@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2025-13465 via lodash-amd (4.16.4)

lodash-amd NPM version 4.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on lodash-amd and may be impacted: - @dojo/cli-test-intern =0.1.0, =4.1.1, =3.4.0, =0.0.1, =1.0.14, =0.0.7, =0.0.1, =0.1.5 - xirtam--matrix-operations 0.1.3 Source cves:...

@astrojs/cloudflare (0.4.0), @bookinghub/widget (>=0.1.0, <=0.4.0) +29 more potentially affected by CVE-2026-0933 via wrangler (>=2.0.23, <=3.114.1)

wrangler NPM version =2.0.23, =0.1.0, =0.0.1, =1.0.274, =0.1.0, =0.2.0, =2.1.0, =0.0.0-pre.2, =0.0.0-next-20230221055802, =0.1.0, =1.0.0, =0.1.1, =0.0.3, =1.0.0, =1.0.2 and more Source cves: CVE-2026-0933 Source advisory: OSV:GHSA-36P8-MVP6-CV38...

@backstage/backend-dynamic-feature-service (>=0.0.0-nightly-20251122024148, <=0.7.6-next.1), @backstage/backend-test-utils (>=1.9.1-next.1, <=1.10.0-next.2) +14 more potentially affected by CVE-2026-24046 via @backstage/backend-defaults (>=0.13.0-next.0, <=0.13.1-next.1)

@backstage/backend-defaults NPM version =0.13.0-next.0, =0.0.0-nightly-20251122024148, =1.9.1-next.1, =0.4.16-next.0, =0.7.4-next.0, =0.2.14-next.1, =0.7.5-next.0, =0.5.10-next.0, =0.1.4-next.0, =3.0.0-next.0, =0.3.16-next.0, =0.4.15-next.1, =0.3.4-next.1, =2.0.7-next.0, =2.1.1-next.0,...

@aexol/opencode-tui (>=0.2.5, <=0.2.10), @agent-embed/js (>=0.0.1, <=0.0.45) +323 more potentially affected by CVE-2026-23956 via seroval (>=0.2.1, <=1.3.2)

seroval NPM version =0.2.1, =0.2.5, =0.0.1, =1.20.47, =2.11.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.7, =0.0.1, =0.0.1, =1.0.0, =0.1.26, =0.1.38 and more Source cves: CVE-2026-23956 Source advisory: OSV:GHSA-HX9M-JF43-8FFR...

@ancademy/bespoke-classic-client (>=2.2.6, <=2.7.8-alpha.1), @ancademy/bespoke-classic-robot (>=2.2.6, <=2.7.8-alpha.2) +110 more potentially affected by CVE-2026-23966 via sm-crypto (>=0.0.9, <=0.3.13)

sm-crypto NPM version =0.0.9, =2.2.6, =2.2.6, =2.2.6, =2.3.10, =2.1.4, =2.2.6, =2.2.6, =2.2.6, =2.1.15, =2.7.0, =2.1.15, =2.1.4, =2.7.7, =2.7.0, =2.7.8-alpha.1 and more Source cves: CVE-2026-23966 Source advisory: OSV:GHSA-PGX9-497M-6C4V...

@alephium/cli (>=0.38.0, <=0.45.0), @alephium/get-extension-wallet (>=0.38.0, <=0.45.0) +19 more potentially affected by CVE-2026-1245 via binary-parser (>=2.0.3, <=2.2.1)

binary-parser NPM version =2.0.3, =0.38.0, =0.38.0, =0.38.0, =0.30.0-beta.1, =0.38.0, =0.38.0, =0.38.0, =0.22.0, =0.0.2, =1.4.1, =0.8.0, =1.13.0, =1.0.0, =2.1.1 and more Source cves: CVE-2026-1245 Source advisory: SNYK:JS-BINARYPARSER-15046328...

@bechara/crux (>=6.0.0-alpha.1, <=6.6.2), @cappa/cli (>=0.1.0, <=0.4.3) +11 more potentially affected by CVE-2026-22031 +1 more via @fastify/middie (>=9.0.2, <=9.0.3)

@fastify/middie NPM version =9.0.2, =6.0.0-alpha.1, =0.1.0, =0.1.0, =1.0.0-develop-pedago.0, =1.0.11, =0.1.51, =1.0.36, =11.0.0-next.1, =1.3.0, =5.0.0-beta.36, =0.6.1-dev, =1.1.48 Source cves: CVE-2026-22031, CVE-2026-6414 Source advisory: OSV:GHSA-CXRG-G7R8-W69P...

@alexaegis/svelte-config (>=0.14.0, <=0.14.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=1.2.0, <=2.1.0) +5 more potentially affected by CVE-2025-67647 via @sveltejs/kit (>=2.20.7, <=2.49.3)

@sveltejs/kit NPM version =2.20.7, =0.14.0, =1.2.0, =0.0.137, =0.0.1, =1.0.1-next.0, =0.0.1, =1.3.0, =1.12.3 Source cves: CVE-2025-67647 Source advisory: OSV:GHSA-J62C-4X62-9R35...

01-numacert (>=1.0.0, <=3.0.0), 12g (>=0.0.15, <=1.0.1) +7557 more potentially affected by CVE-2026-24001 via diff (>=3.0.0, <=3.5.0)

diff NPM version =3.0.0, =1.0.0, =0.0.15, =1.0.4, =5.4.4, =5.4.4, =2.2.1, =1.1.8, =1.0.0, =2.0.0, =0.0.1, =0.1.1, =0.1.0, =1.0.0, =1.8.1 and more Source cves: CVE-2026-24001 Source advisory: OSV:GHSA-73RR-HH4G-FPGX...

3m (>=0.1.0, <=0.1.3), aap-llamaindex (>=0.1.1.dev1, <=0.2.0) +354 more potentially affected by CVE-2024-14021 via llama-index (>=0.4.17, <=0.14.23)

llama-index PYPI version =0.4.17, =0.1.0, =0.1.1.dev1, =0.1.8, =0.0.2, =1.1.0a20250502, =0.10.0, =1.4.3, =0.1.0a0.dev0, =0.2.0a0, =0.1.0, =0.1.0a1, =1.0.1 and more Source cves: CVE-2024-14021 Source advisory: SNYK:PYTHON-LLAMAINDEX-14917171...

@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +29 more potentially affected by CVE-2026-22030 via @remix-run/server-runtime (>=2.0.0, <=2.17.2)

@remix-run/server-runtime NPM version =2.0.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =2.9.1-dario-6, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.17.2 and more Source cves: CVE-2026-22030 Source advisory:...

@1023-ventures/merope2 (>=0.2.1, <=0.2.9), @1023-ventures/vega-core (>=0.5.0, <=0.6.2) +1397 more potentially affected by CVE-2026-22029 via @remix-run/router (>=1.0.0, <=1.23.1-pre-v6.0)

@remix-run/router NPM version =1.0.0, =0.2.1, =0.5.0, =0.0.1, =0.0.1, =3.0.0, =0.0.0-beta-20260120211922, =1.0.0, =1.0.0, =1.0.0, =2.7.0, =0.0.1, =0.1.0, =0.0.0, =6.24.1, =8.19.1 and more Source cves: CVE-2026-22029 Source advisory: OSV:GHSA-2W69-QVJG-HVJX...

128981semzub (1.0.1), @1023-ventures/merope2 (>=0.2.1, <=0.2.9) +2268 more potentially affected by CVE-2025-68470 via react-router (>=6.0.0, <=6.30.1)

react-router NPM version =6.0.0, =0.2.1, =0.5.0, =0.0.1, =0.0.1, =3.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.0-beta-20260120211922, =1.0.0, =1.0.0, =2.12.12 and more Source cves: CVE-2025-68470 Source advisory: SNYK:JS-REACTROUTER-14908286...

@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +10 more potentially affected by CVE-2025-69264 via pnpm (>=10.0.0, <=10.18.3)

pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.8, =0.1.0, =2.7.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2025-69264 Source advisory: OSV:GHSA-379Q-355J-W6RJ...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @a11ywatch/pagemind (>=0.9.31, <=0.9.34) +531 more potentially affected by CVE-2025-9611 via playwright (>=1.0.2, <=1.55.1-beta-1758616458000)

playwright NPM version =1.0.2, =0.0.1, =0.9.31, =0.1.8, =0.0.18-patch.0, =0.0.33, =0.0.1, =0.1.1, =0.1.1, =0.0.10-a, =0.0.1, =1.11.0, =0.1.466, =0.32.2, =0.36.3-test.5 and more Source cves: CVE-2025-9611 Source advisory: SNYK:JS-PLAYWRIGHT-14888269...

acme-compilers (>=0.2.2, <=0.2.4), acvm (>=0.23.0, <=0.26.1) +295 more potentially affected by unknown CVE via rkyv (>=0.1.1, <=0.7.45)

rkyv CARGO version =0.1.1, =0.2.2, =0.23.0, =0.23.0, =0.0.1, =0.2.0, =0.39.0, =0.23.0, =0.26.1 - cairn-import-geonames 0.0.2-alpha - cairn-import-oa 0.0.2-alpha - cairn-import-osm 0.0.2-alpha - cairn-import-wof 0.0.2-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0001...

careful (>=0.1.0, <=0.2.0), dxh-test-package (1.1.2) +7 more potentially affected by CVE-2025-15095 via httpbin (0.10.4)

httpbin PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on httpbin and may be impacted: - careful =0.1.0, =0.1.4, =0.1.6, =0.3.2, =0.0.1, =0.7.1, =2.2.1, =2.7.5 Source cves: CVE-2025-15095 Source advisory: SNYK:PYTHON-HTTPBIN-14723357...

@atom8n/ai-workflow-builder (>=1.2.1, <=1.5.8), @atom8n/backend-test-utils (>=1.2.2, <=1.5.8) +39 more potentially affected by CVE-2025-68665 via @langchain/core (>=1.0.1, <=1.1.7)

@langchain/core NPM version =1.0.1, =1.2.1, =1.2.2, =1.2.2, =2.2.2, =2.2.2, =2.2.2, =2.1.9, =2.1.0, =2.1.0, =1.0.11, =2.1.0, =1.0.1, =2.1.0, =1.0.1, =2.1.0, =2.1.36 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...

@axiom-lattice/agent-eval (>=2.1.9, <=2.1.100), @axiom-lattice/core (>=2.1.0, <=3.0.7) +15 more potentially affected by CVE-2025-68665 via langchain (>=1.0.2, <=1.2.0)

langchain NPM version =1.0.2, =2.1.9, =2.1.0, =1.0.11, =2.1.0, =0.1.1, =1.0.1, =1.0.1, =1.0.0, =0.1.3, =3.66.0, =3.66.0, =5.7.2, =0.0.1, =0.3.0, =0.3.1 - hedera-agent-kit 3.5.2 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...

@abovethefray/klaviyo-adobe-commerce-app-checkout-consent-dropin (>=0.0.1, <=1.0.0), @adobe-commerce/elsie (>=1.0.0-alpha04071347, <=2.0.0-alpha-20260514091936) +51 more potentially affected by CVE-2025-68429 via @storybook/builder-webpack5 (>=8.0.0, <=8.6.14)

@storybook/builder-webpack5 NPM version =8.0.0, =0.0.1, =1.0.0-alpha04071347, =0.2.9, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =0.11.1-aa792aa-20250325153437, =0.12.1-aa792aa-20250325153437, =0.0.1-10adad4-20260325085110, =1.0.12, =3.32.0-rc.2, =9.0.0-next.47, =9.0.0-next.67 and more...