CLEANSTART-2026-GJ99967 Security fixes in npm 11.14.0-r3

🗓️ 30 Jul 2026 07:10:53Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Security fixes in npm version 11.14.0-r3 address two vulnerabilities (CVE-2026-53655 and CVE-2026-9358).

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	7 Jul 202619:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM Data Product Hub	10 Jul 202615:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses postcss-selector-parser-7.1.1.tgz which is vulnerable to CVE-2026-9358	4 Aug 202612:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses tar which is vulnerable to CVE-2026-53655	4 Aug 202612:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Remediator is affected by mutiple vulnerabilities	6 Jul 202606:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules	23 Jul 202608:40	–	ibm
ATTACKERKB	CVE-2026-9358	24 May 202605:30	–	attackerkb
ATTACKERKB	CVE-2026-53655	22 Jun 202614:55	–	attackerkb
Chainguard	CVE-2026-53655 vulnerabilities	18 Jun 202620:21	–	cgr

Source	Link
npmjs	www.npmjs.com/

03 Aug 2026 01:15Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.14.3 - 5.5

CVSS 46.9

CVSS 25

CVSS 34.3

EPSS0.00325

SSVC