@polygonjs/plugin-mediapipe-facemesh (>=1.1.1, <=1.1.218), @polygonjs/polygonjs (>=1.1.124, <=1.1.239) +7 more potentially affected by CVE-2026-45820 via fflate (0.6.9)

fflate NPM version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on fflate and may be impacted: - @polygonjs/plugin-mediapipe-facemesh =1.1.1, =1.1.124, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =1.1.124-1, =1.1.239-1 Source cves:...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27193 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27193 Source advisory: SNYK:JS-FEATHERSJSAUTHENTICATIONOAUTH-15325870...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27191 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27191 Source advisory: SNYK:JS-FEATHERSJSAUTHENTICATIONOAUTH-15325872...