@activepieces/piece-ai (>=0.3.1, <=0.3.4), @appium/base-driver (>=10.0.0-rc.2, <=10.7.1) +160 more potentially affected by CVE-2026-12590 via body-parser (>=2.0.2, <=2.2.2)

body-parser NPM version =2.0.2, =0.3.1, =10.0.0-rc.2, =3.2.0, =4.2.0, =2.0.32, =1.4.0, =1.1.1, =1.0.15, =1.0.15, =1.0.1-beta.1, =9.1.1-ruixiang.1, =9.0.0, =3.0.10, =3.8.8, =1.114.0, =3.20.1 and more Source cves: CVE-2026-12590 Source advisory: GHSA-V422-HMWV-36X6...

@apphosting/astro-adapter (0.0.1), @ayco/cozy (>=0.2.5, <=0.3.1) +68 more potentially affected by CVE-2026-59730 via @astrojs/node (>=8.1.0, <=10.1.4)

@astrojs/node NPM version =8.1.0, =0.2.5, =1.0.2, =1.0.0, =2.0.0, =0.1.3, =2.2.1, =2.2.1, =2.2.1, =1.0.0, =2.35.0, =0.1.0, =0.7.0, =0.12.0 and more Source cves: CVE-2026-59730 Source advisory: OSV:GHSA-R557-WFFQ-WVRC...

@0xbigboss/starlight-llms-txt (>=0.8.0-beta.1, <=0.8.0-beta.3), @1771technologies/lytenyte-doc (1.0.13) +727 more potentially affected by CVE-2026-59730 via @astrojs/internal-helpers (>=0.3.0, <=0.10.0)

@astrojs/internal-helpers NPM version =0.3.0, =0.8.0-beta.1, =0.0.1, =1.0.0, =0.0.3, =0.2.0, =1.1.0, =1.0.0, =0.4.2, =0.9.0, =0.1.6, =1.0.1, =1.0.3 and more Source cves: CVE-2026-59730 Source advisory: SNYK:JS-ASTROJSINTERNALHELPERS-18085626...

@apphosting/astro-adapter (0.0.1), @ayco/cozy (>=0.2.5, <=0.3.1) +68 more potentially affected by CVE-2026-59730 via @astrojs/node (>=8.1.0, <=10.1.4)

@astrojs/node NPM version =8.1.0, =0.2.5, =1.0.2, =1.0.0, =2.0.0, =0.1.3, =2.2.1, =2.2.1, =2.2.1, =1.0.0, =2.35.0, =0.1.0, =0.7.0, =0.12.0 and more Source cves: CVE-2026-59730 Source advisory: GHSA-R557-WFFQ-WVRC...

astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by CVE-2026-59729 via astro (>=7.0.2, <=7.0.3)

astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: CVE-2026-59729 Source advisory: SNYK:JS-ASTRO-18085589...

astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by CVE-2026-59729 via astro (>=7.0.2, <=7.0.3)

astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: CVE-2026-59729 Source advisory: OSV:GHSA-F48W-9M4C-M7F5...

@chocolatey-software/astro (>=2.0.0, <=2.8.0), @kunyan/astro-blog (>=0.1.3, <=0.1.4) +19 more potentially affected by CVE-2026-59728 via @astrojs/rss (>=2.4.0, <=4.0.18)

@astrojs/rss NPM version =2.4.0, =2.0.0, =0.1.3, =0.0.1, =0.1.0, =0.0.9, =0.1.0, =0.2.0, =0.0.1, =1.0.29, =0.1.0, =0.2.0 and more Source cves: CVE-2026-59728 Source advisory: GHSA-8J5Q-MFJ2-5Q9Q...

@chocolatey-software/astro (>=2.0.0, <=2.8.0), @kunyan/astro-blog (>=0.1.3, <=0.1.4) +19 more potentially affected by CVE-2026-59728 via @astrojs/rss (>=2.4.0, <=4.0.18)

@astrojs/rss NPM version =2.4.0, =2.0.0, =0.1.3, =0.0.1, =0.1.0, =0.0.9, =0.1.0, =0.2.0, =0.0.1, =1.0.29, =0.1.0, =0.2.0 and more Source cves: CVE-2026-59728 Source advisory: SNYK:JS-ASTROJSRSS-18085631...

@chocolatey-software/astro (>=2.0.0, <=2.8.0), @kunyan/astro-blog (>=0.1.3, <=0.1.4) +19 more potentially affected by CVE-2026-59728 via @astrojs/rss (>=2.4.0, <=4.0.18)

@astrojs/rss NPM version =2.4.0, =2.0.0, =0.1.3, =0.0.1, =0.1.0, =0.0.9, =0.1.0, =0.2.0, =0.0.1, =1.0.29, =0.1.0, =0.2.0 and more Source cves: CVE-2026-59728 Source advisory: OSV:GHSA-8J5Q-MFJ2-5Q9Q...

astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by CVE-2026-59727 via astro (>=7.0.2, <=7.0.3)

astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: CVE-2026-59727 Source advisory: SNYK:JS-ASTRO-18085579...

entweet (2.0.0), worldengine (0.18.0) potentially affected by CVE-2026-59205 via pillow (2.8.2)

pillow PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - entweet 2.0.0 - worldengine 0.18.0 Source cves: CVE-2026-59205 Source advisory: OSV:GHSA-9HW9-CH79-4VH6...

altair-images (>=0.1.0, <=0.1.4), colorizexl (>=0.0.1, <=0.2.1) +13 more potentially affected by CVE-2026-59205 via pillow (7.1.1)

pillow PYPI version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - altair-images =0.1.0, =0.0.1, =0.0.5, =0.6.0.post3, =0.4.3, =0.6.18, =1.0.4, =0.0.95, =0.4.1.post1, =0.1.1, =0.0.1, =0.3.0, =1.3.0, =0.2.5, =0.2.6...

bedrock (0.1.0.dev10), dbcollection (>=0.2.2, <=0.2.6) +19 more potentially affected by CVE-2026-59205 via pillow (5.1.0)

pillow PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - bedrock 0.1.0.dev10 - dbcollection =0.2.2, =0.0.6, =1.0.0, =0.0.0a1, =0.1.0, =4.0.0, =4.0.0, =4.0.0, =4.1.1 and more Source cves: CVE-2026-59205...

stoqdrivers (2.0.1) potentially affected by CVE-2026-59205 via pillow (3.1.2)

pillow PYPI version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - stoqdrivers 2.0.1 Source cves: CVE-2026-59205 Source advisory: OSV:GHSA-9HW9-CH79-4VH6...

2048-wallpaper-edition (1.0.0), aadhaar-py (2.0.0) +559 more potentially affected by CVE-2026-59205 via pillow (8.4.0)

pillow PYPI version 8.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2048-wallpaper-edition 1.0.0 - aadhaar-py 2.0.0 - abraia 0.9.3 - actfw-core =2.2.0a0, =0.2.3, =0.2.0, =0.1.5, =0.1.0, =0.5.6, =0.5.0, =0.1.0, =0.1.0...

memegen-desktop (>=0.0.1, <=0.1.1), moca (0.3.3) +1 more potentially affected by CVE-2026-59205 via pillow (3.3.1)

pillow PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - memegen-desktop =0.0.1, =0.0.4.dev68, =0.0.5.dev3 Source cves: CVE-2026-59205 Source advisory: OSV:GHSA-9HW9-CH79-4VH6...

9gag-scraper (>=0.0.6, <=0.0.7), agora-community-sdk (>=0.1.7, <=0.1.10) +141 more potentially affected by CVE-2026-59205 via pillow (6.2.2)

pillow PYPI version 6.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 9gag-scraper =0.0.6, =0.1.7, =0.0.1.dev1, =0.1.0, =0.1.0, =1.0.0, =0.26.0.dev2, =0.0.1, =20.1.1, =2.0.0, =3.0.2, =0.16.0, =0.18.2 - colornet 0.2.0 a...

dcicsnovault (>=2.0.0b4, <=4.0.0b2), django-dynamic-scraper (>=0.11.4, <=0.13.1) +13 more potentially affected by CVE-2026-59205 via pillow (3.4.2)

pillow PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b4, =0.11.4, =0.18.1, =0.6.12a2, =0.9.0, =0.2.1, =0.0.3, =1.6.0, =1.4.0, =1.12.0 - yulelog 0.0.3 Source cves: CVE-2026-59205 Sour...

adversarial-insight-ml (0.1.0), aioinstagrapi (>=1.1.19, <=1.1.21) +183 more potentially affected by CVE-2026-59205 via pillow (10.0.1)

pillow PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adversarial-insight-ml 0.1.0 - aioinstagrapi =1.1.19, =1.1.2, =1.7.3, =0.0.1, =0.0.29, =0.1.0, =4.4.0.69, =4.0.0, =1.0.0, =1.0.1 and more Source...

aamutils (>=0.0.11, <=0.0.12), adversarial-workflow (>=0.4.0, <=0.9.8) +516 more potentially affected by CVE-2026-59205 via pillow (>=12.0.0, <=12.2.0)

pillow PYPI version =12.0.0, =0.0.11, =0.4.0, =1.10.0rc1, =0.0.116, =0.13.2, =0.1.0rc1, =1.0.7, =0.1.0, =1.1.0, =1.3.0, =0.1.0, =0.2.0, =0.6.0, =0.8.0.dev20260511, =0.13.0.dev20261012 and more Source cves: CVE-2026-59205 Source advisory: GHSA-9HW9-CH79-4VH6...