-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0726react (=0.1.1) +30759 more potentially affected by CVE-2026-55602 via http-proxy-middleware (>=0.16.0 <=2.0.1)

http-proxy-middleware NPM version =0.16.0, =1.0.1, =1.1.0 - 0726react =0.1.1 - 0x0.icu.anima =0.1.0 - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory =1.0.0 - 0xgank-tea-central-compound =1.0.0 - 0xgank-tea-characteristic...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0 <=8.8.1), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5 <=7.4.5) +234 more potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=0.0.1 <=6.9.1)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version =0.0.1, =4.0.0, =5.6.5, =4.1.0, =4.0.0, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =4.0.0, =5.5.7 and more Source cves: CVE-2026-55470 Source advisory: OSV:GHSA-FXJ4-P9XP-37V5...

@0xwork/connect (>=0.1.0 <=0.1.9), @1001-digital/components.evm (>=1.3.0 <=3.6.11) +1373 more potentially affected by CVE-2026-11525 via undici (>=8.0.0 <=8.4.1)

undici NPM version =8.0.0, =0.1.0, =1.3.0, =0.1.0, =1.2.2, =0.3.0, =0.3.0, =0.3.1, =5.0.1-staging.3edc9d7b8d6f, =5.0.1-staging.3edc9d7b8d6f, =5.1.1-staging.0ad6ac75ae4a, =5.1.1-staging.0ad6ac75ae4a, =5.0.1-staging.4b92bc7a3e3b, =5.0.1-staging.3abdf9534c25, =2026.6.2, =2026.6.5 and more Source cve...

002-globals (=1.0.0), 007putra-my-bot (=1.1.1) +36331 more potentially affected by CVE-2026-11525 via undici (>=7.0.0 <=7.27.2)

undici NPM version =7.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =0.3.96, =0.0.1, =0.0.9 - 2017-1535 =1.0.0 and more Source cves: CVE-2026-11525 Source advisory: SNYK:JS-UNDICI-17372758...

0utmailauth (=1.0.0), 0xkobold (>=0.0.1 <=0.8.0) +15496 more potentially affected by CVE-2026-11525 via undici (>=6.0.0 <=6.26.0)

undici NPM version =6.0.0, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.1, =1.0.68, =4.11.0, =4.11.46 - 7up-dev =1.0.0 - 7up-developer =1.0.0 - 7up-kingdom =1.0.0 - 7up-nub =1.0.0 and more Source cves: CVE-2026-11525 Source advisory: SNYK:JS-UNDICI-17372758...

org.webjars.npm:actions__core (>=1.10.0 <=1.11.1), org.webjars.npm:actions__http-client (>=2.2.1 <=2.2.3) +14 more potentially affected by CVE-2026-12151 via org.webjars.npm:undici (>=4.12.2 <=5.29.0)

org.webjars.npm:undici MAVEN version =4.12.2, =1.10.0, =2.2.1, =0.1.16, =0.1.28 - org.webjars.npm:elasticelasticsearch =8.6.0 - org.webjars.npm:elastictransport =8.3.1 - org.webjars.npm:firebase =10.13.0 - org.webjars.npm:firebaseauth =1.7.7 - org.webjars.npm:firebaseauth-compat =0.5.12 -...

0utmailauth (=1.0.0), 0xkobold (>=0.0.1 <=0.8.0) +4815 more potentially affected by CVE-2026-12151 via undici (>=6.0.0 <=6.25.0)

undici NPM version =6.0.0, =0.0.1, =1.0.1, =1.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =0.5.119 and more Source cves: CVE-2026-12151 Source advisory: SNYK:JS-UNDICI-17372754...

002-globals (=1.0.0), 007putra-my-bot (=1.1.1) +36331 more potentially affected by CVE-2026-12151 via undici (>=7.0.0 <=7.27.2)

undici NPM version =7.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =0.3.96, =0.0.1, =0.0.9 - 2017-1535 =1.0.0 and more Source cves: CVE-2026-12151 Source advisory: SNYK:JS-UNDICI-17372754...

002-globals (=1.0.0), 007putra-my-bot (=1.1.1) +36331 more potentially affected by CVE-2026-6733 via undici (>=7.0.0 <=7.27.2)

undici NPM version =7.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =0.3.96, =0.0.1, =0.0.9 - 2017-1535 =1.0.0 and more Source cves: CVE-2026-6733 Source advisory: SNYK:JS-UNDICI-17372752...

0utmailauth (=1.0.0), 0xkobold (>=0.0.1 <=0.8.0) +15496 more potentially affected by CVE-2026-6733 via undici (>=6.0.0 <=6.26.0)

undici NPM version =6.0.0, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.1, =1.0.68, =4.11.0, =4.11.46 - 7up-dev =1.0.0 - 7up-developer =1.0.0 - 7up-kingdom =1.0.0 - 7up-nub =1.0.0 and more Source cves: CVE-2026-6733 Source advisory: SNYK:JS-UNDICI-17372752...

org.webjars.npm:actions__core (>=1.10.0 <=1.11.1), org.webjars.npm:actions__http-client (>=2.2.1 <=2.2.3) +14 more potentially affected by CVE-2026-6733 via org.webjars.npm:undici (>=4.12.2 <=5.29.0)

org.webjars.npm:undici MAVEN version =4.12.2, =1.10.0, =2.2.1, =0.1.16, =0.1.28 - org.webjars.npm:elasticelasticsearch =8.6.0 - org.webjars.npm:elastictransport =8.3.1 - org.webjars.npm:firebase =10.13.0 - org.webjars.npm:firebaseauth =1.7.7 - org.webjars.npm:firebaseauth-compat =0.5.12 -...

@0xwork/connect (>=0.1.0 <=0.1.9), @1001-digital/components.evm (>=1.3.0 <=3.6.11) +1373 more potentially affected by CVE-2026-9678 via undici (>=8.0.0 <=8.4.1)

undici NPM version =8.0.0, =0.1.0, =1.3.0, =0.1.0, =1.2.2, =0.3.0, =0.3.0, =0.3.1, =5.0.1-staging.3edc9d7b8d6f, =5.0.1-staging.3edc9d7b8d6f, =5.1.1-staging.0ad6ac75ae4a, =5.1.1-staging.0ad6ac75ae4a, =5.0.1-staging.4b92bc7a3e3b, =5.0.1-staging.3abdf9534c25, =2026.6.2, =2026.6.5 and more Source cve...

002-globals (=1.0.0), 007putra-my-bot (=1.1.1) +36331 more potentially affected by CVE-2026-9678 via undici (>=7.0.0 <=7.27.2)

undici NPM version =7.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =0.3.96, =0.0.1, =0.0.9 - 2017-1535 =1.0.0 and more Source cves: CVE-2026-9678 Source advisory: SNYK:JS-UNDICI-17372697...

02url-querystring-http (>=1.0.1 <=1.0.4), 04_nodeblog (=1.0.0) +15347 more potentially affected by CVE-2026-5079 via multer (>=1.0.3 <=2.1.1)

multer NPM version =1.0.3, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.3 and more Source cves: CVE-2026-5079 Source advisory: OSV:GHSA-72GW-MP4G-V24J...

04_nodeblog (=1.0.0), 4591-libs (>=0.0.1 <=0.2.0) +4726 more potentially affected by CVE-2026-5038 via multer (>=2.0.0-alpha.2 <=2.1.1)

multer NPM version =2.0.0-alpha.2, =0.0.1, =2.0.1, =1.0.10, =0.0.1-alpha.1, =0.0.1-alpha.9, =1.0.0, =0.0.1, =0.0.0-alpha.119, =1.2.1, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =1.0.14 and more Source cves: CVE-2026-5038 Source advisory: OSV:GHSA-3P4H-7M6X-2HCM...

clai (>=2.0.0b1 <=2.0.0b2), pydantic-ai (>=2.0.0b1 <=2.0.0b2) +2 more potentially affected by CVE-2026-46678 +1 more via pydantic-ai-slim (>=2.0.0b1 <=2.0.0b2)

pydantic-ai-slim PYPI version =2.0.0b1, =2.0.0b1, =2.0.0b1, =2.0.0b1, =2.0.0b1, =2.0.0b2 Source cves: CVE-2026-46678, CVE-2026-48782 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-17362946...

io.quarkiverse.renarde:quarkus-renarde (>=3.0.13 <=3.0.20), io.quarkiverse.renarde:quarkus-renarde-backoffice (>=3.0.13 <=3.0.20) +14 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-rest-csrf (>=3.10.0 <=3.20.6.1)

io.quarkus:quarkus-rest-csrf MAVEN version =3.10.0, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.13, =3.0.20 and more Source cves: CVE-2026-50559 Source advisory: SNYK:JAVA-IOQUARKUS-17375079...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +4461 more potentially affected by CVE-2026-50010 via io.netty:netty-handler (>=4.2.0.Final <=4.2.14.Final)

io.netty:netty-handler MAVEN version =4.2.0.Final, =0.1.0, =0.1.0, =4.7.4, =4.7.4, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =4.7.3, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-50010 Source advisory: OSV:GHSA-C653-97M9-RCG9...

227checkergenerator (>=1.0.0 <=1.0.1), 5mghost-rover (>=0.0.1 <=0.0.3) +1732 more potentially affected by CVE-2026-54274 via aiohttp (>=3.0.0b0 <=3.14.0)

aiohttp PYPI version =3.0.0b0, =1.0.0, =0.0.1, =0.1.1, =0.1.0b0, =1.1.0, =1.0.1, =0.31.5, =0.6.0, =0.0.0, =0.0.33.post1 and more Source cves: CVE-2026-54274 Source advisory: SNYK:PYTHON-AIOHTTP-17342364...

227checkergenerator (>=1.0.0 <=1.0.1), 5mghost-rover (>=0.0.1 <=0.0.3) +1732 more potentially affected by CVE-2026-54275 via aiohttp (>=3.0.0b0 <=3.14.0)

aiohttp PYPI version =3.0.0b0, =1.0.0, =0.0.1, =0.1.1, =0.1.0b0, =1.1.0, =1.0.1, =0.31.5, =0.6.0, =0.0.0, =0.0.33.post1 and more Source cves: CVE-2026-54275 Source advisory: SNYK:PYTHON-AIOHTTP-17342400...