homeassistant-stubs (2022.2.0b4), pytest-homeassistant-custom-component (0.6.3) potentially affected by CVE-2026-54317 via homeassistant (2022.2.0b4)

homeassistant PYPI version 2022.2.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0b4 - pytest-homeassistant-custom-component 0.6.3 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.4.0b0), pytest-homeassistant-custom-component (0.8.0) potentially affected by CVE-2026-54317 via homeassistant (2022.4.0b0)

homeassistant PYPI version 2022.4.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.0b0 - pytest-homeassistant-custom-component 0.8.0 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.9.7), mqtt-hass-base (>=4.0.11, <=4.0.13) +1 more potentially affected by CVE-2026-54317 via homeassistant (2022.9.7)

homeassistant PYPI version 2022.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.7 - mqtt-hass-base =4.0.11, =4.0.13 - pytest-homeassistant-custom-component 0.11.26 Source cves:...

homeassistant-stubs (2023.3.0b7), pytest-homeassistant-custom-component (0.13.3) potentially affected by CVE-2026-54317 via homeassistant (2023.3.0b7)

homeassistant PYPI version 2023.3.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.3.0b7 - pytest-homeassistant-custom-component 0.13.3 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.3.5), pytest-homeassistant-custom-component (0.7.4) potentially affected by CVE-2026-54317 via homeassistant (2022.3.5)

homeassistant PYPI version 2022.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.5 - pytest-homeassistant-custom-component 0.7.4 Source cves: CVE-2026-54317 Source advisory:...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-53726 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-53726 Source advisory: OSV:GHSA-WMWX-JR2P-4J4R...

@openinc/parse-server-opendash (>=4.0.12, <=4.0.29) potentially affected by CVE-2026-53725 via parse-server (9.8.0)

parse-server NPM version 9.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-server and may be impacted: - @openinc/parse-server-opendash =4.0.12, =4.0.29 Source cves: CVE-2026-53725 Source advisory: OSV:GHSA-75V4-M273-5J49...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-53724 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-53724 Source advisory: OSV:GHSA-7WQV-XJF3-X35V...

@openinc/parse-server-opendash (>=4.0.12, <=4.0.29) potentially affected by CVE-2026-50008 via parse-server (9.8.0)

parse-server NPM version 9.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-server and may be impacted: - @openinc/parse-server-opendash =4.0.12, =4.0.29 Source cves: CVE-2026-50008 Source advisory: OSV:GHSA-P84R-H6RX-F2XR...

@142vip/midway (>=0.1.6-alpha.9, <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1, <=0.0.1-alpha.13) +2856 more potentially affected by unknown CVE via typeorm (>=0.1.14, <=0.3.28)

typeorm NPM version =0.1.14, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood 0.10.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-TYPEORM-17391479...

@142vip/midway (>=0.1.6-alpha.9, <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1, <=0.0.1-alpha.13) +2856 more potentially affected by unknown CVE via typeorm (>=0.1.14, <=0.3.28)

typeorm NPM version =0.1.14, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood 0.10.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9GGV-8W38-R7PM...

@m3s/smart-contract (>=1.4.1, <=2.3.8), @openzeppelin/contracts-cli (0.1.0) +2 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard-stellar (>=0.1.1, <=0.5.0)

@openzeppelin/wizard-stellar NPM version =0.1.1, =1.4.1, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2026-57583 Source advisory: OSV:GHSA-9WXG-VF3R-56HC...

@m3s/smart-contract (>=1.1.5, <=2.3.8), @openzeppelin/contracts-mcp (>=0.0.5, <=0.3.0) +11 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard (>=0.1.1, <=0.10.8)

@openzeppelin/wizard NPM version =0.1.1, =1.1.5, =0.0.5, =0.0.1, =1.0.4, =0.0.1, =0.2.48, =0.2.63-a, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2026-57583 Source advisory: SNYK:JS-OPENZEPPELINWIZARD-17817911...

@m3s/smart-contract (>=1.1.5, <=2.3.8), @openzeppelin/contracts-mcp (>=0.0.5, <=0.3.0) +11 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard (>=0.1.1, <=0.10.8)

@openzeppelin/wizard NPM version =0.1.1, =1.1.5, =0.0.5, =0.0.1, =1.0.4, =0.0.1, =0.2.48, =0.2.63-a, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2026-57583 Source advisory: OSV:GHSA-9WXG-VF3R-56HC...

@m3s/smart-contract (>=1.4.1, <=2.3.8), @openzeppelin/contracts-mcp (>=0.0.5, <=0.4.5) +1 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard-stylus (0.2.0)

@openzeppelin/wizard-stylus NPM version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/wizard-stylus and may be impacted: - @m3s/smart-contract =1.4.1, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2026-57583 Source advisory:...

@claude-flow/plugin-agent-federation (>=1.0.0-alpha.9, <=1.0.0-alpha.15), @turtlepusher/plugin-agent-federation (>=1.0.0, <=1.0.1) +2 more potentially affected by CVE-2026-58195 via agentic-flow (>=2.0.2-alpha, <=2.0.12-fix.8)

agentic-flow NPM version =2.0.2-alpha, =1.0.0-alpha.9, =1.0.0, =0.5.0, =0.3.0, =0.3.1 Source cves: CVE-2026-58195 Source advisory: OSV:GHSA-VCV2-R9JH-99M5...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-57480 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-57480 Source advisory: SNYK:JS-PARSESERVER-17420049...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-57480 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-57480 Source advisory: OSV:GHSA-CGXM-VR2F-6FJ8...

alass-util (0.3.0), cervo (>=0.1.0, <=0.5.1) +17 more potentially affected by CVE-2026-55832 via tract-onnx (>=0.1.1, <=0.20.7)

tract-onnx CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =1.2.0, =0.4.0, =0.2.0, =0.1.1, =0.19.0-alpha.8, =0.19.0-alpha.8, =0.20.7 and more Source cves: CVE-2026-55832 Source advisory: OSV:GHSA-H668-6X6G-F8R5...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +694 more potentially affected by CVE-2026-11525 via undici (>=7.0.0, <=7.27.2)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.26.4, =0.0.33, =0.0.1, =1.0.0, =21.0.0-rc.2, =21.0.0-rc.2, =0.5.0, =0.5.1 - @anyauth/shared-deps 0.1.0 and more Source cves: CVE-2026-11525 Source advisory: OSV:GHSA-G8M3-5G58-FQ7M...