@0xcurvy/curvy-sdk (0.0.8-rc.1), @acyclic/keythereum (>=1.1.0, <=1.1.2) +456 more potentially affected by CVE-2026-4258 via sjcl (>=1.0.0, <=1.0.8)

sjcl NPM version =1.0.0, =1.1.0, =0.2.0, =0.4.0, =0.1.0, =0.0.1, =1.1.5, =9.0.7, =9.0.7, =11.5.2, =11.5.2, =1.0.1, =1.0.7 and more Source cves: CVE-2026-4258 Source advisory: OSV:GHSA-2W8X-224X-785M...

org.webjars.npm:github-com-aws-amazon-cognito-identity-js (1.12.0) potentially affected by CVE-2026-4258 via org.webjars.npm:sjcl (1.0.8)

org.webjars.npm:sjcl MAVEN version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sjcl and may be impacted: - org.webjars.npm:github-com-aws-amazon-cognito-identity-js 1.12.0 Source cves: CVE-2026-4258 Source advisory:...