be.appify.prefab:prefab-annotation-processor (>=0.2.0 <=0.10.2), be.appify.prefab:prefab-core (=0.2.0) +160 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (>=4.0.0 <=4.0.5)

org.springframework.kafka:spring-kafka MAVEN version =4.0.0, =0.2.0, =0.2.0, =7.0.0-alpha-springboot4, =7.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =12.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =2.0.0-alpha-springboot4,...

io.camunda.connector:connector-soap (>=8.9.0-alpha3 <=8.10.0-alpha2), net.sf.itcb.module.blank:blank-client (=0.0.1) +2 more potentially affected by CVE-2026-40994 via org.springframework.ws:spring-ws-security (>=5.0.0 <=5.0.1)

org.springframework.ws:spring-ws-security MAVEN version =5.0.0, =8.9.0-alpha3, =7.3.0-RC1, =8.0.0-RC5 Source cves: CVE-2026-40994 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320710...

io.camunda.connector:connector-soap (>=8.9.0-alpha3 <=8.10.0-alpha2), net.sf.itcb.module.blank:blank-client (=0.0.1) +2 more potentially affected by CVE-2026-40997 via org.springframework.ws:spring-ws-security (>=5.0.0 <=5.0.1)

org.springframework.ws:spring-ws-security MAVEN version =5.0.0, =8.9.0-alpha3, =7.3.0-RC1, =8.0.0-RC5 Source cves: CVE-2026-40997 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320569...

io.camunda.connector:connector-runtime-bundle (>=8.5.0 <=8.6.0-alpha5), io.camunda.connector:connector-soap (>=8.5.0 <=8.9.0-alpha2) +7 more potentially affected by CVE-2026-40994 via org.springframework.ws:spring-ws-security (>=4.0.0 <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.0.0, =8.5.0, =8.5.0, =8.5.0, =7.0.0-RC1, =5.0.0, =5.0.0, =7.0.0, =7.0.0-RC3, =7.1.6.2 Source cves: CVE-2026-40994 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320710...

com.apollographql.federation:federation-spring-subscription-callback (>=5.0.0 <=6.1.0), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0 <=4.0.2) +45 more potentially affected by CVE-2026-41699 via org.springframework.graphql:spring-graphql (>=2.0.0-M1 <=2.0.3)

org.springframework.graphql:spring-graphql MAVEN version =2.0.0-M1, =5.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter =1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources =1.4.0 -...

com.apollographql.federation:federation-spring-subscription-callback (>=4.2.0 <=5.5.0), com.contentmunch:blog-api (>=2.0.0.RELEASE <=2.0.1.RELEASE) +136 more potentially affected by CVE-2026-41699 via org.springframework.graphql:spring-graphql (>=1.0.0 <=1.4.5)

org.springframework.graphql:spring-graphql MAVEN version =1.0.0, =4.2.0, =2.0.0.RELEASE, =1.0.1, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0RC1 - com.graphql-java-generator:graphql-maven-plugin-samples-CustomTemplates-client =2.0RC1 -...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +21013 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-autoconfigure (>=3.0.0 <=3.5.14)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =3.0.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter =0.1.0 - ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo =0.1.0 -...

br.com.archbase:archbase-annotation-processor (>=1.0.1 <=2.1.18), br.com.archbase:archbase-app-framework (>=1.0.1 <=2.1.18) +97 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=4.0.0 <=4.1.3)

org.springframework.ws:spring-ws-core MAVEN version =4.0.0, =1.0.1, =1.0.1, =1.0.1, =2.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =2.1.0, =2.0.0, =2.0.0, =1.0.6, =1.0.1, =2.1.18 and more Source cves: CVE-2026-40999 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320740...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +11185 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-autoconfigure (>=3.4.0 <=3.5.14)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =3.4.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.28 and more Source cves: CVE-2026-40992 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-17304741...

com.apollographql.federation:federation-spring-subscription-callback (>=4.2.0 <=5.5.0), com.contentmunch:blog-api (>=2.0.0.RELEASE <=2.0.1.RELEASE) +136 more potentially affected by CVE-2026-41700 via org.springframework.graphql:spring-graphql (>=1.0.0 <=1.4.5)

org.springframework.graphql:spring-graphql MAVEN version =1.0.0, =4.2.0, =2.0.0.RELEASE, =1.0.1, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0RC1 - com.graphql-java-generator:graphql-maven-plugin-samples-CustomTemplates-client =2.0RC1 -...

com.apollographql.federation:federation-spring-subscription-callback (>=5.0.0 <=6.1.0), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0 <=4.0.2) +45 more potentially affected by CVE-2026-41700 via org.springframework.graphql:spring-graphql (>=2.0.0-M1 <=2.0.3)

org.springframework.graphql:spring-graphql MAVEN version =2.0.0-M1, =5.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter =1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources =1.4.0 -...

ai.platon.pulsar:pulsar-agentic (>=4.5.0 <=4.6.0), ai.platon.pulsar:pulsar-boot (>=4.5.0 <=4.8.4) +5962 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-autoconfigure (>=4.0.0-M1 <=4.0.6)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =4.0.0-M1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.7.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0 and more Source cves: CVE-2026-41001 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-1730834...

io.camunda.connector:connector-runtime-bundle (>=8.5.0 <=8.6.0-alpha5), io.camunda.connector:connector-soap (>=8.5.0 <=8.9.0-alpha2) +7 more potentially affected by CVE-2026-40997 via org.springframework.ws:spring-ws-security (>=4.0.0 <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.0.0, =8.5.0, =8.5.0, =8.5.0, =7.0.0-RC1, =5.0.0, =5.0.0, =7.0.0, =7.0.0-RC3, =7.1.6.2 Source cves: CVE-2026-40997 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320569...

com.apollographql.federation:federation-spring-subscription-callback (>=5.0.0 <=6.1.0), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0 <=4.0.2) +45 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=2.0.0-M1 <=2.0.3)

org.springframework.graphql:spring-graphql MAVEN version =2.0.0-M1, =5.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter =1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources =1.4.0 -...

io.camunda.connector:connector-runtime-bundle (>=8.5.0 <=8.6.0-alpha5), io.camunda.connector:connector-soap (>=8.5.0 <=8.9.0-alpha2) +7 more potentially affected by CVE-2026-40995 via org.springframework.ws:spring-ws-security (>=4.0.0 <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.0.0, =8.5.0, =8.5.0, =8.5.0, =7.0.0-RC1, =5.0.0, =5.0.0, =7.0.0, =7.0.0-RC3, =7.1.6.2 Source cves: CVE-2026-40995 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320712...

io.awspring.cloud:spring-cloud-aws-starter-integration-s3 (>=4.0.0 <=4.0.2), org.eclipse.dirigible:dirigible-components-engine-ftp (>=12.94.0 <=13.2.0) +18 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=7.0.0-M1 <=7.0.4)

org.springframework.integration:spring-integration-file MAVEN version =7.0.0-M1, =4.0.0, =12.94.0, =13.2.0 - org.springframework.cloud.fn:spring-aws-s3-common =6.0.0 - org.springframework.cloud.fn:spring-file-common =6.0.0 - org.springframework.cloud.fn:spring-file-consumer =6.0.0 -...

cn.openapis:hy.microservice (>=1.21.9 <=1.22.3), com.github.salilvnair:api-processor (=1.0.6) +32 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=5.0.0-M1 <=5.0.1)

org.springframework.ws:spring-ws-core MAVEN version =5.0.0-M1, =1.21.9, =2.0.8, =0.1, =8.9.0-alpha3, =5.0.0-beta.1, =0.0.1, =1.4.66, =4.19.0, =4.19.0, =7.3.0-RC1, =8.0.0-RC5 - org.citrusframework.mvn:citrus-maven-plugin =5.0.0-M1 and more Source cves: CVE-2026-40999 Source advisory:...

io.camunda.connector:connector-soap (>=8.9.0-alpha3 <=8.10.0-alpha2), net.sf.itcb.module.blank:blank-client (=0.0.1) +2 more potentially affected by CVE-2026-40996 via org.springframework.ws:spring-ws-security (>=5.0.0 <=5.0.1)

org.springframework.ws:spring-ws-security MAVEN version =5.0.0, =8.9.0-alpha3, =7.3.0-RC1, =8.0.0-RC5 Source cves: CVE-2026-40996 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320523...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +849 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-autoconfigure (>=4.1.0-M1 <=4.1.0-RC1)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =4.1.0-M1, =0.1.0, =0.1.0, =0.1.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.2, =6.0.0-beta.1, =6.0.0-beta.2, =6.0.0-beta.2, =6.0.0-beta.2, =6.0.0-beta.2, =6.0.0-beta.4 -...

io.camunda.connector:connector-soap (>=8.9.0-alpha3 <=8.10.0-alpha2), net.sf.itcb.module.blank:blank-client (=0.0.1) +2 more potentially affected by CVE-2026-41000 via org.springframework.ws:spring-ws-security (>=5.0.0 <=5.0.1)

org.springframework.ws:spring-ws-security MAVEN version =5.0.0, =8.9.0-alpha3, =7.3.0-RC1, =8.0.0-RC5 Source cves: CVE-2026-41000 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320735...

io.camunda.connector:connector-runtime-bundle (>=8.5.0 <=8.6.0-alpha5), io.camunda.connector:connector-soap (>=8.5.0 <=8.9.0-alpha2) +7 more potentially affected by CVE-2026-41000 via org.springframework.ws:spring-ws-security (>=4.0.0 <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.0.0, =8.5.0, =8.5.0, =8.5.0, =7.0.0-RC1, =5.0.0, =5.0.0, =7.0.0, =7.0.0-RC3, =7.1.6.2 Source cves: CVE-2026-41000 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320735...

cn.openapis:hy.microservice (>=1.21.9 <=1.22.3), com.github.salilvnair:api-processor (=1.0.6) +39 more potentially affected by CVE-2026-40998 via org.springframework.ws:spring-xml (>=5.0.0-M1 <=5.0.1)

org.springframework.ws:spring-xml MAVEN version =5.0.0-M1, =1.21.9, =2.0.8, =0.1, =8.9.0-alpha3, =5.0.0-beta.1, =0.0.1, =1.4.66, =4.19.0, =4.19.0, =7.3.0-RC1, =8.0.0-RC5 - org.citrusframework.mvn:citrus-maven-plugin =5.0.0-M1 and more Source cves: CVE-2026-40998 Source advisory:...

org.springframework.integration:spring-integration-ftp (>=7.1.0-M1 <=7.1.0-RC1), org.springframework.integration:spring-integration-sftp (>=7.1.0-M1 <=7.1.0-RC1) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=7.1.0-M1 <=7.1.0-RC1)

org.springframework.integration:spring-integration-file MAVEN version =7.1.0-M1, =7.1.0-M1, =7.1.0-M1, =7.1.0-M1, =7.1.0-M1, =7.1.0-RC1 Source cves: CVE-2026-40987 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKINTEGRATION-17308053...

ai.platon.pulsar:pulsar-agentic (>=4.5.0 <=4.6.0), ai.platon.pulsar:pulsar-boot (>=4.5.0 <=4.8.4) +5962 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-autoconfigure (>=4.0.0-M1 <=4.0.6)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =4.0.0-M1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.7.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0 and more Source cves: CVE-2026-40992 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-1730474...

io.camunda.connector:connector-runtime-bundle (>=8.5.0 <=8.6.0-alpha5), io.camunda.connector:connector-soap (>=8.5.0 <=8.9.0-alpha2) +7 more potentially affected by CVE-2026-40996 via org.springframework.ws:spring-ws-security (>=4.0.0 <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.0.0, =8.5.0, =8.5.0, =8.5.0, =7.0.0-RC1, =5.0.0, =5.0.0, =7.0.0, =7.0.0-RC3, =7.1.6.2 Source cves: CVE-2026-40996 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320523...

cn.herodotus.engine:message-sdk-mqtt (>=3.1.5.6 <=3.5.5.2), cn.herodotus.engine:message-spring-boot-starter (>=3.1.5.6 <=3.5.5.2) +70 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=6.0.0 <=6.5.8)

org.springframework.integration:spring-integration-file MAVEN version =6.0.0, =3.1.5.6, =3.1.5.6, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =1.0.0, =1.5.0, =1.4.0, =1.0, =1.0.0, =2.0.0-milestone-03, =2.0.0-milestone-02, =2.0.0-milestone-02, =2.0.0-milestone-11 and more Source cves: CVE-2026-40987ht...

com.apollographql.federation:federation-spring-subscription-callback (>=4.2.0 <=5.5.0), com.contentmunch:blog-api (>=2.0.0.RELEASE <=2.0.1.RELEASE) +136 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=1.0.0 <=1.4.5)

org.springframework.graphql:spring-graphql MAVEN version =1.0.0, =4.2.0, =2.0.0.RELEASE, =1.0.1, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0, =2.0RC1 - com.graphql-java-generator:graphql-maven-plugin-samples-CustomTemplates-client =2.0RC1 -...

br.com.archbase:archbase-annotation-processor (>=1.0.1 <=2.1.18), br.com.archbase:archbase-app-framework (>=1.0.1 <=2.1.18) +107 more potentially affected by CVE-2026-40998 via org.springframework.ws:spring-xml (>=4.0.0 <=4.1.3)

org.springframework.ws:spring-xml MAVEN version =4.0.0, =1.0.1, =1.0.1, =1.0.1, =2.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =2.1.0, =2.0.0, =2.0.0, =1.0.6, =1.0.1, =2.1.18 and more Source cves: CVE-2026-40998 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320711...

io.camunda.connector:connector-soap (>=8.9.0-alpha3 <=8.10.0-alpha2), net.sf.itcb.module.blank:blank-client (=0.0.1) +2 more potentially affected by CVE-2026-40995 via org.springframework.ws:spring-ws-security (>=5.0.0 <=5.0.1)

org.springframework.ws:spring-ws-security MAVEN version =5.0.0, =8.9.0-alpha3, =7.3.0-RC1, =8.0.0-RC5 Source cves: CVE-2026-40995 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320712...

alvin-cli (>=0.0.1a0 <=1.3.0rc1), apache-airflow-providers-fastetl (>=0.0.36 <=0.0.39) +46 more potentially affected by CVE-2026-46374 via sqlfluff (>=0.11.2 <=4.1.0)

sqlfluff PYPI version =0.11.2, =0.0.1a0, =0.0.36, =0.4.6, =1.1.5, =0.1.2, =0.1.2, =0.2.0, =0.0.1, =0.1.0, =0.4.0, =0.19.1a7, =1.3.3, =0.9.3, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

alvin-cli (>=0.0.1a0 <=1.3.0rc1), apache-airflow-providers-fastetl (>=0.0.36 <=0.0.39) +45 more potentially affected by CVE-2026-46373 via sqlfluff (>=0.11.2 <=4.0.4a1)

sqlfluff PYPI version =0.11.2, =0.0.1a0, =0.0.36, =0.4.6, =1.1.5, =0.1.2, =0.1.2, =0.2.0, =0.0.1, =0.1.0, =0.4.0, =0.19.1a7, =1.3.3, =0.9.3, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +8036 more potentially affected by CVE-2026-34180 via cryptography (>=0.6.1 <=48.0.0)

cryptography PYPI version =0.6.1, =0.0.2, =0.5.3, =2.3.0, =0.1.0, =0.1.0, =0.5.0rc5, =0.9.2, =0.4.24, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =0.1.9 and more Source cves: CVE-2026-34180 Source advisory: SNYK:PYTHON-CRYPTOGRAPHY-17344551...

fhirproxy (=90.0.0) potentially affected by unknown CVE via fhirproxy-utils (=1.0.8)

fhirproxy-utils NPM version =1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on fhirproxy-utils and may be impacted: - fhirproxy =90.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-5461...

buzzword (>=1.2.1 <=1.2.3), dash-tokamak (=1.6.0) +22 more potentially affected by CVE-2024-21485 via dash-core-components (>=0.22.1 <=1.9.1)

dash-core-components PYPI version =0.22.1, =1.2.1, =0.1.0, =2.0.0b0, =0.1.0, =0.1.0, =0.2.0, =1.0.0, =0.0.2, =0.1.13 and more Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

buzzword (>=1.2.1 <=1.2.3), dash-tokamak (=1.6.0) +20 more potentially affected by CVE-2024-21485 via dash-html-components (>=0.10.0 <=1.1.4)

dash-html-components PYPI version =0.10.0, =1.2.1, =0.1.0, =2.0.0b0, =0.1.0, =1.0.0, =0.0.2, =1.1.0, =1.0.0, =1.0.2.dev1 and more Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-220...

@sql-access/nodesql (>=1.0.3 <=1.0.7) potentially affected by unknown CVE via @sqlite-node/createsql (=1.0.3)

@sqlite-node/createsql NPM version =1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on @sqlite-node/createsql and may be impacted: - @sql-access/nodesql =1.0.3, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2026-5396...

@node-cloud/create (>=1.0.0 <=1.0.3) potentially affected by unknown CVE via @sql-trigger/nodesql (=1.0.1)

@sql-trigger/nodesql NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @sql-trigger/nodesql and may be impacted: - @node-cloud/create =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-5395...

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0726react (=0.1.1) +28725 more potentially affected by CVE-2026-9277 via shell-quote (>=1.3.3 <=1.8.3)

shell-quote NPM version =1.3.3, =1.0.1, =1.1.0 - 0726react =0.1.1 - 0x0.icu.anima =0.1.0 - 0xcorde-pac =1.0.0 - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory =1.0.0 - 0xgank-tea-central-compound =1.0.0 -...

awx-mcp-server (>=1.1.3 <=1.2.0), broker (>=0.0.0 <=0.6.12) +1 more potentially affected by CVE-2026-52902 via awxkit (>=23.9.0 <=24.6.1)

awxkit PYPI version =23.9.0, =1.1.3, =0.0.0, =1.5.0, =2.0.1 Source cves: CVE-2026-52902 Source advisory: SNYK:PYTHON-AWXKIT-17339772...

io.github.shuigedeng:taotao-boot-demo (=2025.12), io.github.shuigedeng:taotao-boot-starter-mq-pulsar (>=2025.12 <=2026.06) +25 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (>=2.0.0-M1 <=2.0.5)

org.springframework.pulsar:spring-pulsar MAVEN version =2.0.0-M1, =2025.12, =2025.12, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.4.0, =1.0.0, =1.0.0, =1.0.2, =1.0.2, =1.4.5 and more Source cves: CVE-2026-41732 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKPULSAR-17306370...

be.appify.prefab:prefab-annotation-processor (>=0.7.0 <=0.10.2), be.appify.prefab:prefab-mongodb (>=0.5.0 <=0.10.2) +117 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (>=5.0.0-M4 <=5.0.5)

org.springframework.data:spring-data-mongodb MAVEN version =5.0.0-M4, =0.7.0, =0.5.0, =0.5.0, =4.0.0.0-M2, =4.0.0.0-M2, =3.0.0, =4.0.0, =0.0.1, =0.0.2, =0.0.2, =0.0.2, =0.1.0, =1.2.0, =1.2.2 and more Source cves: CVE-2026-41696 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKDATA-17326247...

io.github.shuigedeng:taotao-boot-demo (>=2025.10 <=2025.11), io.github.shuigedeng:taotao-boot-starter-mq-pulsar (>=2025.10 <=2025.11) +8 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (>=1.0.0 <=1.2.17)

org.springframework.pulsar:spring-pulsar MAVEN version =1.0.0, =2025.10, =2025.10, =2025.10, =2023.12, =2024.01, =3.2.0, =3.2.0, =4.1.0, =1.0.0, =1.1.0, =1.2.17 Source cves: CVE-2026-41732 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKPULSAR-17306370...

be.personify.iam:personify-api (>=1.5.0.RELEASE <=1.5.7.RELEASE), be.personify.iam:personify-frontend (>=1.5.1.RELEASE <=1.5.7.RELEASE) +122 more potentially affected by CVE-2026-41728 via org.springframework.data:spring-data-rest-webmvc (>=4.0.0 <=4.5.11)

org.springframework.data:spring-data-rest-webmvc MAVEN version =4.0.0, =1.5.0.RELEASE, =1.5.1.RELEASE, =1.5.0.RELEASE, =2.1.0.RELEASE, =1.0.1, =1.0.1, =1.0.1, =2.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =2.1.0, =2.1.18 and more Source cves: CVE-2026-41728 Source advisory:...

ch.admin.bit.jeap:jeap-oauth-mock-server (>=4.0.0-alpha-springboot4 <=5.1.0), ch.admin.bit.jeap:jeap-oauth-mock-server-instance (>=4.0.0-alpha-springboot4 <=5.1.0) +51 more potentially affected by CVE-2026-41008 via org.springframework.security:spring-security-oauth2-authorization-server (>=2.0.0-M1 <=7.0.5)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version =2.0.0-M1, =4.0.0-alpha-springboot4, =4.0.0-alpha-springboot4, =3.6.0, =3.5.0, =5.0.0, =4.0.0.0-M2, =4.0.0.0-M2, =4.0.0.0-M2, =4.0.0.0-M2, =4.0.0.0-M2, =4.0.0.0-M2, =2.83.0, =2.84.0 and more Source cves:...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0-20260516144515 <=1.0.0.ee-20260528111216), com.eurodyn.qlack.fuse:qlack-fuse-aaa (>=3.9.8 <=3.9.9) +109 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=6.2.0 <=6.5.10)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.2.0, =1.0.0-20260516144515, =3.9.8, =1.6.0, =11.9.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =dce37d6e6c310e0d86c4f0d73f8846b8ef2f4432, =12.2, =15.1.1, =12.2, =12.2, =15.1.1, =15.1.2 and more Source cves:...

ch.admin.bit.jeap:jeap-oauth-mock-server (>=3.1.0 <=3.49.0), ch.admin.bit.jeap:jeap-oauth-mock-server-instance (>=3.1.0 <=3.49.0) +95 more potentially affected by CVE-2026-41008 via org.springframework.security:spring-security-oauth2-authorization-server (>=1.0.0 <=1.5.7)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version =1.0.0, =3.1.0, =3.1.0, =1.0.0, =1.0.1, =1.0.0, =3.0.0, =3.5.5.3, =3.5.5.3, =3.1.5.2, =3.5.5.3, =3.5.5.3, =3.5.5.3, =3.0.1.0, =3.5.5.2 and more Source cves: CVE-2026-41008 Source advisory: SNY...

ai.langsa:ccaas-starter (>=cloud-0.1 <=cloud-0.3), ai.langsa:pom-ccaas-langsa (=0.1) +3436 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-config (>=6.0.0 <=6.5.10)

org.springframework.security:spring-security-config MAVEN version =6.0.0, =cloud-0.1, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =0.5.0, =0.0.1, =0.0.2 and...

com.erudika:para-server (>=1.52.0 <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1 <=2.0.4) +3 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0-M1 <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0-M1, =1.52.0, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2026-41694 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKSECURITY-17307750...

ai.langsa:ccaas-starter (>=cloud-0.1 <=cloud-0.3), ai.langsa:pom-ccaas-langsa (=0.1) +4409 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (>=6.0.0 <=6.5.10)

org.springframework.security:spring-security-web MAVEN version =6.0.0, =cloud-0.1, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =1.0.0-20260516144515, =0.5.2, =0.5.0, =0.5.1 -...

br.com.archbase:archbase-annotation-processor (>=1.0.1 <=2.1.18), br.com.archbase:archbase-app-framework (>=1.0.1 <=2.1.18) +868 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=3.0.0 <=3.5.11)

org.springframework.data:spring-data-relational MAVEN version =3.0.0, =1.0.1, =1.0.1, =1.0.1, =2.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =2.1.0, =2.0.0, =2.0.0, =1.0.6, =1.0.1, =2.1.18 and more Source cves: CVE-2026-41697 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKDATA-17307374...