org.webjars.npm:nestjs__platform-express (>=8.4.7 <=9.0.0-next.2) potentially affected by CVE-2026-5079 via org.webjars.npm:multer (=1.4.4-lts.1)

org.webjars.npm:multer MAVEN version =1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2026-5079 Source advisory:...

@_sh/strapi-plugin-ckeditor (>=5.0.2 <=7.1.1), @a.agiir/cinny (>=0.0.1 <=0.0.2) +1336 more potentially affected by CVE-2026-53606 via sanitize-html (>=2.10.0 <=2.17.4)

sanitize-html NPM version =2.10.0, =5.0.2, =0.0.1, =1.0.0, =1.0.0, =1.38.0, =1.3.2, =1.0.1, =1.0.1, =1.1.0, =1.0.2, =1.0.0, =1.0.14 - @adminforth/email-adapter-mailgun =1.0.1 and more Source cves: CVE-2026-53606 Source advisory: SNYK:JS-SANITIZEHTML-17337018...

org.webjars.npm:github-com-daichirata-vue-sanitize (=0.2.2), org.webjars.npm:github-com-daichirata-vue-sanitize- (=0.2.2) potentially affected by CVE-2026-53606 via org.webjars.npm:sanitize-html (=2.7.0)

org.webjars.npm:sanitize-html MAVEN version =2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sanitize-html and may be impacted: - org.webjars.npm:github-com-daichirata-vue-sanitize =0.2.2 -...

-react-file-list-components (=1.1.1), 01basicreact (>=0.1.0 <=0.1.9) +45932 more potentially affected by CVE-2026-12143 via form-data (>=3.0.0 <=3.0.4)

form-data NPM version =3.0.0, =0.1.0, =0.1.0, =0.1.6 - 0beny1s =1.1.6 - 0scarclassa =1.0.1 - 0scarclassb =1.0.1 - 0scarclassc =1.0.1 - 0scarclassd =1.0.1 - 0scarclasse =1.0.1 - 0scarclassf =1.0.1 - 0scarclassg =1.0.1 - 0scarclassh =1.0.1 - 0scarclassi =1.0.1 - 0scarclassj =1.0.1 - 0scarclassk...

com.alilitech:boot-plus-log (>=2.1.0 <=2.1.5), com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0 <=3.0.0) +38 more potentially affected by CVE-2026-12143 via org.webjars.npm:form-data (>=4.0.4 <=4.0.5)

org.webjars.npm:form-data MAVEN version =4.0.4, =2.1.0, =2.0.0, =1.0.3, =1.0.0, =2.1.1, =1.0.0, =1.0.0, =2.1.3, =2.0.0, =1.0.2, =4.22.2, =4.22.2, =9.21.0, =0.27.2, =1.17.0 and more Source cves: CVE-2026-12143 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17337016...

@budibase/cli (>=0.0.1 <=3.2.26), @budibase/pro (>=0.0.1 <=3.2.26) +4 more potentially affected by CVE-2026-48147 via @budibase/backend-core (>=0.0.1 <=3.2.7)

@budibase/backend-core NPM version =0.0.1, =0.0.1, =0.0.1, =0.0.999-alpha.30, =0.0.1, =3.2.26 - @devlego/server =1.1.29-alpha.1 - @devlego/worker =1.1.29-alpha.1 Source cves: CVE-2026-48147 Source advisory: OSV:GHSA-WXQ7-X3QP-VCR8...

aida-tools (>=0.1.0 <=0.1.3), apache-airflow-providers-mariadb (=1.0.0) +66 more potentially affected by CVE-2026-44172 via mariadb (>=1.0.11 <=2.0.0rc2)

mariadb PYPI version =1.0.11, =0.1.0, =0.0.1, =0.6.0, =1.0.1, =0.3.1, =0.1.0, =0.1.0, =0.1.4, =1.1.8, =2.0.5, =0.0.3, =0.0.1, =1.1.0, =1.4.0 and more Source cves: CVE-2026-44172 Source advisory: OSV:PYSEC-2026-217...

01os (>=0.0.5 <=0.0.13), 1claw-crewai-tools (=0.1.0) +1776 more potentially affected by CVE-2026-45833 via chromadb (>=0.4.17 <=1.5.9)

chromadb PYPI version =0.4.17, =0.0.5, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.0.4, =0.0.4.dev0 - adaline-crewai =0.1.0 - adam-thinking =1.0.0 and more Source cves: CVE-2026-45833 Source advisory: SNYK:PYTHON-CHROMADB-17337041...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +3382 more potentially affected by CVE-2026-50020 via io.netty:netty-codec-http (>=4.2.0.Alpha1 <=4.2.14.Final)

io.netty:netty-codec-http MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-50020 Source advisory: SNYK:JAVA-IONETTY-17337012...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +29726 more potentially affected by CVE-2026-50010 via io.netty:netty-handler (>=4.0.0.Alpha1 <=4.1.134.Final)

io.netty:netty-handler MAVEN version =4.0.0.Alpha1, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +4472 more potentially affected by CVE-2026-50010 via io.netty:netty-handler (>=4.2.0.Alpha1 <=4.2.14.Final)

io.netty:netty-handler MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =4.7.4, =4.7.4, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-50010 Source advisory: SNYK:JAVA-IONETTY-17334567...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +19976 more potentially affected by CVE-2026-50560 via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.134.Final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.Beta4, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

no.ks.fiks:adresseregisteret-client (>=1.5.0 <=1.6.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0 <=1.6.0) +13 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50629 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339177...

no.ks.fiks:adresseregisteret-client (>=1.5.0 <=1.6.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0 <=1.6.0) +13 more potentially affected by CVE-2026-50628 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50628 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339176...

no.ks.fiks:adresseregisteret-client (>=1.0.0 <=1.4.0), no.ks.fiks:fastlegeregisteret-client (>=1.0.0 <=1.4.0) +15 more potentially affected by CVE-2026-50623 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0, =1.0.0, =1.0.0, =4.7.0, =4.0.0, =3.0.0-M1, =3.0.0-M1, =3.0.0-M1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50623 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339178...

com.codbex.atlas:codbex-atlas-application (>=2.98.0 <=2.110.0), com.github.skjolber.xml-log-filter:xml-log-filter-cxf (=2.0.1) +263 more potentially affected by CVE-2026-49875 via org.apache.cxf:cxf-core (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-core MAVEN version =4.2.0, =2.98.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =0.168, =10.0.2, =3.35.0, =3.36.0 and more Source cves: CVE-2026-49875 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339193...

be.atbash.test:integration-testing (=2.2.0), be.atbash.test:integration-testing-database (=2.2.0) +879 more potentially affected by CVE-2026-49875 via org.apache.cxf:cxf-core (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-core MAVEN version =4.0.0, =1.0.0, =12.1-7-21, =0.0.1, =1.1.0, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons =2.70.0 and more Source cves: CVE-2026-49875 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339193...

be.atbash.test:integration-testing (=2.2.0), be.atbash.test:integration-testing-database (=2.2.0) +879 more potentially affected by CVE-2026-50645 via org.apache.cxf:cxf-core (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-core MAVEN version =4.0.0, =1.0.0, =12.1-7-21, =0.0.1, =1.1.0, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons =2.70.0 and more Source cves: CVE-2026-50645 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339192...

com.codbex.atlas:codbex-atlas-application (>=2.98.0 <=2.110.0), com.github.skjolber.xml-log-filter:xml-log-filter-cxf (=2.0.1) +263 more potentially affected by CVE-2026-50645 via org.apache.cxf:cxf-core (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-core MAVEN version =4.2.0, =2.98.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =0.168, =10.0.2, =3.35.0, =3.36.0 and more Source cves: CVE-2026-50645 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339192...

org.apache.cxf.systests:cxf-systests-uncategorized (>=4.2.0 <=4.2.1) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-integration-jca MAVEN version =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50633 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339184...