See the full list of npm packages compromised in the "Antv Supply Chain Compromise - May 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Arbitrary Code InjectionCVE-2026-41044
Affects org.apache.activemq:activemq-broker | Versions [,5.19.6)[6.0.0,6.2.5)
Has fix
MavenPublished 30 Apr 2026
- H
Arbitrary Code InjectionCVE-2026-40466
Affects org.apache.activemq:activemq-broker | Versions [,5.19.6)[6.0.0,6.2.5)
Has fix
MavenPublished 30 Apr 2026
- M
Cross-site Scripting (XSS)CVE-2026-41043
Affects org.apache.activemq:activemq-web | Versions [,5.19.6)[6.0.0,6.2.5)
Has fix
MavenPublished 30 Apr 2026
- M
Improper Validation of Certificate with Host MismatchCVE-2026-41603
Affects org.apache.thrift:libthrift | Versions [0,]
Has fix
MavenPublished 30 Apr 2026
- C
Deserialization of Untrusted DataCVE-2026-41635
Affects org.apache.mina:mina-core | Versions [2.0.0, 2.0.28)[2.1.0, 2.1.11)[2.2.0, 2.2.6)
Has fix
MavenPublished 30 Apr 2026
- M
Improper Certificate ValidationCVE-2026-40557
Affects org.apache.storm:storm-metrics-prometheus | Versions [2.6.3, 2.8.7)
Has fix
MavenPublished 30 Apr 2026
- H
Missing Authentication for Critical FunctionCVE-2026-41081
Affects org.apache.storm:storm-client | Versions [,2.8.7)
Has fix
MavenPublished 30 Apr 2026
- C
Deserialization of Untrusted DataCVE-2026-41409
Affects org.apache.mina:mina-core | Versions [2.0.0, 2.0.28)[2.1.0, 2.1.11)[2.2.0, 2.2.6)
Has fix
MavenPublished 30 Apr 2026
- M
Improper Handling of Insufficient PrivilegesCVE-2026-33005
Affects org.apache.openmeetings:openmeetings-db | Versions [4.0.0,9.0.0)
Has fix
MavenPublished 30 Apr 2026
- H
Use of GET Request Method With Sensitive Query StringsCVE-2026-34020
Affects org.apache.openmeetings:openmeetings-parent | Versions [3.1.3,9.0.0)
Has fix
MavenPublished 30 Apr 2026
- M
Missing AuthorizationCVE-2026-42522
Affects org.jenkins-ci.plugins:github-branch-source | Versions [,1967.1969.v205fd594c821)
Has fix
MavenPublished 30 Apr 2026
- L
Resource InjectionCVE-2026-7303
Affects com.xuxueli:xxl-job-admin | Versions [,3.4.0)
Has fix
MavenPublished 30 Apr 2026
Affects org.jenkins-ci.plugins:matrix-auth | Versions [,3.2.10)
Has fix
MavenPublished 30 Apr 2026
- H
Cross-site Scripting (XSS)CVE-2026-42524
Affects org.jenkins-ci.plugins:htmlpublisher | Versions [,427.1)
Has fix
MavenPublished 30 Apr 2026
- M
Affects org.jenkins-ci.plugins:script-security | Versions [,1402.v94c9ce464861)
Has fix
MavenPublished 30 Apr 2026
- H
Use of Hard-coded Cryptographic KeyCVE-2026-33266
Affects org.apache.openmeetings:openmeetings-util | Versions [6.2.0,9.0.0)
Has fix
MavenPublished 30 Apr 2026
- H
Use of Hard-coded Cryptographic KeyCVE-2026-33266
Affects org.apache.openmeetings:openmeetings-db | Versions [6.2.0,9.0.0)
Has fix
MavenPublished 30 Apr 2026
- H
Relative Path TraversalCVE-2026-42520
Affects org.jenkins-ci.plugins:credentials-binding | Versions [,720.v3f6decef43ea_)
Has fix
MavenPublished 30 Apr 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-42198
Affects org.postgresql:postgresql | Versions [42.2.0,42.7.11)
Has fix
MavenPublished 29 Apr 2026
- M
Cross-site Scripting (XSS)CVE-2026-35565
Affects org.apache.storm:storm-webapp | Versions [,2.8.6)
Has fix
MavenPublished 29 Apr 2026
- H
Deserialization of Untrusted DataCVE-2026-40048
Affects org.apache.camel:camel-pqc | Versions [4.18.0,4.18.2)[4.19.0,4.20.0)
Has fix
MavenPublished 29 Apr 2026
- H
Deserialization of Untrusted DataCVE-2026-40858
Affects org.apache.camel:camel-infinispan | Versions [4.0.0-M1,4.14.7)[4.15.0,4.18.2)[4.19.0,4.20.0)
Has fix
MavenPublished 29 Apr 2026
- H
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-40022
Affects org.apache.camel:camel-platform-http-main | Versions [4.14.1,4.14.6)[4.15.0,4.18.2)[4.19.0,4.20.0)
Has fix
MavenPublished 29 Apr 2026
- H
Deserialization of Untrusted DataCVE-2026-27172
Affects org.apache.camel:camel-consul | Versions [3.0.0-M1,4.14.6)[4.15.0,4.18.1)
Has fix
MavenPublished 29 Apr 2026
- M
Improper Handling of Case SensitivityCVE-2026-40453
Affects org.apache.camel:camel-google-pubsub | Versions [3.0.0-M1,4.14.6)[4.15.0,4.18.2)[4.19.0,4.20.0)
Has fix
MavenPublished 29 Apr 2026
- M
Improper Handling of Case SensitivityCVE-2026-40453
Affects org.apache.camel:camel-coap | Versions [3.0.0-M1,4.14.6)[4.15.0,4.18.2)[4.19.0,4.20.0)
Has fix
MavenPublished 29 Apr 2026
- M
Improper Handling of Case SensitivityCVE-2026-40453
Affects org.apache.camel:camel-sjms | Versions [3.0.0-M1,4.14.6)[4.15.0,4.18.2)[4.19.0,4.20.0)
Has fix
MavenPublished 29 Apr 2026
- M
Improper Handling of Case SensitivityCVE-2026-40453
Affects org.apache.camel:camel-jms | Versions [3.0.0-M1,4.14.6)[4.15.0,4.18.2)[4.19.0,4.20.0)
Has fix
MavenPublished 29 Apr 2026
- H
Deserialization of Untrusted DataCVE-2026-40473
Affects org.apache.camel:camel-mina | Versions [3.0.0-M1,4.14.6)[4.15.0,4.18.2)[4.19.0,4.20.0)
Has fix
MavenPublished 29 Apr 2026
Affects org.apache.camel:camel-componentdsl | Versions [4.14.0,4.14.6)[4.18.0,4.18.1)
Has fix
MavenPublished 29 Apr 2026