@neetly/jest-config (>=1.0.0-alpha.14 <=1.0.0-alpha.16), @powerlines/plugin-alloy (>=0.14.0 <=0.26.152) +21 more potentially affected by CVE-2026-49356 via @babel/core (>=8.0.0-alpha.1 <=8.0.0-rc.5)

@babel/core NPM version =8.0.0-alpha.1, =1.0.0-alpha.14, =0.14.0, =0.12.396, =0.6.149, =0.9.0, =0.12.0, =0.12.0, =0.2.99, =0.1.0, =0.1.0, =0.1.71, =0.3.0, =0.3.0, =0.1.0, =0.7.301, =0.7.460 and more Source cves: CVE-2026-49356 Source advisory: SNYK:JS-BABELCORE-17342497...

@neetly/jest-config (>=1.0.0-alpha.14 <=1.0.0-alpha.16), @powerlines/plugin-alloy (>=0.14.0 <=0.26.152) +21 more potentially affected by CVE-2026-49356 via @babel/core (>=8.0.0-alpha.1 <=8.0.0-rc.5)

@babel/core NPM version =8.0.0-alpha.1, =1.0.0-alpha.14, =0.14.0, =0.12.396, =0.6.149, =0.9.0, =0.12.0, =0.12.0, =0.2.99, =0.1.0, =0.1.0, =0.1.71, =0.3.0, =0.3.0, =0.1.0, =0.7.301, =0.7.460 and more Source cves: CVE-2026-49356 Source advisory: OSV:GHSA-4X5R-PXFX-6JF8...

0xgank-tea-advice-pull (=1.0.0), 0xgank-tea-balance-pencil (=1.0.0) +18579 more potentially affected by CVE-2026-49356 via @babel/core (>=7.0.0-beta.31 <=7.29.0)

@babel/core NPM version =7.0.0-beta.31, =7.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on @babel/core and may be impacted: - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory...

003-gas-convert (=1.0.1), 0x-hunter-core (>=1.0.0 <=1.0.1-5) +29218 more potentially affected by CVE-2026-48779 via ws (>=1.1.0 <=5.2.2)

ws NPM version =1.1.0, =1.0.0, =0.0.3, =1.1.0, =0.9.9, =1.0.0, =0.0.1, =0.11.3, =0.1.0, =1.0.2, =1.0.7 and more Source cves: CVE-2026-48779 Source advisory: OSV:GHSA-96HV-2XVQ-FX4P...

0.edsql (>=1.0.49 <=1.0.50), 0xlib (=5.6.6) +7747 more potentially affected by CVE-2026-48779 via ws (>=7.0.0 <=7.5.10)

ws NPM version =7.0.0, =1.0.49, =1.0.0, =0.1.0, =0.0.12, =0.0.12, =0.1.0, =1.0.22, =3.10.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-48779 Source advisory: OSV:GHSA-96HV-2XVQ-FX4P...

003-gas-convert (=1.0.1), 0x-hunter-core (>=1.0.0 <=1.0.1-5) +29218 more potentially affected by CVE-2026-48779 via ws (>=1.1.0 <=5.2.2)

ws NPM version =1.1.0, =1.0.0, =0.0.3, =1.1.0, =0.9.9, =1.0.0, =0.0.1, =0.11.3, =0.1.0, =1.0.2, =1.0.7 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

-fides-amor-et-lux (=1.0.0), -price-checker (>=1.0.0 <=1.0.5) +59934 more potentially affected by CVE-2026-48779 via ws (>=8.0.0 <=8.20.1)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.2.3 - 0g-orbit-cli =0.1.0 - 0g-orbit-core =0.1.0 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

02url-querystring-http (>=1.0.1 <=1.0.4), 04_nodeblog (=1.0.0) +15347 more potentially affected by CVE-2026-5079 via multer (>=1.0.3 <=2.1.1)

multer NPM version =1.0.3, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.3 and more Source cves: CVE-2026-5079 Source advisory: SNYK:JS-MULTER-17342512...

-react-file-list-components (=1.1.1), 01basicreact (>=0.1.0 <=0.1.9) +45932 more potentially affected by CVE-2026-12143 via form-data (>=3.0.0 <=3.0.4)

form-data NPM version =3.0.0, =0.1.0, =0.1.0, =0.1.6 - 0beny1s =1.1.6 - 0scarclassa =1.0.1 - 0scarclassb =1.0.1 - 0scarclassc =1.0.1 - 0scarclassd =1.0.1 - 0scarclasse =1.0.1 - 0scarclassf =1.0.1 - 0scarclassg =1.0.1 - 0scarclassh =1.0.1 - 0scarclassi =1.0.1 - 0scarclassj =1.0.1 - 0scarclassk...

aida-tools (>=0.1.0 <=0.1.3), apache-airflow-providers-mariadb (=1.0.0) +66 more potentially affected by CVE-2026-44172 via mariadb (>=1.0.11 <=2.0.0rc2)

mariadb PYPI version =1.0.11, =0.1.0, =0.0.1, =0.6.0, =1.0.1, =0.3.1, =0.1.0, =0.1.0, =0.1.4, =1.1.8, =2.0.5, =0.0.3, =0.0.1, =1.1.0, =1.4.0 and more Source cves: CVE-2026-44172 Source advisory: OSV:PYSEC-2026-217...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +4472 more potentially affected by CVE-2026-50010 via io.netty:netty-handler (>=4.2.0.Alpha1 <=4.2.14.Final)

io.netty:netty-handler MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =4.7.4, =4.7.4, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-50010 Source advisory: SNYK:JAVA-IONETTY-17334567...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +29726 more potentially affected by CVE-2026-50010 via io.netty:netty-handler (>=4.0.0.Alpha1 <=4.1.134.Final)

io.netty:netty-handler MAVEN version =4.0.0.Alpha1, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

adb-wifi-qr (=0.2.0), autonet-computer (>=0.1.2 <=0.1.3) +77 more potentially affected by CVE-2026-48045 via zeroconf (>=0.102.0 <=0.148.0)

zeroconf PYPI version =0.102.0, =0.1.2, =0.4.3.0, =1.4.0, =0.3.0, =1.1.0, =0.0.11, =0.1.24, =0.2.6, =2023.9.0, =0.1.688, =0.1.754 and more Source cves: CVE-2026-48045 Source advisory: SNYK:PYTHON-ZEROCONF-17318192...

autonet-computer (>=0.1.2 <=0.1.3), cir1-hldns (=1.6.14) +35 more potentially affected by CVE-2026-48045 via zeroconf (>=0.140.1 <=0.148.0)

zeroconf PYPI version =0.140.1, =0.1.2, =2025.2.0, =2026.5.0, =2026.5.0, =0.1.0, =3.0.0, =0.0.1, =1.0.0, =0.2.9, =0.6.0 - matrix-alt-cameras =0.0.1 and more Source cves: CVE-2026-48045 Source advisory: OSV:GHSA-9663-MQMP-P9MM...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +3037 more potentially affected by CVE-2026-48043 via io.netty:netty-codec-http2 (>=4.2.0.Alpha1 <=4.2.14.Final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-48043 Source advisory: SNYK:JAVA-IONETTY-17311220...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +19976 more potentially affected by CVE-2026-48043 via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.134.Final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.Beta4, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +3037 more potentially affected by CVE-2026-48043 via io.netty:netty-codec-http2 (>=4.2.0.Alpha1 <=4.2.14.Final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-48043 Source advisory: OSV:GHSA-C2GF-V879-257J...

com.childrengreens:amqp-multi-source-spring-boot-starter (=3.0), com.i360day:spring-boot-starter-amqp-invoker (>=4.0.0 <=4.0.1) +69 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-rabbit (>=4.0.0-M1 <=4.0.3)

org.springframework.amqp:spring-rabbit MAVEN version =4.0.0-M1, =4.0.0, =4.8.0-chi, =4.8.0-chi, =4.8.0-chi, =4.8.0-chi, =4.8.0-chi, =4.8.0-chi, =4.8.0-chi, =0.7.9, =0.7.9, =0.7.16 and more Source cves: CVE-2026-41714 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAMQP-17308787...

ai.langsa:ccaas-starter (>=0.1 <=cloud-0.3), ai.langsa:pom-ccaas-langsa (=0.1) +2174 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (>=3.0.0 <=3.5.11)

org.springframework.data:spring-data-keyvalue MAVEN version =3.0.0, =0.1, =1.0.0-20260516144515, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3, =2.0.0, =2.0.0, =2.0.0, =2.4.1 and more Source cves: CVE-2026-41719 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKDATA-17308644...

app.tozzi:jpa-search-helper (>=3.6.0 <=4.0.0), be.appify.prefab:prefab-annotation-processor (>=0.2.0 <=0.10.2) +2029 more potentially affected by CVE-2026-41695 via org.springframework.data:spring-data-commons (>=4.0.0 <=4.0.5)

org.springframework.data:spring-data-commons MAVEN version =4.0.0, =3.6.0, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.0, =0.5.0, =0.2.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41695 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKDATA-17295727...