@3ngram/server (>=0.7.0, <=1.6.1), @adatechnology/conversation-module (>=0.2.0, <=0.4.2) +191 more potentially affected by CVE-2026-92596 via nodemailer (>=9.0.0, <=9.0.6)

nodemailer NPM version =9.0.0, =0.7.0, =0.2.0, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.2.0, =0.1.3, =6.1.211-alpha, =6.1.211-alpha, =6.1.211-alpha, =0.6.0, =0.8.0 and more Source cves: CVE-2026-92596 Source advisory: SNYK:JS-NODEMAILER-19651822...

02112019lab6 (1.0.0), 03-custom-tian (>=1.0.1, <=1.0.6) +9394 more potentially affected by CVE-2026-92597 via nodemailer (>=6.9.16, <=9.0.6)

nodemailer NPM version =6.9.16, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 123ac 1.0.8 - 123acyashu 1.0.8 - 123acyashuac 1.0.8 and more Source cves: CVE-2026-92597 Source advisory: SNYK:JS-NODEMAILER-19651818...

02112019lab6 (1.0.0), 03-custom-tian (>=1.0.1, <=1.0.6) +9394 more potentially affected by CVE-2026-92597 via nodemailer (>=6.9.16, <=9.0.6)

nodemailer NPM version =6.9.16, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 123ac 1.0.8 - 123acyashu 1.0.8 - 123acyashuac 1.0.8 and more Source cves: CVE-2026-92597 Source advisory: OSV:GHSA-CC9R-2J5M-2M83...

@fox-hound-tools/protobuf-grpc-json-transcoding (>=0.70.0, <=0.71.0), @octocloud/typespec (>=0.1.16, <=0.1.37) potentially affected by unknown CVE via @typespec/openapi3 (>=1.0.0, <=1.7.0)

@typespec/openapi3 NPM version =1.0.0, =0.70.0, =0.1.16, =0.1.37 Source cves: unknown CVE Source advisory: OSV:GHSA-2Q42-4Q24-7RGV...

@aliceo2/bookkeeping (>=1.19.0, <=1.20.0), @beyondnet/evolith-cli (>=1.2.0, <=1.3.2) +65 more potentially affected by CVE-2026-77037 via multer (2.2.0)

multer NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on multer and may be impacted: - @aliceo2/bookkeeping =1.19.0, =1.2.0, =1.2.0, =2026.7.0, =5.7.5, =11.1.29-depup.0, =0.1.0, =0.1.0, =11.0.62, =1.2.34, =12.0.0, =3.0.0, =3.0.0, =3.0.0...

20231122-npm (1.0.0), 2048.io (0.0.1) +6535 more potentially affected by CVE-2026-15603 via morgan (>=1.0.0, <=1.11.0)

morgan NPM version =1.0.0, =1.0.2, =1.0.0, =0.2.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.67 and more Source cves: CVE-2026-15603 Source advisory: OSV:GHSA-JXFW-X594-9X9M...

@apisurf/canonui (>=0.1.1, <=0.2.1), @apisurf/deckui (>=0.1.1, <=0.1.2) +16 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =1.0.1, =1.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-26W7-CXV4-GFX2...

@apisurf/canonui (>=0.1.1, <=0.2.1), @apisurf/deckui (>=0.1.1, <=0.1.2) +16 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =1.0.1, =1.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-ASTRO-19652369...

@apisurf/canonui (>=0.1.1, <=0.2.1), @apisurf/deckui (>=0.1.1, <=0.1.2) +14 more potentially affected by CVE-2026-84376 via astro (>=7.0.2, <=7.2.2)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-84376 Source advisory: OSV:GHSA-376H-93R7-7G6F...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22148 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-SHARP-19653587...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22148 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RGJ7-G3M4-5G8C...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21462 more potentially affected by CVE-2026-84375 via js-yaml (>=3.0.0, <=3.15.1)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-84375 Source advisory: OSV:GHSA-2883-XCG3-V3HH...

02.aula (1.0.0), 0xrtest (1.0.0) +10775 more potentially affected by CVE-2026-84375 via js-yaml (>=4.0.0, <=4.3.1)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.0.0-develop-20260120180031, =0.5.6 - @0xr404/0xrtest 1.0.0 and more Source cves: CVE-2026-84375 Source advisory: OSV:GHSA-2883-XCG3-V3HH...

@a3s-lab/office (>=0.1.0, <=0.312.0), @acms-subir/core (>=0.3.4, <=0.3.21) +307 more potentially affected by unknown CVE via @tiptap/core (>=3.7.0, <=3.30.4)

@tiptap/core NPM version =3.7.0, =0.1.0, =0.3.4, =0.2.0, =0.2.0-nightly-20260914153919, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.1.26, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819143124, =1.0.0, =0.2.0, =2.2.2, =1.3.7-beta.22, =3.0.0-beta.4 and more Source cves: unknown CVE...

@a3s-lab/office (>=0.1.0, <=0.312.0), @acms-subir/core (>=0.3.4, <=0.3.21) +307 more potentially affected by unknown CVE via @tiptap/core (>=3.7.0, <=3.30.4)

@tiptap/core NPM version =3.7.0, =0.1.0, =0.3.4, =0.2.0, =0.2.0-nightly-20260914153919, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.1.26, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819143124, =1.0.0, =0.2.0, =2.2.2, =1.3.7-beta.22, =3.0.0-beta.4 and more Source cves: unknown CVE...

@3ngram/server (>=1.2.6, <=1.8.4), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +951 more potentially affected by CVE-2026-84365 via hono (>=4.0.0, <=4.13.4)

hono NPM version =4.0.0, =1.2.6, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.148, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.9, =0.2.0, =0.30.13 and more Source cves: CVE-2026-84365 Source advisory: OSV:GHSA-GQVV-2MRQ-WPJV...

@3ngram/server (>=1.2.6, <=1.8.4), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +951 more potentially affected by CVE-2026-84364 via hono (>=4.0.0, <=4.13.4)

hono NPM version =4.0.0, =1.2.6, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.148, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.9, =0.2.0, =0.30.13 and more Source cves: CVE-2026-84364 Source advisory: OSV:GHSA-G6GW-C38X-MQFC...

@3ngram/server (>=1.2.6, <=1.8.4), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +951 more potentially affected by CVE-2026-84363 via hono (>=4.0.0, <=4.13.4)

hono NPM version =4.0.0, =1.2.6, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.148, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.9, =0.2.0, =0.30.13 and more Source cves: CVE-2026-84363 Source advisory: OSV:GHSA-CRVJ-82CR-HJCX...

@343dev/optimizt (>=12.0.0, <=13.0.0), @agilebot/vitepress-preset (>=0.8.9, <=0.9.6) +80 more potentially affected by CVE-2026-84370 via svgo (>=4.0.0, <=4.0.2)

svgo NPM version =4.0.0, =12.0.0, =0.8.9, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =2.47.0, =0.16.2, =1.3.0-next.0, =3.0.0-next.0, =6.13.0, =0.0.1769658265953, =21.2.6, =1.6.9, =0.1.0-dev.00e4942, =0.3.0 and more Source cves: CVE-2026-84370 Source advisory: OSV:GHSA-W27V-7Q3P-W38R...

-react-file-list-components (1.1.1), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +45427 more potentially affected by CVE-2026-84370 via svgo (>=1.0.0, <=2.8.0)

svgo NPM version =1.0.0, =1.0.1, =0.1.0, =0.1.0, =0.1.6 - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 - 0scarclassf 1.0.1 - 0scarclassg 1.0.1 - 0scarclassh 1.0.1 - 0scarclassi 1.0.1 and more Source cves: CVE-2026-84370 Source...