@aliceo2/bookkeeping (>=1.19.0, <=1.20.0), @beyondnet/evolith-cli (>=1.2.0, <=1.3.2) +65 more potentially affected by CVE-2026-77037 via multer (2.2.0)

multer NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on multer and may be impacted: - @aliceo2/bookkeeping =1.19.0, =1.2.0, =1.2.0, =2026.7.0, =5.7.5, =11.1.29-depup.0, =0.1.0, =0.1.0, =11.0.62, =1.2.34, =12.0.0, =3.0.0, =3.0.0, =3.0.0...

CVE-2026-77037

creationtimestamp| type| source ---|---|--- 2026-08-28 19:48:29+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mu64x7sf222k 2026-08-29 06:02:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu77chep2i2r...

@aliceo2/bookkeeping (>=1.19.0, <=1.20.0), @beyondnet/evolith-cli (>=1.2.0, <=1.3.2) +65 more potentially affected by CVE-2026-77037 via multer (2.2.0)

multer NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on multer and may be impacted: - @aliceo2/bookkeeping =1.19.0, =1.2.0, =1.2.0, =2026.7.0, =5.7.5, =11.1.29-depup.0, =0.1.0, =0.1.0, =11.0.62, =1.2.34, =12.0.0, =3.0.0, =3.0.0, =3.0.0...