ac-solver (=0.1.0), acedeploy (>=2.4.15 <=2.4.342) +909 more potentially affected by CVE-2026-44243 via gitpython (>=0.3.4 <=3.1.47)

gitpython PYPI version =0.3.4, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =0.0.5, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =1.0.3, =0.1.8, =0.87.2.dev9, =0.5.0, =0.86.1 and more Source cves: CVE-2026-44243 Source advisory: OSV:GHSA-7545-FCXQ-7J24...

ac-solver (=0.1.0), acedeploy (>=2.4.15 <=2.4.342) +764 more potentially affected by CVE-2026-44243 via gitpython (>=3.0.0 <=3.1.47)

gitpython PYPI version =3.0.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =0.0.5, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =1.0.3, =0.1.8, =0.87.2.dev9, =0.5.0, =0.86.1 and more Source cves: CVE-2026-44243 Source advisory: SNYK:PYTHON-GITPYTHON-16438979...

@activeboxes/piece-sftp (=0.2.6), @activepieces/piece-apify (=0.2.1) +28 more potentially affected by CVE-2026-44240 via basic-ftp (>=5.0.2 <=5.3.0)

basic-ftp NPM version =5.0.2, =0.2.6, =1.0.0, =0.2.0, =0.1.0, =1.0.0, =2.0.18, =1.9.2, =1.2.0, =4.6.0-blowfish, =1.0.3, =1.0.4 and more Source cves: CVE-2026-44240 Source advisory: SNYK:JS-BASICFTP-16438941...

@0xchain/empty (>=0.0.1 <=1.1.0-beta.4), @0xchain/expandable-text (>=0.0.1 <=1.1.0-beta.18) +101 more potentially affected by unknown CVE via next-intl (>=4.0.2 <=4.9.1)

next-intl NPM version =4.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1, =0.1.0, =0.1.1, =2.2.0, =2.5.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-NEXTINTL-16438971...

pic-rucio (>=0.0.1 <=2024.10.3.71620) potentially affected by CVE-2026-29090 via rucio (=1.30.5)

rucio PYPI version =1.30.5 is affected by a known vulnerability. The following packages have a transitive dependency on rucio and may be impacted: - pic-rucio =0.0.1, =2024.10.3.71620 Source cves: CVE-2026-29090 Source advisory: OSV:GHSA-6J7P-QJHG-9947...

pic-rucio (>=0.0.1 <=2024.10.3.71620) potentially affected by CVE-2026-29090 via rucio (=1.30.5)

rucio PYPI version =1.30.5 is affected by a known vulnerability. The following packages have a transitive dependency on rucio and may be impacted: - pic-rucio =0.0.1, =2024.10.3.71620 Source cves: CVE-2026-29090 Source advisory: SNYK:PYTHON-RUCIO-16635087...

pic-rucio (>=0.0.1 <=2024.10.3.71620) potentially affected by CVE-2026-29080 via rucio (=1.30.5)

rucio PYPI version =1.30.5 is affected by a known vulnerability. The following packages have a transitive dependency on rucio and may be impacted: - pic-rucio =0.0.1, =2024.10.3.71620 Source cves: CVE-2026-29080 Source advisory: SNYK:PYTHON-RUCIO-16635089...

ai.tock:bot-test (>=26.3.1 <=26.3.2), ai.tock:bot-test-base (>=26.3.1 <=26.3.2) +561 more potentially affected by CVE-2026-6860 via io.vertx:vertx-core (>=5.0.0.CR1 <=5.0.11)

io.vertx:vertx-core MAVEN version =5.0.0.CR1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.1, =26.3.2 and more Source cves: CVE-2026-6860 Source advisory: SNYK:JAVA-IOVERTX-16433278...

@activeboxes/piece-image-helper (=0.1.0), @activepieces/piece-image-helper (>=0.0.5 <=0.1.12) +18 more potentially affected by CVE-2026-8813 via exifreader (>=4.13.2 <=4.38.1)

exifreader NPM version =4.13.2, =0.0.5, =0.1.0, =1.18.1, =1.0.2, =1.0.6, =4.10.0, =1.0.0-beta.141, =0.1.9, =0.0.8, =10.0.8 and more Source cves: CVE-2026-8813 Source advisory: SNYK:JS-EXIFREADER-16689335...

com.arcadedb:arcadedb-bolt (>=26.2.1 <=26.3.2), com.arcadedb:arcadedb-console (>=26.1.1 <=26.3.2) +16 more potentially affected by CVE-2026-44221 via com.arcadedb:arcadedb-engine (>=26.1.1 <=26.3.2)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.3.2 and more Source cves: CVE-2026-44221 Source advisory: SNYK:JAVA-COMARCADEDB-16638651...

de.digitalcollections.cudami:dc-cudami-server-backend-jdbi (>=6.0.0 <=8.0.3-RC1), de.digitalcollections.cudami:dc-cudami-server-webapp (>=6.0.0 <=6.2.3) +2 more potentially affected by unknown CVE via org.jdbi:jdbi3-freemarker (>=3.30.0 <=3.52.0)

org.jdbi:jdbi3-freemarker MAVEN version =3.30.0, =6.0.0, =6.0.0, =9.0.0, =3.49.4, =3.52.0 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGJDBI-16760722...

org.webjars.npm:npmcli__agent (>=2.2.2 <=3.0.0), org.webjars.npm:pac-proxy-agent (=4.1.0) +6 more potentially affected by CVE-2026-42338 via org.webjars.npm:ip-address (>=5.8.9 <=9.0.5)

org.webjars.npm:ip-address MAVEN version =5.8.9, =2.2.2, =2.8.3, =5.0.0, =8.0.5 - org.webjars.npm:socks5-client =1.2.6 - org.webjars.npm:socks5-http-client =1.0.4 - org.webjars.npm:socks5-https-client =1.2.1 Source cves: CVE-2026-42338 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16636414...

@akemona-org/strapi-connector-mongoose (>=3.13.0 <=3.17.2), @andybeat/clothingshop-nestjs (>=2.9.0 <=2.12.0) +88 more potentially affected by CVE-2026-42334 via mongoose (>=8.0.0 <=8.21.0)

mongoose NPM version =8.0.0, =3.13.0, =2.9.0, =0.10.18, =0.10.21, =1.3.5, =3.8.0, =1.0.1, =8.10.0, =0.8.7, =1.0.1, =1.5.1, =1.12.42, =7.0.0, =0.0.1-20250418035022-6dadadb.0, =0.4.1 and more Source cves: CVE-2026-42334 Source advisory: SNYK:JS-MONGOOSE-16425765...

@a-la-fois/api (>=0.0.25 <=0.0.39), @a-la-fois/doc-client (>=0.0.1 <=0.0.39) +116 more potentially affected by CVE-2026-42334 via mongoose (>=7.0.0 <=7.8.8)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =1.0.0, =1.0.6, =0.2.0, =0.2.0, =0.0.0, =1.0.2, =1.0.0, =7.6.10, =7.8.6 and more Source cves: CVE-2026-42334 Source advisory: SNYK:JS-MONGOOSE-16425765...

@akemona-org/strapi-connector-mongoose (>=3.13.0 <=3.17.2), @andybeat/clothingshop-nestjs (>=2.9.0 <=2.12.0) +88 more potentially affected by CVE-2026-42334 via mongoose (>=8.0.0 <=8.21.0)

mongoose NPM version =8.0.0, =3.13.0, =2.9.0, =0.10.18, =0.10.21, =1.3.5, =3.8.0, =1.0.1, =8.10.0, =0.8.7, =1.0.1, =1.5.1, =1.12.42, =7.0.0, =0.0.1-20250418035022-6dadadb.0, =0.4.1 and more Source cves: CVE-2026-42334 Source advisory: OSV:GHSA-WPG9-53FQ-2R8H...

2adif (=0.1.0), 3robotics (=0.0.1) +1536 more potentially affected by CVE-2026-42304 via twisted (>=20.3.0 <=26.4.0)

twisted PYPI version =20.3.0, =0.0.12, =3.0.9, =3.0.0, =0.1.0, =23.12.0rc1, =0.10.0, =0.0.1, =0.4.0, =3.0.0, =0.1.4, =1.0.0, =1.0.2 and more Source cves: CVE-2026-42304 Source advisory: OSV:GHSA-GRGV-6HW6-V9G4...

a-mailx (=0.1.0), a2 (>=0.1.0 <=0.3.17) +262 more potentially affected by CVE-2026-42266 via jupyterlab (>=4.0.0 <=4.5.6)

jupyterlab PYPI version =4.0.0, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =4.33.0, =0.6.4, =0.8.0, =1.0.1, =0.1.0, =0.5.0 and more Source cves: CVE-2026-42266 Source advisory: OSV:GHSA-37W4-HWHX-4RC4...

@openinc/parse-server-opendash (>=4.0.0 <=4.0.29) potentially affected by CVE-2026-43930 via parse-server (>=9.6.0-alpha.37 <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-43930 Source advisory: SNYK:JS-PARSESERVER-16424355...

endringer (>=0.1.0 <=0.7.1) potentially affected by unknown CVE via gix (=0.0.0)

gix CARGO version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: unknown CVE Source advisory: OSV:GHSA-FR8X-3VFX-F45H...

endringer (>=0.1.0 <=0.7.1) potentially affected by unknown CVE via gix (=0.0.0)

gix CARGO version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PG4W-G64P-QWHJ...