@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +28 more potentially affected by CVE-2026-14257 via brace-expansion (>=1.1.0, <=1.1.16)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.3, =0.1.0 and more Source cves: CVE-2026-14257 Source advisory: GHSA-MH99-V99M-4GVG...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +28 more potentially affected by CVE-2026-14257 via brace-expansion (>=1.1.0, <=1.1.16)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.3, =0.1.0 and more Source cves: CVE-2026-14257 Source advisory: OSV:GHSA-MH99-V99M-4GVG...

jo-cli (1.0.2) potentially affected by CVE-2026-14257 via brace-expansion (3.0.0)

brace-expansion NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli 1.0.2 Source cves: CVE-2026-14257 Source advisory: OSV:GHSA-MH99-V99M-4GVG...

03-gs-ee-6 (0.3.5), @albgen/capacitor-escpos-plugin (>=0.0.4, <=1.0.1) +2935 more potentially affected by CVE-2026-14257 via brace-expansion (>=4.0.0, <=5.0.7)

brace-expansion NPM version =4.0.0, =0.0.4, =1.1.7, =1.1.8 - @angranit/fantom-virma 0.1.0 - @angranit/first-step-to-get-tea 0.1.0 - @angranit/hapeipons 1.1.2 - @angranit/nearly-vm 0.1.0 - @angranit/newme-project 0.1.0 - @angranit/npmjs-for-tea-project 0.1.0 - @angranit/phantompirs 0.1.0 -...

03-gs-ee-6 (0.3.5), @albgen/capacitor-escpos-plugin (>=0.0.4, <=1.0.1) +2935 more potentially affected by CVE-2026-14257 via brace-expansion (>=4.0.0, <=5.0.7)

brace-expansion NPM version =4.0.0, =0.0.4, =1.1.7, =1.1.8 - @angranit/fantom-virma 0.1.0 - @angranit/first-step-to-get-tea 0.1.0 - @angranit/hapeipons 1.1.2 - @angranit/nearly-vm 0.1.0 - @angranit/newme-project 0.1.0 - @angranit/npmjs-for-tea-project 0.1.0 - @angranit/phantompirs 0.1.0 -...

@3w5h/knowledge_query (1.0.30), @3w5h/utils (>=1.0.0, <=1.0.7) +671 more potentially affected by CVE-2026-73567 via sm-crypto (>=0.0.9, <=0.4.0)

sm-crypto NPM version =0.0.9, =1.0.0, =0.1.0, =1.0.0, =4.4.42, =0.0.2, =2.2.6, =2.2.6, =2.2.6, =2.3.10, =2.1.4, =2.2.6, =2.2.6, =2.2.6, =2.7.8-alpha.2 and more Source cves: CVE-2026-73567 Source advisory: OSV:GHSA-VH45-F885-3848...

@3w5h/knowledge_query (1.0.30), @3w5h/utils (>=1.0.0, <=1.0.7) +671 more potentially affected by unknown CVE via sm-crypto (>=0.0.9, <=0.4.0)

sm-crypto NPM version =0.0.9, =1.0.0, =0.1.0, =1.0.0, =4.4.42, =0.0.2, =2.2.6, =2.2.6, =2.2.6, =2.3.10, =2.1.4, =2.2.6, =2.2.6, =2.2.6, =2.7.8-alpha.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-SMCRYPTO-18601952...

vantage6-node (3.3.6), vantage6-server (3.3.6) potentially affected by CVE-2026-73652 via vantage6 (3.3.6)

vantage6 PYPI version 3.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.6 - vantage6-server 3.3.6 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (4.0.1), vantage6-server (4.0.1) potentially affected by CVE-2026-73652 via vantage6 (4.0.1)

vantage6 PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 4.0.1 - vantage6-server 4.0.1 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.8.0), vantage6-server (3.8.0) potentially affected by CVE-2026-73652 via vantage6 (3.8.0)

vantage6 PYPI version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.0 - vantage6-server 3.8.0 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

org.openidentityplatform.openam:openam-slf4j (15.2.0), org.openidentityplatform.opendj:opendj-dsml-servlet (4.10.0) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.10.0)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.2.0 -...

budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18319709...

budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18308463...

@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by unknown CVE via @budibase/backend-core (>=3.0.0, <=3.2.26)

@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASEBACKENDCORE-18308464...

budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18308465...

budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18319715...

@budibase/bbui (>=3.0.0, <=3.2.26), @budibase/cli (>=3.0.0, <=3.2.26) +5 more potentially affected by unknown CVE via @budibase/string-templates (>=3.0.0, <=3.2.26)

@budibase/string-templates NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESTRINGTEMPLATES-18308471...

budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18308470...

budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18319708...

@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by unknown CVE via @budibase/backend-core (>=3.0.0, <=3.2.26)

@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASEBACKENDCORE-18319718...