@1eg/theme-editor-cli (>=0.13.0, <=1.17.0), @aicontextlab/cli (>=0.0.0-dev, <=0.2.2) +309 more potentially affected by CVE-2026-5986 via js-video-url-parser (>=0.2.8, <=0.5.1)

js-video-url-parser NPM version =0.2.8, =0.13.0, =0.0.0-dev, =0.2.5, =1.0.103, =0.12.77-beta.1, =0.1.0, =0.1.136, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.10 and more Source cves: CVE-2026-5986 Source advisory: SNYK:JS-JSVIDEOURLPARSER-15995499...

io.antmedia:ant-media-server (>=2.8.0, <=3.0.1), io.github.microsphere-projects:microsphere-spring-cloud-gateway (0.2.0) +18 more potentially affected by CVE-2026-34487 via org.apache.tomcat:tomcat-tribes (>=10.1.0-m1, <=10.1.53)

org.apache.tomcat:tomcat-tribes MAVEN version =10.1.0-m1, =2.8.0, =0.2.2, =10.1.0-m1, =10.1.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.1.4 and more Source cves: CVE-2026-34487 Source advisory: GHSA-X4M4-345F-5H...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +8673 more potentially affected by CVE-2026-34483 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.53)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-34483 Source advisory: OSV:GHSA-RV64-5GF8-9QQ8...

ai.telosforge:kimaira-starter-dms (>=1.2.4, <=1.2.6), ai.telosforge:kimaira-starter-web-security (>=1.2.4, <=1.2.6) +1495 more potentially affected by CVE-2026-32990 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.50, <=10.1.52)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.50, =1.2.4, =1.2.4, =1.30.0, =chart-0.3.0, =1.0.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.27.0 and more Source cves: CVE-2026-32990 Source advisory:...

ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0, <=4.6.0) +1041 more potentially affected by CVE-2026-25854 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.18)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.7.5 and more Source cves: CVE-2026-25854 Source advisory: OSV:GHSA-9M3C-QCXR-9X87...

com.github.hazendaz.tomcat:tomcat10-config (>=10.1.2, <=10.1.52), io.orqueio.bpm.tomcat:orqueio-bpm-tomcat (>=1.0.0, <=1.0.11) +12 more potentially affected by CVE-2026-29145 via org.apache.tomcat:tomcat (>=10.1.2, <=10.1.52)

org.apache.tomcat:tomcat MAVEN version =10.1.2, =10.1.2, =1.0.0, =1.0.0, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.5 Source cves: CVE-2026-29145 Source advisory: GHSA-95JQ-RWVF-VJX4...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +8582 more potentially affected by CVE-2026-29146 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.1.52)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-29146 Source advisory: MEND:CVE-2026-29146...

nmigen-yosys (0.9.0.post3527.dev27), yowasp-nextpnr-ecp5 (0.0.0.post2706.dev40) +12 more potentially affected by CVE-2026-34983 via wasmtime (0.20.0)

wasmtime PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - nmigen-yosys 0.9.0.post3527.dev27 - yowasp-nextpnr-ecp5 0.0.0.post2706.dev40 - yowasp-nextpnr-ecp5-25k 0.0.0.post2706.dev40 -...

amaranth-yosys (0.10.0.dev46) potentially affected by CVE-2026-34983 via wasmtime (0.32.0)

wasmtime PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.10.0.dev46 Source cves: CVE-2026-34983 Source advisory: OSV:PYSEC-2026-151...

amaranth-yosys (0.25.0.0.post70), yowasp-runtime (1.19.0) potentially affected by CVE-2026-34983 via wasmtime (7.0.0)

wasmtime PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post70 - yowasp-runtime 1.19.0 Source cves: CVE-2026-34983 Source advisory: OSV:PYSEC-2026-151...

amaranth-yosys (0.50.0.0.post107), astyle-py (>=1.1.0rc0, <=1.1.0) +11 more potentially affected by CVE-2026-34983 via wasmtime (30.0.0)

wasmtime PYPI version 30.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.50.0.0.post107 - astyle-py =1.1.0rc0, =3.11.0, =11.28.0a13, =1.63.0, =1.68.0, =1.63.0, =1.63.0, =0.1.0, =1.63.0, =1.63.0,...

amaranth-yosys (0.50.0.0.post108), yowasp-runtime (1.71.0) potentially affected by CVE-2026-34983 via wasmtime (31.0.0)

wasmtime PYPI version 31.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.50.0.0.post108 - yowasp-runtime 1.71.0 Source cves: CVE-2026-34983 Source advisory: OSV:PYSEC-2026-151...

amaranth-yosys (0.40.0.0.post101), yowasp-runtime (1.66.0) potentially affected by CVE-2026-34983 via wasmtime (27.0.2)

wasmtime PYPI version 27.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.40.0.0.post101 - yowasp-runtime 1.66.0 Source cves: CVE-2026-34983 Source advisory: OSV:PYSEC-2026-151...

amaranth-yosys (0.50.0.0.post116), yowasp-runtime (1.80.0) potentially affected by CVE-2026-34983 via wasmtime (37.0.0)

wasmtime PYPI version 37.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.50.0.0.post116 - yowasp-runtime 1.80.0 Source cves: CVE-2026-34983 Source advisory: OSV:PYSEC-2026-151...

amaranth-yosys (0.40.0.0.post95), typegraph (>=0.4.2, <=0.4.10) +1 more potentially affected by CVE-2026-34983 via wasmtime (21.0.0)

wasmtime PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.40.0.0.post95 - typegraph =0.4.2, =0.4.10 - yowasp-runtime 1.59.0 Source cves: CVE-2026-34983 Source advisory: OSV:PYSEC-2026-...

amaranth-yosys (0.50.0.0.post119), yowasp-runtime (1.83.0) potentially affected by CVE-2026-34983 via wasmtime (40.0.0)

wasmtime PYPI version 40.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.50.0.0.post119 - yowasp-runtime 1.83.0 Source cves: CVE-2026-34983 Source advisory: OSV:PYSEC-2026-151...

yowasp-nextpnr-ecp5 (>=0.0.0.post3694.dev181, <=0.0.0.post3816.dev218), yowasp-nextpnr-ecp5-25k (>=0.0.0.post3694.dev181, <=0.0.0.post3816.dev218) +13 more potentially affected by CVE-2026-34983 via wasmtime (0.28.1)

wasmtime PYPI version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - yowasp-nextpnr-ecp5 =0.0.0.post3694.dev181, =0.0.0.post3694.dev181, =0.0.0.post3694.dev181, =0.0.0.post3694.dev181, =0.0.0.post3694.dev181,...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +8565 more potentially affected by CVE-2026-25854 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.52)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-25854 Source advisory: MEND:CVE-2026-25854...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +14577 more potentially affected by CVE-2025-62718 via axios (>=1.0.0, <=1.14.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2025-62718 Source advisory: OSV:GHSA-3P68-RC4W-QGX5...

@albirex/platformatic-logto (>=1.0.0, <=3.1.2), @aoi-js/server (>=1.2.3, <=1.2.11) +116 more potentially affected by CVE-2026-35041 via fast-jwt (>=5.0.0, <=6.0.1)

fast-jwt NPM version =5.0.0, =1.0.0, =1.2.3, =1.0.6, =1.0.11, =1.9.4, =0.1.2, =0.16.13, =0.16.13, =2.0.5, =5.0.1, =1.0.6, =9.0.2, =0.4.15, =0.10.0, =0.81.0 and more Source cves: CVE-2026-35041 Source advisory: SNYK:JS-FASTJWT-15965925...