1-sep-ui (>=0.0.1, <=0.0.2), 3d-crystal-model (0.1.0) +7177 more potentially affected by CVE-2025-69873 via ajv (>=6.0.0, <=6.12.6)

ajv NPM version =6.0.0, =0.0.1, =1.0.23, =0.0.1, =1.0.0, =1.0.0, =6.0.0, =0.0.2, =1.0.0, =0.0.10, =1.0.6, =0.4.0, =0.0.1-bate.30, =0.0.3 and more Source cves: CVE-2025-69873 Source advisory: SNYK:JS-AJV-15274295...

a2grunnerp (>=0.1.0, <=0.1.8), aos-keys (>=1.5.1b5, <=1.6.0) +41 more potentially affected by CVE-2026-26007 via cryptography (39.0.0)

cryptography PYPI version 39.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - a2grunnerp =0.1.0, =1.5.1b5, =3.7.1b11, =1.11.0b1, =0.8.2, =5.2.0, =0.0.2, =0.0.165, =3.72.0, =1.0.0, =1.0.4 - doopass 2.2.0 and more...

esphome (>=2025.6.0b1, <=2026.2.4), espjhome (2025.7.5) potentially affected by CVE-2026-26007 via cryptography (45.0.1)

cryptography PYPI version 45.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - esphome =2025.6.0b1, =2026.2.4 - espjhome 2025.7.5 Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...

aie-sdk (>=3.0.1, <=3.0.4), aiearth-engine (>=3.0.2, <=3.1.6) +115 more potentially affected by CVE-2026-26007 via cryptography (38.0.1)

cryptography PYPI version 38.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aie-sdk =3.0.1, =3.0.2, =2022.10.0b0, =3.0.0, =2.1.1, =0.1.37, =0.7.18, =0.1.9, =0.1.10 - c7n-org 0.6.18 and more Source cves:...

chakraversiontracker (>=1.2.1.20160901, <=1.2.1.20160917), jwt (0.5.3) +8 more potentially affected by CVE-2026-26007 via cryptography (1.9.0)

cryptography PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - chakraversiontracker =1.2.1.20160901, =1.3.9, =1.3.9, =0.1.5, =0.1.0, =0.0.2, =2.1.2.20180422, =0.1.0b11, =0.1.0b17 Source cves:...

atlassian-jwt-auth (>=2.5.1, <=2.8.0), data-pipeline (>=0.9.5, <=0.9.12) potentially affected by CVE-2026-26007 via cryptography (1.3.4)

cryptography PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.5.1, =0.9.5, =0.9.12 Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...

a2spa (>=0.1.1, <=0.1.4), arthexis (>=0.1.3, <=0.2.3) +47 more potentially affected by CVE-2026-26007 via cryptography (45.0.5)

cryptography PYPI version 45.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - a2spa =0.1.1, =0.1.3, =1.8.0, =1.8.0, =0.1.8, =0.2.12, =1.2.1, =4.4.4, =1.17.0, =1.21.0 and more Source cves: CVE-2026-26007 Source...

pyupdater (>=1.1.1, <=1.1.7) potentially affected by CVE-2026-26007 via cryptography (1.1.0)

cryptography PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - pyupdater =1.1.1, =1.1.7 Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...

1m-handshake (>=0.1.3, <=0.1.6), aae-protocol (0.9.0) +687 more potentially affected by CVE-2026-26007 via cryptography (45.0.7)

cryptography PYPI version 45.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - 1m-handshake =0.1.3, =2.4.119, =3.2.1, =0.2.0, =0.0.2, =0.1.0, =2.1.7, =1.3.9, =1.1.16, =0.4.0rc1, =0.4.3 and more Source cves:...

aepp-sdk (>=0.18.0.3, <=0.18.0.4), atlassian-jwt-auth (>=3.3.1, <=4.0.1) +19 more potentially affected by CVE-2026-26007 via cryptography (2.2.2)

cryptography PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aepp-sdk =0.18.0.3, =3.3.1, =0.2.2, =0.1.1, =0.16.8, =0.10.4, =1.6.517, =3.0.4, =0.6.7, =0.3.7, =1.4.5, =2.0.1 and more Source cves:...

azure-cli (>=2.0.58, <=2.0.66), azure-cli-appservice (>=0.2.13, <=0.2.20) +27 more potentially affected by CVE-2026-26007 via cryptography (2.4.2)

cryptography PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - azure-cli =2.0.58, =0.2.13, =1.5.5, =1.0.0b6, =18.4.0, =0.3.0rc1, =1.0.3, =0.1.0, =1.2.8, =1.0.5, =2.1.12 and more Source cves:...

agixt (>=1.3.84, <=1.3.143), ai-service-wrapper (>=0.0.3, <=0.0.8) +100 more potentially affected by CVE-2026-26007 via cryptography (41.0.3)

cryptography PYPI version 41.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agixt =1.3.84, =0.0.3, =0.0.1, =1.0.2, =1.0.507, =0.2.5, =0.0.1rc1, =6.0.0, =0.7.29, =0.1.4, =0.1.5 and more Source cves: CVE-2026-2600...

@abip/scp-common (1.0.1-alpha.0), @aftership/automizely-rbac-react (>=0.1.0, <=0.6.1) +402 more potentially affected by CVE-2026-1774 via @casl/ability (>=2.4.2, <=6.7.3)

@casl/ability NPM version =2.4.2, =0.1.0, =3.7.0, =0.2.0, =0.3.1, =4.25.19-patch.1, =0.0.1, =0.0.1, =0.1.0, =1.7.0, =2.16.14 and more Source cves: CVE-2026-1774 Source advisory: OSV:GHSA-X9VF-53Q3-CVX6...

@abip/scp-common (1.0.1-alpha.0), @aftership/automizely-rbac-react (>=0.1.0, <=0.6.1) +402 more potentially affected by CVE-2026-1774 via @casl/ability (>=2.4.2, <=6.7.3)

@casl/ability NPM version =2.4.2, =0.1.0, =3.7.0, =0.2.0, =0.3.1, =4.25.19-patch.1, =0.0.1, =0.0.1, =0.1.0, =1.7.0, =2.16.14 and more Source cves: CVE-2026-1774 Source advisory: SNYK:JS-CASLABILITY-15268419...

cn.acooly:acooly-auth-wechat-authenticator (>=5.2.1, <=5.2.2), cn.com.jeeweb:jeeweb-core (>=1.0.0, <=1.0.1) +226 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.7.0)

org.apache.shiro:shiro-core MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - cn.acooly:acooly-auth-wechat-authenticator =5.2.1, =1.0.0, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1...

be.fluid-it.guice.extensions:guice-multi-shiro-realms (0.1-1), be.fluid-it.shiro.jee:shiro-jee-authc (>=0.1-1, <=0.1-3) +342 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.2.3)

org.apache.shiro:shiro-core MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - be.fluid-it.guice.extensions:guice-multi-shiro-realms 0.1-1 - be.fluid-it.shiro.jee:shiro-jee-authc =0.1-...

com.bazaarvoice.emodb:emodb-auth-core (>=6.5.28, <=6.5.256), com.bazaarvoice.emodb:emodb-auth-store (>=6.5.28, <=6.5.256) +265 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.10.0)

org.apache.shiro:shiro-core MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.bazaarvoice.emodb:emodb-auth-core =6.5.28, =6.5.28, =6.5.28, =6.5.28, =6.5.28, =5.0, =5.0, =5.1 -...

cn.xuqiudong.basic:lcxm-cas-sso (>=1.0.1-2024, <=1.0.2-2024), cn.xuqiudong.basic:lcxm-cas-sso-client (>=1.0.1-2024, <=1.0.2-2024) +311 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.6.0)

org.apache.shiro:shiro-core MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - cn.xuqiudong.basic:lcxm-cas-sso =1.0.1-2024, =1.0.1-2024, =1.0.1-2024, =3.0, =3.0, =3.0, =1.0, =1.1.0,...

@cubejs-backend/server (>=1.1.17, <=1.4.1), @cubejs-backend/testing-drivers (>=1.1.17, <=1.4.1) potentially affected by CVE-2026-25957 via @cubejs-backend/server-core (>=1.1.17, <=1.4.1)

@cubejs-backend/server-core NPM version =1.1.17, =1.1.17, =1.1.17, =1.4.1 Source cves: CVE-2026-25957 Source advisory: OSV:GHSA-9VPH-2HVM-X66G...

@cubejs-backend/server (>=1.5.0, <=1.5.12), @cubejs-backend/testing-drivers (>=1.5.0, <=1.5.12) potentially affected by CVE-2026-25957 via @cubejs-backend/server-core (>=1.5.0, <=1.5.12)

@cubejs-backend/server-core NPM version =1.5.0, =1.5.0, =1.5.0, =1.5.12 Source cves: CVE-2026-25957 Source advisory: OSV:GHSA-9VPH-2HVM-X66G...