@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +118 more potentially affected by CVE-2026-53633 via vitest (>=4.0.0-beta.7, <=4.1.7)

vitest NPM version =4.0.0-beta.7, =0.0.3, =0.2.0, =0.0.21, =0.79.1, =2.1.0-alpha.278, =2.1.0-alpha.282 and more Source cves: CVE-2026-53633 Source advisory: SNYK:JS-VITEST-17375131...

@aamini/config (>=0.0.1, <=0.0.13), @baic/yolk-test (>=2.1.0-alpha.278, <=2.1.0-alpha.282) +2 more potentially affected by CVE-2026-53633 via @vitest/browser-playwright (>=4.0.18, <=4.1.5)

@vitest/browser-playwright NPM version =4.0.18, =0.0.1, =2.1.0-alpha.278, =0.6.0-rc.1, =0.2.0-alpha.1, =0.2.2 Source cves: CVE-2026-53633 Source advisory: SNYK:JS-VITESTBROWSERPLAYWRIGHT-17375133...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @24hr/ettapi (>=0.2.4, <=0.2.5) +96 more potentially affected by CVE-2026-53633 via vitest (>=3.0.2, <=3.2.4)

vitest NPM version =3.0.2, =0.0.1, =0.2.4, =0.5.0, =2.2.1, =2.1.0-alpha.249, =0.0.0, =4.0.0-alpha.5, =0.1.2-next.95, =1.0.0, =1.0.388, =0.0.207, =3.8.0, =4.1.6 and more Source cves: CVE-2026-53633 Source advisory: SNYK:JS-VITEST-17375131...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @baic/yolk-test (>=2.1.0-alpha.249, <=2.1.0-alpha.251) +3 more potentially affected by CVE-2026-53633 via @vitest/browser (>=3.0.5, <=3.2.4)

@vitest/browser NPM version =3.0.5, =0.0.1, =2.1.0-alpha.249, =3.8.0, =1.0.1, =0.0.2, =0.0.5 Source cves: CVE-2026-53633 Source advisory: OSV:GHSA-G8MR-85JM-7XHM...

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...

@activepieces/piece-gmail (>=0.12.2, <=0.12.5), @activepieces/piece-sendgrid (>=0.5.3, <=0.5.5) +139 more potentially affected by CVE-2026-82660 via nodemailer (>=8.0.0, <=8.0.8)

nodemailer NPM version =8.0.0, =0.12.2, =0.5.3, =0.4.1, =3.19.2, =2.1.108, =0.0.1, =0.0.0-preview.10.8ccd25db, =6.1.196-alpha, =6.1.196-alpha, =6.1.210-alpha and more Source cves: CVE-2026-82660 Source advisory: OSV:GHSA-WQVQ-JVPQ-H66F...

@activepieces/piece-gmail (>=0.12.2, <=0.12.5), @activepieces/piece-sendgrid (>=0.5.3, <=0.5.5) +138 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.7)

nodemailer NPM version =8.0.0, =0.12.2, =0.5.3, =0.4.1, =3.19.2, =2.1.108, =0.0.1, =0.0.0-preview.10.8ccd25db, =6.1.196-alpha, =6.1.196-alpha, =6.1.210-alpha and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-17342524...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1095 more potentially affected by CVE-2026-48712 via protobufjs (>=8.0.0, <=8.4.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.6.0, =0.8.0 and more Source cves: CVE-2026-48712 Source advisory: OSV:GHSA-WCPC-WJ8M-HJX6...

10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3456 more potentially affected by CVE-2026-48712 via protobufjs (>=7.0.0, <=7.5.9)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =2.0.2, =4.0.1 and more Source cves: CVE-2026-48712 Source advisory: SNYK:JS-PROTOBUFJS-17353320...

10minions-engine (>=0.0.1, <=0.0.4), @1amageek/document-propagator (>=0.10.1, <=1.0.0) +1540 more potentially affected by CVE-2026-54269 via protobufjs-cli (>=1.0.0, <=1.2.2)

protobufjs-cli NPM version =1.0.0, =0.0.1, =0.10.1, =1.1.0, =0.4.0, =1.22.0, =6.2.36, =1.0.0-alpha.2, =1.8.0, =0.0.0-beta.0, =1.0.0, =1.0.1, =3.1.0 and more Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJSCLI-17353169...

@forwardimpact/libcodegen (>=0.1.47, <=0.1.52) potentially affected by CVE-2026-54269 via protobufjs-cli (2.0.1)

protobufjs-cli NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobufjs-cli and may be impacted: - @forwardimpact/libcodegen =0.1.47, =0.1.52 Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJSCLI-17353169...

10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3459 more potentially affected by CVE-2026-54269 via protobufjs (>=7.0.0, <=7.6.2)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =2.0.2, =4.0.1 and more Source cves: CVE-2026-54269 Source advisory: OSV:GHSA-F38Q-MGVJ-VPH7...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1097 more potentially affected by CVE-2026-54269 via protobufjs (>=8.0.0, <=8.5.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.6.0, =0.8.0 and more Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJS-17353168...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1097 more potentially affected by CVE-2026-54269 via protobufjs (>=8.0.0, <=8.5.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.6.0, =0.8.0 and more Source cves: CVE-2026-54269 Source advisory: OSV:GHSA-F38Q-MGVJ-VPH7...

@0xwork/connect (>=0.1.8, <=0.1.9), @actagent/fs-safe (0.3.0) +797 more potentially affected by CVE-2026-53655 via tar (>=7.0.0, <=7.5.15)

tar NPM version =7.0.0, =0.1.8, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.5.2-zh, =0.1.1, =0.1.1, =0.59.0, =2.17.11, =1.9.5, =1.0.2, =8.8.3, =8.11.4 and more Source cves: CVE-2026-53655 Source advisory: SNYK:JS-TAR-17342362...

@ablehi/automation-app-build (>=0.1.0, <=0.3.6), @ablehi/automation-app-cli (>=0.1.0, <=0.3.5) +133 more potentially affected by CVE-2026-53632 via vite (>=8.0.0, <=8.0.14)

vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =0.1.0, =1.1.2, =1.2.0, =3.0.1-alpha.0, =1.0.0, =0.1.0, =0.1.0, =3.3.0, =3.4.0 and more Source cves: CVE-2026-53632 Source advisory: OSV:GHSA-V6WH-96G9-6WX3...

3nit-utils (>=0.24.0, <=1.0.2), 6ix (0.0.0-canary.0) +304 more potentially affected by CVE-2026-53632 via launch-editor (>=2.2.1, <=2.13.2)

launch-editor NPM version =2.2.1, =0.24.0, =0.0.0-canary.0, =0.0.1, =7.0.2, =1.0.0, =0.4.0, =0.1.0, =0.3.0, =1.0.0, =0.2.0, =0.2.10 - @carnesen/www 0.1.0 - @catapult-tech/cp-design-system-site 1.0.0 - @caviar/cli 0.0.1 and more Source cves: CVE-2026-53632 Source advisory:...

@ablehi/automation-app-build (>=0.1.0, <=0.3.6), @ablehi/automation-app-cli (>=0.1.0, <=0.3.5) +133 more potentially affected by CVE-2026-53571 via vite (>=8.0.0, <=8.0.14)

vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =0.1.0, =1.1.2, =1.2.0, =3.0.1-alpha.0, =1.0.0, =0.1.0, =0.1.0, =3.3.0, =3.4.0 and more Source cves: CVE-2026-53571 Source advisory: OSV:GHSA-FX2H-PF6J-XCFF...

@142vip/vuepress (>=0.0.1-alpha.19, <=0.0.1-alpha.25), @agregio-solutions/design-system (>=1.89.2, <=1.101.1) +248 more potentially affected by CVE-2026-53571 via vite (>=7.0.0, <=7.3.3)

vite NPM version =7.0.0, =0.0.1-alpha.19, =1.89.2, =20.1.0-next.3, =20.1.0-next.3, =0.1.0, =0.0.4, =0.2.9, =0.79.1, =1.0.0, =1.11.1, =1.0.0-beta.23, =2.1.2-alpha.0, =2.23.0, =2.23.0, =2.37.0 and more Source cves: CVE-2026-53571 Source advisory: OSV:GHSA-FX2H-PF6J-XCFF...

MAL-2026-5787 Malicious code in @solana-labs/spl-toke (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2ec34996ab8cff20d9ba12cd9f5a8a75346c4e5e25d7c3fd5adc7bb7045f64 Package name @solana-labs/spl-toke is a likely confusion-attack against the well-known @solana/spl-token SPL token client missing trailing n, differe...