@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +116 more potentially affected by CVE-2026-73562 via mongoose (>=7.0.0, <=7.8.8)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =1.0.0, =1.0.6-beta.0, =0.2.0-alpha.1, =0.2.0-alpha.0, =0.0.0, =1.0.2, =1.0.0, =7.6.10, =7.8.6 and more Source cves: CVE-2026-73562 Source advisory: OSV:GHSA-664H-WQGQ-64GW...

123ts-backend-setup-prod (1.0.0), 4casterschemas (>=1.0.0, <=1.0.1) +196 more potentially affected by CVE-2026-73562 via mongoose (>=8.0.0, <=8.24.0)

mongoose NPM version =8.0.0, =1.0.0, =2.1.5, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =3.13.0, =1.1.9, =1.5.31 and more Source cves: CVE-2026-73562 Source advisory: OSV:GHSA-664H-WQGQ-64GW...

airflow-indexima (>=1.0.1, <=2.2.1), arcli (>=0.1.0, <=0.1.1) +69 more potentially affected by CVE-2026-69097 via gitpython (2.1.15)

gitpython PYPI version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - airflow-indexima =1.0.1, =0.1.0, =0.3.0rc1, =0.1.0, =0.7.0, =0.2.0, =0.11.0, =0.1.0, =0.6.0, =0.3.0, =2.0.0, =2019.2.3rc0, =2021.7.0 and more...

@claspo/common (>=5.2.1-theme.13, <=7.5.14), @claspo/components (>=1.1.14, <=1.10.30) +3 more potentially affected by CVE-2026-73649 via velocityjs (>=2.0.6, <=2.1.6)

velocityjs NPM version =2.0.6, =5.2.1-theme.13, =1.1.14, =14.5.0-theme.13, =16.5.0-theme.13, =14.4.1-theme.13, =16.7.1 Source cves: CVE-2026-73649 Source advisory: OSV:GHSA-7GFH-X38P-PRH3...

@claspo/common (>=5.2.1-theme.13, <=7.5.14), @claspo/components (>=1.1.14, <=1.10.30) +3 more potentially affected by unknown CVE via velocityjs (>=2.0.6, <=2.1.6)

velocityjs NPM version =2.0.6, =5.2.1-theme.13, =1.1.14, =14.5.0-theme.13, =16.5.0-theme.13, =14.4.1-theme.13, =16.7.1 Source cves: unknown CVE Source advisory: SNYK:JS-VELOCITYJS-18319515...

arkindex-base-worker (>=0.3.7rc2, <=0.3.7rc10), mafiagg (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.7.0)

pymdown-extensions PYPI version 10.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.7rc2, =1.0.0, =0.2.54, =0.2.65 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JC...

open-webui (>=0.5.17, <=0.6.5), open-webui-steve (0.6.5.45) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.14.2)

pymdown-extensions PYPI version 10.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.5.17, =0.6.5 - open-webui-steve 0.6.5.45 - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-61632 Source...

arkindex-base-worker (>=0.3.2rc1, <=0.3.2rc3), rooster-client (0.0.1) potentially affected by CVE-2026-61632 via pymdown-extensions (9.9.0)

pymdown-extensions PYPI version 9.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.2rc1, =0.3.2rc3 - rooster-client 0.0.1 Source cves: CVE-2026-61632 Source advisory:...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +127 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.21.3)

pymdown-extensions PYPI version 10.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aiagents4pharma =0.0.0, =0.1.0, =0.5.0a1, =0.1.0, =3.8.0, =0.1.0, =2025.9.131446, =0.2.0b1, =1.0.4, =0.1.0, =0.2.1 and mor...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.8, <=2.1.15)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-TRIX-18307297...

@0xfutbol/id (>=2.0.0, <=2.0.200), @ack-lab/sdk (>=0.0.5, <=0.1.1) +658 more potentially affected by CVE-2026-59952 via valibot (>=1.0.0-beta.0, <=1.4.1)

valibot NPM version =1.0.0-beta.0, =2.0.0, =0.0.5, =4.3.136-beta.1, =0.10.1, =0.10.1, =0.10.1, =0.10.1, =0.4.0, =0.0.27, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.4.1, =0.10.0-rc.17 and more Source cves: CVE-2026-59952 Source advisory: SNYK:JS-VALIBOT-18313048...

org.webjars.npm:solid-js (1.9.5) potentially affected by CVE-2026-59940 via org.webjars.npm:seroval (1.2.1)

org.webjars.npm:seroval MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:seroval and may be impacted: - org.webjars.npm:solid-js 1.9.5 Source cves: CVE-2026-59940 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-18313051...

@aexol/opencode-tui (>=0.2.5, <=0.2.10), @agent-qofeno/agentx-cli (>=1.20.47, <=1.20.52) +116 more potentially affected by CVE-2026-59940 via seroval (>=1.0.7, <=1.3.2)

seroval NPM version =1.0.7, =0.2.5, =1.20.47, =2.11.0, =1.0.0, =1.0.0, =1.1.54, =1.1.54, =1.0.24, =0.1.0, =0.3.0, =0.3.2 - @entropy-tamer/reynard-config 0.1.2 - @entropy-tamer/reynard-i18n 1.2.0 - @entropy-tamer/reynard-validation 0.2.0 and more Source cves: CVE-2026-59940 Source advisory:...

@aexol/opencode-tui (>=0.2.5, <=0.2.10), @agent-qofeno/agentx-cli (>=1.20.47, <=1.20.52) +116 more potentially affected by CVE-2026-59940 via seroval (>=1.0.7, <=1.3.2)

seroval NPM version =1.0.7, =0.2.5, =1.20.47, =2.11.0, =1.0.0, =1.0.0, =1.1.54, =1.1.54, =1.0.24, =0.1.0, =0.3.0, =0.3.2 - @entropy-tamer/reynard-config 0.1.2 - @entropy-tamer/reynard-i18n 1.2.0 - @entropy-tamer/reynard-validation 0.2.0 and more Source cves: CVE-2026-59940 Source advisory:...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +15562 more potentially affected by CVE-2026-59949 via org.lz4:lz4-java (>=1.4.0, <=1.8.1)

org.lz4:lz4-java MAVEN version =1.4.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =1.2.10 and more Source cves: CVE-2026-59949 Source advisory: OSV:GHSA-XX22-P4CH-683R...

ai.pipestream.module:module-opensearch-sink (>=0.1.2, <=0.1.4), ai.pipestream.module:module-testing-sidecar (0.0.1) +3516 more potentially affected by CVE-2026-59949 via at.yawk.lz4:lz4-java (>=1.8.1, <=1.11.0)

at.yawk.lz4:lz4-java MAVEN version =1.8.1, =0.1.2, =0.0.22, =0.1.18, =0.1.7, =0.7.24, =0.7.24, =0.7.24, =0.1.29, =0.7.22, =0.7.12, =0.7.41 - ai.pipestream:repository-service 0.0.1 and more Source cves: CVE-2026-59949 Source advisory: OSV:GHSA-XX22-P4CH-683R...

ai.pipestream.module:module-opensearch-sink (>=0.1.2, <=0.1.4), ai.pipestream.module:module-testing-sidecar (0.0.1) +3516 more potentially affected by CVE-2026-59949 via at.yawk.lz4:lz4-java (>=1.8.1, <=1.11.0)

at.yawk.lz4:lz4-java MAVEN version =1.8.1, =0.1.2, =0.0.22, =0.1.18, =0.1.7, =0.7.24, =0.7.24, =0.7.24, =0.1.29, =0.7.22, =0.7.12, =0.7.41 - ai.pipestream:repository-service 0.0.1 and more Source cves: CVE-2026-59949 Source advisory: GHSA-XX22-P4CH-683R...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by unknown CVE via @sveltejs/kit (>=2.0.0, <=2.67.0)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.1.0, =1.0.1-next.0, =1.0.10-next.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVELTEJSKIT-18319512...

@openinc/parse-server-opendash (>=4.0.0, <=4.1.2) potentially affected by CVE-2026-66009 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.2 Source cves: CVE-2026-66009 Source advisory: SNYK:JS-PARSESERVER-18306805...

@openinc/parse-server-opendash (>=4.0.0, <=4.1.2) potentially affected by CVE-2026-66008 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.2 Source cves: CVE-2026-66008 Source advisory: SNYK:JS-PARSESERVER-18306804...