@cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4), @irshadali/ngx-indexed-db (>=19.3.0, <=19.3.1) +16 more potentially affected by CVE-2026-50556 via @angular/platform-server (>=18.2.13, <=18.2.14)

@angular/platform-server NPM version =18.2.13, =1.0.0, =19.3.0, =0.0.0, =12.0.0, =0.0.0, =1.0.2, =0.0.0, =1.0.0, =0.0.1, =0.0.2 - my-unique-workspace 0.0.0 - my-workspace01 0.0.0 and more Source cves: CVE-2026-50556 Source advisory: OSV:GHSA-GXX4-3XCV-F8QX...

External Control of File Name or Path

Overview org.webjars.npm:launch-editor is a launch editor from node.js Affected versions of this package are vulnerable to External Control of File Name or Path in the handling of UNC paths on Windows systems. An attacker can obtain NTLMv2 password hashes by tricking a user into accessing a...

@ablehi/automation-app-build (>=0.1.0, <=0.2.2), @ablehi/automation-app-cli (>=0.1.0, <=0.2.2) +236 more potentially affected by CVE-2026-53571 via vite (>=8.0.0, <=8.0.14)

vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =0.1.0, =1.1.2, =1.2.0, =3.0.1-alpha.0, =1.0.0, =0.1.0, =0.1.0, =3.3.0, =3.4.0 and more Source cves: CVE-2026-53571 Source advisory: SNYK:JS-VITE-17353904...

@agilie/widget-template (>=1.0.6, <=1.1.6), @eui/deps-base (>=18.0.0-next.1, <=18.2.20) +9 more potentially affected by CVE-2026-50184 via @angular/service-worker (>=18.0.0, <=18.2.14)

@angular/service-worker NPM version =18.0.0, =1.0.6, =18.0.0-next.1, =18.0.0-next.1, =1.0.0, =12.0.0, =0.0.1, =1.0.0, =18.0.1, =0.0.1, =0.0.26 - ng-x-rocket 1.0.0 - table-collection-library 0.0.0 Source cves: CVE-2026-50184 Source advisory: OSV:GHSA-95QP-CMMW-MGQV...

@eui/deps-base (>=19.0.0-next.1, <=19.3.17), @eui/deps-base-light (>=19.0.0-next.1, <=19.3.17) +2 more potentially affected by CVE-2026-50184 via @angular/service-worker (>=19.0.0, <=19.2.20)

@angular/service-worker NPM version =19.0.0, =19.0.0-next.1, =19.0.0-next.1, =0.30.0, =0.30.0, =0.30.1 Source cves: CVE-2026-50184 Source advisory: SNYK:JS-ANGULARSERVICEWORKER-17359151...

GHSA-7C78-JF6Q-G5CM

creationtimestamp| type| source ---|---|--- 2026-06-15 17:11:14+00:00| seen| https://gist.github.com/alon710/0bdb094f8b35593b7efeef728ecec669...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +39 more potentially affected by CVE-2026-50170 via @angular/common (>=19.0.0, <=19.2.20)

@angular/common NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.0.5, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.0.0-beta-20260114160010, =0.0.1-canary.0.0, =1.0.0-canary.1 and more Source cves: CVE-2026-50170 Source advisory:...

@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.201-alpha) +52 more potentially affected by CVE-2026-50170 via @angular/common (>=21.0.0, <=21.2.14)

@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.5 and more Source cves: CVE-2026-50170 Source advisory: SNYK:JS-ANGULARCOMMON-17356499...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +33 more potentially affected by CVE-2026-50170 via @angular/common (>=20.0.0, <=20.3.21)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-50170 Source advisory: SNYK:JS-ANGULARCOMMON-17356499...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +33 more potentially affected by CVE-2026-50170 via @angular/common (>=20.0.0, <=20.3.21)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-50170 Source advisory: OSV:GHSA-Q6F4-QQRG-JV6X...

@ammar_sk/shared-lib (0.0.4), @angulartoolsdr/control-material (>=20.0.3, <=20.2.4) +43 more potentially affected by CVE-2026-52725 via @angular/core (>=20.0.0, <=20.3.21)

@angular/core NPM version =20.0.0, =20.0.3, =20.0.6, =20.0.6, =5.1.121, =5.1.121, =261.20.7, =261.1.1, =261.1.5, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 - @getflip/swirl-components-angular 0.472.0-beta-20260406102253 and more Source cves:...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +40 more potentially affected by CVE-2026-52725 via @angular/core (>=19.0.0, <=19.2.20)

@angular/core NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.0.5, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.0.0-beta-20260114160010, =0.0.1-canary.0.0, =1.0.0-canary.1 and more Source cves: CVE-2026-52725 Source advisory:...

@agilie/widget-template (>=1.0.6, <=1.1.6), @eui/deps-base (>=18.0.0-next.1, <=18.2.20) +9 more potentially affected by CVE-2026-50169 via @angular/service-worker (>=18.0.0, <=18.2.14)

@angular/service-worker NPM version =18.0.0, =1.0.6, =18.0.0-next.1, =18.0.0-next.1, =1.0.0, =12.0.0, =0.0.1, =1.0.0, =18.0.1, =0.0.1, =0.0.26 - ng-x-rocket 1.0.0 - table-collection-library 0.0.0 Source cves: CVE-2026-50169 Source advisory: OSV:GHSA-GV2Q-MQQV-365M...

003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +28830 more potentially affected by CVE-2026-48779 via ws (>=1.1.0, <=5.2.2)

ws NPM version =1.1.0, =1.0.0-3, =0.0.3, =1.1.0, =0.9.9, =1.0.0, =0.0.1, =0.11.3, =0.1.0, =1.0.2, =1.0.7 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

Credentials disclosure in the crawler

More info at https://contao.org/en/security-advisories/credentials-disclosure-in-the-crawler...

Path traversal in the jobs module

More info at https://contao.org/en/security-advisories/path-traversal-in-the-jobs-module...

Path traversal in the jobs module

More info at https://contao.org/en/security-advisories/path-traversal-in-the-jobs-module...

Credentials disclosure in the crawler

More info at https://contao.org/en/security-advisories/credentials-disclosure-in-the-crawler...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via deeply nested field names in multipart form data. An attacker can exhaust CPU and memory resources by sending a single HTTP request with a crafted multipart body containing excessively nested field names...

@ammar_sk/shared-lib (0.0.4), @angulartoolsdr/control-material (>=20.0.3, <=20.2.4) +43 more potentially affected by CVE-2026-54267 via @angular/core (>=20.0.0, <=20.3.21)

@angular/core NPM version =20.0.0, =20.0.3, =20.0.6, =20.0.6, =5.1.121, =5.1.121, =261.20.7, =261.1.1, =261.1.5, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 - @getflip/swirl-components-angular 0.472.0-beta-20260406102253 and more Source cves:...