@haxtheweb/create (>=25.0.2, <=26.0.0), @haxtheweb/open-apis (>=25.0.0, <=26.0.0) potentially affected by CVE-2026-46395 via @haxtheweb/haxcms-nodejs (25.0.0)

@haxtheweb/haxcms-nodejs NPM version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @haxtheweb/haxcms-nodejs and may be impacted: - @haxtheweb/create =25.0.2, =25.0.0, =26.0.0 Source cves: CVE-2026-46395 Source advisory: GHSA-6C8G-9HFH-PQ5H...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +81 more potentially affected by CVE-2025-10279 +1 more via mlflow-skinny (>=3.0.0rc0, <=3.11.0rc0)

mlflow-skinny PYPI version =3.0.0rc0, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.0b1, =1.0.0b1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.1.0, =0.2.7 and more Source cves: CVE-2025-10279, CVE-2026-4137 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-16756597...

-fides-amor-et-lux (1.0.0), -price-checker (>=1.0.0, <=1.0.5) +33393 more potentially affected by CVE-2026-45736 via ws (>=8.0.0, <=8.20.0)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0-beta.3 - 0g-vibekit 0.1.0 - 0g-zksettlement-client 1.0.0 and more Source cves: CVE-2026-45736 Source advisory: OSV:GHSA-58QX-3VCG-4XPX...

@addtodoist/twitter-autohook (2.2.0), @alessiodf/core-chameleon (0.0.1) +157 more potentially affected by CVE-2025-57282 via ngrok (4.3.3)

ngrok NPM version 4.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on ngrok and may be impacted: - @addtodoist/twitter-autohook 2.2.0 - @alessiodf/core-chameleon 0.0.1 - @archer-edu/qa-test-cli =0.1.0-alpha.60, =0.1.1, =3.8.2-rc.0, =3.0.0-next.34,...

5htp-airtable (>=0.0.1, <=0.1.2), @01/service-core (>=2.0.1, <=2.1.4) +640 more potentially affected by CVE-2025-57282 via ngrok (>=0.1.98, <=5.0.0-beta.2)

ngrok NPM version =0.1.98, =0.0.1, =2.0.1, =1.0.0, =1.0.0, =0.0.3, =1.0.7, =5.0.0, =1.0.0, =2.0.0, =0.6.0, =1.4.4, =1.0.6, =1.4.3 and more Source cves: CVE-2025-57282 Source advisory: SNYK:JS-NGROK-17363059...

@budibase/client (>=3.0.0, <=3.2.26), @budibase/server (>=3.0.0, <=3.2.26) potentially affected by CVE-2026-45716 via @budibase/frontend-core (>=3.0.0, <=3.2.26)

@budibase/frontend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-45716 Source advisory: SNYK:JS-BUDIBASEFRONTENDCORE-16759691...

@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +590 more potentially affected by CVE-2026-8159 via multiparty (>=4.0.0, <=4.2.3)

multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8159 Source advisory: SNYK:JS-MULTIPARTY-16790693...

@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +590 more potentially affected by CVE-2026-8159 via multiparty (>=4.0.0, <=4.2.3)

multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8159 Source advisory: OSV:GHSA-65X3-RW7Q-GX94...

@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +590 more potentially affected by CVE-2026-8162 via multiparty (>=4.0.0, <=4.2.3)

multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8162 Source advisory: OSV:GHSA-XH3C-6GCQ-G4RV...

@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +590 more potentially affected by CVE-2026-8161 via multiparty (>=4.0.0, <=4.2.3)

multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8161 Source advisory: SNYK:JS-MULTIPARTY-16790691...

@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +590 more potentially affected by CVE-2026-8161 via multiparty (>=4.0.0, <=4.2.3)

multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8161 Source advisory: OSV:GHSA-QXCH-WHHJ-8956...

@aws/nx-plugin (>=0.105.0, <=1.0.0-rc.2), @breadstone-infrastructure/nx-tasks (>=0.0.237, <=0.0.289) +46 more potentially affected by CVE-2026-45149 via brace-expansion (>=5.0.2, <=5.0.5)

brace-expansion NPM version =5.0.2, =0.105.0, =0.0.237, =0.0.237, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =23.0.0-pr.35465.2bc2643 and more Source cve...

@aws/nx-plugin (>=0.105.0, <=1.0.0-rc.2), @breadstone-infrastructure/nx-tasks (>=0.0.237, <=0.0.289) +46 more potentially affected by CVE-2026-45149 via brace-expansion (>=5.0.2, <=5.0.5)

brace-expansion NPM version =5.0.2, =0.105.0, =0.0.237, =0.0.237, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =23.0.0-pr.35465.2bc2643 and more Source cve...

@constructions-incongrues/faircamp-cms-ui (>=0.1.0, <=0.2.1), @lightnet/sveltia-admin (>=4.0.0, <=4.0.7) +1 more potentially affected by unknown CVE via @sveltia/cms (>=0.73.1, <=0.160.0)

@sveltia/cms NPM version =0.73.1, =0.1.0, =4.0.0, =0.1.2, =0.1.5 Source cves: unknown CVE Source advisory: OSV:GHSA-97R8-RF7Q-WMJW...

@constructions-incongrues/faircamp-cms-ui (>=0.1.0, <=0.2.1), @lightnet/sveltia-admin (>=4.0.0, <=4.0.7) +1 more potentially affected by unknown CVE via @sveltia/cms (>=0.73.1, <=0.160.0)

@sveltia/cms NPM version =0.73.1, =0.1.0, =4.0.0, =0.1.2, =0.1.5 Source cves: unknown CVE Source advisory: SNYK:JS-SVELTIACMS-17739014...

@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +320 more potentially affected by CVE-2026-6402 via webpack-dev-server (>=5.0.0, <=5.2.3)

webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2-develop-1171, =1.2.0-pillar-v4.0 and more Source cves: CVE-2026-6402 Source advisor...

@kaspernj/api-maker (>=1.0.68, <=1.0.2187), @kaspernj/api-maker-bootstrap (>=1.0.40, <=1.0.216) +3 more potentially affected by CVE-2026-46510 via form-data-objectizer (1.0.2)

form-data-objectizer NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on form-data-objectizer and may be impacted: - @kaspernj/api-maker =1.0.68, =1.0.40, =1.0.14, =1.0.0, =0.1.0, =0.1.2 Source cves: CVE-2026-46510 Source advisory:...

org.webjars.npm:ai-sdk__vue (3.0.33) potentially affected by CVE-2026-8768 via org.webjars.npm:ai (6.0.33)

org.webjars.npm:ai MAVEN version 6.0.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:ai and may be impacted: - org.webjars.npm:ai-sdkvue 3.0.33 Source cves: CVE-2026-8768 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16734890...

@kilocode/plugin (>=7.0.27, <=7.0.46) potentially affected by CVE-2026-8765 via @kilocode/sdk (>=7.0.27, <=7.0.46)

@kilocode/sdk NPM version =7.0.27, =7.0.27, =7.0.46 Source cves: CVE-2026-8765 Source advisory: SNYK:JS-KILOCODESDK-17878140...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2026-8750 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2026-8750 Source advisory: SNYK:JAVA-AIH2O-17191772...