1283 matches found
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +165 more potentially affected by CVE-2026-44646 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.8.0, =12.0.0, =1.0.1-beta.0, =1.0.2 and more Source cves: CVE-2026-44646 Source advisory: SNYK:JS-LIQUIDJS-16887887...
@fedify/amqp (0.2.0-dev.12), @fedify/botkit (>=0.3.0-dev.125, <=0.4.0-dev.175) +3 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=1.5.0, <=1.9.2)
@fedify/fedify NPM version =1.5.0, =0.3.0-dev.125, =0.4.0-dev.167, =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...
2dev (0.1.3), @actualwave/traceability-matrices (1.0.7) +51 more potentially affected by CVE-2026-9495 via @koa/router (14.0.0)
@koa/router NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @koa/router and may be impacted: - 2dev 0.1.3 - @actualwave/traceability-matrices 1.0.7 - @bbc/sofie-server-core-integration...
@aquacloud_ai/aqc-charts (>=0.1.1, <=0.1.3), @arkxos/arkos-system (>=0.1.1, <=0.1.10) +66 more potentially affected by CVE-2026-45249 via echarts (6.0.0)
echarts NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on echarts and may be impacted: - @aquacloudai/aqc-charts =0.1.1, =0.1.1, =5.1.121, =0.1.1, =1023.48.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =0.19.0,...
@airalogy/airalogy-engine (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-46695 via @boxlite-ai/boxlite (0.8.2)
@boxlite-ai/boxlite NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @boxlite-ai/boxlite and may be impacted: - @airalogy/airalogy-engine =0.0.1, =0.0.5 Source cves: CVE-2026-46695 Source advisory: OSV:GHSA-G6WW-W5J2-R7X3...
@microsoft/applicationinsights-analytics-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03), @microsoft/applicationinsights-channel-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03) +11 more potentially affected by CVE-2026-46681 via @nevware21/ts-utils (>=0.3.5, <=0.7.3)
@nevware21/ts-utils NPM version =0.3.5, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =1.0.0, =1.1.2...
@microsoft/applicationinsights-analytics-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03), @microsoft/applicationinsights-channel-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03) +11 more potentially affected by CVE-2026-46681 via @nevware21/ts-utils (>=0.3.5, <=0.7.3)
@nevware21/ts-utils NPM version =0.3.5, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =1.0.0, =1.1.2...
360shitu (0.1.0), 4icloud-engine (1.0.1) +10920 more potentially affected by CVE-2026-46625 via js-cookie (>=2.1.0, <=3.0.5)
js-cookie NPM version =2.1.0, =1.0.6, =0.1.0, =0.37.2, =0.37.2, =0.0.1, =1.0.0, =1.0.0-alpha, =1.0.0-alpha, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-46625 Source advisory: SNYK:JS-JSCOOKIE-17816999...
flaskbb-plugin-atom (>=0.1.0, <=0.2.0), flaskbb-plugin-conversations (>=2.0.1, <=2.0.2) +6 more potentially affected by CVE-2026-46556 via flaskbb (2.2.0)
flaskbb PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on flaskbb and may be impacted: - flaskbb-plugin-atom =0.1.0, =2.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0 Source cves: CVE-2026-46556 Source advisory: SNYK:PYTHON-FLASKBB-17283331...
monerochan-stark (>=5.2.2, <=5.2.12), p3-circle (>=0.1.0, <=0.3.3-succinct) +20 more potentially affected by CVE-2026-46654 via p3-challenger (>=0.1.0, <=0.3.3-succinct)
p3-challenger CARGO version =0.1.0, =5.2.2, =0.1.0, =0.1.0, =0.1.0, =0.1.5-succinct, =0.1.0, =0.1.0, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.2.1 and more Source cves: CVE-2026-46654 Source advisory: OSV:GHSA-VJ64-RJF3-W3V7...
libcrux-digest (>=0.0.4-pre.1, <=0.0.8), libcrux-kem (>=0.0.2-alpha.1, <=0.0.2) +10 more potentially affected by unknown CVE via libcrux-sha3 (>=0.0.2, <=0.0.9-rc.1)
libcrux-sha3 CARGO version =0.0.2, =0.0.4-pre.1, =0.0.2-alpha.1, =0.0.3, =0.0.2-alpha.1, =1.20.4, =0.2.0, =0.4.3, =0.8.0 - wpa-next 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0208...
@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-46342 via nuxt (>=4.0.0-rc.0, <=4.4.4)
nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...
@0x590fab/sdcor2 (>=4.2.1, <=4.4.0), @142vip/fairy-cli (>=0.0.3-alpha.19, <=0.0.3-alpha.28) +63 more potentially affected by CVE-2026-45772 via turbo (>=1.3.1, <=2.9.12)
turbo NPM version =1.3.1, =4.2.1, =0.0.3-alpha.19, =1.0.0, =1.6.0, =0.3.0, =0.0.1, =0.1.0, =2.0.5, =0.1.0, =0.1.0, =0.4.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-45772 Source advisory: OSV:GHSA-3QCW-2RHX-2726...
@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @aayshian/n8n-aisensy-ay19 (0.0.1) +111 more potentially affected by unknown CVE via n8n-core (>=2.0.0, <=2.19.4)
n8n-core NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.3.6, =0.1.0, =1.0.0, =0.1.4, =1.1.3, =1.1.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NCORE-16874152...
agent-framework-azurefunctions (>=1.0.0b260519, <=1.0.0b260730), agent-framework-durabletask (>=0.0.1b260113, <=1.0.0b260730) +7 more potentially affected by unknown CVE via durabletask (1.9.0)
durabletask PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on durabletask and may be impacted: - agent-framework-azurefunctions =1.0.0b260519, =0.0.1b260113, =2.0.0b1, =0.1.0rc1, =0.0.1rc1.dev1567, =0.0.0.dev1, =0.0.0.dev1, =0.3.0,...
@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +591 more potentially affected by CVE-2026-8162 via multiparty (>=4.0.0, <=4.2.3)
multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8162 Source advisory: OSV:GHSA-XH3C-6GCQ-G4RV...
@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +591 more potentially affected by CVE-2026-8161 via multiparty (>=4.0.0, <=4.2.3)
multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8161 Source advisory: OSV:GHSA-QXCH-WHHJ-8956...
01os (>=0.0.5, <=0.0.13), 1claw-crewai-tools (>=0.1.0, <=0.2.0) +2063 more potentially affected by CVE-2026-45829 via chromadb (>=0.3.4, <=1.5.9)
chromadb PYPI version =0.3.4, =0.0.5, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.1.1, =0.0.4.dev0, =0.0.4 - adaline-crewai 0.1.0 and more Source cves: CVE-2026-45829 Source advisory: SNYK:PYTHON-CHROMADB-16758047...
@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +316 more potentially affected by CVE-2026-6402 via webpack-dev-server (>=5.0.0, <=5.2.3)
webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2-develop-1171, =1.1.0 and more Source cves: CVE-2026-6402 Source advisory:...
@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +187 more potentially affected by unknown CVE via better-auth (>=1.0.0, <=1.6.1)
better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.0.7, =1.0.0-canary.2, =1.3.27, =1.3.37 and more Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTH-16722768...