@firedesktop/react-portal-base (2.1.2), @imaginario27/air-ui-utils (>=1.0.8, <=1.0.9) +4 more potentially affected by CVE-2026-24737 via jspdf (4.0.0)

jspdf NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jspdf and may be impacted: - @firedesktop/react-portal-base 2.1.2 - @imaginario27/air-ui-utils =1.0.8, =1.4.0-I18n-QM, =0.5.129, =4.4.0, =4.4.1 - svgedit 7.4.1 Source cves:...

@firedesktop/react-portal-base (0.1.46), svgedit (7.3.5) potentially affected by CVE-2025-29907 via jspdf (3.0.0)

jspdf NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jspdf and may be impacted: - @firedesktop/react-portal-base 0.1.46 - svgedit 7.3.5 Source cves: CVE-2025-29907 Source advisory: OSV:GHSA-W532-JXJH-HJHJ...