co.cask.re:dre-core (>=1.0.1, <=1.1.2), co.cask.re:dre-plugins (>=1.0.1, <=1.1.2) +53 more potentially affected by CVE-2026-13502 via org.antlr:antlr4-maven-plugin (>=4.1, <=4.13.2)

org.antlr:antlr4-maven-plugin MAVEN version =4.1, =1.0.1, =1.0.1, =1.0, =0.1, =1.5.2, =1.4.8, =1.6.5 and more Source cves: CVE-2026-13502 Source advisory: SNYK:JAVA-ORGANTLR-17753946...

aabb_physics (>=0.1.0, <=0.1.1), aad (>=0.2.1, <=0.9.0) +2275 more potentially affected by unknown CVE via ttf-parser (>=0.1.0, <=0.25.1)

ttf-parser CARGO version =0.1.0, =0.1.0, =0.2.1, =0.1.0, =0.11.0, =0.9.0, =0.1.0, =0.0.2, =0.1.2, =0.1.1, =0.1.26, =0.1.23, =0.1.9, =0.2.0, =0.3.0 - affixapp 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0192...

@forgeax/game (>=0.3.0, <=0.3.10), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +11 more potentially affected by CVE-2026-59195 via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.1.0-beta.3, =0.1.0-rc.20, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: CVE-2026-59195 Source advisory: OSV:GHSA-QRV3-253H-G69C...

@forgeax/game (>=0.3.0, <=0.3.10), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +11 more potentially affected by CVE-2026-59195 via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.1.0-beta.3, =0.1.0-rc.20, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: CVE-2026-59195 Source advisory: SNYK:JS-PNPM-17660535...

kmcom-nuxt-layers (>=2.2.0, <=2.2.12) potentially affected by CVE-2026-59194 via pnpm (11.5.3)

pnpm NPM version 11.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pnpm and may be impacted: - kmcom-nuxt-layers =2.2.0, =2.2.12 Source cves: CVE-2026-59194 Source advisory: OSV:GHSA-72R4-9C5J-MJ57...

kmcom-nuxt-layers (>=2.2.0, <=2.2.12) potentially affected by CVE-2026-59194 via pnpm (11.5.3)

pnpm NPM version 11.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pnpm and may be impacted: - kmcom-nuxt-layers =2.2.0, =2.2.12 Source cves: CVE-2026-59194 Source advisory: SNYK:JS-PNPM-17661047...

@pnpm/building.commands (>=1100.0.0, <=1100.1.3), @pnpm/deps.compliance.commands (>=1100.0.0, <=1101.3.3) +10 more potentially affected by CVE-2026-59196 via @pnpm/installing.deps-resolver (>=1100.0.0, <=1100.2.1)

@pnpm/installing.deps-resolver NPM version =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =0.0.1, =0.0.21 Source cves: CVE-2026-59196 Source advisory: SNYK:JS-PNPMINSTALLINGDEPSRESOLVER-17660540...

@pnpm/building.commands (>=1100.0.4, <=1100.1.3), @pnpm/deps.compliance.commands (>=1101.1.1, <=1101.3.3) +9 more potentially affected by CVE-2026-59196 via @pnpm/installing.deps-restorer (>=1101.0.0, <=1101.1.10)

@pnpm/installing.deps-restorer NPM version =1101.0.0, =1100.0.4, =1101.1.1, =1100.1.3, =1101.0.2, =1100.0.4, =1100.0.4, =1100.1.2, =1101.0.0, =1100.0.4, =1100.2.0, =0.0.2, =0.0.21 Source cves: CVE-2026-59196 Source advisory: SNYK:JS-PNPMINSTALLINGDEPSRESTORER-17660541...

@pnpm/building.commands (>=1100.0.0, <=1100.1.3), @pnpm/deps.compliance.commands (>=1100.0.0, <=1101.3.3) +11 more potentially affected by CVE-2026-59196 via @pnpm/fs.symlink-dependency (>=1100.0.0, <=1100.0.8)

@pnpm/fs.symlink-dependency NPM version =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =0.0.1, =0.0.21 Source cves: CVE-2026-59196 Source advisory: SNYK:JS-PNPMFSSYMLINKDEPENDENCY-17660538...

kmcom-nuxt-layers (>=2.2.0, <=2.2.12) potentially affected by CVE-2026-59196 via pnpm (11.5.3)

pnpm NPM version 11.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pnpm and may be impacted: - kmcom-nuxt-layers =2.2.0, =2.2.12 Source cves: CVE-2026-59196 Source advisory: OSV:GHSA-FR4H-3CPH-29XV...

@pnpm/building.commands (>=1100.0.4, <=1100.1.3), @pnpm/deps.compliance.commands (>=1101.1.1, <=1101.3.3) +8 more potentially affected by CVE-2026-59196 via @pnpm/installing.deps-installer (>=1101.0.0, <=1101.8.0)

@pnpm/installing.deps-installer NPM version =1101.0.0, =1100.0.4, =1101.1.1, =1100.1.3, =1101.0.2, =1100.0.4, =1100.0.4, =1100.1.2, =1100.0.4, =1100.2.0, =0.0.2, =0.0.21 Source cves: CVE-2026-59196 Source advisory: SNYK:JS-PNPMINSTALLINGDEPSINSTALLER-17660539...

kmcom-nuxt-layers (>=2.2.0, <=2.2.12) potentially affected by CVE-2026-59196 via pnpm (11.5.3)

pnpm NPM version 11.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pnpm and may be impacted: - kmcom-nuxt-layers =2.2.0, =2.2.12 Source cves: CVE-2026-59196 Source advisory: SNYK:JS-PNPM-17660537...

@pnpm/bins.linker (>=1100.0.0, <=1100.0.10), @pnpm/bins.remover (>=1100.0.0, <=1100.0.6) +28 more potentially affected by CVE-2026-55699 via @pnpm/bins.resolver (>=1100.0.0, <=1100.0.5)

@pnpm/bins.resolver NPM version =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.24 and more Source cves: CVE-2026-55699 Source advisory:...

@pnpm/building.after-install (>=1100.0.0, <=1101.0.18), @pnpm/building.commands (>=1100.0.0, <=1100.1.1) +10 more potentially affected by CVE-2026-55487 via @pnpm/building.policy (>=1100.0.0, <=1100.0.7)

@pnpm/building.policy NPM version =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =0.0.1, =0.0.21 Source cves: CVE-2026-55487 Source advisory: SNYK:JS-PNPMBUILDINGPOLICY-17661052...

NPM: pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement

NPM: pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement vulnerability discovered by ? in WordPress Npm pnpm versions 10.34.0...

barrelly (>=1.0.0, <=1.2.0), rsbuild-plugin-wasmpack (>=0.0.4, <=2.0.0) potentially affected by CVE-2026-50029 via js-toml (>=1.0.0, <=1.1.0)

js-toml NPM version =1.0.0, =1.0.0, =0.0.4, =2.0.0 Source cves: CVE-2026-50029 Source advisory: OSV:GHSA-M34P-749J-X6M6...

barrelly (>=1.0.0, <=1.2.0), rsbuild-plugin-wasmpack (>=0.0.4, <=2.0.0) potentially affected by CVE-2026-50029 via js-toml (>=1.0.0, <=1.1.0)

js-toml NPM version =1.0.0, =1.0.0, =0.0.4, =2.0.0 Source cves: CVE-2026-50029 Source advisory: SNYK:JS-JSTOML-17728417...

barrelly (>=1.0.0, <=1.2.0), rsbuild-plugin-wasmpack (>=0.0.4, <=2.0.0) potentially affected by CVE-2026-49293 via js-toml (>=1.0.0, <=1.1.0)

js-toml NPM version =1.0.0, =1.0.0, =0.0.4, =2.0.0 Source cves: CVE-2026-49293 Source advisory: OSV:GHSA-WP3C-266W-4QFQ...

barrelly (>=1.0.0, <=1.2.0), rsbuild-plugin-wasmpack (>=0.0.4, <=2.0.0) potentially affected by CVE-2026-49293 via js-toml (>=1.0.0, <=1.1.0)

js-toml NPM version =1.0.0, =1.0.0, =0.0.4, =2.0.0 Source cves: CVE-2026-49293 Source advisory: SNYK:JS-JSTOML-17728419...

@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +13 more potentially affected by CVE-2026-48995 via pnpm (>=10.0.0, <=10.33.0)

pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.0-beta.3, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =2.7.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-48995 Source advisory: OSV:GHSA-HG3W-7F8C-63HP...