@aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3), @activepieces/piece-ai (>=0.3.1, <=0.3.4) +739 more potentially affected by CVE-2026-71849 via hono (>=4.7.0, <=4.12.33)

hono NPM version =4.7.0, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-71849 Source advisory: OSV:GHSA-79QM-7RJ5-M7R9...

@aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3), @activepieces/piece-ai (>=0.3.1, <=0.3.4) +377 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-71848 Source advisory: SNYK:JS-HONO-18593786...

@aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3), @activepieces/piece-ai (>=0.3.1, <=0.3.4) +377 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-71848 Source advisory: OSV:GHSA-54FX-42GC-7VW4...

mkdocs-techdocs-core (1.5.2) potentially affected by CVE-2026-67422 via pymdown-extensions (10.13.0)

pymdown-extensions PYPI version 10.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core 1.5.2 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

mkdocs-techdocs-core (>=1.5.3, <=1.5.4), mkdocs-zettelkasten (>=0.2.1, <=0.3.1) potentially affected by CVE-2026-67422 via pymdown-extensions (10.14.3)

pymdown-extensions PYPI version 10.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core =1.5.3, =0.2.1, =0.3.1 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

mkdocs-note (0.0.1), mkdocs-zettelkasten (>=0.4.0, <=0.4.2) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.15.0)

pymdown-extensions PYPI version 10.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-note 0.0.1 - mkdocs-zettelkasten =0.4.0, =0.0.1, =0.0.7 Source cves: CVE-2026-67422 Source advisory:...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4646 more potentially affected by CVE-2026-56818 via io.netty:netty-codec-redis (>=4.1.0.final, <=4.1.135.final)

io.netty:netty-codec-redis MAVEN version =4.1.0.final, =0.0.1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =0.0.1, =5.1.0, =2.0.21, =2.0.28 and more Source cve...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +20 more potentially affected by CVE-2026-66062 via @sveltejs/kit (>=2.0.0, <=2.70.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =0.51.14, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-66062 Source advisory: GHSA-29G2-3RMR-QM68...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +20 more potentially affected by CVE-2026-66062 via @sveltejs/kit (>=2.0.0, <=2.70.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =0.51.14, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-66062 Source advisory: SNYK:JS-SVELTEJSKIT-18592743...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-72744 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +12 more potentially affected by CVE-2026-72744 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.2.5, =1.6.0-rc.3, =1.0.0-alpha.17, =0.15.0, =0.1.0, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: OSV:GHSA-7C4V-FWGW-9RF7...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +12 more potentially affected by CVE-2026-72744 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.2.5, =1.6.0-rc.3, =1.0.0-alpha.17, =0.15.0, =0.1.0, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-72744 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-72744 Source advisory: OSV:GHSA-7C4V-FWGW-9RF7...

@qingwave/cclens (>=0.1.0, <=0.2.0), nuxt (>=3.21.7, <=3.21.9) potentially affected by CVE-2026-72744 via @nuxt/nitro-server (>=3.21.7, <=3.21.9)

@nuxt/nitro-server NPM version =3.21.7, =0.1.0, =3.21.7, =3.21.9 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXTNITROSERVER-18593816...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +14 more potentially affected by CVE-2026-72744 via @nuxt/nitro-server (>=4.4.7, <=4.5.0)

@nuxt/nitro-server NPM version =4.4.7, =3.2.0, =4.5.0-depup.0, =1.13.12, =1.2.5, =1.6.0-rc.3, =1.0.0-alpha.17, =0.15.0, =0.1.0, =1.0.0, =4.4.7, =0.6.0-rc.4, =0.2.3, =0.3.0-alpha.2 and more Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXTNITROSERVER-18593816...

android-category (>=0.0.3, <=0.0.4), ant-cli (0.0.1) +34 more potentially affected by CVE-2026-76220 via gitpython (2.1.11)

gitpython PYPI version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - android-category =0.0.3, =0.0.2, =0.3.0, =0.0.2, =0.12.4rc1, =0.1.26.dev1542857464, =0.2.3, =0.1.0, =0.0.1, =1.2.5, =0.1.0.0b1, =0.1.3 and mo...

bento-cli (>=0.1.0, <=0.1.1), walletlib (0.1.0) potentially affected by CVE-2026-76220 via gitpython (2.1.14)

gitpython PYPI version 2.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bento-cli =0.1.0, =0.1.1 - walletlib 0.1.0 Source cves: CVE-2026-76220 Source advisory: OSV:GHSA-WVPP-8HX9-P66J...

sealights-python-agent (>=0.2.213, <=0.2.247) potentially affected by CVE-2026-76220 via gitpython (2.1.13)

gitpython PYPI version 2.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - sealights-python-agent =0.2.213, =0.2.247 Source cves: CVE-2026-76220 Source advisory: OSV:GHSA-WVPP-8HX9-P66J...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +772 more potentially affected by CVE-2026-76221 via gitpython (>=3.0.0, <=3.1.57)

gitpython PYPI version =3.0.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-76221 Source advisory: OSV:GHSA-JM78-9FVV-MHGR...