0.2-ui (0.0.1), 1k-tasks (>=2.3.0, <=3.0.2) +2382 more potentially affected by CVE-2026-27606 via rollup (>=2.0.0, <=2.79.2)

rollup NPM version =2.0.0, =2.3.0, =1.0.17, =1.0.0-canary.1, =0.0.74, =0.0.14, =1.0.0, =0.0.10, =0.0.3, =1.0.1, =1.0.12, =1.0.0, =0.0.4, =0.0.5 and more Source cves: CVE-2026-27606 Source advisory: SNYK:JS-ROLLUP-15340920...

10-javascriptlib (1.0.0), 1k-tasks (>=3.1.0, <=3.6.1) +447 more potentially affected by CVE-2026-27606 via rollup (>=3.0.0, <=3.29.5)

rollup NPM version =3.0.0, =3.1.0, =9.0.19, =0.0.2, =4.0.0-alpha.2, =0.6.0, =12.0.0, =0.0.3, =1.6.3, =3.2.0, =0.1.0, =0.0.4, =3.0.1-canary.8, =3.0.1-canary.12 and more Source cves: CVE-2026-27606 Source advisory: SNYK:JS-ROLLUP-15340920...

1k-tasks (>=4.0.0, <=4.2.2), @adobe/helix-deploy (>=9.3.8, <=9.6.1) +408 more potentially affected by CVE-2026-27606 via rollup (>=4.0.2, <=4.58.0)

rollup NPM version =4.0.2, =4.0.0, =9.3.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.3.0, =2.17.15, =1.0.4, =1.9.12, =2.0.4, =2.0.4, =2.0.4, =2.0.5 and more Source cves: CVE-2026-27606 Source advisory: SNYK:JS-ROLLUP-15340920...

org.webjars.npm:github-com-datatables-datatablessrc (2.0.5), org.webjars.npm:vite (>=2.9.0, <=6.3.5) +1 more potentially affected by CVE-2026-27606 via org.webjars.npm:rollup (>=2.79.2, <=4.45.1)

org.webjars.npm:rollup MAVEN version =2.79.2, =2.9.0, =6.3.5 - org.webjars.npm:vitepress 1.0.0-draft.8 Source cves: CVE-2026-27606 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15340921...

fastapi-helpers (>=0.0.1, <=0.2.3), fastapi-users-db-ormar (1.0.0) +11 more potentially affected by CVE-2026-26198 via ormar (>=0.10.16, <=0.20.2)

ormar PYPI version =0.10.16, =0.0.1, =0.3.1, =0.3.0, =0.0.1, =0.3.1, =0.0.1, =1.0.0, =0.0.1, =0.0.2 Source cves: CVE-2026-26198 Source advisory: MEND:CVE-2026-26198...

machinepack-jxm (>=0.1.0, <=0.1.2) potentially affected by CVE-2025-70045 via jxm (0.4.0)

jxm NPM version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on jxm and may be impacted: - machinepack-jxm =0.1.0, =0.1.2 Source cves: CVE-2025-70045 Source advisory: SNYK:JS-JXM-15367520...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +39 more potentially affected by CVE-2026-25545 via astro (>=5.0.0-beta.5, <=5.17.2)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =0.5.0, =0.0.1, =0.1.0, =0.0.1, =2.0.0, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.28, =0.0.28, =0.0.40 and more Source cves: CVE-2026-25545 Source advisory: SNYK:JS-ASTRO-15338137...

@chocolatey-software/astro (>=2.0.0, <=2.5.0), choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2026-25545 via @astrojs/node (>=9.2.2, <=9.5.2)

@astrojs/node NPM version =9.2.2, =2.0.0, =0.3.1, =0.4.0 Source cves: CVE-2026-25545 Source advisory: OSV:GHSA-QQ67-MVV5-FW3G...

beta-rec (>=0.2.1, <=0.2.2), fluidexec (0.1.0rc0) +1 more potentially affected by CVE-2026-27482 via ray (0.8.5)

ray PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - beta-rec =0.2.1, =2.6.0, =2.7.0 Source cves: CVE-2026-27482 Source advisory: OSV:PYSEC-2026-2271...

@gardenfi/core (>=2.4.3-beta.3, <=3.1.3), @gardenfi/hyperliquid-swaps (>=0.0.1, <=1.0.4) +63 more potentially affected by CVE-2026-27452 via asn1-ts (>=7.1.0, <=8.0.5)

asn1-ts NPM version =7.1.0, =2.4.3-beta.3, =0.0.1, =0.0.2-beta.21, =0.0.1-beta.3, =2.3.3-beta.3, =1.10.0, =1.4.0, =1.27.7, =1.27.7, =0.2.0, =0.0.0-dev-20251015065834, =0.6.0-nightly.1, =0.0.0-experimental-20250325202207, =0.13.0 and more Source cves: CVE-2026-27452 Source advisory:...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), actinia-core (4.2.0) +695 more potentially affected by CVE-2026-27199 via werkzeug (1.0.1)

werkzeug PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.4.7, =0.1.0rc3, =2022.9.19, =1.0.2, =0.1.1, =0.1.6, =0.5.1, =0.2.0, =1.0.0, =0.0.3, =0.0.4 and mor...

autorad (>=0.1.2, <=0.2.5), aws-flask-lambda (>=0.1.0, <=0.1.2) +54 more potentially affected by CVE-2026-27199 via werkzeug (2.0.2)

werkzeug PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - autorad =0.1.2, =0.1.0, =0.0.1, =0.9.2, =0.0.1, =0.1.0, =0.4.9, =3.1.141, =0.8.0.dev6, =1.0.0, =1.0.0, =0.16.0, =0.1.0, =1.0.0 and more Source...

ablog (>=0.10.3, <=0.10.7), acumos (>=0.9.3, <=0.9.4) +13 more potentially affected by CVE-2026-27199 via werkzeug (1.0.0rc1)

werkzeug PYPI version 1.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - ablog =0.10.3, =0.9.3, =0.7.0rc0, =0.26.0, =0.26.0, =5.0.19, =0.2.11, =0.51.0, =0.51.6, =0.52.0, =0.52.0, =0.53.0, =0.53.4 Source cves:...

kyoukai (>=2.2.0, <=2.2.1), mezmorize (>=0.18.1, <=0.25.0) +2 more potentially affected by CVE-2026-27199 via werkzeug (0.13.0)

werkzeug PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - kyoukai =2.2.0, =0.18.1, =0.49.2, =0.0.0.1, =0.0.3 Source cves: CVE-2026-27199 Source advisory: OSV:PYSEC-2026-2320...

activedirectoryenum (>=0.4.0, <=0.4.9), agreement-api (0.0.1) +164 more potentially affected by CVE-2026-27205 via flask (1.1.1)

flask PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - activedirectoryenum =0.4.0, =0.0.3, =1.3.0, =0.0.1.post1, =0.0.0, =0.11.0, =0.14.0, =0.1.0, =0.2.2 - arcor2-execution 0.11.0 - arcor2-execution-data...

airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2025-65995 via apache-airflow (1.8.2)

apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2025-65995 Source advisory: OSV:GHSA-GFW7-2V73-69WG...

org.webjars.npm:jsrsasign-util (1.0.5) potentially affected by CVE-2026-4603 via org.webjars.npm:jsrsasign (11.1.0)

org.webjars.npm:jsrsasign MAVEN version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jsrsasign and may be impacted: - org.webjars.npm:jsrsasign-util 1.0.5 Source cves: CVE-2026-4603 Source advisory:...

@atomicservice/ascf-toolkit (>=1.0.0, <=1.0.17), @atomicservice/ascf-toolkit-hvigor-plugin (>=1.0.1-beta.1, <=1.0.17) +77 more potentially affected by CVE-2026-4603 via jsrsasign (>=11.0.0, <=11.1.0)

jsrsasign NPM version =11.0.0, =1.0.0, =1.0.1-beta.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 - @citrineos/ocpi-charging-profiles 2.0.1 - @citrineos/ocpi-commands 2.0.1 - @citrineos/ocpi-credentials 2.0.1 - @citrineos/ocpi-locations 2.0.1 -...

org.webjars.npm:jsrsasign-util (1.0.5) potentially affected by CVE-2026-4602 via org.webjars.npm:jsrsasign (11.1.0)

org.webjars.npm:jsrsasign MAVEN version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jsrsasign and may be impacted: - org.webjars.npm:jsrsasign-util 1.0.5 Source cves: CVE-2026-4602 Source advisory:...

@atomicservice/ascf-toolkit (>=1.0.0, <=1.0.17), @atomicservice/ascf-toolkit-hvigor-plugin (>=1.0.1-beta.1, <=1.0.17) +77 more potentially affected by CVE-2026-4602 via jsrsasign (>=11.0.0, <=11.1.0)

jsrsasign NPM version =11.0.0, =1.0.0, =1.0.1-beta.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 - @citrineos/ocpi-charging-profiles 2.0.1 - @citrineos/ocpi-commands 2.0.1 - @citrineos/ocpi-credentials 2.0.1 - @citrineos/ocpi-locations 2.0.1 -...