axdocsystem (>=0.1.2, <=0.1.52), columbus (>=0.1.0, <=0.1.9) +10 more potentially affected by CVE-2026-48818 via starlette (0.24.0)

starlette PYPI version 0.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - axdocsystem =0.1.2, =0.1.0, =2.0.7, =0.0.31, =0.1.2, =1.0.1rc1, =0.2.4, =5.3.0b1, =5.3.0b2 Source cves: CVE-2026-48818 Source advisory:...

au.csiro.pathling:encoders (6.2.1), au.csiro.pathling:fhir-server (6.2.1) +102 more potentially affected by CVE-2026-55471 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.971)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.971 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - au.csiro.pathling:encoders 6.2.1 - au.csiro.pathling:fhir-server 6.2.1 -...

ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.7) potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.7)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 5.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.6.7 Source cves: CVE-2026-55470 Sour...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.4), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.4) potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.3.4)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.4 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.1) potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.1)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.3.1 Source cves: CVE-2026-55470 Sour...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.2.26), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.2.26) +1 more potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.89)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.89 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.2.26 -...

ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.22) potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.22)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 5.6.22 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.6.22 Source cves: CVE-2026-55470...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.0.12), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.0.12) +3 more potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.0.12)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.0.12 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.2.19) potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.2.19)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 5.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.2.19 Source cves: CVE-2026-55470...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.1.25), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.1.25) +1 more potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.12)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.1.25 -...

ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.10) potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.10)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 5.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.3.10 Source cves: CVE-2026-55470...

org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.2.39), org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli (1.2.39) +1 more potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.101)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.101 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - org.hl7.fhir.publisher:org.hl7.fhir.publisher 1.2.39 -...

ai.konduit.serving:konduit-serving-clients (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-distro-bom (>=0.0.2, <=0.3.0) +1712 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (>=4.0.0, <=4.5.1)

com.github.jknack:handlebars MAVEN version =4.0.0, =0.0.2, =0.0.2, =0.4.0, =0.1.0, =0.1.1, =2.2.0, =1.1.0, =0.1.0, =0.0.1, =4.1, =3.1, =6.6 and more Source cves: CVE-2026-55760 Source advisory: OSV:GHSA-R4GV-QR8J-P3PG...

com.github.jknack:handlebars-guava-cache (1.2.1), com.github.jknack:handlebars-helpers (1.2.1) +9 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (1.2.1)

com.github.jknack:handlebars MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 1.2.1 - com.github.jknack:handlebars-helpers 1.2.1 -...

com.akilisha.oss:cafeai-rag (>=0.1.2, <=0.3.2), com.appjars:appjars-ai-support-business-impl (1.0.0) +10 more potentially affected by CVE-2026-55405 via dev.langchain4j:langchain4j-pgvector (>=1.6.0-beta12, <=1.11.7-beta19)

dev.langchain4j:langchain4j-pgvector MAVEN version =1.6.0-beta12, =0.1.2, =1.0, =1.0, =1.0, =1.0, =1.4.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.1.8, =1.1.10 Source cves: CVE-2026-55405 Source advisory: SNYK:JAVA-DEVLANGCHAIN4J-17732672...

sahara-dashboard (10.0.2) potentially affected by CVE-2026-55748 via horizon (15.3.2)

horizon PYPI version 15.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on horizon and may be impacted: - sahara-dashboard 10.0.2 Source cves: CVE-2026-55748 Source advisory: OSV:GHSA-6WRM-X65G-HR4P...

karbor-dashboard (>=1.4.0, <=1.5.1), murano-dashboard (>=6.0.0.0b3, <=8.0.0) potentially affected by CVE-2026-55748 via horizon (20.2.0)

horizon PYPI version 20.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on horizon and may be impacted: - karbor-dashboard =1.4.0, =6.0.0.0b3, =8.0.0 Source cves: CVE-2026-55748 Source advisory: OSV:GHSA-6WRM-X65G-HR4P...

cn.acmsmu.mgsky1:spring-boot-shiro-starter (>=1.0.0, <=2.0.0), cn.xuqiudong.basic:lcxm-cas-sso (1.0.0-2024) +457 more potentially affected by CVE-2026-49268 via org.apache.shiro:shiro-core (1.8.0)

org.apache.shiro:shiro-core MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - cn.acmsmu.mgsky1:spring-boot-shiro-starter =1.0.0, =1.0, =1.0, =1.0, =1.0, =6.5.7, =6.5.7, =6.5.11, =6.5....

br.com.caelum.vraptor:vraptor-shiro (>=4.0.0-beta-1, <=4.0.0-rc2), com.flowlogix:flowlogix-tapestry (>=1.2.3, <=1.2.10) +210 more potentially affected by CVE-2026-49268 via org.apache.shiro:shiro-core (1.2.2)

org.apache.shiro:shiro-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - br.com.caelum.vraptor:vraptor-shiro =4.0.0-beta-1, =1.2.3, =1.2.3, =1.0.0.release, =2.1.3, =2.1.3, =1.0,...

com.flowlogix:flowlogix-tapestry (>=1.0.1, <=1.2.2), com.flowlogix:tapestry-build-core (>=1.0.1, <=1.2.2) +101 more potentially affected by CVE-2026-49268 via org.apache.shiro:shiro-core (1.2.1)

org.apache.shiro:shiro-core MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.flowlogix:flowlogix-tapestry =1.0.1, =1.0.1, =1.0, =2.2.0, =3.1.0, =2.0.2, =1.2, =0.1.53, =0.1.34,...