abdelrahman-obfuscate (>=1.0.0 <=1.0.1), abdo (=2.0.0) +283 more potentially affected by CVE-2026-48804 via python-socketio (>=2.0.0 <=5.16.1)

python-socketio PYPI version =2.0.0, =1.0.0, =2.0.0, =2.1.0, =0.1.1, =2.2.12, =2.2.12, =0.110.0, =0.53.0, =0.1.2, =0.1.1, =0.1.2 and more Source cves: CVE-2026-48804 Source advisory: OSV:GHSA-5W7Q-77MV-V69F...

appyter (>=0.16.0 <=0.20.2), aprsd (>=3.4.2 <=3.4.4) +27 more potentially affected by CVE-2026-48802 via python-engineio (>=4.0.0 <=4.13.1)

python-engineio PYPI version =4.0.0, =0.16.0, =3.4.2, =0.50.1, =1.0.1, =0.4.4, =0.11.0, =0.0.1, =1.0.9, =6.0.44, =0.0.6, =0.2.2, =0.1.0, =0.1.0, =0.1.4 and more Source cves: CVE-2026-48802 Source advisory: SNYK:PYTHON-PYTHONENGINEIO-17660884...

abdelrahman-obfuscate (>=1.0.0 <=1.0.1), abdo (=2.0.0) +181 more potentially affected by CVE-2026-48802 via python-engineio (>=3.10.0 <=4.13.1)

python-engineio PYPI version =3.10.0, =1.0.0, =2.0.0, =0.1.1, =0.1.1, =4.0.6, =0.16.0, =3.4.2, =0.9.0, =0.0.3, =4.0.2, =4.0.0.8, =0.0.1, =0.1.0b1 and more Source cves: CVE-2026-48802 Source advisory: OSV:GHSA-CGWC-PV48-FHJ5...

abdelrahman-obfuscate (>=1.0.0 <=1.0.1), abdo (=2.0.0) +181 more potentially affected by CVE-2026-48809 via python-engineio (>=3.10.0 <=4.13.1)

python-engineio PYPI version =3.10.0, =1.0.0, =2.0.0, =0.1.1, =0.1.1, =4.0.6, =0.16.0, =3.4.2, =0.9.0, =0.0.3, =4.0.2, =4.0.0.8, =0.0.1, =0.1.0b1 and more Source cves: CVE-2026-48809 Source advisory: OSV:GHSA-M9GH-VJ53-GVH9...

appyter (>=0.16.0 <=0.20.2), aprsd (>=3.4.2 <=3.4.4) +27 more potentially affected by CVE-2026-48809 via python-engineio (>=4.0.0 <=4.13.1)

python-engineio PYPI version =4.0.0, =0.16.0, =3.4.2, =0.50.1, =1.0.1, =0.4.4, =0.11.0, =0.0.1, =1.0.9, =6.0.44, =0.0.6, =0.2.2, =0.1.0, =0.1.0, =0.1.4 and more Source cves: CVE-2026-48809 Source advisory: SNYK:PYTHON-PYTHONENGINEIO-17660885...

@nx/cypress (>=23.0.0-beta.0 <=23.0.0-beta.19), @nx/detox (>=23.0.0-beta.0 <=23.0.0-beta.19) +24 more potentially affected by CVE-2026-54753 via nx (>=23.0.0-beta.0 <=23.0.0-beta.19)

nx NPM version =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.19 and more...

@10xsai/cloudflare-router-nx-plugin (=1.0.0), @abelfubu/schematics (=0.1.1) +629 more potentially affected by CVE-2026-54753 via nx (>=17.0.4 <=22.7.1)

nx NPM version =17.0.4, =0.1.5, =0.0.3, =0.0.47, =0.0.1, =17.0.2-alpha.2, =17.0.2-alpha.2, =8.1.1, =0.0.1, =0.0.1, =0.0.15 and more Source cves: CVE-2026-54753 Source advisory: SNYK:JS-NX-17660796...

@arnica-io/dependency-scan (>=1.0.30 <=1.0.31), @herodevs/cli (>=1.0.0-beta.2 <=2.0.0-beta.4) +2 more potentially affected by unknown CVE via @cyclonedx/cdxgen (>=10.11.0 <=11.3.2)

@cyclonedx/cdxgen NPM version =10.11.0, =1.0.30, =1.0.0-beta.2, =0.10.0, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:GHSA-5VWR-QCHF-Q4PF...

clai (>=2.0.0b1 <=2.0.0b2), pydantic-ai (>=2.0.0b1 <=2.0.0b2) +2 more potentially affected by CVE-2026-48782 via pydantic-ai-slim (>=2.0.0b1 <=2.0.0b2)

pydantic-ai-slim PYPI version =2.0.0b1, =2.0.0b1, =2.0.0b1, =2.0.0b1, =2.0.0b1, =2.0.0b2 Source cves: CVE-2026-48782 Source advisory: OSV:GHSA-CG7W-RG45-PC59...

clai (>=2.0.0b1 <=2.0.0b2) potentially affected by CVE-2026-48782 via pydantic-ai (>=2.0.0b1 <=2.0.0b2)

pydantic-ai PYPI version =2.0.0b1, =2.0.0b1, =2.0.0b2 Source cves: CVE-2026-48782 Source advisory: OSV:GHSA-CG7W-RG45-PC59...

@01.software/cli (>=0.1.1 <=0.10.3), @01.software/sdk (>=0.0.1-251008.90016 <=0.29.0) +134 more potentially affected by CVE-2026-11779 via payload (>=0.12.3 <=4.0.0-internal.5f0cd13)

payload NPM version =0.12.3, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.1, =1.0.1, =1.0.1, =0.1.0, =0.1.1 - @doubledigit/habit-tracker =0.1.1 and more Source cves: CVE-2026-11779 Source advisory: SNYK:JS-PAYLOAD-17660977...

0.app1 (=1.0.52), 0.edsql (>=1.0.49 <=1.0.50) +29369 more potentially affected by CVE-2026-56876 via extract-zip (>=1.0.3 <=2.0.1)

extract-zip NPM version =1.0.3, =1.0.49, =1.0.49, =1.0.49, =1.0.51, =0.0.1, =0.8.0 - 10bis-shufersal-automation =1.0.0 - 123-movies =1.0.0 - 16promax-monitor =1.0.0 - 192.168.0.172 =4.6.1 and more Source cves: CVE-2026-56876 Source advisory: SNYK:JS-EXTRACTZIP-17660777...

acryl-datahub-airflow-plugin (>=0.8.35.6 <=1.7.0.1rc1), acryl-datahub-airflow-plugin-hcc-patched (>=1.4.0.3.post1 <=1.4.0.3.post2) +464 more potentially affected by CVE-2026-49486 via apache-airflow (>=3.0.0 <=3.2.2rc3)

apache-airflow PYPI version =3.0.0, =0.8.35.6, =1.4.0.3.post1, =1.0.0, =0.0.9.2, =0.1.0rc0, =0.1.0, =0.1.2, =1.0.1, =0.1.0, =1.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2026-49486 Source advisory: SNYK:PYTHON-APACHEAIRFLOW-17660779...

acceldata-o2a (=1.0.0), acryl-datahub-airflow-plugin (>=0.9.5.1rc1 <=1.3.1.post1) +125 more potentially affected by CVE-2026-49486 via apache-airflow-providers-ftp (>=3.10.1 <=3.15.0)

apache-airflow-providers-ftp PYPI version =3.10.1, =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.2.1, =0.4.0, =0.1.0a1, =1.1.0, =0.1.1, =0.1.1, =0.10.2, =0.11.0 and more Source cves: CVE-2026-49486 Source advisory: SNYK:PYTHON-APACHEAIRFLOWPROVIDERSFTP-17660780...

acceldata-o2a (=1.0.0), acryl-datahub-airflow-plugin (>=0.9.5.1rc1 <=1.3.1.post1) +126 more potentially affected by CVE-2026-49486 via apache-airflow-providers-ftp (>=1.1.0 <=3.15.0)

apache-airflow-providers-ftp PYPI version =1.1.0, =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0, =0.2.1, =0.4.0, =0.1.0a1, =1.1.0, =0.1.1, =0.1.1, =1.10.6 - airflow-cyberark-secrets-backend =0.1.0 - airflow-dagfactory =0.19.1 and more Source cves: CVE-2026-49486 Source advisory:...

hbsig (>=0.0.1 <=0.0.3), wao (=0.33.0) +1 more potentially affected by unknown CVE via wao (>=0.23.6 <=0.35.7)

wao NPM version =0.23.6, =0.0.1, =0.0.1, =0.0.25 Source cves: unknown CVE Source advisory: SNYK:JS-WAO-17528757...

vxui-react (>=1.3.1 <=1.3.11) potentially affected by unknown CVE via vxui-react (=1.3.12)

vxui-react NPM version =1.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on vxui-react and may be impacted: - vxui-react =1.3.1, =1.3.11 Source cves: unknown CVE Source advisory: SNYK:JS-VXUIREACT-17528745...

tailwind-animates (=1.0.1) potentially affected by unknown CVE via animatecss-postcss-plugin (=1.0.1)

animatecss-postcss-plugin NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on animatecss-postcss-plugin and may be impacted: - tailwind-animates =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6495...

next-bignumber.js (=1.0.0), next-bn.js (>=1.0.0 <=1.0.1) potentially affected by unknown CVE via random-string-64 (=1.0.1)

random-string-64 NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on random-string-64 and may be impacted: - next-bignumber.js =1.0.0 - next-bn.js =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6484...

a-mailx (=0.1.0), a2a-client-handler (=0.1.0) +329 more potentially affected by CVE-2026-48776 via langgraph-sdk (>=0.1.33 <=0.3.14)

langgraph-sdk PYPI version =0.1.33, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-48776 Source advisory: OSV:GHSA-W39P-VH2G-G8G5...

a-mailx (=0.1.0), a2a-client-handler (=0.1.0) +380 more potentially affected by CVE-2026-48775 via langgraph-checkpoint (>=1.0.12 <=4.1.0)

langgraph-checkpoint PYPI version =1.0.12, =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.0.1, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-48775 Source advisory: OSV:GHSA-FJQC-HQ36-QH5P...

any2htpy (=0.2.1), article-extractor (=0.5.8) +1 more potentially affected by unknown CVE via justhtml (>=1.13.0 <=1.1.0)

justhtml PYPI version =1.13.0, =0.1.0, =0.1.5 Source cves: unknown CVE Source advisory: OSV:GHSA-JF6W-2MVX-633J...

@adaptivestone/framework (>=2.7.3 <=3.0.22), @agsiri/common-utils (>=1.0.0 <=1.2.12) +311 more potentially affected by CVE-2026-48713 via i18next-fs-backend (>=1.0.2 <=2.6.5)

i18next-fs-backend NPM version =1.0.2, =2.7.3, =1.0.0, =0.2.0, =0.3.0, =3.7.0, =0.2.11, =1.1.0, =1.1.1, =1.0.0, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.7.1-rc.5 and more Source cves: CVE-2026-48713 Source advisory: OSV:GHSA-2933-Q333-QG83...

@ainsleydev/payload-helper (>=0.0.1 <=0.0.2), @bsct/payload (=1.0.0) +93 more potentially affected by CVE-2026-48714 via i18next-http-middleware (>=1.0.4 <=3.9.6)

i18next-http-middleware NPM version =1.0.4, =0.0.1, =1.0.1, =0.0.1, =0.0.1, =0.0.1, =8.0.0, =3.0.0, =1.0.0, =1.0.6, =1.0.0, =0.0.1, =0.0.229 and more Source cves: CVE-2026-48714 Source advisory: OSV:GHSA-F49M-VF83-692W...

AS5600-Driver (>=0.1.0 <=0.1.1), AskAI (=0.1.0) +22676 more potentially affected by unknown CVE via anyhow (=1.0.102)

anyhow CARGO version =1.0.102 is affected by a known vulnerability. The following packages have a transitive dependency on anyhow and may be impacted: - AS5600-Driver =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =1.0.0-1, =0.19.0, =0.19.5 - NT-anchor-spl-testnet =0.19.2 and more Source cves: unknown C...

org.webjars.npm:github-com-wavesoft-local-echo (=0.2.0), org.webjars.npm:launch-editor (=2.2.1) +2 more potentially affected by CVE-2026-13311 via org.webjars.npm:shell-quote (=1.8.3)

org.webjars.npm:shell-quote MAVEN version =1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:shell-quote and may be impacted: - org.webjars.npm:github-com-wavesoft-local-echo =0.2.0 - org.webjars.npm:launch-editor =2.2.1 -...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=37.v0d3157c4a_ef8 <=57.v0756db_b_f6926), com.coravy.hudson.plugins.github:github (>=1.41.0 <=1.46.0.1) +46 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (>=6.1.0 <=6.6.0)

org.jenkins-ci.plugins:git-client MAVEN version =6.1.0, =37.v0d3157c4aef8, =1.41.0, =61.vf6d8f6f5ed02, =1.1.0.825.v30618768da42, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =1.27.17, =54.v51b0411c47b9, =1.0.0, =1.0.1 - io.jenkins.plugins:forgeai-pipeline-intelligence...

net.aequologica.neo:dagr-vebchar (=0.5.2-alpha), net.aequologica.neo:dagr-web (=0.5.2-alpha) +108 more potentially affected by CVE-2026-11998 via org.webjars.npm:angular (>=1.2.32 <=1.8.3)

org.webjars.npm:angular MAVEN version =1.2.32, =0.5.2, =0.5.2, =5.2.0-RC1, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =0.4.0, =1.1.3 and more Source cves: CVE-2026-11998 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17458841...

10.30.npm-learning (>=1.0.0 <=1.1.0), 2017_node (=1.0.0) +3305 more potentially affected by CVE-2026-11998 via angular (>=1.2.0 <=1.8.3)

angular NPM version =1.2.0, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2026-11998 Source advisory: SNYK:JS-ANGULAR-17458840...

128autograder-ipython (=1.0.0rc2), 3-04-2025-ttm (=0.1.0) +6620 more potentially affected by CVE-2026-49851 via mistune (>=3.0.0 <=3.2.1)

mistune PYPI version =3.0.0, =0.5.0a0, =0.1.0, =1.0.4, =1.0.3, =0.1.8, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2026-49851 Source advisory: SNYK:PYTHON-MISTUNE-17458804...

haiku-rag (>=0.19.2 <=0.33.0), iatoolkit (>=1.40.0 <=1.42.0) +19 more potentially affected by CVE-2026-44020 via docling (>=2.17.0 <=2.73.1)

docling PYPI version =2.17.0, =0.19.2, =1.40.0, =0.1.0, =0.2.1, =0.6.1, =0.4.0, =1.0.0, =0.1.29, =0.3.1, =0.10.0, =0.2.1, =0.2.6 and more Source cves: CVE-2026-44020 Source advisory: OSV:PYSEC-2026-240...

org.openidentityplatform.openam:openam-fedlet-unconfigured-war (>=14.5.2 <=15.2.2), org.openidentityplatform.openig:openig-doc (>=5.0.9 <=5.4.0) +1 more potentially affected by CVE-2026-45052 via org.openidentityplatform.openam:openam-federation-library (>=14.5.2 <=15.2.2)

org.openidentityplatform.openam:openam-federation-library MAVEN version =14.5.2, =14.5.2, =5.0.9, =5.0.9, =5.4.0 Source cves: CVE-2026-45052 Source advisory: OSV:GHSA-P462-XXWX-PQF4...

elemeno-ai-sdk (>=0.0.77 <=0.6.11), elemeno-mlops-cli (>=0.0.1 <=0.0.4) +22 more potentially affected by CVE-2026-56121 via feast (>=0.14.1 <=0.49.0)

feast PYPI version =0.14.1, =0.0.77, =0.0.1, =0.1.0, =0.3.0, =0.0.2, =1.0.0, =0.1.0, =0.1.33, =0.1.0, =0.6.19 and more Source cves: CVE-2026-56121 Source advisory: SNYK:PYTHON-FEAST-17458831...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-56262 +3 more via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-56262, CVE-2026-56263, CVE-2026-56265, CVE-2026-56266 Source advisory: OSV:PYSEC-2026-229...

auto-wasi (=0.1.0), deterministic-wasi-ctx (>=0.1.1 <=0.1.14) +53 more potentially affected by unknown CVE via wasmtime-wasi (>=0.10.0 <=1.0.2)

wasmtime-wasi CARGO version =0.10.0, =0.1.1, =0.5.3-0, =0.4.0, =0.4.0, =0.5.0, =0.0.1-alpha, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.0, =0.9.0, =0.7.0, =0.9.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0188...

html-to-gutenberg (>=4.2.1 <=4.2.11) potentially affected by unknown CVE via fetch-page-assets (=1.2.9)

fetch-page-assets NPM version =1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on fetch-page-assets and may be impacted: - html-to-gutenberg =4.2.1, =4.2.11 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6358...

html-to-gutenberg (>=4.2.1 <=4.2.11) potentially affected by unknown CVE via fetch-page-assets (=1.2.9)

fetch-page-assets NPM version =1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on fetch-page-assets and may be impacted: - html-to-gutenberg =4.2.1, =4.2.11 Source cves: unknown CVE Source advisory: SNYK:JS-FETCHPAGEASSETS-17434800...

postcss-minify-selector (>=0.1.2 <=0.1.3) potentially affected by unknown CVE via aes-decode-runner-pro (=1.0.11)

aes-decode-runner-pro NPM version =1.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on aes-decode-runner-pro and may be impacted: - postcss-minify-selector =0.1.2, =0.1.3 Source cves: unknown CVE Source advisory: SNYK:JS-AESDECODERUNNERPRO-17434793...

betterlifepsi (>=0.6.7.post3 <=0.6.8), cg (>=1.0.0 <=13.1.0) +24 more potentially affected by CVE-2023-49438 via flask-security (>=1.7.5 <=5.7.1)

flask-security PYPI version =1.7.5, =0.6.7.post3, =1.0.0, =0.0.1, =2.5.0, =1.0.0a1, =1.0.0a2, =1.0.0a23, =0.21.0, =4.625.0, =4.706.0 - novasystem =0.1.0 and more Source cves: CVE-2023-49438 Source advisory: OSV:GHSA-W2J7-F3C6-G8CW...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +6910 more potentially affected by CVE-2026-54517 via tools.jackson.core:jackson-databind (>=3.0.0 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.2, =0.1.0, =0.1.0, =0.3.0 and more Source cves:...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +6931 more potentially affected by CVE-2026-54517 via tools.jackson.core:jackson-databind (>=3.0.0-rc1 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.0.0-rc1, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.2, =0.1.0, =0.1.0, =0.3.0 and more Source cves...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +6931 more potentially affected by CVE-2026-54516 via tools.jackson.core:jackson-databind (>=3.0.0-rc1 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.0.0-rc1, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.2, =0.1.0, =0.1.0, =0.3.0 and more Source cves...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +6910 more potentially affected by CVE-2026-54516 via tools.jackson.core:jackson-databind (>=3.0.0 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.2, =0.1.0, =0.1.0, =0.3.0 and more Source cves:...

aero.champ:cargojson (=1.0), ai.active:webhook-sdk (>=1.0.0 <=1.0.4) +39696 more potentially affected by CVE-2026-54515 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0 <=2.9.9.3)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =1.0.0, =4.4.0.0, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =local, =local, =0.0.6, =0.0.1, =0.0.12, =0.0.12, =0.1.8, =0.1.12 and more Source cves: CVE-2026-54515 Source advisory: OSV:GHSA-5JMJ-H7XM-6Q6V...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.pipestream.proto-toolchain:ai.pipestream.proto-toolchain.gradle.plugin (>=0.7.18 <=0.7.21) +4793 more potentially affected by CVE-2026-54515 via tools.jackson.core:jackson-databind (>=3.1.0 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.1.0, =1.0.6, =0.7.18, =0.7.18, =4.7.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0 - ai.yda-framework:filesystem-retriever-starter =0.1.0 - ai.yda-framework:openai-chat-generator =0.1.0 -...

aero.champ:cargojson (=1.0), ai.active:webhook-sdk (>=1.0.0 <=1.0.4) +39605 more potentially affected by CVE-2026-54515 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0.rc1 <=2.9.9.3)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0.rc1, =1.0.0, =4.4.0.0, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =local, =local, =0.0.6, =0.0.1, =0.0.12, =0.0.12, =0.1.8, =0.1.12 and more Source cves: CVE-2026-54515 Source advisory:...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +6931 more potentially affected by CVE-2026-54515 via tools.jackson.core:jackson-databind (>=3.0.0-rc1 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.0.0-rc1, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.2, =0.1.0, =0.1.0, =0.3.0 and more Source cves...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +6931 more potentially affected by CVE-2026-54514 via tools.jackson.core:jackson-databind (>=3.0.0-rc1 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.0.0-rc1, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.2, =0.1.0, =0.1.0, =0.3.0 and more Source cves...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +6910 more potentially affected by CVE-2026-54514 via tools.jackson.core:jackson-databind (>=3.0.0 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.2, =0.1.0, =0.1.0, =0.3.0 and more Source cves:...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +6931 more potentially affected by CVE-2026-54513 via tools.jackson.core:jackson-databind (>=3.0.0-rc1 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.0.0-rc1, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.2, =0.1.0, =0.1.0, =0.3.0 and more Source cves...