cc.openxiot.gateway:device-core (>=0.0.1, <=0.0.3), cc.openxiot.gateway:gateway-manager (>=0.0.1, <=0.0.3) +37 more potentially affected by CVE-2026-102464 via io.vertx:vertx-mqtt (>=4.0.0, <=4.5.34)

io.vertx:vertx-mqtt MAVEN version =4.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.6, =1.7.0-rc2, =1.7.0-rc2, =1.0.3, =1.0.0, =1.0.0, =1.1.0, =2.3.0 and more Source cves: CVE-2026-102464 Source advisory: MEND:CVE-2026-102464...

cc.openxiot:resty (>=0.0.1, <=0.0.23), cc.unitmesh:connection-manager (>=0.3.3, <=0.3.4) +70 more potentially affected by CVE-2026-102461 via io.vertx:vertx-json-schema (>=4.0.0, <=4.5.34)

io.vertx:vertx-json-schema MAVEN version =4.0.0, =0.0.1, =0.3.3, =v0.27.12, =2.2.9, =2.3.1, =3.0.0-b1, =3.0.0-b4, =0.1, =3.0.4, =3.3.3 and more Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

cc.openxiot:resty (>=0.0.1, <=0.0.23), com.hexagonkt:rest_tools (3.4.7) +7 more potentially affected by CVE-2026-102461 via io.vertx:vertx-openapi (>=4.4.0, <=4.5.34)

io.vertx:vertx-openapi MAVEN version =4.4.0, =0.0.1, =0.20.0, =0.20.0, =3.20.1, =3.20.1, =4.4.0, =4.4.0, =4.4.0, =4.5.34 Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

dev.vertique:vertique-mcp-server (>=0.2.0, <=0.3.0), dev.vertique:vertique-rest-openapi-docs (0.3.0) +22 more potentially affected by CVE-2026-102461 via io.vertx:vertx-json-schema (>=5.1.2, <=5.1.9)

io.vertx:vertx-json-schema MAVEN version =5.1.2, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =5.0.4, =4.0.0, =4.0.0, =4.0.0, =4.0.2 and more Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

io.strimzi:kafka-bridge (>=1.2.0-rc1, <=1.2.0), io.vertx:vertx-openapi (5.2.0) +5 more potentially affected by CVE-2026-102461 via io.vertx:vertx-json-schema (5.2.0)

io.vertx:vertx-json-schema MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-json-schema and may be impacted: - io.strimzi:kafka-bridge =1.2.0-rc1, =1.2.0 - io.vertx:vertx-openapi 5.2.0 - io.vertx:vertx-stack-depchain...

dev.vertique:vertique-rest-openapi-validation (>=0.1.0, <=0.3.0), io.smallrye.reactive:smallrye-mutiny-vertx-web-api-service (>=4.0.1, <=4.0.2) +5 more potentially affected by CVE-2026-102461 via io.vertx:vertx-openapi (>=5.1.5, <=5.1.9)

io.vertx:vertx-openapi MAVEN version =5.1.5, =0.1.0, =4.0.1, =1.1.0-rc1, =5.1.5, =5.1.5, =5.1.5, =5.1.5, =5.1.9 Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

com.artipie:artipie (>=v0.27.12, <=v0.30.1), com.datasqrl:sqrl-config (0.6.1) +22 more potentially affected by CVE-2026-102461 via io.vertx:vertx-web-validation (>=4.0.0, <=4.5.34)

io.vertx:vertx-web-validation MAVEN version =4.0.0, =v0.27.12, =3.1.0-rc1, =1.0.1, =0.11.0, =0.11.0, =2.13.0, =2.0.0.rc1, =2.0.0.rc1, =0.21.0, =0.32.0 and more Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

io.smallrye.reactive:smallrye-mutiny-vertx-web-api-service (>=4.0.1, <=4.0.2), io.strimzi:kafka-bridge (>=1.1.0-rc1, <=1.1.0) +3 more potentially affected by CVE-2026-102461 via io.vertx:vertx-web-openapi-router (>=5.1.5, <=5.1.9)

io.vertx:vertx-web-openapi-router MAVEN version =5.1.5, =4.0.1, =1.1.0-rc1, =5.1.5, =5.1.5, =5.1.5, =5.1.9 Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

cc.openxiot:resty (>=0.0.1, <=0.0.23), io.neonbee:neonbee-core (>=0.20.0, <=0.37.27) +4 more potentially affected by CVE-2026-102461 via io.vertx:vertx-web-openapi-router (>=4.4.0, <=4.5.34)

io.vertx:vertx-web-openapi-router MAVEN version =4.4.0, =0.0.1, =0.20.0, =0.20.0, =3.20.1, =4.4.0, =4.4.0, =4.5.34 Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

com.flipkart.krystal:vajram-sql-vertx (>=11.0.0, <=11.0.1), com.flipkart.krystal:vajram-sql-vertx-codegen (>=11.0.0, <=11.0.1) +20 more potentially affected by CVE-2026-103224 via io.vertx:vertx-mysql-client (>=5.1.0, <=5.1.9)

io.vertx:vertx-mysql-client MAVEN version =5.1.0, =11.0.0, =11.0.0, =1.11.0, =1.11.0, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =4.5.3, =7.1.0, =7.1.3 and more Source cves: CVE-2026-103224 Source advisory: MEND:CVE-2026-103224...

ai.pipestream:platform-registration-service (>=0.1.7, <=0.1.23), app.cash.chronicler:chronicler-player (1.0.1) +196 more potentially affected by CVE-2026-103224 via io.vertx:vertx-mysql-client (>=4.0.0, <=4.5.34)

io.vertx:vertx-mysql-client MAVEN version =4.0.0, =0.1.7, =4.20.0, =0.0.10, =0.0.1, =11.0.2, =11.0.2, =5.1.0, =2.0.0, =2.0.0, =2.2.2, =1.9.1-release, =4.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2026-103224 Source advisory: MEND:CVE-2026-103224...

ai.pipestream:connector-admin-service (0.1.18), ai.pipestream:pipestream-engine (0.0.6) +223 more potentially affected by CVE-2026-103223 via io.vertx:vertx-pg-client (>=3.8.0, <=4.5.34)

io.vertx:vertx-pg-client MAVEN version =3.8.0, =0.1.25, =0.0.1-v20250610200556, =0.0.10, =1.2, =0.3.1.2, =0.3.1.2, =0.6.0.0, =0.1.0, =0.1.0, =0.4.0.1, =0.8.3.0 and more Source cves: CVE-2026-103223 Source advisory: MEND:CVE-2026-103223...

codes.rafael.task:task-processor-jdbc (1.10), com.datasqrl:sqrl-discovery (>=0.7.0, <=0.11.5) +52 more potentially affected by CVE-2026-103223 via io.vertx:vertx-pg-client (>=5.0.0, <=5.1.8)

io.vertx:vertx-pg-client MAVEN version =5.0.0, =0.7.0, =0.7.0, =0.7.0, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.24.2, =2.4.0-rc1, =3.0.0 and more Source cves: CVE-2026-103223 Source advisory: MEND:CVE-2026-103223...

ai.pipestream:platform-registration-service (>=0.1.7, <=0.1.23), app.cash.chronicler:chronicler-player (1.0.1) +196 more potentially affected by CVE-2026-102466 via io.vertx:vertx-mysql-client (>=4.0.0, <=4.5.34)

io.vertx:vertx-mysql-client MAVEN version =4.0.0, =0.1.7, =4.20.0, =0.0.10, =0.0.1, =11.0.2, =11.0.2, =5.1.0, =2.0.0, =2.0.0, =2.2.2, =1.9.1-release, =4.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2026-102466 Source advisory: MEND:CVE-2026-102466...

com.flipkart.krystal:vajram-sql-vertx (>=11.0.0, <=11.0.1), com.flipkart.krystal:vajram-sql-vertx-codegen (>=11.0.0, <=11.0.1) +20 more potentially affected by CVE-2026-102466 via io.vertx:vertx-mysql-client (>=5.1.0, <=5.1.9)

io.vertx:vertx-mysql-client MAVEN version =5.1.0, =11.0.0, =11.0.0, =1.11.0, =1.11.0, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =4.5.3, =7.1.0, =7.1.3 and more Source cves: CVE-2026-102466 Source advisory: MEND:CVE-2026-102466...

ai.pipestream:connector-admin-service (0.1.18), ai.pipestream:pipestream-engine (0.0.6) +210 more potentially affected by CVE-2026-102463 via io.vertx:vertx-pg-client (>=4.0.0, <=4.5.34)

io.vertx:vertx-pg-client MAVEN version =4.0.0, =0.1.25, =0.0.1-v20250610200556, =0.0.10, =1.2, =0.3.1.2, =0.3.1.2, =0.6.0.0, =0.1.0, =0.1.0, =0.4.0.1, =0.8.3.0 and more Source cves: CVE-2026-102463 Source advisory: MEND:CVE-2026-102463...

com.datasqrl:sqrl-discovery (>=0.10.6, <=0.11.5), com.datasqrl:sqrl-planner (>=0.10.6, <=0.11.5) +32 more potentially affected by CVE-2026-102463 via io.vertx:vertx-pg-client (>=5.1.0, <=5.1.9)

io.vertx:vertx-pg-client MAVEN version =5.1.0, =0.10.6, =0.10.6, =0.10.6, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =18.0.0-rc1, =1.11.0, =1.11.0, =1.0.0, =1.0.7 and more Source cves: CVE-2026-102463 Source advisory: MEND:CVE-2026-102463...

@age.nt/engine (0.8.0), @age.nt/nt (0.8.0) +37 more potentially affected by CVE-2026-109855 via undici (8.11.0)

undici NPM version 8.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on undici and may be impacted: - @age.nt/engine 0.8.0 - @age.nt/nt 0.8.0 - @agegr/pi-web =0.9.3, =0.9.3, =0.12.1, =0.9.3, =0.0.1, =0.0.1, =2026.9.8, =0.2.39, =0.14.1-next.2947341.0,...

io.quarkus:quarkus-reactive-db2-client (>=1.6.0.cr1, <=3.40.1), io.quarkus:quarkus-reactive-db2-client-deployment (>=1.6.0.cr1, <=3.40.1) +4 more potentially affected by CVE-2026-102469 via io.vertx:vertx-db2-client (>=3.9.1, <=4.5.34)

io.vertx:vertx-db2-client MAVEN version =3.9.1, =1.6.0.cr1, =1.6.0.cr1, =0.1.0, =3.9.1, =3.9.1, =4.0.0-rc, =4.1.2-rc Source cves: CVE-2026-102469 Source advisory: MEND:CVE-2026-102469...

io.github.softistx:stx-jpa (>=0.2.0, <=0.2.1), io.github.softistx:stx-jpa-ktor (>=0.2.0, <=0.2.1) +11 more potentially affected by CVE-2026-102469 via io.vertx:vertx-db2-client (>=5.0.0, <=5.1.8)

io.vertx:vertx-db2-client MAVEN version =5.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =4.0.0-beta0, =5.0.0, =5.0.0, =5.1.8 Source cves: CVE-2026-102469 Source advisory: MEND:CVE-2026-102469...

io.quarkus:quarkus-reactive-mssql-client (>=2.1.0.cr1, <=3.40.1), io.quarkus:quarkus-reactive-mssql-client-deployment (>=2.1.0.cr1, <=3.40.1) +3 more potentially affected by CVE-2026-102462 via io.vertx:vertx-mssql-client (>=4.1.0.beta1, <=4.5.34)

io.vertx:vertx-mssql-client MAVEN version =4.1.0.beta1, =2.1.0.cr1, =2.1.0.cr1, =2.7.0, =4.1.0.beta1, =4.1.0.beta1, =4.5.34 Source cves: CVE-2026-102462 Source advisory: MEND:CVE-2026-102462...

io.quarkus:quarkus-reactive-mssql-client (4.0.0.beta1), io.quarkus:quarkus-reactive-mssql-client-deployment (4.0.0.beta1) +5 more potentially affected by CVE-2026-102462 via io.vertx:vertx-mssql-client (>=5.1.2, <=5.1.9)

io.vertx:vertx-mssql-client MAVEN version =5.1.2, =4.0.0, =5.1.2, =5.1.2, =5.1.9 - vn.io.lcx:common-lib 4.1.0.lcx - vn.io.lcx:processor 4.1.0.lcx Source cves: CVE-2026-102462 Source advisory: MEND:CVE-2026-102462...

ai.pipestream.module:module-opensearch-sink (0.1.1), ai.pipestream.module:module-testing-sidecar (0.0.1) +147 more potentially affected by CVE-2026-102465 via io.vertx:vertx-redis-client (>=4.0.0, <=4.5.34)

io.vertx:vertx-redis-client MAVEN version =4.0.0, =0.1.7, =2026.07.08, =2026.04.24-1, =2026.07.08, =1.1.0, =1.0.1, =0.8.1, =0.7.0, =0.7.0, =0.9.0 and more Source cves: CVE-2026-102465 Source advisory: MEND:CVE-2026-102465...

dev.vertique:vertique-cache-redis (>=0.2.0, <=0.3.0), dev.vertique:vertique-rate-limit-redis (>=0.2.0, <=0.3.0) +27 more potentially affected by CVE-2026-102465 via io.vertx:vertx-redis-client (>=5.1.0, <=5.1.9)

io.vertx:vertx-redis-client MAVEN version =5.1.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0 - io.quarkus:quarkus-oidc-redis-token-state-manager 4.0.0.beta1 - io.quarkus:quarkus-oidc-redis-token-state-manager-deployment 4.0.0.beta1 - io.quarkus:quarkus-redis-cache 4.0.0.beta1 -...

ai.tock:bot-test (26.9.0), ai.tock:bot-test-base (26.9.0) +487 more potentially affected by CVE-2026-102467 via io.vertx:vertx-core (5.2.0)

io.vertx:vertx-core MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-core and may be impacted: - ai.tock:bot-test 26.9.0 - ai.tock:bot-test-base 26.9.0 - ai.tock:bot-toolkit 26.9.0 - ai.tock:bot-toolkit-base 26.9.0 -...

ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +8834 more potentially affected by CVE-2026-102467 via io.vertx:vertx-core (>=4.0.0, <=4.5.34)

io.vertx:vertx-core MAVEN version =4.0.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0, =0.1.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.tock:bot-test (>=25.9.0, <=26.3.4), ai.tock:bot-test-base (>=25.9.0, <=26.3.4) +1961 more potentially affected by CVE-2026-102467 via io.vertx:vertx-core (>=5.0.0, <=5.1.8)

io.vertx:vertx-core MAVEN version =5.0.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.4 and more Source cves: CVE-2026-102467 Source advisory: MEND:CVE-2026-102467...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +11312 more potentially affected by CVE-2026-110871 via nodemailer (>=3.0.2, <=10.0.9)

nodemailer NPM version =3.0.2, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 and more Source cves: CVE-2026-110871 Source advisory: SNYK:JS-NODEMAILER-20953008...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +11335 more potentially affected by CVE-2026-110869 via nodemailer (>=3.0.2, <=10.0.12)

nodemailer NPM version =3.0.2, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 and more Source cves: CVE-2026-110869 Source advisory: SNYK:JS-NODEMAILER-20953006...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +11312 more potentially affected by CVE-2026-110872 via nodemailer (>=3.0.2, <=10.0.9)

nodemailer NPM version =3.0.2, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 and more Source cves: CVE-2026-110872 Source advisory: SNYK:JS-NODEMAILER-20953004...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +11335 more potentially affected by CVE-2026-110870 via nodemailer (>=3.0.2, <=10.0.12)

nodemailer NPM version =3.0.2, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 and more Source cves: CVE-2026-110870 Source advisory: SNYK:JS-NODEMAILER-20952995...

org.webjars.npm:angular-lock (2.0.3), org.webjars.npm:auth0-js (>=8.4.0, <=9.28.0) +40 more potentially affected by CVE-2026-110816 via org.webjars.npm:qs (>=6.7.0, <=6.16.0)

org.webjars.npm:qs MAVEN version =6.7.0, =8.4.0, =1.19.0, =2.0.0-canary.20210330, =1.1.0, =4.0.0-alpha, =4.0.0-alpha.4 - org.webjars.npm:github-com-auth0-angular-auth0 3.0.0 - org.webjars.npm:github-com-auth0-auth0-js 9.4.1 - org.webjars.npm:github-com-lbovet-hybind 1.1.0 and more Source cves:...

1k-utils (>=2.1.0, <=2.2.3), 20190403-utils (1.0.0) +16379 more potentially affected by CVE-2026-110816 via qs (>=6.7.0, <=6.16.0)

qs NPM version =6.7.0, =2.1.0, =2.0.0, =0.0.1, =1.0.0, =0.0.28, =1.0.8, =4.11.0, =2.0.1, =0.0.1, =0.1.1, =3.10.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-110816 Source advisory: SNYK:JS-QS-20943482...

@bitblit/ratchet-aws-node-only (>=6.1.226-alpha, <=6.1.231-alpha), @bitblit/ratchet-epsilon-common (>=6.1.226-alpha, <=6.1.231-alpha) +40 more potentially affected by CVE-2026-110872 via nodemailer (>=10.0.0, <=10.0.9)

nodemailer NPM version =10.0.0, =6.1.226-alpha, =6.1.226-alpha, =6.1.226-alpha, =1.3.1, =12.4.0-depup.0, =39.2.0, =0.8.0, =0.3.0, =0.3.0, =0.7.1, =2.9.4-beta.10404, =2.9.4-beta.10422 and more Source cves: CVE-2026-110872 Source advisory: MEND:CVE-2026-110872...

@bitblit/ratchet-aws-node-only (>=6.1.226-alpha, <=6.1.231-alpha), @bitblit/ratchet-epsilon-common (>=6.1.226-alpha, <=6.1.231-alpha) +40 more potentially affected by CVE-2026-110871 via nodemailer (>=10.0.0, <=10.0.9)

nodemailer NPM version =10.0.0, =6.1.226-alpha, =6.1.226-alpha, =6.1.226-alpha, =1.3.1, =12.4.0-depup.0, =39.2.0, =0.8.0, =0.3.0, =0.3.0, =0.7.1, =2.9.4-beta.10404, =2.9.4-beta.10422 and more Source cves: CVE-2026-110871 Source advisory: MEND:CVE-2026-110871...

@3ngram/server (>=1.8.4, <=1.8.5), @3sixty/messaging-connector-smtp (0.20.0-next.0) +94 more potentially affected by CVE-2026-110870 via nodemailer (>=10.0.0, <=10.0.12)

nodemailer NPM version =10.0.0, =1.8.4, =0.2.0, =0.1.0, =6.1.226-alpha, =6.1.226-alpha, =6.1.226-alpha, =0.1.0, =1.3.1, =1.4.2 - @cedarjs/mailer-handler-nodemailer 8.0.0-canary.3317 and more Source cves: CVE-2026-110870 Source advisory: MEND:CVE-2026-110870...

@3ngram/server (>=1.8.4, <=1.8.5), @3sixty/messaging-connector-smtp (0.20.0-next.0) +94 more potentially affected by CVE-2026-110869 via nodemailer (>=10.0.0, <=10.0.12)

nodemailer NPM version =10.0.0, =1.8.4, =0.2.0, =0.1.0, =6.1.226-alpha, =6.1.226-alpha, =6.1.226-alpha, =0.1.0, =1.3.1, =1.4.2 - @cedarjs/mailer-handler-nodemailer 8.0.0-canary.3317 and more Source cves: CVE-2026-110869 Source advisory: MEND:CVE-2026-110869...

@abiyz/identity (>=0.2.0, <=0.2.5), @adaptcom/server (>=0.1.0-next-20260909201057, <=0.1.0-next-20260911225825) +113 more potentially affected by CVE-2026-110864 via better-auth (>=1.7.0, <=1.7.6)

better-auth NPM version =1.7.0, =0.2.0, =0.1.0-next-20260909201057, =0.180.0-nightly-20260915112218, =0.2.726-nightly-20260915112218, =0.1.10, =1.4.4, =0.1.0, =0.1.0, =0.0.7, =0.1.0-alpha.1, =0.3.97, =0.7.291, =0.7.291, =0.7.291, =0.7.336 and more Source cves: CVE-2026-110864 Source advisory:...

@manablox/admin (0.50.0), @manablox/admin-sdk (0.50.0) +17 more potentially affected by CVE-2026-110863 via @better-auth/sso (1.7.2)

@better-auth/sso NPM version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/sso and may be impacted: - @manablox/admin 0.50.0 - @manablox/admin-sdk 0.50.0 - @manablox/api-rpc 0.50.0 - @manablox/auth 0.50.0 - @manablox/cli 0.50.0 -...

@abiyz/identity (>=0.2.0, <=0.2.5), @adaptcom/server (>=0.1.0-next-20260909201057, <=0.1.0-next-20260911225825) +113 more potentially affected by CVE-2026-110862 via better-auth (>=1.7.0, <=1.7.6)

better-auth NPM version =1.7.0, =0.2.0, =0.1.0-next-20260909201057, =0.180.0-nightly-20260915112218, =0.2.726-nightly-20260915112218, =0.1.10, =1.4.4, =0.1.0, =0.1.0, =0.0.7, =0.1.0-alpha.1, =0.3.97, =0.7.291, =0.7.291, =0.7.291, =0.7.336 and more Source cves: CVE-2026-110862 Source advisory:...

@agent-native/core (>=0.0.0-beta-20260819155526, <=1.1.0-nightly-20260831181857), @agent-native/skills (>=0.0.0-beta-20260819155526, <=0.2.726-nightly-20260915095940) +141 more potentially affected by CVE-2026-110861 via @better-auth/kysely-adapter (>=1.6.17, <=1.7.0-rc.6)

@better-auth/kysely-adapter NPM version =1.6.17, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.0.7, =0.28.0, =0.1.1, =1.0.0, =2.0.0, =2.0.0, =0.1.0, =0.13.2, =0.8.4, =2.133.1, =0.1.0-canary.0.0c9beb2ae, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2026-110861 Source advisory:...

@abiyz/identity (>=0.2.0, <=0.2.5), @adaptcom/server (>=0.1.0-next-20260909201057, <=0.1.0-next-20260911225825) +113 more potentially affected by CVE-2026-110861 via better-auth (>=1.7.0, <=1.7.6)

better-auth NPM version =1.7.0, =0.2.0, =0.1.0-next-20260909201057, =0.180.0-nightly-20260915112218, =0.2.726-nightly-20260915112218, =0.1.10, =1.4.4, =0.1.0, =0.1.0, =0.0.7, =0.1.0-alpha.1, =0.3.97, =0.7.291, =0.7.291, =0.7.291, =0.7.336 and more Source cves: CVE-2026-110861 Source advisory:...

@abiyz/identity (>=0.2.0, <=0.2.5), @adaptcom/server (>=0.1.0-next-20260909201057, <=0.1.0-next-20260911225825) +115 more potentially affected by CVE-2026-110861 via @better-auth/drizzle-adapter (>=1.7.0, <=1.7.6)

@better-auth/drizzle-adapter NPM version =1.7.0, =0.2.0, =0.1.0-next-20260909201057, =0.180.0-nightly-20260915112218, =0.2.726-nightly-20260915112218, =0.1.10, =1.4.4, =0.1.0, =0.1.0, =0.0.7, =1.7.0-depup.0, =0.1.0-alpha.1, =0.3.97, =0.7.291, =0.7.291, =0.7.336 and more Source cves: CVE-2026-1108...

accli (0.7.4), aicommit (>=0.0.1, <=0.1.0) +282 more potentially affected by CVE-2026-110860 via gitpython (3.1.62)

gitpython PYPI version 3.1.62 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - accli 0.7.4 - aicommit =0.0.1, =0.6.2, =0.2.0, =3.0.14, =1.0.0, =0.1.9, =4.14.0, =2.6.0, =1.3.0, =1.5.1 and more Source cves: CVE-2026-110860...

ac-solver (0.1.0), accli (0.7.4) +962 more potentially affected by CVE-2026-110859 via gitpython (>=3.1.0, <=3.1.62)

gitpython PYPI version =3.1.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.0.1, =0.1.8, =0.87.2.dev9, =0.5.0, =0.86.2 and more Source cves: CVE-2026-110859 Source advisory: MEND:CVE-2026-110859...

ac-solver (0.1.0), accli (0.7.4) +761 more potentially affected by CVE-2026-110858 via gitpython (>=3.1.30, <=3.1.62)

gitpython PYPI version =3.1.30, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.0.1, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =0.1.1.post74 and more Source cves: CVE-2026-110858 Source advisory: MEND:CVE-2026-110858...

ac-solver (0.1.0), accli (0.7.4) +962 more potentially affected by CVE-2026-110857 via gitpython (>=3.1.0, <=3.1.62)

gitpython PYPI version =3.1.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.0.1, =0.1.8, =0.87.2.dev9, =0.5.0, =0.86.2 and more Source cves: CVE-2026-110857 Source advisory: MEND:CVE-2026-110857...

ac-solver (0.1.0), accli (0.7.4) +962 more potentially affected by CVE-2026-110856 via gitpython (>=3.1.0, <=3.1.62)

gitpython PYPI version =3.1.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.0.1, =0.1.8, =0.87.2.dev9, =0.5.0, =0.86.2 and more Source cves: CVE-2026-110856 Source advisory: MEND:CVE-2026-110856...

ac-solver (0.1.0), accli (0.7.4) +962 more potentially affected by CVE-2026-110855 via gitpython (>=3.1.0, <=3.1.62)

gitpython PYPI version =3.1.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.0.1, =0.1.8, =0.87.2.dev9, =0.5.0, =0.86.2 and more Source cves: CVE-2026-110855 Source advisory: MEND:CVE-2026-110855...

@openinc/parse-server-opendash (>=4.1.3, <=4.2.0) potentially affected by CVE-2026-110854 via parse-server (9.10.0)

parse-server NPM version 9.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-server and may be impacted: - @openinc/parse-server-opendash =4.1.3, =4.2.0 Source cves: CVE-2026-110854 Source advisory: MEND:CVE-2026-110854...