6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1080 more potentially affected by CVE-2026-83607 via @xmldom/xmldom (>=0.9.0, <=0.9.10)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.8.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-83607 Source advisory: OSV:GHSA-W2RR-34G9-RVRJ...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4329 more potentially affected by CVE-2026-83607 via @xmldom/xmldom (>=0.7.0, <=0.8.13)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83607 Source advisory: OSV:GHSA-W2RR-34G9-RVRJ...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4329 more potentially affected by CVE-2026-83605 via @xmldom/xmldom (>=0.7.0, <=0.8.13)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83605 Source advisory: OSV:GHSA-4W3W-2RP5-G8JM...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11358 more potentially affected by CVE-2026-83605 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.11.3-alpha.1660, =0.12.1-alpha.1671 and more Source cves: CVE-2026-83605 Source advisory: OSV:GHSA-4W3W-2RP5-G8JM...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1080 more potentially affected by CVE-2026-83605 via @xmldom/xmldom (>=0.9.0, <=0.9.10)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.8.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-83605 Source advisory: OSV:GHSA-4W3W-2RP5-G8JM...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +176 more potentially affected by CVE-2026-69222 via liquidjs (>=10.2.0, <=10.27.1)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.4.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.32.6 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-69222 Source advisory:...

@accounter/client (>=0.0.12-alpha-20260616111400-042980593a256ba48203b66c0e7e022e45b91fbd, <=0.1.0-alpha-20260806092250-bc394b1d7590fd72a701aba3bdd0e263201e18ab), @blinkk/root-cms (>=3.4.1, <=3.5.1) +36 more potentially affected by CVE-2026-85063 via csv-parse (>=7.0.0, <=7.0.1)

csv-parse NPM version =7.0.0, =0.0.12-alpha-20260616111400-042980593a256ba48203b66c0e7e022e45b91fbd, =3.4.1, =0.1.4, =0.1.0, =0.1.0, =0.1.0, =0.53.29, =20260617.1750.25, =20260617.1750.26, =0.15.2, =0.13.1, =0.13.1, =0.11.1, =0.11.3 and more Source cves: CVE-2026-85063 Source advisory:...

pranx (>=0.1.0-beta.10, <=0.1.0-beta.11) potentially affected by CVE-2026-72925 via @swc/html (1.13.5)

@swc/html NPM version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on @swc/html and may be impacted: - pranx =0.1.0-beta.10, =0.1.0-beta.11 Source cves: CVE-2026-72925 Source advisory: OSV:GHSA-5QR2-V392-M9G8...

ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +3052 more potentially affected by CVE-2026-86513 via com.github.java-json-tools:jackson-coreutils (>=1.9, <=2.0)

com.github.java-json-tools:jackson-coreutils MAVEN version =1.9, =0.1.0, =0.1.0, =0.4.0, =1.0.6, =1.0.28, =1.0.6, =1.0.0, =1.3.3, =0.8.38, =0.0.6, =0.0.6, =0.1.1, =0.1.0, =1.1.0, =1.2.3 and more Source cves: CVE-2026-86513 Source advisory: SNYK:JAVA-COMGITHUBJAVAJSONTOOLS-19644209...

@sap/cds-dk (>=6.8.0, <=6.8.3) potentially affected by CVE-2026-76969 via @sap/cds-mtxs (1.8.5)

@sap/cds-mtxs NPM version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/cds-mtxs and may be impacted: - @sap/cds-dk =6.8.0, =6.8.3 Source cves: CVE-2026-76969 Source advisory: OSV:GHSA-955M-RR6M-2F9V...

ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +3052 more potentially affected by CVE-2026-86321 via com.github.java-json-tools:jackson-coreutils (>=1.9, <=2.0)

com.github.java-json-tools:jackson-coreutils MAVEN version =1.9, =0.1.0, =0.1.0, =0.4.0, =1.0.6, =1.0.28, =1.0.6, =1.0.0, =1.3.3, =0.8.38, =0.0.6, =0.0.6, =0.1.1, =0.1.0, =1.1.0, =1.2.3 and more Source cves: CVE-2026-86321 Source advisory: SNYK:JAVA-COMGITHUBJAVAJSONTOOLS-19644208...

@8medusa/medusa-oas-cli (>=2.7.0, <=2.12.8), @akbarsafari00/bonyan (>=5.52.1-fa.2, <=5.52.1-fa.6) +109 more potentially affected by CVE-2026-85024 via undici (>=6.25.0, <=6.28.0)

undici NPM version =6.25.0, =2.7.0, =5.52.1-fa.2, =5.52.1-fa.5, =0.1.0-rc.27, =0.1.0-rc.27, =0.0.29, =1.0.7, =2.4.0, =5.3.0-beta.0, =0.1.55-beta.2, =1.3.0, =1.3.0, =1.3.0, =1.0.0, =1.0.5 and more Source cves: CVE-2026-85024 Source advisory: SNYK:JS-UNDICI-19635226...

3xhaustpi (>=0.1.3, <=0.2.5), @0x0.bug/pi-coding-agent (>=1.0.0, <=1.0.9) +1541 more potentially affected by CVE-2026-85024 via undici (>=8.1.0, <=8.10.1)

undici NPM version =8.1.0, =0.1.3, =1.0.0, =0.1.0, =0.3.5, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a -...

@01.software/cli (>=0.3.0, <=0.10.3), @01.software/sdk (>=0.4.0, <=0.29.0) +1484 more potentially affected by CVE-2026-85024 via undici (>=7.28.0, <=7.29.0)

undici NPM version =7.28.0, =0.3.0, =0.4.0, =1.0.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =1.0.0, =1.3.2, =1.7.1 and more Source cves: CVE-2026-85024 Source advisory: SNYK:JS-UNDICI-19635226...

3xhaustpi (>=0.1.3, <=0.2.5), @0x0.bug/pi-coding-agent (>=1.0.0, <=1.0.9) +1566 more potentially affected by CVE-2026-85014 via undici (>=8.0.0, <=8.10.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.0, =0.3.5, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a -...

org.webjars.npm:actions__core (>=1.10.0, <=1.11.1), org.webjars.npm:actions__http-client (>=2.2.1, <=2.2.3) +14 more potentially affected by CVE-2026-85014 via org.webjars.npm:undici (>=4.12.2, <=5.29.0)

org.webjars.npm:undici MAVEN version =4.12.2, =1.10.0, =2.2.1, =0.1.16, =0.1.28 - org.webjars.npm:elasticelasticsearch 8.6.0 - org.webjars.npm:elastictransport 8.3.1 - org.webjars.npm:firebase 10.13.0 - org.webjars.npm:firebaseauth 1.7.7 - org.webjars.npm:firebaseauth-compat 0.5.12 -...

@01.software/cli (>=0.1.1, <=0.10.3), @01.software/sdk (>=0.0.1-251008.90016, <=0.29.0) +2064 more potentially affected by CVE-2026-85014 via undici (>=7.0.0, <=7.29.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =1.0.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =1.0.0, =1.52.3 and more Source cves: CVE-2026-85014 Source advisory: SNYK:JS-UNDICI-19635222...

@37chengshan/ompweb (>=0.3.5, <=5.1.9), @abox-dev/cli (>=0.1.0, <=0.2.1) +232 more potentially affected by CVE-2026-85152 via undici (>=8.10.0, <=8.10.1)

undici NPM version =8.10.0, =0.3.5, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.8.9, =1.0.0, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =0.79.0, =0.85.0 and more Source cves: CVE-2026-85152 Source advisory: SNYK:JS-UNDICI-19635224...

org.webjars.npm:actions__core (>=1.10.0, <=1.11.1), org.webjars.npm:actions__http-client (>=2.2.1, <=2.2.3) +14 more potentially affected by CVE-2026-85008 via org.webjars.npm:undici (>=4.12.2, <=5.29.0)

org.webjars.npm:undici MAVEN version =4.12.2, =1.10.0, =2.2.1, =0.1.16, =0.1.28 - org.webjars.npm:elasticelasticsearch 8.6.0 - org.webjars.npm:elastictransport 8.3.1 - org.webjars.npm:firebase 10.13.0 - org.webjars.npm:firebaseauth 1.7.7 - org.webjars.npm:firebaseauth-compat 0.5.12 -...

3xhaustpi (>=0.1.3, <=0.2.5), @0x0.bug/pi-coding-agent (>=1.0.0, <=1.0.9) +1566 more potentially affected by CVE-2026-85008 via undici (>=8.0.0, <=8.10.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.0, =0.3.5, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a -...