app.ductape:sdk (0.1.10), cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21) +423 more potentially affected by CVE-2026-71884 via org.bouncycastle:bcprov-lts8on (>=2.73.4, <=2.73.12.1)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.4, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.3-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-71884 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20828170...

com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), com.codbex.atlas:codbex-atlas-application (>=2.98.0, <=2.116.0) +413 more potentially affected by CVE-2026-78384 via org.apache.cxf:cxf-core (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-core MAVEN version =4.2.0, =2.98.0, =4.0.0-beta.1, =4.0.0-beta.1, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.3.0 - de.cezaryrk.olingo:odata-fit 5.1.0 - io.bootique.cxf:bootique-cxf-core 4.0-m6 and more Source cves: CVE-2026-78384 Source advisory:...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +3410 more potentially affected by CVE-2026-78384 via org.apache.cxf:cxf-core (>=3.0.0-milestone1, <=3.6.12)

org.apache.cxf:cxf-core MAVEN version =3.0.0-milestone1, =1.0.0, =1.11.0, =1.11.0, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =3.19.0 and more Source cves: CVE-2026-78384 Source advisory: SNYK:JAVA-ORGAPACHECXF-20824751...

be.atbash.test:integration-testing (2.2.0), be.atbash.test:integration-testing-database (2.2.0) +896 more potentially affected by CVE-2026-78384 via org.apache.cxf:cxf-core (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-core MAVEN version =4.0.0, =1.0.0, =12.1-7-21, =0.0.1, =1.1.0, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons 2.70.0 and more Source cves: CVE-2026-78384 Source advisory: SNYK:JAVA-ORGAPACHECXF-20824751...

ipg (0.2.0), ipg-cng (>=0.1.1, <=0.1.2) potentially affected by unknown CVE via ic-cipher (0.2.7)

ic-cipher CARGO version 0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on ic-cipher and may be impacted: - ipg 0.2.0 - ipg-cng =0.1.1, =0.1.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0337...

com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), com.codbex.atlas:codbex-atlas-application (>=2.98.0, <=2.116.0) +413 more potentially affected by CVE-2026-108039 via org.apache.cxf:cxf-core (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-core MAVEN version =4.2.0, =2.98.0, =4.0.0-beta.1, =4.0.0-beta.1, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.3.0 - de.cezaryrk.olingo:odata-fit 5.1.0 - io.bootique.cxf:bootique-cxf-core 4.0-m6 and more Source cves: CVE-2026-108039 Source advisory: MEND:CVE-2026-108039...

be.atbash.test:integration-testing (2.2.0), be.atbash.test:integration-testing-database (2.2.0) +896 more potentially affected by CVE-2026-108039 via org.apache.cxf:cxf-core (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-core MAVEN version =4.0.0, =1.0.0, =12.1-7-21, =0.0.1, =1.1.0, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons 2.70.0 and more Source cves: CVE-2026-108039 Source advisory: MEND:CVE-2026-108039...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +3390 more potentially affected by CVE-2026-108039 via org.apache.cxf:cxf-core (>=3.0.0, <=3.6.12)

org.apache.cxf:cxf-core MAVEN version =3.0.0, =1.0.0, =1.11.0, =1.11.0, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =3.19.0 and more Source cves: CVE-2026-108039 Source advisory: MEND:CVE-2026-108039...

org.apache.cxf.systests:cxf-systests-transport-netty (>=3.5.7, <=3.6.3), org.apache.cxf:apache-cxf (>=3.0.0, <=3.6.12) +1 more potentially affected by CVE-2026-107938 via org.apache.cxf:cxf-rt-transports-http-netty-client (>=3.0.0, <=3.6.12)

org.apache.cxf:cxf-rt-transports-http-netty-client MAVEN version =3.0.0, =3.5.7, =3.0.0, =3.0.0, =3.6.12 Source cves: CVE-2026-107938 Source advisory: MEND:CVE-2026-107938...

kr.jclab.wsman:abstract-wsman (>=0.0.1-rc2, <=0.0.1-rc4), kr.jclab.wsman:abstract-wsman-netty (>=0.0.2-rc1, <=0.0.4) +3 more potentially affected by CVE-2026-107938 via org.apache.cxf:cxf-rt-transports-http-netty-client (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-transports-http-netty-client MAVEN version =4.0.0, =0.0.1-rc2, =0.0.2-rc1, =4.0.2, =4.0.0, =4.0.0, =4.1.8 Source cves: CVE-2026-107938 Source advisory: MEND:CVE-2026-107938...

org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.3), org.apache.cxf:cxf-distribution-manifest (>=4.2.0, <=4.2.3) potentially affected by CVE-2026-107938 via org.apache.cxf:cxf-rt-transports-http-netty-client (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-transports-http-netty-client MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-107938 Source advisory: MEND:CVE-2026-107938...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +3390 more potentially affected by CVE-2026-107937 via org.apache.cxf:cxf-core (>=3.0.0, <=3.6.12)

org.apache.cxf:cxf-core MAVEN version =3.0.0, =1.0.0, =1.11.0, =1.11.0, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =3.19.0 and more Source cves: CVE-2026-107937 Source advisory: MEND:CVE-2026-107937...

be.atbash.test:integration-testing (2.2.0), be.atbash.test:integration-testing-database (2.2.0) +896 more potentially affected by CVE-2026-107937 via org.apache.cxf:cxf-core (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-core MAVEN version =4.0.0, =1.0.0, =12.1-7-21, =0.0.1, =1.1.0, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons 2.70.0 and more Source cves: CVE-2026-107937 Source advisory: MEND:CVE-2026-107937...

com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), com.codbex.atlas:codbex-atlas-application (>=2.98.0, <=2.116.0) +413 more potentially affected by CVE-2026-107937 via org.apache.cxf:cxf-core (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-core MAVEN version =4.2.0, =2.98.0, =4.0.0-beta.1, =4.0.0-beta.1, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.3.0 - de.cezaryrk.olingo:odata-fit 5.1.0 - io.bootique.cxf:bootique-cxf-core 4.0-m6 and more Source cves: CVE-2026-107937 Source advisory: MEND:CVE-2026-107937...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.3), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.3) +4 more potentially affected by CVE-2026-100227 via org.apache.cxf:cxf-rt-rs-security-xml (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-security-xml MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-100227 Source advisory: MEND:CVE-2026-100227...

com.eurodyn.qlack2.patches:qlack2-patches-cxf-rt-rs-security-sso-saml (>=2.2.4, <=2.3.2), com.eurodyn.qlack2.util:qlack2-util-apache-santuario-fragment (>=2.2.4, <=2.3.19) +84 more potentially affected by CVE-2026-100227 via org.apache.cxf:cxf-rt-rs-security-xml (>=2.5.0, <=3.6.12)

org.apache.cxf:cxf-rt-rs-security-xml MAVEN version =2.5.0, =2.2.4, =2.2.4, =2.2.4, =ec2-2013-02-01, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.0.0.final, =1.0-rc1, =1.2.0, =1.4.0, =1.7.2 and more Source cves: CVE-2026-100227 Source advisory: MEND:CVE-2026-100227...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.8), org.apache.cxf:apache-cxf (>=4.0.0, <=4.1.8) +4 more potentially affected by CVE-2026-100227 via org.apache.cxf:cxf-rt-rs-security-xml (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-rs-security-xml MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.8 Source cves: CVE-2026-100227 Source advisory: MEND:CVE-2026-100227...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.soap:cloud-altemistafwk-core-soap-wss (>=3.0.0.release, <=3.1.0.release) +299 more potentially affected by CVE-2026-97791 via org.apache.cxf:cxf-rt-ws-security (>=3.0.0-milestone1, <=3.6.12)

org.apache.cxf:cxf-rt-ws-security MAVEN version =3.0.0-milestone1, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =1.0.0, =1.0.0, =1.2.0, =1.4.0, =4.2.0.1, =1.7.2.230613, =1.7.3.230802 and more Source cves: CVE-2026-97791 Source advisory: MEND:CVE-2026-97791...

com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), io.camelbee:camelbee-quarkus-core (3.2.1) +52 more potentially affected by CVE-2026-97791 via org.apache.cxf:cxf-rt-ws-security (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-ws-security MAVEN version =4.2.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.0.0.beta1 and more Source cves: CVE-2026-97791 Source advisory: MEND:CVE-2026-97791...

com.codinglair.taf:taf-api-soap (>=1.0.0, <=1.3.0), de.governikus.panstar.sdk:panstar-soap-sdk (>=4.1.0, <=4.2.0) +85 more potentially affected by CVE-2026-97791 via org.apache.cxf:cxf-rt-ws-security (>=4.1.0, <=4.1.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =4.1.0, =1.0.0, =4.1.0, =2.5.0, =1.3, =1.3, =1.3, =1.3, =1.3, =3.18.0, =3.18.0, =3.18.0, =3.18.0, =3.18.0, =3.18.0, =3.18.0, =3.33.14 and more Source cves: CVE-2026-97791 Source advisory: MEND:CVE-2026-97791...

com.codinglair.taf:taf-api-soap (>=1.0.0, <=1.3.0), cv.igrp:igrp-core (>=2.0.0.231123-rc1, <=2.0.0.240307-rc2) +115 more potentially affected by CVE-2026-97468 via org.apache.cxf:cxf-rt-ws-security (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =4.0.0, =1.0.0, =2.0.0.231123-rc1, =4.0.2, =2.4.0, =1.3, =1.3, =1.3, =1.3, =1.3, =2.0.0.alpha1, =2.7.0.cr1, =3.8.0, =2.0.0.alpha1, =2.2.4, =3.33.14 - io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-security-policy-fips 3.8.1 and more Source cves:...

com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), io.camelbee:camelbee-quarkus-core (3.2.1) +52 more potentially affected by CVE-2026-97468 via org.apache.cxf:cxf-rt-ws-security (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-ws-security MAVEN version =4.2.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.0.0.beta1 and more Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

com.savoirtech.aetos:aetos (>=4.2.0.1, <=4.3.1), com.treelogic-swe:aws-mock (1.0) +141 more potentially affected by CVE-2026-97468 via org.apache.cxf.services.sts:cxf-services-sts-core (>=2.5.0, <=3.6.12)

org.apache.cxf.services.sts:cxf-services-sts-core MAVEN version =2.5.0, =4.2.0.1, =ec2-2013-02-01, =7.2.0, =6.3.0, =1.2.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.7, =1.0.7, =1.0.0, =1.0.2 and more Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-trust (>=2.0.0.alpha1, <=3.33.14), io.quarkiverse.cxf:quarkus-cxf-services-sts (>=2.0.0.alpha1, <=3.33.14) +20 more potentially affected by CVE-2026-97468 via org.apache.cxf.services.sts:cxf-services-sts-core (>=4.0.0, <=4.1.8)

org.apache.cxf.services.sts:cxf-services-sts-core MAVEN version =4.0.0, =2.0.0.alpha1, =2.0.0.alpha1, =2.0.0.alpha1, =3.0.0-m1, =3.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =7.3.7.final, =7.0.0.final, =6.2.0.final, =8.0.0.beta1 and more Source cves: CVE-2026-97468 Source advisory...

io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-trust (>=3.35.0, <=4.0.0.beta1), io.quarkiverse.cxf:quarkus-cxf-services-sts (>=3.35.0, <=4.0.0.beta1) +8 more potentially affected by CVE-2026-97468 via org.apache.cxf.services.sts:cxf-services-sts-core (>=4.2.0, <=4.2.3)

org.apache.cxf.services.sts:cxf-services-sts-core MAVEN version =4.2.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +364 more potentially affected by CVE-2026-97468 via org.apache.cxf:cxf-rt-ws-security (>=2.1.10, <=3.6.12)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.1.10, =1.1.7, =1.1.9, =1.2.5, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

io.github.aafc-bicoe:dina-base-api (>=0.168, <=0.182), net.tirasa.connid.bundles:net.tirasa.connid.bundles.rest (1.1.2) +7 more potentially affected by CVE-2026-86463 via org.apache.cxf:cxf-rt-rs-extension-search (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-extension-search MAVEN version =4.2.0, =0.168, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =8.0.0-rc2, =8.1.0-rc2 Source cves: CVE-2026-86463 Source advisory: MEND:CVE-2026-86463...

com.araguacaima.braas:braas-core (1.2), com.araguacaima:commons-utils (>=1.0.1, <=1.5.17) +274 more potentially affected by CVE-2026-86463 via org.apache.cxf:cxf-rt-rs-extension-search (>=2.6.0, <=3.6.12)

org.apache.cxf:cxf-rt-rs-extension-search MAVEN version =2.6.0, =1.0.1, =1.0.1, =0.9.0, =0.9.0, =0.2, =0.7, =0.7, =0.2, =0.1, =0.0.2, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2026-86463 Source advisory: MEND:CVE-2026-86463...

com.github.arucard21.simplyrestful:deploy-jetty-cxf (>=1.0.0, <=1.1.0), com.github.arucard21.simplyrestful:deploy-springboot-cxf (>=1.0.0, <=1.1.0) +88 more potentially affected by CVE-2026-86463 via org.apache.cxf:cxf-rt-rs-extension-search (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-rs-extension-search MAVEN version =4.0.0, =1.0.0, =1.0.0, =0.165, =1.1.0-rc1, =4.8.2, =4.10.7, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0-m0, =4.0.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-86463 Source advisory: MEND:CVE-2026-86463...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.8) +1 more potentially affected by CVE-2026-79650 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.8 Source cves: CVE-2026-79650 Source advisory: MEND:CVE-2026-79650...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.3), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.3) potentially affected by CVE-2026-79650 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-79650 Source advisory: MEND:CVE-2026-79650...

org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebapp (>=1.3.0, <=1.7.2), org.apache.cxf.fediz:fediz-idp (>=1.3.0, <=1.7.2) +6 more potentially affected by CVE-2026-79650 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=3.1.6, <=3.6.12)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =3.1.6, =1.3.0, =1.3.0, =1.4.0, =1.3.0, =3.1.7, =3.3.0, =2.0.9, =2.0.9, =2.1.14 Source cves: CVE-2026-79650 Source advisory: MEND:CVE-2026-79650...

be.atbash.test:integration-testing (2.2.0), be.atbash.test:integration-testing-database (2.2.0) +896 more potentially affected by CVE-2026-78384 via org.apache.cxf:cxf-core (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-core MAVEN version =4.0.0, =1.0.0, =12.1-7-21, =0.0.1, =1.1.0, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons 2.70.0 and more Source cves: CVE-2026-78384 Source advisory: MEND:CVE-2026-78384...

com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), com.codbex.atlas:codbex-atlas-application (>=2.98.0, <=2.116.0) +413 more potentially affected by CVE-2026-78384 via org.apache.cxf:cxf-core (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-core MAVEN version =4.2.0, =2.98.0, =4.0.0-beta.1, =4.0.0-beta.1, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.3.0 - de.cezaryrk.olingo:odata-fit 5.1.0 - io.bootique.cxf:bootique-cxf-core 4.0-m6 and more Source cves: CVE-2026-78384 Source advisory: MEND:CVE-2026-78384...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +3390 more potentially affected by CVE-2026-78384 via org.apache.cxf:cxf-core (>=3.0.0, <=3.6.12)

org.apache.cxf:cxf-core MAVEN version =3.0.0, =1.0.0, =1.11.0, =1.11.0, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =3.19.0 and more Source cves: CVE-2026-78384 Source advisory: MEND:CVE-2026-78384...

com.github.cchacin:cucumber-common-steps (>=0.0.2, <=0.1.8), com.github.httpmock:mock-http-server-junit (>=1.0.0, <=1.1.5) +110 more potentially affected by CVE-2026-73179 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=2.6.0, <=3.6.12)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =2.6.0, =0.0.2, =1.0.0, =1.0.0, =ec2-2013-02-01, =1.7.2.230613, =1.7.2.230622, =1.0.m1, =1.0.m1, =1.0.m2, =1.1.9, =1.1.9, =2.0.0.final, =2.2.1.final and more Source cves: CVE-2026-73179 Source advisory: MEND:CVE-2026-73179...

de.cezaryrk.olingo:odata-fit (5.1.0), io.tesseraql:tesseraql-cli (>=0.15.0, <=0.19.1) +20 more potentially affected by CVE-2026-73179 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.22.1 and more Source cves: CVE-2026-73179 Source advisory: MEND:CVE-2026-73179...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-73179 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.8 and more Source cves: CVE-2026-73179 Source advisory: MEND:CVE-2026-73179...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.3), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.3) potentially affected by CVE-2026-71575 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-71575 Source advisory: MEND:CVE-2026-71575...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.8) +1 more potentially affected by CVE-2026-71575 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.8 Source cves: CVE-2026-71575 Source advisory: MEND:CVE-2026-71575...

org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebapp (>=1.3.0, <=1.7.2), org.apache.cxf.fediz:fediz-idp (>=1.3.0, <=1.7.2) +6 more potentially affected by CVE-2026-71575 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=3.1.6, <=3.6.12)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =3.1.6, =1.3.0, =1.3.0, =1.4.0, =1.3.0, =3.1.7, =3.3.0, =2.0.9, =2.0.9, =2.1.14 Source cves: CVE-2026-71575 Source advisory: MEND:CVE-2026-71575...

app.ductape:sdk (0.1.10), cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21) +423 more potentially affected by CVE-2026-71884 via org.bouncycastle:bcprov-lts8on (>=2.73.4, <=2.73.12.1)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.4, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.3-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.1-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-71884 Source advisory: MEND:CVE-2026-71884...

aas2openapi (>=0.2.0, <=0.2.4), adelecv (>=0.0.1, <=0.0.2) +115 more potentially affected by CVE-2026-107728 via strawberry-graphql (>=0.16.10, <=0.325.0)

strawberry-graphql PYPI version =0.16.10, =0.2.0, =0.0.1, =0.0.1, =2025.4.0, =2025.4.0, =0.1.1, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2rc0, =0.9.0, =25.13.0rc1, =26.9.3 and more Source cves: CVE-2026-107728 Source advisory: MEND:CVE-2026-107728...

airo-camera-toolkit (>=2025.4.0, <=2025.7.1), airo-dataset-tools (>=2025.4.0, <=2026.5.0) +35 more potentially affected by CVE-2026-107727 via strawberry-graphql (>=0.312.4, <=0.327.1)

strawberry-graphql PYPI version =0.312.4, =2025.4.0, =2025.4.0, =0.9.0, =26.4.0rc1, =0.1.0a1, =0.2.0, =1.0.1, =0.1.0, =1.17.0, =0.1.0, =0.0.246, =2.0.0, =0.0.1a0, =0.1.26, =1.1.3, =2.4.1 and more Source cves: CVE-2026-107727 Source advisory: MEND:CVE-2026-107727...

@jsprismarine/client (>=0.1.0-rc.50, <=0.14.2), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.2) +2 more potentially affected by CVE-2026-107719 via fast-jwt (>=6.0.0, <=6.3.3)

fast-jwt NPM version =6.0.0, =0.1.0-rc.50, =0.12.2-unstable-20250320195345, =0.1.0-rc.50, =0.1.0-rc.50, =0.1.0-rc.52 Source cves: CVE-2026-107719 Source advisory: OSV:GHSA-X937-HJ6V-793P...

@jsprismarine/client (>=0.1.0-rc.50, <=0.14.2), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.2) +2 more potentially affected by CVE-2026-107719 via fast-jwt (>=6.0.0, <=6.3.3)

fast-jwt NPM version =6.0.0, =0.1.0-rc.50, =0.12.2-unstable-20250320195345, =0.1.0-rc.50, =0.1.0-rc.50, =0.1.0-rc.52 Source cves: CVE-2026-107719 Source advisory: GHSA-X937-HJ6V-793P...

@jsprismarine/client (>=0.1.0-rc.50, <=0.14.2), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.2) +2 more potentially affected by CVE-2026-107719 via fast-jwt (>=6.0.0, <=6.3.3)

fast-jwt NPM version =6.0.0, =0.1.0-rc.50, =0.12.2-unstable-20250320195345, =0.1.0-rc.50, =0.1.0-rc.50, =0.1.0-rc.52 Source cves: CVE-2026-107719 Source advisory: SNYK:JS-FASTJWT-20825051...

com.bestellensoftware:jsync.io (1.8.6-alpha-2), com.hazelcast:hazelcast-build-utils (3.4.4) +9 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.4.4)

com.hazelcast:hazelcast MAVEN version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.bestellensoftware:jsync.io 1.8.6-alpha-2 - com.hazelcast:hazelcast-build-utils 3.4.4 -...

com.hazelcast:hazelcast-all (1.9.4.1), com.hazelcast:hazelcast-client (1.9.4.1) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (1.9.4.1)

com.hazelcast:hazelcast MAVEN version 1.9.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.1 - com.hazelcast:hazelcast-client 1.9.4.1 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-client (3.1.8), com.hazelcast:hazelcast-cloud (3.1.8) +6 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.1.8)

com.hazelcast:hazelcast MAVEN version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1.8 - com.hazelcast:hazelcast-cloud 3.1.8 - com.hazelcast:hazelcast-hibernate...