homeassistant-stubs (2021.5.0b5) potentially affected by CVE-2026-64825 via homeassistant (2021.5.0b5)

homeassistant PYPI version 2021.5.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.5.0b5 Source cves: CVE-2026-64825 Source advisory: OSV:GHSA-5HXG-R395-FQXX...

homeassistant-stubs (2022.12.5), pytest-homeassistant-custom-component (0.12.33) potentially affected by CVE-2026-64825 via homeassistant (2022.12.5)

homeassistant PYPI version 2022.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.12.5 - pytest-homeassistant-custom-component 0.12.33 Source cves: CVE-2026-64825 Source advisory:...

pytest-homeassistant-custom-component (0.8.9) potentially affected by CVE-2026-64825 via homeassistant (2022.4.4)

homeassistant PYPI version 2022.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - pytest-homeassistant-custom-component 0.8.9 Source cves: CVE-2026-64825 Source advisory: OSV:GHSA-5HXG-R395-FQXX...

homeassistant-stubs (2023.1.7), hydroqc2mqtt (>=0.10.0, <=0.11.1) +2 more potentially affected by CVE-2026-64825 via homeassistant (2023.1.7)

homeassistant PYPI version 2023.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.1.7 - hydroqc2mqtt =0.10.0, =0.11.1 - mqtt-hass-base 4.1.5 - pytest-homeassistant-custom-component 0.12.49...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +715 more potentially affected by CVE-2026-59897 via hono (>=4.3.6, <=4.12.26)

hono NPM version =4.3.6, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.4 and more Source cves: CVE-2026-59897 Source advisory: OSV:GHSA-XGM2-5F3F-MVVC...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +310 more potentially affected by unknown CVE via @hono/node-server (>=1.0.2, <=1.19.15)

@hono/node-server NPM version =1.0.2, =0.3.1, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.27, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =1.0.25-beta.0, =0.0.1, =1.0.0 - @arpanjain3.14/ponder-with-flashblocks 0.16.3 and more Source cves: unknown CVE Source advisory:...

@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +105 more potentially affected by unknown CVE via @hono/node-server (>=2.0.0, <=2.0.4)

@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: unknown CVE Source...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +307 more potentially affected by unknown CVE via @hono/node-server (>=1.0.2, <=1.19.14)

@hono/node-server NPM version =1.0.2, =0.3.1, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.27, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =1.0.25-beta.0, =0.0.1, =1.0.0 - @arpanjain3.14/ponder-with-flashblocks 0.16.3 and more Source cves: unknown CVE Source advisory:...

@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +105 more potentially affected by unknown CVE via @hono/node-server (>=2.0.0, <=2.0.4)

@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: unknown CVE Source...

pydtwsat (>=0.1.1, <=0.1.2) potentially affected by unknown CVE via sklern (0.0.11)

sklern PYPI version 0.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on sklern and may be impacted: - pydtwsat =0.1.1, =0.1.2 Source cves: unknown CVE Source advisory: GHSA-4M4V-JH2V-MHR4...

@cedarjs/api-server (>=1.0.0-canary.12863, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=6.0.0-canary.2828, <=7.0.0-canary.2989) +18 more potentially affected by CVE-2026-44907 via react-server-dom-webpack (>=19.2.1, <=19.2.7)

react-server-dom-webpack NPM version =19.2.1, =1.0.0-canary.12863, =6.0.0-canary.2828, =1.0.0-canary.12863, =5.0.4-next.167, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =3.0.0-canary.13429, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...

@openinc/parse-server-opendash (>=4.0.0, <=4.1.2) potentially affected by CVE-2026-64627 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.2 Source cves: CVE-2026-64627 Source advisory: SNYK:JS-PARSESERVER-18306801...

marked-sanitizer (0.0.0) potentially affected by CVE-2026-102342 via ammonia (3.1.4)

ammonia CARGO version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on ammonia and may be impacted: - marked-sanitizer 0.0.0 Source cves: CVE-2026-102342 Source advisory: OSV:RUSTSEC-2026-0213...

cc.zzzyu.seata:seata-server (>=2.4.0, <=2.5.0), cn.aifei:aifei-redis (1.0) +145 more potentially affected by CVE-2026-64609 via org.apache.fury:fury-core (>=0.5.0, <=0.10.3)

org.apache.fury:fury-core MAVEN version =0.5.0, =2.4.0, =1.1.4, =1.1.4, =1.0.0-solon, =1.0.0-solon, =1.0.0-solon, =1.0.0-solon, =1.0.0-solon, =1.0.0-solon, =1.0.0-solon, =1.7.0-beta1, =1.0.0-solon, =1.6.0-beta1, =1.6.0-beta1, =1.7.1 and more Source cves: CVE-2026-64609 Source advisory:...

@mcpjam/inspector (>=2.22.0, <=3.3.1) potentially affected by CVE-2026-64650 via @ai-sdk/harness-codex (1.0.0-canary.9)

@ai-sdk/harness-codex NPM version 1.0.0-canary.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ai-sdk/harness-codex and may be impacted: - @mcpjam/inspector =2.22.0, =3.3.1 Source cves: CVE-2026-64650 Source advisory: SNYK:JS-AISDKHARNESSCODEX-18172...

astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by unknown CVE via astro (>=7.0.2, <=7.0.3)

astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: unknown CVE Source advisory: SNYK:JS-ASTRO-18085612...

astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by CVE-2026-73423 via astro (>=7.0.2, <=7.0.3)

astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: CVE-2026-73423 Source advisory: OSV:GHSA-8MV7-9C27-98VC...

@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +10 more potentially affected by CVE-2026-73424 via @astrojs/vercel (>=10.0.6, <=10.0.8)

@astrojs/vercel NPM version =10.0.6, =0.0.3, =0.2.0, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.3.0 - taskair 0.0.1 Source cves: CVE-2026-73424 Source advisory: OSV:GHSA-X27W-589X-FRM2...

@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +10 more potentially affected by CVE-2026-73424 via @astrojs/vercel (>=10.0.6, <=10.0.8)

@astrojs/vercel NPM version =10.0.6, =0.0.3, =0.2.0, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.3.0 - taskair 0.0.1 Source cves: CVE-2026-73424 Source advisory: SNYK:JS-ASTROJSVERCEL-18599401...

01-numacert (>=1.0.0, <=3.0.0), 10by10-react-app (1.2.1) +18885 more potentially affected by CVE-2026-12590 via body-parser (>=1.0.0, <=1.20.5)

body-parser NPM version =1.0.0, =1.0.0, =0.2.0, =1.0.2, =2.0.0, =0.2.0, =0.0.978, =0.2.0, =0.0.1, =0.0.28, =0.0.36 and more Source cves: CVE-2026-12590 Source advisory: OSV:GHSA-V422-HMWV-36X6...