ai-dynamo (=0.1.0), bento2seldon (>=0.1.0 <=0.4.0) +16 more potentially affected by CVE-2026-35044 via bentoml (>=0.10.1 <=1.4.3)

bentoml PYPI version =0.10.1, =0.1.0, =0.1.0, =0.0.10, =0.0.5, =0.3.12, =0.0.1, =1.0.3, =0.0.10, =0.0.1, =0.0.1, =0.0.13 and more Source cves: CVE-2026-35044 Source advisory: OSV:PYSEC-2026-159...

CLEANSTART-2026-CE02533 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-30836, CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-q4r8-xm5f-56gw applied in versions: 0.10.1-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

ai-dynamo (=0.1.0), bento2seldon (>=0.1.0 <=0.4.0) +16 more potentially affected by CVE-2026-33744 via bentoml (>=0.10.1 <=1.4.3)

bentoml PYPI version =0.10.1, =0.1.0, =0.1.0, =0.0.10, =0.0.5, =0.3.12, =0.0.1, =1.0.3, =0.0.10, =0.0.1, =0.0.1, =0.0.13 and more Source cves: CVE-2026-33744 Source advisory: OSV:GHSA-JFJG-VC52-WQVF...

SUSE CVE-2026-21444

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used...

@7365admin1/layer-common (>=1.10.7 <=1.11.51), @a-dapt/vision (=0.2.1) +184 more potentially affected by CVE-2026-22787 via html2pdf.js (>=0.10.1 <=0.13.0)

html2pdf.js NPM version =0.10.1, =1.10.7, =1.0.12, =1.0.1, =1.0.12, =0.1.11, =1.0.7, =1.4.4, =1.13.2-dev.0, =1.29.0-rc.0, =1.3.1, =0.4.80, =0.3.9, =0.7.13 - @blocklet/component-studio-cli =0.4.134 and more Source cves: CVE-2026-22787 Source advisory: SNYK:JS-HTML2PDFJS-14943969...

CVE-2026-21444

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used...

ai-dynamo (=0.1.0), bento-sgl-router (>=0.0.1 <=0.0.6) +32 more potentially affected by CVE-2024-9070 via bentoml (>=0.10.1 <=1.4.39)

bentoml PYPI version =0.10.1, =0.0.1, =0.1.0, =0.1.0, =0.2.3, =0.1.0, =0.0.1, =0.0.10, =0.1.0, =0.2.0, =0.0.5, =0.1.1 - fusionmllib =0.1.0 - kazemlstack =0.1.0 and more Source cves: CVE-2024-9070 Source advisory: OSV:GHSA-9G44-GWVM-HC44...

libafl_qemu (>=0.10.0 <=0.10.1), libafl_sugar (>=0.10.0 <=0.11.0) +2 more potentially affected by unknown CVE via libafl (>=0.10.1 <=0.11.0)

libafl CARGO version =0.10.1, =0.10.0, =0.10.0, =0.10.0, =0.10.0, =0.10.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0424...

aaz-dev (>=1.0.2 <=2.10.1), abbr (=0.0.0) +2024 more potentially affected by CVE-2023-30861 via flask (>=0.10.1 <=2.2.4)

flask PYPI version =0.10.1, =1.0.2, =1.8.8, =0.8.44.4, =4.2.0, =1.1.4, =0.4.0, =1.5.2, =0.0.1, =0.26.0, =0.42.0 and more Source cves: CVE-2023-30861 Source advisory: OSV:GHSA-M2QF-HXJV-5GPQ...

core-lib (>=0.1.0 <=0.2.0), eventsourced-nats (>=0.1.0 <=0.6.0) +25 more potentially affected by unknown CVE via async-nats (>=0.10.1 <=0.27.1)

async-nats CARGO version =0.10.1, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.26.0, =0.25.0, =0.12.0, =0.9.0, =0.16.0, =0.3.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0027...

SUSE CVE-2004-0507

Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2022-0664

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1...

addok (=0.5.0), alo7-airflow (>=1.10.0 <=1.10.0.7) +159 more potentially affected by CVE-2019-14806 via werkzeug (>=0.10.1 <=0.15.2)

werkzeug PYPI version =0.10.1, =1.10.0, =1.10.3, =0.4.3, =0.1.0, =0.1.17, =0.6.7.post3, =0.1.0, =0.1.1, =0.6.4, =0.1.0, =0.1.0, =0.3.3 - clastic =19.0.0 and more Source cves: CVE-2019-14806 Source advisory: OSV:PYSEC-2019-140...

PT-2004-2106 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.1 through 0.10.7 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by sending a certain packet that causes the HTTP dissector to access...

PT-2004-1521 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.1 through 0.10.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a zero-length Presentation protocol selector. Recommendations: For versions 0.10.1 through...