ai.pipestream:pipestream-wiremock-server (>=0.1.1, <=0.1.6), ai.timefold.solver:timefold-solver-service-maps-service-test (>=2.2.0, <=2.7.1) +1753 more potentially affected by CVE-2025-11143 via org.eclipse.jetty:jetty-http (>=11.0.0, <=11.0.26)

org.eclipse.jetty:jetty-http MAVEN version =11.0.0, =0.1.1, =2.2.0, =0.1.6, =4.0.0-beta.1, =0.1.0-rc, =3.24.1, =3.24.1, =3.24.1, =3.27.0, =3.27.0, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.6 and more Source cves: CVE-2025-11143 Source advisory: OSV:GHSA-WJPW-4J6X-6RWH...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=0.8.3-20.0.5, <=0.10.0-20.0.5), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=0.8.3-20.0.5, <=0.10.0-20.0.5) +14 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (20.0.5)

org.keycloak:keycloak-services MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =0.8.3-20.0.5, =0.8.3-20.0.5, =0.10.0-20.0.5 -...

com.inventage.keycloak.role-based-timeout:keycloak-role-based-timeout (>=1.0.0, <=1.2.0), com.inventage.keycloak.sms-authenticator:keycloak-sms-authenticator (>=1.2.0, <=1.8.1) +81 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-server-spi-private (>=26.5.0, <=26.5.4)

org.keycloak:keycloak-server-spi-private MAVEN version =26.5.0, =1.0.0, =1.2.0, =5.5.0, =5.5.0, =2.4.5, =2.1.0, =0.1.1, =1.5.0, =1.3.1, =1.11.17, =1.1.2, =0.1.1-rc1, =26.1.2-kc26.4.4, =0.6.2, =0.6.5 - io.phasetwo.keycloak:keycloak-account-v1 0.11 and more Source cves: CVE-2026-3009 Source advisor...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +23 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (14.0.0)

org.keycloak:keycloak-services MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=2.0.0-23.0, <=2.5.1-23.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.0.0-23.0, <=2.5.1-23.0) +28 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (23.0.1)

org.keycloak:keycloak-services MAVEN version 23.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =2.0.0-23.0, =2.0.0-23.0, =0.19, =0.16, =4.2,...

@amedia/brick-mcp (>=0.0.0-vSNAPSHOT-20260217144000, <=1.0.0), @area15/ticket-component (0.1.0) +107 more potentially affected by CVE-2026-3419 via fastify (>=5.7.2, <=5.7.4)

fastify NPM version =5.7.2, =0.0.0-vSNAPSHOT-20260217144000, =0.5.2, =0.5.2, =0.5.2, =0.5.2, =0.2.11, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.11.6, =5.1.19, =2.21.2, =2.21.2, =2.21.3 and more Source cves: CVE-2026-3419 Source advisory: OSV:GHSA-573F-X89G-HQP9...

@amedia/brick-mcp (>=0.0.0-vSNAPSHOT-20260217144000, <=1.0.0), @area15/ticket-component (0.1.0) +107 more potentially affected by CVE-2026-3419 via fastify (>=5.7.2, <=5.7.4)

fastify NPM version =5.7.2, =0.0.0-vSNAPSHOT-20260217144000, =0.5.2, =0.5.2, =0.5.2, =0.5.2, =0.2.11, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.11.6, =5.1.19, =2.21.2, =2.21.2, =2.21.3 and more Source cves: CVE-2026-3419 Source advisory: SNYK:JS-FASTIFY-15428269...

bws-web-server (>=0.1.0, <=0.1.1), pingora (>=0.1.0, <=0.6.0) +3 more potentially affected by CVE-2026-2836 via pingora-cache (>=0.1.1, <=0.6.0)

pingora-cache CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.6.0 - revoke-gateway 0.3.0 - static-files-module 0.1.0 Source cves: CVE-2026-2836 Source advisory: OSV:GHSA-F93W-PCJ3-RGGC...

bws-web-server (>=0.1.0, <=0.1.1), pingora (>=0.1.0, <=0.6.0) +6 more potentially affected by CVE-2026-2833 via pingora-core (>=0.1.1, <=0.6.0)

pingora-core CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.7 - revoke-gateway 0.3.0 - static-files-module 0.1.0 Source cves: CVE-2026-2833 Source advisory: OSV:GHSA-XQ2H-P299-VJWV...

ado-vllm-performance (>=1.2.2, <=1.3.3), agentics-py (>=0.0.0, <=0.0.5) +68 more potentially affected by CVE-2026-25048 via xgrammar (>=0.1.11, <=0.1.29)

xgrammar PYPI version =0.1.11, =1.2.2, =0.0.0, =2.3.5.dev0, =0.8.4, =0.2.2, =0.1.0, =0.1.0, =1.0.1rc1, =0.0.2, =0.1.1, =0.1.10, =0.0.2, =1.1.2, =1.1.5 and more Source cves: CVE-2026-25048 Source advisory: OSV:GHSA-7RGV-GQHR-FXG3...

web3.db-fileconnector (>=1.4.0, <=1.8.6) potentially affected by CVE-2025-64166 via mercurius (16.1.0)

mercurius NPM version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mercurius and may be impacted: - web3.db-fileconnector =1.4.0, =1.8.6 Source cves: CVE-2025-64166 Source advisory: OSV:GHSA-V66J-6WWF-JC57...

web3.db-fileconnector (>=1.4.0, <=1.8.6) potentially affected by CVE-2025-64166 via mercurius (16.1.0)

mercurius NPM version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mercurius and may be impacted: - web3.db-fileconnector =1.4.0, =1.8.6 Source cves: CVE-2025-64166 Source advisory: SNYK:JS-MERCURIUS-15428327...

ai.agentscentral:agentj-jetty (>=0.0.4, <=0.0.6), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +9824 more potentially affected by CVE-2025-11143 via org.eclipse.jetty:jetty-server (>=9.4.0.m0, <=12.0.30)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.m0, =0.0.4, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.1.7, =0.1.7, =3.30.0.7, =3.30.0.7, =3.46.0.12 and more Source cves: CVE-2025-11143 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-15426540...

grooveshop-django-api (>=0.38.0, <=0.40.2) potentially affected by CVE-2026-27982 via django-allauth (0.58.1)

django-allauth PYPI version 0.58.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api =0.38.0, =0.40.2 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V67J...

grooveshop-django-api (>=0.36.0, <=0.37.4) potentially affected by CVE-2026-27982 via django-allauth (0.58.0)

django-allauth PYPI version 0.58.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api =0.36.0, =0.37.4 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V67J...

df-site (0.1.0), grooveshop-django-api (>=0.156.0, <=0.162.2) +1 more potentially affected by CVE-2026-27982 via django-allauth (64.2.1)

django-allauth PYPI version 64.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - df-site 0.1.0 - grooveshop-django-api =0.156.0, =0.162.2 - ov-wag 0.7.0 Source cves: CVE-2026-27982 Source advisory:...

df-site (0.1.0), grooveshop-django-api (>=0.156.0, <=0.162.2) +1 more potentially affected by CVE-2026-27982 via django-allauth (64.2.1)

django-allauth PYPI version 64.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - df-site 0.1.0 - grooveshop-django-api =0.156.0, =0.162.2 - ov-wag 0.7.0 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026...

grooveshop-django-api (0.65.0) potentially affected by CVE-2026-27982 via django-allauth (0.61.0)

django-allauth PYPI version 0.61.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api 0.65.0 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...

@abyedev/hono-dotenv (1.0.0), @affectively/relay (>=5.0.0, <=6.0.1) +739 more potentially affected by CVE-2026-29085 via hono (>=3.8.4, <=4.12.3)

hono NPM version =3.8.4, =5.0.0, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.0.1, =0.0.16 and more Source cves: CVE-2026-29085 Source advisory: SNYK:JS-HONO-15423717...

@agentforce/adk (>=0.9.0, <=0.12.1), @agentkit-ai/bff-hono (1.0.0) +490 more potentially affected by CVE-2026-29045 via hono (>=4.0.0, <=4.12.3)

hono NPM version =4.0.0, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =0.0.31 and more Source cves: CVE-2026-29045 Source advisory: SNYK:JS-HONO-15419466...