04_nodeblog (=1.0.0), 4591-libs (>=0.0.1 <=0.2.0) +4726 more potentially affected by CVE-2026-5038 via multer (>=2.0.0-alpha.2 <=2.1.1)

multer NPM version =2.0.0-alpha.2, =0.0.1, =2.0.1, =1.0.10, =0.0.1-alpha.1, =0.0.1-alpha.9, =1.0.0, =0.0.1, =0.0.0-alpha.119, =1.2.1, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =1.0.14 and more Source cves: CVE-2026-5038 Source advisory: SNYK:JS-MULTER-17342516...

360solutions-bc-mcp (>=0.5.3 <=0.5.6), 3di-cmd-client (>=0.0.1a0 <=0.0.3) +1475 more potentially affected by CVE-2026-48524 via pyjwt (>=0.2.1 <=2.12.1)

pyjwt PYPI version =0.2.1, =0.5.3, =0.0.1a0, =0.1.1, =1.0.0, =2.0.0, =1.1.1, =0.8.44.4, =0.1.0, =0.1.1, =0.1.1, =0.1.5 - affo-user-service =1.0.4 and more Source cves: CVE-2026-48524 Source advisory: OSV:GHSA-FHV5-28VV-H8M8...

-react-file-list-components (=1.1.1), 01basicreact (>=0.1.0 <=0.1.9) +45932 more potentially affected by CVE-2026-12143 via form-data (>=3.0.0 <=3.0.4)

form-data NPM version =3.0.0, =0.1.0, =0.1.0, =0.1.6 - 0beny1s =1.1.6 - 0scarclassa =1.0.1 - 0scarclassb =1.0.1 - 0scarclassc =1.0.1 - 0scarclassd =1.0.1 - 0scarclasse =1.0.1 - 0scarclassf =1.0.1 - 0scarclassg =1.0.1 - 0scarclassh =1.0.1 - 0scarclassi =1.0.1 - 0scarclassj =1.0.1 - 0scarclassk...

@arrange/framework (=0.0.0-m.2.1), @aws/nx-plugin (>=0.105.0 <=1.0.0-rc.7) +63 more potentially affected by CVE-2026-53632 via vite (>=8.0.0 <=8.0.14)

vite NPM version =8.0.0, =0.105.0, =3.0.1, =3.3.0, =11.17.0-depup.0, =0.1.1, =0.1.1, =35.0.0, =17.1.0, =0.0.16, =4.0.0, =0.0.1779369742024, =1.0.8, =9.6.10, =1.8.11, =1.9.1 and more Source cves: CVE-2026-53632 Source advisory: OSV:GHSA-V6WH-96G9-6WX3...

@agregio-solutions/design-system (>=1.89.2 <=1.94.0), @altipla/directus-sdk-utils (=0.7.2) +230 more potentially affected by CVE-2026-53632 via vite (>=7.0.0 <=7.3.3)

vite NPM version =7.0.0, =1.89.2, =20.0.0, =20.1.0, =0.1.0, =0.0.4, =0.2.9, =0.79.1, =1.11.1, =1.0.0-beta.23, =2.1.2-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.29.0 and more Source cves: CVE-2026-53632 Source advisory: OSV:GHSA-V6WH-96G9-6WX3...

@jsenv/core (>=40.0.1 <=41.2.8), @jsenv/fetch (>=1.2.1 <=1.3.28) +9 more potentially affected by CVE-2026-53632 via launch-editor (>=2.10.0 <=2.13.2)

launch-editor NPM version =2.10.0, =40.0.1, =1.2.1, =0.2.14, =16.0.1, =2.13.1, =1.5.1, =3.6.1, =1.7.11, =1.0.0-alpha.6, =1.4.3, =1.4.4 Source cves: CVE-2026-53632 Source advisory: SNYK:JS-LAUNCHEDITOR-17345917...

org.webjars.npm:coveralls-next (=4.2.2) potentially affected by CVE-2026-53550 via org.webjars.npm:js-yaml (=4.1.0)

org.webjars.npm:js-yaml MAVEN version =4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:js-yaml and may be impacted: - org.webjars.npm:coveralls-next =4.2.2 Source cves: CVE-2026-53550 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17342...

02.aula (=1.0.0), 0xsodium (>=0.2.0 <=0.14.0) +11476 more potentially affected by CVE-2026-53550 via js-yaml (>=4.0.0 <=4.1.1)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 - @10abdullahbutt/nestjs-boilerplate =0.0.1 and more Source cves: CVE-2026-53550 Source advisory: OSV:GHSA-H67P-54HQ-RP68...

02.aula (=1.0.0), 0xsodium (>=0.2.0 <=0.14.0) +11476 more potentially affected by CVE-2026-53550 via js-yaml (>=4.0.0 <=4.1.1)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 - @10abdullahbutt/nestjs-boilerplate =0.0.1 and more Source cves: CVE-2026-53550 Source advisory: SNYK:JS-JSYAML-17342520...

0xgank-tea-advice-pull (=1.0.0), 0xgank-tea-balance-pencil (=1.0.0) +18579 more potentially affected by CVE-2026-49356 via @babel/core (>=7.0.0-beta.31 <=7.29.0)

@babel/core NPM version =7.0.0-beta.31, =7.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on @babel/core and may be impacted: - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory...

@neetly/jest-config (>=1.0.0-alpha.14 <=1.0.0-alpha.16), @powerlines/plugin-alloy (>=0.14.0 <=0.26.152) +21 more potentially affected by CVE-2026-49356 via @babel/core (>=8.0.0-alpha.1 <=8.0.0-rc.5)

@babel/core NPM version =8.0.0-alpha.1, =1.0.0-alpha.14, =0.14.0, =0.12.396, =0.6.149, =0.9.0, =0.12.0, =0.12.0, =0.2.99, =0.1.0, =0.1.0, =0.1.71, =0.3.0, =0.3.0, =0.1.0, =0.7.301, =0.7.460 and more Source cves: CVE-2026-49356 Source advisory: OSV:GHSA-4X5R-PXFX-6JF8...

@neetly/jest-config (>=1.0.0-alpha.14 <=1.0.0-alpha.16), @powerlines/plugin-alloy (>=0.14.0 <=0.26.152) +21 more potentially affected by CVE-2026-49356 via @babel/core (>=8.0.0-alpha.1 <=8.0.0-rc.5)

@babel/core NPM version =8.0.0-alpha.1, =1.0.0-alpha.14, =0.14.0, =0.12.396, =0.6.149, =0.9.0, =0.12.0, =0.12.0, =0.2.99, =0.1.0, =0.1.0, =0.1.71, =0.3.0, =0.3.0, =0.1.0, =0.7.301, =0.7.460 and more Source cves: CVE-2026-49356 Source advisory: SNYK:JS-BABELCORE-17342497...

003-gas-convert (=1.0.1), 0x-hunter-core (>=1.0.0 <=1.0.1-5) +29218 more potentially affected by CVE-2026-48779 via ws (>=1.1.0 <=5.2.2)

ws NPM version =1.1.0, =1.0.0, =0.0.3, =1.1.0, =0.9.9, =1.0.0, =0.0.1, =0.11.3, =0.1.0, =1.0.2, =1.0.7 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

0.edsql (>=1.0.49 <=1.0.50), 0xlib (=5.6.6) +7747 more potentially affected by CVE-2026-48779 via ws (>=7.0.0 <=7.5.10)

ws NPM version =7.0.0, =1.0.49, =1.0.0, =0.1.0, =0.0.12, =0.0.12, =0.1.0, =1.0.22, =3.10.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

003-gas-convert (=1.0.1), 0x-hunter-core (>=1.0.0 <=1.0.1-5) +29218 more potentially affected by CVE-2026-48779 via ws (>=1.1.0 <=5.2.2)

ws NPM version =1.1.0, =1.0.0, =0.0.3, =1.1.0, =0.9.9, =1.0.0, =0.0.1, =0.11.3, =0.1.0, =1.0.2, =1.0.7 and more Source cves: CVE-2026-48779 Source advisory: OSV:GHSA-96HV-2XVQ-FX4P...

org.webjars.npm:angular-websocket (>=2.0.0 <=2.0.1), org.webjars.npm:atmosphere.js (=3.1.3) +39 more potentially affected by CVE-2026-48779 via org.webjars.npm:ws (>=2.0.0-beta.2 <=8.2.3)

org.webjars.npm:ws MAVEN version =2.0.0-beta.2, =2.0.0, =9.3.2, =2.3.0, =6.2.1, =6.2.1, =5.4.6, =0.19.11, =0.2.11, =0.2.19 - org.webjars.npm:github-com-SignalK-signalk-js-client =2.0.3 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17344548...

0.edsql (>=1.0.49 <=1.0.50), 0xlib (=5.6.6) +7747 more potentially affected by CVE-2026-48779 via ws (>=7.0.0 <=7.5.10)

ws NPM version =7.0.0, =1.0.49, =1.0.0, =0.1.0, =0.0.12, =0.0.12, =0.1.0, =1.0.22, =3.10.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-48779 Source advisory: OSV:GHSA-96HV-2XVQ-FX4P...

7ghost (>=4.11.25 <=4.11.46), @100mslive/hms-excalidraw (>=0.1.3 <=0.1.14) +1243 more potentially affected by CVE-2026-48779 via ws (>=6.0.0 <=6.2.3)

ws NPM version =6.0.0, =4.11.25, =0.1.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =7.0.0, =0.1.0, =4.4.0, =4.2.2, =2.9.0, =0.0.1-alpha.95, =1.0.0, =1.2.0, =1.6.2 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

-fides-amor-et-lux (=1.0.0), -price-checker (>=1.0.0 <=1.0.5) +59934 more potentially affected by CVE-2026-48779 via ws (>=8.0.0 <=8.20.1)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.2.3 - 0g-orbit-cli =0.1.0 - 0g-orbit-core =0.1.0 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

02url-querystring-http (>=1.0.1 <=1.0.4), 04_nodeblog (=1.0.0) +15347 more potentially affected by CVE-2026-5079 via multer (>=1.0.3 <=2.1.1)

multer NPM version =1.0.3, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.3 and more Source cves: CVE-2026-5079 Source advisory: SNYK:JS-MULTER-17342512...