ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +23887 more potentially affected by CVE-2026-50020 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.134.Final)

io.netty:netty-codec-http MAVEN version =4.0.0.Alpha1, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

ai.chronon:service_2.11 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:service_2.12 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +2478 more potentially affected by CVE-2026-50011 via io.netty:netty-codec-redis (>=4.1.0.Final <=4.1.134.Final)

io.netty:netty-codec-redis MAVEN version =4.1.0.Final, =0.0.86, =0.0.86, =0.0.86, =3.30.1.1, =3.10.0.5, =0.2.3.5, =0.0.1, =2.0.24, =1.1.9, =0.0.1, =0.0.9 and more Source cves: CVE-2026-50011 Source advisory: OSV:GHSA-5W86-C3RQ-VJJ7...

ai.spice:spiceai (=0.6.0), cn.isqing.icloud:icloud-common-utils (>=4.0.3-M1 <=4.0.3.1) +431 more potentially affected by CVE-2026-50011 via io.netty:netty-codec-redis (>=4.2.0.Final <=4.2.14.Final)

io.netty:netty-codec-redis MAVEN version =4.2.0.Final, =4.0.3-M1, =1.21.9, =3.4.7, =25.4.1, =26.2.1, =7.9.0, =5.1.0, =5.1.0, =6.80, =0.2.2, =0.2.4 and more Source cves: CVE-2026-50011 Source advisory: OSV:GHSA-5W86-C3RQ-VJJ7...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +29726 more potentially affected by CVE-2026-50010 via io.netty:netty-handler (>=4.0.0.Alpha1 <=4.1.134.Final)

io.netty:netty-handler MAVEN version =4.0.0.Alpha1, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +4461 more potentially affected by CVE-2026-50010 via io.netty:netty-handler (>=4.2.0.Final <=4.2.14.Final)

io.netty:netty-handler MAVEN version =4.2.0.Final, =0.1.0, =0.1.0, =4.7.4, =4.7.4, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-50010 Source advisory: OSV:GHSA-C653-97M9-RCG9...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +1044 more potentially affected by CVE-2026-50009 via io.netty:netty-codec-classes-quic (>=4.2.10.Final <=4.2.14.Final)

io.netty:netty-codec-classes-quic MAVEN version =4.2.10.Final, =0.1.0, =0.1.0, =0.0.1-alfa, =0.0.1-demo, =6.0.1, =4.0.3-M1, =1.21.9, =1.0.5, =3.6.4, =1.0.1, =26.2.1, =26.6.1 and more Source cves: CVE-2026-50009 Source advisory: OSV:GHSA-CQ4Q-CV5G-R8Q5...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +1038 more potentially affected by CVE-2026-48748 via io.netty:netty-codec-http3 (>=4.2.10.Final <=4.2.14.Final)

io.netty:netty-codec-http3 MAVEN version =4.2.10.Final, =0.1.0, =0.1.0, =0.0.1-alfa, =0.0.1-demo, =6.0.1, =4.0.3-M1, =1.21.9, =1.0.5, =3.6.4, =1.0.1, =26.2.1, =26.6.1 and more Source cves: CVE-2026-48748 Source advisory: OSV:GHSA-4GRM-H2QV-H6W6...

de.digitalcollections.cudami:dc-cudami-admin-webapp (>=7.0.0 <=8.0.3-RC1), io.github.dbmdz.cudami:cudami (>=9.0.0 <=10.2.0-rc.3) +17 more potentially affected by CVE-2026-48988 via org.webjars.npm:markdown-it (>=10.0.0 <=8.4.2)

org.webjars.npm:markdown-it MAVEN version =10.0.0, =7.0.0, =9.0.0, =1.8.8, =0.4.2, =3.8.0, =0.4.0, =1.5.1, =1.13.2 and more Source cves: CVE-2026-48988 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17353910...

00-merlin-hu-mcpdemo-pipy (>=0.1.0 <=0.1.1), 00-renjing-mcp-server-pypi (=0.1.0) +41711 more potentially affected by CVE-2026-54283 via starlette (>=0.50.0 <=1.2.1)

starlette PYPI version =0.50.0, =0.1.0, =0.1.0, =1.0.0a1, =0.1.5, =0.1.0, =0.1.1, =0.1.0, =0.1.2 and more Source cves: CVE-2026-54283 Source advisory: SNYK:PYTHON-STARLETTE-17342515...

00-merlin-hu-mcpdemo-pipy (>=0.1.0 <=0.1.1), 00-renjing-mcp-server-pypi (=0.1.0) +41711 more potentially affected by CVE-2026-54283 via starlette (>=0.50.0 <=1.2.1)

starlette PYPI version =0.50.0, =0.1.0, =0.1.0, =1.0.0a1, =0.1.5, =0.1.0, =0.1.1, =0.1.0, =0.1.2 and more Source cves: CVE-2026-54283 Source advisory: OSV:GHSA-82W8-QH3P-5JFQ...

0-logger (>=1.0.0 <=1.1.1), 0perator (>=0.1.0 <=0.3.0) +6510 more potentially affected by CVE-2026-54285 via @opentelemetry/core (>=2.0.0-dev.0 <=2.7.1)

@opentelemetry/core NPM version =2.0.0-dev.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =0.0.1, =1.0.0, =1.3.0, =0.1.0, =1.2.2, =1.0.0, =0.8.0, =0.1.1, =0.1.11 and more Source cves: CVE-2026-54285 Source advisory: SNYK:JS-OPENTELEMETRYCORE-17373280...

0-logger (>=1.0.0 <=1.1.1), 0perator (>=0.1.0 <=0.3.0) +11823 more potentially affected by CVE-2026-54285 via @opentelemetry/core (>=0.10.0 <=2.7.1)

@opentelemetry/core NPM version =0.10.0, =1.0.0, =0.1.0, =0.1.0, =5.0.0, =0.1.1, =0.1.0, =0.0.1, =1.0.21, =1.0.0, =0.0.1, =0.1.1, =3.11.1, =1.3.0, =3.6.11 and more Source cves: CVE-2026-54285 Source advisory: OSV:GHSA-8988-4F7V-96QF...

00-merlin-hu-mcpdemo-pipy (>=0.1.0 <=0.1.1), 00-renjing-mcp-server-pypi (=0.1.0) +40876 more potentially affected by CVE-2026-54282 via starlette (>=1.0.0 <=1.2.1)

starlette PYPI version =1.0.0, =0.1.0, =0.1.0, =1.0.0a1, =0.1.5, =0.1.0, =0.1.1, =0.1.0, =0.1.2 and more Source cves: CVE-2026-54282 Source advisory: SNYK:PYTHON-STARLETTE-17342519...

00-merlin-hu-mcpdemo-pipy (>=0.1.0 <=0.1.1), 00-renjing-mcp-server-pypi (=0.1.0) +44360 more potentially affected by CVE-2026-54282 via starlette (>=0.20.2 <=1.2.1)

starlette PYPI version =0.20.2, =0.1.0, =0.0.1, =0.1.0, =1.0.0a1, =0.1.5, =0.1.0, =0.1.1, =0.1.4 - 146003-math-lihu =0.1.0 - 17-learnai-mcp-demo =0.1.0 - 171-py-mcp-demo =0.1.0 - 1cijferho =0.1.0 - 1claw-crewai-tools =0.1.0 - 1up-mcp =0.1.0 and more Source cves: CVE-2026-54282 Source advisory:...

a-mailx (=0.1.0), abracadabra (>=0.0.0 <=0.0.7) +747 more potentially affected by unknown CVE via tornado (>=6.0.0 <=6.5.6)

tornado PYPI version =6.0.0, =0.0.0, =0.2.2, =0.7.3, =0.3.0, =0.4.0, =0.0.5, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.31.0, =0.1.0, =0.3.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-TORNADO-17356157...

a-mailx (=0.1.0), abracadabra (>=0.0.0 <=0.0.7) +976 more potentially affected by unknown CVE via tornado (>=3.0.0 <=6.5.6)

tornado PYPI version =3.0.0, =0.0.0, =0.2.2, =0.0.3, =0.3.0, =0.4.0, =0.0.5, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.31.0, =0.1.0, =0.3.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PW6J-QG29-8W7F...

10xscale-agentflow-cli (=0.1.5), 360solutions-bc-mcp (>=0.5.3 <=0.5.6) +560 more potentially affected by CVE-2026-53539 via python-multipart (>=0.0.10 <=0.0.29)

python-multipart PYPI version =0.0.10, =0.5.3, =3.2.0, =0.8.2.4, =1.0.0, =0.1.0, =1.0.202504142220, =0.1.0, =0.4.0, =0.4.0, =0.1.0, =0.4.0, =1.6.21, =1.7.11 and more Source cves: CVE-2026-53539 Source advisory: OSV:GHSA-5RVQ-CXJ2-64VF...

10xscale-agentflow-cli (=0.1.5), 360solutions-bc-mcp (>=0.5.3 <=0.5.6) +560 more potentially affected by CVE-2026-53539 via python-multipart (>=0.0.10 <=0.0.29)

python-multipart PYPI version =0.0.10, =0.5.3, =3.2.0, =0.8.2.4, =1.0.0, =0.1.0, =1.0.202504142220, =0.1.0, =0.4.0, =0.4.0, =0.1.0, =0.4.0, =1.6.21, =1.7.11 and more Source cves: CVE-2026-53539 Source advisory: SNYK:PYTHON-PYTHONMULTIPART-17345663...

10xscale-agentflow-cli (=0.1.5), 360solutions-bc-mcp (>=0.5.3 <=0.5.6) +560 more potentially affected by CVE-2026-53540 via python-multipart (>=0.0.10 <=0.0.30)

python-multipart PYPI version =0.0.10, =0.5.3, =3.2.0, =0.8.2.4, =1.0.0, =0.1.0, =1.0.202504142220, =0.1.0, =0.4.0, =0.4.0, =0.1.0, =0.4.0, =1.6.21, =1.7.11 and more Source cves: CVE-2026-53540 Source advisory: OSV:GHSA-V9PG-7XVM-68HF...

10xscale-agentflow-cli (=0.1.5), 360solutions-bc-mcp (>=0.5.3 <=0.5.6) +560 more potentially affected by CVE-2026-53540 via python-multipart (>=0.0.10 <=0.0.30)

python-multipart PYPI version =0.0.10, =0.5.3, =3.2.0, =0.8.2.4, =1.0.0, =0.1.0, =1.0.202504142220, =0.1.0, =0.4.0, =0.4.0, =0.1.0, =0.4.0, =1.6.21, =1.7.11 and more Source cves: CVE-2026-53540 Source advisory: SNYK:PYTHON-PYTHONMULTIPART-17345735...

10xscale-agentflow-cli (=0.1.5), 360solutions-bc-mcp (>=0.5.3 <=0.5.6) +560 more potentially affected by CVE-2026-53538 via python-multipart (>=0.0.10 <=0.0.29)

python-multipart PYPI version =0.0.10, =0.5.3, =3.2.0, =0.8.2.4, =1.0.0, =0.1.0, =1.0.202504142220, =0.1.0, =0.4.0, =0.4.0, =0.1.0, =0.4.0, =1.6.21, =1.7.11 and more Source cves: CVE-2026-53538 Source advisory: SNYK:PYTHON-PYTHONMULTIPART-17344732...

10xscale-agentflow-cli (=0.1.5), 360solutions-bc-mcp (>=0.5.3 <=0.5.6) +560 more potentially affected by CVE-2026-53538 via python-multipart (>=0.0.10 <=0.0.29)

python-multipart PYPI version =0.0.10, =0.5.3, =3.2.0, =0.8.2.4, =1.0.0, =0.1.0, =1.0.202504142220, =0.1.0, =0.4.0, =0.4.0, =0.1.0, =0.4.0, =1.6.21, =1.7.11 and more Source cves: CVE-2026-53538 Source advisory: OSV:GHSA-6JV3-5F52-599M...

10xscale-agentflow-cli (=0.1.5), 360solutions-bc-mcp (>=0.5.3 <=0.5.6) +560 more potentially affected by CVE-2026-53537 via python-multipart (>=0.0.10 <=0.0.29)

python-multipart PYPI version =0.0.10, =0.5.3, =3.2.0, =0.8.2.4, =1.0.0, =0.1.0, =1.0.202504142220, =0.1.0, =0.4.0, =0.4.0, =0.1.0, =0.4.0, =1.6.21, =1.7.11 and more Source cves: CVE-2026-53537 Source advisory: OSV:GHSA-VFFW-93WF-4J4Q...

10xscale-agentflow-cli (=0.1.5), 360solutions-bc-mcp (>=0.5.3 <=0.5.6) +560 more potentially affected by CVE-2026-53537 via python-multipart (>=0.0.10 <=0.0.29)

python-multipart PYPI version =0.0.10, =0.5.3, =3.2.0, =0.8.2.4, =1.0.0, =0.1.0, =1.0.202504142220, =0.1.0, =0.4.0, =0.4.0, =0.1.0, =0.4.0, =1.6.21, =1.7.11 and more Source cves: CVE-2026-53537 Source advisory: SNYK:PYTHON-PYTHONMULTIPART-17345733...

a-mailx (=0.1.0), abracadabra (>=0.0.0 <=0.0.7) +747 more potentially affected by CVE-2026-49853 via tornado (>=6.0.0 <=6.5.5)

tornado PYPI version =6.0.0, =0.0.0, =0.2.2, =0.7.3, =0.3.0, =0.4.0, =0.0.5, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.31.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-49853 Source advisory: SNYK:PYTHON-TORNADO-17356107...

a-mailx (=0.1.0), abracadabra (>=0.0.0 <=0.0.7) +976 more potentially affected by CVE-2026-49853 via tornado (>=3.0.0 <=6.5.5)

tornado PYPI version =3.0.0, =0.0.0, =0.2.2, =0.0.3, =0.3.0, =0.4.0, =0.0.5, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.31.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-49853 Source advisory: OSV:GHSA-3X9G-8VMP-WQVF...

a-mailx (=0.1.0), abracadabra (>=0.0.0 <=0.0.7) +747 more potentially affected by CVE-2026-49855 via tornado (>=6.0.0 <=6.5.5)

tornado PYPI version =6.0.0, =0.0.0, =0.2.2, =0.7.3, =0.3.0, =0.4.0, =0.0.5, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.31.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-49855 Source advisory: SNYK:PYTHON-TORNADO-17356108...

a-mailx (=0.1.0), abracadabra (>=0.0.0 <=0.0.7) +976 more potentially affected by CVE-2026-49855 via tornado (>=3.0.0 <=6.5.5)

tornado PYPI version =3.0.0, =0.0.0, =0.2.2, =0.0.3, =0.3.0, =0.4.0, =0.0.5, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.31.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-49855 Source advisory: OSV:GHSA-MGF9-4VPG-HJ56...

360solutions-bc-mcp (>=0.5.3 <=0.5.6), ariadne (>=0.17.0 <=0.17.1b1) +46 more potentially affected by CVE-2026-48818 via starlette (>=1.0.0 <=1.0.1)

starlette PYPI version =1.0.0, =0.5.3, =0.17.0, =0.1.0, =7.2.0, =0.21.0, =1.5.0, =1.9.13, =0.1.3a0, =2.0.26, =2.0.28 - eopf =2.8.1 - fast-agent-acp =0.7.13 - fast-agent-mcp =0.7.13 - fastapi-proxy-lib =0.0.1b0 and more Source cves: CVE-2026-48818 Source advisory: SNYK:PYTHON-STARLETTE-17342498...

01os (>=0.0.1 <=0.0.14), 2025-assignment2-expenses-manager (>=0.1.1 <=0.1.7) +4875 more potentially affected by CVE-2026-48818 via starlette (>=0.20.2 <=1.0.1)

starlette PYPI version =0.20.2, =0.0.1, =0.1.1, =0.5.3, =0.3.6, =0.12.0, =0.4.2, =0.1.10, =0.0.1, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =0.1.9 and more Source cves: CVE-2026-48818 Source advisory: OSV:GHSA-WQP7-X3PW-XC5R...

01os (>=0.0.1 <=0.0.14), 2025-assignment2-expenses-manager (>=0.1.1 <=0.1.7) +4875 more potentially affected by CVE-2026-48817 via starlette (>=0.20.2 <=1.0.1)

starlette PYPI version =0.20.2, =0.0.1, =0.1.1, =0.5.3, =0.3.6, =0.12.0, =0.4.2, =0.1.10, =0.0.1, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =0.1.9 and more Source cves: CVE-2026-48817 Source advisory: OSV:GHSA-X746-7M8F-X49C...

360solutions-bc-mcp (>=0.5.3 <=0.5.6), ariadne (>=0.17.0 <=0.17.1b1) +46 more potentially affected by CVE-2026-48817 via starlette (>=1.0.0 <=1.0.1)

starlette PYPI version =1.0.0, =0.5.3, =0.17.0, =0.1.0, =7.2.0, =0.21.0, =1.5.0, =1.9.13, =0.1.3a0, =2.0.26, =2.0.28 - eopf =2.8.1 - fast-agent-acp =0.7.13 - fast-agent-mcp =0.7.13 - fastapi-proxy-lib =0.0.1b0 and more Source cves: CVE-2026-48817 Source advisory: SNYK:PYTHON-STARLETTE-17342514...

videomail-client (=10.2.1) potentially affected by CVE-2026-48125 via ua-parser-js (=2.0.1)

ua-parser-js NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ua-parser-js and may be impacted: - videomail-client =10.2.1 Source cves: CVE-2026-48125 Source advisory: SNYK:JS-UAPARSERJS-17353322...

videomail-client (=10.2.1) potentially affected by CVE-2026-48125 via ua-parser-js (=2.0.1)

ua-parser-js NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ua-parser-js and may be impacted: - videomail-client =10.2.1 Source cves: CVE-2026-48125 Source advisory: OSV:GHSA-9H5V-PFQQ-X599...

org.webjars.npm:cesium (=1.137.0), org.webjars.npm:cesium__engine (=22.2.0) +1 more potentially affected by CVE-2026-54271 via org.webjars.npm:protobufjs (=8.0.0)

org.webjars.npm:protobufjs MAVEN version =8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:protobufjs and may be impacted: - org.webjars.npm:cesium =1.137.0 - org.webjars.npm:cesiumengine =22.2.0 - org.webjars.npm:cesiumwidgets...

10minions-engine (>=0.0.1 <=0.0.4), @1amageek/document-propagator (>=0.10.1 <=1.0.0) +1533 more potentially affected by CVE-2026-54271 via protobufjs-cli (>=1.0.0 <=1.2.2)

protobufjs-cli NPM version =1.0.0, =0.0.1, =0.10.1, =1.1.0, =0.4.0, =1.22.0, =6.2.36, =1.0.0, =1.8.0, =0.0.0-beta.0, =1.0.0, =1.0.1, =3.1.0 and more Source cves: CVE-2026-54271 Source advisory: SNYK:JS-PROTOBUFJSCLI-17362836...

@0xchain/telemetry (>=1.1.0-beta.8 <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0 <=0.11.3) +1022 more potentially affected by CVE-2026-54271 via protobufjs (>=8.0.0 <=8.4.2)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-54271 Source advisory: SNYK:JS-PROTOBUFJS-17362837...

10minions-engine (>=0.0.1 <=0.0.4), @0xr404/lol404 (>=1.1.0 <=1.1.6) +3358 more potentially affected by CVE-2026-54271 via protobufjs (>=7.0.0 <=7.6.1)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =0.0.6, =0.0.7 and more Source cves: CVE-2026-54271 Source advisory: SNYK:JS-PROTOBUFJS-17362837...

@forwardimpact/libcodegen (>=0.1.47 <=0.1.52) potentially affected by CVE-2026-54271 via protobufjs-cli (=2.0.1)

protobufjs-cli NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobufjs-cli and may be impacted: - @forwardimpact/libcodegen =0.1.47, =0.1.52 Source cves: CVE-2026-54271 Source advisory: OSV:GHSA-PR59-H9PH-3FR8...

@forwardimpact/libcodegen (>=0.1.47 <=0.1.52) potentially affected by CVE-2026-54271 via protobufjs-cli (=2.0.1)

protobufjs-cli NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobufjs-cli and may be impacted: - @forwardimpact/libcodegen =0.1.47, =0.1.52 Source cves: CVE-2026-54271 Source advisory: SNYK:JS-PROTOBUFJSCLI-17362836...

org.webjars.npm:cesium (>=1.96.0 <=1.97.0) potentially affected by CVE-2026-54271 via org.webjars.npm:protobufjs (=7.0.0)

org.webjars.npm:protobufjs MAVEN version =7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:protobufjs and may be impacted: - org.webjars.npm:cesium =1.96.0, =1.97.0 Source cves: CVE-2026-54271 Source advisory:...

@aliceo2/bookkeeping (>=0.19.0 <=0.26.1), @aliceo2/control (>=1.39.0 <=1.77.0) +87 more potentially affected by CVE-2026-54270 via protobufjs (>=8.2.0 <=8.4.2)

protobufjs NPM version =8.2.0, =0.19.0, =1.39.0, =1.10.0, =2.8.0, =1.0.5, =0.1.37, =0.1.29, =9.1.1-az29, =0.43.0, =0.77.0 - @hieco/react =1.0.0 - @hieco/runtime =1.0.0 - @hieco/sdk =1.0.0 and more Source cves: CVE-2026-54270 Source advisory: SNYK:JS-PROTOBUFJS-17353318...

@aliceo2/bookkeeping (>=0.19.0 <=0.26.1), @aliceo2/control (>=1.39.0 <=1.77.0) +87 more potentially affected by CVE-2026-54270 via protobufjs (>=8.2.0 <=8.4.2)

protobufjs NPM version =8.2.0, =0.19.0, =1.39.0, =1.10.0, =2.8.0, =1.0.5, =0.1.37, =0.1.29, =9.1.1-az29, =0.43.0, =0.77.0 - @hieco/react =1.0.0 - @hieco/runtime =1.0.0 - @hieco/sdk =1.0.0 and more Source cves: CVE-2026-54270 Source advisory: OSV:GHSA-94RC-8X27-4472...

011xwztpjn (=1.0.0), 02y9dg4qm3 (=1.0.0) +11481 more potentially affected by unknown CVE via dompurify (>=0.6.6 <=3.4.8)

dompurify NPM version =0.6.6, =3.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on dompurify and may be impacted: - 011xwztpjn =1.0.0 - 02y9dg4qm3 =1.0.0 - 04tw75kmd9 =1.0.0 - 0650teqqly =1.0.0 - 097oi25ils =1.0.0 - 0a0fpniotn =1.0.0 - 0c7j76u46q...

1router (>=0.3.96 <=1.0.2), 9router-custom (=0.3.55) +2217 more potentially affected by unknown CVE via dompurify (>=3.0.0 <=3.4.8)

dompurify NPM version =3.0.0, =0.3.96, =0.3.33, =0.5.0, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.0.1, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =1.5.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-DOMPURIFY-17344552...

net.enilink.platform:net.enilink.platform.web (=1.6.0), org.webjars.npm:formio__core (=2.6.0) +1 more potentially affected by unknown CVE via org.webjars.npm:dompurify (>=3.1.7 <=3.3.0)

org.webjars.npm:dompurify MAVEN version =3.1.7, =0.54.0, =0.55.1 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17344553...

0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +8036 more potentially affected by unknown CVE via cryptography (>=0.6.1 <=48.0.0)

cryptography PYPI version =0.6.1, =0.0.2, =0.5.3, =2.3.0, =0.1.0, =0.1.0, =0.5.0rc5, =0.9.2, =0.4.24, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-537C-GMF6-5CCF...

227checkergenerator (>=1.0.0 <=1.0.1), 5mghost-rover (>=0.0.1 <=0.0.3) +1732 more potentially affected by CVE-2026-54274 via aiohttp (>=3.0.0b0 <=3.14.0)

aiohttp PYPI version =3.0.0b0, =1.0.0, =0.0.1, =0.1.1, =0.1.0b0, =1.1.0, =1.0.1, =0.31.5, =0.6.0, =0.0.0, =0.0.33.post1 and more Source cves: CVE-2026-54274 Source advisory: SNYK:PYTHON-AIOHTTP-17342364...

227checkergenerator (>=1.0.0 <=1.0.1), 5mghost-rover (>=0.0.1 <=0.0.3) +1861 more potentially affected by CVE-2026-54274 via aiohttp (>=0.13.1 <=3.14.0)

aiohttp PYPI version =0.13.1, =1.0.0, =0.0.1, =0.1.1, =0.1.0b0, =1.1.0, =1.0.1, =0.31.5, =0.6.0, =0.0.0, =0.0.33.post1 and more Source cves: CVE-2026-54274 Source advisory: OSV:GHSA-XCGM-R5H9-7989...

227checkergenerator (>=1.0.0 <=1.0.1), 5mghost-rover (>=0.0.1 <=0.0.3) +1861 more potentially affected by CVE-2026-54275 via aiohttp (>=0.13.1 <=3.14.0)

aiohttp PYPI version =0.13.1, =1.0.0, =0.0.1, =0.1.1, =0.1.0b0, =1.1.0, =1.0.1, =0.31.5, =0.6.0, =0.0.0, =0.0.33.post1 and more Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...