@powersync/cli-core (>=0.0.0-dev-20260305082615, <=0.9.2), @powersync/cli-plugin-config-edit (>=0.0.0-dev-20260305082615, <=0.9.2) +20 more potentially affected by CVE-2026-30870 via @powersync/service-sync-rules (>=0.0.0-dev-20240918082156, <=0.32.0)

@powersync/service-sync-rules NPM version =0.0.0-dev-20240918082156, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20250827072023, =0.0.0-dev-20260114113449, =0.0.0-dev-20250827072023, =0.0.0-dev.57b1a567,...

@powersync/cli-core (>=0.0.0-dev-20260305082615, <=0.9.2), @powersync/cli-plugin-config-edit (>=0.0.0-dev-20260305082615, <=0.9.2) +19 more potentially affected by CVE-2026-30870 via @powersync/service-sync-rules (0.32.0)

@powersync/service-sync-rules NPM version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on @powersync/service-sync-rules and may be impacted: - @powersync/cli-core =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615,...