@godscene/playground-electron (1.7.22), @godscene/visualizer (1.7.22) potentially affected by unknown CVE via @godscene/web (1.7.22)

@godscene/web NPM version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on @godscene/web and may be impacted: - @godscene/playground-electron 1.7.22 - @godscene/visualizer 1.7.22 Source cves: unknown CVE Source advisory: SNYK:JS-GODSCENEWEB-18550...

shadowmd (8.6.87), shadowmd-baileys (>=8.6.49, <=8.6.91) potentially affected by unknown CVE via @shadowmd/libsignal-node (8.6.59)

@shadowmd/libsignal-node NPM version 8.6.59 is affected by a known vulnerability. The following packages have a transitive dependency on @shadowmd/libsignal-node and may be impacted: - shadowmd 8.6.87 - shadowmd-baileys =8.6.49, =8.6.91 Source cves: unknown CVE Source advisory:...

datatran (1.5.0), log-serialize (2.1.1) potentially affected by unknown CVE via proto-bin (2.5.3)

proto-bin NPM version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on proto-bin and may be impacted: - datatran 1.5.0 - log-serialize 2.1.1 Source cves: unknown CVE Source advisory: SNYK:JS-PROTOBIN-18385342...

@merceas/anchor (>=0.32.1, <=0.32.3) potentially affected by unknown CVE via @merceas/cross-fetch (3.1.9)

@merceas/cross-fetch NPM version 3.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @merceas/cross-fetch and may be impacted: - @merceas/anchor =0.32.1, =0.32.3 Source cves: unknown CVE Source advisory: SNYK:JS-MERCEASCROSSFETCH-18487713...

@osmura/merkletreejs (>=0.6.0, <=0.6.2) potentially affected by unknown CVE via @osmura/treeify (1.1.0)

@osmura/treeify NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @osmura/treeify and may be impacted: - @osmura/merkletreejs =0.6.0, =0.6.2 Source cves: unknown CVE Source advisory: GHSA-PQVP-4H2C-RQJ5...

@whalent/agent (0.3.262) potentially affected by unknown CVE via @whalent/agent-core (0.3.262)

@whalent/agent-core NPM version 0.3.262 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.262 Source cves: unknown CVE Source advisory: GHSA-M58H-V643-JMMW...

@whalent/agent (0.3.276) potentially affected by unknown CVE via @whalent/agent-core (0.3.276)

@whalent/agent-core NPM version 0.3.276 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.276 Source cves: unknown CVE Source advisory: GHSA-M58H-V643-JMMW...

@whalent/agent (0.3.277) potentially affected by unknown CVE via @whalent/agent-core (0.3.277)

@whalent/agent-core NPM version 0.3.277 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.277 Source cves: unknown CVE Source advisory: GHSA-M58H-V643-JMMW...

@whalent/agent (0.3.255) potentially affected by unknown CVE via @whalent/agent-core (0.3.255)

@whalent/agent-core NPM version 0.3.255 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.255 Source cves: unknown CVE Source advisory: GHSA-M58H-V643-JMMW...

@aikidosec/broker-client (>=1.0.47, <=1.0.50), @kirick/ip (0.2.1) +2 more potentially affected by CVE-2026-54272 via ip-address (>=10.1.1, <=10.2.0)

ip-address NPM version =10.1.1, =1.0.47, =0.1.3, =7.6.5-beta.0, =8.0.3 Source cves: CVE-2026-54272 Source advisory: SNYK:JS-IPADDRESS-18343249...

be.personify.iam:personify-frontend (>=1.5.4.release, <=1.5.8.release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (>=4.0.0, <=5.0.0) +304 more potentially affected by CVE-2026-66390 via org.apache.wicket:wicket-core (>=10.0.0, <=10.9.1)

org.apache.wicket:wicket-core MAVEN version =10.0.0, =1.5.4.release, =4.0.0, =4.0.0, =1.0.0, =4.0.11, =4.0.3, =4.0.4, =7.0.3, =7.0.3, =7.0.11, =7.0.3, =7.0.3, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-66390 Source advisory: MEND:CVE-2026-66390...

003-gas-convert (1.0.1), 108-gas-convert (1.0.0) +9558 more potentially affected by CVE-2018-1002203 +2 more via unzipper (>=0.3.0, <=0.12.5)

unzipper NPM version =0.3.0, =4.3.4, =2.0.0, =3.0.0, =2.0.0, =1.0.0, =1.0.26, =0.0.80, =1.0.0-beta.1, =0.0.1, =1.0.7, =1.3.0 and more Source cves: CVE-2018-1002203, CVE-2026-17514, CVE-2026-59972 Source advisory: SNYK:JS-UNZIPPER-18365659...

003-gas-convert (1.0.1), 108-gas-convert (1.0.0) +8409 more potentially affected by CVE-2026-17514 via unzipper (>=0.3.0, <=0.12.3)

unzipper NPM version =0.3.0, =4.3.4, =2.0.0, =3.0.0, =2.0.0, =1.0.0, =1.0.26, =0.0.80, =1.0.0-beta.1, =0.0.1, =1.0.7, =1.3.0 and more Source cves: CVE-2026-17514 Source advisory: MEND:CVE-2026-17514...

0lever-utils (>=0.1.0, <=0.1.6), airavata-python-sdk-test (>=0.0.1, <=0.0.8) +162 more potentially affected by CVE-2026-66053 via thrift (>=0.9.2, <=0.23.0)

thrift PYPI version =0.9.2, =0.1.0, =0.0.1, =1.0.1, =0.6.6, =2.7.0rc1, =0.0.32, =0.1.9, =0.1.0, =4.0.5a1, =0.0.1, =1.0.1, =1.0.3 and more Source cves: CVE-2026-66053 Source advisory: OSV:GHSA-HWRJ-9RR4-24XH...

0lever-utils (>=0.1.0, <=0.1.6), airavata-python-sdk-test (>=0.0.1, <=0.0.8) +162 more potentially affected by CVE-2026-43871 via thrift (>=0.9.2, <=0.23.0)

thrift PYPI version =0.9.2, =0.1.0, =0.0.1, =1.0.1, =0.6.6, =2.7.0rc1, =0.0.32, =0.1.9, =0.1.0, =4.0.5a1, =0.0.1, =1.0.1, =1.0.3 and more Source cves: CVE-2026-43871 Source advisory: OSV:GHSA-8WV5-X4W7-5GWW...

@0xd541ecb3/byte-babe (>=1.0.0, <=1.2.1), @514labs/aurora-mcp (>=0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, <=0.0.64) +747 more potentially affected by CVE-2026-55968 via thrift (>=0.6.0-1, <=0.23.0)

thrift NPM version =0.6.0-1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.0-dev, =1.0.0, =0.9.0, =0.3.0, =0.0.1, =0.2.0, =0.2.0, =0.1.0, =1.0.0-beta.1, =1.0.0-beta.6 and more Source cves: CVE-2026-55968 Source advisory: SNYK:JS-THRIFT-18388780...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +1047 more potentially affected by CVE-2026-45112 via org.apache.thrift:libthrift (>=0.19.0, <=0.23.0)

org.apache.thrift:libthrift MAVEN version =0.19.0, =0.0.1, =0.0.1, =0.0.1, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =5.0.1, =2.0.0, =2.4.2 - be.vlaanderen.informatievlaanderen.ldes.client:event-stream-properties-fetcher 2.12.0 - be.vlaanderen.informatievlaanderen.ldes.client:ldes-client 2.12.0 -...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +447 more potentially affected by CVE-2026-17459 via com.sparkjava:spark-core (>=1.0, <=2.9.4)

com.sparkjava:spark-core MAVEN version =1.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.6.1,...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +799 more potentially affected by CVE-2025-71408 via nltk (>=3.0.0, <=3.9.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2025-71408 Source advisory: GHSA-848C-C2CX-J7QX...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +799 more potentially affected by CVE-2025-71408 via nltk (>=3.0.0, <=3.9.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2025-71408 Source advisory: SNYK:PYTHON-NLTK-18313041...