4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33672 via picomatch (3.0.1)

picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...

@10xsai/cloudflare-router-nx-plugin (1.0.0), @4itech/schematics (>=11.7.1, <=11.7.6) +1089 more potentially affected by CVE-2026-33671 via picomatch (>=4.0.1, <=4.0.3)

picomatch NPM version =4.0.1, =11.7.1, =1.2.0, =8.3.0-rc.2, =1.0.25, =0.26.4, =0.0.17, =0.0.47, =0.0.1, =1.0.0, =1.0.0, =10.0.0-alpha.1, =10.0.0-prerelease.90, =13.0.0-next.10, =14.3.0-prerelease.1 and more Source cves: CVE-2026-33671 Source advisory: SNYK:JS-PICOMATCH-15765511...

4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33671 via picomatch (3.0.1)

picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...

4itech-schematics (>=11.0.0-0, <=11.3.0-1), @142vip/midway (>=0.1.6-alpha.2, <=0.1.6-alpha.12) +578 more potentially affected by CVE-2026-33671 via picomatch (>=2.1.1, <=2.3.1)

picomatch NPM version =2.1.1, =11.0.0-0, =0.1.6-alpha.2, =7.4.1, =0.0.1, =1.0.1, =0.0.2, =2.0.0, =9.0.0-alpha.28, =9.2.0-alpha.9, =9.2.0-alpha.9, =1.0.101, =1.1.0, =1.4.1 and more Source cves: CVE-2026-33671 Source advisory: OSV:GHSA-C2C7-RCM5-VVQJ...

4itech-schematics (>=11.0.0-0, <=11.3.0-1), @142vip/midway (>=0.1.6-alpha.2, <=0.1.6-alpha.12) +578 more potentially affected by CVE-2026-33671 via picomatch (>=2.1.1, <=2.3.1)

picomatch NPM version =2.1.1, =11.0.0-0, =0.1.6-alpha.2, =7.4.1, =0.0.1, =1.0.1, =0.0.2, =2.0.0, =9.0.0-alpha.28, =9.2.0-alpha.9, =9.2.0-alpha.9, =1.0.101, =1.1.0, =1.4.1 and more Source cves: CVE-2026-33671 Source advisory: SNYK:JS-PICOMATCH-15765511...

@klardaten/n8n-nodes-datevconnect (>=1.0.1, <=1.0.2), @n8n/ai-workflow-builder (>=0.14.0, <=0.30.2) +17 more potentially affected by CVE-2026-33665 via @n8n/constants (>=0.2.0, <=0.13.0)

@n8n/constants NPM version =0.2.0, =1.0.1, =0.14.0, =0.3.0, =0.3.0, =0.5.0, =0.2.0, =1.1.0, =1.28.0, =1.90.0, =1.90.0, =1.0.1, =0.3.3, =0.1.3, =0.2.0, =0.2.1 and more Source cves: CVE-2026-33665 Source advisory: SNYK:JS-N8NCONSTANTS-15837401...

@actinc/eslint-config (>=4.10.0, <=4.16.0), @alexgorbatchev/dotfiles (>=0.0.1, <=1.0.4) +323 more potentially affected by unknown CVE via smol-toml (>=1.1.2, <=1.6.0)

smol-toml NPM version =1.1.2, =4.10.0, =0.0.1, =2.8.0, =0.1.0-alpha.0, =0.1.3, =0.1.3, =0.1.3, =0.2.2, =0.32.3, =0.2.2, =1.0.0, =1.0.4, =0.2.0, =0.0.4, =0.0.4, =9.0.0-canary.1784 and more Source cves: unknown CVE Source advisory: SNYK:JS-SMOLTOML-15768230...

@0xgraph/cli (>=0.0.1, <=0.2.1), @7speck/logger (>=1.0.2, <=1.0.3) +936 more potentially affected by CVE-2026-33532 via yaml (>=1.0.0, <=1.10.2)

yaml NPM version =1.0.0, =0.0.1, =1.0.2, =1.0.1, =0.0.1, =0.0.0-nightly-20240619-f62ef04, =1.6.3, =1.0.0, =0.9.1-pre.3, =0.11.1-pre.3, =0.6.1-pre.1, =1.0.0, =0.0.10, =2.9.1, =1.0.3, =0.6.6, =0.12.10 and more Source cves: CVE-2026-33532 Source advisory: SNYK:JS-YAML-15765520...

@0xgraph/cli (>=0.0.1, <=0.2.1), @7speck/logger (>=1.0.2, <=1.0.3) +936 more potentially affected by CVE-2026-33532 via yaml (>=1.0.0, <=1.10.2)

yaml NPM version =1.0.0, =0.0.1, =1.0.2, =1.0.1, =0.0.1, =0.0.0-nightly-20240619-f62ef04, =1.6.3, =1.0.0, =0.9.1-pre.3, =0.11.1-pre.3, =0.6.1-pre.1, =1.0.0, =0.0.10, =2.9.1, =1.0.3, =0.6.6, =0.12.10 and more Source cves: CVE-2026-33532 Source advisory: OSV:GHSA-48C2-RRV3-QJMP...

@0dotxyz/p0-ts-sdk (>=2.1.1, <=2.2.0-alpha.4), @1stg/app-config (>=4.0.0, <=9.0.1) +2350 more potentially affected by CVE-2026-33532 via yaml (>=2.0.0, <=2.8.2)

yaml NPM version =2.0.0, =2.1.1, =4.0.0, =4.2.0, =6.0.0, =0.0.3, =1.0.0, =7.0.0-beta.1, =0.1.0-alpha.1, =0.24.1-20230627140514, =0.25.1-20250326172337, =0.24.1-20230627140514, =3.25.5, =3.10.2-20230627150207, =3.14.1-20230608124329, =3.32.1 and more Source cves: CVE-2026-33532 Source advisory:...

@0dotxyz/p0-ts-sdk (>=2.1.1, <=2.2.0-alpha.4), @1stg/app-config (>=4.0.0, <=9.0.1) +2350 more potentially affected by CVE-2026-33532 via yaml (>=2.0.0, <=2.8.2)

yaml NPM version =2.0.0, =2.1.1, =4.0.0, =4.2.0, =6.0.0, =0.0.3, =1.0.0, =7.0.0-beta.1, =0.1.0-alpha.1, =0.24.1-20230627140514, =0.25.1-20250326172337, =0.24.1-20230627140514, =3.25.5, =3.10.2-20230627150207, =3.14.1-20230608124329, =3.32.1 and more Source cves: CVE-2026-33532 Source advisory:...

@brainbase-ai/action-read (0.0.1), @brainbase-ai/actions (>=3.2.105, <=3.2.107) +71 more potentially affected by CVE-2026-26831 via textract (>=1.1.1, <=2.5.0)

textract NPM version =1.1.1, =3.2.105, =0.0.0, =0.0.0, =0.0.0, =0.0.15, =0.0.0, =0.0.0, =0.1.0, =1.0.0-beta.70, =0.1.1, =0.7.0, =0.0.1, =0.0.10 and more Source cves: CVE-2026-26831 Source advisory: SNYK:JS-TEXTRACT-15874118...

@aaquib/whatsasenanpm (1.3.5), @alexandersen01/sharepoint-mcp-server-better (0.3.23) +86 more potentially affected by CVE-2026-26832 via node-tesseract-ocr (>=0.1.0, <=2.2.1)

node-tesseract-ocr NPM version =0.1.0, =1.0.10, =0.0.1, =2.3.50-snapshot-1724322551764, =2.0.0, =0.0.1, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-26832 Source advisory: SNYK:JS-NODETESSERACTOCR-15874141...

at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1, <=9.1.3.2), au.com.acegi:xml-format-maven-plugin (>=4.0.1, <=4.1.0) +2044 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=4.0.0, <=4.0.2)

org.codehaus.plexus:plexus-utils MAVEN version =4.0.0, =9.1.1, =4.0.1, =0.0.1, =0.0.9, =0.4.0, =0.0.0, =1.9.2, =1.0.0-m5, =1.0.0-m6, =1.0.0-m1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =1.0.0-m10 and more Source cves: CVE-2025-67030 Source advisory: GHSA-6FMV-XXPF-W3CW...

com.atlassian.maven.plugins:maven-clover2-plugin (>=2.3.1, <=2.4.2), com.intel.analytics.bigdl.core.dist:all (>=0.4.0, <=0.13.0) +192 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.4.6)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.atlassian.maven.plugins:maven-clover2-plugin =2.3.1, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0...

com.wiley:teasy (>=1.0.0-beta, <=1.0.23-beta), de.agilecoders.wicket:bootstrap (>=0.5.4, <=0.6.1) +36 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.5.12)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.wiley:teasy =1.0.0-beta, =0.5.4, =0.6.0, =0.6.0, =1.1.2, =1.1, =1.1.2, =1.1.2, =1.1.2, =1....

ch.fortysix:maven-postman-plugin (>=0.1.0, <=0.1.6), com.github.automately:automately-core (>=1.8.6, <=1.8.8) +155 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (2.0.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ch.fortysix:maven-postman-plugin =0.1.0, =1.8.6, =0.0.9, =0.0.9, =0.0.9, =0.0.12, =0.0.9, =0.0....

aero.albers.osmbse:mdzip-process-sources-maven-plugin (0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (0.0.1) +17813 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.6.0)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =1.9.0, =1.9.0, =1.9.0, =0.1, =0.1.0, =0.0.1, =0.0.6, =0.1.10, =0.1.3, =0.0.1, =0.0.1, =0.2.0, =0.1.3, =0.1.5 and more Source cves: CVE-2025-67030 Source advisory: GHSA-6FMV-XXPF-W3CW...

au.com.alderaan:eclipselink-staticweave-maven-plugin (>=1.0.0, <=1.0.4), biz.paluch.maven.configurator:configurator-maven-plugin (>=1.0, <=1.0.1) +592 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.5.1)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - au.com.alderaan:eclipselink-staticweave-maven-plugin =1.0.0, =1.0, =1.0.26, =1.3.2-snapshot,...

app.keyconnect.api:keyconnect-api (1.0.0), app.keyconnect:keyconnect-rippled-api (1.0.0) +298 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.5.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - app.keyconnect.api:keyconnect-api 1.0.0 - app.keyconnect:keyconnect-rippled-api 1.0.0 -...