git-semver (>=0.1.2, <=0.1.5) potentially affected by CVE-2026-44244 via gitpython (2.0.9)

gitpython PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - git-semver =0.1.2, =0.1.5 Source cves: CVE-2026-44244 Source advisory: OSV:GHSA-V87R-6Q3F-2J67...

ironhide (>=1.0.0, <=1.0.7), rorm-cli (0.5.0) +1 more potentially affected by unknown CVE via rpassword (>=7.0.0, <=7.2.0)

rpassword CARGO version =7.0.0, =1.0.0, =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-2P6R-X3VV-XQM2...

@datalayer/jupyter-react (>=0.0.6, <=0.9.5), @jupyter-notebook/application (>=7.1.0-alpha.0, <=7.4.7) +7 more potentially affected by CVE-2026-42557 via @jupyterlab/rendermime-interfaces (>=3.1.18, <=3.12.10)

@jupyterlab/rendermime-interfaces NPM version =3.1.18, =0.0.6, =7.1.0-alpha.0, =0.1.0-alpha.23, =0.1.0-alpha.7, =0.3.0-alpha.0, =0.1.0-alpha.23, =0.0.23, =0.2.0-alpha.0, =0.1.1, =0.2.2 Source cves: CVE-2026-42557 Source advisory: SNYK:JS-JUPYTERLABRENDERMIMEINTERFACES-16438959...

@datalayer/jupyter-react (0.9.5) potentially affected by CVE-2026-42557 via @jupyterlab/apputils-extension (4.1.0-beta.0)

@jupyterlab/apputils-extension NPM version 4.1.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on @jupyterlab/apputils-extension and may be impacted: - @datalayer/jupyter-react 0.9.5 Source cves: CVE-2026-42557 Source advisory:...

@fails-components/jupyter-applet-view (>=0.0.1-alpha.3, <=0.0.1-alpha.18), @fails-components/jupyter-filesystem-extension (>=0.0.1-alpha.3, <=0.0.1-alpha.18) +3 more potentially affected by CVE-2026-42557 via @jupyterlab/help-extension (>=4.0.13, <=4.4.10)

@jupyterlab/help-extension NPM version =4.0.13, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.2.0-alpha.0, =0.6.0-alpha.9 Source cves: CVE-2026-42557 Source advisory: SNYK:JS-JUPYTERLABHELPEXTENSION-16438961...

@datalayer/jupyter-react (0.9.5) potentially affected by CVE-2026-42557 via @jupyterlab/markdownviewer-extension (4.1.0-beta.0)

@jupyterlab/markdownviewer-extension NPM version 4.1.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on @jupyterlab/markdownviewer-extension and may be impacted: - @datalayer/jupyter-react 0.9.5 Source cves: CVE-2026-42557 Source advisory:...

@datalayer/jupyter-react (0.9.5) potentially affected by CVE-2026-42557 via @jupyterlab/notebook-extension (4.1.0-beta.0)

@jupyterlab/notebook-extension NPM version 4.1.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on @jupyterlab/notebook-extension and may be impacted: - @datalayer/jupyter-react 0.9.5 Source cves: CVE-2026-42557 Source advisory:...

com.slack.api:bolt-micronaut (1.9.0), info.novatec:micronaut-camunda-bpm-feature (1.0.0) +51 more potentially affected by CVE-2026-44241 via io.micronaut:micronaut-context (2.5.9)

io.micronaut:micronaut-context MAVEN version 2.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-context and may be impacted: - com.slack.api:bolt-micronaut 1.9.0 - info.novatec:micronaut-camunda-bpm-feature 1.0.0 -...

com.agorapulse:micronaut-amazon-awssdk-cloudwatch (>=1.6.0-micronaut-2.0, <=2.1.12-micronaut-2.0), com.agorapulse:micronaut-amazon-awssdk-cloudwatchlogs (>=2.0.8-micronaut-2.0, <=2.1.12-micronaut-2.0) +85 more potentially affected by CVE-2026-44241 via io.micronaut:micronaut-context (2.5.13)

io.micronaut:micronaut-context MAVEN version 2.5.13 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-context and may be impacted: - com.agorapulse:micronaut-amazon-awssdk-cloudwatch =1.6.0-micronaut-2.0, =2.0.8-micronaut-2.0,...

com.bertramlabs.plugins:asset-pipeline-micronaut (>=3.3.1, <=4.3.0), com.slack.api:bolt-micronaut (>=1.2.0-rc1, <=1.2.1) +45 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (2.0.2)

io.micronaut:micronaut-inject MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - com.bertramlabs.plugins:asset-pipeline-micronaut =3.3.1, =1.2.0-rc1, =0.0.1, =0.0.3, =2.0.0, =2.0.0,...

ai.stainless:grails-tika (0.1.0), com.ainrif.apiator:micronaut-provider (>=0.13.0, <=0.13.2) +91 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (1.1.4)

io.micronaut:micronaut-inject MAVEN version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - ai.stainless:grails-tika 0.1.0 - com.ainrif.apiator:micronaut-provider =0.13.0, =1.0.0, =1.3.0, =1.3....

com.github.goodforgod:micronaut-arangodb (2.1.0), com.github.goodforgod:micronaut-clickhouse (2.1.0) +55 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (2.1.1)

io.micronaut:micronaut-inject MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - com.github.goodforgod:micronaut-arangodb 2.1.0 - com.github.goodforgod:micronaut-clickhouse 2.1.0 -...

io.micronaut.configuration:micronaut-cassandra (1.2.0.rc1), io.micronaut.configuration:micronaut-hibernate-validator (1.2.0.rc1) +32 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (1.2.0.rc1)

io.micronaut:micronaut-inject MAVEN version 1.2.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - io.micronaut.configuration:micronaut-cassandra 1.2.0.rc1 -...

de.codecentric.hikaku:hikaku-micronaut (3.0.1), io.eventuate.common:eventuate-common-micronaut-data-jdbc (0.13.0.release) +58 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (1.2.4)

io.micronaut:micronaut-inject MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - de.codecentric.hikaku:hikaku-micronaut 3.0.1 - io.eventuate.common:eventuate-common-micronaut-data-jd...

elib (>=0.1.55, <=0.1.57), emiz (>=0.1.35, <=2018.4.2.1) +11 more potentially affected by CVE-2026-44243 via gitpython (2.1.8)

gitpython PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elib =0.1.55, =0.1.35, =0.2.4a149, =0.0.1, =1.0.0, =0.4233.0, =0.2354.0, =0.2354.0, =0.1.7, =0.2.120, =1.0.0, =0.1.0, =2.1.1 Source cves:...

@activeboxes/piece-sftp (0.2.6), @activepieces/piece-apify (0.2.1) +28 more potentially affected by CVE-2026-44240 via basic-ftp (>=5.0.2, <=5.3.0)

basic-ftp NPM version =5.0.2, =0.2.6, =1.0.0, =0.2.0, =0.1.0, =1.0.0, =2.0.18, =1.9.2, =1.2.0, =4.6.0-blowfish, =1.0.3, =1.0.4 and more Source cves: CVE-2026-44240 Source advisory: SNYK:JS-BASICFTP-16438941...

@activeboxes/piece-sftp (0.2.6), @activepieces/piece-apify (0.2.1) +28 more potentially affected by CVE-2026-44240 via basic-ftp (>=5.0.2, <=5.3.0)

basic-ftp NPM version =5.0.2, =0.2.6, =1.0.0, =0.2.0, =0.1.0, =1.0.0, =2.0.18, =1.9.2, =1.2.0, =4.6.0-blowfish, =1.0.3, =1.0.4 and more Source cves: CVE-2026-44240 Source advisory: OSV:GHSA-RPMF-866Q-6P89...

@c0va23/react-router-dev (7.8.3-alpha.2), @holocron.so/cli (>=0.6.0, <=0.16.0) +16 more potentially affected by CVE-2026-23870 via @vitejs/plugin-rsc (>=0.4.11, <=0.5.24)

@vitejs/plugin-rsc NPM version =0.4.11, =0.6.0, =0.5.0, =0.0.1, =0.0.0-1ae0b37, =0.0.0-experimental-14dc7c1, =0.0.0-pr-32412-sha-076721d1, =1.0.2, =0.1.0, =0.1.1, =0.0.1, =1.18.0-rsc.19, =0.1.0, =0.0.1-alpha.0, =0.0.1-alpha.1 and more Source cves: CVE-2026-23870 Source advisory:...

@amazeelabs/bridge-waku (>=1.1.9, <=2.0.1), @amazeelabs/executors (>=3.1.12, <=3.1.14) +20 more potentially affected by CVE-2026-23870 via react-server-dom-webpack (>=19.0.0, <=19.0.1)

react-server-dom-webpack NPM version =19.0.0, =1.1.9, =3.1.12, =1.4.7, =1.1.3, =1.0.0-canary.12859, =1.0.0-canary.12859, =1.0.0-canary.12859, =1.0.0-canary.12859, =1.0.0-canary.12859, =1.0.0-canary.12859, =1.0.0-canary.12859, =1.0.0-canary.12859, =1.0.0-canary.12859, =1.0.0-canary.12859,...

@0xchain/empty (>=0.0.1, <=1.1.0-beta.4), @0xchain/expandable-text (>=0.0.1, <=1.1.0-beta.18) +15 more potentially affected by unknown CVE via next-intl (>=4.0.2, <=4.9.1)

next-intl NPM version =4.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =3.8.0, =1.28.0, =0.0.3, =1.4.88, =1.5.37 and more Source cves: unknown CVE Source advisory: SNYK:JS-NEXTINTL-16438971...