@adpush/start (>=1.87.14, <=1.87.16), @akkuma/vinxi (0.3.12) +215 more potentially affected by CVE-2026-33128 via h3 (>=1.0.1, <=1.15.5)

h3 NPM version =1.0.1, =1.87.14, =1.0.7, =1.0.0, =1.5.0, =1.0.0, =0.8.16-canary.v20250123185645, =8.3.3, =3.1.0, =0.0.11, =3.1.0-0, =3.2.0 - @enrypase/solidstart-endpoint 0.1.0 and more Source cves: CVE-2026-33128 Source advisory: OSV:GHSA-22CC-P3C6-WPVM...

@cesarechazu/directus-extension-generate-pdf (1.0.6) potentially affected by CVE-2026-82868 via @pdfme/schemas (5.5.8)

@pdfme/schemas NPM version 5.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on @pdfme/schemas and may be impacted: - @cesarechazu/directus-extension-generate-pdf 1.0.6 Source cves: CVE-2026-82868 Source advisory: OSV:GHSA-87V3-4CFP-CM76...

@cesarechazu/directus-extension-generate-pdf (1.0.6) potentially affected by CVE-2026-82867 via @pdfme/schemas (5.5.8)

@pdfme/schemas NPM version 5.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on @pdfme/schemas and may be impacted: - @cesarechazu/directus-extension-generate-pdf 1.0.6 Source cves: CVE-2026-82867 Source advisory: OSV:GHSA-QQ9G-96V4-M3CJ...

@cesarechazu/directus-extension-generate-pdf (1.0.6) potentially affected by unknown CVE via @pdfme/schemas (5.5.8)

@pdfme/schemas NPM version 5.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on @pdfme/schemas and may be impacted: - @cesarechazu/directus-extension-generate-pdf 1.0.6 Source cves: unknown CVE Source advisory: SNYK:JS-PDFMESCHEMAS-15746948...

actscene-ocr (>=0.1.3, <=0.1.5), aio-binance-library (>=2.0.1, <=2.0.6) +154 more potentially affected by CVE-2026-32875 via ujson (>=5.1.0, <=5.11.0)

ujson PYPI version =5.1.0, =0.1.3, =2.0.1, =0.1.0, =1.3.12, =1.0.5, =0.1.0a2, =0.0.1, =1.0.0, =2.2.0, =2.3.0 and more Source cves: CVE-2026-32875 Source advisory: SNYK:PYTHON-UJSON-15682605...

actscene-ocr (>=0.1.3, <=0.1.5), alexandria-tui (>=0.1.0, <=0.2.0) +136 more potentially affected by CVE-2026-32874 via ujson (>=5.4.0, <=5.11.0)

ujson PYPI version =5.4.0, =0.1.3, =0.1.0, =1.3.12, =1.0.5, =0.1.0a2, =0.0.1, =2.2.0, =6.2.0.dev68, =0.1.21, =0.3.9, =0.1.0a1, =0.1.0, =12.1.0, =12.4.0 and more Source cves: CVE-2026-32874 Source advisory: SNYK:PYTHON-UJSON-15682606...

@abiswas97/postgres-mcp (2.0.0), @ampt/sql (1.0.1) +631 more potentially affected by CVE-2026-32763 via kysely (>=0.26.3, <=0.28.11)

kysely NPM version =0.26.3, =1.0.25-beta.0, =0.0.19, =1.2.6-beta.2, =2.7.6, =0.2.0, =0.0.1, =0.0.17, =0.0.2, =0.0.65, =1.0.24, =1.2.23, =1.2.27 and more Source cves: CVE-2026-32763 Source advisory: OSV:GHSA-WMRF-HV6W-MR66...

fr.cnieg.keycloak:attribute-login-provider (>=1.3.14, <=1.4.0), io.github.jeff-tian:keycloak-services-social-dingding (0.0.4) +24 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (23.0.4)

org.keycloak:keycloak-services MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.14, =0.25, =4.6, =4.6, =4.6, =4.6, =4.6, =4.6, =4....

org.keycloak:keycloak-authz-policy-drools (2.1.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.1.0.cr1) +3 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (2.1.0.cr1)

org.keycloak:keycloak-services MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.1.0.cr1 -...

com.jalalkiswani:jk-app-service (>=7.0.0-m3, <=7.0.0-m7), com.jalalkiswani:jk-app-web (>=7.0.0-m2, <=7.0.0-m7) +72 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (20.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.jalalkiswani:jk-app-service =7.0.0-m3, =7.0.0-m2, =7.0.0-m2, =7.0.0-m3,...

com.github.vzakharchenko:keycloak-plugins (1.0.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.0.2) +12 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (8.0.2)

org.keycloak:keycloak-services MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.0.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.0, <=1.4.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.4.0, <=1.4.2) +26 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (17.0.0)

org.keycloak:keycloak-services MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0,...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +522 more potentially affected by CVE-2026-27977 via next (>=16.0.1, <=16.1.6)

next NPM version =16.0.1, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-27977 Source advisory:...

@dada78641/tunetags (0.1.1), @dnuzi/baileys (0.0.6) +7 more potentially affected by CVE-2026-32256 via music-metadata (>=11.0.0, <=11.12.1)

music-metadata NPM version =11.0.0, =2.0.1, =1.0.0, =6.7.4, =1.0.18, =1.0.19 - malvin-baileys 2.2.4 - tagtoname 6.0.1 Source cves: CVE-2026-32256 Source advisory: OSV:GHSA-V6C2-XWV6-8XF7...

@dada78641/tunetags (0.1.1), @dnuzi/baileys (0.0.6) +7 more potentially affected by CVE-2026-32256 via music-metadata (>=11.0.0, <=11.12.1)

music-metadata NPM version =11.0.0, =2.0.1, =1.0.0, =6.7.4, =1.0.18, =1.0.19 - malvin-baileys 2.2.4 - tagtoname 6.0.1 Source cves: CVE-2026-32256 Source advisory: SNYK:JS-MUSICMETADATA-15680352...

@activepieces/piece-amazon-s3 (>=0.5.4, <=0.6.4), @activepieces/piece-amazon-ses (>=0.0.1, <=0.1.4) +1254 more potentially affected by CVE-2026-33036 via fast-xml-parser (>=5.0.1, <=5.5.5)

fast-xml-parser NPM version =5.0.1, =0.5.4, =0.0.1, =0.1.3, =0.5.3, =0.2.1, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.0.0, =1.7.16, =1.10.0 and more Source cves: CVE-2026-33036 Source advisory: OSV:GHSA-8GC5-J5RX-235R...

@142vip/nest (>=0.0.1-alpha.2, <=0.0.1-alpha.10), @142vip/nest-starter (>=0.0.1-alpha.9, <=0.0.1-alpha.14) +87 more potentially affected by CVE-2026-33011 via @nestjs/core (>=11.0.0, <=11.1.16)

@nestjs/core NPM version =11.0.0, =0.0.1-alpha.2, =0.0.1-alpha.9, =0.0.1, =13.3.0-rc.7, =1.1.3, =6.0.0-alpha.1, =3.8.8, =1.114.0, =3.8.8, =1.0.3-alpha.0b30e6d.0, =20250227.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-33011 Source advisory: SNYK:JS-NESTJSCORE-15682556...

@bechara/crux (>=6.0.0-alpha.1, <=6.6.2), @dismissible/nestjs-api (>=1.0.3-alpha.0b30e6d.0, <=2.0.2-canary.2913ba8.0) +6 more potentially affected by CVE-2026-33011 via @nestjs/platform-fastify (>=11.0.1, <=11.1.15)

@nestjs/platform-fastify NPM version =11.0.1, =6.0.0-alpha.1, =1.0.3-alpha.0b30e6d.0, =1.0.11, =0.1.51, =1.0.36, =1.3.0, =5.0.0-beta.36, =0.6.1-dev, =1.1.95 Source cves: CVE-2026-33011 Source advisory: OSV:GHSA-WF42-42FG-FG84...

@firedesktop/react-portal-base (2.1.2), @imaginario27/air-ui-utils (>=1.0.8, <=1.0.9) +9 more potentially affected by CVE-2026-31938 via jspdf (>=4.0.0, <=4.2.0)

jspdf NPM version =4.0.0, =1.0.8, =1.4.0-I18n-QM, =0.5.129, =0.112.0-79, =0.111.0-7, =0.111.0-7, =0.111.0-7, =4.4.0, =4.4.3 - svgedit 7.4.1 Source cves: CVE-2026-31938 Source advisory: OSV:GHSA-WFV2-PWC8-CRG5...

@firedesktop/react-portal-base (2.1.2), @imaginario27/air-ui-utils (>=1.0.8, <=1.0.9) +9 more potentially affected by CVE-2026-31938 via jspdf (>=4.0.0, <=4.2.0)

jspdf NPM version =4.0.0, =1.0.8, =1.4.0-I18n-QM, =0.5.129, =0.112.0-79, =0.111.0-7, =0.111.0-7, =0.111.0-7, =4.4.0, =4.4.3 - svgedit 7.4.1 Source cves: CVE-2026-31938 Source advisory: GHSA-WFV2-PWC8-CRG5...