5mghost-rover (>=0.0.1 <=0.0.3), a-data-processing (=0.0.1) +676 more potentially affected by CVE-2026-48156 via pypdf (>=3.10.0 <=6.11.0)

pypdf PYPI version =3.10.0, =0.0.1, =0.6.0, =0.1.1, =0.8.1, =0.9.1, =0.1.0, =0.2.0, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.3 and more Source cves: CVE-2026-48156 Source advisory: OSV:GHSA-248M-82V9-Q6G6...

5mghost-rover (>=0.0.1 <=0.0.3), a-data-processing (=0.0.1) +676 more potentially affected by CVE-2026-48155 via pypdf (>=3.10.0 <=6.11.0)

pypdf PYPI version =3.10.0, =0.0.1, =0.6.0, =0.1.1, =0.8.1, =0.9.1, =0.1.0, =0.2.0, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.3 and more Source cves: CVE-2026-48155 Source advisory: OSV:GHSA-CJ93-CHG6-VGV8...

budibase (>=0.0.3 <=0.0.31) potentially affected by CVE-2026-48152 via @budibase/server (>=0.0.1 <=0.0.9)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-48152 Source advisory: OSV:GHSA-3GP5-Q4JW-3V94...

budibase (>=0.0.3 <=0.0.31) potentially affected by CVE-2026-48151 via @budibase/server (>=0.0.1 <=0.0.9)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-48151 Source advisory: OSV:GHSA-QHV3-WJG8-6FX6...

budibase (>=0.0.3 <=0.0.31) potentially affected by CVE-2026-48151 via @budibase/server (>=0.0.1 <=0.0.9)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-48151 Source advisory: SNYK:JS-BUDIBASESERVER-17660562...

budibase (>=0.0.3 <=0.0.31) potentially affected by CVE-2026-48150 via @budibase/server (>=0.0.1 <=0.0.9)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-48150 Source advisory: SNYK:JS-BUDIBASESERVER-17660559...

budibase (>=0.0.3 <=0.0.31) potentially affected by CVE-2026-48150 via @budibase/server (>=0.0.1 <=0.0.9)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-48150 Source advisory: OSV:GHSA-6XP4-CF37-PPJH...

budibase (>=0.0.3 <=0.0.31) potentially affected by CVE-2026-48148 via @budibase/server (>=0.0.1 <=0.0.9)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-48148 Source advisory: OSV:GHSA-CV96-5348-P5P8...

@budibase/cli (>=0.0.1 <=3.2.26), @budibase/pro (>=0.0.1 <=3.2.26) +4 more potentially affected by CVE-2026-48147 via @budibase/backend-core (>=0.0.1 <=3.2.7)

@budibase/backend-core NPM version =0.0.1, =0.0.1, =0.0.1, =0.0.999-alpha.30, =0.0.1, =3.2.26 - @devlego/server =1.1.29-alpha.1 - @devlego/worker =1.1.29-alpha.1 Source cves: CVE-2026-48147 Source advisory: OSV:GHSA-WXQ7-X3QP-VCR8...

aida-tools (>=0.1.0 <=0.1.3), apache-airflow-providers-mariadb (=1.0.0) +66 more potentially affected by CVE-2026-44172 via mariadb (>=1.0.11 <=2.0.0rc2)

mariadb PYPI version =1.0.11, =0.1.0, =0.0.1, =0.6.0, =1.0.1, =0.3.1, =0.1.0, =0.1.0, =0.1.4, =1.1.8, =2.0.5, =0.0.3, =0.0.1, =1.1.0, =1.4.0 and more Source cves: CVE-2026-44172 Source advisory: OSV:PYSEC-2026-217...

01os (>=0.0.5 <=0.0.13), 1claw-crewai-tools (=0.1.0) +1819 more potentially affected by CVE-2026-45831 via chromadb (>=0.3.21 <=1.5.9)

chromadb PYPI version =0.3.21, =0.0.5, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.0.4, =0.0.4.dev0 - adaline-crewai =0.1.0 - adam-thinking =1.0.0 and more Source cves: CVE-2026-45831 Source advisory: SNYK:PYTHON-CHROMADB-17337045...

1claw-crewai-tools (=0.1.0), 4dpocket (>=0.1.3 <=0.1.4) +1697 more potentially affected by CVE-2026-45832 via chromadb (>=0.5.0 <=1.5.9)

chromadb PYPI version =0.5.0, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.0.4, =0.1.0, =3.0.1 and more Source cves: CVE-2026-45832 Source advisory: SNYK:PYTHON-CHROMADB-17337044...

01os (>=0.0.5 <=0.0.13), 1claw-crewai-tools (=0.1.0) +1776 more potentially affected by CVE-2026-45830 via chromadb (>=0.4.17 <=1.5.9)

chromadb PYPI version =0.4.17, =0.0.5, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.0.4, =0.0.4.dev0 - adaline-crewai =0.1.0 - adam-thinking =1.0.0 and more Source cves: CVE-2026-45830 Source advisory: SNYK:PYTHON-CHROMADB-17337048...

01os (>=0.0.5 <=0.0.13), 1claw-crewai-tools (=0.1.0) +1776 more potentially affected by CVE-2026-45833 via chromadb (>=0.4.17 <=1.5.9)

chromadb PYPI version =0.4.17, =0.0.5, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.0.4, =0.0.4.dev0 - adaline-crewai =0.1.0 - adam-thinking =1.0.0 and more Source cves: CVE-2026-45833 Source advisory: SNYK:PYTHON-CHROMADB-17337041...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +3382 more potentially affected by CVE-2026-50020 via io.netty:netty-codec-http (>=4.2.0.Alpha1 <=4.2.14.Final)

io.netty:netty-codec-http MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-50020 Source advisory: SNYK:JAVA-IONETTY-17337012...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +23887 more potentially affected by CVE-2026-50020 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.134.Final)

io.netty:netty-codec-http MAVEN version =4.0.0.Alpha1, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

ai.spice:spiceai (=0.6.0), cn.isqing.icloud:icloud-common-utils (>=4.0.3-M1 <=4.0.3.1) +431 more potentially affected by CVE-2026-50011 via io.netty:netty-codec-redis (>=4.2.0.Alpha1 <=4.2.14.Final)

io.netty:netty-codec-redis MAVEN version =4.2.0.Alpha1, =4.0.3-M1, =1.21.9, =3.4.7, =25.4.1, =26.2.1, =7.9.0, =5.1.0, =5.1.0, =6.80, =0.2.2, =0.2.4 and more Source cves: CVE-2026-50011 Source advisory: SNYK:JAVA-IONETTY-17337008...

ai.chronon:service_2.11 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:service_2.12 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +2478 more potentially affected by CVE-2026-50011 via io.netty:netty-codec-redis (>=4.1.0.Final <=4.1.134.Final)

io.netty:netty-codec-redis MAVEN version =4.1.0.Final, =0.0.86, =0.0.86, =0.0.86, =3.30.1.1, =3.10.0.5, =0.2.3.5, =0.0.1, =2.0.24, =1.1.9, =0.0.1, =0.0.9 and more Source cves: CVE-2026-50011 Source advisory: SNYK:JAVA-IONETTY-17337008...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +1044 more potentially affected by CVE-2026-50009 via io.netty:netty-codec-classes-quic (>=4.2.10.Final <=4.2.14.Final)

io.netty:netty-codec-classes-quic MAVEN version =4.2.10.Final, =0.1.0, =0.1.0, =0.0.1-alfa, =0.0.1-demo, =6.0.1, =4.0.3-M1, =1.21.9, =1.0.5, =3.6.4, =1.0.1, =26.2.1, =26.6.1 and more Source cves: CVE-2026-50009 Source advisory: SNYK:JAVA-IONETTY-17337011...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +1038 more potentially affected by CVE-2026-48748 via io.netty:netty-codec-http3 (>=4.2.10.Final <=4.2.14.Final)

io.netty:netty-codec-http3 MAVEN version =4.2.10.Final, =0.1.0, =0.1.0, =0.0.1-alfa, =0.0.1-demo, =6.0.1, =4.0.3-M1, =1.21.9, =1.0.5, =3.6.4, =1.0.1, =26.2.1, =26.6.1 and more Source cves: CVE-2026-48748 Source advisory: SNYK:JAVA-IONETTY-17337009...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +4472 more potentially affected by CVE-2026-50010 via io.netty:netty-handler (>=4.2.0.Alpha1 <=4.2.14.Final)

io.netty:netty-handler MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =4.7.4, =4.7.4, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-50010 Source advisory: SNYK:JAVA-IONETTY-17334567...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +29726 more potentially affected by CVE-2026-50010 via io.netty:netty-handler (>=4.0.0.Alpha1 <=4.1.134.Final)

io.netty:netty-handler MAVEN version =4.0.0.Alpha1, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +3037 more potentially affected by CVE-2026-50560 via io.netty:netty-codec-http2 (>=4.2.0.Alpha1 <=4.2.14.Final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-50560 Source advisory: SNYK:JAVA-IONETTY-17337010...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +19976 more potentially affected by CVE-2026-50560 via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.134.Final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.Beta4, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

@andor83/mother-may-i (>=1.0.1 <=1.0.10), @base_/cli (>=1.0.6 <=1.0.29-beta.26) +69 more potentially affected by CVE-2026-53722 via nuxt (>=3.0.0 <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1, =1.1.0, =1.0.0-29304822.f444f03, =8.0.0, =0.3.14, =9.8.3, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.1-alpha.33 and more Source cves: CVE-2026-53722 Source advisory: SNYK:JS-NUXT-17328106...

@bloggrify/bento (>=3.0.0 <=3.0.1), @bloggrify/core (>=3.0.0 <=3.1.2) +21 more potentially affected by CVE-2026-53722 via nuxt (>=4.0.3 <=4.4.6)

nuxt NPM version =4.0.3, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =0.0.1, =1.0.0, =1.1.0, =2.0.1 and more Source cves: CVE-2026-53722 Source advisory: SNYK:JS-NUXT-17328106...

@bloggrify/bento (>=3.0.0 <=3.0.1), @bloggrify/core (>=3.0.0 <=3.1.2) +22 more potentially affected by CVE-2026-53721 via nuxt (>=4.0.0-rc.0 <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =0.0.1, =1.0.0, =1.1.0, =2.0.1 and more Source cves: CVE-2026-53721 Source advisory: SNYK:JS-NUXT-17337027...

@andor83/mother-may-i (>=1.0.1 <=1.0.10), @base_/cli (>=1.0.6 <=1.0.29-beta.26) +56 more potentially affected by CVE-2026-53721 via nuxt (>=3.11.2 <=3.20.1)

nuxt NPM version =3.11.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.2.1, =1.2.0, =1.1.0, =1.0.0-29304822.f444f03, =8.0.0, =0.3.14, =9.8.3, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.1-alpha.33 and more Source cves: CVE-2026-53721 Source advisory: SNYK:JS-NUXT-17337027...

budibase (>=0.0.3 <=0.0.31) potentially affected by CVE-2026-48146 via @budibase/server (>=0.0.1 <=0.0.9)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-48146 Source advisory: OSV:GHSA-G6QX-G4PR-92V7...

@flutchai/flutch-sdk (>=0.2.7 <=0.5.0) potentially affected by CVE-2026-48121 via @langchain/langgraph-checkpoint-mongodb (=1.0.0)

@langchain/langgraph-checkpoint-mongodb NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @langchain/langgraph-checkpoint-mongodb and may be impacted: - @flutchai/flutch-sdk =0.2.7, =0.5.0 Source cves: CVE-2026-48121 Source advisory:...

actix-postgres (>=0.1.0 <=0.4.0), actyx_sdk (>=0.1.0 <=0.3.0) +504 more potentially affected by unknown CVE via postgres-protocol (>=0.4.0 <=0.6.10)

postgres-protocol CARGO version =0.4.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.1, =0.4.0, =0.3.5, =0.2.0, =0.4.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0179...

actix-postgres (>=0.1.0 <=0.4.0), actyx_sdk (>=0.1.0 <=0.3.0) +516 more potentially affected by unknown CVE via postgres-protocol (>=0.1.1 <=0.6.10)

postgres-protocol CARGO version =0.1.1, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.1, =0.4.0, =0.3.5, =0.2.0, =0.4.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0180...

actix-postgres (>=0.1.0 <=0.4.0), actyxos_data_flow (=0.1.0) +425 more potentially affected by unknown CVE via tokio-postgres (>=0.5.0-alpha.1 <=0.7.17)

tokio-postgres CARGO version =0.5.0-alpha.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.1, =0.4.0, =0.3.5, =0.2.0, =0.13.2, =0.1.0, =0.1.0, =0.5.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0178...

no.ks.fiks:adresseregisteret-client (>=1.0.0 <=1.4.0), no.ks.fiks:fastlegeregisteret-client (>=1.0.0 <=1.4.0) +15 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0, =1.0.0, =1.0.0, =4.7.0, =4.0.0, =3.0.0-M1, =3.0.0-M1, =3.0.0-M1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50629 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339177...

no.ks.fiks:adresseregisteret-client (>=1.5.0 <=1.6.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0 <=1.6.0) +13 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50629 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339177...

no.ks.fiks:adresseregisteret-client (>=1.0.0 <=1.4.0), no.ks.fiks:fastlegeregisteret-client (>=1.0.0 <=1.4.0) +15 more potentially affected by CVE-2026-50628 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0, =1.0.0, =1.0.0, =4.7.0, =4.0.0, =3.0.0-M1, =3.0.0-M1, =3.0.0-M1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50628 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339176...

no.ks.fiks:adresseregisteret-client (>=1.5.0 <=1.6.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0 <=1.6.0) +13 more potentially affected by CVE-2026-50628 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50628 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339176...

no.ks.fiks:adresseregisteret-client (>=1.5.0 <=1.6.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0 <=1.6.0) +13 more potentially affected by CVE-2026-50623 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50623 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339178...

no.ks.fiks:adresseregisteret-client (>=1.0.0 <=1.4.0), no.ks.fiks:fastlegeregisteret-client (>=1.0.0 <=1.4.0) +15 more potentially affected by CVE-2026-50623 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0, =1.0.0, =1.0.0, =4.7.0, =4.0.0, =3.0.0-M1, =3.0.0-M1, =3.0.0-M1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50623 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339178...

be.atbash.test:integration-testing (=2.2.0), be.atbash.test:integration-testing-database (=2.2.0) +879 more potentially affected by CVE-2026-49875 via org.apache.cxf:cxf-core (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-core MAVEN version =4.0.0, =1.0.0, =12.1-7-21, =0.0.1, =1.1.0, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons =2.70.0 and more Source cves: CVE-2026-49875 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339193...

com.codbex.atlas:codbex-atlas-application (>=2.98.0 <=2.110.0), com.github.skjolber.xml-log-filter:xml-log-filter-cxf (=2.0.1) +263 more potentially affected by CVE-2026-49875 via org.apache.cxf:cxf-core (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-core MAVEN version =4.2.0, =2.98.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =0.168, =10.0.2, =3.35.0, =3.36.0 and more Source cves: CVE-2026-49875 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339193...

be.atbash.test:integration-testing (=2.2.0), be.atbash.test:integration-testing-database (=2.2.0) +879 more potentially affected by CVE-2026-50645 via org.apache.cxf:cxf-core (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-core MAVEN version =4.0.0, =1.0.0, =12.1-7-21, =0.0.1, =1.1.0, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons =2.70.0 and more Source cves: CVE-2026-50645 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339192...

com.codbex.atlas:codbex-atlas-application (>=2.98.0 <=2.110.0), com.github.skjolber.xml-log-filter:xml-log-filter-cxf (=2.0.1) +263 more potentially affected by CVE-2026-50645 via org.apache.cxf:cxf-core (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-core MAVEN version =4.2.0, =2.98.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =0.168, =10.0.2, =3.35.0, =3.36.0 and more Source cves: CVE-2026-50645 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339192...

no.ks.fiks:adresseregisteret-client (>=1.0.0 <=1.4.0), no.ks.fiks:fastlegeregisteret-client (>=1.0.0 <=1.4.0) +15 more potentially affected by CVE-2026-50627 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0, =1.0.0, =1.0.0, =4.7.0, =4.0.0, =3.0.0-M1, =3.0.0-M1, =3.0.0-M1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50627 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339181...

no.ks.fiks:adresseregisteret-client (>=1.5.0 <=1.6.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0 <=1.6.0) +13 more potentially affected by CVE-2026-50627 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50627 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339181...

org.apache.cxf.systests:cxf-systests-uncategorized (>=4.0.0 <=4.1.6) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-integration-jca MAVEN version =4.0.0, =4.0.0, =4.1.6 Source cves: CVE-2026-50633 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339184...

org.apache.cxf.systests:cxf-systests-uncategorized (>=4.2.0 <=4.2.1) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-integration-jca MAVEN version =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50633 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339184...

org.apache.cxf.systests:cxf-systests-jaxrs (>=4.2.0 <=4.2.1), org.apache.cxf.systests:cxf-systests-transport-jms (>=4.2.0 <=4.2.1) +4 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50632 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339190...

org.apache.cxf.systests:cxf-systests-jaxrs (>=4.0.0 <=4.1.6), org.apache.cxf.systests:cxf-systests-transport-jms (>=4.0.0 <=4.1.6) +19 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (>=4.0.0 <=4.1.6)

org.apache.cxf:cxf-rt-transports-jms MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =6.2.0.Final, =7.3.7.Final, =7.0.0.Final, =7.0.0.Final, =6.2.0.Final, =6.2.0.Final, =7.0.0.Final, =7.0.0.Final, =7.3.3.Final and more Source cves: CVE-2026-50632 Source advisory:...

no.ks.fiks:adresseregisteret-client (>=1.5.0 <=1.6.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0 <=1.6.0) +14 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (>=4.2.0 <=4.2.1)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 and more Source cves: CVE-2026-50634 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339189...