3348 matches found
com.pro-crafting.tools:jasperreports-plugin (3.5.4), net.sf.jasperreports:jasperreports-castor (6.20.3) +7 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.20.3)
net.sf.jasperreports:jasperreports MAVEN version 6.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.pro-crafting.tools:jasperreports-plugin 3.5.4 -...
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosystem as part of the ongoing Mini Shai-Hulud attack wave. "The attack affects packages tied to the npm maintainer account atool, includin...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...
Microsoft Data Formulator AI-based data visualization tool Code Execution
The vulnerability of the Microsoft Data Formulator, a tool for visualizing data based on artificial intelligence, is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
GHSA-8MP2-V27R-99XP vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2026-33079 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2026-33079 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
CVE-2026-44897 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
GHSA-58CW-G322-P94V vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
GHSA-8G87-J6Q8-G93X vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
GHSA-V87V-83H2-53W7 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
CVE-2026-44708 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
CVE-2026-44896 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
GHSA-8MP2-V27R-99XP vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
CVE-2026-44431 vulnerabilities
Vulnerabilities for packages: mlflow, confluent-docker-utils, jupyter-base-notebook, ggshield, az, py3-cassandra-medusa, neuvector-manager, datadog-agent, jwt-tool, open-webui, kubeflow-pipelines, aws-cli, dask-kubernetes, kubeflow-pipelines-visualization-server, superset, kubeflow-katib,...
CVE-2026-44432 vulnerabilities
Vulnerabilities for packages: mlflow, confluent-docker-utils, jupyter-base-notebook, ggshield, az, py3-cassandra-medusa, neuvector-manager, datadog-agent, jwt-tool, open-webui, kubeflow-pipelines, aws-cli, dask-kubernetes, kubeflow-pipelines-visualization-server, superset, kubeflow-katib,...
GHSA-MF9V-MFXR-J63J vulnerabilities
Vulnerabilities for packages: mlflow, confluent-docker-utils, jupyter-base-notebook, ggshield, az, py3-cassandra-medusa, neuvector-manager, datadog-agent, jwt-tool, open-webui, kubeflow-pipelines, aws-cli, dask-kubernetes, kubeflow-pipelines-visualization-server, superset, kubeflow-katib,...
GHSA-QCCP-GFCP-XXVC vulnerabilities
Vulnerabilities for packages: mlflow, confluent-docker-utils, jupyter-base-notebook, ggshield, az, py3-cassandra-medusa, neuvector-manager, datadog-agent, jwt-tool, open-webui, kubeflow-pipelines, aws-cli, dask-kubernetes, kubeflow-pipelines-visualization-server, superset, kubeflow-katib,...