17769 matches found
ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +32176 more potentially affected by CVE-2026-54512 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.3)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...
ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +32176 more potentially affected by CVE-2026-54512 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.3)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...
ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +7893 more potentially affected by CVE-2026-54512 via tools.jackson.core:jackson-databind (>=3.0.0, <=3.1.3)
tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.0, =0.8.0, =0.6.0, =0.9.1 and more Source cves:...
@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +158 more potentially affected by CVE-2026-54326 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)
@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...
@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +158 more potentially affected by CVE-2026-54327 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)
@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...
@agentai2027/openclaw-zh (>=2026.5.2-zh, <=2026.5.7-zh), @cdogclaw/openclaw (2026.4.14) +41 more potentially affected by CVE-2026-54327 via @mariozechner/pi-coding-agent (>=0.18.8, <=0.73.0)
@mariozechner/pi-coding-agent NPM version =0.18.8, =2026.5.2-zh, =0.8.7, =2026.5.5-cmg.1, =2.2.4, =4.0.0, =2026.4.10-8, =0.1.0-next.27, =0.1.91, =0.18.3, =2026.4.5-nightly.202604080005, =1.0.0, =0.2.0, =0.0.0-main.4994268, =2.3.9 and more Source cves: CVE-2026-54327 Source advisory:...
ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +18507 more potentially affected by CVE-2026-54518 via com.fasterxml.jackson.core:jackson-databind (>=2.21.0, <=2.21.3)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.21.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.4.0, =1.1.1-beta, =1.1.1-beta, =1.0.0, =0.7.0, =1.3.0 and more Source cves: CVE-2026-54518 Source advisory: GHSA-RCQC-6CW3-H962...
ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +7914 more potentially affected by CVE-2026-54518 via tools.jackson.core:jackson-databind (>=3.0.0-rc1, <=3.1.3)
tools.jackson.core:jackson-databind MAVEN version =3.0.0-rc1, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.0, =0.8.0, =0.6.0, =0.9.1 and more Source cves...
ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +7893 more potentially affected by CVE-2026-54518 via tools.jackson.core:jackson-databind (>=3.0.0, <=3.1.3)
tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.0, =0.8.0, =0.6.0, =0.9.1 and more Source cves:...
ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +32176 more potentially affected by CVE-2026-54512 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.3)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...
ai.covia:covia-discord (>=0.9.8, <=0.9.9), ai.dezifi:dezifi-dak (>=0.1.0-beta.1, <=0.1.0) +6429 more potentially affected by CVE-2026-54515 via com.fasterxml.jackson.core:jackson-databind (2.22.0)
com.fasterxml.jackson.core:jackson-databind MAVEN version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.fasterxml.jackson.core:jackson-databind and may be impacted: - ai.covia:covia-discord =0.9.8, =0.1.0-beta.1, =1.4.0, =1.4.0, =1.4.0,...
ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +34057 more potentially affected by CVE-2026-54515 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.4)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...
ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +7893 more potentially affected by CVE-2026-54516 via tools.jackson.core:jackson-databind (>=3.0.0, <=3.1.3)
tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.0, =0.8.0, =0.6.0, =0.9.1 and more Source cves:...
homeassistant-stubs (2023.5.0), pytest-homeassistant-custom-component (0.13.28) potentially affected by CVE-2026-54317 via homeassistant (2023.5.0)
homeassistant PYPI version 2023.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.5.0 - pytest-homeassistant-custom-component 0.13.28 Source cves: CVE-2026-54317 Source advisory:...
@n8n/computer-use (0.10.0) potentially affected by CVE-2026-54309 via @n8n/mcp-browser (0.9.0)
@n8n/mcp-browser NPM version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/mcp-browser and may be impacted: - @n8n/computer-use 0.10.0 Source cves: CVE-2026-54309 Source advisory: SNYK:JS-N8NMCPBROWSER-17753475...
@regis-samurai/n8n (>=0.216.1, <=0.219.1), n8n-nodes-accelo (>=0.1.0, <=0.1.9) +11 more potentially affected by CVE-2026-44792 via n8n (>=0.81.0, <=0.219.1)
n8n NPM version =0.81.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-44792 Source advisory: MEND:CVE-2026-44792...
Malicious code in ts-sudo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6e18b2d6bef04dd8377fac8d9b20e5545f1ec39875fdd308adf118b6f319d1 The package publishes under the name ts-sudo but ships a verbatim copy of the big.js v7.0.1 source big.js, big.mjs along with big.js's description,...
@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by CVE-2026-54353 via @budibase/backend-core (>=3.0.0, <=3.2.26)
@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-54353 Source advisory: SNYK:JS-BUDIBASEBACKENDCORE-17675454...
budibase (>=0.0.3, <=0.0.31) potentially affected by CVE-2026-54352 via @budibase/server (>=0.0.1, <=0.0.31)
@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-54352 Source advisory: SNYK:JS-BUDIBASESERVER-17660566...
budibase (>=0.0.3, <=0.0.31) potentially affected by CVE-2026-50137 via @budibase/server (>=0.0.1, <=0.0.31)
@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-50137 Source advisory: SNYK:JS-BUDIBASESERVER-17660564...