@restura/core (>=0.1.0-alpha.12, <=2.4.0), @restura/logger (1.0.1) +42 more potentially affected by CVE-2026-27837 via dottie (>=2.0.4, <=2.0.6)

dottie NPM version =2.0.4, =0.1.0-alpha.12, =1.3.53, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.21, =1.0.25, =1.0.25, =1.0.25, =1.3.44, =1.3.53, =1.3.35, =1.6.18 and more Source cves: CVE-2026-27837 Source advisory: OSV:GHSA-R5MX-6WC6-7H9W...

@restura/core (>=0.1.0-alpha.12, <=2.4.0), @restura/logger (1.0.1) +42 more potentially affected by CVE-2023-26132 +1 more via dottie (>=2.0.4, <=2.0.6)

dottie NPM version =2.0.4, =0.1.0-alpha.12, =1.3.53, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.21, =1.0.25, =1.0.25, =1.0.25, =1.3.44, =1.3.53, =1.3.35, =1.6.18 and more Source cves: CVE-2023-26132, CVE-2026-27837 Source advisory: SNYK:JS-DOTTIE-15360180...

@freon4dsl/server (>=2.0.0-beta.1, <=2.0.0-beta.5), @tachybase/engine (>=1.0.21, <=1.1.2) +3 more potentially affected by CVE-2025-8129 via koa (3.0.0)

koa NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @freon4dsl/server =2.0.0-beta.1, =1.0.21, =1.3.7, =1.4.0, =15.4.0, =15.4.2 Source cves: CVE-2025-8129 Source advisory: OSV:GHSA-JGMV-J7WW-JX2X...