@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2026-4800 via lodash-amd (>=4.16.4, <=4.17.23)

lodash-amd NPM version =4.16.4, =0.1.0, =4.1.1, =3.4.0, =0.0.1, =1.0.14, =0.0.7, =0.0.1, =0.1.5 - xirtam--matrix-operations 0.1.3 Source cves: CVE-2026-4800 Source advisory: MEND:CVE-2026-4800...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +5745 more potentially affected by CVE-2026-4800 via lodash-es (>=4.0.0, <=4.17.23)

lodash-es NPM version =4.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1-alpha.23, =1.0.0, =1.0.0, =2.14.1, =41.3.1, =2.1.0, =0.3.4, =0.4.5, =0.3.5, =0.3.5, =0.3.5, =0.3.5, =0.5.0 and more Source cves: CVE-2026-4800 Source advisory: MEND:CVE-2026-4800...

@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +250 more potentially affected by CVE-2026-2950 via lodash.unset (>=4.0.2, <=4.5.2)

lodash.unset NPM version =4.0.2, =2.16.49, =1.8.28, =1.2.1, =1.8.4, =8.0.0, =1.0.75, =0.0.2, =0.1.0, =1.31.9, =0.0.4, =0.6.0 and more Source cves: CVE-2026-2950 Source advisory: MEND:CVE-2026-2950...

1m-handshake (>=0.1.3, <=0.1.6), aae-protocol (0.9.0) +687 more potentially affected by CVE-2026-34073 via cryptography (45.0.7)

cryptography PYPI version 45.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - 1m-handshake =0.1.3, =2.4.119, =3.2.1, =0.2.0, =0.0.2, =0.1.0, =2.1.7, =1.3.9, =1.1.16, =0.4.0rc1, =0.4.3 and more Source cves:...

apputils-config (>=2.0.2.dev19, <=2.0.2.dev20), aws-gate (>=0.9.3, <=0.11.0) +43 more potentially affected by CVE-2026-34073 via cryptography (3.3.1)

cryptography PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - apputils-config =2.0.2.dev19, =0.9.3, =0.1.1, =1.1.0, =1.2.3, =3.26.0, =0.1.1, =21.1.0, =0.1.0, =0.0.1, =0.2.0, =0.2.8 and more Source...

atsdk (0.2.24), auditor-apel-plugin (>=0.6.1, <=0.6.2) +64 more potentially affected by CVE-2026-34073 via cryptography (43.0.0)

cryptography PYPI version 43.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atsdk 0.2.24 - auditor-apel-plugin =0.6.1, =0.0.2, =1.1.3, =2.0.0, =0.0.21, =0.2.1, =1.0.1, =1.1.7, =1.0.0, =1.5.3, =1.5.3, =1.5.7 and...

abst (2.3.59), abundance (0.0.1b0) +694 more potentially affected by CVE-2026-34073 via cryptography (44.0.3)

cryptography PYPI version 44.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - abst 2.3.59 - abundance 0.0.1b0 - acedeploy =2.4.15, =0.6.3, =1.0.0, =0.3.1, =1.0.0a6, =0.4.0, =4.5.0, =0.20.1, =0.27.0 and more Source...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2026-34073 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...

biweeklybudget (>=0.1.0, <=0.7.0), crossbar (17.3.1) +6 more potentially affected by CVE-2026-34073 via cryptography (1.8.1)

cryptography PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - biweeklybudget =0.1.0, =1.6.0, =1.1.2, =2.2.0, =0.3.4, =0.3.5 - typtop 0.2.11 Source cves: CVE-2026-34073 Source advisory:...

agixt (>=1.2.4, <=1.3.11), authx (0.9.1) +15 more potentially affected by CVE-2026-34073 via cryptography (41.0.0)

cryptography PYPI version 41.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agixt =1.2.4, =1.0.479, =1.3.5rc1, =1.0.0, =1.10.0, =2.0.0, =3.10.0rc1, =3.10.0rc1, =3.10.0rc1, =4.0.0a5 and more Source cves:...

accomate (>=1.0.4, <=2.0.0.6), authx (>=0.5.0, <=0.5.1) +68 more potentially affected by CVE-2026-34073 via cryptography (37.0.2)

cryptography PYPI version 37.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - accomate =1.0.4, =0.5.0, =3.1.0, =1.1.0a0, =0.1.0, =1.3.697, =1.0.0, =0.0.3, =3.58.0, =4.4.3, =4.5.0 - downleth 1.0.0 and more Source...

akasha-terminal (>=0.8.0, <=0.8.5), biochatter (>=0.3.5, <=0.4.12) +23 more potentially affected by CVE-2026-34070 via langchain-core (0.0.13)

langchain-core PYPI version 0.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - akasha-terminal =0.8.0, =0.3.5, =0.0.1, =0.0.1, =0.0.5, =1.7.0, =1.7.0, =0.0.342, =0.0.1rc1, =0.0.44, =0.0.46 and more Source cves:...

-react-file-list-components (1.1.1), 00ld8nuivn (2.1.0) +44958 more potentially affected by CVE-2026-34043 via serialize-javascript (>=5.0.0, <=7.0.4)

serialize-javascript NPM version =5.0.0, =0.1.0, =0.1.9 - 01dk01majk 2.1.0 - 02.aula 1.0.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1.0 - 06dre15t8r 2.1.0 - 06p998toez 0.1.0 - 07fgapmu9l 1.1.0 - 07t2xvu6t4 2.1.0 and more Source cves: CVE-2026-3404...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.10) potentially affected by CVE-2026-34373 via parse-server (>=9.6.0-alpha.37, <=9.6.1)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.10 Source cves: CVE-2026-34373 Source advisory: SNYK:JS-PARSESERVER-15855397...

@bigegg/parse-server-schema-config (>=1.0.5, <=1.0.10), @kontaa/subgraph (>=1.0.1, <=1.2.3) +8 more potentially affected by CVE-2026-34373 via parse-server (>=3.10.0, <=7.5.4)

parse-server NPM version =3.10.0, =1.0.5, =1.0.1, =1.2.1, =2.4.46, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.1.0 - servable-publishable 1.1.0 Source cves: CVE-2026-34373 Source advisory: OSV:GHSA-Q3P6-G7C4-829C...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.10) potentially affected by CVE-2026-34373 via parse-server (>=9.6.0-alpha.37, <=9.6.1)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.10 Source cves: CVE-2026-34373 Source advisory: OSV:GHSA-Q3P6-G7C4-829C...

@bigegg/parse-server-schema-config (>=1.0.5, <=1.0.10), @kontaa/subgraph (>=1.0.1, <=1.2.3) +8 more potentially affected by CVE-2026-34373 via parse-server (>=3.10.0, <=7.5.4)

parse-server NPM version =3.10.0, =1.0.5, =1.0.1, =1.2.1, =2.4.46, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.1.0 - servable-publishable 1.1.0 Source cves: CVE-2026-34373 Source advisory: SNYK:JS-PARSESERVER-15855397...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.10) potentially affected by CVE-2026-34363 via parse-server (>=9.6.0-alpha.37, <=9.6.1)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.10 Source cves: CVE-2026-34363 Source advisory: SNYK:JS-PARSESERVER-15855398...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.10) potentially affected by CVE-2026-34363 via parse-server (>=9.6.0-alpha.37, <=9.6.1)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.10 Source cves: CVE-2026-34363 Source advisory: OSV:GHSA-M983-V2FF-WQ65...

@tinacms/app (>=0.0.0-07588d1-20260311013317, <=2.4.0), @tinacms/cli (>=0.0.0-07588d1-20260311013317, <=2.2.0) +4 more potentially affected by CVE-2026-33949 via @tinacms/graphql (>=2.0.0, <=2.2.1)

@tinacms/graphql NPM version =2.0.0, =0.0.0-07588d1-20260311013317, =0.0.0-07588d1-20260311013317, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-07588d1-20260311013317, =0.0.0-07588d1-20260311013317, =3.7.0 Source cves: CVE-2026-33949 Source advisory: SNYK:JS-TINACMSGRAPHQL-15855320...