@openinc/parse-server-opendash (>=4.0.0, <=4.0.10) potentially affected by CVE-2026-34363 via parse-server (>=9.6.0-alpha.37, <=9.6.1)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.10 Source cves: CVE-2026-34363 Source advisory: OSV:GHSA-M983-V2FF-WQ65...

@tinacms/app (>=0.0.0-07588d1-20260311013317, <=2.4.0), @tinacms/cli (>=0.0.0-07588d1-20260311013317, <=2.2.0) +4 more potentially affected by CVE-2026-33949 via @tinacms/graphql (>=2.0.0, <=2.2.1)

@tinacms/graphql NPM version =2.0.0, =0.0.0-07588d1-20260311013317, =0.0.0-07588d1-20260311013317, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-07588d1-20260311013317, =0.0.0-07588d1-20260311013317, =3.7.0 Source cves: CVE-2026-33949 Source advisory: SNYK:JS-TINACMSGRAPHQL-15855320...

blake-streams (0.1.0), fuel-p2p (>=0.4.0, <=0.5.0) +9 more potentially affected by CVE-2026-34219 via libp2p-gossipsub (>=0.28.0, <=0.35.0)

libp2p-gossipsub CARGO version =0.28.0, =0.4.0, =0.20.0, =0.36.0, =0.16.0, =0.1.0, =0.1.1, =0.2.0, =0.39.1, =0.39.3 Source cves: CVE-2026-34219 Source advisory: OSV:GHSA-XQMP-FXGV-XVQ5...

filecc (>=0.0.1, <=1.0.1), gm-i18n-migrate (>=2.7.0, <=2.9.0) +3 more potentially affected by unknown CVE via opencc (>=1.0.6, <=1.1.3)

opencc NPM version =1.0.6, =0.0.1, =2.7.0, =2.7.2, =1.0.2, =1.0.5 - wise-paas-notify-utility 1.4.10-s2t1 Source cves: unknown CVE Source advisory: OSV:GHSA-7FQQ-Q52P-2JJG...

07-calito-router (>=0.0.2, <=0.0.4), @anyauth/design-system (>=0.5.0, <=0.5.1) +17 more potentially affected by CVE-2026-34226 via happy-dom (>=20.0.0, <=20.8.8)

happy-dom NPM version =20.0.0, =0.0.2, =0.5.0, =0.1.0, =0.1.1, =0.2.0, =2.0.0, =1.1.0, =0.0.1-alpha-10, =0.1.0-alpha.0, =9.0.0, =0.0.6, =5.50.0, =5.50.1 and more Source cves: CVE-2026-34226 Source advisory: OSV:GHSA-W4GP-FJGQ-3Q4G...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.10) potentially affected by CVE-2026-34224 via parse-server (>=9.6.0-alpha.37, <=9.6.1)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.10 Source cves: CVE-2026-34224 Source advisory: OSV:GHSA-W73W-G5XW-RWHF...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.10) potentially affected by CVE-2026-34224 via parse-server (>=9.6.0-alpha.37, <=9.6.1)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.10 Source cves: CVE-2026-34224 Source advisory: SNYK:JS-PARSESERVER-15812213...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by CVE-2026-73427 via trix (>=2.0.8, <=2.1.15)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: CVE-2026-73427 Source advisory: GHSA-53P3-C7VP-4MCC...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by CVE-2026-73427 via trix (>=2.0.8, <=2.1.15)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: CVE-2026-73427 Source advisory: OSV:GHSA-53P3-C7VP-4MCC...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.8, <=2.1.15)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-TRIX-15813061...

4coders-commons (>=0.0.1, <=0.0.2), @1delta/aggregators (>=0.1.0, <=0.1.6) +2152 more potentially affected by unknown CVE via handlebars (>=4.6.0, <=4.7.8)

handlebars NPM version =4.6.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.0.0, =0.1.0-alpha.1, =3.1.2, =3.1.6, =0.0.1, =0.1.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7RX3-28CR-V...

4coders-commons (>=0.0.1, <=0.0.2), @1delta/aggregators (>=0.1.0, <=0.1.6) +2152 more potentially affected by unknown CVE via handlebars (>=4.6.0, <=4.7.8)

handlebars NPM version =4.6.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.0.0, =0.1.0-alpha.1, =3.1.2, =3.1.6, =0.0.1, =0.1.7 and more Source cves: unknown CVE Source advisory:...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3655 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.7.8)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: unknown CVE Source advisory: SNYK:JS-HANDLEBARS-15813000...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3655 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.7.8)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-442J-39WM-28R2...

@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @lucid-agents/mpp (1.0.0) +9 more potentially affected by unknown CVE via mppx (>=0.1.1, <=0.4.7)

mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.0.0-pr-153-20260307193247, =0.1.0, =0.1.1, =0.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-MPPX-15857153...

@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @lucid-agents/mpp (1.0.0) +9 more potentially affected by unknown CVE via mppx (>=0.1.1, <=0.4.7)

mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.0.0-pr-153-20260307193247, =0.1.0, =0.1.1, =0.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8X4M-QW58-3PCX...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.10) potentially affected by CVE-2026-34215 via parse-server (>=9.6.0-alpha.37, <=9.6.1)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.10 Source cves: CVE-2026-34215 Source advisory: SNYK:JS-PARSESERVER-15812212...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.10) potentially affected by CVE-2026-34215 via parse-server (>=9.6.0-alpha.37, <=9.6.1)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.10 Source cves: CVE-2026-34215 Source advisory: OSV:GHSA-WP76-GG32-8258...

@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34209 via mppx (>=0.1.1, <=0.4.9)

mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34209 Source advisory: SNYK:JS-MPPX-15857147...

@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34209 via mppx (>=0.1.1, <=0.4.9)

mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34209 Source advisory: OSV:GHSA-MV9J-8JVG-J8MR...