4itech-schematics (>=11.0.0-0, <=11.3.0-1), @142vip/midway (>=0.1.6-alpha.2, <=0.1.6-alpha.12) +573 more potentially affected by CVE-2026-33672 via picomatch (>=2.1.1, <=2.3.1)

picomatch NPM version =2.1.1, =11.0.0-0, =0.1.6-alpha.2, =7.4.1, =0.0.1, =1.0.1, =0.0.2, =2.0.0, =9.0.0-alpha.28, =9.2.0-alpha.9, =9.2.0-alpha.9, =1.0.101, =1.1.0, =1.4.1 and more Source cves: CVE-2026-33672 Source advisory: SNYK:JS-PICOMATCH-15765513...

@10xsai/cloudflare-router-nx-plugin (1.0.0), @4itech/schematics (>=11.7.1, <=11.7.6) +1098 more potentially affected by CVE-2026-33671 via picomatch (>=4.0.0, <=4.0.3)

picomatch NPM version =4.0.0, =11.7.1, =1.2.0, =8.3.0-rc.2, =1.0.25, =0.0.17, =0.0.47, =0.0.1, =1.0.0, =1.0.0, =10.0.0-alpha.1, =10.0.0-prerelease.90, =13.0.0-next.10, =10.0.0-prerelease.90, =14.0.0-next.1 and more Source cves: CVE-2026-33671 Source advisory: SNYK:JS-PICOMATCH-15765511...

@10xsai/cloudflare-router-nx-plugin (1.0.0), @4itech/schematics (>=11.7.1, <=11.7.6) +1098 more potentially affected by CVE-2026-33671 via picomatch (>=4.0.0, <=4.0.3)

picomatch NPM version =4.0.0, =11.7.1, =1.2.0, =8.3.0-rc.2, =1.0.25, =0.0.17, =0.0.47, =0.0.1, =1.0.0, =1.0.0, =10.0.0-alpha.1, =10.0.0-prerelease.90, =13.0.0-next.10, =10.0.0-prerelease.90, =14.0.0-next.1 and more Source cves: CVE-2026-33671 Source advisory: OSV:GHSA-C2C7-RCM5-VVQJ...

4itech-schematics (>=11.0.0-0, <=11.3.0-1), @142vip/midway (>=0.1.6-alpha.2, <=0.1.6-alpha.12) +573 more potentially affected by CVE-2026-33671 via picomatch (>=2.1.1, <=2.3.1)

picomatch NPM version =2.1.1, =11.0.0-0, =0.1.6-alpha.2, =7.4.1, =0.0.1, =1.0.1, =0.0.2, =2.0.0, =9.0.0-alpha.28, =9.2.0-alpha.9, =9.2.0-alpha.9, =1.0.101, =1.1.0, =1.4.1 and more Source cves: CVE-2026-33671 Source advisory: OSV:GHSA-C2C7-RCM5-VVQJ...

4itech-schematics (>=11.0.0-0, <=11.3.0-1), @142vip/midway (>=0.1.6-alpha.2, <=0.1.6-alpha.12) +573 more potentially affected by CVE-2026-33671 via picomatch (>=2.1.1, <=2.3.1)

picomatch NPM version =2.1.1, =11.0.0-0, =0.1.6-alpha.2, =7.4.1, =0.0.1, =1.0.1, =0.0.2, =2.0.0, =9.0.0-alpha.28, =9.2.0-alpha.9, =9.2.0-alpha.9, =1.0.101, =1.1.0, =1.4.1 and more Source cves: CVE-2026-33671 Source advisory: SNYK:JS-PICOMATCH-15765511...

4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33671 via picomatch (3.0.1)

picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...

@klardaten/n8n-nodes-datevconnect (>=1.0.1, <=1.0.2), @n8n/ai-workflow-builder (>=0.14.0, <=0.30.2) +17 more potentially affected by CVE-2026-33665 via @n8n/constants (>=0.2.0, <=0.13.0)

@n8n/constants NPM version =0.2.0, =1.0.1, =0.14.0, =0.3.0, =0.3.0, =0.5.0, =0.2.0, =1.1.0, =1.28.0, =1.90.0, =1.90.0, =1.0.1, =0.3.3, =0.1.3, =0.2.0, =0.2.1 and more Source cves: CVE-2026-33665 Source advisory: SNYK:JS-N8NCONSTANTS-15837401...

@0xgraph/cli (>=0.0.1, <=0.2.1), @7speck/logger (>=1.0.2, <=1.0.3) +936 more potentially affected by CVE-2026-33532 via yaml (>=1.0.0, <=1.10.2)

yaml NPM version =1.0.0, =0.0.1, =1.0.2, =1.0.1, =0.0.1, =0.0.0-nightly-20240619-f62ef04, =1.6.3, =1.0.0, =0.9.1-pre.3, =0.11.1-pre.3, =0.6.1-pre.1, =1.0.0, =0.0.10, =2.9.1, =1.0.3, =0.6.6, =0.12.9 and more Source cves: CVE-2026-33532 Source advisory: SNYK:JS-YAML-15765520...

@0dotxyz/p0-ts-sdk (>=2.1.1, <=2.2.0-alpha.4), @0l00000l/auth (>=1.0.0, <=1.0.8) +2929 more potentially affected by CVE-2026-33532 via yaml (>=2.0.0, <=2.8.2)

yaml NPM version =2.0.0, =2.1.1, =1.0.0, =0.0.53, =0.0.31, =4.0.0, =4.2.0, =6.0.0, =0.0.3, =1.0.0, =7.0.0-beta.1, =0.1.0-alpha.1, =0.0.9, =2.0.0, =0.24.1-20230627140514, =0.25.1-20250326172337, =0.25.2 and more Source cves: CVE-2026-33532 Source advisory: OSV:GHSA-48C2-RRV3-QJMP...

@0xgraph/cli (>=0.0.1, <=0.2.1), @7speck/logger (>=1.0.2, <=1.0.3) +936 more potentially affected by CVE-2026-33532 via yaml (>=1.0.0, <=1.10.2)

yaml NPM version =1.0.0, =0.0.1, =1.0.2, =1.0.1, =0.0.1, =0.0.0-nightly-20240619-f62ef04, =1.6.3, =1.0.0, =0.9.1-pre.3, =0.11.1-pre.3, =0.6.1-pre.1, =1.0.0, =0.0.10, =2.9.1, =1.0.3, =0.6.6, =0.12.9 and more Source cves: CVE-2026-33532 Source advisory: OSV:GHSA-48C2-RRV3-QJMP...

@0dotxyz/p0-ts-sdk (>=2.1.1, <=2.2.0-alpha.4), @0l00000l/auth (>=1.0.0, <=1.0.8) +2929 more potentially affected by CVE-2026-33532 via yaml (>=2.0.0, <=2.8.2)

yaml NPM version =2.0.0, =2.1.1, =1.0.0, =0.0.53, =0.0.31, =4.0.0, =4.2.0, =6.0.0, =0.0.3, =1.0.0, =7.0.0-beta.1, =0.1.0-alpha.1, =0.0.9, =2.0.0, =0.24.1-20230627140514, =0.25.1-20250326172337, =0.25.2 and more Source cves: CVE-2026-33532 Source advisory: SNYK:JS-YAML-15765520...

@amedia/brick-mcp (>=0.0.0-vBRAND-20260313141110, <=1.0.3), @andesite-lab/andesite-core (>=1.60.2, <=1.61.0) +338 more potentially affected by CVE-2026-3635 via fastify (>=5.0.0, <=5.8.2)

fastify NPM version =5.0.0, =0.0.0-vBRAND-20260313141110, =1.60.2, =2.0.1, =1.1.1, =0.6.2, =0.1.1, =0.1.1, =0.6.0, =0.1.1, =0.0.35, =0.0.82, =0.0.1, =0.0.6, =0.1.68, =0.1.130 and more Source cves: CVE-2026-3635 Source advisory: OSV:GHSA-444R-CWP2-X5XF...

@brainbase-ai/action-read (0.0.1), @brainbase-ai/actions (>=3.2.105, <=3.2.107) +71 more potentially affected by CVE-2026-26831 via textract (>=1.1.1, <=2.5.0)

textract NPM version =1.1.1, =3.2.105, =0.0.0, =0.0.0, =0.0.0, =0.0.15, =0.0.0, =0.0.0, =0.1.0, =1.0.0-beta.70, =1.0.0, =0.1.1, =0.7.0, =0.17.0 and more Source cves: CVE-2026-26831 Source advisory: SNYK:JS-TEXTRACT-15874118...

@aaquib/whatsasenanpm (1.3.5), @alexandersen01/sharepoint-mcp-server-better (0.3.23) +86 more potentially affected by CVE-2026-26832 via node-tesseract-ocr (>=0.1.0, <=2.2.1)

node-tesseract-ocr NPM version =0.1.0, =1.0.10, =0.0.1, =2.3.50-snapshot-1724322551764, =2.0.0, =0.0.1, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-26832 Source advisory: SNYK:JS-NODETESSERACTOCR-15874141...

@datagica/read-document (0.1.0), dialog-formatter (>=0.2.0, <=0.2.2) potentially affected by CVE-2026-26831 via textract (>=2.1.1, <=2.4.0)

textract NPM version =2.1.1, =0.2.0, =0.2.2 Source cves: CVE-2026-26831 Source advisory: OSV:GHSA-9PCJ-M5RR-P28G...

@aaquib/whatsasenanpm (1.3.5), @alexandersen01/sharepoint-mcp-server-better (0.3.23) +81 more potentially affected by CVE-2026-26832 via node-tesseract-ocr (2.2.1)

node-tesseract-ocr NPM version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on node-tesseract-ocr and may be impacted: - @aaquib/whatsasenanpm 1.3.5 - @alexandersen01/sharepoint-mcp-server-better 0.3.23 - @artdotstyle/filepix =1.0.10, =0.0.1,...

allbot (>=0.1.1, <=0.1.70), multi-rest (>=1.3.0-1, <=1.4.5) potentially affected by CVE-2026-26833 via thumbler (1.1.2)

thumbler NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on thumbler and may be impacted: - allbot =0.1.1, =1.3.0-1, =1.4.5 Source cves: CVE-2026-26833 Source advisory: OSV:GHSA-MVHF-547C-H55R...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +123 more potentially affected by CVE-2026-33287 via liquidjs (>=10.2.0, <=10.22.0)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0, =1.0.0, =1.0.11 - @deconz-community/directus-extension-ddf-store 0.1.0 and more Source cves: CVE-2026-33287 Source advisory: OSV:GHSA-6Q5M-63H6-5X4V...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +146 more potentially affected by CVE-2026-33287 via liquidjs (>=10.2.0, <=10.25.0)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0, =1.0.10 and more Source cves: CVE-2026-33287 Source advisory: SNYK:JS-LIQUIDJS-15767938...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +123 more potentially affected by CVE-2026-33285 via liquidjs (>=10.2.0, <=10.22.0)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0, =1.0.0, =1.0.11 - @deconz-community/directus-extension-ddf-store 0.1.0 and more Source cves: CVE-2026-33285 Source advisory: OSV:GHSA-9R5M-9576-7F6X...