@jamelyassin/shadcn-angular (>=1.0.3 <=1.0.4), @keycloakify/angular-email (>=1.1.0 <=1.2.1) +10 more potentially affected by CVE-2026-33397 via @angular/ssr (>=21.1.2 <=21.2.14)

@angular/ssr NPM version =21.1.2, =1.0.3, =1.1.0, =2.0.0, =1.0.0, =0.0.2, =0.5.0, =0.1.2, =1.0.0, =1.0.0, =1.0.2 Source cves: CVE-2026-33397 Source advisory: OSV:GHSA-VFX2-HV2G-XJ5F...

@hmcts/media-viewer (>=4.2.16-exui-4425 <=4.2.16-exui-4425-rel1) potentially affected by CVE-2026-27738 +1 more via @angular/ssr (=20.3.18)

@angular/ssr NPM version =20.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/ssr and may be impacted: - @hmcts/media-viewer =4.2.16-exui-4425, =4.2.16-exui-4425-rel1 Source cves: CVE-2026-27738, CVE-2026-33397 Source advisory:...

@jamelyassin/shadcn-angular (>=1.0.3 <=1.0.4), @keycloakify/angular-email (>=1.1.0 <=1.2.1) +10 more potentially affected by CVE-2026-27738 +1 more via @angular/ssr (>=21.1.2 <=21.2.14)

@angular/ssr NPM version =21.1.2, =1.0.3, =1.1.0, =2.0.0, =1.0.0, =0.0.2, =0.5.0, =0.1.2, =1.0.0, =1.0.0, =1.0.2 Source cves: CVE-2026-27738, CVE-2026-33397 Source advisory: SNYK:JS-ANGULARSSR-15701178...

@activepieces/piece-amazon-s3 (>=0.5.4 <=0.5.9), @activepieces/piece-amazon-ses (>=0.0.1 <=0.1.3) +1174 more potentially affected by CVE-2026-33349 via fast-xml-parser (>=5.0.1 <=5.5.6)

fast-xml-parser NPM version =5.0.1, =0.5.4, =0.0.1, =0.2.0, =0.5.3, =0.2.1, =0.0.4, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.4.3 and more Source cves: CVE-2026-33349 Source advisory: OSV:GHSA-JP2Q-39XQ-3W4G...

com.codbex.atlas:codbex-atlas-application (>=2.62.0 <=2.110.0), com.codbex.gaia:codbex-gaia-application (>=2.61.0 <=2.64.0) +22 more potentially affected by CVE-2026-33349 via org.webjars.npm:fast-xml-parser (>=4.5.3 <=5.8.0)

org.webjars.npm:fast-xml-parser MAVEN version =4.5.3, =2.62.0, =2.61.0, =2.52.0, =2.52.0, =2.51.0, =2.51.0, =3.6.0, =2.50.0, =5.0.0, =5.0.0, =11.58.0, =12.2.0, =11.58.0, =11.58.0, =11.48.2, =12.1.0 and more Source cves: CVE-2026-33349 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15699648...

5-ifc-check-cli (=1.0.0), 7ghost (>=4.11.2 <=4.11.46) +4164 more potentially affected by CVE-2026-33349 via fast-xml-parser (>=4.0.0 <=4.5.4)

fast-xml-parser NPM version =4.0.0, =4.11.2, =0.1.1, =0.0.2, =1.0.1, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2026-33349 Source advisory: OSV:GHSA-JP2Q-39XQ-3W4G...

0xuath-sdk-react (>=0.0.2 <=0.0.23), 1-test-gulp-1 (>=0.0.1 <=0.0.4) +15094 more potentially affected by CVE-2026-33349 via fast-xml-parser (>=4.0.0 <=5.5.6)

fast-xml-parser NPM version =4.0.0, =0.0.2, =0.0.1, =0.0.1, =1.0.0, =3.1.4, =3.1.6, =0.1.0, =0.0.2, =4.11.2, =0.1.1, =1.0.1 and more Source cves: CVE-2026-33349 Source advisory: SNYK:JS-FASTXMLPARSER-15699647...

42towels (>=0.1.1001 <=0.1.1011), aait (>=0.0.4.80 <=2.3.14) +289 more potentially affected by CVE-2026-3029 via pymupdf (>=1.16.14 <=1.26.6)

pymupdf PYPI version =1.16.14, =0.1.1001, =0.0.4.80, =0.1.3, =0.7.0, =0.0.1, =0.1.31, =0.0.5, =0.0.3.20, =0.0.1, =0.1.0, =1.5.0, =1.2.3, =1.4.11 - arcoocr =1.0.1 and more Source cves: CVE-2026-3029 Source advisory: SNYK:PYTHON-PYMUPDF-15702040...

acherion (>=0.2.0 <=0.9.2), aesp (=2025.9.12) +258 more potentially affected by CVE-2026-33332 via nicegui (>=0.9.11 <=3.8.0)

nicegui PYPI version =0.9.11, =0.2.0, =1.0.0, =0.0.1, =0.1.0, =0.2.0, =0.3.0, =0.0.0, =0.0.0, =0.4.14, =1.0.0, =0.1.0, =1.2.2 and more Source cves: CVE-2026-33332 Source advisory: OSV:GHSA-W5G8-5849-VJ76...

acherion (>=0.2.0 <=0.9.2), aesp (=2025.9.12) +207 more potentially affected by CVE-2026-33332 via nicegui (>=3.0.4 <=3.8.0)

nicegui PYPI version =3.0.4, =0.2.0, =1.0.0, =0.4.0, =0.1.0, =0.2.0, =0.3.0, =0.0.0, =0.4.14, =1.0.0, =0.1.0, =1.2.2 - bellatrex =0.4.0 and more Source cves: CVE-2026-33332 Source advisory: SNYK:PYTHON-NICEGUI-15701842...

@kids-reporter/cms-core (>=1.0.17 <=1.0.36), @kids-reporter/draft-editor (>=1.0.19 <=1.0.36) potentially affected by CVE-2025-46720 +1 more via @keystone-6/core (=6.5.1)

@keystone-6/core NPM version =6.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @kids-reporter/cms-core =1.0.17, =1.0.19, =1.0.36 Source cves: CVE-2025-46720, CVE-2026-33326 Source advisory:...

contextifier (>=0.1.0 <=0.2.2), datascav-switch (=1.1.0) +10 more potentially affected by CVE-2026-3029 via pymupdf (>=1.26.5 <=1.26.6)

pymupdf PYPI version =1.26.5, =0.1.0, =0.5.0, =0.1.0, =0.0.53, =0.13.1, =0.1.0, =0.3.0 - xl-pdf =0.1.1 Source cves: CVE-2026-3029 Source advisory: OSV:GHSA-CXQH-P2W9-FMR7...

@openinc/parse-server-opendash (>=4.0.0 <=4.0.3) potentially affected by CVE-2026-33323 via parse-server (=9.6.0-alpha.37)

parse-server NPM version =9.6.0-alpha.37 is affected by a known vulnerability. The following packages have a transitive dependency on parse-server and may be impacted: - @openinc/parse-server-opendash =4.0.0, =4.0.3 Source cves: CVE-2026-33323 Source advisory: OSV:GHSA-H29G-Q5C2-9H4F...

@bigegg/parse-server-schema-config (>=1.0.5 <=1.0.10), @kontaa/subgraph (>=1.0.1 <=1.2.3) +27 more potentially affected by CVE-2026-33323 via parse-server (>=2.0.8 <=7.5.4)

parse-server NPM version =2.0.8, =1.0.5, =1.0.1, =1.2.1, =2.4.46, =2.4.8, =1.0.0, =1.0.0, =1.0.1, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.29 - parse-cli-server2 =0.0.30 and more Source cves: CVE-2026-33323 Source advisory: OSV:GHSA-H29G-Q5C2-9H4F...

@openinc/parse-server-opendash (>=4.0.0 <=4.0.3) potentially affected by CVE-2026-33323 via parse-server (=9.6.0-alpha.37)

parse-server NPM version =9.6.0-alpha.37 is affected by a known vulnerability. The following packages have a transitive dependency on parse-server and may be impacted: - @openinc/parse-server-opendash =4.0.0, =4.0.3 Source cves: CVE-2026-33323 Source advisory: SNYK:JS-PARSESERVER-15701837...

django-cfg (>=1.7.65 <=2.2.69), dynrender-skia (>=0.2.6 <=0.2.8) +9 more potentially affected by CVE-2025-27363 via skia-python (>=121.0.0b6 <=138.0.0)

skia-python PYPI version =121.0.0b6, =1.7.65, =0.2.6, =1.0.0b7, =0.1.1, =0.1.0, =2.1.1, =0.6.2, =1.6.0, =0.1.0, =0.2.0 Source cves: CVE-2025-27363 Source advisory: OSV:GHSA-2MHW-8QCG-GR96...

@dicebear/collection (>=9.0.0 <=9.4.0), @fduenascoink/ui-sdk (>=18.0.0 <=18.0.4) +1 more potentially affected by CVE-2026-33311 via @dicebear/initials (>=9.0.0 <=9.4.0)

@dicebear/initials NPM version =9.0.0, =9.0.0, =18.0.0, =9.0.0, =9.4.0 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

@dicebear/collection (>=7.0.0 <=7.1.3), dicebear (>=7.0.0 <=7.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=7.0.0 <=7.1.3)

@dicebear/initials NPM version =7.0.0, =7.0.0, =7.0.0, =7.1.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...

@dicebear/collection (>=7.0.0 <=7.1.3), dicebear (>=7.0.0 <=7.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=7.0.0 <=7.1.3)

@dicebear/initials NPM version =7.0.0, =7.0.0, =7.0.0, =7.1.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

@dicebear/collection (>=9.0.0 <=9.4.0), @fduenascoink/ui-sdk (>=18.0.0 <=18.0.4) +1 more potentially affected by CVE-2026-33311 via @dicebear/initials (>=9.0.0 <=9.4.0)

@dicebear/initials NPM version =9.0.0, =9.0.0, =18.0.0, =9.0.0, =9.4.0 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...

@dicebear/collection (>=8.0.0 <=8.0.2), dicebear (>=8.0.0 <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/initials (>=8.0.0 <=8.0.2)

@dicebear/initials NPM version =8.0.0, =8.0.0, =8.0.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...

@dicebear/collection (>=8.0.0 <=8.0.2), dicebear (>=8.0.0 <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/initials (>=8.0.0 <=8.0.2)

@dicebear/initials NPM version =8.0.0, =8.0.0, =8.0.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

@dicebear/collection (>=6.0.0 <=6.1.3), dicebear (>=6.0.0 <=6.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=6.0.0 <=6.1.3)

@dicebear/initials NPM version =6.0.0, =6.0.0, =6.0.0, =6.1.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...

@dicebear/collection (>=6.0.0 <=6.1.3), dicebear (>=6.0.0 <=6.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=6.0.0 <=6.1.3)

@dicebear/initials NPM version =6.0.0, =6.0.0, =6.0.0, =6.1.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

@dicebear/collection (>=5.0.6 <=5.4.3), dicebear (>=5.0.6 <=5.4.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=5.0.6 <=5.4.3)

@dicebear/initials NPM version =5.0.6, =5.0.6, =5.0.6, =5.4.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...

@dicebear/collection (>=5.0.6 <=5.4.3), dicebear (>=5.0.6 <=5.4.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=5.0.6 <=5.4.3)

@dicebear/initials NPM version =5.0.6, =5.0.6, =5.0.6, =5.4.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

access-intake-esm (>=2026.4.17 <=2026.4.19), access-nri-intake (>=0.0.2 <=1.6.2) +184 more potentially affected by CVE-2026-33310 via intake (>=0.4.4 <=2.0.9)

intake PYPI version =0.4.4, =2026.4.17, =0.0.2, =0.1.0, =1.0.0, =1.5.0, =0.21.0, =1.1.0, =2024.6.4.1, =0.8.0, =0.1.0a1, =0.0.0, =1.0.0, =0.2.0, =1.0.0 and more Source cves: CVE-2026-33310 Source advisory: OSV:GHSA-37G4-QQQV-7M99...

langflow-nightly (=1.8.0.dev24) potentially affected by CVE-2026-33309 via langflow-base (=0.7.2)

langflow-base PYPI version =0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on langflow-base and may be impacted: - langflow-nightly =1.8.0.dev24 Source cves: CVE-2026-33309 Source advisory: SNYK:PYTHON-LANGFLOWBASE-15702032...

org.webjars.npm:file-entry-cache (>=5.0.1 <=6.0.1), org.webjars.npm:flat-cache (>=2.0.1 <=3.0.4) +6 more potentially affected by CVE-2026-33228 via org.webjars.npm:flatted (>=2.0.1 <=3.3.4)

org.webjars.npm:flatted MAVEN version =2.0.1, =5.0.1, =2.0.1, =3.3.1, =0.3.16, =0.2.107, =1.1.13, =0.1.30, =1.7.6, =2.0.2 Source cves: CVE-2026-33228 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15700434...

@ahmttyydn/pre-post-request-scripts (>=1.0.0 <=1.0.9), @alfresco/adf-testing (=6.0.0-A.2-8258) +363 more potentially affected by CVE-2026-33228 via flatted (>=3.0.1 <=3.4.1)

flatted NPM version =3.0.1, =1.0.0, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =0.0.10, =0.0.11, =0.0.4, =1.0.0, =0.0.20, =0.0.19, =1.2.2, =1.5.8 and more Source cves: CVE-2026-33228 Source advisory: SNYK:JS-FLATTED-15700433...

ahwaz (=2.2.3), arkive (>=0.1.1 <=0.3.1) +46 more potentially affected by CVE-2026-32889 via tinytag (>=1.10.0 <=2.2.0)

tinytag PYPI version =1.10.0, =0.1.1, =7.8.2, =4.8.0, =0.0.20, =1.0.20, =0.0.4, =1.0.0, =1.9.0, =0.1.0, =0.0.1, =3.8.5, =1.1.0b12, =1.1.0b17 and more Source cves: CVE-2026-32889 Source advisory: OSV:GHSA-F4RQ-2259-HV29...

litestar-ormar (>=0.0.1 <=0.0.6) potentially affected by CVE-2026-27953 via ormar (=0.20.2)

ormar PYPI version =0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on ormar and may be impacted: - litestar-ormar =0.0.1, =0.0.6 Source cves: CVE-2026-27953 Source advisory: OSV:GHSA-F964-WHRQ-44H8...

@autolabz/mcp-bridge (>=1.0.8 <=1.0.9) potentially affected by unknown CVE via mcp-bridge (=1.0.0)

mcp-bridge NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-bridge and may be impacted: - @autolabz/mcp-bridge =1.0.8, =1.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-WVR4-3WQ4-GPC5...

http-api-problem (>=0.50.0 <=0.50.2) potentially affected by CVE-2026-33241 via salvo (>=0.10.4 <=0.11.6)

salvo CARGO version =0.10.4, =0.50.0, =0.50.2 Source cves: CVE-2026-33241 Source advisory: OSV:GHSA-PP9R-XG4C-8J4X...

01os (=0.0.14), aa-rag (>=0.4.2 <=0.4.3) +928 more potentially affected by CVE-2026-33236 via nltk (>=2.0.4 <=3.9.3)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.1.0 and more Source cves: CVE-2026-33236 Source advisory: SNYK:PYTHON-NLTK-15692505...

01os (=0.0.14), aa-rag (>=0.4.2 <=0.4.3) +924 more potentially affected by CVE-2026-33236 via nltk (>=2.0.4 <=3.9.2)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.1.0 and more Source cves: CVE-2026-33236 Source advisory: OSV:GHSA-469J-VMHF-R6V7...

01os (=0.0.14), aa-rag (>=0.4.2 <=0.4.3) +928 more potentially affected by CVE-2026-33231 via nltk (>=2.0.4 <=3.9.3)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.1.0 and more Source cves: CVE-2026-33231 Source advisory: SNYK:PYTHON-NLTK-15692504...

01os (=0.0.14), aa-rag (>=0.4.2 <=0.4.3) +928 more potentially affected by CVE-2026-33231 via nltk (>=2.0.4 <=3.9.3)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.1.0 and more Source cves: CVE-2026-33231 Source advisory: OSV:GHSA-JM6W-M3J8-898G...

1shot (>=0.0.1 <=0.0.2), @3030-labs/wotw (>=0.8.4 <=0.9.0) +179 more potentially affected by CVE-2026-33068 via @anthropic-ai/claude-code (>=2.0.0 <=2.1.71)

@anthropic-ai/claude-code NPM version =2.0.0, =0.0.1, =0.8.4, =2.1.0, =0.0.0-dev-20260312143810, =1.5.6, =0.0.0-main-260517022600, =0.0.0-main-260517043948, =0.2.5, =4.10.0, =2.1.2, =0.3.0, =0.3.5 and more Source cves: CVE-2026-33068 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-15701841...

1shot (>=0.0.1 <=0.0.9), @3030-labs/wotw (>=0.8.4 <=0.9.0) +376 more potentially affected by CVE-2026-33068 via @anthropic-ai/claude-code (>=0.2.126 <=2.1.52)

@anthropic-ai/claude-code NPM version =0.2.126, =0.0.1, =0.8.4, =1.0.0, =2.1.0, =0.0.0-dev-20260312143810, =1.5.6, =0.1.18, =1.0.0, =0.4.0, =0.11.0 - @arach/hooked =1.1.1 and more Source cves: CVE-2026-33068 Source advisory: OSV:GHSA-MMGP-WC2J-QCV7...

Brains (>=0.1.0 <=0.2.0), MFEKmath (>=0.1.0 <=0.1.1) +1604 more potentially affected by CVE-2026-33056 via tar (>=0.2.14 <=0.4.40)

tar CARGO version =0.2.14, =0.1.0, =0.1.0, =0.1.0, =0.10.2, =0.1.0, =0.1.2, =0.23.0, =0.23.0, =0.9.0, =1.2.0, =0.5.4, =0.5.4, =1.0.1 and more Source cves: CVE-2026-33056 Source advisory: OSV:RUSTSEC-2026-0067...

jsonwebtoken-aws-lc (=9.3.0), jwts (>=0.5.0 <=0.5.1) +2 more potentially affected by CVE-2026-4428 via aws-lc-sys (=0.21.0)

aws-lc-sys CARGO version =0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-lc-sys and may be impacted: - jsonwebtoken-aws-lc =9.3.0 - jwts =0.5.0, =0.102.6, =0.20.0, =0.31.0 Source cves: CVE-2026-4428 Source advisory: OSV:RUSTSEC-2026-0048...

Brains (>=0.1.0 <=0.2.0), MFEKmath (>=0.1.0 <=0.1.1) +1604 more potentially affected by CVE-2026-33055 via tar (>=0.2.14 <=0.4.40)

tar CARGO version =0.2.14, =0.1.0, =0.1.0, =0.1.0, =0.10.2, =0.1.0, =0.1.2, =0.23.0, =0.23.0, =0.9.0, =1.2.0, =0.5.4, =0.5.4, =1.0.1 and more Source cves: CVE-2026-33055 Source advisory: OSV:RUSTSEC-2026-0068...

abadpour (>=6.13.1 <=7.24.1), abcli (>=9.273.1 <=9.572.1) +766 more potentially affected by CVE-2025-15031 via mlflow-skinny (>=3.0.0 <=3.9.0)

mlflow-skinny PYPI version =3.0.0, =6.13.1, =9.273.1, =2.0.0, =0.1.0, =0.1.0, =0.4.4, =0.3.0, =0.1.0, =1.0.0, =1.1.0, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-15031 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-16698159...

a2 (>=0.1.0 <=0.3.17), abadpour (>=6.13.1 <=7.24.1) +952 more potentially affected by CVE-2025-15031 via mlflow (>=0.8.2 <=3.9.0)

mlflow PYPI version =0.8.2, =0.1.0, =6.13.1, =9.273.1, =1.1.0, =0.1.0, =0.1.0, =0.4.4, =0.3.0, =0.0.5, =1.0.0, =0.1.0, =1.1.1 - ai-helpers-pytorch-utils =0.1.0a1 - ailine-core =0.5.5 and more Source cves: CVE-2025-15031 Source advisory: OSV:GHSA-FHFF-QMM8-H2FP...

abadpour (>=6.13.1 <=7.24.1), abcli (>=9.273.1 <=9.572.1) +702 more potentially affected by CVE-2025-15031 via mlflow (>=3.0.0rc2 <=3.9.0)

mlflow PYPI version =3.0.0rc2, =6.13.1, =9.273.1, =2.0.0, =0.1.0, =0.1.0, =0.4.4, =0.3.0, =0.1.0, =1.0.0, =1.1.0, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-15031 Source advisory: SNYK:PYTHON-MLFLOW-15700505...

acegisecurity:acegi-security (=0.7.0), acegisecurity:acegi-security-cas (=0.7.0) +5 more potentially affected by CVE-2026-22735 via springframework:spring-web (>=1.0.1 <=1.2.1)

springframework:spring-web MAVEN version =1.0.1, =1.0-rc2, =1.0-rc3 Source cves: CVE-2026-22735 Source advisory: SNYK:JAVA-SPRINGFRAMEWORK-15701758...

ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0 <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0 <=4.6.0) +2681 more potentially affected by CVE-2026-22735 via org.springframework:spring-web (>=7.0.0 <=7.0.5)

org.springframework:spring-web MAVEN version =7.0.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-1, =0.1.1, =4.7.0, =0.2.0, =0.5.0, =0.7.0, =0.7.5 - be.appify.prefab:prefab-core =0.2.0 - be.appify.prefab:prefab-kafka =0.2.0 and more Source cves: CVE-2026-22735 Source advisory:...

ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0 <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0 <=4.6.0) +1553 more potentially affected by CVE-2026-22735 via org.springframework:spring-webmvc (>=7.0.0 <=7.0.5)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.7.5 and more Source cves: CVE-2026-22735 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-15701756...

acegisecurity:acegi-security (=0.7.0), acegisecurity:acegi-security-cas (=0.7.0) +4 more potentially affected by CVE-2026-22735 via springframework:spring-webmvc (>=1.1.3 <=1.2.1)

springframework:spring-webmvc MAVEN version =1.1.3, =1.0-rc2, =1.0-rc3 Source cves: CVE-2026-22735 Source advisory: SNYK:JAVA-SPRINGFRAMEWORK-15701757...