-neo4j MAVEN version =4.14.0, =4.14.0, =4.14.2 Source cves: CVE-2025-66169 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-14930769...

org.apache.camel.springboot:camel-neo4j-starter (>=4.14.0 <=4.14.2) potentially affected by CVE-2025-66169 via org.apache.camel:camel-neo4j (>=4.14.0 <=4.14.2)

org.apache.camel:camel-neo4j MAVEN version =4.14.0, =4.14.0, =4.14.2 Source cves: CVE-2025-66169 Source advisory: OSV:GHSA-4JRW-64VR-7G8M...

org.apache.camel.karaf:camel-neo4j (>=4.10.3 <=4.10.7), org.apache.camel.springboot:camel-neo4j-starter (>=4.10.0 <=4.10.7) potentially affected by CVE-2025-66169 via org.apache.camel:camel-neo4j (>=4.10.0 <=4.10.7)

org.apache.camel:camel-neo4j MAVEN version =4.10.0, =4.10.3, =4.10.0, =4.10.7 Source cves: CVE-2025-66169 Source advisory: OSV:GHSA-4JRW-64VR-7G8M...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @abyedev/hono-dotenv (=1.0.0) +408 more potentially affected by CVE-2026-22818 via hono (>=0.5.10 <=4.11.3)

hono NPM version =0.5.10, =0.1.8-fix.3, =5.0.0, =0.1.1, =0.0.1, =0.0.2-a, =0.1.22, =1.1.1, =0.0.1, =1.7.2, =1.7.1, =0.2.1, =0.6.1, =0.5.2, =0.5.4 - @babylen/legion =0.1.7 and more Source cves: CVE-2026-22818 Source advisory: OSV:GHSA-3VHC-576X-3QV4...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @any-code/agent (>=0.0.1 <=0.0.16) +126 more potentially affected by CVE-2026-22817 via hono (>=4.0.0 <=4.11.3)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.1, =1.7.2, =1.7.1, =0.2.1, =0.6.1, =0.5.2, =1.0.2, =4.0.0-alpha.28, =0.4.6, =1.1.54, =1.1.54, =0.1.0, =0.5.4 and more Source cves: CVE-2026-22817 Source advisory: SNYK:JS-HONO-14927374...

afipcaeqrdecode (=0.0.15), afw (>=0.0.6 <=0.0.21) +208 more potentially affected by CVE-2026-23949 via jaraco-context (>=5.3.0 <=6.0.2)

jaraco-context PYPI version =5.3.0, =0.0.6, =0.1.0, =0.1.23, =0.0.1, =0.9.5, =1.0.5, =0.1.6, =0.1.0, =0.0.2, =0.1.2, =1.0.1, =1.0.1.9 - azvaultcopy =1.0.0b1 and more Source cves: CVE-2026-23949 Source advisory: OSV:GHSA-58PV-8J8X-9VJ2...

@11kit/tiny-engine-plugin-robot (>=2.10.1 <=2.10.2), @123usmanhaider321/ui (>=0.1.6 <=0.1.8) +868 more potentially affected by CVE-2025-15056 via quill (=2.0.3)

quill NPM version =2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on quill and may be impacted: - @11kit/tiny-engine-plugin-robot =2.10.1, =0.1.6, =1.15.1-sim3, =3.0.0, =1.0.68, =3.6.2-social.2, =1.1.15, =1.0.4, =0.1.3, =1.0.0, =1.0.4144, =0.1.0,...

@jamietanna/renovate-graph (=0.30.0), @secustor/backstage-plugin-renovate-backend-module-runtime-direct (>=0.5.3 <=1.0.1) potentially affected by unknown CVE via renovate (>=39.60.0 <=40.21.2)

renovate NPM version =39.60.0, =0.5.3, =1.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XJR7-3C3G-M763...

d2m-apigen (>=1.0.1 <=2.1.7), orval (>=7.10.0 <=7.17.2) +1 more potentially affected by CVE-2026-22785 via @orval/mcp (>=7.10.0 <=7.17.2)

@orval/mcp NPM version =7.10.0, =1.0.1, =7.10.0, =7.10.0, =7.13.2 Source cves: CVE-2026-22785 Source advisory: SNYK:JS-ORVALMCP-14928070...

3m (>=0.1.0 <=0.1.3), aap-llamaindex (>=0.1.1.dev1 <=0.2.0) +349 more potentially affected by CVE-2024-58339 via llama-index (>=0.10.0 <=0.9.48)

llama-index PYPI version =0.10.0, =0.1.0, =0.1.1.dev1, =0.1.8, =0.0.2, =1.4.3, =0.1.0a0.dev0, =0.2.0a0, =0.1.0, =0.1.0a1, =0.0.1, =1.1.0, =1.4.0b2 and more Source cves: CVE-2024-58339 Source advisory: SNYK:PYTHON-LLAMAINDEX-14917160...

genai-agents (>=0.1.0 <=0.1.3), openagi (>=0.1.0b0 <=0.1.0b4) potentially affected by CVE-2024-58340 via langchain-exa (=0.0.1)

langchain-exa PYPI version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-exa and may be impacted: - genai-agents =0.1.0, =0.1.0b0, =0.1.0b4 Source cves: CVE-2024-58340 Source advisory: OSV:PYSEC-2026-75...

rm-gallery (>=0.1.0 <=0.1.2) potentially affected by CVE-2026-22033 via label-studio (=1.17.0)

label-studio PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - rm-gallery =0.1.0, =0.1.2 Source cves: CVE-2026-22033 Source advisory: SNYK:PYTHON-LABELSTUDIO-14914483...

a2 (>=0.1.0 <=0.3.17), abadpour (>=6.13.1 <=7.24.1) +946 more potentially affected by CVE-2025-14279 via mlflow (>=0.8.2 <=3.4.0)

mlflow PYPI version =0.8.2, =0.1.0, =6.13.1, =9.273.1, =1.1.0, =0.1.0, =0.1.0, =0.4.4, =0.3.0, =0.0.5, =1.0.0, =0.1.0, =1.1.1 - ai-helpers-pytorch-utils =0.1.0a1 - ailine-core =0.5.5 and more Source cves: CVE-2025-14279 Source advisory: OSV:GHSA-PGQP-8H46-6X4J...

be.objectify:objectify-struts2-tags (=1.0), br.net.woodstock.rockframework:rockframework-web (>=1.2.1 <=1.2.2) +58 more potentially affected by CVE-2025-68493 via com.opensymphony:xwork (>=2.0.4 <=2.1.3)

com.opensymphony:xwork MAVEN version =2.0.4, =1.2.1, =4.0.1, =0.9.2, =1.1.5, =1.3.3, =1.3.1, =2.0.5-incubating, =2.0.9, =2.0.11, =2.0.9, =2.0.9, =2.0.9, =2.1.6 - org.apache.struts:struts2-convention-plugin =2.1.6 and more Source cves: CVE-2025-68493 Source advisory: OSV:GHSA-QCFC-HMRC-59X7...

com.amazonaws.serverless:aws-serverless-java-container-struts2 (>=1.2 <=1.8.2), com.github.a-pz:struts2-thymeleaf3-plugin (>=1.0.3-RELEASE <=1.2.0-RELEASE) +164 more potentially affected by CVE-2025-68493 via org.apache.struts:struts2-core (>=2.5.1 <=2.5.33)

org.apache.struts:struts2-core MAVEN version =2.5.1, =1.2, =1.0.3-RELEASE, =1.1.9, =0.0.1, =6.0.0, =2.5.1, =2.5.1, =4.0.1 - com.jgeppert.struts2.jquery:struts2-jquery-chart-plugin =4.0.3 - com.jgeppert.struts2.jquery:struts2-jquery-datatables-plugin =4.0.3 -...