ansible-doctor (>=8.3.1, <=8.3.3), ansys-pre-commit-hooks (0.8.0) +50 more potentially affected by unknown CVE via gitpython (3.1.50)

gitpython PYPI version 3.1.50 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - ansible-doctor =8.3.1, =1.1.0, =0.5.0, =0.1.0, =0.3.0, =2.0.0b2, =1.2.1, =6.62.4, =5.1.7, =5.1.9 and more Source cves: unknown CVE Source...

@343dev/optimizt (>=12.0.0, <=13.0.0), @brickflow/cli (>=0.0.8, <=0.0.27) +63 more potentially affected by CVE-2026-73650 via svgo (>=4.0.0, <=4.0.1)

svgo NPM version =4.0.0, =12.0.0, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =6.13.0, =0.0.1769658265953, =0.1.0-dev.00e4942, =1.1.0, =1.1.0, =1.1.0, =0.1.0, =1.0.44, =1.0.62 and more Source cves: CVE-2026-73650 Source advisory: OSV:GHSA-2P49-HGCM-8545...

-react-file-list-components (1.1.1), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +45397 more potentially affected by CVE-2026-73650 via svgo (>=1.0.0, <=2.8.0)

svgo NPM version =1.0.0, =1.0.1, =0.1.0, =0.1.0, =0.1.6 - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 - 0scarclassf 1.0.1 - 0scarclassg 1.0.1 - 0scarclassh 1.0.1 - 0scarclassi 1.0.1 and more Source cves: CVE-2026-73650 Source...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +228 more potentially affected by CVE-2026-73650 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-73650 Source advisory: OSV:GHSA-2P49-HGCM-8545...

@343dev/optimizt (>=12.0.0, <=13.0.0), @brickflow/cli (>=0.0.8, <=0.0.27) +63 more potentially affected by unknown CVE via svgo (>=4.0.0, <=4.0.1)

svgo NPM version =4.0.0, =12.0.0, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =6.13.0, =0.0.1769658265953, =0.1.0-dev.00e4942, =1.1.0, =1.1.0, =1.1.0, =0.1.0, =1.0.44, =1.0.62 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVGO-18170231...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +228 more potentially affected by unknown CVE via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVGO-18170231...

@343dev/optimizt (>=12.0.0, <=13.0.0), @brickflow/cli (>=0.0.8, <=0.0.27) +63 more potentially affected by CVE-2026-73650 via svgo (>=4.0.0, <=4.0.1)

svgo NPM version =4.0.0, =12.0.0, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =6.13.0, =0.0.1769658265953, =0.1.0-dev.00e4942, =1.1.0, =1.1.0, =1.1.0, =0.1.0, =1.0.44, =1.0.62 and more Source cves: CVE-2026-73650 Source advisory: GHSA-2P49-HGCM-8545...

-react-file-list-components (1.1.1), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +45397 more potentially affected by CVE-2026-73650 via svgo (>=1.0.0, <=2.8.0)

svgo NPM version =1.0.0, =1.0.1, =0.1.0, =0.1.0, =0.1.6 - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 - 0scarclassf 1.0.1 - 0scarclassg 1.0.1 - 0scarclassh 1.0.1 - 0scarclassi 1.0.1 and more Source cves: CVE-2026-73650 Source...

8router (>=0.5.12, <=0.5.24), @11kit/tinyengine-material (>=1.0.0, <=1.0.7) +2468 more potentially affected by CVE-2026-66010 via dompurify (>=3.0.0, <=3.4.11)

dompurify NPM version =3.0.0, =0.5.12, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0, =0.10.2, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =0.1.0, =0.3.0 and more Source cves: CVE-2026-66010 Source advisory: GHSA-C2J3-45GR-MQC4...

8router (>=0.5.12, <=0.5.24), @11kit/tinyengine-material (>=1.0.0, <=1.0.7) +2468 more potentially affected by CVE-2026-66010 via dompurify (>=3.0.0, <=3.4.11)

dompurify NPM version =3.0.0, =0.5.12, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0, =0.10.2, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =0.1.0, =0.3.0 and more Source cves: CVE-2026-66010 Source advisory: SNYK:JS-DOMPURIFY-18170233...

ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +21230 more potentially affected by unknown CVE via com.fasterxml.jackson.core:jackson-databind (>=2.21.0, <=2.21.4)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.21.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.3, =0.4.0, =0.4.0, =1.2.2, =1.2.2, =1.2.2, =1.3.0 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-COMFASTERXMLJACKSONCORE-18170132...

@aamini/config (>=0.0.1, <=0.0.13), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +13 more potentially affected by CVE-2026-73653 via @vitest/browser (>=4.0.0, <=4.1.9)

@vitest/browser NPM version =4.0.0, =0.0.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =0.2.1, =1.0.1, =0.2.2, =4.0.0, =4.0.0, =4.0.0, =0.5.0, =0.1.13, =0.2.0, =0.2.3 Source cves: CVE-2026-73653 Source advisory: OSV:GHSA-P63J-VCC4-9VMV...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.249, <=2.1.0-alpha.251) +7 more potentially affected by CVE-2026-73653 via @vitest/browser (>=3.0.5, <=3.2.4)

@vitest/browser NPM version =3.0.5, =0.0.1, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =3.8.0, =1.0.1, =0.0.2, =0.0.5 Source cves: CVE-2026-73653 Source advisory: OSV:GHSA-P63J-VCC4-9VMV...

@aamini/config (>=0.0.1, <=0.0.13), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +6 more potentially affected by unknown CVE via @vitest/browser-playwright (>=4.0.18, <=4.1.9)

@vitest/browser-playwright NPM version =4.0.18, =0.0.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =0.6.0-rc.1, =0.2.0-alpha.1, =0.3.0-alpha Source cves: unknown CVE Source advisory: SNYK:JS-VITESTBROWSERPLAYWRIGHT-18171375...

ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +32246 more potentially affected by CVE-2026-59888 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.3)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...

bluewhale3-bluewhale (>=0.0.1, <=0.0.46), bolinette (>=0.6.11, <=0.7.4) +16 more potentially affected by CVE-2026-59890 via setuptools (51.0.0)

setuptools PYPI version 51.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bluewhale3-bluewhale =0.0.1, =0.6.11, =1.1.5, =26.7.3, =24.1.6, =0.0.0a1, =0.1.0, =23.51.11, =0.3.0, =0.0.8, =0.0.2, =0.0.1, =0.0.1, =1.0.0...

cvexplore (0.2.6.8), cyclonedx-python-lib (0.12.0) +8 more potentially affected by CVE-2026-59890 via setuptools (59.2.0)

setuptools PYPI version 59.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cvexplore 0.2.6.8 - cyclonedx-python-lib 0.12.0 - eisenradio =0.8.6, =1.0.0, =2.6.3, =0.0.6, =5.1.0, =0.1.1, =0.1.1, =1.1.0, =1.2.1 Source...

alphadoc (>=1.0.1, <=1.0.3), apexomni-arm (>=1.0.0, <=3.0.0) +65 more potentially affected by CVE-2026-59890 via setuptools (50.3.2)

setuptools PYPI version 50.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - alphadoc =1.0.1, =1.0.0, =3.0.0, =1.1.9, =0.1.1, =0.0.0a1, =0.5.5, =0.0.3, =0.0.1, =0.2.1, =0.1.8, =0.2.1 and more Source cves:...

aos-prov (>=2.2.0.dev0, <=3.0.1), owasp-zap-historic-parser (0.1.7) +2 more potentially affected by CVE-2026-59890 via setuptools (47.3.2)

setuptools PYPI version 47.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aos-prov =2.2.0.dev0, =0.4.0a2, =1.0.0, =1.0.2 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

dicgram (>=2.0.9, <=2.1.1), dsp-metadata-gui (>=1.3.2, <=8.5.0) +1 more potentially affected by CVE-2026-59890 via setuptools (67.3.1)

setuptools PYPI version 67.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - dicgram =2.0.9, =1.3.2, =8.5.0 - renku-lock 2.3.0 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...