@avorati/strapi-plugin-preview (1.0.1), @catchmexz/fedin-cms (>=5.30.1, <=5.30.2) +9 more potentially affected by CVE-2026-22599 via @strapi/content-type-builder (>=5.0.0, <=5.33.1)

@strapi/content-type-builder NPM version =5.0.0, =5.30.1, =2.0.0, =2.0.0, =5.0.0-beta.6, =3.0.0-beta.1, =3.0.0-beta.2 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2026-22599 Source advisory: SNYK:JS-STRAPICONTENTTYPEBUILDER-16686876...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (>=0.1.0, <=0.1.1) +94 more potentially affected by CVE-2026-22599 via @strapi/plugin-content-type-builder (>=4.0.0, <=4.26.0)

@strapi/plugin-content-type-builder NPM version =4.0.0, =0.1.0, =4.12.2, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.1 - @cowprotocol/cms 0.1.0-rc.5 and more Source cves: CVE-2026-22599 Source advisory: OSV:GHSA-3XCQ-8MJW-H6MX...

@avorati/strapi-plugin-preview (1.0.1), @catchmexz/fedin-cms (>=5.30.1, <=5.30.2) +9 more potentially affected by CVE-2026-22599 via @strapi/content-type-builder (>=5.0.0, <=5.33.1)

@strapi/content-type-builder NPM version =5.0.0, =5.30.1, =2.0.0, =2.0.0, =5.0.0-beta.6, =3.0.0-beta.1, =3.0.0-beta.2 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2026-22599 Source advisory: OSV:GHSA-3XCQ-8MJW-H6MX...

@piksail/strapi-plugin-publish-coolify (0.0.1), cypherscan-strapi (0.1.1) +4 more potentially affected by CVE-2025-64526 via @strapi/plugin-users-permissions (>=5.11.0, <=5.42.1)

@strapi/plugin-users-permissions NPM version =5.11.0, =0.1.0, =0.1.4 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2025-64526 Source advisory: SNYK:JS-STRAPIPLUGINUSERSPERMISSIONS-16683088...

@piksail/strapi-plugin-publish-coolify (0.0.1), cypherscan-strapi (0.1.1) +4 more potentially affected by CVE-2025-64526 via @strapi/plugin-users-permissions (>=5.11.0, <=5.42.1)

@strapi/plugin-users-permissions NPM version =5.11.0, =0.1.0, =0.1.4 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2025-64526 Source advisory: OSV:GHSA-7MQX-WWH4-F9FW...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-45411 via vm2 (>=3.0.0, <=3.11.2)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3388 more potentially affected by CVE-2026-45740 via protobufjs (>=7.0.0, <=7.5.6)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =2.0.2, =3.3.3 and more Source cves: CVE-2026-45740 Source advisory: SNYK:JS-PROTOBUFJS-16657755...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1040 more potentially affected by CVE-2026-45740 via protobufjs (>=8.0.0, <=8.0.3)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-45740 Source advisory: SNYK:JS-PROTOBUFJS-16657755...

0xgasless-mcp (>=1.0.3, <=1.0.5), 4d-vector-search (>=1.0.0, <=1.0.1) +3212 more potentially affected by CVE-2026-45134 via langsmith (>=0.0.5, <=0.5.26)

langsmith NPM version =0.0.5, =1.0.3, =1.0.0, =1.11.0, =0.0.5, =0.0.1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.6, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-45134 Source advisory: OSV:GHSA-3644-Q5CJ-C5C7...

0xgasless-mcp (>=1.0.3, <=1.0.5), 4d-vector-search (>=1.0.0, <=1.0.1) +3212 more potentially affected by CVE-2026-45134 via langsmith (>=0.0.5, <=0.5.26)

langsmith NPM version =0.0.5, =1.0.3, =1.0.0, =1.11.0, =0.0.5, =0.0.1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.6, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-45134 Source advisory: SNYK:JS-LANGSMITH-16658749...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @abtnode/core (>=1.0.15, <=1.1.9) +760 more potentially affected by CVE-2026-44724 via systeminformation (>=4.22.5, <=5.31.5)

systeminformation NPM version =4.22.5, =1.17.6-next.0, =1.0.15, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.1.1, =0.1.1, =4.1.0-rc.4, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =3.0.0-next.12, =3.0.0-next.24 and more Source cves: CVE-2026-44724 Source advisory:...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @abtnode/core (>=1.0.15, <=1.1.9) +760 more potentially affected by CVE-2026-44724 via systeminformation (>=4.22.5, <=5.31.5)

systeminformation NPM version =4.22.5, =1.17.6-next.0, =1.0.15, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.1.1, =0.1.1, =4.1.0-rc.4, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =3.0.0-next.12, =3.0.0-next.24 and more Source cves: CVE-2026-44724 Source advisory:...

a1 (>=1.0.1, <=1.0.2), a1_notation (0.6.0) +594 more potentially affected by unknown CVE via rkyv (>=0.7.3, <=0.8.2)

rkyv CARGO version =0.7.3, =1.0.1, =0.2.2, =0.23.0, =0.23.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.9.0, =0.0.1, =0.0.10 - ars-server 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0235...

a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1344 more potentially affected by unknown CVE via git2 (>=0.1.21, <=0.20.4)

git2 CARGO version =0.1.21, =0.1.0, =0.2.2, =1.1.0, =0.0.1, =0.2.0, =0.3.0, =1.0.0, =1.4.7 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0184...

CVE-2026-4798 Avada Builder <= 3.15.1 - Unauthenticated SQL Injection via 'product_order' Parameter

The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘productorder’ parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

SUSE CVE-2026-43412

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start During ADSP stop and start, the kernel crashes due to the order in which ASoC components are removed. On ADSP stop, the q6apm-audio .remove callback unloads...

@chocolatey-software/astro (2.7.0), @kyro-cms/admin (0.1.2) +9 more potentially affected by CVE-2026-45028 via astro (>=6.0.0-beta.1, <=6.1.8)

astro NPM version =6.0.0-beta.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.4.2, =0.0.1, =0.0.1, =0.0.7 Source cves: CVE-2026-45028 Source advisory: SNYK:JS-ASTRO-16643260...

@chocolatey-software/astro (2.7.0), @kyro-cms/admin (0.1.2) +9 more potentially affected by CVE-2026-45028 via astro (>=6.0.0-beta.1, <=6.1.8)

astro NPM version =6.0.0-beta.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.4.2, =0.0.1, =0.0.1, =0.0.7 Source cves: CVE-2026-45028 Source advisory: OSV:GHSA-XR5H-PHRJ-8VXV...

cmb (>=0.0.2, <=0.0.7), dbsegment (0.2.2) +11 more potentially affected by CVE-2026-44246 via nnunet (1.7.1)

nnunet PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on nnunet and may be impacted: - cmb =0.0.2, =1.0.1b2023032102, =1.5.0, =1.0.0, =0.0.13, =2.2.6, =0.0.1a0, =0.0.1a0, =0.1.0, =0.1.1 Source cves: CVE-2026-44246 Source advisory:...

EUVD-2026-29761

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the...