@vltpkg/cli-sdk (>=1.0.0-rc.1, <=1.0.0-rc.9), @vltpkg/config (>=1.0.0-rc.1, <=1.0.0-rc.9) +8 more potentially affected by CVE-2026-24909 via @vltpkg/tar (>=1.0.0-rc.1, <=1.0.0-rc.9)

@vltpkg/tar NPM version =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.9 Source cves: CVE-2026-24909 Source advisory: OSV:GHSA-GF2C-JWCJ-X929...

@vltpkg/cli-sdk (>=1.0.0-rc.1, <=1.0.0-rc.9), @vltpkg/config (>=1.0.0-rc.1, <=1.0.0-rc.9) +8 more potentially affected by CVE-2026-24909 via @vltpkg/tar (>=1.0.0-rc.1, <=1.0.0-rc.9)

@vltpkg/tar NPM version =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.9 Source cves: CVE-2026-24909 Source advisory: GHSA-GF2C-JWCJ-X929...

browserstack-cypress-cli (>=1.14.1, <=1.36.3) potentially affected by CVE-2025-57283 via browserstack-local (>=1.5.1, <=1.5.4)

browserstack-local NPM version =1.5.1, =1.14.1, =1.36.3 Source cves: CVE-2025-57283 Source advisory: SNYK:JS-BROWSERSTACKLOCAL-15149317...

@vltpkg/cli-sdk (>=1.0.0-rc.1, <=1.0.0-rc.9), @vltpkg/config (>=1.0.0-rc.1, <=1.0.0-rc.9) +8 more potentially affected by CVE-2026-24909 via @vltpkg/tar (>=1.0.0-rc.1, <=1.0.0-rc.9)

@vltpkg/tar NPM version =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.9 Source cves: CVE-2026-24909 Source advisory: SNYK:JS-VLTPKGTAR-15127281...

@vltpkg/cli-sdk (>=0.0.0-7, <=1.0.0-rc.9), @vltpkg/config (>=0.0.0-19, <=1.0.0-rc.9) +9 more potentially affected by CVE-2026-24909 via @vltpkg/tar (>=0.0.0-0.1730239248325, <=1.0.0-rc.9)

@vltpkg/tar NPM version =0.0.0-0.1730239248325, =0.0.0-7, =0.0.0-19, =0.0.0-0.1730239248325, =0.0.0-7, =0.0.0-0.1730239248325, =0.0.0-0.1730239248325, =0.0.0-4, =0.0.0-7, =0.0.0-10, =0.0.0-26, =0.0.1-pre.1, =1.2.0 Source cves: CVE-2026-24909 Source advisory: MEND:CVE-2026-24909...

Malicious code in tailwind-components-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3916984542c5471332406155adc38fde3d254e8748b6e65caa1b9680663602c The package tailwind-components-cli was found to contain malicious code. Source: ghsa-malware...

MAL-2026-543 Malicious code in tailwind-components-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3916984542c5471332406155adc38fde3d254e8748b6e65caa1b9680663602c The package tailwind-components-cli was found to contain malicious code. Source: ghsa-malware...

Malware in tailwind-components-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

10xscale-agentflow-cli (0.1.5), a2 (>=0.1.0, <=0.3.17) +952 more potentially affected by CVE-2026-24486 via python-multipart (>=0.0.5, <=0.0.21)

python-multipart PYPI version =0.0.5, =0.1.0, =0.2.1, =0.2.0, =0.5.1.dev0, =3.2.0, =1.5.2, =0.1.1, =0.1.4b1, =1.0.0, =0.1.8, =0.27.6 and more Source cves: CVE-2026-24486 Source advisory: MEND:CVE-2026-24486...

Fortinet FortiManager FortiAnalyzer Unauthorized Access

The vulnerability of the CLI command-line interface of the Fortinet FortiManager device management software and the Fortinet FortiAnalyzer security event monitoring and analysis tool is related to key management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized acce...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-24688 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-24688 Source advisory: OSV:GHSA-2Q4J-M29V-HQ73...

@saltcorn/cli (>=1.5.0-beta.0, <=1.5.0-beta.18), @saltcorn/mobile-builder (>=1.5.0-beta.0, <=1.5.0-beta.18) potentially affected by unknown CVE via @saltcorn/server (>=1.5.0-beta.0, <=1.5.0-beta.18)

@saltcorn/server NPM version =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.18 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNSERVER-15126139...

@saltcorn/admin-models (>=1.1.1, <=1.4.1), @saltcorn/base-plugin (>=1.1.1, <=1.4.1) +5 more potentially affected by unknown CVE via @saltcorn/data (>=1.1.1, <=1.4.1)

@saltcorn/data NPM version =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.4.1 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNDATA-15126137...

@saltcorn/admin-models (>=1.5.0-beta.0, <=1.5.0-beta.18), @saltcorn/base-plugin (>=1.5.0-beta.0, <=1.5.0-beta.18) +5 more potentially affected by unknown CVE via @saltcorn/data (>=1.5.0-beta.0, <=1.5.0-beta.18)

@saltcorn/data NPM version =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.18 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNDATA-15126137...

@saltcorn/cli (>=1.1.1, <=1.4.1), @saltcorn/mobile-builder (>=1.1.1, <=1.4.1) +1 more potentially affected by unknown CVE via @saltcorn/admin-models (>=1.1.1, <=1.4.1)

@saltcorn/admin-models NPM version =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.4.1 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNADMINMODELS-15126138...

@saltcorn/cli (>=1.5.0-beta.0, <=1.5.0-beta.18), @saltcorn/mobile-builder (>=1.5.0-beta.0, <=1.5.0-beta.18) +1 more potentially affected by unknown CVE via @saltcorn/admin-models (>=1.5.0-beta.0, <=1.5.0-beta.18)

@saltcorn/admin-models NPM version =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.18 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNADMINMODELS-15126138...

@saltcorn/cli (>=1.1.1, <=1.5.0-beta.18), @saltcorn/mobile-builder (>=1.1.1, <=1.5.0-beta.18) potentially affected by unknown CVE via @saltcorn/server (>=1.1.1, <=1.5.0-beta.18)

@saltcorn/server NPM version =1.1.1, =1.1.1, =1.1.1, =1.5.0-beta.18 Source cves: unknown CVE Source advisory: GHSA-CR3W-CW5W-H3FJ...

@saltcorn/cli (>=1.1.1, <=1.5.0-beta.18), @saltcorn/mobile-builder (>=1.1.1, <=1.5.0-beta.18) potentially affected by unknown CVE via @saltcorn/server (>=1.1.1, <=1.5.0-beta.18)

@saltcorn/server NPM version =1.1.1, =1.1.1, =1.1.1, =1.5.0-beta.18 Source cves: unknown CVE Source advisory: OSV:GHSA-CR3W-CW5W-H3FJ...

@saltcorn/cli (>=1.1.1, <=1.4.1), @saltcorn/mobile-builder (>=1.1.1, <=1.4.1) potentially affected by unknown CVE via @saltcorn/server (>=1.1.1, <=1.4.1)

@saltcorn/server NPM version =1.1.1, =1.1.1, =1.1.1, =1.4.1 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNSERVER-15126139...

10xscale-agentflow-cli (0.1.5), a2 (>=0.1.0, <=0.3.17) +952 more potentially affected by CVE-2026-24486 via python-multipart (>=0.0.5, <=0.0.21)

python-multipart PYPI version =0.0.5, =0.1.0, =0.2.1, =0.2.0, =0.5.1.dev0, =3.2.0, =1.5.2, =0.1.1, =0.1.4b1, =1.0.0, =0.1.8, =0.27.6 and more Source cves: CVE-2026-24486 Source advisory: GHSA-WP53-J4WJ-2CFG...