coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35356 via uu_install (>=0.0.14, <=0.0.16)

uuinstall CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35356 Source advisory: OSV:GHSA-GWM6-Q8CH-HCFR...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35343 via uu_cut (>=0.0.14, <=0.0.16)

uucut CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35343 Source advisory: OSV:GHSA-WV33-5PXH-R7J7...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35355 via uu_install (>=0.0.14, <=0.0.16)

uuinstall CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35355 Source advisory: OSV:GHSA-239G-2685-54X3...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35373 via uu_ln (>=0.0.14, <=0.0.16)

uuln CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35373 Source advisory: OSV:GHSA-JCJR-RH8Q-7XQF...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35346 via uu_comm (>=0.0.14, <=0.0.16)

uucomm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35346 Source advisory: OSV:GHSA-6GCW-W7CP-94G9...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35342 via uu_mktemp (>=0.0.14, <=0.0.16)

uumktemp CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35342 Source advisory: OSV:GHSA-2W8R-9XJ7-69J5...

cookie-parser-ease (1.0.7) potentially affected by unknown CVE via cookie-ease (0.0.1-security)

cookie-ease NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on cookie-ease and may be impacted: - cookie-parser-ease 1.0.7 Source cves: unknown CVE Source advisory: SNYK:JS-COOKIEEASE-17824388...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35338 via uu_chmod (>=0.0.14, <=0.0.16)

uuchmod CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35338 Source advisory: OSV:GHSA-4C7Q-4928-8445...

-react-file-list-components (1.1.1), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +41017 more potentially affected by CVE-2026-14802 via react-dev-utils (>=0.1.1, <=12.1.0-next.26)

react-dev-utils NPM version =0.1.1, =1.0.1, =0.1.0, =0.1.0, =0.1.6 - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 - 0scarclassf 1.0.1 - 0scarclassg 1.0.1 - 0scarclassh 1.0.1 - 0scarclassi 1.0.1 and more Source cves: CVE-2026-148...

pnpm < 10.34.0 / 11.x < 11.4.0 Multiple Vulnerabilities

The version of pnpm installed on the remote host is prior to 10.34.0, or 11.x prior to 11.4.0. It is, therefore, affected by multiple vulnerabilities: - pnpm allows a transitive dependency alias from registry package metadata to contain path traversal segments. During install, pnpm later uses tha...

altv (>=15.0.0-dev.0, <=16.1.1), altv_internal_core_resource (>=15.0.0-dev.0, <=16.1.1) +400 more potentially affected by unknown CVE via cxx (>=1.0.1, <=1.0.131)

cxx CARGO version =1.0.1, =15.0.0-dev.0, =15.0.0-dev.0, =15.0.0-dev2, =15.0.0-dev42, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1, =0.26.0 - autocxx-idalib 0.30.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0202...

@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +323 more potentially affected by CVE-2026-14631 via webpack-dev-server (>=5.0.0, <=5.2.5)

webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =0.7.7, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2 and more Source cves: CVE-2026-14631 Source advisory:...

@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +323 more potentially affected by CVE-2026-14620 via webpack-dev-server (>=5.0.0, <=5.2.5)

webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =0.7.7, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2 and more Source cves: CVE-2026-14620 Source advisory:...

@devpodio/github-extension (1.0.0), @eclipse-glsp-examples/workflow-theia (>=1.0.0-theia1.27.0, <=1.1.0-next.e29c96e.130) +119 more potentially affected by CVE-2026-10055 via @theia/request (>=1.26.0, <=1.72.3)

@theia/request NPM version =1.26.0, =1.0.0-theia1.27.0, =1.0.0, =0.7.1, =1.58.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.57.0-next.37, =1.72.3 and more Source cves: CVE-2026-10055 Source advisory: SNYK:JS-THEIAREQUEST-17810719...

@codeanywhere/theia-plugin-ext (>=1.11.0, <=1.11.4), @eclipse-che/theia-terminal (>=0.0.1-1585667205, <=0.0.1-1601469637) +36 more potentially affected by CVE-2026-10054 via @theia/terminal (>=1.1.0-next.a62a6b92, <=1.72.3)

@theia/terminal NPM version =1.1.0-next.a62a6b92, =1.11.0, =0.0.1-1585667205, =0.7.1, =1.58.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.59.0-next.62, =1.46.0-next.241, =1.46.0-next.241, =1.17.2, =1.27.0 and more Source cves: CVE-2026-10054 Source advisory: SNYK:JS-THEIATERMINAL-17810711...

@codeanywhere/filesystem (>=1.13.0, <=1.13.2), @codeanywhere/theia-plugin-ext (>=1.11.0, <=1.11.4) +147 more potentially affected by CVE-2026-10054 via @theia/core (>=1.0.0, <=1.72.3)

@theia/core NPM version =1.0.0, =1.13.0, =1.11.0, =0.0.1-1646139429, =0.0.1-1585667205, =1.0.0-theia1.27.0, =0.8.0-next.0b7d765, =0.0.1-next.20220331.125641, =0.7.1, =0.9.1 - @popcornsar/che-theia-plugin-ext 7.4.0 and more Source cves: CVE-2026-10054 Source advisory: SNYK:JS-THEIACORE-17810710...

akt (>=0.1.1, <=0.1.2), bigerror (>=0.1.0, <=0.8.2) +57 more potentially affected by unknown CVE via error-stack (>=0.1.1, <=0.7.1)

error-stack CARGO version =0.1.1, =0.1.1, =0.1.0, =0.0.39, =0.6.0, =0.1.0, =0.1.2 - crl5-module-fn 0.1.8 - error-path 0.1.0 - error-stack-derive 0.1.0 - error-stack-macros 0.0.0-reserved - error-stack-macros2 0.0.0-reserved and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0198...

dicom-transfer-syntax-registry (>=0.8.2, <=0.9.1), dset (>=0.1.0, <=0.1.2) +10 more potentially affected by CVE-2026-52834 via jxl-grid (>=0.1.1, <=0.5.3)

jxl-grid CARGO version =0.1.1, =0.8.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0-rc0 Source cves: CVE-2026-52834 Source advisory: OSV:GHSA-5PMV-RX8R-WMV5...

dicom-transfer-syntax-registry (>=0.8.2, <=0.9.1), dset (>=0.1.0, <=0.1.2) +7 more potentially affected by unknown CVE via jxl-modular (>=0.1.0, <=0.10.0)

jxl-modular CARGO version =0.1.0, =0.8.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0-rc0 Source cves: unknown CVE Source advisory: OSV:GHSA-2V8P-FQPX-2Q3W...

@falcondev-oss/nuxt-layers-base (>=0.1.0, <=0.25.0), @iqual/nuxt-icms (>=1.6.0-rc.1, <=1.6.1) +25 more potentially affected by unknown CVE via @nuxt/ui (>=4.0.0, <=4.8.0)

@nuxt/ui NPM version =4.0.0, =0.1.0, =1.6.0-rc.1, =1.1.6, =0.0.19, =0.5.0, =0.0.7, =0.0.0-test-ld-20260520212549, =0.0.0-test-ld-20260520212549, =0.9.0, =0.0.0-test-ld-20260520212549, =0.0.0-test-ld-20260520212549, =0.4.0, =0.4.0, =1.1.0, =1.0.1, =1.1.4 and more Source cves: unknown CVE Source...