@aikidosec/broker-client (>=1.0.47, <=1.0.50), @kirick/ip (0.2.1) +2 more potentially affected by CVE-2026-54272 via ip-address (>=10.1.1, <=10.2.0)

ip-address NPM version =10.1.1, =1.0.47, =0.1.3, =7.6.5-beta.0, =8.0.3 Source cves: CVE-2026-54272 Source advisory: SNYK:JS-IPADDRESS-18343249...

003-gas-convert (1.0.1), 108-gas-convert (1.0.0) +9556 more potentially affected by CVE-2018-1002203 +2 more via unzipper (>=0.3.0, <=0.12.5)

unzipper NPM version =0.3.0, =4.3.4, =2.0.0, =3.0.0, =2.0.0, =1.0.0, =1.0.26, =0.0.80, =1.0.0-beta.1, =0.0.1, =1.0.7, =1.3.0 and more Source cves: CVE-2018-1002203, CVE-2026-17514, CVE-2026-59972 Source advisory: SNYK:JS-UNZIPPER-18365659...

0lever-utils (>=0.1.0, <=0.1.6), airavata-python-sdk-test (>=0.0.1, <=0.0.8) +162 more potentially affected by CVE-2026-66053 via thrift (>=0.9.2, <=0.23.0)

thrift PYPI version =0.9.2, =0.1.0, =0.0.1, =1.0.1, =0.6.6, =2.7.0rc1, =0.0.32, =0.1.9, =0.1.0, =4.0.5a1, =0.0.1, =1.0.1, =1.0.3 and more Source cves: CVE-2026-66053 Source advisory: OSV:GHSA-HWRJ-9RR4-24XH...

0lever-utils (>=0.1.0, <=0.1.6), airavata-python-sdk-test (>=0.0.1, <=0.0.8) +162 more potentially affected by CVE-2026-43871 via thrift (>=0.9.2, <=0.23.0)

thrift PYPI version =0.9.2, =0.1.0, =0.0.1, =1.0.1, =0.6.6, =2.7.0rc1, =0.0.32, =0.1.9, =0.1.0, =4.0.5a1, =0.0.1, =1.0.1, =1.0.3 and more Source cves: CVE-2026-43871 Source advisory: OSV:GHSA-8WV5-X4W7-5GWW...

@0xd541ecb3/byte-babe (>=1.0.0, <=1.2.1), @514labs/aurora-mcp (>=0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, <=0.0.64) +729 more potentially affected by CVE-2026-55968 via thrift (>=0.6.0-1, <=0.23.0)

thrift NPM version =0.6.0-1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.0-dev, =1.0.0, =0.9.0, =0.3.0, =0.0.1, =0.2.0, =0.2.0, =0.1.0, =1.0.0-beta.1, =1.0.0-beta.6 and more Source cves: CVE-2026-55968 Source advisory: SNYK:JS-THRIFT-18388780...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +1044 more potentially affected by CVE-2026-45112 via org.apache.thrift:libthrift (>=0.19.0, <=0.23.0)

org.apache.thrift:libthrift MAVEN version =0.19.0, =0.0.1, =0.0.1, =0.0.1, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =5.0.1, =2.0.0, =2.4.1 - be.vlaanderen.informatievlaanderen.ldes.client:event-stream-properties-fetcher 2.12.0 - be.vlaanderen.informatievlaanderen.ldes.client:ldes-client 2.12.0 -...

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0219...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +447 more potentially affected by CVE-2026-17459 via com.sparkjava:spark-core (>=1.0, <=2.9.4)

com.sparkjava:spark-core MAVEN version =1.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.6.1,...

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0216...

@frontmcp/plugin-skilled-openapi (>=0.0.1, <=1.5.5) potentially affected by unknown CVE via @frontmcp/adapters (>=1.0.4, <=1.5.5)

@frontmcp/adapters NPM version =1.0.4, =0.0.1, =1.5.5 Source cves: unknown CVE Source advisory: OSV:GHSA-8Q49-2H5H-434X...

aws-smithy-http-server-python (>=0.44.0, <=0.52.0) potentially affected by CVE-2026-16756 via aws-smithy-http-server (>=0.44.0, <=0.52.0)

aws-smithy-http-server CARGO version =0.44.0, =0.44.0, =0.52.0 Source cves: CVE-2026-16756 Source advisory: OSV:GHSA-JVXP-QMX7-GJPX...

@bedrock/quasar (>=10.0.1, <=11.0.0), @cabloy/front-quasar (>=5.0.82, <=5.0.96) +10 more potentially affected by CVE-2026-73647 via quasar (>=2.0.0-beta.1, <=2.18.6)

quasar NPM version =2.0.0-beta.1, =10.0.1, =5.0.82, =2.0.1, =0.1.1-beta.0, =1.0.25-alpha.11, =1.0.183, =1.0.0, =5.0.97, =5.0.215 Source cves: CVE-2026-73647 Source advisory: OSV:GHSA-3R53-75J5-3G7J...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by unknown CVE via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319522...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: OSV:GHSA-GM3R-Q2WP-HW87...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by unknown CVE via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319527...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73411 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73411 Source advisory: OSV:GHSA-Q53C-4PRM-W95Q...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by unknown CVE via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319518...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73412 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73412 Source advisory: OSV:GHSA-6V4M-FW66-8R4X...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by unknown CVE via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319526...

io.github.valdemargr:gql-http4s_2.13 (>=0.1-a2fae94, <=0.1-6257648), io.github.valdemargr:gql-server-http4s_2.13 (>=0.1-5acc59b, <=0.2.8-23-b552e1c) +3 more potentially affected by CVE-2026-73495 via org.http4s:blaze-http_2.13 (>=1.0.0-m33, <=1.0.0-m41)

org.http4s:blaze-http2.13 MAVEN version =1.0.0-m33, =0.1-a2fae94, =0.1-5acc59b, =1.0.0-m33, =1.0.0-m33, =1.0.0-m33, =1.0.0-m41 Source cves: CVE-2026-73495 Source advisory: GHSA-46Q4-43PH-C6FR...