@a1st/aix (>=0.0.3, <=0.6.0), @a1st/aix-core (>=0.2.0, <=0.6.0) +9 more potentially affected by CVE-2026-73424 via @astrojs/vercel (>=10.0.6, <=10.0.8)

@astrojs/vercel NPM version =10.0.6, =0.0.3, =0.2.0, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.3.0 - taskair 0.0.1 Source cves: CVE-2026-73424 Source advisory: SNYK:JS-ASTROJSVERCEL-18599401...

linhub (0.1.1), octo-drf (>=3.0.0, <=4.4.1) potentially affected by CVE-2026-16216 via django-jet (1.0.8)

django-jet PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-jet and may be impacted: - linhub 0.1.1 - octo-drf =3.0.0, =4.4.1 Source cves: CVE-2026-16216 Source advisory: SNYK:PYTHON-DJANGOJET-18017927...

@whalent/agent (0.3.258) potentially affected by unknown CVE via @whalent/agent-core (0.3.258)

@whalent/agent-core NPM version 0.3.258 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.258 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.235) potentially affected by unknown CVE via @whalent/agent-core (0.3.235)

@whalent/agent-core NPM version 0.3.235 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.235 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

ratex-layout (0.0.3) potentially affected by CVE-2026-53530 via ratex-parser (0.0.3)

ratex-parser CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ratex-parser and may be impacted: - ratex-layout 0.0.3 Source cves: CVE-2026-53530 Source advisory: OSV:GHSA-4HGP-59H5-GVRJ...

bdy (>=1.18.27-dev, <=1.22.61-stage) potentially affected by CVE-2026-53486 via @xhmikosr/decompress (11.1.1)

@xhmikosr/decompress NPM version 11.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on @xhmikosr/decompress and may be impacted: - bdy =1.18.27-dev, =1.22.61-stage Source cves: CVE-2026-53486 Source advisory: SNYK:JS-XHMIKOSRDECOMPRESS-17874438...

@grackle-ai/cli (>=0.82.2, <=0.132.1), @grackle-ai/powerline (>=0.82.2, <=0.132.1) +6 more potentially affected by unknown CVE via @grackle-ai/runtime-sdk (>=0.82.2, <=0.132.1)

@grackle-ai/runtime-sdk NPM version =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VV65-F55V-XM6G...

KLA91131 PE vulnerability in Microsoft Server Software

Privilege escalation vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-54998 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Exchange-Online CVE list...

@cyruslabs/install (>=0.1.0-alpha.6, <=0.1.0-alpha.12), @zantarix/cursus (>=0.3.0, <=0.5.0) potentially affected by CVE-2026-48815 via sigstore (>=4.0.0, <=4.1.0)

sigstore NPM version =4.0.0, =0.1.0-alpha.6, =0.3.0, =0.5.0 Source cves: CVE-2026-48815 Source advisory: OSV:GHSA-52V5-JR5W-GJXR...

com.navercorp.pinpoint:pinpoint-batch (>=3.0.0, <=3.1.0), com.navercorp.pinpoint:pinpoint-batch-alarmsender (>=3.0.0, <=3.1.0) +5 more potentially affected by CVE-2026-57947 via com.navercorp.pinpoint:pinpoint-webhook (>=3.0.0, <=3.1.0)

com.navercorp.pinpoint:pinpoint-webhook MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.1.0 Source cves: CVE-2026-57947 Source advisory: SNYK:JAVA-COMNAVERCORPPINPOINT-17755929...

03-api-solid (>=1.0.0, <=1.1.2), 0uth (>=1.0.5, <=1.2.1) +2943 more potentially affected by CVE-2026-13676 via fast-uri (>=2.4.5, <=3.1.2)

fast-uri NPM version =2.4.5, =1.0.0, =1.0.5, =1.0.3, =0.5.2-alpha-20231022145212-c0afe8d, =0.1.4-alpha-20231022145212-c0afe8d, =0.1.4-alpha-20231022145212-c0afe8d, =0.6.0, =0.2.0, =0.2.0, =0.0.1-alpha-20240310235646-1ea207b758e2c4cacf2c0f592448d86a94ff5ba4, =0.3.1, =0.3.4 - @adbl/cartridg...

@huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.6.0), @huiliyi37/dsh-tianshu (0.2.1) +6 more potentially affected by CVE-2026-59195 via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.2.0, =0.2.4, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: CVE-2026-59195 Source advisory: SNYK:JS-PNPM-17660535...

01os (>=0.0.5, <=0.0.13), 0din-litellm-shield (>=0.2.0, <=0.3.0) +3704 more potentially affected by CVE-2026-12795 via litellm (>=0.1.400, <=1.100.0rc1)

litellm PYPI version =0.1.400, =0.0.5, =0.2.0, =0.1.0, =0.1.0, =0.3.0, =0.0.13, =0.0.13, =0.1.3, =0.0.4, =0.1.0, =0.3.5, =0.1.1.dev1, =0.2.2, =0.2.1, =0.2.0, =0.6.1 and more Source cves: CVE-2026-12795 Source advisory: SNYK:PYTHON-LITELLM-17393717...

01os (>=0.0.5, <=0.0.13), 0din-litellm-shield (>=0.2.0, <=0.3.0) +3704 more potentially affected by CVE-2026-12772 via litellm (>=0.1.400, <=1.100.0rc1)

litellm PYPI version =0.1.400, =0.0.5, =0.2.0, =0.1.0, =0.1.0, =0.3.0, =0.0.13, =0.0.13, =0.1.3, =0.0.4, =0.1.0, =0.3.5, =0.1.1.dev1, =0.2.2, =0.2.1, =0.2.0, =0.6.1 and more Source cves: CVE-2026-12772 Source advisory: SNYK:PYTHON-LITELLM-17391451...

tamilai (0.0.2) potentially affected by CVE-2026-57137 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57137 Source advisory: OSV:GHSA-H2W2-V7J6-XQM4...

tamilai (0.0.2) potentially affected by CVE-2026-57137 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57137 Source advisory: SNYK:JS-PRAISONAI-17660577...

@forwardimpact/libcodegen (>=0.1.47, <=0.1.52) potentially affected by CVE-2026-54269 via protobufjs-cli (2.0.1)

protobufjs-cli NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobufjs-cli and may be impacted: - @forwardimpact/libcodegen =0.1.47, =0.1.52 Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJSCLI-17353169...

budibase (>=0.0.3, <=0.0.31) potentially affected by CVE-2026-48128 via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: CVE-2026-48128 Source advisory: SNYK:JS-BUDIBASESERVER-17818152...

org.hswebframework.web:hsweb-system-authorization-oauth2 (>=4.0.8, <=5.0.1) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (>=4.0.8, <=5.0.1)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version =4.0.8, =4.0.8, =5.0.1 Source cves: CVE-2026-11477 Source advisory: SNYK:JAVA-ORGHSWEBFRAMEWORKWEB-17232077...

crypt_guard (0.1.4), env_encryption_tool (0.9.17) +7 more potentially affected by unknown CVE via pqcrypto (>=0.11.1, <=0.18.1)

pqcrypto CARGO version =0.11.1, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.23.0, =0.23.0, =12.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0164...