codehaus-plexus__plexus-archiver_CVE-2023-37460_4-7-1

Plexus-archiver 現在の master は https://github.com/codehaus-plexus/plexus-archiver にあります。 重要なヒント snyk.io のセキュリティチームからのヒントに基づき、潜在的なセキュリティ問題が発見されました。さらに、その潜在的なセキュリティ問題を防ぐためのパッチが提供されました。このパッチはリリース 3.6.0 に統合されています。 リリースノート 各リリースの詳細は Release Notes で確認できます。 Release 4.2.5. Release 4.2.4. Release 4.2.3...

@0xsequence/web3-onboard-plugin (2.0.5), @0xzoz/tallyho (>=2.0.11, <=2.0.14) +1793 more potentially affected by CVE-2026-84368 via joi (>=17.2.0, <=17.13.4)

joi NPM version =17.2.0, =2.0.11, =0.1.6-alpha.2, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.16.17-beta-0213b250, =1.8.31, =1.1.12, =1.7.1, =1.8.31, =1.0.0, =1.16.34-beta-20241113-102431-65542b84 and more Source cves: CVE-2026-84368 Source advisory: SNYK:JS-JOI-19498543...

@343dev/optimizt (>=12.0.0, <=13.0.0), @agilebot/vitepress-preset (>=0.8.9, <=0.9.6) +79 more potentially affected by CVE-2026-84369 via svgo (>=4.0.0, <=4.0.2)

svgo NPM version =4.0.0, =12.0.0, =0.8.9, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =2.47.0, =1.3.0-next.0, =3.0.0-next.0, =6.13.0, =0.0.1769658265953, =21.2.6, =1.6.9, =0.1.0-dev.00e4942, =0.3.0 and more Source cves: CVE-2026-84369 Source advisory: SNYK:JS-SVGO-19498536...

5ug-cli (>=1.0.72, <=1.4.0), @343dev/optimizt (6.0.0) +85 more potentially affected by CVE-2026-84369 via svgo (>=2.0.0, <=2.8.0)

svgo NPM version =2.0.0, =1.0.72, =1.1.2, =2.0.0-fix-trigger-remove-colors-config-e26731597751d1581014163b7e73df159cf80be3.1, =0.0.2-0, =4.55.0, =2.12.3-canary.621.14971.0, =2.1.0-beta-1, =2.1.0-beta-1, =2.1.8, =5.0.0, =0.0.1, =2.7.4, =3.59.1--canary.1316.b3452bb.0, =4.0.0--canary.2146.fe4f461.0...

@antfu/nip (0.1.1), @condu-feature/auto-package-exports (>=1.0.0, <=1.0.3) +103 more potentially affected by unknown CVE via @pnpm/config (>=1002.5.3, <=1004.11.5)

@pnpm/config NPM version =1002.5.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.2, =26.2.0, =1.0.6, =0.6.19, =0.1.0-beta.0, =0.2.12 - @mirta/rollup 0.3.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-PNPMCONFIG-19500674...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4320 more potentially affected by CVE-2026-83607 via @xmldom/xmldom (>=0.7.0, <=0.8.13)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83607 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499075...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4328 more potentially affected by CVE-2026-83616 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83616 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499070...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83615 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83615 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499069...

@142vip/egg (>=0.0.1-alpha.5, <=0.0.1-alpha.6), @142vip/egg-grpc-client (0.0.1-alpha.4) +496 more potentially affected by unknown CVE via mysql2 (>=3.0.0, <=3.21.1)

mysql2 NPM version =3.0.0, =0.0.1-alpha.5, =0.0.1-alpha.4, =0.0.1-alpha.1, =4.2.3, =15.0.0, =0.2.0, =1.0.0, =0.0.27, =1.0.43, =0.1.0, =0.3.1, =0.9.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-MYSQL2-19498545...

@142vip/egg (>=0.0.1-alpha.5, <=0.0.1-alpha.6), @142vip/egg-grpc-client (0.0.1-alpha.4) +517 more potentially affected by unknown CVE via mysql2 (>=3.0.0, <=3.23.0)

mysql2 NPM version =3.0.0, =0.0.1-alpha.5, =0.0.1-alpha.4, =0.0.1-alpha.1, =4.2.3, =15.0.0, =0.2.0, =1.0.0, =0.0.27, =1.0.43, =0.1.0, =0.3.1, =0.9.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-MYSQL2-19512510...

@crashtest-ai/cli (>=0.1.0, <=0.1.1), @crashtest-ai/report-viewer (>=0.1.0, <=0.1.1) +20 more potentially affected by CVE-2026-75931 via fast-uri (>=3.1.4, <=3.1.5)

fast-uri NPM version =3.1.4, =0.1.0, =0.1.0, =0.1.0, =1.5.40, =1.4.2, =1.2.0, =1.4.18, =0.2.0-alpha.5, =0.1.0, =0.1.6, =0.16.2-cloud-1, =0.1.5, =0.1.3, =3.38.11, =3.38.21 and more Source cves: CVE-2026-75931 Source advisory: SNYK:JS-FASTURI-19256867...

@ablula/blog-jinchan (>=0.0.1, <=0.0.9), @ablula/default-blog-theme (>=0.0.1, <=0.0.6) +10959 more potentially affected by CVE-2026-78180 via @alifd/next (>=1.9.23, <=1.27.34)

@alifd/next NPM version =1.9.23, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =0.0.2, =0.0.1, =0.1.5 and more Source cves: CVE-2026-78180 Source advisory: SNYK:JS-ALIFDNEXT-19233840...

@agent-tool-platform/ast-summarizer (>=0.1.0, <=0.1.1), @agent-tool-platform/runtime (>=0.1.0, <=0.1.2) +325 more potentially affected by CVE-2026-16732 via fastify (>=5.8.3, <=5.12.0)

fastify NPM version =5.8.3, =0.1.0, =0.1.0, =0.1.0, =0.0.0-vBETA-20260417080530, =0.0.1, =1.0.0, =0.0.0, =1.1.4, =4.0.0, =1.0.0-rc.2, =0.6.7, =0.6.7, =0.6.7, =0.6.8 and more Source cves: CVE-2026-16732 Source advisory: SNYK:JS-FASTIFY-18965771...

airi-test-task (0.1.0), dtaledesktop (>=0.0.1, <=0.1.3) +13 more potentially affected by CVE-2026-19896 via dtale (>=2.2.0, <=3.22.0)

dtale PYPI version =2.2.0, =0.0.1, =0.1.0, =0.0.0.35, =0.1.1, =0.0.14, =0.0.5, =0.0.10, =1.0.0, =0.3.3, =0.1.0, =0.1.5 Source cves: CVE-2026-19896 Source advisory: SNYK:PYTHON-DTALE-18912865...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21429 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.15.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-JSYAML-18593780...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.29), @142vip/vuepress (0.0.1-alpha.19) +120 more potentially affected by CVE-2026-71439 via mermaid (>=11.6.0, <=11.16.0)

mermaid NPM version =11.6.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.16.0, =0.35.0, =0.2.0, =1.0.1 - @cognitivesand/md2pdf 0.1.3 and more Source cves: CVE-2026-71439 Source advisory: SNYK:JS-MERMAID-18592314...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.29), @142vip/vuepress (0.0.1-alpha.19) +120 more potentially affected by CVE-2026-71437 via mermaid (>=11.5.0, <=11.16.0)

mermaid NPM version =11.5.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.16.0, =0.35.0, =0.2.0, =1.0.1 - @cognitivesand/md2pdf 0.1.3 and more Source cves: CVE-2026-71437 Source advisory: SNYK:JS-MERMAID-18592329...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +201 more potentially affected by CVE-2026-71436 via mermaid (>=10.6.1, <=10.9.5)

mermaid NPM version =10.6.1, =0.18.0-beta.0, =0.17.1-alkemio-5, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.0.1, =0.0.1, =7.1.0, =0.114.3, =0.141.3 and more Source cves: CVE-2026-71436 Source advisory: SNYK:JS-MERMAID-18592327...

@bloggrify/bento (>=3.0.0, <=3.1.0), @bloggrify/core (>=3.0.0, <=3.3.0) +19 more potentially affected by CVE-2026-71321 via @nuxt/nitro-server (>=4.2.0, <=4.5.0)

@nuxt/nitro-server NPM version =4.2.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.2.2-depup.0, =10.0.2-rc.5, =1.1.11, =1.0.8, =1.6.0-rc.3, =0.4.5, =3.0.0-dev.27, =1.0.0, =4.2.0, =0.5.0, =0.6.0 and more Source cves: CVE-2026-71321 Source advisory: SNYK:JS-NUXTNITROSERVER-18565113...

@whalent/agent (0.3.294) potentially affected by unknown CVE via @whalent/agent-core (0.3.294)

@whalent/agent-core NPM version 0.3.294 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.294 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...