-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16283 more potentially affected by CVE-2026-44486 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44486 Source advisory: OSV:GHSA-J5F8-GRM9-P9FC...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16283 more potentially affected by CVE-2026-44486 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44486 Source advisory: SNYK:JS-AXIOS-17172681...

@k6js/admin-ui (>=0.3.0-20250618-02, <=0.4.7), @kids-reporter/cms-core (>=1.0.17, <=1.0.36) +5 more potentially affected by CVE-2026-10802 via @keystone-6/core (>=6.5.1, <=6.5.3)

@keystone-6/core NPM version =6.5.1, =0.3.0-20250618-02, =1.0.17, =1.0.19, =0.0.1, =1.0.0, =5.0.1 - keystone-plugin-all-in-one-accessibility 1.0.1 Source cves: CVE-2026-10802 Source advisory: OSV:GHSA-45JQ-C8XM-JFW9...

b4ae (>=2.1.1, <=2.1.3), clatter (>=2.0.0-rc.2, <=2.2.0) +7 more potentially affected by unknown CVE via pqcrypto-mlkem (0.1.1)

pqcrypto-mlkem CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pqcrypto-mlkem and may be impacted: - b4ae =2.1.1, =2.0.0-rc.2, =0.1.0, =0.18.0, =0.1.0, =0.1.9 - uvb-crypto-pqc 0.2.1 - zipher 0.1.8 Source cves: unknown CVE Source...

crypt_guard (0.1.4), dgsp (>=0.1.0, <=0.1.2) +8 more potentially affected by unknown CVE via pqcrypto-sphincsplus (>=0.1.0, <=0.7.2)

pqcrypto-sphincsplus CARGO version =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.4.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0160...

crypt_guard (0.1.4), env_encryption_tool (0.9.17) +8 more potentially affected by unknown CVE via pqcrypto-hqc (>=0.0.4, <=0.2.2)

pqcrypto-hqc CARGO version =0.0.4, =0.12.2, =0.1.0, =0.1.0, =0.2.0, =0.2.1, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0168...

ate (>=0.1.0, <=0.8.0), ate-auth (>=1.1.0, <=1.6.0) +79 more potentially affected by unknown CVE via pqcrypto-traits (>=0.1.1, <=0.3.5)

pqcrypto-traits CARGO version =0.1.1, =0.1.0, =1.1.0, =1.0.0, =1.1.0, =2.0.0, =0.1.2-alpha, =0.1.4, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.1.2 - envencryptiontool 0.9.17 - ever-crypto 0.1.0 - foid 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0162...

adx (>=4.0.0, <=4.1.0), aicommits-rs (>=0.1.0, <=0.2.0) +302 more potentially affected by unknown CVE via surf (>=1.0.1, <=2.3.2)

surf CARGO version =1.0.1, =4.0.0, =0.1.0, =1.0.0, =0.3.0, =0.10.0, =0.3.0, =0.5.0, =0.1.0, =0.6.0, =0.3.0, =0.1.0, =0.0.1, =0.2.4 - async-bybit 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0169...

aquadoggo (0.1.0), askama_tide (>=0.10.0, <=0.15.0) +149 more potentially affected by unknown CVE via tide (>=0.0.5, <=0.17.0-beta.1)

tide CARGO version =0.0.5, =0.10.0, =0.9.0, =1.14.10, =0.2.0, =2.0.0, =1.0.1, =0.1.0, =0.4.1, =6.0.0, =0.1.2, =0.0.4, =0.1.13, =0.4.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0170...

b4ae (>=2.1.1, <=2.1.3), env_encryption_tool (0.9.17) +10 more potentially affected by unknown CVE via pqcrypto-mldsa (0.1.2)

pqcrypto-mldsa CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pqcrypto-mldsa and may be impacted: - b4ae =2.1.1, =0.0.3, =0.18.0, =0.1.0, =1.0.0-alpha.5, =1.0.0-alpha.7 - test-foo-bar-ml-dsa 0.0.9 - uvb-crypto-pqc 0.2.1 - uvb-mrvb...

ate (>=0.1.0, <=0.8.0), ate-auth (>=1.1.0, <=1.6.0) +73 more potentially affected by unknown CVE via pqcrypto-internals (>=0.1.0, <=0.2.11)

pqcrypto-internals CARGO version =0.1.0, =0.1.0, =1.1.0, =1.0.0, =1.1.0, =2.0.0, =0.1.2-alpha, =0.1.4, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.1.2 - envencryptiontool 0.9.17 - ever-crypto 0.1.0 - foid 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0163...

crypt_guard (0.1.4), env_encryption_tool (0.9.17) +7 more potentially affected by unknown CVE via pqcrypto (>=0.11.1, <=0.18.1)

pqcrypto CARGO version =0.11.1, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.23.0, =0.23.0, =12.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0164...

ate (>=0.1.0, <=0.8.0), ate-auth (>=1.1.0, <=1.6.0) +19 more potentially affected by unknown CVE via pqcrypto-falcon (>=0.2.10, <=0.4.1)

pqcrypto-falcon CARGO version =0.2.10, =0.1.0, =1.1.0, =1.0.0, =1.1.0, =0.1.4, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.12.2, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0165...

arbor-ai (>=0.1.5, <=0.1.14), coreason-runtime (>=0.1.0, <=0.11.1) +13 more potentially affected by CVE-2026-10775 via sglang (>=0.1.26, <=0.5.17)

sglang PYPI version =0.1.26, =0.1.5, =0.1.0, =1.1.0rc1, =2.0.0b40, =0.4.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1.post1, =0.1.1, =0.0.0, =0.8.0, =0.10.8 Source cves: CVE-2026-10775 Source advisory: SNYK:PYTHON-SGLANG-17739026...

PT-2026-49161

Root has patched NSWG-ECO-17 in the @rootio/jsonwebtoken package for Root:npm. Multiple fixed versions available...

qgate-sln-mlrun (>=0.1.0, <=0.2.8) potentially affected by CVE-2026-10766 via mlrun (>=1.5.2, <=1.6.4)

mlrun PYPI version =1.5.2, =0.1.0, =0.2.8 Source cves: CVE-2026-10766 Source advisory: SNYK:PYTHON-MLRUN-17157375...

browserstack-tape-runner (>=1.0.0, <=3.0.0), duplo (>=1.6.11, <=1.9.1) +4 more potentially affected by CVE-2026-49143 via browserstack-runner (>=0.2.1, <=0.9.4)

browserstack-runner NPM version =0.2.1, =1.0.0, =1.6.11, =0.1.4, =0.1.1, =2.0.2 - run-browserstack-tests 1.0.2 - yasmf-localization 0.0.2 Source cves: CVE-2026-49143 Source advisory: OSV:GHSA-6VR3-7WCX-V5G5...

browserstack-tape-runner (>=1.0.0, <=3.0.0), duplo (>=1.6.11, <=1.9.1) +4 more potentially affected by CVE-2026-49143 via browserstack-runner (>=0.2.1, <=0.9.4)

browserstack-runner NPM version =0.2.1, =1.0.0, =1.6.11, =0.1.4, =0.1.1, =2.0.2 - run-browserstack-tests 1.0.2 - yasmf-localization 0.0.2 Source cves: CVE-2026-49143 Source advisory: SNYK:JS-BROWSERSTACKRUNNER-17750811...

browserstack-tape-runner (>=1.0.0, <=3.0.0), duplo (>=1.6.11, <=1.9.1) +4 more potentially affected by CVE-2026-49144 via browserstack-runner (>=0.2.1, <=0.9.4)

browserstack-runner NPM version =0.2.1, =1.0.0, =1.6.11, =0.1.4, =0.1.1, =2.0.2 - run-browserstack-tests 1.0.2 - yasmf-localization 0.0.2 Source cves: CVE-2026-49144 Source advisory: SNYK:JS-BROWSERSTACKRUNNER-17750809...

browserstack-tape-runner (>=1.0.0, <=3.0.0), duplo (>=1.6.11, <=1.9.1) +4 more potentially affected by CVE-2026-49144 via browserstack-runner (>=0.2.1, <=0.9.4)

browserstack-runner NPM version =0.2.1, =1.0.0, =1.6.11, =0.1.4, =0.1.1, =2.0.2 - run-browserstack-tests 1.0.2 - yasmf-localization 0.0.2 Source cves: CVE-2026-49144 Source advisory: OSV:GHSA-8RPW-6CQH-2V9H...