@bpmiq/mcp (>=1.0.0, <=2.3.0), @bpmiq/validator (>=1.0.0, <=2.3.0) +30 more potentially affected by CVE-2026-73569 via fast-xml-parser (>=5.9.3, <=5.10.0)

fast-xml-parser NPM version =5.9.3, =1.0.0, =1.0.0, =0.1.0, =1.18.42-test.0, =1.6.6, =0.24.0, =5.1.22, =5.1.22, =0.0.1, =0.0.1, =49.13.0, =50.0.0, =2.4.0, =2.4.2 and more Source cves: CVE-2026-73569 Source advisory: OSV:GHSA-8R6M-32JQ-JX6Q...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +522 more potentially affected by CVE-2026-56762 via hono (>=4.0.0, <=4.12.10)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =2026.4.4, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.70 and more Source cves: CVE-2026-56762 Source advisory: OSV:GHSA-26PP-8WGV-HJVM...

@amqp-contract/asyncapi (>=0.2.0, <=0.20.0), @c15t/backend (>=1.1.0-canary.0, <=1.8.5) +13 more potentially affected by CVE-2026-33331 via @orpc/openapi (>=1.0.0-beta.1, <=1.13.8)

@orpc/openapi NPM version =1.0.0-beta.1, =0.2.0, =1.1.0-canary.0, =1.1.0-canary.0, =1.2.0-canary.0, =1.2.2-canary-20250514183211, =1.2.0-canary.8, =1.2.0-canary.0, =0.1.0, =0.4.2, =1.0.0-beta.2, =0.0.0, =0.0.0, =1.0.0-beta.2, =1.0.0-beta.1, =1.2.0-canary.0, =1.8.5 Source cves: CVE-2026-33331 Sour...

0xtrails (>=0.1.9, <=0.2.2), @aarc-dev/deposit-widget (>=0.4.2, <=0.4.47) +4 more potentially affected by CVE-2025-59430 via @meshconnect/web-link-sdk (>=3.0.2, <=3.2.14)

@meshconnect/web-link-sdk NPM version =3.0.2, =0.1.9, =0.4.2, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.3 Source cves: CVE-2025-59430 Source advisory: OSV:GHSA-VH3F-QPPR-J97F...

archivefs (>=1.0.0, <=1.0.1), arcon_compiler (>=0.1.0, <=0.1.1) +83 more potentially affected by unknown CVE via daemonize (>=0.2.3, <=0.5.0)

daemonize CARGO version =0.2.3, =1.0.0, =0.1.0, =0.3.1, =0.2.0, =0.5.0, =3.0.0, =0.1.0, =0.1.3, =0.0.1, =0.4.0, =0.1.0, =0.1.2, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0069...

10chars-test (>=1.0.4, <=1.0.34), 12g (>=0.0.16, <=1.0.1) +24238 more potentially affected by unknown CVE via shelljs (>=0.0.2, <=0.8.4)

shelljs NPM version =0.0.2, =1.0.4, =0.0.16, =1.3.0, =1.0.0, =1.0.2, =1.0.0, =0.0.3, =1.0.0, =1.0.3, =2.11.4, =2.0.0, =2.11.4, =2.13.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-64G7-MVW6-V9QJ...