@m3s/smart-contract (>=1.4.1, <=2.3.8), @openzeppelin/contracts-cli (0.1.0) +2 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard-stellar (>=0.1.1, <=0.5.0)

@openzeppelin/wizard-stellar NPM version =0.1.1, =1.4.1, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2026-57583 Source advisory: SNYK:JS-OPENZEPPELINWIZARDSTELLAR-17817909...

@m3s/smart-contract (>=1.1.5, <=2.3.8), @openzeppelin/contracts-mcp (>=0.0.5, <=0.3.0) +11 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard (>=0.1.1, <=0.10.8)

@openzeppelin/wizard NPM version =0.1.1, =1.1.5, =0.0.5, =0.0.1, =1.0.4, =0.0.1, =0.2.48, =0.2.63-a, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2026-57583 Source advisory: SNYK:JS-OPENZEPPELINWIZARD-17817911...

@m3s/smart-contract (>=1.4.1, <=2.3.8), @openzeppelin/contracts-mcp (>=0.0.5, <=0.4.5) +1 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard-stylus (0.2.0)

@openzeppelin/wizard-stylus NPM version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/wizard-stylus and may be impacted: - @m3s/smart-contract =1.4.1, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2026-57583 Source advisory:...