ate (>=0.1.0, <=0.8.0), ate-auth (>=1.1.0, <=1.6.0) +79 more potentially affected by unknown CVE via pqcrypto-traits (>=0.1.1, <=0.3.5)

pqcrypto-traits CARGO version =0.1.1, =0.1.0, =1.1.0, =1.0.0, =1.1.0, =2.0.0, =0.1.2-alpha, =0.1.4, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.1.2 - envencryptiontool 0.9.17 - ever-crypto 0.1.0 - foid 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0162...

adx (>=4.0.0, <=4.1.0), aicommits-rs (>=0.1.0, <=0.2.0) +302 more potentially affected by unknown CVE via surf (>=1.0.1, <=2.3.2)

surf CARGO version =1.0.1, =4.0.0, =0.1.0, =1.0.0, =0.3.0, =0.10.0, =0.3.0, =0.5.0, =0.1.0, =0.6.0, =0.3.0, =0.1.0, =0.0.1, =0.2.4 - async-bybit 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0169...

aquadoggo (0.1.0), askama_tide (>=0.10.0, <=0.15.0) +149 more potentially affected by unknown CVE via tide (>=0.0.5, <=0.17.0-beta.1)

tide CARGO version =0.0.5, =0.10.0, =0.9.0, =1.14.10, =0.2.0, =2.0.0, =1.0.1, =0.1.0, =0.4.1, =6.0.0, =0.1.2, =0.0.4, =0.1.13, =0.4.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0170...

b4ae (>=2.1.1, <=2.1.3), env_encryption_tool (0.9.17) +10 more potentially affected by unknown CVE via pqcrypto-mldsa (0.1.2)

pqcrypto-mldsa CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pqcrypto-mldsa and may be impacted: - b4ae =2.1.1, =0.0.3, =0.18.0, =0.1.0, =1.0.0-alpha.5, =1.0.0-alpha.7 - test-foo-bar-ml-dsa 0.0.9 - uvb-crypto-pqc 0.2.1 - uvb-mrvb...

ate (>=0.1.0, <=0.8.0), ate-auth (>=1.1.0, <=1.6.0) +73 more potentially affected by unknown CVE via pqcrypto-internals (>=0.1.0, <=0.2.11)

pqcrypto-internals CARGO version =0.1.0, =0.1.0, =1.1.0, =1.0.0, =1.1.0, =2.0.0, =0.1.2-alpha, =0.1.4, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.1.2 - envencryptiontool 0.9.17 - ever-crypto 0.1.0 - foid 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0163...

ate (>=0.1.0, <=0.8.0), ate-auth (>=1.1.0, <=1.6.0) +19 more potentially affected by unknown CVE via pqcrypto-falcon (>=0.2.10, <=0.4.1)

pqcrypto-falcon CARGO version =0.2.10, =0.1.0, =1.1.0, =1.0.0, =1.1.0, =0.1.4, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.12.2, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0165...

crypt_guard (0.1.4), env_encryption_tool (0.9.17) +7 more potentially affected by unknown CVE via pqcrypto (>=0.11.1, <=0.18.1)

pqcrypto CARGO version =0.11.1, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.23.0, =0.23.0, =12.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0164...

arbor-ai (>=0.1.5, <=0.1.14), coreason-runtime (>=0.1.0, <=0.11.1) +13 more potentially affected by CVE-2026-10775 via sglang (>=0.1.26, <=0.5.17)

sglang PYPI version =0.1.26, =0.1.5, =0.1.0, =1.1.0rc1, =2.0.0b40, =0.4.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1.post1, =0.1.1, =0.0.0, =0.8.0, =0.10.8 Source cves: CVE-2026-10775 Source advisory: SNYK:PYTHON-SGLANG-17739026...

PT-2026-49161

Root has patched NSWG-ECO-17 in the @rootio/jsonwebtoken package for Root:npm. Multiple fixed versions available...

qgate-sln-mlrun (>=0.1.0, <=0.2.8) potentially affected by CVE-2026-10766 via mlrun (>=1.5.2, <=1.6.4)

mlrun PYPI version =1.5.2, =0.1.0, =0.2.8 Source cves: CVE-2026-10766 Source advisory: SNYK:PYTHON-MLRUN-17157375...

browserstack-tape-runner (>=1.0.0, <=3.0.0), duplo (>=1.6.11, <=1.9.1) +4 more potentially affected by CVE-2026-49143 via browserstack-runner (>=0.2.1, <=0.9.4)

browserstack-runner NPM version =0.2.1, =1.0.0, =1.6.11, =0.1.4, =0.1.1, =2.0.2 - run-browserstack-tests 1.0.2 - yasmf-localization 0.0.2 Source cves: CVE-2026-49143 Source advisory: OSV:GHSA-6VR3-7WCX-V5G5...

browserstack-tape-runner (>=1.0.0, <=3.0.0), duplo (>=1.6.11, <=1.9.1) +4 more potentially affected by CVE-2026-49143 via browserstack-runner (>=0.2.1, <=0.9.4)

browserstack-runner NPM version =0.2.1, =1.0.0, =1.6.11, =0.1.4, =0.1.1, =2.0.2 - run-browserstack-tests 1.0.2 - yasmf-localization 0.0.2 Source cves: CVE-2026-49143 Source advisory: SNYK:JS-BROWSERSTACKRUNNER-17750811...

browserstack-tape-runner (>=1.0.0, <=3.0.0), duplo (>=1.6.11, <=1.9.1) +4 more potentially affected by CVE-2026-49144 via browserstack-runner (>=0.2.1, <=0.9.4)

browserstack-runner NPM version =0.2.1, =1.0.0, =1.6.11, =0.1.4, =0.1.1, =2.0.2 - run-browserstack-tests 1.0.2 - yasmf-localization 0.0.2 Source cves: CVE-2026-49144 Source advisory: OSV:GHSA-8RPW-6CQH-2V9H...

browserstack-tape-runner (>=1.0.0, <=3.0.0), duplo (>=1.6.11, <=1.9.1) +4 more potentially affected by CVE-2026-49144 via browserstack-runner (>=0.2.1, <=0.9.4)

browserstack-runner NPM version =0.2.1, =1.0.0, =1.6.11, =0.1.4, =0.1.1, =2.0.2 - run-browserstack-tests 1.0.2 - yasmf-localization 0.0.2 Source cves: CVE-2026-49144 Source advisory: SNYK:JS-BROWSERSTACKRUNNER-17750809...

@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +25 more potentially affected by CVE-2026-42342 +1 more via @remix-run/server-runtime (>=2.10.0, <=2.17.4)

@remix-run/server-runtime NPM version =2.10.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.1.36, =2.10.0-pre.0, =2.10.0-pre.0, =2.10.0-pre.0, =2.10.0-pre.0, =2.10.0-pre.0, =2.10.0-pre.0, =2.17.4 and more Source cves: CVE-2026-42342, CVE-2026-55685 Source...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260508071110-20f5becdec9522d09c6a97f123f7c572407661fb) +375 more potentially affected by CVE-2026-42342 +1 more via react-router (>=7.0.0, <=7.14.2)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =3.4.0, =2026.511.1, =0.2.3, =0.3.7 and more Source cves: CVE-2026-42342, CVE-2026-55685 Source advisory: OSV:GHSA-8X6R-G9MW-2R78...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260427054851-6925deba4595cf0c72d3875df0a094608b394a27) +290 more potentially affected by CVE-2026-42211 via react-router (>=7.0.0, <=7.14.1)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =1.0.8 and more Source cves: CVE-2026-42211 Source advisory: OSV:GHSA-49RJ-9FVP-4H2H...

@1023-ventures/merope2 (>=0.2.1, <=0.2.9), @1023-ventures/vega-core (>=0.5.0, <=0.6.2) +1335 more potentially affected by CVE-2026-40181 via @remix-run/router (>=1.3.0, <=1.23.2-pre-v6.0)

@remix-run/router NPM version =1.3.0, =0.2.1, =0.5.0, =0.0.1, =0.0.1, =3.0.0, =0.0.0-beta-20260120211922, =1.0.0, =1.0.0, =1.0.0, =2.7.0, =0.0.1, =0.1.0, =0.0.0, =2.13.1, =2.13.94 and more Source cves: CVE-2026-40181 Source advisory: OSV:GHSA-2J2X-HQR9-3H42...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260421081155-bb6cc4c0b0b59fff41df172e2f4212eca6906193) +287 more potentially affected by CVE-2026-40181 via react-router (>=7.0.0, <=7.14.0-pre.0)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =1.0.8 and more Source cves: CVE-2026-40181 Source advisory: OSV:GHSA-2J2X-HQR9-3H42...

@1023-ventures/merope2 (>=0.2.1, <=0.2.9), @1023-ventures/vega-core (>=0.5.0, <=0.6.2) +1203 more potentially affected by CVE-2026-40181 via react-router (>=6.7.0, <=6.30.3-pre-v6.0)

react-router NPM version =6.7.0, =0.2.1, =0.5.0, =0.0.1, =0.0.1, =3.0.0, =0.0.0-beta-20260120211922, =1.0.0, =1.0.0, =1.0.0, =2.7.0, =0.0.1, =0.1.0, =0.0.0, =2.13.1, =2.13.94 and more Source cves: CVE-2026-40181 Source advisory: OSV:GHSA-2J2X-HQR9-3H42...