@ablehi/automation-app-build (>=0.1.0, <=0.3.6), @ablehi/automation-app-cli (>=0.1.0, <=0.3.5) +69 more potentially affected by CVE-2026-39364 via vite (>=8.0.0, <=8.0.3)

vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =3.0.1-alpha.0, =3.3.0, =11.17.0-depup.0, =35.0.0, =17.1.0, =4.0.0, =9.6.10, =0.0.0-experimental-1c4cca1-20260410-cca3318b, =0.0.0-experimental-196ba2e-20260326-ed190390, =0.1.0, =0.3.1 and more Source cves: CVE-2026-39364 Source advisory:...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +204 more potentially affected by CVE-2026-39363 via vite (>=6.0.0, <=6.4.1)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source cves: CVE-2026-39363 Source advisory: SNYK:JS-VITE-15922242...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +204 more potentially affected by CVE-2026-39363 via vite (>=6.0.0, <=6.4.1)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source cves: CVE-2026-39363 Source advisory: OSV:GHSA-P9FF-H696-F583...

@142vip/vuepress (>=0.0.1-alpha.19, <=0.0.1-alpha.25), @agregio-solutions/design-system (>=1.89.2, <=1.89.4) +236 more potentially affected by CVE-2026-39363 via vite (>=7.0.0, <=7.3.1)

vite NPM version =7.0.0, =0.0.1-alpha.19, =1.89.2, =20.1.0-next.3, =20.1.0-next.3, =0.1.0, =0.0.4, =0.2.9, =0.79.1, =1.0.0, =1.0.0-beta.23, =2.1.2-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.37.0 and more Source cves: CVE-2026-39363 Source advisory: OSV:GHSA-P9FF-H696-F583...

@ablehi/automation-app-build (>=0.1.0, <=0.3.6), @ablehi/automation-app-cli (>=0.1.0, <=0.3.5) +69 more potentially affected by CVE-2026-39363 via vite (>=8.0.0, <=8.0.3)

vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =3.0.1-alpha.0, =3.3.0, =11.17.0-depup.0, =35.0.0, =17.1.0, =4.0.0, =9.6.10, =0.0.0-experimental-1c4cca1-20260410-cca3318b, =0.0.0-experimental-196ba2e-20260326-ed190390, =0.1.0, =0.3.1 and more Source cves: CVE-2026-39363 Source advisory:...

@142vip/vuepress (>=0.0.1-alpha.19, <=0.0.1-alpha.25), @agregio-solutions/design-system (>=1.89.2, <=1.89.4) +236 more potentially affected by CVE-2026-39363 via vite (>=7.0.0, <=7.3.1)

vite NPM version =7.0.0, =0.0.1-alpha.19, =1.89.2, =20.1.0-next.3, =20.1.0-next.3, =0.1.0, =0.0.4, =0.2.9, =0.79.1, =1.0.0, =1.0.0-beta.23, =2.1.2-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.37.0 and more Source cves: CVE-2026-39363 Source advisory: SNYK:JS-VITE-15922242...

@ablehi/automation-app-build (>=0.1.0, <=0.3.6), @ablehi/automation-app-cli (>=0.1.0, <=0.3.5) +69 more potentially affected by CVE-2026-39363 via vite (>=8.0.0, <=8.0.3)

vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =3.0.1-alpha.0, =3.3.0, =11.17.0-depup.0, =35.0.0, =17.1.0, =4.0.0, =9.6.10, =0.0.0-experimental-1c4cca1-20260410-cca3318b, =0.0.0-experimental-196ba2e-20260326-ed190390, =0.1.0, =0.3.1 and more Source cves: CVE-2026-39363 Source advisory:...

@ablehi/automation-app-build (>=0.1.0, <=0.3.6), @ablehi/automation-app-cli (>=0.1.0, <=0.3.5) +69 more potentially affected by CVE-2026-39363 via vite (>=8.0.0, <=8.0.3)

vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =3.0.1-alpha.0, =3.3.0, =11.17.0-depup.0, =35.0.0, =17.1.0, =4.0.0, =9.6.10, =0.0.0-experimental-1c4cca1-20260410-cca3318b, =0.0.0-experimental-196ba2e-20260326-ed190390, =0.1.0, =0.3.1 and more Source cves: CVE-2026-39363 Source advisory:...

@slidev-react/cli (>=0.4.6, <=0.4.14), @slidev-react/node (>=0.4.6, <=0.4.14) potentially affected by CVE-2026-39363 via vite-plus (0.1.11)

vite-plus NPM version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on vite-plus and may be impacted: - @slidev-react/cli =0.4.6, =0.4.6, =0.4.14 Source cves: CVE-2026-39363 Source advisory: SNYK:JS-VITEPLUS-15922243...

@142vip/nest (>=0.0.1-alpha.2, <=0.0.1-alpha.10), @142vip/nest-starter (>=0.0.1-alpha.9, <=0.0.1-alpha.14) +88 more potentially affected by CVE-2026-35515 via @nestjs/core (>=11.0.0, <=11.1.17)

@nestjs/core NPM version =11.0.0, =0.0.1-alpha.2, =0.0.1-alpha.9, =0.0.1, =13.3.0-rc.7, =1.1.3, =6.0.0-alpha.1, =3.8.8, =1.114.0, =3.8.8, =1.0.3-alpha.0b30e6d.0, =20250227.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-35515 Source advisory: SNYK:JS-NESTJSCORE-15920868...

03-api-solid (>=1.0.0, <=1.1.2), @aitech-asia/cms (>=0.0.1, <=2.0.35) +315 more potentially affected by CVE-2026-35039 via fast-jwt (>=0.1.1, <=6.0.1)

fast-jwt NPM version =0.1.1, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =1.1.1, =0.2.0, =0.2.0, =0.1.0, =1.0.6, =1.0.11, =1.9.4, =0.8.0, =0.1.1, =0.5.0, =0.7.0, =1.0.0-beta.0 and more Source cves: CVE-2026-35039 Source advisory: MEND:CVE-2026-35039...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +124 more potentially affected by CVE-2026-34756 via vllm (>=0.1.3, <=0.16.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2026-34756 Source advisory: OSV:PYSEC-2026-2298...

meralion-3-asr (>=0.0.2, <=0.1.0), omnes-flores (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2026-34753 via vllm (0.16.0)

vllm PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - meralion-3-asr =0.0.2, =0.1.0, =0.1.1 - vllm-canon 0.1.0 Source cves: CVE-2026-34753 Source advisory: MEND:CVE-2026-34753...

fuel-p2p (>=0.4.0, <=0.5.0), libp2p (>=0.40.0-rc.1, <=0.42.2) +1 more potentially affected by CVE-2026-35457 via libp2p-rendezvous (>=0.1.0, <=0.3.0)

libp2p-rendezvous CARGO version =0.1.0, =0.4.0, =0.40.0-rc.1, =0.20.0, =0.21.0 Source cves: CVE-2026-35457 Source advisory: OSV:GHSA-V5HW-CV9C-RPG7...

fuel-p2p (>=0.4.0, <=0.5.0), libp2p (>=0.40.0-rc.1, <=0.42.2) +1 more potentially affected by CVE-2026-35405 via libp2p-rendezvous (>=0.1.0, <=0.3.0)

libp2p-rendezvous CARGO version =0.1.0, =0.4.0, =0.40.0-rc.1, =0.20.0, =0.21.0 Source cves: CVE-2026-35405 Source advisory: OSV:GHSA-CQFX-GF56-8X59...

@0t4u-org/eslint-config (>=0.6.0, <=0.6.2), @142vip/vue (>=0.1.6-alpha.11, <=0.1.6-alpha.18) +483 more potentially affected by CVE-2026-35209 via defu (>=6.0.0, <=6.1.4)

defu NPM version =6.0.0, =0.6.0, =0.1.6-alpha.11, =0.0.1, =0.0.3, =1.0.0, =0.1.22, =0.1.23, =0.1.25 and more Source cves: CVE-2026-35209 Source advisory: SNYK:JS-DEFU-15914644...

@0t4u-org/eslint-config (>=0.6.0, <=0.6.2), @142vip/vue (>=0.1.6-alpha.11, <=0.1.6-alpha.18) +483 more potentially affected by CVE-2026-35209 via defu (>=6.0.0, <=6.1.4)

defu NPM version =6.0.0, =0.6.0, =0.1.6-alpha.11, =0.0.1, =0.0.3, =1.0.0, =0.1.22, =0.1.23, =0.1.25 and more Source cves: CVE-2026-35209 Source advisory: GHSA-737V-MQG7-C878...

@0t4u-org/eslint-config (>=0.6.0, <=0.6.2), @142vip/vue (>=0.1.6-alpha.11, <=0.1.6-alpha.18) +483 more potentially affected by CVE-2026-35209 via defu (>=6.0.0, <=6.1.4)

defu NPM version =6.0.0, =0.6.0, =0.1.6-alpha.11, =0.0.1, =0.0.3, =1.0.0, =0.1.22, =0.1.23, =0.1.25 and more Source cves: CVE-2026-35209 Source advisory: OSV:GHSA-737V-MQG7-C878...

@budibase/backend-core (>=3.0.0, <=3.2.26), @budibase/bbui (>=3.0.0, <=3.2.26) +6 more potentially affected by CVE-2026-35216 via @budibase/shared-core (>=3.0.0, <=3.2.26)

@budibase/shared-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-35216 Source advisory: SNYK:JS-BUDIBASESHAREDCORE-15917499...

@budibase/backend-core (>=3.0.0, <=3.2.26), @budibase/bbui (>=3.0.0, <=3.2.26) +7 more potentially affected by CVE-2026-35214 via @budibase/types (>=3.0.0, <=3.2.26)

@budibase/types NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-35214 Source advisory: SNYK:JS-BUDIBASETYPES-15917494...