@contfu/client (0.0.2), @contfu/contfu (>=0.0.3, <=0.0.11) +3 more potentially affected by CVE-2026-39356 via drizzle-orm (1.0.0-beta.19)

drizzle-orm NPM version 1.0.0-beta.19 is affected by a known vulnerability. The following packages have a transitive dependency on drizzle-orm and may be impacted: - @contfu/client 0.0.2 - @contfu/contfu =0.0.3, =0.0.3, =0.0.0, =0.0.4 Source cves: CVE-2026-39356 Source advisory: GHSA-GPJ5-G38J-94...