ledger-zcash (>=0.3.0, <=0.5.0), zcash-hsmbuilder (>=0.2.0, <=0.3.0) +3 more potentially affected by CVE-2026-54496 via zcash_primitives (0.5.0)

zcashprimitives CARGO version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on zcashprimitives and may be impacted: - ledger-zcash =0.3.0, =0.2.0, =0.3.0 - zcashclientbackend 0.5.0 - zcashclientsqlite 0.3.0 - zcashproofs 0.5.0 Source cves:...

bdy (>=1.7.46-dev, <=1.18.26-stage), buddy-tunnel (>=1.3.19-dev, <=1.7.45-dev) potentially affected by CVE-2026-53486 via @xhmikosr/decompress (10.0.1)

@xhmikosr/decompress NPM version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @xhmikosr/decompress and may be impacted: - bdy =1.7.46-dev, =1.3.19-dev, =1.7.45-dev Source cves: CVE-2026-53486 Source advisory: SNYK:JS-XHMIKOSRDECOMPRESS-178744...

bdy (>=1.18.27-dev, <=1.22.61-stage) potentially affected by CVE-2026-53486 via @xhmikosr/decompress (11.1.1)

@xhmikosr/decompress NPM version 11.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on @xhmikosr/decompress and may be impacted: - bdy =1.18.27-dev, =1.22.61-stage Source cves: CVE-2026-53486 Source advisory: SNYK:JS-XHMIKOSRDECOMPRESS-17874438...

-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +21703 more potentially affected by CVE-2026-53486 via decompress (>=4.0.0, <=4.2.1)

decompress NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =2.2.0-alpha.3 and more Source cves: CVE-2026-53486 Source advisory: OSV:GHSA-MP2F-45PM-3CG9...

bdy (>=1.18.27-dev, <=1.22.61-stage) potentially affected by CVE-2026-53486 via @xhmikosr/decompress (11.1.1)

@xhmikosr/decompress NPM version 11.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on @xhmikosr/decompress and may be impacted: - bdy =1.18.27-dev, =1.22.61-stage Source cves: CVE-2026-53486 Source advisory: OSV:GHSA-MP2F-45PM-3CG9...

bdy (>=1.7.46-dev, <=1.18.26-stage), buddy-tunnel (>=1.3.19-dev, <=1.7.45-dev) potentially affected by CVE-2026-53486 via @xhmikosr/decompress (10.0.1)

@xhmikosr/decompress NPM version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @xhmikosr/decompress and may be impacted: - bdy =1.7.46-dev, =1.3.19-dev, =1.7.45-dev Source cves: CVE-2026-53486 Source advisory: OSV:GHSA-MP2F-45PM-3CG9...

coreutils (>=0.0.14, <=0.0.16), findutils (>=0.3.0, <=0.4.0) +104 more potentially affected by CVE-2026-35362 via uucore (>=0.0.4, <=0.0.17)

uucore CARGO version =0.0.4, =0.0.14, =0.3.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8, =0.0.1, =0.0.8, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2026-35362 Source advisory: OSV:GHSA-W6XC-G9QJ-VP32...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35363 via uu_rm (>=0.0.14, <=0.0.16)

uurm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35363 Source advisory: OSV:GHSA-89P7-7CQ3-HHR2...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35347 via uu_comm (>=0.0.14, <=0.0.16)

uucomm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35347 Source advisory: OSV:GHSA-3WFC-MGPM-9RQ6...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35370 via uu_id (>=0.0.14, <=0.0.16)

uuid CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35370 Source advisory: OSV:GHSA-47C7-QRM7-MQW7...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35353 via uu_mkdir (>=0.0.14, <=0.0.16)

uumkdir CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35353 Source advisory: OSV:GHSA-MJ6P-44CH-CQ69...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35371 via uu_id (>=0.0.14, <=0.0.16)

uuid CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35371 Source advisory: OSV:GHSA-XV5W-CW7X-72GJ...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35369 via uu_kill (>=0.0.14, <=0.0.16)

uukill CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35369 Source advisory: OSV:GHSA-P6RV-2QPM-FWVG...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35356 via uu_install (>=0.0.14, <=0.0.16)

uuinstall CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35356 Source advisory: OSV:GHSA-GWM6-Q8CH-HCFR...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35343 via uu_cut (>=0.0.14, <=0.0.16)

uucut CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35343 Source advisory: OSV:GHSA-WV33-5PXH-R7J7...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35355 via uu_install (>=0.0.14, <=0.0.16)

uuinstall CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35355 Source advisory: OSV:GHSA-239G-2685-54X3...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35373 via uu_ln (>=0.0.14, <=0.0.16)

uuln CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35373 Source advisory: OSV:GHSA-JCJR-RH8Q-7XQF...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35346 via uu_comm (>=0.0.14, <=0.0.16)

uucomm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35346 Source advisory: OSV:GHSA-6GCW-W7CP-94G9...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35342 via uu_mktemp (>=0.0.14, <=0.0.16)

uumktemp CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35342 Source advisory: OSV:GHSA-2W8R-9XJ7-69J5...

codeforlife-portal (>=1.1.1, <=2.16.0) potentially affected by CVE-2026-54060 via pillow (3.3.2)

pillow PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - codeforlife-portal =1.1.1, =2.16.0 Source cves: CVE-2026-54060 Source advisory: OSV:PYSEC-2026-2254...