@n8n/n8n-nodes-langchain (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)

n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322072...

@n8n/n8n-nodes-langchain (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)

n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322079...

abel (>=0.1.0, <=0.1.1), abel-core (>=0.1.0, <=0.1.1) +158 more potentially affected by unknown CVE via smallstr (>=0.1.0, <=0.3.1)

smallstr CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.1, =0.1.0, =0.1.20, =2.1.0, =0.4.0-beta.1, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0215...

abscissa (>=0.4.0, <=0.6.0-pre.1), abscissa_core (>=0.4.0, <=0.6.0-pre.1) +121 more potentially affected by unknown CVE via gumdrop (>=0.1.0, <=0.8.1)

gumdrop CARGO version =0.1.0, =0.4.0, =0.4.0, =0.5.0, =0.1.1, =0.1.0, =0.2.0, =1.0.0, =1.0.6, =1.0.8, =1.0.9, =1.0.9, =1.0.12 - amdguid-glium 1.0.13 - amdguid-glow 1.0.13 - amdguid-wayland 1.0.13 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0214...

@bugreels/web-script (0.0.9), @dysonic/web-replay-chrome-extensions (>=0.1.0-beta.0, <=0.1.0) +7 more potentially affected by CVE-2026-45820 via fflate (0.4.8)

fflate NPM version 0.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on fflate and may be impacted: - @bugreels/web-script 0.0.9 - @dysonic/web-replay-chrome-extensions =0.1.0-beta.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.13,...

@1delta/aggregators (>=0.1.0, <=0.1.6), @1delta/bridge-configs (>=0.1.0, <=0.1.9) +456 more potentially affected by CVE-2026-45820 via fflate (>=0.8.0, <=0.8.2)

fflate NPM version =0.8.0, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.5.3, =0.1.0, =0.13.6, =0.13.6, =0.13.6, =1.0.8-canary and more Source cves: CVE-2026-45820 Source advisory: OSV:GHSA-PX8P-9VWX-VF98...

@2gis/deck2gis-layer (>=3.0.0, <=3.0.13), @3cr/viewer-browser (>=0.0.327, <=0.0.333) +773 more potentially affected by CVE-2026-45820 via fflate (>=0.7.1, <=0.7.4)

fflate NPM version =0.7.1, =3.0.0, =0.0.327, =0.0.308, =1.0.29, =0.1.0, =3.0.17, =3.0.0-b.2, =1.3.1-isan.0, =1.3.3-isan.0, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =1.0.1, =2.7.3 and more Source cves: CVE-2026-45820 Source advisory: OSV:GHSA-PX8P-9VWX-VF98...

@polygonjs/plugin-mediapipe-facemesh (>=1.1.1, <=1.1.218), @polygonjs/polygonjs (>=1.1.124, <=1.1.239) +7 more potentially affected by CVE-2026-45820 via fflate (0.6.9)

fflate NPM version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on fflate and may be impacted: - @polygonjs/plugin-mediapipe-facemesh =1.1.1, =1.1.124, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =1.1.124-1, =1.1.239-1 Source cves:...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +21908 more potentially affected by CVE-2026-33327 via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: CVE-2026-33327 Source advisory: SNYK:JS-SHARP-18184259...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +21908 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F88M-G3JW-G9CJ...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +21908 more potentially affected by CVE-2026-33328 via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: CVE-2026-33328 Source advisory: SNYK:JS-SHARP-18184262...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +21908 more potentially affected by CVE-2026-35590 via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: CVE-2026-35590 Source advisory: SNYK:JS-SHARP-18184416...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +21908 more potentially affected by CVE-2026-35591 via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: CVE-2026-35591 Source advisory: SNYK:JS-SHARP-18184418...

@bpmiq/mcp (>=1.0.0, <=2.3.0), @bpmiq/validator (>=1.0.0, <=2.3.0) +30 more potentially affected by unknown CVE via fast-xml-parser (>=5.9.3, <=5.10.0)

fast-xml-parser NPM version =5.9.3, =1.0.0, =1.0.0, =0.1.0, =1.18.42-test.0, =1.6.6, =0.24.0, =5.1.22, =5.1.22, =0.0.1, =0.0.1, =49.13.0, =50.0.0, =2.4.0, =2.4.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-FASTXMLPARSER-18170229...

@bpmiq/mcp (>=1.0.0, <=2.3.0), @bpmiq/validator (>=1.0.0, <=2.3.0) +30 more potentially affected by CVE-2026-73569 via fast-xml-parser (>=5.9.3, <=5.10.0)

fast-xml-parser NPM version =5.9.3, =1.0.0, =1.0.0, =0.1.0, =1.18.42-test.0, =1.6.6, =0.24.0, =5.1.22, =5.1.22, =0.0.1, =0.0.1, =49.13.0, =50.0.0, =2.4.0, =2.4.2 and more Source cves: CVE-2026-73569 Source advisory: OSV:GHSA-8R6M-32JQ-JX6Q...

@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +121 more potentially affected by CVE-2026-73565 via @hono/node-server (>=2.0.0, <=2.0.9)

@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: CVE-2026-73565 Sourc...

@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +121 more potentially affected by unknown CVE via @hono/node-server (>=2.0.0, <=2.0.9)

@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: unknown CVE Source...

@atlantjs/backend (>=11.0.11, <=11.0.79), @atlantjs/database (>=2.0.0, <=2.1.32) +5 more potentially affected by CVE-2026-73651 via typeorm (1.0.0)

typeorm NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on typeorm and may be impacted: - @atlantjs/backend =11.0.11, =2.0.0, =0.48.60, =1.6.5, =2.1.5, =1.1.43, =1.1.45 Source cves: CVE-2026-73651 Source advisory: OSV:GHSA-2RP8-MM9Q-FP49...

@atlantjs/backend (>=11.0.11, <=11.0.79), @atlantjs/database (>=2.0.0, <=2.1.32) +5 more potentially affected by unknown CVE via typeorm (1.0.0)

typeorm NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on typeorm and may be impacted: - @atlantjs/backend =11.0.11, =2.0.0, =0.48.60, =1.6.5, =2.1.5, =1.1.43, =1.1.45 Source cves: unknown CVE Source advisory: SNYK:JS-TYPEORM-18170276...

@142vip/midway (>=0.1.6-alpha.9, <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1, <=0.0.1-alpha.13) +2884 more potentially affected by CVE-2026-73651 via typeorm (>=0.0.2-alpha.43, <=0.3.30)

typeorm NPM version =0.0.2-alpha.43, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood 0.10.1 and more Source cves: CVE-2026-73651 Source advisory: OSV:GHSA-2RP8-MM9Q-FP49...