aabb_physics (>=0.1.0, <=0.1.1), aad (>=0.2.1, <=0.9.0) +1947 more potentially affected by unknown CVE via ttf-parser (>=0.1.0, <=0.25.1)

ttf-parser CARGO version =0.1.0, =0.1.0, =0.2.1, =0.1.0, =0.11.0, =0.9.0, =0.1.0, =0.0.2, =0.1.2, =0.1.1, =0.1.26, =0.1.23, =0.1.9, =0.2.0, =0.0.10, =0.0.18 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0192...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kaf, kubescape-server, cilium-cli, argo-cd, seaweedfs-rocksdb, kyverno, kyverno-fips, kubernetes, frankenphp-8.4, kubernetes-dashboard, omnictl-multiarch, harbor, kubescape-server-fips, zitadel, commercial-grafana, gatekeeper-fips, kubevela-fips, skaffold-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: k3s, telegraf, istio, kubernetes, cilium-cli, flux-image-automation-controller, rancher, minio, nerdctl, spire-server, argocd-image-updater, cloud-provider-aws, snyk-cli, zarf, prometheus-operator, chisel, external-dns, osv-scanner, kots, flux, prometheus, mattermost...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: melange, telegraf, kubernetes, cosign, argocd-image-updater, pulumi-language-java, terraform-provider-tls, docker-machine-driver-harvester, ko, apko, prometheus-operator, step-issuer, rancher-machine, pulumi-language-dotnet, kots, k9s, act, kine, trivy-operator,...

abd-clam (>=0.21.6, <=0.21.7), accesskit_windows (>=0.4.0, <=0.15.0) +2045 more potentially affected by unknown CVE via memmap2 (>=0.1.0, <=0.9.10)

memmap2 CARGO version =0.1.0, =0.21.6, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.5, =0.18.0, =0.0.7, =0.0.8, =0.7.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0186...

kozou (>=1.0.0, <=1.8.0) potentially affected by unknown CVE via @kozou/api (>=1.0.0, <=1.8.0)

@kozou/api NPM version =1.0.0, =1.0.0, =1.8.0 Source cves: unknown CVE Source advisory: OSV:GHSA-V52W-28XH-V562...

@m3s/smart-contract (>=1.1.5, <=2.3.8), @openzeppelin/contracts-mcp (>=0.0.5, <=0.3.0) +11 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard (>=0.1.1, <=0.10.8)

@openzeppelin/wizard NPM version =0.1.1, =1.1.5, =0.0.5, =0.0.1, =1.0.4, =0.0.1, =0.2.48, =0.2.63-a, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2026-57583 Source advisory: OSV:GHSA-9WXG-VF3R-56HC...

@adyen/adyen-salesforce-pwa (>=2.0.0, <=3.0.4), @angular-builders/custom-esbuild (>=18.0.0-beta.3, <=19.1.0) +132 more potentially affected by CVE-2026-55603 via http-proxy-middleware (>=3.0.5, <=3.0.6)

http-proxy-middleware NPM version =3.0.5, =2.0.0, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.2.19, =1.0.2, =0.9.1-next.19, =0.9.1-next.19, =0.9.1-next.19, =0.0.4, =3.0.0-alpha-1, =24.3.0-depup.0, =2.4.3-nextjs-16.27-07-26-15-19, =2.6.2-govgr-5180.14-10-26-16-05 and more Source cve...

@activepieces/piece-gmail (>=0.12.2, <=0.12.5), @activepieces/piece-sendgrid (>=0.5.3, <=0.5.5) +132 more potentially affected by CVE-2026-82661 via nodemailer (>=8.0.0, <=8.0.8)

nodemailer NPM version =8.0.0, =0.12.2, =0.5.3, =0.4.1, =3.19.2, =2.1.108, =0.0.1, =0.0.0-preview.10.8ccd25db, =6.1.196-alpha, =6.1.196-alpha, =6.1.210-alpha and more Source cves: CVE-2026-82661 Source advisory: OSV:GHSA-268H-HP4C-CRQ3...

10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3417 more potentially affected by CVE-2026-48712 via protobufjs (>=7.0.0, <=7.5.9)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =3.26.0, =3.142.0 and more Source cves: CVE-2026-48712 Source advisory: OSV:GHSA-WCPC-WJ8M-HJX6...

OSV-2026-917 Heap-buffer-overflow in ixheaace_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523531852 Crash type: Heap-buffer-overflow WRITE Crash state: ixheaaceprocess xaacencfuzzer.cpp...

-temp-electron-manager-somiibo (0.0.200), 0xpass (>=0.0.2, <=0.0.8) +5288 more potentially affected by CVE-2026-48069 via @grpc/grpc-js (>=1.0.0, <=1.9.14)

@grpc/grpc-js NPM version =1.0.0, =0.0.2, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =2.0.0, =0.3.30, =0.3.30, =0.4.16 and more Source cves: CVE-2026-48069 Source advisory: OSV:GHSA-99F4-GRH7-6PCQ...

OSV-2026-860 UNKNOWN READ in write_publickey

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519999729 Crash type: UNKNOWN READ Crash state: writepublickey authupdatebinary scupdatebinary...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16255 more potentially affected by CVE-2026-44487 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44487 Source advisory: OSV:GHSA-P92Q-9VQR-4J8V...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16255 more potentially affected by CVE-2026-44486 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44486 Source advisory: OSV:GHSA-J5F8-GRM9-P9FC...

certificate_authority (0.1.0), clatter (>=0.1.2-alpha, <=2.3.0) +55 more potentially affected by unknown CVE via pqcrypto-traits (>=0.1.1, <=0.3.5)

pqcrypto-traits CARGO version =0.1.1, =0.1.2-alpha, =1.2.7, =0.1.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0162...

foid (0.1.0), libcrux-ml-dsa (>=0.0.3, <=0.0.11) +7 more potentially affected by unknown CVE via pqcrypto-mldsa (0.1.2)

pqcrypto-mldsa CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pqcrypto-mldsa and may be impacted: - foid 0.1.0 - libcrux-ml-dsa =0.0.3, =0.18.0, =1.0.0-alpha.5, =1.0.0-alpha.7 - test-foo-bar-ml-dsa 0.0.9 - uvb-crypto-pqc 0.2.1 -...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260508071110-20f5becdec9522d09c6a97f123f7c572407661fb) +378 more potentially affected by CVE-2026-42342 +1 more via react-router (>=7.0.0, <=7.14.2)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =3.4.0, =2026.511.1, =0.2.3, =0.3.7 and more Source cves: CVE-2026-42342, CVE-2026-55685 Source advisory: OSV:GHSA-8X6R-G9MW-2R78...

3nit-utils (>=0.24.0, <=1.0.2), 6ix (0.0.0-canary.0) +298 more potentially affected by CVE-2024-52011 via launch-editor (>=2.2.1, <=2.8.2)

launch-editor NPM version =2.2.1, =0.24.0, =0.0.0-canary.0, =0.0.1, =7.0.2, =1.0.0, =0.4.0, =0.1.0, =0.3.0, =1.0.0, =0.2.0, =0.2.10 - @carnesen/www 0.1.0 - @catapult-tech/cp-design-system-site 1.0.0 - @caviar/cli 0.0.1 and more Source cves: CVE-2024-52011 Source advisory: OSV:GHSA-C27G-Q93R-2CWF...

dicom-transfer-syntax-registry (>=0.8.2, <=0.9.1), jxl-color (>=0.1.0, <=0.10.2) +8 more potentially affected by CVE-2026-52834 via jxl-grid (>=0.1.1, <=0.5.3)

jxl-grid CARGO version =0.1.1, =0.8.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0-rc0 Source cves: CVE-2026-52834 Source advisory: OSV:RUSTSEC-2026-0151...