ai.spice:spiceai (=0.6.0), cn.isqing.icloud:icloud-common-utils (>=4.0.3-M1 <=4.0.3.1) +431 more potentially affected by CVE-2026-48006 via io.netty:netty-codec-redis (>=4.2.0.Final <=4.2.14.Final)

io.netty:netty-codec-redis MAVEN version =4.2.0.Final, =4.0.3-M1, =1.21.9, =3.4.7, =25.4.1, =26.2.1, =7.9.0, =5.1.0, =5.1.0, =6.80, =0.2.2, =0.2.4 and more Source cves: CVE-2026-48006 Source advisory: OSV:GHSA-6JV9-X5W9-2CCM...

ai.chronon:service_2.11 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:service_2.12 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +2478 more potentially affected by CVE-2026-48006 via io.netty:netty-codec-redis (>=4.1.0.Final <=4.1.134.Final)

io.netty:netty-codec-redis MAVEN version =4.1.0.Final, =0.0.86, =0.0.86, =0.0.86, =3.30.1.1, =3.10.0.5, =0.2.3.5, =0.0.1, =2.0.24, =1.1.9, =0.0.1, =0.0.9 and more Source cves: CVE-2026-48006 Source advisory: OSV:GHSA-6JV9-X5W9-2CCM...

doppler-pdm (>=0.1.0 <=1.0.2), liteyukibot-plugin-nonebot (>=0.1.0 <=0.1.3) +9 more potentially affected by CVE-2026-47781 via pdm (>=1.15.5 <=2.26.2)

pdm PYPI version =1.15.5, =0.1.0, =0.1.0, =0.1.5, =0.14.0, =0.2.0, =0.8.0, =0.8.0b1, =0.8.0b2 Source cves: CVE-2026-47781 Source advisory: OSV:GHSA-QQ6C-99PV-PRVF...

RuStream (>=0.0.1 <=0.0.2), RustPyNet (>=0.1.0 <=0.1.3) +592 more potentially affected by unknown CVE via pyo3 (>=0.10.1 <=0.28.3)

pyo3 CARGO version =0.10.1, =0.0.1, =0.1.0, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0177...

ado-vllm-performance (>=1.2.2 <=1.3.3), agentclinic (=0.1.0) +37 more potentially affected by CVE-2026-5497 via vllm (>=0.10.0 <=0.19.0)

vllm PYPI version =0.10.0, =1.2.2, =0.0.0, =2.3.5, =0.2.0, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.0, =0.3.9, =0.5.2, =0.1.0, =0.1.5, =0.2.0 - gfmrag =2.0.0 and more Source cves: CVE-2026-5497 Source advisory: SNYK:PYTHON-VLLM-17354450...

org.apereo.cas:cas-mgmt-api-configuration (=6.3.0-RC1), org.apereo.cas:cas-mgmt-api-dashboard (=6.3.0-RC1) +346 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=4.0.0-RC1 <=4.0.0)

org.springframework.webflow:spring-webflow MAVEN version =4.0.0-RC1, =8.0.0-RC1, =8.0.0-RC1, =8.0.0-RC1, =8.0.0-RC1, =8.0.0-RC1, =8.0.0-RC1, =8.0.0-RC1, =8.0.0-RC1, =8.0.0-RC1, =8.0.0-RC1, =8.0.0-RC1, =8.0.0-RC5 and more Source cves: CVE-2026-40985 Source advisory:...

com.netcetera.girders:girders-starter-webflow (>=6.2.0 <=6.5.0), org.apache.syncope.wa:syncope-wa-bootstrap (>=4.0.0 <=4.1.1) +437 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=3.0.0 <=3.0.1)

org.springframework.webflow:spring-webflow MAVEN version =3.0.0, =6.2.0, =4.0.0, =7.1.6.1, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.2.0, =7.3.7.2 and more Source cves: CVE-2026-40985 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWEBFLOW-17315634...

nodemon-patch (=3.1.16) potentially affected by unknown CVE via webpack-patch (=1.1.7)

webpack-patch NPM version =1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on webpack-patch and may be impacted: - nodemon-patch =3.1.16 Source cves: unknown CVE Source advisory: OSV:MAL-2026-5581...

@my_name_is_khn/express-security-tool-v2 (=1.0.0) potentially affected by unknown CVE via @my_name_is_khn/express-security-tool-v1 (=1.0.0)

@mynameiskhn/express-security-tool-v1 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @mynameiskhn/express-security-tool-v1 and may be impacted: - @mynameiskhn/express-security-tool-v2 =1.0.0 Source cves: unknown CVE Source advisory:...

@my_name_is_khn/express-security-tool-v1 (=1.0.0), @my_name_is_khn/express-security-tool-v2 (=1.0.0) potentially affected by unknown CVE via @my_name_is_khn/express-security-tool (=1.0.0)

@mynameiskhn/express-security-tool NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @mynameiskhn/express-security-tool and may be impacted: - @mynameiskhn/express-security-tool-v1 =1.0.0 - @mynameiskhn/express-security-tool-v2 =1.0.0...

express-timer (>=1.0.1 <=1.0.5) potentially affected by unknown CVE via express-timer (=1.0.6)

express-timer NPM version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on express-timer and may be impacted: - express-timer =1.0.1, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-5555...

cn.net.pap:pap4j-boot3-starter-statemachine (>=0.0.1 <=0.0.3), guru.nicks.commons:statemachine-starter (>=100.260315.1 <=100.260609.1) +8 more potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-data-common (>=4.0.0 <=4.0.1)

org.springframework.statemachine:spring-statemachine-data-common MAVEN version =4.0.0, =0.0.1, =100.260315.1, =4.0.0, =4.0.0, =4.0.0, =4.0.1 - org.springframework.statemachine:spring-statemachine-samples-datajpa =4.0.0 -...

org.springframework.statemachine:spring-statemachine-samples-datapersist (=4.0.0) potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-data-mongodb (=4.0.0)

org.springframework.statemachine:spring-statemachine-data-mongodb MAVEN version =4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.statemachine:spring-statemachine-data-mongodb and may be impacted: -...

com.codbex.atlas:codbex-atlas-application (>=2.80.0 <=2.109.0), com.codbex.phoebe:codbex-phoebe-application (>=0.2.0 <=3.32.0) +12 more potentially affected by CVE-2026-47825 via org.springframework.cloud:spring-cloud-gateway-server-mvc (>=4.1.0 <=4.3.4)

org.springframework.cloud:spring-cloud-gateway-server-mvc MAVEN version =4.1.0, =2.80.0, =0.2.0, =0.2.1, =12.23.0, =12.23.0, =12.23.0, =12.23.0, =4.1.3, =4.3.0, =4.1.0, =4.3.0, =1.3.0, =1.3.1 Source cves: CVE-2026-47825 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-17326015http...

cn.net.pap:pap4j-boot3-starter-statemachine (>=0.0.1 <=0.0.3), guru.nicks.commons:statemachine-starter (>=100.260315.1 <=100.260609.1) +3 more potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-data-jpa (>=4.0.0 <=4.0.1)

org.springframework.statemachine:spring-statemachine-data-jpa MAVEN version =4.0.0, =0.0.1, =100.260315.1, =100.260609.1 - org.springframework.statemachine:spring-statemachine-samples-datajpa =4.0.0 - org.springframework.statemachine:spring-statemachine-samples-datajpamultipersist =4.0.0 -...

org.springframework.statemachine:spring-statemachine-samples-datapersist (=4.0.0), org.springframework.statemachine:spring-statemachine-samples-eventservice (=4.0.0) potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-data-redis (=4.0.0)

org.springframework.statemachine:spring-statemachine-data-redis MAVEN version =4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.statemachine:spring-statemachine-data-redis and may be impacted: -...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.8 <=1.0.12), cn.crushes.cloud:crush-zipkin (>=2.4.5 <=2.5.0-GA) +515 more potentially affected by CVE-2026-41708 via org.springframework.cloud:spring-cloud-sleuth-instrumentation (>=3.0.0 <=3.1.9)

org.springframework.cloud:spring-cloud-sleuth-instrumentation MAVEN version =3.0.0, =1.0.8, =2.4.5, =0.0.2, =0.0.2, =1.0.0-RELEASE, =1.0.0-RELEASE, =1.0.0-RELEASE, =1.1.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41708 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-17325634...

cn.net.pap:pap4j-boot3-starter-statemachine (>=0.0.1 <=0.0.3), guru.nicks.commons:statemachine-starter (>=100.260315.1 <=100.260609.1) +13 more potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-kryo (>=4.0.0 <=4.0.1)

org.springframework.statemachine:spring-statemachine-kryo MAVEN version =4.0.0, =0.0.1, =100.260315.1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0...

org.springframework.statemachine:spring-statemachine-cluster (>=4.0.0 <=4.0.1), org.springframework.statemachine:spring-statemachine-samples-web (=4.0.0) +1 more potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-zookeeper (>=4.0.0 <=4.0.1)

org.springframework.statemachine:spring-statemachine-zookeeper MAVEN version =4.0.0, =4.0.0, =4.0.1 - org.springframework.statemachine:spring-statemachine-samples-web =4.0.0 - org.springframework.statemachine:spring-statemachine-samples-zookeeper =4.0.0 Source cves: CVE-2026-41862 Source advisory...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0 <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (=0.1.0) +131 more potentially affected by CVE-2026-47825 via org.springframework.cloud:spring-cloud-gateway-server (>=4.0.0 <=4.3.4)

org.springframework.cloud:spring-cloud-gateway-server MAVEN version =4.0.0, =0.2.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =3.0.0, =1.0.0, =1.0.0, =2023.4.1.0, =1.0.5, =1.0.4, =3.0.0.1, =jdk17-0.0.1 and more Source cves: CVE-2026-47825 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-17326016...

airalogy-engine (>=0.0.2 <=0.0.5), boxlite-mcp (>=0.1.2 <=0.3.0) +3 more potentially affected by CVE-2026-47213 via boxlite (>=0.8.2 <=0.9.5)

boxlite PYPI version =0.8.2, =0.0.2, =0.1.2, =0.1.0, =0.3.1 - iflow-mcp-boxlite-ai-boxlite-mcp =0.2.5 Source cves: CVE-2026-47213 Source advisory: SNYK:PYTHON-BOXLITE-17295770...

@airalogy/airalogy-engine (>=0.0.1 <=0.0.2) potentially affected by CVE-2026-47213 via @boxlite-ai/boxlite (=0.8.2)

@boxlite-ai/boxlite NPM version =0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @boxlite-ai/boxlite and may be impacted: - @airalogy/airalogy-engine =0.0.1, =0.0.2 Source cves: CVE-2026-47213 Source advisory: SNYK:JS-BOXLITEAIBOXLITE-17295771...

aiidalab (>=22.6.0 <=26.6.1), aiidalab-chemshell (>=0.0.1 <=0.1.1) +105 more potentially affected by CVE-2026-52726 via dulwich (>=0.23.2 <=1.2.1)

dulwich PYPI version =0.23.2, =22.6.0, =0.0.1, =0.1.0, =1.3.4, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.3.0, =0.8.3, =0.1.0, =0.1.6 and more Source cves: CVE-2026-52726 Source advisory: SNYK:PYTHON-DULWICH-17295858...

otupy (>=1.1.13 <=1.1.37), sycommon-python-lib (>=0.2.5 <=0.2.6a2) potentially affected by CVE-2026-10142 via kafka-python (>=2.3.0 <=2.3.1)

kafka-python PYPI version =2.3.0, =1.1.13, =0.2.5, =0.2.6a2 Source cves: CVE-2026-10142 Source advisory: SNYK:PYTHON-KAFKAPYTHON-17327850...

ag-kafka-utils (>=0.1.0 <=0.1.2), ai-flow (>=0.1.0 <=0.3.1) +110 more potentially affected by CVE-2026-10142 via kafka-python (>=2.0.0 <=2.2.15)

kafka-python PYPI version =2.0.0, =0.1.0, =0.1.0, =2022.9.19, =25.8.14, =3.2.0, =1.1.87, =2.8.0a0, =0.1.12, =0.1.4, =0.0.9, =0.0.3, =1.9.43, =0.1.0, =0.1.4 and more Source cves: CVE-2026-10142 Source advisory: SNYK:PYTHON-KAFKAPYTHON-17327850...

doppler-pdm (>=0.1.0 <=1.0.2), liteyukibot-plugin-nonebot (>=0.1.0 <=0.1.3) +9 more potentially affected by CVE-2026-47764 via pdm (>=1.15.5 <=2.26.2)

pdm PYPI version =1.15.5, =0.1.0, =0.1.0, =0.1.5, =0.14.0, =0.2.0, =0.8.0, =0.8.0b1, =0.8.0b2 Source cves: CVE-2026-47764 Source advisory: OSV:GHSA-78V8-VPJP-CJQH...

liteyukibot-plugin-nonebot (>=0.1.0 <=0.1.3), pdm-conda (>=0.14.0 <=0.18.3) +2 more potentially affected by CVE-2026-47764 via pdm (>=2.10.1 <=2.26.2)

pdm PYPI version =2.10.1, =0.1.0, =0.14.0, =0.8.0, =0.8.0b1, =0.8.0b2 Source cves: CVE-2026-47764 Source advisory: SNYK:PYTHON-PDM-17400354...

liteyukibot-plugin-nonebot (>=0.1.0 <=0.1.3), pdm-conda (>=0.14.0 <=0.18.3) +2 more potentially affected by CVE-2026-47763 via pdm (>=2.10.1 <=2.26.2)

pdm PYPI version =2.10.1, =0.1.0, =0.14.0, =0.8.0, =0.8.0b1, =0.8.0b2 Source cves: CVE-2026-47763 Source advisory: SNYK:PYTHON-PDM-17400353...

doppler-pdm (>=0.1.0 <=1.0.2), liteyukibot-plugin-nonebot (>=0.1.0 <=0.1.3) +9 more potentially affected by CVE-2026-47763 via pdm (>=1.15.5 <=2.26.2)

pdm PYPI version =1.15.5, =0.1.0, =0.1.0, =0.1.5, =0.14.0, =0.2.0, =0.8.0, =0.8.0b1, =0.8.0b2 Source cves: CVE-2026-47763 Source advisory: OSV:GHSA-GHQ2-5C67-FPRM...

otupy (>=1.1.13 <=1.1.37), sycommon-python-lib (>=0.2.5 <=0.2.6a2) potentially affected by CVE-2026-10143 via kafka-python (>=2.3.0 <=2.3.1)

kafka-python PYPI version =2.3.0, =1.1.13, =0.2.5, =0.2.6a2 Source cves: CVE-2026-10143 Source advisory: SNYK:PYTHON-KAFKAPYTHON-17320566...

ag-kafka-utils (>=0.1.0 <=0.1.2), ai-flow (>=0.1.0 <=0.3.1) +110 more potentially affected by CVE-2026-10143 via kafka-python (>=2.0.0 <=2.2.15)

kafka-python PYPI version =2.0.0, =0.1.0, =0.1.0, =2022.9.19, =25.8.14, =3.2.0, =1.1.87, =2.8.0a0, =0.1.12, =0.1.4, =0.0.9, =0.0.3, =1.9.43, =0.1.0, =0.1.4 and more Source cves: CVE-2026-10143 Source advisory: SNYK:PYTHON-KAFKAPYTHON-17320566...

@hybridaione/hybridclaw (>=0.19.1 <=0.23.0), habibi-baileys (>=1.0.1 <=1.0.2) potentially affected by CVE-2026-48063 via @whiskeysockets/baileys (=7.0.0-rc11)

@whiskeysockets/baileys NPM version =7.0.0-rc11 is affected by a known vulnerability. The following packages have a transitive dependency on @whiskeysockets/baileys and may be impacted: - @hybridaione/hybridclaw =0.19.1, =1.0.1, =1.0.2 Source cves: CVE-2026-48063 Source advisory:...

@kodelyth/whatsapp (>=2026.6.4 <=2026.6.10), @openclaw/whatsapp (>=2026.5.12 <=2026.5.19-beta.2) +1 more potentially affected by CVE-2026-48063 via baileys (=7.0.0-rc11)

baileys NPM version =7.0.0-rc11 is affected by a known vulnerability. The following packages have a transitive dependency on baileys and may be impacted: - @kodelyth/whatsapp =2026.6.4, =2026.5.12, =2026.5.19-beta.2 - @theotherwillembotha/node-red-whatsapp =0.0.55 Source cves: CVE-2026-48063 Sour...

@aligent/cdk-esbuild (=2.1.0), @aligent/cdk-graphql-mesh-server (>=2.2.0 <=2.17.0) +460 more potentially affected by CVE-2026-11417 via aws-cdk-lib (>=2.0.0-alpha.4 <=2.245.0)

aws-cdk-lib NPM version =2.0.0-alpha.4, =2.2.0, =2.3.7, =2.1.0, =2.1.0, =2.0.0-beta, =1.2.15, =5.0.31-acdk-upgrade-2-129.0, =2.16.0-acdk-upgrade-2-129.0, =5.0.31-acdk-upgrade-2-129.0, =3.7.10-acdk-upgrade-2-129.0, =3.1.19-acdk-upgrade-2-129.0, =5.7.5-acdk-upgrade-2-129.0,...

litestar-htmx (>=0.1.0 <=0.3.0), niapi (>=0.2.0 <=0.5.0) +1 more potentially affected by CVE-2026-48061 via litestar (>=2.0.0b2 <=2.13.0)

litestar PYPI version =2.0.0b2, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48061 Source advisory: SNYK:PYTHON-LITESTAR-17304677...

litestar-htmx (>=0.1.0 <=0.3.0), niapi (>=0.2.0 <=0.5.0) +1 more potentially affected by CVE-2026-48061 via litestar (>=2.0.0b2 <=2.13.0)

litestar PYPI version =2.0.0b2, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48061 Source advisory: OSV:GHSA-3QMC-CJ7Q-62HV...

litestar-htmx (>=0.1.0 <=0.3.0), niapi (>=0.2.0 <=0.5.0) +1 more potentially affected by CVE-2026-48060 via litestar (>=2.0.0b2 <=2.13.0)

litestar PYPI version =2.0.0b2, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48060 Source advisory: SNYK:PYTHON-LITESTAR-17304678...

litestar-htmx (>=0.1.0 <=0.3.0), niapi (>=0.2.0 <=0.5.0) +1 more potentially affected by CVE-2026-48060 via litestar (>=2.0.0b2 <=2.13.0)

litestar PYPI version =2.0.0b2, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48060 Source advisory: OSV:GHSA-542P-WVX7-72M4...

ado-vllm-performance (>=1.2.2 <=1.3.3), agentclinic (=0.1.0) +41 more potentially affected by CVE-2026-47155 via vllm (>=0.10.0 <=0.21.0)

vllm PYPI version =0.10.0, =1.2.2, =0.0.0, =2.3.5, =0.2.0, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.0, =0.3.9, =0.5.2, =0.1.0, =0.1.5, =0.2.0 - gfmrag =2.0.0 and more Source cves: CVE-2026-47155 Source advisory: SNYK:PYTHON-VLLM-17304846...

ado-vllm-performance (>=1.2.2 <=1.3.3), agentclinic (=0.1.0) +41 more potentially affected by CVE-2026-47155 via vllm (>=0.10.0 <=0.21.0)

vllm PYPI version =0.10.0, =1.2.2, =0.0.0, =2.3.5, =0.2.0, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.0, =0.3.9, =0.5.2, =0.1.0, =0.1.5, =0.2.0 - gfmrag =2.0.0 and more Source cves: CVE-2026-47155 Source advisory: OSV:GHSA-3WW4-5JV9-J5GM...

org.apache.camel.quarkus:camel-quarkus-cometd (>=3.0.0-RC2 <=3.6.0), org.apache.camel.quarkus:camel-quarkus-cometd-deployment (>=3.0.0-RC2 <=3.6.0) +13 more potentially affected by CVE-2025-53114 via org.cometd.java:cometd-java-server-common (>=7.0.0 <=7.0.18)

org.cometd.java:cometd-java-server-common MAVEN version =7.0.0, =3.0.0-RC2, =3.0.0-RC2, =3.0.0-RC2, =4.0.0, =4.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.11, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.18 Source cves: CVE-2025-53114 Source advisory: OSV:GHSA-CQGJ-H8VF-4W59...

org.cometd.java:cometd-java-annotation-server (>=6.0.0 <=6.0.18), org.cometd.java:cometd-java-benchmark-server (>=6.0.0 <=6.0.18) +8 more potentially affected by CVE-2025-53114 via org.cometd.java:cometd-java-server-common (>=6.0.0 <=6.0.18)

org.cometd.java:cometd-java-server-common MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.18 Source cves: CVE-2025-53114 Source advisory: OSV:GHSA-CQGJ-H8VF-4W59...

org.cometd.java:cometd-java-annotation-server (>=5.0.0 <=5.0.22), org.cometd.java:cometd-java-benchmark-server (>=5.0.0 <=5.0.22) +8 more potentially affected by CVE-2025-53114 via org.cometd.java:cometd-java-server-common (>=5.0.0 <=5.0.22)

org.cometd.java:cometd-java-server-common MAVEN version =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.2, =5.0.22 Source cves: CVE-2025-53114 Source advisory: OSV:GHSA-CQGJ-H8VF-4W59...

org.apache.camel.karaf:camel-cometd (>=4.7.0 <=4.10.7), org.apache.camel.quarkus:camel-quarkus-cometd (>=3.7.0 <=3.29.0) +13 more potentially affected by CVE-2025-53114 via org.cometd.java:cometd-java-server-common (>=8.0.0 <=8.0.8)

org.cometd.java:cometd-java-server-common MAVEN version =8.0.0, =4.7.0, =3.7.0, =3.7.0, =3.7.0, =4.3.0, =4.3.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.11 Source cves: CVE-2025-53114 Source advisory: OSV:GHSA-CQGJ-H8VF-4W59...

org.webjars.npm:datauri (>=1.1.0 <=2.0.0), org.webjars.npm:image-thumbnail (=1.0.15) +1 more potentially affected by CVE-2025-71319 +1 more via org.webjars.npm:image-size (>=0.5.5 <=2.0.0-alpha.1)

org.webjars.npm:image-size MAVEN version =0.5.5, =1.1.0, =2.7.1, =2.7.2 Source cves: CVE-2025-71319, CVE-2025-71329 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17295815...

-wlq-mxgrapheditor (=0.0.0), 01-vue3-vite (=0.0.0) +35922 more potentially affected by CVE-2025-71319 +1 more via image-size (>=0.0.16 <=2.0.2)

image-size NPM version =0.0.16, =1.0.1, =0.0.2, =0.0.3, =1.0.0, =1.0.5, =5.0.0, =0.0.1, =3.6.1 and more Source cves: CVE-2025-71319, CVE-2025-71329 Source advisory: SNYK:JS-IMAGESIZE-17295814...

-wlq-mxgrapheditor (=0.0.0), 01-vue3-vite (=0.0.0) +35922 more potentially affected by CVE-2025-71330 via image-size (>=0.0.16 <=2.0.2)

image-size NPM version =0.0.16, =1.0.1, =0.0.2, =0.0.3, =1.0.0, =1.0.5, =5.0.0, =0.0.1, =3.6.1 and more Source cves: CVE-2025-71330 Source advisory: SNYK:JS-IMAGESIZE-17295816...

org.webjars.npm:datauri (>=1.1.0 <=2.0.0), org.webjars.npm:image-thumbnail (=1.0.15) +1 more potentially affected by CVE-2025-71330 via org.webjars.npm:image-size (>=0.5.5 <=2.0.0-alpha.1)

org.webjars.npm:image-size MAVEN version =0.5.5, =1.1.0, =2.7.1, =2.7.2 Source cves: CVE-2025-71330 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17295817...

@hulumi/platform-patterns (>=0.0.0-bootstrap.0 <=1.3.2) potentially affected by CVE-2026-48037 via @hulumi/baseline (>=1.3.1 <=1.3.2)

@hulumi/baseline NPM version =1.3.1, =0.0.0-bootstrap.0, =1.3.2 Source cves: CVE-2026-48037 Source advisory: SNYK:JS-HULUMIBASELINE-17660551...

@hulumi/platform-patterns (>=0.0.0-bootstrap.0 <=1.3.2) potentially affected by CVE-2026-48037 via @hulumi/baseline (>=1.3.1 <=1.3.2)

@hulumi/baseline NPM version =1.3.1, =0.0.0-bootstrap.0, =1.3.2 Source cves: CVE-2026-48037 Source advisory: OSV:GHSA-CJ8G-PRCM-MFG5...