0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +691 more potentially affected by CVE-2026-71849 via hono (>=4.7.0, <=4.12.33)

hono NPM version =4.7.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.5 and more Source cves: CVE-2026-71849 Source advisory: OSV:GHSA-79QM-7RJ5-M7R9...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +439 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0-dev.2580522, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.1.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.16 and more Source cves: CVE-2026-71848 Source advisory: SNYK:JS-HONO-18593786...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +439 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0-dev.2580522, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.1.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.16 and more Source cves: CVE-2026-71848 Source advisory: OSV:GHSA-54FX-42GC-7VW4...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by CVE-2026-66062 via @sveltejs/kit (>=2.0.0, <=2.70.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-66062 Source advisory: SNYK:JS-SVELTEJSKIT-18592743...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-72744 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-72744 Source advisory: OSV:GHSA-7C4V-FWGW-9RF7...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +13 more potentially affected by CVE-2026-72744 via @nuxt/nitro-server (>=4.4.7, <=4.5.0)

@nuxt/nitro-server NPM version =4.4.7, =3.2.0, =4.5.0-depup.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =4.4.7, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXTNITROSERVER-18593816...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-72744 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-72744 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: OSV:GHSA-7C4V-FWGW-9RF7...

@qingwave/cclens (>=0.1.0, <=0.2.0), nuxt (>=3.21.7, <=3.21.9) potentially affected by CVE-2026-72744 via @nuxt/nitro-server (>=3.21.7, <=3.21.9)

@nuxt/nitro-server NPM version =3.21.7, =0.1.0, =3.21.7, =3.21.9 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXTNITROSERVER-18593816...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-72744 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@vertexa/prisma (>=7.8.0, <=7.9.1), @vertexa/prisma-engines (>=7.8.0, <=7.9.1) potentially affected by unknown CVE via @vertexa/prisma-fetch-engine (7.9.1)

@vertexa/prisma-fetch-engine NPM version 7.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on @vertexa/prisma-fetch-engine and may be impacted: - @vertexa/prisma =7.8.0, =7.8.0, =7.9.1 Source cves: unknown CVE Source advisory:...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2515 more potentially affected by CVE-2026-75838 via dompurify (>=3.0.0, <=3.4.12)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.0.1, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.35 and more Source cves: CVE-2026-75838 Source advisory: OSV:GHSA-55Q2-FJHQ-7XH7...

@ahmedwalid05/instagram-private-api (>=1.43.6-0, <=1.43.9), @alwaysmeticulous/cli (>=2.306.0, <=2.308.0) +160 more potentially affected by CVE-2026-71430 via re2 (>=1.8.4, <=1.25.0)

re2 NPM version =1.8.4, =1.43.6-0, =2.306.0, =2.306.0, =1.43.3, =8.0.0, =8.1.31, =8.0.0, =8.0.0, =1.0.9, =0.0.0-semantic-release, =0.1.1, =1.1.0, =0.0.0-semantic-release, =0.0.1 and more Source cves: CVE-2026-71430 Source advisory: OSV:GHSA-8HCV-X26H-MCGP...

@0xwork/connect (0.1.8), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +1446 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)

pdfjs-dist NPM version =5.6.205, =0.1.8-fix.3, =1.0.0, =0.2.0, =0.0.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.104.0, =0.1.0, =0.2.340, =0.1.0, =0.17.9, =0.22.4 and more Source cves: CVE-2026-16633 Source advisory: SNYK:JS-PDFJSDIST-18592344...

@0xwork/connect (0.1.8), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +1446 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)

pdfjs-dist NPM version =5.6.205, =0.1.8-fix.3, =1.0.0, =0.2.0, =0.0.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.104.0, =0.1.0, =0.2.340, =0.1.0, =0.17.9, =0.22.4 and more Source cves: CVE-2026-16633 Source advisory: OSV:GHSA-HQ66-CQWQ-W95J...

02.aula (1.0.0), 0xrtest (1.0.0) +10779 more potentially affected by unknown CVE via js-yaml (>=4.0.0, <=4.3.0)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.14.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5P4M-2WFM-XMQJ...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21416 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.15.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-JSYAML-18593780...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21416 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.15.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5P4M-2WFM-XMQJ...

02.aula (1.0.0), 0xrtest (1.0.0) +10779 more potentially affected by unknown CVE via js-yaml (>=4.0.0, <=4.3.0)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.14.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-JSYAML-18593780...

@fernir2/saas-kit (>=0.0.173, <=0.0.207), @fernir2/saas-kit-cli (>=0.1.38, <=0.1.40) +1 more potentially affected by CVE-2026-71476 via @nx/s3-cache (>=5.0.0, <=5.0.7)

@nx/s3-cache NPM version =5.0.0, =0.0.173, =0.1.38, =5.0.0, =5.0.7 Source cves: CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...