ROOT-APP-NPM-CVE-2026-45109 CVE-2026-45109 in next - Patched by Root

Root has patched CVE-2026-45109 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44574 CVE-2026-44574 in next - Patched by Root

Root has patched CVE-2026-44574 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44577 CVE-2026-44577 in next - Patched by Root

Root has patched CVE-2026-44577 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44576 CVE-2026-44576 in next - Patched by Root

Root has patched CVE-2026-44576 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-27978 CVE-2026-27978 in next - Patched by Root

Root has patched CVE-2026-27978 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44572 CVE-2026-44572 in next - Patched by Root

Root has patched CVE-2026-44572 in the next package for Root:npm. Multiple fixed versions available...

MAL-2026-14070 Malicious code in @ai-vertical/ai-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3daa0f3fabdeebe3db0146233d623d65ae16aea601e54fd6519a160db5af8ee On require/import, index.js fetches a hardcoded GitHub Gist gist.github.com/aiverticalsolutions/7676451d2f972137d2482c4a8937a77a via the api.github.c...

Malicious code in @ai-vertical/ai-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3daa0f3fabdeebe3db0146233d623d65ae16aea601e54fd6519a160db5af8ee On require/import, index.js fetches a hardcoded GitHub Gist gist.github.com/aiverticalsolutions/7676451d2f972137d2482c4a8937a77a via the api.github.c...

ROOT-APP-NPM-CVE-2023-26133 CVE-2023-26133 in progressbar.js - Patched by Root

Root has patched CVE-2023-26133 in the progressbar.js package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-38355 CVE-2024-38355 in socket.io - Patched by Root

Root has patched CVE-2024-38355 in the socket.io package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-4926 CVE-2026-4926 in path-to-regexp - Patched by Root

Root has patched CVE-2026-4926 in the path-to-regexp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-4923 CVE-2026-4923 in path-to-regexp - Patched by Root

Root has patched CVE-2026-4923 in the path-to-regexp package for Root:npm. Multiple fixed versions available...

Exploit for CVE-2022-24481

No d...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.2) +6 more potentially affected by CVE-2026-73055 via shescape (>=2.1.0, <=2.1.14)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.4 Source cves: CVE-2026-73055 Source advisory: SNYK:JS-SHESCAPE-18855681...

@rse/claudex (1.0.11) potentially affected by CVE-2026-73055 via shescape (3.0.1)

shescape NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on shescape and may be impacted: - @rse/claudex 1.0.11 Source cves: CVE-2026-73055 Source advisory: SNYK:JS-SHESCAPE-18855681...

Malicious code in depcruise-wrap-stream-in-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce3c6c9707df3626f30cbf434aa298d1df5cda4cf7b06b76ad4c92d04004a1c [email protected] is a hollow package: index.js is module.exports = and the name mimics an internal helper of dependency-cruiser...

MAL-2026-14068 Malicious code in depcruise-wrap-stream-in-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce3c6c9707df3626f30cbf434aa298d1df5cda4cf7b06b76ad4c92d04004a1c [email protected] is a hollow package: index.js is module.exports = and the name mimics an internal helper of dependency-cruiser...

MAL-2026-14067 Malicious code in upload-to-gcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094f90a9780964738c1b9aea702c5554c802fba03f1a7e28c0703531dd04590 [email protected] runs a postinstall lifecycle script on npm install that collects host identifiers os.hostname, process.platform, process.arch, No...

MAL-2026-14065 Malicious code in akamai-sensor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a8cc3668ec9751c1ef60bf602f1e08f2f2fdf8dce999e442c484458f932178 Package published under a name impersonating Akamai's sensordata anti-bot SDK. index.js contains a /... / comment whose body is encoded in invisible...

@appweaver/core (>=1.0.8, <=1.4.1), @buildplease/apikit (>=1.0.0, <=1.0.1) +14 more potentially affected by CVE-2026-19474 via @fastify/multipart (>=10.0.0, <=10.1.0)

@fastify/multipart NPM version =10.0.0, =1.0.8, =1.0.0, =4.0.1, =5.3.0, =0.0.17, =2.5.0, =2.2.1, =20260128.2248.28, =20260411.1248.30, =20260828.1636.54, =1.0.1, =0.0.0-unstable.9f53ea597d, =5.21.1-beta.15, =2.4.8, =2.8.1 and more Source cves: CVE-2026-19474 Source advisory:...