@fox-hound-tools/protobuf-grpc-json-transcoding (>=0.70.0, <=0.71.0), @octocloud/typespec (>=0.1.16, <=0.1.37) potentially affected by unknown CVE via @typespec/openapi3 (>=1.0.0, <=1.7.0)

@typespec/openapi3 NPM version =1.0.0, =0.70.0, =0.1.16, =0.1.37 Source cves: unknown CVE Source advisory: OSV:GHSA-2Q42-4Q24-7RGV...

@azure-tools/typespec-rust (>=0.40.0, <=0.41.5), @fox-hound-tools/protobuf-grpc-json-transcoding (>=0.70.0, <=0.71.0) +7 more potentially affected by unknown CVE via @typespec/compiler (>=1.0.0, <=1.14.0)

@typespec/compiler NPM version =1.0.0, =0.40.0, =0.70.0, =1.0.0-Preview.4, =1.0.0, =1.0.0-Preview.5, =0.1.16, =0.1.0, =0.1.6 - typespec-swift 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-2Q42-4Q24-7RGV...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +1572 more potentially affected by CVE-2026-77078 via multer (>=2.0.0, <=2.2.0)

multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.0-alpha.119, =1.2.1-dev.3, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.0.10, =0.6.2 and more Source cves: CVE-2026-77078 Source advisory: OSV:GHSA-WC9G-MQFW-JRWM...

@aliceo2/bookkeeping (>=1.19.0, <=1.20.0), @beyondnet/evolith-cli (>=1.2.0, <=1.3.2) +65 more potentially affected by CVE-2026-77037 via multer (2.2.0)

multer NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on multer and may be impacted: - @aliceo2/bookkeeping =1.19.0, =1.2.0, =1.2.0, =2026.7.0, =5.7.5, =11.1.29-depup.0, =0.1.0, =0.1.0, =11.0.62, =1.2.34, =12.0.0, =3.0.0, =3.0.0, =3.0.0...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +1572 more potentially affected by CVE-2026-77063 via multer (>=2.0.0, <=2.2.0)

multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.0-alpha.119, =1.2.1-dev.3, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.0.10, =0.6.2 and more Source cves: CVE-2026-77063 Source advisory: OSV:GHSA-QVFW-J98X-7Q72...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +1572 more potentially affected by CVE-2026-82333 via multer (>=2.0.0, <=2.2.0)

multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.0-alpha.119, =1.2.1-dev.3, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.0.10, =0.6.2 and more Source cves: CVE-2026-82333 Source advisory: OSV:GHSA-535W-7CP7-47Q4...

20231122-npm (1.0.0), 2048.io (0.0.1) +6536 more potentially affected by CVE-2026-15603 via morgan (>=1.0.0, <=1.11.0)

morgan NPM version =1.0.0, =1.0.2, =1.0.0, =0.2.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.67 and more Source cves: CVE-2026-15603 Source advisory: OSV:GHSA-JXFW-X594-9X9M...

@apisurf/canonui (>=0.1.1, <=0.1.4), @apisurf/deckui (>=0.1.1, <=0.1.2) +16 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =1.0.1, =1.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-26W7-CXV4-GFX2...

@apisurf/canonui (>=0.1.1, <=0.1.4), @apisurf/deckui (>=0.1.1, <=0.1.2) +16 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =1.0.1, =1.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-ASTRO-19652369...

@apisurf/canonui (>=0.1.1, <=0.1.4), @apisurf/deckui (>=0.1.1, <=0.1.2) +14 more potentially affected by CVE-2026-84376 via astro (>=7.0.2, <=7.2.2)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-84376 Source advisory: OSV:GHSA-376H-93R7-7G6F...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22218 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RGJ7-G3M4-5G8C...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22218 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: unknown CVE Source advisory: SNYK:JS-SHARP-19653587...

02.aula (1.0.0), 0xrtest (1.0.0) +10781 more potentially affected by CVE-2026-84375 via js-yaml (>=4.0.0, <=4.3.1)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.0.0-develop-20260120180031, =0.5.6 - @0xr404/0xrtest 1.0.0 and more Source cves: CVE-2026-84375 Source advisory: OSV:GHSA-2883-XCG3-V3HH...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21433 more potentially affected by CVE-2026-84375 via js-yaml (>=3.0.0, <=3.15.1)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-84375 Source advisory: OSV:GHSA-2883-XCG3-V3HH...

@a3s-lab/office (>=0.1.0, <=0.312.0), @acms-subir/core (>=0.3.4, <=0.3.12) +298 more potentially affected by unknown CVE via @tiptap/core (>=3.7.0, <=3.30.4)

@tiptap/core NPM version =3.7.0, =0.1.0, =0.3.4, =0.2.0, =0.2.0-nightly-20260914153919, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.1.26, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819143124, =1.0.0, =0.2.0, =2.2.2, =1.3.7-beta.22, =3.0.0-beta.4 and more Source cves: unknown CVE...

@a3s-lab/office (>=0.1.0, <=0.312.0), @acms-subir/core (>=0.3.4, <=0.3.12) +298 more potentially affected by unknown CVE via @tiptap/core (>=3.7.0, <=3.30.4)

@tiptap/core NPM version =3.7.0, =0.1.0, =0.3.4, =0.2.0, =0.2.0-nightly-20260914153919, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.1.26, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819143124, =1.0.0, =0.2.0, =2.2.2, =1.3.7-beta.22, =3.0.0-beta.4 and more Source cves: unknown CVE...

@3ngram/server (>=1.2.6, <=1.8.2), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +965 more potentially affected by CVE-2026-84365 via hono (>=4.0.0, <=4.13.4)

hono NPM version =4.0.0, =1.2.6, =0.1.8-fix.3, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.148, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.5 and more Source cves: CVE-2026-84365 Source advisory: OSV:GHSA-GQVV-2MRQ-WPJV...

@3ngram/server (>=1.2.6, <=1.8.2), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +965 more potentially affected by CVE-2026-84364 via hono (>=4.0.0, <=4.13.4)

hono NPM version =4.0.0, =1.2.6, =0.1.8-fix.3, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.148, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.5 and more Source cves: CVE-2026-84364 Source advisory: OSV:GHSA-G6GW-C38X-MQFC...

@3ngram/server (>=1.2.6, <=1.8.2), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +965 more potentially affected by CVE-2026-84363 via hono (>=4.0.0, <=4.13.4)

hono NPM version =4.0.0, =1.2.6, =0.1.8-fix.3, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.148, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.5 and more Source cves: CVE-2026-84363 Source advisory: OSV:GHSA-CRVJ-82CR-HJCX...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +246 more potentially affected by CVE-2026-84370 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-84370 Source advisory: OSV:GHSA-W27V-7Q3P-W38R...