@haxtheweb/app-editor-hax (>=9.0.0-alpha.0, <=9.0.1), @haxtheweb/app-hax (>=9.0.19, <=25.0.0) +33 more potentially affected by CVE-2026-46396 via @haxtheweb/iframe-loader (>=9.0.22, <=25.0.0)

@haxtheweb/iframe-loader NPM version =9.0.22, =9.0.0-alpha.0, =9.0.19, =9.0.0-alpha.0, =9.0.19, =9.0.25, =9.0.20, =9.0.22, =9.0.22, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.9, =0.0.0, =9.0.19, =9.0.0-alpha.0, =25.0.0 and more Source cves: CVE-2026-46396 Source advisory:...

@haxtheweb/app-hax (25.0.0), @haxtheweb/baseline-build-hax (25.0.0) +28 more potentially affected by CVE-2026-46396 via @haxtheweb/iframe-loader (25.0.0)

@haxtheweb/iframe-loader NPM version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @haxtheweb/iframe-loader and may be impacted: - @haxtheweb/app-hax 25.0.0 - @haxtheweb/baseline-build-hax 25.0.0 - @haxtheweb/bootstrap-theme 25.0.0 -...