dicebear (>=7.0.0, <=7.1.3) potentially affected by CVE-2026-33311 via @dicebear/core (>=7.0.0, <=7.1.3)

@dicebear/core NPM version =7.0.0, =7.0.0, =7.1.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

dicebear (>=5.0.6, <=5.4.3) potentially affected by CVE-2026-33311 via @dicebear/core (>=5.0.6, <=5.4.3)

@dicebear/core NPM version =5.0.6, =5.0.6, =5.4.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARCORE-15746954...

@dicebear/collection (>=6.0.0, <=6.1.3), dicebear (>=6.0.0, <=6.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=6.0.0, <=6.1.3)

@dicebear/initials NPM version =6.0.0, =6.0.0, =6.0.0, =6.1.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

dicebear (>=8.0.0, <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/core (>=8.0.0, <=8.0.2)

@dicebear/core NPM version =8.0.0, =8.0.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

dicebear (>=5.0.6, <=5.4.3) potentially affected by CVE-2026-33311 via @dicebear/core (>=5.0.6, <=5.4.3)

@dicebear/core NPM version =5.0.6, =5.0.6, =5.4.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

@dicebear/collection (>=8.0.0, <=8.0.2), dicebear (>=8.0.0, <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/initials (>=8.0.0, <=8.0.2)

@dicebear/initials NPM version =8.0.0, =8.0.0, =8.0.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

@dicebear/collection (>=5.0.6, <=5.4.3), dicebear (>=5.0.6, <=5.4.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=5.0.6, <=5.4.3)

@dicebear/initials NPM version =5.0.6, =5.0.6, =5.0.6, =5.4.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

@dicebear/collection (>=6.0.0, <=6.1.3), dicebear (>=6.0.0, <=6.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=6.0.0, <=6.1.3)

@dicebear/initials NPM version =6.0.0, =6.0.0, =6.0.0, =6.1.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...

@dicebear/collection (>=9.0.0, <=9.4.0), @fduenascoink/ui-sdk (>=18.0.0, <=18.0.4) +1 more potentially affected by CVE-2026-33311 via @dicebear/initials (>=9.0.0, <=9.4.0)

@dicebear/initials NPM version =9.0.0, =9.0.0, =18.0.0, =9.0.0, =9.4.0 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

dicebear (>=8.0.0, <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/core (>=8.0.0, <=8.0.2)

@dicebear/core NPM version =8.0.0, =8.0.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARCORE-15746954...

@fduenascoink/ui-sdk (>=18.0.0, <=18.0.4), @nextorders/avatar (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +2 more potentially affected by CVE-2026-33311 via @dicebear/core (>=9.0.0, <=9.4.0)

@dicebear/core NPM version =9.0.0, =18.0.0, =0.1.0-alpha.1, =0.1.0, =9.0.0, =9.4.0 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARCORE-15746954...

@alfresco/adf-testing (6.0.0-A.2-8258), @algolia/coquille (>=0.0.2, <=0.0.13) +364 more potentially affected by CVE-2026-33228 via flatted (>=3.0.1, <=3.4.1)

flatted NPM version =3.0.1, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =0.0.10, =0.0.11, =0.0.4, =1.0.0, =1.0.0, =0.0.20, =0.0.19, =1.2.2, =1.5.8 and more Source cves: CVE-2026-33228 Source advisory: SNYK:JS-FLATTED-15700433...

@alfresco/adf-testing (6.0.0-A.2-8258), @algolia/coquille (>=0.0.2, <=0.0.13) +364 more potentially affected by CVE-2026-33228 via flatted (>=3.0.1, <=3.4.1)

flatted NPM version =3.0.1, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =0.0.10, =0.0.11, =0.0.4, =1.0.0, =1.0.0, =0.0.20, =0.0.19, =1.2.2, =1.5.8 and more Source cves: CVE-2026-33228 Source advisory: OSV:GHSA-RF6F-7FWH-WJGH...

@alfresco/adf-testing (6.0.0-A.2-8258), @algolia/coquille (>=0.0.2, <=0.0.13) +364 more potentially affected by CVE-2026-33228 via flatted (>=3.0.1, <=3.4.1)

flatted NPM version =3.0.1, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =0.0.10, =0.0.11, =0.0.4, =1.0.0, =1.0.0, =0.0.20, =0.0.19, =1.2.2, =1.5.8 and more Source cves: CVE-2026-33228 Source advisory: GHSA-RF6F-7FWH-WJGH...

http-api-problem (>=0.23.0, <=0.50.2) potentially affected by CVE-2026-33241 via salvo (>=0.9.7, <=0.11.6)

salvo CARGO version =0.9.7, =0.23.0, =0.50.2 Source cves: CVE-2026-33241 Source advisory: OSV:GHSA-PP9R-XG4C-8J4X...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +804 more potentially affected by CVE-2026-33231 via nltk (>=2.0.4, <=3.9.3)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33231 Source advisory: SNYK:PYTHON-NLTK-15692504...

annotald (>=1.3.1, <=1.3.7) potentially affected by CVE-2026-33231 via nltk (2.0.4)

nltk PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald =1.3.1, =1.3.7 Source cves: CVE-2026-33231 Source advisory: OSV:GHSA-JM6W-M3J8-898G...

@acampkin/mcc (>=2.1.0, <=2.5.0), @kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.6.0) +24 more potentially affected by CVE-2026-33068 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.71)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =2.0.0 - ch-go 1.0.3 and more Source cves: CVE-2026-33068 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-15701841...

@acampkin/mcc (>=2.1.0, <=2.5.0), @kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.6.0) +24 more potentially affected by CVE-2026-33068 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.52)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =2.0.0 - ch-go 1.0.3 and more Source cves: CVE-2026-33068 Source advisory: OSV:GHSA-MMGP-WC2J-QCV7...

crypt-sha512 (1.0.1), jwts (>=0.5.0, <=0.5.1) +1 more potentially affected by CVE-2026-4428 via aws-lc-sys (0.21.0)

aws-lc-sys CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-lc-sys and may be impacted: - crypt-sha512 1.0.1 - jwts =0.5.0, =0.102.6, =0.102.8 Source cves: CVE-2026-4428 Source advisory: OSV:RUSTSEC-2026-0048...