@ampproject/eleventy-plugin-amp (>=0.5.6, <=0.5.8), @ampproject/toolbox-cli (>=2.0.0-alpha.0, <=3.0.0-canary.2) +32 more potentially affected by CVE-2026-104861 via probe-image-size (>=7.0.0, <=7.3.0)

probe-image-size NPM version =7.0.0, =0.5.6, =2.0.0-alpha.0, =2.8.0-canary.6, =2.8.8, =14.9.23-prev, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =1.2.0, =1.2.0, =1.1.2, =1.0.0-beta.2, =1.0.0-beta.37 and more Source cves: CVE-2026-104861 Source advisory: MEND:CVE-2026-104861...

EUVD-2025-123789

Malicious code in phenomic-eleventy-dynamo-mini-css-extract-plugin npm...

5ug-cli (>=1.0.72, <=1.4.0), @11ty/eleventy-plugin-syntaxhighlight (>=3.1.0, <=3.1.1) +170 more potentially affected by CVE-2021-33587 via css-what (4.0.0)

css-what NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on css-what and may be impacted: - 5ug-cli =1.0.72, =3.1.0, =0.0.1, =0.4.0-next.8, =0.4.0-next.8, =0.4.0-next.8, =2.8.1-canary.0, =2.7.6, =2.8.0-canary.5, =1.0.0-alpha.0, =1.0.0,...