CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: langfuse, tileserver-gl...

CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, langfuse-fips, langfuse, commercial-gitlab-rails-ee, lambda-nodejs, librechat, tileserver-gl, tileserver-gl-fips...

@1delta/aggregators (>=0.1.0, <=0.1.6), @1delta/bridge-configs (>=0.1.0, <=0.1.9) +404 more potentially affected by CVE-2026-45820 via fflate (>=0.8.0, <=0.8.2)

fflate NPM version =0.8.0, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.5.3, =0.13.6, =0.13.6, =0.13.6, =0.1.0, =0.1.1 and more Source cves: CVE-2026-45820 Source advisory: OSV:GHSA-PX8P-9VWX-VF98...

@polygonjs/plugin-mediapipe-facemesh (>=1.1.1, <=1.1.218), @polygonjs/polygonjs (>=1.1.124, <=1.1.239) +7 more potentially affected by CVE-2026-45820 via fflate (0.6.9)

fflate NPM version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on fflate and may be impacted: - @polygonjs/plugin-mediapipe-facemesh =1.1.1, =1.1.124, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =1.1.124-1, =1.1.239-1 Source cves:...

@bugreels/web-script (0.0.9), @dysonic/web-replay-chrome-extensions (>=0.1.0-beta.0, <=0.1.0) +7 more potentially affected by CVE-2026-45820 via fflate (0.4.8)

fflate NPM version 0.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on fflate and may be impacted: - @bugreels/web-script 0.0.9 - @dysonic/web-replay-chrome-extensions =0.1.0-beta.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.13,...

@2gis/deck2gis-layer (>=3.0.0, <=3.0.13), @3cr/viewer-browser (>=0.0.327, <=0.0.333) +806 more potentially affected by CVE-2026-45820 via fflate (>=0.7.1, <=0.7.4)

fflate NPM version =0.7.1, =3.0.0, =0.0.327, =0.0.308, =1.0.29, =0.1.0, =3.0.17, =3.0.0-b.2, =1.3.1-isan.0, =1.3.3-isan.0, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =1.0.1, =2.7.3 and more Source cves: CVE-2026-45820 Source advisory: MEND:CVE-2026-45820...