@142vip/midway (>=0.1.6-alpha.9, <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1, <=0.0.1-alpha.13) +2813 more potentially affected by unknown CVE via typeorm (>=0.1.14, <=0.3.28)

typeorm NPM version =0.1.14, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood 0.10.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9GGV-8W38-R7PM...

@142vip/midway (>=0.1.6-alpha.9, <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1, <=0.0.1-alpha.13) +2813 more potentially affected by unknown CVE via typeorm (>=0.1.14, <=0.3.28)

typeorm NPM version =0.1.14, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood 0.10.1 and more Source cves: unknown CVE Source advisory: GHSA-9GGV-8W38-R7PM...

@142vip/midway (>=0.1.6-alpha.9, <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1, <=0.0.1-alpha.13) +2813 more potentially affected by unknown CVE via typeorm (>=0.1.14, <=0.3.28)

typeorm NPM version =0.1.14, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood 0.10.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-TYPEORM-17391479...

@diligencefabric/client-sdk (>=0.0.1, <=0.0.2), @jtl-software/cloud-apps-rest-sdk (0.0.1) potentially affected by CVE-2026-49336 via @microsoft/kiota-http-fetchlibrary (1.0.0-preview.100)

@microsoft/kiota-http-fetchlibrary NPM version 1.0.0-preview.100 is affected by a known vulnerability. The following packages have a transitive dependency on @microsoft/kiota-http-fetchlibrary and may be impacted: - @diligencefabric/client-sdk =0.0.1, =0.0.2 - @jtl-software/cloud-apps-rest-sdk...

@m3s/smart-contract (>=1.1.5, <=2.3.8), @openzeppelin/contracts-mcp (>=0.0.5, <=0.3.0) +11 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard (>=0.1.1, <=0.10.8)

@openzeppelin/wizard NPM version =0.1.1, =1.1.5, =0.0.5, =0.0.1, =1.0.4, =0.0.1, =0.2.48, =0.2.63-a, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2026-57583 Source advisory: SNYK:JS-OPENZEPPELINWIZARD-17817911...

@m3s/smart-contract (>=1.4.1, <=2.3.8), @openzeppelin/contracts-mcp (>=0.0.5, <=0.4.5) +1 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard-stylus (0.2.0)

@openzeppelin/wizard-stylus NPM version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/wizard-stylus and may be impacted: - @m3s/smart-contract =1.4.1, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2026-57583 Source advisory:...

@m3s/smart-contract (>=1.4.1, <=2.3.8), @openzeppelin/contracts-cli (0.1.0) +2 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard-stellar (>=0.1.1, <=0.5.0)

@openzeppelin/wizard-stellar NPM version =0.1.1, =1.4.1, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2026-57583 Source advisory: OSV:GHSA-9WXG-VF3R-56HC...

@m3s/smart-contract (>=1.1.5, <=2.3.8), @openzeppelin/contracts-mcp (>=0.0.5, <=0.3.0) +11 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard (>=0.1.1, <=0.10.8)

@openzeppelin/wizard NPM version =0.1.1, =1.1.5, =0.0.5, =0.0.1, =1.0.4, =0.0.1, =0.2.48, =0.2.63-a, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2026-57583 Source advisory: OSV:GHSA-9WXG-VF3R-56HC...

@m3s/smart-contract (>=1.1.5, <=2.3.8), @openzeppelin/contracts-mcp (>=0.0.5, <=0.3.0) +11 more potentially affected by unknown CVE via @openzeppelin/wizard (>=0.1.1, <=0.10.8)

@openzeppelin/wizard NPM version =0.1.1, =1.1.5, =0.0.5, =0.0.1, =1.0.4, =0.0.1, =0.2.48, =0.2.63-a, =1.0.0, =0.0.1, =0.1.2 Source cves: unknown CVE Source advisory: GHSA-9WXG-VF3R-56HC...

@claude-flow/plugin-agent-federation (>=1.0.0-alpha.9, <=1.0.0-alpha.15), @turtlepusher/plugin-agent-federation (>=1.0.0, <=1.0.1) +2 more potentially affected by CVE-2026-58195 via agentic-flow (>=2.0.2-alpha, <=2.0.12-fix.8)

agentic-flow NPM version =2.0.2-alpha, =1.0.0-alpha.9, =1.0.0, =0.5.0, =0.3.0, =0.3.1 Source cves: CVE-2026-58195 Source advisory: OSV:GHSA-VCV2-R9JH-99M5...

muvimaker (0.3.0) potentially affected by CVE-2026-67338 via jupyterlab (3.2.5)

jupyterlab PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - muvimaker 0.3.0 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

georges (2023.1.0), georges-core (>=2023.1.0, <=2023.2.0) potentially affected by CVE-2026-67338 via jupyterlab (3.6.2)

jupyterlab PYPI version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - georges 2023.1.0 - georges-core =2023.1.0, =2023.2.0 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

cadlabs-ethereum-economic-model (0.0.2a0), nldi-el-serv (>=0.1.4, <=0.1.5) potentially affected by CVE-2026-67338 via jupyterlab (3.0.14)

jupyterlab PYPI version 3.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cadlabs-ethereum-economic-model 0.0.2a0 - nldi-el-serv =0.1.4, =0.1.5 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

xircuits (>=1.7.0, <=1.9.4) potentially affected by CVE-2026-67338 via jupyterlab (3.4.6)

jupyterlab PYPI version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - xircuits =1.7.0, =1.9.4 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

corradin-opioid-project (0.1.0), pricetool (0.1.0) potentially affected by CVE-2026-67338 via jupyterlab (0.31.1)

jupyterlab PYPI version 0.31.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - corradin-opioid-project 0.1.0 - pricetool 0.1.0 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

invertedai-drive (0.1.0) potentially affected by CVE-2026-67338 via jupyterlab (3.4.4)

jupyterlab PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - invertedai-drive 0.1.0 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

elyra (>=0.6.0, <=0.10.3), gcp-jupyterlab-shared (>=1.0.1, <=1.0.8) +5 more potentially affected by CVE-2026-67338 via jupyterlab (1.2.21)

jupyterlab PYPI version 1.2.21 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elyra =0.6.0, =1.0.1, =0.1.0, =1.0.1, =0.2.1, =0.1.0a16, =0.1.0a22 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

junctionart (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-67338 via jupyterlab (2.2.6)

jupyterlab PYPI version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - junctionart =0.1.0, =0.1.2 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

pandorasat (0.5.9) potentially affected by CVE-2026-67338 via jupyterlab (3.1.0rc2)

jupyterlab PYPI version 3.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - pandorasat 0.5.9 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-57480 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-57480 Source advisory: OSV:GHSA-CGXM-VR2F-6FJ8...