@11ty/eleventy (=3.0.0-alpha.16), @agiflowai/aicode-toolkit (>=0.6.0 <=1.1.0) +96 more potentially affected by CVE-2026-41311 via liquidjs (>=10.10.0 <=10.25.6)

liquidjs NPM version =10.10.0, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.8.0, =1.0.1, =1.6.3, =3.11.0, =3.11.0, =3.11.0, =1.0.0-beta.1, =1.0.0-beta.4 - @clairview/api =23.1.0 and more Source cves: CVE-2026-41311 Source advisory: OSV:GHSA-4RC3-7J7W-M548...

MAL-2025-44133 Malicious code in eleventy-webdriver-mocha-draco-iota (npm)

The package eleventy-webdriver-mocha-draco-iota was found to contain malicious code...

MAL-2025-6978 Malicious code in 11ty-simple-page-post-creator (npm)

The package 11ty-simple-page-post-creator was found to contain malicious code...

@11ty/eleventy (=0.3.3), @36node/swagen (=0.1.2) +1560 more potentially affected by CVE-2019-20922 via handlebars (>=4.0.0 <=4.4.3)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2, =5.0.0, =6.0.10 and more Source cves: CVE-2019-20922 Source advisory: OSV:GHSA-62GR-4QP9-H98F...

@11ty/eleventy (=0.3.3), @36node/swagen (=0.1.2) +1580 more potentially affected by unknown CVE via handlebars (>=4.0.0 <=4.5.2)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2, =5.0.0, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q2C6-C6PM-G3GH...

@11ty/eleventy (=0.3.3), @36node/swagen (=0.1.2) +1580 more potentially affected by unknown CVE via handlebars (>=4.0.0 <=4.5.2)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2, =5.0.0, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G9R4-XPMJ-MJ65...

@11ty/eleventy (=0.3.3), @36node/swagen (=0.1.2) +1477 more potentially affected by CVE-2019-19919 via handlebars (>=4.0.0 <=4.2.2)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =5.0.0, =5.0.0, =6.0.10 and more Source cves: CVE-2019-19919 Source advisory: OSV:GHSA-W457-6Q6X-CGP9...