@aaasd/pocpoc (99.99.9996), internal-company-module-test-1337 (>=99.99.9991, <=99.99.9995) potentially affected by unknown CVE via internal-company-module-test-1337 (99.99.9996)

internal-company-module-test-1337 NPM version 99.99.9996 is affected by a known vulnerability. The following packages have a transitive dependency on internal-company-module-test-1337 and may be impacted: - @aaasd/pocpoc 99.99.9996 - internal-company-module-test-1337 =99.99.9991, =99.99.9995 Sour...

accesskit_consumer (>=0.1.0, <=0.7.1), accesskit_windows (>=0.1.0, <=0.8.0) +1196 more potentially affected by unknown CVE via sized-chunks (>=0.1.3, <=0.6.5)

sized-chunks CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =1.0.5, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.0.1, =0.0.1, =0.2.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0251...

xhci (>=0.2.6, <=0.9.2) potentially affected by unknown CVE via accessor (>=0.2.0, <=0.3.3)

accessor CARGO version =0.2.0, =0.2.6, =0.9.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0127...

annatar (>=0.4.3, <=0.5.8), ansi2png-rs (>=0.1.0, <=0.1.1) +63 more potentially affected by unknown CVE via imageproc (>=0.6.1, <=0.22.0)

imageproc CARGO version =0.6.1, =0.4.3, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0117...

annatar (>=0.4.3, <=0.5.8), ansi2png-rs (>=0.1.0, <=0.1.1) +63 more potentially affected by unknown CVE via imageproc (>=0.6.1, <=0.22.0)

imageproc CARGO version =0.6.1, =0.4.3, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0116...

3am-cli (0.1.0), 3am-diagnosis (0.1.0) +1442 more potentially affected by CVE-2026-41686 via @anthropic-ai/sdk (>=0.79.0, <=0.91.0)

@anthropic-ai/sdk NPM version =0.79.0, =0.5.0, =0.1.0, =1.0.0-alpha, =0.8.4, =0.1.8, =5.0.0, =5.0.0, =0.1.0, =1.3.0-canary.26.1, =1.3.0-canary.26.1, =1.3.0-canary.26.1, =1.6.3 - @adaptic/backend-legacy 0.0.941 and more Source cves: CVE-2026-41686 Source advisory: OSV:GHSA-P7FG-763F-G4GF...

a11ywatch_cli (>=0.0.26, <=0.7.16), aap (>=0.4.0, <=0.4.1) +3725 more potentially affected by unknown CVE via rustls-webpki (>=0.100.3, <=0.102.8)

rustls-webpki CARGO version =0.100.3, =0.0.26, =0.4.0, =0.1.0, =0.21.0-alpha.1, =0.1.11, =0.12.1, =0.2.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-82J2-J2CH-GFR8...

@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by CVE-2026-42239 via @budibase/backend-core (>=3.0.0, <=3.2.26)

@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-42239 Source advisory: OSV:GHSA-4F9J-VR4P-642R...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0136...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0111...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0137...

SecScan

SecScan Local-LLM-powered security scanner for GitHub repos...

@chocolatey-software/astro (2.7.0) potentially affected by CVE-2026-41322 via @astrojs/node (10.0.4)

@astrojs/node NPM version 10.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on @astrojs/node and may be impacted: - @chocolatey-software/astro 2.7.0 Source cves: CVE-2026-41322 Source advisory: OSV:GHSA-C57F-MM3J-27Q9...

ach (>=0.1.0, <=0.2.5), ach-array (>=0.1.0, <=0.2.5) +1655 more potentially affected by unknown CVE via bare-metal (>=0.1.3, <=1.0.0)

bare-metal CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.5.0, =0.5.0, =0.8.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0110...

@accounter/modern-poalim-scraper (0.10.1-alpha-20250905202854-1612dbe0853c5d6e9f9ddff402868250fa642e59), @aleph-alpha/lib-http (1.4.5) +14 more potentially affected by CVE-2026-41907 +1 more via uuid (12.0.0)

uuid NPM version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on uuid and may be impacted: - @accounter/modern-poalim-scraper 0.10.1-alpha-20250905202854-1612dbe0853c5d6e9f9ddff402868250fa642e59 - @aleph-alpha/lib-http 1.4.5 -...

@deviceinsight/ng-ui-scale-lib (>=10.0.0, <=10.1.0), locizify (>=6.1.0, <=9.0.9) +1 more potentially affected by CVE-2026-41886 via locize (>=4.0.0, <=4.0.16)

locize NPM version =4.0.0, =10.0.0, =6.1.0, =1.1.11, =2.0.6 Source cves: CVE-2026-41886 Source advisory: OSV:GHSA-W937-FG2H-XHQ2...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4307 more potentially affected by CVE-2026-41672 via @xmldom/xmldom (>=0.7.0, <=0.8.12)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =2.1.0-renovate-fdebc6-mhg3djx8 - @abcd19/st-grid 3.1.0 - @abdullahceylan/expo-cli 0.2.6 and more Source cves: CVE-2026-41672 Source advisory: OSV:GHSA-J759-J44W-7FR8...

nimiq-account (0.1.0), nimiq-accounts (0.1.0) +15 more potentially affected by CVE-2026-34065 via nimiq-primitives (0.1.0)

nimiq-primitives CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-primitives and may be impacted: - nimiq-account 0.1.0 - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 -...

nimiq-accounts (0.1.0), nimiq-block (0.1.0) +13 more potentially affected by CVE-2026-34064 via nimiq-account (0.1.0)

nimiq-account CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-account and may be impacted: - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 - nimiq-client 0.1.0 - nimiq-consens...

acceptxmr (>=0.1.0, <=0.13.0), activitypub_federation (>=0.1.0, <=0.2.0) +614 more potentially affected by CVE-2026-73051 via actix-http (>=3.0.0, <=3.9.0)

actix-http CARGO version =3.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0-beta.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =0.6.0-beta.1, =0.2.0, =0.1.0, =2.0.0-beta.1, =3.0.0 and more Source cves: CVE-2026-73051 Source advisory: OSV:GHSA-XHJ4-VRGC-HR34...