abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +639 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.28.3)

pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0177...

OSV-2026-860 UNKNOWN READ in write_publickey

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519999729 Crash type: UNKNOWN READ Crash state: writepublickey authupdatebinary scupdatebinary...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0172...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16255 more potentially affected by CVE-2026-44487 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44487 Source advisory: OSV:GHSA-P92Q-9VQR-4J8V...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16255 more potentially affected by CVE-2026-44486 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44486 Source advisory: OSV:GHSA-J5F8-GRM9-P9FC...

aquadoggo (0.1.0), askama_tide (>=0.10.0, <=0.15.0) +149 more potentially affected by unknown CVE via tide (>=0.0.5, <=0.17.0-beta.1)

tide CARGO version =0.0.5, =0.10.0, =0.9.0, =1.14.10, =0.2.0, =2.0.0, =1.0.1, =0.1.0, =0.4.1, =6.0.0, =0.1.2, =0.0.4, =0.1.13, =0.4.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0170...

foid (0.1.0), libcrux-ml-dsa (>=0.0.3, <=0.0.11) +7 more potentially affected by unknown CVE via pqcrypto-mldsa (0.1.2)

pqcrypto-mldsa CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pqcrypto-mldsa and may be impacted: - foid 0.1.0 - libcrux-ml-dsa =0.0.3, =0.18.0, =1.0.0-alpha.5, =1.0.0-alpha.7 - test-foo-bar-ml-dsa 0.0.9 - uvb-crypto-pqc 0.2.1 -...

certificate_authority (0.1.0), clatter (>=0.1.2-alpha, <=2.3.0) +55 more potentially affected by unknown CVE via pqcrypto-traits (>=0.1.1, <=0.3.5)

pqcrypto-traits CARGO version =0.1.1, =0.1.2-alpha, =1.2.7, =0.1.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0162...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260508071110-20f5becdec9522d09c6a97f123f7c572407661fb) +378 more potentially affected by CVE-2026-42342 +1 more via react-router (>=7.0.0, <=7.14.2)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =3.4.0, =2026.511.1, =0.2.3, =0.3.7 and more Source cves: CVE-2026-42342, CVE-2026-55685 Source advisory: OSV:GHSA-8X6R-G9MW-2R78...

3nit-utils (>=0.24.0, <=1.0.2), 6ix (0.0.0-canary.0) +298 more potentially affected by CVE-2024-52011 via launch-editor (>=2.2.1, <=2.8.2)

launch-editor NPM version =2.2.1, =0.24.0, =0.0.0-canary.0, =0.0.1, =7.0.2, =1.0.0, =0.4.0, =0.1.0, =0.3.0, =1.0.0, =0.2.0, =0.2.10 - @carnesen/www 0.1.0 - @catapult-tech/cp-design-system-site 1.0.0 - @caviar/cli 0.0.1 and more Source cves: CVE-2024-52011 Source advisory: OSV:GHSA-C27G-Q93R-2CWF...

dicom-transfer-syntax-registry (>=0.8.2, <=0.9.1), dset (>=0.1.0, <=0.1.2) +10 more potentially affected by CVE-2026-52834 via jxl-grid (>=0.1.1, <=0.5.3)

jxl-grid CARGO version =0.1.1, =0.8.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0-rc0 Source cves: CVE-2026-52834 Source advisory: OSV:RUSTSEC-2026-0151...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-45617 via liquidjs (>=10.2.0, <=10.25.7)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-45617 Source advisory: OSV:GHSA-R7G9-XPMJ-5FCQ...

@aquacloud_ai/aqc-charts (>=0.1.1, <=0.1.3), @arkxos/arkos-system (>=0.1.1, <=0.1.10) +71 more potentially affected by CVE-2026-45249 via echarts (6.0.0)

echarts NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on echarts and may be impacted: - @aquacloudai/aqc-charts =0.1.1, =0.1.1, =5.1.121, =0.1.1, =1023.48.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =0.19.0,...

@ahnlabcloudmate/design-system (>=0.0.1-beta.0, <=0.2526.3), @azu/eslint-plugin-panda-oxc (>=1.0.1, <=1.0.2) +223 more potentially affected by CVE-2026-9358 via postcss-selector-parser (>=6.1.0, <=6.1.2)

postcss-selector-parser NPM version =6.1.0, =0.0.1-beta.0, =1.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =0.0.4, =0.0.3, =0.0.3, =0.0.1, =0.0.1, =0.0.9, =0.0.1, =0.0.4, =0.0.32 and more Source cves: CVE-2026-9358 Source advisory: OSV:GHSA-W9M9-85WC-3X92...

@altipla/directus-sdk-utils (0.7.2), @arc-directus/api (>=12.0.0, <=12.0.6) +66 more potentially affected by CVE-2026-46490 via samlify (>=2.5.1, <=2.12.0)

samlify NPM version =2.5.1, =12.0.0, =1.6.0, =1.6.3, =2.10.4, =1.0.0-beta.1, =1.0.0, =1.0.0, =11.16.1-depup.0, =2.0.0, =9.25.0, =9.26.0, =9.26.2 and more Source cves: CVE-2026-46490 Source advisory: OSV:GHSA-34R5-Q4JW-R36M...

atm0s-media-server-transport-rtmp (0.1.0), audio-opus-bsd (>=0.1.0, <=0.1.2) +37 more potentially affected by unknown CVE via audiopus_sys (>=0.1.8, <=0.2.2)

audiopussys CARGO version =0.1.8, =0.1.0, =0.1.0, =0.24.0, =0.3.0, =0.4.0, =0.1.0, =0.1.1-alpha, =0.1.0, =0.2.0, =1.2.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0150...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M9P2-FXP5-V3FP...

@addtodoist/twitter-autohook (2.2.0), @alessiodf/core-chameleon (0.0.1) +157 more potentially affected by CVE-2025-57282 via ngrok (4.3.3)

ngrok NPM version 4.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on ngrok and may be impacted: - @addtodoist/twitter-autohook 2.2.0 - @alessiodf/core-chameleon 0.0.1 - @archer-edu/qa-test-cli =0.1.0-alpha.60, =0.1.1, =3.8.2-rc.0, =3.0.0-next.34,...

a1 (>=1.0.1, <=1.0.2), actor-kit (>=0.1.0, <=0.2.5) +132 more potentially affected by unknown CVE via rkyv (0.8.2)

rkyv CARGO version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on rkyv and may be impacted: - a1 =1.0.1, =0.1.0, =0.1.0, =0.9.0, =0.1.0, =0.2.1, =0.1.0, =0.4.0, =0.9.0, =0.5.0, =0.5.0, =2.0.0-alpha.1, =0.1.2, =0.4.2 and more Source cves: unknown...

assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +9 more potentially affected by CVE-2026-46673 via russh-cryptovec (0.7.3)

russh-cryptovec CARGO version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on russh-cryptovec and may be impacted: - assistantdaemon 0.1.0 - async-ssh2-tokio =0.2.0, =0.1.0, =0.1.0, =0.34.0-beta.1, =0.22.0-beta.1, =0.2.0, =0.1.0, =0.4.1 - sshrpc...