blueprint-ytls (0.0.1), ctutils (>=0.0.0, <=0.3.2) potentially affected by CVE-2026-50185 via cmov (>=0.4.6, <=0.5.0-pre.0)

cmov CARGO version =0.4.6, =0.0.0, =0.3.2 Source cves: CVE-2026-50185 Source advisory: OSV:GHSA-3RJW-M598-PQ24...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +2 more potentially affected by CVE-2026-35673 via openclaw (>=2026.4.5, <=2026.4.12)

openclaw NPM version =2026.4.5, =0.8.7, =0.1.0, =0.1.8 - morpho-vault-manager 0.1.0 - openclaw-morpho-vault-manager 0.2.0 Source cves: CVE-2026-35673 Source advisory: OSV:GHSA-HCM3-8F6R-6XWG...

@chrysb/alphaclaw (>=0.8.7, <=0.9.16), @ericmmj/openclaw-weixin (>=2.2.4, <=2.2.5) +7 more potentially affected by CVE-2026-53815 via openclaw (>=2026.4.5, <=2026.5.7)

openclaw NPM version =2026.4.5, =0.8.7, =2.2.4, =4.0.0, =2.1.8, =0.1.0, =0.1.38, =0.1.39 - morpho-vault-manager 0.1.0 - openclaw-morpho-vault-manager 0.2.0 Source cves: CVE-2026-53815 Source advisory: GHSA-Q7Q8-3MGW-Q67R...

abnativ (>=1.1.0, <=1.2.9), ai-24sea (>=0.1.0, <=1.1.0) +217 more potentially affected by CVE-2026-8147 via mlflow (>=2.14.0, <=3.12.0)

mlflow PYPI version =2.14.0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =0.1.9, =0.1.40 and more Source cves: CVE-2026-8147 Source advisory: GHSA-2CM6-R77W-6G96...

ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +7515 more potentially affected by CVE-2026-9563 via org.eclipse.parsson:parsson (>=1.0.0, <=1.1.7)

org.eclipse.parsson:parsson MAVEN version =1.0.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0, =0.1.0, =0.1.1, =0.1.3 - ai.pipestream.module:module-embedder 0.1.1 and more Source cves:...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-54756 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-54756 Source advisory: SNYK:JS-JODIT-17796054...

coop (2.15.1), django-oscar-elasticsearch (>=2.0.3, <=2.0.7) +18 more potentially affected by CVE-2026-54262 via wagtail (2.15.6)

wagtail PYPI version 2.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop 2.15.1 - django-oscar-elasticsearch =2.0.3, =0.0.1, =0.1.0, =0.9.5, =0.2.0, =0.0.1, =1.2.0, =1.2.1 - wagtail-trash 0.2.0 and more Source cve...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-58263 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-58263 Source advisory: SNYK:JS-JODIT-17796040...

apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-50143 via @apify/actors-mcp-server (0.7.4)

@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-50143 Source advisory:...

apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-50143 via @apify/actors-mcp-server (0.7.4)

@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-50143 Source advisory: OSV:GHSA-6GR2-QH89-HXWM...

cleanunet-denoiser (>=0.0.1.dev1, <=0.0.1.dev3), depthflow (>=0.7.0.dev1, <=0.8.0) +4 more potentially affected by CVE-2026-49119 via gradio (4.44.0)

gradio PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cleanunet-denoiser =0.0.1.dev1, =0.7.0.dev1, =0.4.5, =0.5.9, =1.0.2, =1.0.8 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

depthflow (0.9.1), f5-tts (1.1.7) +10 more potentially affected by CVE-2026-49119 via gradio (5.35.0)

gradio PYPI version 5.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - depthflow 0.9.1 - f5-tts 1.1.7 - iflow-mcp-pdfmathtranslate-pdf2zh 1.9.11 - mseep-pdf2zh 1.9.11 - paper-reader 0.1.0 - particleanalyzer =0.1.28,...

jllama-py (>=1.0.0, <=1.1.14), llamafactory (0.9.3) potentially affected by CVE-2026-49119 via gradio (5.31.0)

gradio PYPI version 5.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - jllama-py =1.0.0, =1.1.14 - llamafactory 0.9.3 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

org.keycloak:keycloak-crypto-fips1402 (25.0.3), org.keycloak:keycloak-dependencies-server-all (25.0.3) +12 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (25.0.3)

org.keycloak:keycloak-services MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-crypto-fips1402 25.0.3 - org.keycloak:keycloak-dependencies-server-all 25.0....

org.keycloak:keycloak-dependencies-server-min (4.7.0.final), org.keycloak:keycloak-model-jpa (4.7.0.final) +2 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (4.7.0.final)

org.keycloak:keycloak-services MAVEN version 4.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.7.0.final - org.keycloak:keycloak-model-jpa...

de.adorsys.sts:keycloak-storage-provider (>=1.2.0, <=1.2.4), net.optionfactory.keycloak:optionfactory-keycloak-apple-identity-provider (>=6.5, <=6.9) +23 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (25.0.2)

org.keycloak:keycloak-services MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.2.0, =6.5, =6.5, =6.5, =6.5, =6.5, =6.5, =6.5, =6.5,...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.4), com.github.vzakharchenko:cisco-radius-plugin (1.4.4) +34 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (18.0.0)

org.keycloak:keycloak-services MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.4 -...

org.keycloak:keycloak-account-freemarker (1.8.0.cr2), org.keycloak:keycloak-broker-oidc (1.8.0.cr2) +9 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (1.8.0.cr2)

org.keycloak:keycloak-services MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.0.cr2 - org.keycloak:keycloak-broker-oidc 1.8.0.cr...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2873 more potentially affected by CVE-2026-55688 via org.asynchttpclient:async-http-client (>=2.0.0-alpha13, <=2.15.0)

org.asynchttpclient:async-http-client MAVEN version =2.0.0-alpha13, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-55688 Source advisory: SNYK:JAVA-ORGASYNCHTTPCLIENT-17796414...

ai.hyacinth.framework:core-service-trigger-server (>=0.5.0, <=0.5.24), ai.stainless:grails-tika (0.1.0) +5026 more potentially affected by CVE-2026-55153 via com.mchange:mchange-commons-java (>=0.2.2, <=0.5.0)

com.mchange:mchange-commons-java MAVEN version =0.2.2, =0.5.0, =0.0.1, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 and more Source cves: CVE-2026-55153 Source advisory: SNYK:JAVA-COMMCHANGE-17796416...