@lingxiteam/editor (>=3.5.1-alpha.3 <=3.5.1-alpha.5), @nokecy/qc-ui (>=0.0.3 <=0.3.24) +11 more potentially affected by unknown CVE via @antv/x6-react-components (>=2.0.8 <=2.0.9)

@antv/x6-react-components NPM version =2.0.8, =3.5.1-alpha.3, =0.0.3, =0.0.3, =0.0.9, =3.5.3, =0.0.1, =1.0.0, =0.0.3, =1.0.0, =0.2.3, =0.3.5 Source cves: unknown CVE Source advisory: SNYK:JS-ANTVX6REACTCOMPONENTS-16754375...

@antv/graphin-graphscope (>=0.0.1 <=1.0.5), @graph-analysis/grapher-2d (>=0.0.1 <=0.0.2-beta.11) +22 more potentially affected by unknown CVE via @antv/graphin-components (>=2.0.0-beta.1 <=2.4.1)

@antv/graphin-components NPM version =2.0.0-beta.1, =0.0.1, =0.0.1, =0.9.42, =0.9.42, =0.9.42, =0.9.42, =0.10.5, =0.9.42, =0.9.42, =0.9.42, =0.9.42, =0.9.42, =0.9.42, =0.9.42, =0.11.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-ANTVGRAPHINCOMPONENTS-16754450...

@action.sustainability/storybook-dashboard (>=0.1.1 <=0.1.5), @aliedu/vc-edu-components (>=1.1.15 <=1.1.24) +404 more potentially affected by unknown CVE via @antv/path-util (=3.0.1)

@antv/path-util NPM version =3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @antv/path-util and may be impacted: - @action.sustainability/storybook-dashboard =0.1.1, =1.1.15, =0.1.0, =0.9.4-beta1, =0.0.1-beta.1, =0.0.1, =3.0.0, =3.0.0, =1.0.0,...

MGASA-2026-0147 Updated rclone packages fix security vulnerabilities

This update bring new features, bugs and vulnerabilities fixed in rclone and golang components used to build it...

Updated rclone packages fix security vulnerabilities

This update bring new features, bugs and vulnerabilities fixed in rclone and golang components used to build it...

Improper Validation of Array Index

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Improper Validation of Array Index

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Improper Validation of Array Index

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Improper Validation of Array Index

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

GHSA-VHRH-72HQ-W8M7 ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define

An invalid connected-components:keep-top value could result in a heap buffer over-read when performing the connected components operation...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the connected-components when an invalid value is supplied to the keep-top parameter. An attacker can access sensitive memory contents or cause a partial denial of service by providing a specially...

Improper Validation of Array Index

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

Improper Validation of Array Index

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Improper Validation of Array Index

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Improper Validation of Array Index

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Improper Validation of Array Index

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define

An invalid connected-components:keep-top value could result in a heap buffer over-read when performing the connected components operation...

GHSA-F946-9QP6-VGCH shopper/framework: Authorization bypass in multiple Livewire admin components

Impact Multiple Livewire components in the admin panel allowed an authenticated low-privilege user to mutate data without the required permission: - Order detail Filament actions cancel, mark paid, mark complete, capture payment, archive, start processing were callable with readorders only and di...

shopper/framework: Authorization bypass in multiple Livewire admin components

Impact Multiple Livewire components in the admin panel allowed an authenticated low-privilege user to mutate data without the required permission: - Order detail Filament actions cancel, mark paid, mark complete, capture payment, archive, start processing were callable with readorders only and di...

PT-2026-41776

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An invalid connected-components:keep-top value can lead to a heap buffer over-read during the connected components operation. A heap buffer over-read occurs when...