8447 matches found
@seafile/seafile-sdoc-editor (>=3.0.0 <=3.0.194) potentially affected by CVE-2026-30587 via @seafile/sdoc-editor (=3.0.194)
@seafile/sdoc-editor NPM version =3.0.194 is affected by a known vulnerability. The following packages have a transitive dependency on @seafile/sdoc-editor and may be impacted: - @seafile/seafile-sdoc-editor =3.0.0, =3.0.194 Source cves: CVE-2026-30587 Source advisory:...
at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1 <=9.1.3.2), au.com.acegi:xml-format-maven-plugin (>=4.0.1 <=4.1.0) +2010 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=4.0.0 <=4.0.2)
org.codehaus.plexus:plexus-utils MAVEN version =4.0.0, =9.1.1, =4.0.1, =0.0.1, =0.0.9, =0.4.0, =0.0.0, =1.9.2, =1.0.0-M5, =1.0.0-M6, =1.0.0-M1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =1.0.0-M10 and more Source cves: CVE-2025-67030 Source advisory: OSV:GHSA-6FMV-XXPF-W3CW...
@aaquib/whatsasenanpm (=1.3.5), @alexandersen01/sharepoint-mcp-server-better (=0.3.23) +86 more potentially affected by CVE-2026-26832 via node-tesseract-ocr (>=0.1.0 <=2.2.1)
node-tesseract-ocr NPM version =0.1.0, =1.0.10, =0.0.1, =2.3.50, =2.0.0, =0.0.1, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-26832 Source advisory: OSV:GHSA-8J44-735H-W4W2...
allbot (>=0.1.1 <=0.1.70), multi-rest (>=1.3.0-1 <=1.4.5) potentially affected by CVE-2026-26833 via thumbler (=1.1.2)
thumbler NPM version =1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on thumbler and may be impacted: - allbot =0.1.1, =1.3.0-1, =1.4.5 Source cves: CVE-2026-26833 Source advisory: OSV:GHSA-MVHF-547C-H55R...
@grackle-ai/cli (>=0.0.2 <=0.181.0) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2 <=0.70.5)
@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.181.0 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840331...
@grackle-ai/cli (>=0.0.2 <=0.181.0) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2 <=0.70.4)
@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.181.0 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840037...
@grackle-ai/cli (>=0.0.2 <=0.181.0) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2 <=0.70.4)
@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.181.0 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840038...
@grackle-ai/cli (>=0.0.2 <=0.181.0) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2 <=0.70.2)
@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.181.0 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840352...
@grackle-ai/cli (>=0.0.2 <=0.181.0) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2 <=0.70.0)
@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.181.0 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840033...
0lever-utils (>=0.0.2 <=0.0.7), 128autograder (>=5.0.1 <=6.0.0rc4) +14713 more potentially affected by CVE-2026-25645 via requests (>=2.0.0 <=2.32.5)
requests PYPI version =2.0.0, =0.0.2, =5.0.1, =0.3.0, =0.0.1a0, =0.1.1001, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-mailx =0.1.0 - a16z =0.0.1 and more Source cves: CVE-2026-25645 Source advisory: SNYK:PYTHON-REQUESTS-15763443...
@edropin/canvas (>=1.1.0 <=2.0.0), @launchtray/hatch-test-pdf (>=0.11.2 <=0.23.0-alpha.17) +15 more potentially affected by CVE-2026-26830 via pdf-image (>=1.1.0 <=2.0.0)
pdf-image NPM version =1.1.0, =1.1.0, =0.11.2, =0.2.0, =0.0.2, =0.13.0-beta.1, =0.0.2, =0.0.12, =0.19.5, =0.0.2, =0.1.1, =0.3.0, =0.1.1, =1.0.0, =1.0.0, =1.0.5 and more Source cves: CVE-2026-26830 Source advisory: OSV:GHSA-Q5MH-72XG-628W...
@aokyra/baileys (=2.0.6), @arceos/baileys (>=10.0.0 <=10.0.4) +76 more potentially affected by unknown CVE via @shennmine/libsignal-node (=0.0.1-security)
@shennmine/libsignal-node NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @shennmine/libsignal-node and may be impacted: - @aokyra/baileys =2.0.6 - @arceos/baileys =10.0.0, =0.1.1, =2.0.3, =1.0.0, =1.0.0, =1.0.3, =1.0.6,...
@aokyra/baileys (=2.0.6), @arceos/baileys (>=10.0.0 <=10.0.4) +76 more potentially affected by unknown CVE via @shennmine/libsignal-node (=0.0.1-security)
@shennmine/libsignal-node NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @shennmine/libsignal-node and may be impacted: - @aokyra/baileys =2.0.6 - @arceos/baileys =10.0.0, =0.1.1, =2.0.3, =1.0.0, =1.0.0, =1.0.3, =1.0.6,...
aero.albers.osmbse:mdzip-process-sources-maven-plugin (=0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (=0.0.1) +17572 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=3.0 <=3.6.0)
org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1, =0.1.0, =0.0.1, =0.0.6, =0.1.10, =0.1.3, =0.0.1, =0.0.1, =0.2.0, =0.1.3, =0.1.3, =0.1.5 - ai.pipestream:pipestream-engine =0.0.6 - ai.pipestream:pipestream-engine-kafka-sidecar =0.0.2 and more Source cves: CVE-2025-67030 Source advisory:...
at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1 <=9.1.3.2), au.com.acegi:xml-format-maven-plugin (>=4.0.1 <=4.1.0) +2010 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=4.0.0 <=4.0.2)
org.codehaus.plexus:plexus-utils MAVEN version =4.0.0, =9.1.1, =4.0.1, =0.0.1, =0.0.9, =0.4.0, =0.0.0, =1.9.2, =1.0.0-M5, =1.0.0-M6, =1.0.0-M1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =1.0.0-M10 and more Source cves: CVE-2025-67030 Source advisory: SNYK:JAVA-ORGCODEHAUSPLEXUS-15766699...
entity-model (>=1.0.0 <=1.0.9), fast-whisper-diarizer (>=0.1.2 <=0.1.32) +23 more potentially affected by CVE-2026-24159 via nemo-toolkit (>=2.0.0rc0 <=2.6.1)
nemo-toolkit PYPI version =2.0.0rc0, =1.0.0, =0.1.2, =0.2.7, =5.1.6, =1.0.0, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =2.0.8, =2.3.5 and more Source cves: CVE-2026-24159 Source advisory: SNYK:PYTHON-NEMOTOOLKIT-15912093...
@stnd/build (=0.18.70), stnd (=0.18.70) potentially affected by CVE-2026-29772 via astro (=6.0.0-beta.1)
astro NPM version =6.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on astro and may be impacted: - @stnd/build =0.18.70 - stnd =0.18.70 Source cves: CVE-2026-29772 Source advisory: SNYK:JS-ASTRO-15763371...
@astrojs/cloudflare (>=13.0.0-beta.4 <=13.0.0-beta.14), @astrojs/markdoc (>=1.0.0-beta.7 <=1.0.0-beta.15) +8 more potentially affected by CVE-2026-33769 via @astrojs/internal-helpers (>=0.8.0-beta.0 <=0.8.0-beta.3)
@astrojs/internal-helpers NPM version =0.8.0-beta.0, =13.0.0-beta.4, =1.0.0-beta.7, =7.0.0-beta.4, =5.0.0-beta.4, =7.0.0-beta.6, =10.0.0-beta.1, =10.0.0-beta.1, =6.0.0-beta.7, =6.0.0-beta.20 Source cves: CVE-2026-33769 Source advisory: SNYK:JS-ASTROJSINTERNALHELPERS-15763364...
@openinc/parse-server-opendash (>=4.0.0 <=4.0.4) potentially affected by CVE-2026-33627 via parse-server (>=9.6.0-alpha.37 <=9.6.0-alpha.43)
parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.4 Source cves: CVE-2026-33627 Source advisory: OSV:GHSA-37MJ-C2WF-CX96...
@openinc/parse-server-opendash (>=4.0.0 <=4.0.4) potentially affected by CVE-2026-33624 via parse-server (>=9.6.0-alpha.37 <=9.6.0-alpha.43)
parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.4 Source cves: CVE-2026-33624 Source advisory: OSV:GHSA-2299-GHJR-6VJP...