@studiocms/migrator (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-30945 via studiocms (>=0.2.0, <=0.3.0)

studiocms NPM version =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2026-30945 Source advisory: OSV:GHSA-8RGJ-VRFR-6HQR...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-31826 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....

indico (>=3.2.6, <=3.2.9) potentially affected by CVE-2026-31826 via pypdf (3.12.1)

pypdf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - indico =3.2.6, =3.2.9 Source cves: CVE-2026-31826 Source advisory: OSV:GHSA-HQMH-PPP3-XVM7...

ai-enterprise-agent (>=0.0.4, <=0.0.9), almax-common (>=1.0.5.dev20240601224039, <=1.0.7.dev20240801212517) +25 more potentially affected by CVE-2026-31826 via pypdf (4.2.0)

pypdf PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - ai-enterprise-agent =0.0.4, =1.0.5.dev20240601224039, =2024.7.4, =0.6.22, =0.2.1, =0.2.0, =0.0.5, =0.2.1, =3.3.2, =0.1.0, =0.0.1, =4.7.1, =0.1.0, =0.1...

iiiflow (>=0.1.0, <=1.3.2), mayan-edms (>=4.5.0, <=4.5.8) potentially affected by CVE-2026-31826 via pypdf (3.14.0)

pypdf PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - iiiflow =0.1.0, =4.5.0, =4.5.8 Source cves: CVE-2026-31826 Source advisory: OSV:GHSA-HQMH-PPP3-XVM7...

cewler (1.2.0.post1), python-xdoc (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-31826 via pypdf (4.0.1)

pypdf PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cewler 1.2.0.post1 - python-xdoc =0.1.0, =0.1.1 Source cves: CVE-2026-31826 Source advisory: OSV:GHSA-HQMH-PPP3-XVM7...

mimir-ai (0.0.3), rara-digitizer (>=1.0.0, <=1.5.8) potentially affected by CVE-2026-31826 via pypdf (5.0.0)

pypdf PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - mimir-ai 0.0.3 - rara-digitizer =1.0.0, =1.5.8 Source cves: CVE-2026-31826 Source advisory: OSV:GHSA-HQMH-PPP3-XVM7...

docat (1.0.0) potentially affected by CVE-2026-31826 via pypdf (4.0.0)

pypdf PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docat 1.0.0 Source cves: CVE-2026-31826 Source advisory: OSV:GHSA-HQMH-PPP3-XVM7...

actix-remote (0.1.0), agnostic (>=0.2.5, <=0.2.6) +265 more potentially affected by CVE-2026-31812 via quinn-proto (>=0.2.0, <=0.11.9)

quinn-proto CARGO version =0.2.0, =0.2.5, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.5.0, =2.0.0, =0.2.3, =0.2.11 and more Source cves: CVE-2026-31812 Source advisory: OSV:GHSA-6XVM-J4WR-6V98...

0.extends.wechat (>=1.0.51, <=1.0.65), 1-test-gulp-1 (>=0.0.1, <=0.0.4) +16135 more potentially affected by CVE-2026-31808 via file-type (>=13.0.3, <=21.3.0)

file-type NPM version =13.0.3, =1.0.51, =0.0.1, =2.2.0-alpha.0, =3.1.4, =1.0.0, =0.0.1, =1.0.0, =3.1.6, =1.0.0, =1.0.0, =0.0.1, =0.0.2, =0.6.4 and more Source cves: CVE-2026-31808 Source advisory: SNYK:JS-FILETYPE-15456217...

0.extends.wechat (>=1.0.51, <=1.0.65), 1-test-gulp-1 (>=0.0.1, <=0.0.4) +16135 more potentially affected by CVE-2026-31808 via file-type (>=13.0.3, <=21.3.0)

file-type NPM version =13.0.3, =1.0.51, =0.0.1, =2.2.0-alpha.0, =3.1.4, =1.0.0, =0.0.1, =1.0.0, =3.1.6, =1.0.0, =1.0.0, =0.0.1, =0.0.2, =0.6.4 and more Source cves: CVE-2026-31808 Source advisory: OSV:GHSA-5V7R-6R5C-R473...

@adenta/cms (>=0.0.6, <=1.1.1-0), @adobe/helix-deploy (>=11.0.19, <=11.1.15) +540 more potentially affected by CVE-2026-31802 via tar (>=7.0.0, <=7.5.10)

tar NPM version =7.0.0, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =0.1.1, =0.1.1, =2.17.11, =1.9.5, =8.8.3, =8.11.4 - @altipla/directus-sdk-utils 0.7.2 - @applitools/core 4.20.0 - @applitools/core-base 1.17.0 - @applitools/ec-client 1.9.6 - @applitools/eyes 1.23.0 - @applitools/eyes-playwright 1.29.1 and...

org.webjars.npm:canvas (>=2.5.0, <=2.6.0), org.webjars.npm:color-thief (2.2.5) +12 more potentially affected by CVE-2026-31802 via org.webjars.npm:tar (>=0.1.20, <=4.4.19)

org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz 1.0.7 Source cves: CVE-2026-31802 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15456202...

@adenta/cms (>=0.0.6, <=1.1.1-0), @adobe/helix-deploy (>=11.0.19, <=11.1.15) +540 more potentially affected by CVE-2026-31802 via tar (>=7.0.0, <=7.5.10)

tar NPM version =7.0.0, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =0.1.1, =0.1.1, =2.17.11, =1.9.5, =8.8.3, =8.11.4 - @altipla/directus-sdk-utils 0.7.2 - @applitools/core 4.20.0 - @applitools/core-base 1.17.0 - @applitools/ec-client 1.9.6 - @applitools/eyes 1.23.0 - @applitools/eyes-playwright 1.29.1 and...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +615 more potentially affected by CVE-2026-31826 via pypdf (>=3.1.0, <=6.7.5)

pypdf PYPI version =3.1.0, =0.1.1, =0.9.1, =0.0.2, =0.0.1, =0.1.4, =0.1.0a0.dev0, =0.2.0a0, =0.0.1, =0.0.4, =0.0.9 and more Source cves: CVE-2026-31826 Source advisory: MEND:CVE-2026-31826...

@ind-rcg/generator (>=262.1002.0-beta.2, <=264.1004.0-beta.1), @ind-rcg/modeler-sfdx-cli-plugin (>=262.1002.0-beta.4, <=264.1004.0-beta.4) +2 more potentially affected by CVE-2026-26801 via pdfmake (>=0.3.0-beta.2, <=0.3.2)

pdfmake NPM version =0.3.0-beta.2, =262.1002.0-beta.2, =262.1002.0-beta.4, =262.1002.0-beta.3, =1.0.0, =2.3.0 Source cves: CVE-2026-26801 Source advisory: OSV:GHSA-WP52-R2FP-4VMR...

@agentic-ui-experience/ui-arcgis (>=0.0.1-beta.1, <=0.0.1-beta.7), @ai-matrx/agents (>=0.47.1, <=0.59.73) +178 more potentially affected by CVE-2026-26801 via pdfmake (>=0.3.0-beta.2, <=0.3.11)

pdfmake NPM version =0.3.0-beta.2, =0.0.1-beta.1, =0.47.1, =0.1.0, =0.2.7, =0.1.0, =0.3.0, =0.1.67, =0.24.0, =0.1.0, =0.3.0, =0.8.0, =0.1.0, =0.1.0, =0.7.0, =0.76.8, =0.99.13 and more Source cves: CVE-2026-26801 Source advisory: SNYK:JS-PDFMAKE-15467449...

@228-fund/elysia-effect (0.0.1), @228-fund/elysia-msgpack (>=0.0.1, <=0.0.3) +68 more potentially affected by CVE-2026-30837 via elysia (>=1.0.9, <=1.4.22)

elysia NPM version =1.0.9, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.1.4, =0.1.0, =0.1.0-next.4, =1.0.0-next.4, =1.0.0, =0.0.1, =1.0.3, =1.0.10 and more Source cves: CVE-2026-30837 Source advisory: SNYK:JS-ELYSIA-15469934...

@228-fund/elysia-effect (0.0.1), @228-fund/elysia-msgpack (>=0.0.1, <=0.0.3) +68 more potentially affected by CVE-2026-30837 via elysia (>=1.0.9, <=1.4.22)

elysia NPM version =1.0.9, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.1.4, =0.1.0, =0.1.0-next.4, =1.0.0-next.4, =1.0.0, =0.0.1, =1.0.3, =1.0.10 and more Source cves: CVE-2026-30837 Source advisory: OSV:GHSA-F45G-68Q3-5W8X...

@bigegg/parse-server-schema-config (>=1.0.5, <=1.0.10), @kontaa/subgraph (>=1.0.1, <=1.2.3) +27 more potentially affected by CVE-2026-30972 via parse-server (>=2.0.8, <=7.5.4)

parse-server NPM version =2.0.8, =1.0.5, =1.0.1, =1.2.1, =2.4.46, =2.4.8, =1.0.0, =1.0.0, =1.0.1, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.29 - parse-cli-server2 0.0.30 and more Source cves: CVE-2026-30972 Source advisory: MEND:CVE-2026-30972...