@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.5), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.5) +1 more potentially affected by CVE-2026-73653 via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.5)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.5 Source cves: CVE-2026-73653 Source advisory: MEND:CVE-2026-73653...

@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.5), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.5) +1 more potentially affected by CVE-2026-73653 via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.5)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.5 Source cves: CVE-2026-73653 Source advisory: GHSA-P63J-VCC4-9VMV...

@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.5), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.5) +1 more potentially affected by CVE-2026-73653 via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.5)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.5 Source cves: CVE-2026-73653 Source advisory: OSV:GHSA-P63J-VCC4-9VMV...

@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.5), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.5) +1 more potentially affected by unknown CVE via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.5)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.5 Source cves: unknown CVE Source advisory: SNYK:JS-VITESTBROWSER-18171374...

@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.3), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.3) +1 more potentially affected by CVE-2026-53633 via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.3)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.3 Source cves: CVE-2026-53633 Source advisory: MEND:CVE-2026-53633...

@aamini/config (>=0.0.1, <=0.0.13), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +9 more potentially affected by CVE-2026-47428 via @vitest/browser (>=4.0.17, <=4.1.5)

@vitest/browser NPM version =4.0.17, =0.0.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =4.0.17, =4.0.17, =4.0.17, =0.6.0-rc.1, =0.1.18, =0.2.2 Source cves: CVE-2026-47428 Source advisory: MEND:CVE-2026-47428...

@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.2), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.2) +1 more potentially affected by CVE-2026-47428 via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.2)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.2 Source cves: CVE-2026-47428 Source advisory: MEND:CVE-2026-47428...

PT-2026-52167

Name of the Vulnerable Software and Affected Versions Drupal AI versions 0.0.0 through 1.2.17 Drupal AI versions 1.3.0 through 1.3.8 Drupal AI versions 1.4.0 through 1.4.3 Description Improper neutralization of input during web page generation allows Cross-Site Scripting XSS. The module and...

@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.3), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.3) +1 more potentially affected by CVE-2026-53633 via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.3)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.3 Source cves: CVE-2026-53633 Source advisory: GHSA-G8MR-85JM-7XHM...

@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.3), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.3) +1 more potentially affected by CVE-2026-53633 via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.3)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.3 Source cves: CVE-2026-53633 Source advisory: OSV:GHSA-G8MR-85JM-7XHM...

@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.3), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.3) +1 more potentially affected by CVE-2026-53633 via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.3)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.3 Source cves: CVE-2026-53633 Source advisory: SNYK:JS-VITESTBROWSER-17375130...

@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.2), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.2) +1 more potentially affected by CVE-2026-47428 via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.2)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.2 Source cves: CVE-2026-47428 Source advisory: OSV:GHSA-2H32-95RG-CPPP...

@vitest/browser-playwright (>=5.0.0-beta.1, <=5.0.0-beta.2), @vitest/browser-preview (>=5.0.0-beta.1, <=5.0.0-beta.2) +1 more potentially affected by CVE-2026-47428 via @vitest/browser (>=5.0.0-beta.1, <=5.0.0-beta.2)

@vitest/browser NPM version =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.1, =5.0.0-beta.2 Source cves: CVE-2026-47428 Source advisory: GHSA-2H32-95RG-CPPP...

AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028

The module and certain submodules AI Automators, AI Translate, AI API Explorer, AI Content Suggestions provide the ability to use an LLM to generate HTML or Markdown and preview it in a browser. Under certain circumstances, rendering of this HTML can lead to exposing secret communications in the...

CVE-2026-1466

Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. This was done by storing the MIME type of a file and allowing only browser preview for MIME types beginning with image except for...

CVE-2026-1466

Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. This was done by storing the MIME type of a file and allowing only browser preview for MIME types beginning with image except for...

CVE-2026-1466: Improper Neutralization of Input During Web Page Generation

Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. This was done by storing the MIME type of a file and allowing only browser preview for MIME types beginning with image except for...

PT-2026-5062

CVE-2026-1466 Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. Th… https://t.co/rSEVfvxJRR...

EUVD-2024-50773

Malicious code in bioql PyPI...

EUVD-2025-20016

Malicious code in bioql PyPI...