org.openidentityplatform.openam:openam-slf4j (>=16.0.1 <=16.0.6), org.openidentityplatform.opendj:opendj-dsml-servlet (>=5.0.1 <=5.1.0) +5 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (>=5.0.1 <=5.1.0)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =5.0.1, =16.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.1.0 Source cves: CVE-2026-46495 Source advisory: SNYK:JAVA-ORGOPENIDENTITYPLATFORMOPENDJ-17423204...

01os (>=0.0.1 <=0.0.14), 0xpwn (>=0.1.0 <=0.1.1) +3245 more potentially affected by CVE-2026-12796 via litellm (>=0.11.1 <=1.89.0rc2)

litellm PYPI version =0.11.1, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.0.13, =0.0.13, =0.1.3, =0.0.4, =0.1.0, =0.0.1a0, =0.3.5, =0.1.1.dev1, =0.2.2, =0.2.1, =0.2.0, =0.6.1 and more Source cves: CVE-2026-12796 Source advisory: SNYK:PYTHON-LITELLM-17393719...

01os (>=0.0.1 <=0.0.14), 0xpwn (=0.1.1) +839 more potentially affected by CVE-2026-12797 via litellm (>=1.0.0 <=1.85.0)

litellm PYPI version =1.0.0, =0.0.1, =0.0.14, =0.0.14, =0.0.1a0, =0.3.5, =0.6.0, =0.7.3, =0.1.0, =0.4.0, =0.8.1, =0.1.0, =0.1.39, =0.2.1, =0.2.1.10102025 - agent-memory-server =0.15.0 and more Source cves: CVE-2026-12797 Source advisory: SNYK:PYTHON-LITELLM-17393732...

01os (>=0.0.1 <=0.0.14), 0xpwn (=0.1.1) +827 more potentially affected by CVE-2026-12798 via litellm (>=1.0.0 <=1.83.9)

litellm PYPI version =1.0.0, =0.0.1, =0.0.14, =0.0.14, =0.0.1a0, =0.3.5, =0.6.0, =0.7.3, =0.1.0, =0.4.0, =0.8.1, =0.1.0, =0.1.39, =0.2.1, =0.2.1.10102025 - agent-memory-server =0.15.0 and more Source cves: CVE-2026-12798 Source advisory: SNYK:PYTHON-LITELLM-17393722...

01os (>=0.0.1 <=0.0.14), 0xpwn (>=0.1.0 <=0.1.1) +3225 more potentially affected by CVE-2026-12771 via litellm (>=1.0.0 <=1.88.1)

litellm PYPI version =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.0.13, =0.0.13, =0.1.3, =0.0.4, =0.1.0, =0.0.1a0, =0.3.5, =0.1.1.dev1, =0.2.2, =0.2.1, =0.2.0, =0.6.1 and more Source cves: CVE-2026-12771 Source advisory: SNYK:PYTHON-LITELLM-17391455...

3m (>=0.1.0 <=0.1.3), 4sgm (=2.0.0) +6961 more potentially affected by unknown CVE via langsmith (>=0.0.10 <=0.8.14)

langsmith PYPI version =0.0.10, =0.1.0, =3.0.1, =0.1.0, =0.0.0, =0.1.0, =0.0.1, =0.1.0, =0.1.3, =0.3.0 - aacp-langchain =0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-LANGSMITH-17391446...

com.braimanm:uitaf (>=3.0.0 <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha <=1.0.1-alpha) +7 more potentially affected by CVE-2026-55847 via io.qameta.allure:allure-generator (>=2.10.0 <=2.38.1)

io.qameta.allure:allure-generator MAVEN version =2.10.0, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-RC1, =2.10.0, =2.38.1 - org.uitaf:uitaf-playwright =1.0.1 Source cves: CVE-2026-55847 Source advisory: OSV:GHSA-GX93-M64W-5M6H...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-55778 via parse-server (>=9.6.0-alpha.37 <=9.9.0)

parse-server NPM version =9.6.0-alpha.37, =3.31.25, =4.0.34 Source cves: CVE-2026-55778 Source advisory: SNYK:JS-PARSESERVER-17420047...

agentvox (=0.2.0), arabic-translator-tester (=0.1.8) +73 more potentially affected by CVE-2026-54499 via stanza (>=1.0.0 <=1.11.1)

stanza PYPI version =1.0.0, =1.0.1, =1.4.0, =1.10.0, =1.6.0, =0.0.1, =1.0.1, =0.0.1, =0.3.0, =0.1.0, =2.1.7, =0.0.0, =0.0.13 and more Source cves: CVE-2026-54499 Source advisory: SNYK:PYTHON-STANZA-17394039...

com.primust:primust-cedar (>=1.0.2 <=1.0.3), io.github.devnico:cedar4s-client_2.13 (>=0.1.0 <=0.1.5) +12 more potentially affected by CVE-2026-55772 via com.cedarpolicy:cedar-java (>=4.3.0 <=4.8.0)

com.cedarpolicy:cedar-java MAVEN version =4.3.0, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.5 Source cves: CVE-2026-55772 Source advisory: OSV:GHSA-93G4-M6XV-CMVR...

com.linecorp.centraldogma:centraldogma-client-java-armeria-xds (>=0.81.0 <=0.83.0) potentially affected by CVE-2026-11752 via com.linecorp.armeria:armeria-xds (>=1.37.0 <=1.39.0)

com.linecorp.armeria:armeria-xds MAVEN version =1.37.0, =0.81.0, =0.83.0 Source cves: CVE-2026-11752 Source advisory: SNYK:JAVA-COMLINECORPARMERIA-17391817...

@fangoling/ai-terminal-assistant (=0.1.0), @theia/ai-anthropic (>=1.57.0 <=1.71.0-next.72) +28 more potentially affected by CVE-2026-46580 via @theia/ai-core (>=1.46.0-next.241 <=1.71.0-next.8)

@theia/ai-core NPM version =1.46.0-next.241, =1.57.0, =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.46.0-next.241, =1.67.0, =1.68.0, =1.64.0, =0.0.1, =1.60.0, =1.46.0-next.241, =1.46.0-next.241, =1.59.0, =1.71.0-next.72 - @theia/ai-ide-agents =1.57.0-next.136 and more Source cves: CVE-2026-4658...

@theia/ai-claude-code (>=1.65.0 <=1.71.0-next.72), @theia/ai-codex (>=1.67.0 <=1.71.0-next.72) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0-next.112 <=1.71.0-next.8)

@theia/ai-chat-ui NPM version =1.57.0-next.112, =1.65.0, =1.67.0, =1.63.0, =1.62.0, =1.60.0, =1.57.0, =1.68.0, =1.71.0-next.72 Source cves: CVE-2026-44688 Source advisory: OSV:GHSA-3JWW-HXQJ-WFQ2...

nl.nl-portal:berichten (>=3.0.0 <=3.0.2), nl.nl-portal:openproduct (>=3.0.0 <=3.0.2) +2 more potentially affected by CVE-2026-54683 via nl.nl-portal:documenten-api (>=0.0.0-test20250707-0 <=3.0.2)

nl.nl-portal:documenten-api MAVEN version =0.0.0-test20250707-0, =3.0.0, =3.0.0, =0.0.0-test20250707-0, =0.0.0-test20250707-0, =3.0.2 Source cves: CVE-2026-54683 Source advisory: OSV:GHSA-JR45-52CW-69H5...

bbot-mcp (>=0.1.0 <=0.1.4), bbot-server (>=0.1.3 <=0.3.1) potentially affected by CVE-2026-12567 via bbot (=2.8.4)

bbot PYPI version =2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on bbot and may be impacted: - bbot-mcp =0.1.0, =0.1.3, =0.3.1 Source cves: CVE-2026-12567 Source advisory: OSV:GHSA-RVP7-W75Q-9FV2...

bbot-mcp (>=0.1.0 <=0.1.4), bbot-server (>=0.1.3 <=0.3.1) potentially affected by CVE-2026-12568 via bbot (=2.8.4)

bbot PYPI version =2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on bbot and may be impacted: - bbot-mcp =0.1.0, =0.1.3, =0.3.1 Source cves: CVE-2026-12568 Source advisory: OSV:GHSA-M54H-VHF9-3W3M...

composio-praisonai (>=0.3.24 <=0.7.20) potentially affected by CVE-2026-57144 via praisonai (=4.6.52)

praisonai PYPI version =4.6.52 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - composio-praisonai =0.3.24, =0.7.20 Source cves: CVE-2026-57144 Source advisory: SNYK:PYTHON-PRAISONAI-17660633...

composio-praisonai (>=0.3.24 <=0.7.20) potentially affected by unknown CVE via praisonai (=4.6.52)

praisonai PYPI version =4.6.52 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - composio-praisonai =0.3.24, =0.7.20 Source cves: unknown CVE Source advisory: OSV:GHSA-29W3-P9W9-WC47...

aitestagent (=0.1.0), doctool (>=1.0.0 <=1.1.0) +2 more potentially affected by CVE-2026-57133 via praisonai (=1.7.1)

praisonai NPM version =1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - aitestagent =0.1.0 - doctool =1.0.0, =1.0.1, =1.1.0 - tamilai =0.0.2 Source cves: CVE-2026-57133 Source advisory: SNYK:JS-PRAISONAI-17660570...

org.jline:jline-demo (>=3.30.0 <=4.1.3) potentially affected by unknown CVE via org.jline:jline-remote-telnet (>=3.30.0 <=4.1.3)

org.jline:jline-remote-telnet MAVEN version =3.30.0, =3.30.0, =4.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-2R2C-CX56-8933...

cn.datask:dat-storer-pgvector (>=0.6.1 <=0.7.1), cn.hexinfo:dat-storer-pgvector (>=0.7.1 <=0.7.2) +6 more potentially affected by CVE-2026-55405 via dev.langchain4j:langchain4j-pgvector (>=1.3.0-beta9 <=1.5.0-beta11)

dev.langchain4j:langchain4j-pgvector MAVEN version =1.3.0-beta9, =0.6.1, =0.7.1, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.1.0, =1.1.7 Source cves: CVE-2026-55405 Source advisory: OSV:GHSA-2MFG-CC43-9PCJ...

1shot (>=0.0.3 <=0.0.9), @4xian/ccapi (=1.0.6) +233 more potentially affected by CVE-2026-54316 via @anthropic-ai/claude-code (>=1.0.108 <=2.1.154)

@anthropic-ai/claude-code NPM version =1.0.108, =0.0.3, =2.1.0, =0.1.18, =1.0.0, =0.4.0, =0.2.3, =0.0.1, =0.6.0-rc34, =1.0.0, =1.3.2-canary.5af7e49 and more Source cves: CVE-2026-54316 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-17391874...

openwebui-token-tracking (=0.1.7) potentially affected by CVE-2026-54022 via open-webui (=0.6.0)

open-webui PYPI version =0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking =0.1.7 Source cves: CVE-2026-54022 Source advisory: SNYK:PYTHON-OPENWEBUI-17400356...

hubzoid (>=0.2.2 <=0.6.0), openwebui-token-tracking (>=0.1.7 <=0.1.10) +1 more potentially affected by CVE-2026-54009 via open-webui (>=0.6.0 <=0.8.8)

open-webui PYPI version =0.6.0, =0.2.2, =0.1.7, =0.1.0, =0.1.5 Source cves: CVE-2026-54009 Source advisory: SNYK:PYTHON-OPENWEBUI-17400342...

@0xwork/connect (=0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.3edc9d7b8d6f <=5.0.1-staging.ffad3b46492e) +227 more potentially affected by CVE-2026-54328 via @earendil-works/pi-coding-agent (>=0.74.0 <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.3edc9d7b8d6f, =5.0.1-staging.0cf58b544cb8, =5.0.1-staging.0cf58b544cb8, =5.1.1-staging.0ad6ac75ae4a, =5.1.1-staging.0ad6ac75ae4a, =5.0.1-staging.4b92bc7a3e3b, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =2026.5.12-zh, =2.0.17,...

0xkobold (>=0.0.1 <=0.8.0), @0xwork/connect (>=0.1.0 <=0.1.7) +525 more potentially affected by CVE-2026-54327 via @mariozechner/pi-coding-agent (>=0.28.0 <=0.73.1)

@mariozechner/pi-coding-agent NPM version =0.28.0, =0.0.1, =0.1.0, =1.0.0-alpha, =0.1.8-fix.3, =0.0.61, =5.0.0, =0.1.6, =0.1.1, =4.0.153, =0.1.1, =0.1.0, =0.1.1-staging.0a1c61e6, =0.1.1, =0.0.2-staging.0a1c61e6, =0.1.0, =0.1.4-staging.fd3ab4c2 and more Source cves: CVE-2026-54327 Source advisory:...

@0xwork/connect (=0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.3edc9d7b8d6f <=5.0.1-staging.ffad3b46492e) +227 more potentially affected by CVE-2026-54327 via @earendil-works/pi-coding-agent (>=0.74.0 <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.3edc9d7b8d6f, =5.0.1-staging.0cf58b544cb8, =5.0.1-staging.0cf58b544cb8, =5.1.1-staging.0ad6ac75ae4a, =5.1.1-staging.0ad6ac75ae4a, =5.0.1-staging.4b92bc7a3e3b, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =2026.5.12-zh, =2.0.17,...

@andor83/mother-may-i (>=1.0.1 <=1.0.10), @base_/cli (>=1.0.6 <=1.0.29-beta.26) +69 more potentially affected by CVE-2026-56317 via nuxt (>=3.0.0 <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1, =1.1.0, =1.0.0-29304822.f444f03, =8.0.0, =0.3.14, =9.8.3, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.1-alpha.33 and more Source cves: CVE-2026-56317 Source advisory: SNYK:JS-NUXT-17353899...

@andor83/mother-may-i (>=1.0.1 <=1.0.10), @awes-io/base-nuxt (>=1.0.0 <=1.0.2) +175 more potentially affected by CVE-2026-56326 via nuxt (>=0.10.7 <=3.20.1)

nuxt NPM version =0.10.7, =1.0.1, =1.0.0, =1.0.6, =1.0.6, =1.22.17, =0.9.1, =1.1.1, =1.0.1, =1.1.0, =2.17.8, =1.0.0-29304822.f444f03, =0.1.5, =0.4.0, =0.1.0, =0.1.0-alpha.6 and more Source cves: CVE-2026-56326 Source advisory: OSV:GHSA-C9CV-MQ2M-PPP3...

1router (>=0.3.96 <=1.0.2), 9router-custom (=0.3.55) +2215 more potentially affected by unknown CVE via dompurify (>=3.0.0 <=3.4.7)

dompurify NPM version =3.0.0, =0.3.96, =0.3.33, =0.5.0, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.0.1, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =1.5.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-DOMPURIFY-17344549...

@afd-software/angular-ng-autocomplete (=14.0.0), @angularexpert/my-workspace (=0.0.0) +143 more potentially affected by CVE-2026-50555 via @angular/platform-server (>=0.0.0-0 <=18.2.14)

@angular/platform-server NPM version =0.0.0-0, =1.0.0, =0.0.1, =2.0.0, =0.0.6, =19.3.0, =1.5.0, =1.4.1, =1.5.2 - @nani-creative-labs/app-builder =1.0.0 - @nger/angular =1.0.3 - @nk-spirit/nk-ngx-bootstrap =7.1.16 and more Source cves: CVE-2026-50555 Source advisory: OSV:GHSA-HQR9-C56F-3X7F...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53827 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53827 Source advisory: SNYK:JS-OPENCLAW-17339813...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53823 via openclaw (>=2026.3.22 <=2026.5.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53823 Source advisory: SNYK:JS-OPENCLAW-17339817...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53835 via openclaw (>=2026.3.22 <=2026.5.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53835 Source advisory: SNYK:JS-OPENCLAW-17394051...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53839 via openclaw (>=2026.3.22 <=2026.5.6)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53839 Source advisory: SNYK:JS-OPENCLAW-17394053...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53836 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53836 Source advisory: SNYK:JS-OPENCLAW-17394043...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53837 via openclaw (>=2026.3.22 <=2026.5.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53837 Source advisory: SNYK:JS-OPENCLAW-17394030...

cn.aradin:aradin-spring-actuator-starter (>=1.1.0 <=1.1.2), cn.hdfk7.boot:hdfk7-boot-starter-common (>=1.0.0 <=3.0.3) +354 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-rabbit (>=3.0.0 <=3.2.10)

org.springframework.amqp:spring-rabbit MAVEN version =3.0.0, =1.1.0, =1.0.0, =3.1.0.5, =3.3.0.0, =1.0.0-JDK21, =0.1.0, =0.6.0, =0.6.0, =0.6.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-41714 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAMQP-17308787...

be.appify.prefab:prefab-annotation-processor (>=0.7.0 <=0.10.2), be.appify.prefab:prefab-mongodb (>=0.5.0 <=0.10.2) +117 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=5.0.0-M4 <=5.0.5)

org.springframework.data:spring-data-mongodb MAVEN version =5.0.0-M4, =0.7.0, =0.5.0, =0.5.0, =4.0.0.0-M2, =4.0.0.0-M2, =3.0.0, =4.0.0, =0.0.1, =0.0.2, =0.0.2, =0.0.2, =0.1.0, =1.2.0, =1.2.2 and more Source cves: CVE-2026-41717 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKDATA-17308780...

ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +14426 more potentially affected by CVE-2026-47691 via io.netty:netty-resolver-dns (>=4.1.0.Beta7 <=4.1.134.Final)

io.netty:netty-resolver-dns MAVEN version =4.1.0.Beta7, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves: CVE-2026-47691 Sour...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +19976 more potentially affected by CVE-2026-47244 via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.134.Final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.Beta4, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +2346 more potentially affected by CVE-2026-45673 via io.netty:netty-resolver-dns (>=4.2.0.Final <=4.2.14.Final)

io.netty:netty-resolver-dns MAVEN version =4.2.0.Final, =0.1.0, =0.1.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-45673 Source advisory: OSV:GHSA-XMV7-R254-6Q78...

ai.chronon:service_2.11 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:service_2.12 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +2478 more potentially affected by CVE-2026-44890 via io.netty:netty-codec-redis (>=4.1.0.Final <=4.1.134.Final)

io.netty:netty-codec-redis MAVEN version =4.1.0.Final, =0.0.86, =0.0.86, =0.0.86, =3.30.1.1, =3.10.0.5, =0.2.3.5, =0.0.1, =2.0.24, =1.1.9, =0.0.1, =0.0.9 and more Source cves: CVE-2026-44890 Source advisory: OSV:GHSA-6GHJ-FRRJ-JJJ3...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +4461 more potentially affected by CVE-2026-44249 via io.netty:netty-handler (>=4.2.0.Final <=4.2.14.Final)

io.netty:netty-handler MAVEN version =4.2.0.Final, =0.1.0, =0.1.0, =4.7.4, =4.7.4, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-44249 Source advisory: OSV:GHSA-3QP7-7MW8-WX86...

res (>=0.2.0 <=0.3.0), scroller-motion (>=0.0.1-beta.2 <=0.0.1-beta.3) potentially affected by CVE-2026-42890 via actual (>=0.2.0 <=0.4.0)

actual NPM version =0.2.0, =0.2.0, =0.0.1-beta.2, =0.0.1-beta.3 Source cves: CVE-2026-42890 Source advisory: OSV:GHSA-7RVM-XJPP-63R9...

apheris-auth (=0.23.0), apheris-cli (>=0.51.0 <=0.52.0) +1 more potentially affected by CVE-2026-41479 via authlib (=1.7.0)

authlib PYPI version =1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - apheris-auth =0.23.0 - apheris-cli =0.51.0, =1.3.0, =1.3.0b4 Source cves: CVE-2026-41479 Source advisory: OSV:GHSA-W8P2-R796-3VMQ...

aad-fastapi (>=1.0.0 <=1.1.2), aad-fastapi-dl37 (>=1.0.0 <=1.0.3) +231 more potentially affected by CVE-2026-41479 via authlib (>=0.10.0 <=1.6.1)

authlib PYPI version =0.10.0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =1.0.2, =1.2.0a20250730, =1.1.0, =1.2.0a20250730, =0.1.0, =0.1.0a1, =1.2.0, =1.2.0a20250730, =1.2.0a20250730, =1.2.0a20250730, =1.2.0, =1.2.1 and more Source cves: CVE-2026-41479 Source advisory: OSV:GHSA-W8P2-R796-3VMQ...

io.camunda:camunda-zeebe (>=8.9.0 <=8.10.0-alpha1-rc3), org.finos.legend.engine:legend-engine-xt-relationalStore-aurora-execution (>=4.128.0 <=4.131.0) +3 more potentially affected by CVE-2026-11400 via software.amazon.jdbc:aws-advanced-jdbc-wrapper (>=3.2.0 <=4.0.0)

software.amazon.jdbc:aws-advanced-jdbc-wrapper MAVEN version =3.2.0, =8.9.0, =4.128.0, =4.131.0 - org.wildfly:wildfly-datasources-galleon-pack =11.4.0.Final - org.wildfly:wildfly-datasources-galleon-pack-common =11.4.0.Final - org.wildfly:wildfly-datasources-preview-galleon-pack =11.4.0.Final...

auto-wasi (=0.1.0), deterministic-wasi-ctx (>=0.1.1 <=0.1.14) +53 more potentially affected by CVE-2026-47261 via wasmtime-wasi (>=0.10.0 <=1.0.2)

wasmtime-wasi CARGO version =0.10.0, =0.1.1, =0.5.3-0, =0.4.0, =0.4.0, =0.5.0, =0.0.1-alpha, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.0, =0.9.0, =0.7.0, =0.9.2 and more Source cves: CVE-2026-47261 Source advisory: OSV:GHSA-2R75-CXRJ-CMPH...

vantage6-algorithm-store (>=4.3.0 <=4.15.1rc1), vantage6-node (>=0.0.0 <=4.15.1rc1) +1 more potentially affected by CVE-2024-27928 via vantage6 (>=0.0.0 <=4.9.1)

vantage6 PYPI version =0.0.0, =4.3.0, =0.0.0, =0.0.0, =4.15.1rc1 Source cves: CVE-2024-27928 Source advisory: OSV:GHSA-4C5C-2VC3-X5W2...