@bechara/crux (>=6.0.0-alpha.1, <=6.6.2), @cappa/cli (>=0.1.0, <=0.8.2) +11 more potentially affected by CVE-2026-6270 via @fastify/middie (>=9.0.2, <=9.3.1)

@fastify/middie NPM version =9.0.2, =6.0.0-alpha.1, =0.1.0, =0.1.0, =1.0.0-develop-pedago.0, =1.0.11, =0.1.51, =1.0.36, =11.0.0-next.1, =1.3.0, =5.0.0-beta.36, =0.6.1-dev, =1.1.95 Source cves: CVE-2026-6270 Source advisory: OSV:GHSA-72C6-FX6Q-FR5W...

@albirex/platformatic-logto (>=1.0.0, <=3.1.2), @aoi-js/server (>=1.2.3, <=1.2.11) +115 more potentially affected by CVE-2026-35041 via fast-jwt (>=5.0.0, <=6.0.1)

fast-jwt NPM version =5.0.0, =1.0.0, =1.2.3, =1.0.6, =1.0.11, =1.9.4, =0.1.2, =0.16.13, =0.16.13, =2.0.5, =5.0.1, =1.0.6, =9.0.2, =0.4.15, =0.10.0, =0.81.0 and more Source cves: CVE-2026-35041 Source advisory: OSV:GHSA-CJW9-GHJ4-FWXF...

@b4uti4gd/tslash (>=1.0.0, <=1.0.1), @bitsnbobs/starch (>=1.4.0, <=2.1.0) +95 more potentially affected by unknown CVE via @chenglou/pretext (>=0.0.1, <=0.0.4)

@chenglou/pretext NPM version =0.0.1, =1.0.0, =1.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5478-66C3-RHXR...

@achyutlabsau/vue-payment-gateway (>=0.8.1, <=0.8.2), @activepieces/common-ai (>=0.4.0, <=0.6.0) +698 more potentially affected by CVE-2026-39865 via axios (>=1.13.0, <=1.13.1)

axios NPM version =1.13.0, =0.8.1, =0.4.0, =0.1.0, =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-39865 Source advisory: OSV:GHSA-QJ83-CQ47-W5F8...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +151 more potentially affected by CVE-2026-34166 via liquidjs (>=10.2.0, <=10.25.2)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0-beta.1 and more Source cves: CVE-2026-34166 Source advisory: OSV:GHSA-MMG9-6M6J-JQQX...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @agentforce/adk (>=0.9.0, <=0.12.1) +546 more potentially affected by CVE-2026-39408 via hono (>=4.0.0, <=4.12.10)

hono NPM version =4.0.0, =0.3.1, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.0.1, =0.0.1, =1.0.0 and more Source cves: CVE-2026-39408 Source advisory: OSV:GHSA-XF4J-XP2R-RQQX...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.11) potentially affected by CVE-2026-35200 via parse-server (>=9.6.0-alpha.37, <=9.7.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.11 Source cves: CVE-2026-35200 Source advisory: OSV:GHSA-VR5F-2R24-W5HC...

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34777 via electron (>=40.0.0, <=40.7.0)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =40.1.0, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34777 Source advisory: OSV:GHSA-R5P7-GP4J-QHRX...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34774 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +9 more potentially affected by CVE-2026-34772 via electron (>=40.0.0, <=40.6.1)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =40.1.0, =2.0.4, =3.24.1 Source cves: CVE-2026-34772 Source advisory: OSV:GHSA-9W97-2464-8783...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34772 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34771 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34766 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @lucid-agents/mpp (1.0.0) +9 more potentially affected by unknown CVE via mppx (>=0.1.1, <=0.4.7)

mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.0.0-pr-153-20260307193247, =0.1.0, =0.1.1, =0.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8X4M-QW58-3PCX...

@grackle-ai/cli (>=0.0.2, <=0.70.2) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.2)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.2 Source cves: unknown CVE Source advisory: OSV:GHSA-W3HV-X4FP-6H6J...

@chainless-js/biometric-ed25519 (>=1.2.4, <=1.2.6), @forwardemail/wildduck (>=1.40.10, <=4.0.3) +17 more potentially affected by unknown CVE via fido2-lib (>=3.2.5, <=3.5.6)

fido2-lib NPM version =3.2.5, =1.2.4, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =6.6.6, =0.0.2, =0.0.1, =1.0.0-alpha.1, =1.2.3, =6.0.0, =5.8.30, =1.46.1, =1.46.25 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G3QJ-J598-CXMQ...

@2digits/tlo-mcp (>=0.1.0, <=0.1.10), @6qat/tcp-connection (>=0.2.6, <=0.2.9) +738 more potentially affected by CVE-2026-32887 via effect (>=3.0.0, <=3.19.19)

effect NPM version =3.0.0, =0.1.0, =0.2.6, =1.0.0, =0.1.0-alpha.1, =0.0.1, =0.1.0-alpha.1, =0.1.1, =0.0.1, =0.0.5, =0.0.1, =0.2.1, =0.4.2 - @arvkonstantin/framework-provider-local-pg 3.4.3 - @awstin/effect-zero-v3 0.1.0 and more Source cves: CVE-2026-32887 Source advisory: OSV:GHSA-38F7-945M-QR2G...

async-lease (>=0.1.0, <=0.1.2), fumio (0.1.0) +13 more potentially affected by unknown CVE via tokio-sync (>=0.1.8, <=0.2.0-alpha.6)

tokio-sync CARGO version =0.1.8, =0.1.0, =0.8.0, =0.9.0, =0.2.0-alpha.2, =0.3.0-alpha.2, =0.3.0-alpha.1, =0.1.0, =0.3.0-alpha.1, =0.3.0, =0.3.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0052...

aati (>=0.10.2, <=0.11.3), acpica-bindings (>=0.1.0, <=0.1.2) +917 more potentially affected by CVE-2026-33055 via tar (>=0.2.14, <=0.4.40)

tar CARGO version =0.2.14, =0.10.2, =0.1.0, =0.1.2, =0.2.0, =0.2.5-rc.5, =0.1.0-alpha.1, =0.0.1, =0.1.2, =0.2.0, =0.1.2, =0.1.2-dev1, =0.1.0, =0.1.2 and more Source cves: CVE-2026-33055 Source advisory: OSV:RUSTSEC-2026-0068...

0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +1916 more potentially affected by CVE-2026-33151 via socket.io-parser (>=4.0.1-rc1, <=4.2.5)

socket.io-parser NPM version =4.0.1-rc1, =1.0.49, =1.0.0, =0.0.28, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =0.0.9 and more Source cves: CVE-2026-33151 Source advisory: OSV:GHSA-677M-J7P3-52F9...