ai.pipestream.module:module-opensearch-sink (>=0.1.2, <=0.1.4), ai.pipestream.module:module-testing-sidecar (0.0.1) +3783 more potentially affected by CVE-2026-106450 via at.yawk.lz4:lz4-java (>=1.8.1, <=1.11.3)

at.yawk.lz4:lz4-java MAVEN version =1.8.1, =0.1.2, =0.0.22, =0.1.18, =0.1.7, =0.7.24, =0.7.24, =0.7.24, =0.1.29, =0.7.22, =0.7.12, =0.7.41 - ai.pipestream:repository-service 0.0.1 and more Source cves: CVE-2026-106450 Source advisory: OSV:GHSA-GM45-99XC-R7WV...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +15589 more potentially affected by CVE-2026-106450 via org.lz4:lz4-java (>=1.4, <=1.8.1)

org.lz4:lz4-java MAVEN version =1.4, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =1.2.10 and more Source cves: CVE-2026-106450 Source advisory: GHSA-GM45-99XC-R7WV...

@1zuku/jui (>=0.1.0, <=0.1.3), @37chengshan/ompweb (>=0.3.5, <=5.1.9) +174 more potentially affected by CVE-2026-94544 via next (>=16.3.0, <=16.3.7)

next NPM version =16.3.0, =0.1.0, =0.3.5, =0.8.9, =0.6.0, =0.8.12, =0.1.5, =0.8.28, =0.1.0, =0.9.3, =0.9.4 and more Source cves: CVE-2026-94544 Source advisory: GHSA-3W37-WQ28-93X7...

@ainsleydev/payload-helper (>=0.0.25, <=0.3.2), @davincicoding/payload-plugin-kit (0.0.4) +10 more potentially affected by CVE-2026-105856 via @payloadcms/db-sqlite (>=3.5.0, <=3.88.0)

@payloadcms/db-sqlite NPM version =3.5.0, =0.0.25, =0.0.1, =1.1.10, =1.2.0 - payload-smart-deletion 1.0.7 - simple-shop 1.0.0 Source cves: CVE-2026-105856 Source advisory: SNYK:JS-PAYLOADCMSDBSQLITE-20936902...

@ainsleydev/payload-helper (>=0.0.25, <=0.3.2), @davincicoding/payload-plugin-kit (0.0.4) +10 more potentially affected by CVE-2026-105856 via @payloadcms/db-sqlite (>=3.5.0, <=3.88.0)

@payloadcms/db-sqlite NPM version =3.5.0, =0.0.25, =0.0.1, =1.1.10, =1.2.0 - payload-smart-deletion 1.0.7 - simple-shop 1.0.0 Source cves: CVE-2026-105856 Source advisory: GHSA-PJ7X-6WPF-PGVP...

@adenta/cms (>=0.0.6, <=1.1.1-0), @lafllamme/personal-page-shared (>=1.0.0, <=1.2.0) +2 more potentially affected by CVE-2026-105856 +1 more via @payloadcms/db-postgres (>=3.46.0, <=3.61.0)

@payloadcms/db-postgres NPM version =3.46.0, =0.0.6, =1.0.0, =1.2.0 - @otherdev-software/canvas 1.0.0 - payload-auth-plugin 0.7.5 Source cves: CVE-2026-105856, CVE-2026-63316 Source advisory: OSV:GHSA-PJ7X-6WPF-PGVP...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105861 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105861 Source advisory: GHSA-PJ5H-5Q6C-3PFX...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105861 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105861 Source advisory: OSV:GHSA-PJ5H-5Q6C-3PFX...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105862 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105862 Source advisory: SNYK:JS-PAYLOAD-20570517...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105862 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105862 Source advisory: OSV:GHSA-2PWP-2369-8FG3...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105862 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105862 Source advisory: GHSA-2PWP-2369-8FG3...

@frogbotai/storage-azure (>=0.0.1, <=0.23.0) potentially affected by CVE-2026-105862 via @payloadcms/storage-azure (>=3.85.1, <=3.88.0)

@payloadcms/storage-azure NPM version =3.85.1, =0.0.1, =0.23.0 Source cves: CVE-2026-105862 Source advisory: SNYK:JS-PAYLOADCMSSTORAGEAZURE-20570520...

@ainsleydev/payload-helper (0.0.16), @contentql/core (>=0.1.2, <=0.3.5) +6 more potentially affected by CVE-2026-105862 via @payloadcms/storage-s3 (>=3.0.0-beta.29, <=3.89.0)

@payloadcms/storage-s3 NPM version =3.0.0-beta.29, =0.1.2, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.4, =0.1.5 Source cves: CVE-2026-105862 Source advisory: SNYK:JS-PAYLOADCMSSTORAGES3-20570522...

@basildesignco/payload-preset (0.1.0), @frogbotai/storage-vercel-blob (>=0.0.1, <=0.23.0) potentially affected by CVE-2026-105862 via @payloadcms/storage-vercel-blob (>=3.85.1, <=3.89.0)

@payloadcms/storage-vercel-blob NPM version =3.85.1, =0.0.1, =0.23.0 Source cves: CVE-2026-105862 Source advisory: SNYK:JS-PAYLOADCMSSTORAGEVERCELBLOB-20570518...

@otherdev-software/canvas (1.0.0), payload-stack (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-105864 via @payloadcms/plugin-multi-tenant (>=3.61.0, <=3.88.0)

@payloadcms/plugin-multi-tenant NPM version =3.61.0, =0.2.0, =0.3.0 Source cves: CVE-2026-105864 Source advisory: OSV:GHSA-XHM9-GWGW-3Q2Q...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105865 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105865 Source advisory: OSV:GHSA-P223-2WR2-J562...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105866 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105866 Source advisory: SNYK:JS-PAYLOAD-20570505...

@payloadcms/db-d1-sqlite (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/db-postgres (>=4.0.0-canary.0, <=4.0.0-canary.33) +2 more potentially affected by CVE-2026-105866 via @payloadcms/drizzle (>=4.0.0-canary.0, <=4.0.0-canary.33)

@payloadcms/drizzle NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105866 Source advisory: SNYK:JS-PAYLOADCMSDRIZZLE-20570507...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105868 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105868 Source advisory: SNYK:JS-PAYLOAD-20570537...

@frogbotai/storage-azure (>=0.0.1, <=0.23.0) potentially affected by CVE-2026-105868 via @payloadcms/storage-azure (>=3.85.1, <=3.88.0)

@payloadcms/storage-azure NPM version =3.85.1, =0.0.1, =0.23.0 Source cves: CVE-2026-105868 Source advisory: SNYK:JS-PAYLOADCMSSTORAGEAZURE-20570540...