31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260421081155-bb6cc4c0b0b59fff41df172e2f4212eca6906193) +291 more potentially affected by CVE-2026-40181 via react-router (>=7.0.0, <=7.14.0-pre.0)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =1.0.8 and more Source cves: CVE-2026-40181 Source advisory: OSV:GHSA-2J2X-HQR9-3H42...

@1023-ventures/merope2 (>=0.2.1, <=0.2.9), @1023-ventures/vega-core (>=0.5.0, <=0.6.2) +1201 more potentially affected by CVE-2026-40181 via react-router (>=6.7.0, <=6.30.3-pre-v6.0)

react-router NPM version =6.7.0, =0.2.1, =0.5.0, =0.0.1, =0.0.1, =3.0.0, =0.0.0-beta-20260120211922, =1.0.0, =1.0.0, =1.0.0, =2.7.0, =0.0.1, =0.1.0, =0.0.0, =2.13.1, =2.13.94 and more Source cves: CVE-2026-40181 Source advisory: OSV:GHSA-2J2X-HQR9-3H42...

@1023-ventures/merope2 (>=0.2.1, <=0.2.9), @1023-ventures/vega-core (>=0.5.0, <=0.6.2) +1334 more potentially affected by CVE-2026-40181 via @remix-run/router (>=1.3.0, <=1.23.2-pre-v6.0)

@remix-run/router NPM version =1.3.0, =0.2.1, =0.5.0, =0.0.1, =0.0.1, =3.0.0, =0.0.0-beta-20260120211922, =1.0.0, =1.0.0, =1.0.0, =2.7.0, =0.0.1, =0.1.0, =0.0.0, =2.13.1, =2.13.94 and more Source cves: CVE-2026-40181 Source advisory: OSV:GHSA-2J2X-HQR9-3H42...

@accounter/client (>=0.0.6-alpha-20250716191627-847a4f732a66f2443e3141d5ef77222a6579ded3, <=0.0.11-alpha-20260328161521-814e4fc7c5b0b6b919590e293c0fac45b7c2513d), @boxyhq/react-ui (>=3.5.2, <=3.5.3) +155 more potentially affected by CVE-2026-33245 via react-router (>=7.7.0, <=7.13.1-pre.0)

react-router NPM version =7.7.0, =0.0.6-alpha-20250716191627-847a4f732a66f2443e3141d5ef77222a6579ded3, =3.5.2, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =3.3.7, =3.0.0-alpha.2, =3.2.0-beta.0, =0.1.9, =0.0.1, =1.21.9, =1.21.9, =0.3.1, =0.5.1 - @depup/react-router-dom 7.13.1-depup...

@accounter/client (>=0.0.5-alpha-20250418160359-9049f823132a66e39d4d7a239567055e4e03266b, <=0.0.11-alpha-20260328161521-814e4fc7c5b0b6b919590e293c0fac45b7c2513d), @boxyhq/react-ui (>=3.4.1, <=3.5.3) +192 more potentially affected by CVE-2026-33244 via react-router (>=7.5.1, <=7.13.1-pre.0)

react-router NPM version =7.5.1, =0.0.5-alpha-20250418160359-9049f823132a66e39d4d7a239567055e4e03266b, =3.4.1, =0.2.3, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =0.1.0, =3.3.7, =3.0.0-alpha.2, =3.2.0-beta.0, =15.9.0, =0.1.9, =0.0.1-dev.8, =0.0.2-1 and more Source cves:...

3nit-utils (>=0.24.0, <=1.0.2), 6ix (0.0.0-canary.0) +298 more potentially affected by CVE-2024-52011 via launch-editor (>=2.2.1, <=2.8.2)

launch-editor NPM version =2.2.1, =0.24.0, =0.0.0-canary.0, =0.0.1, =7.0.2, =1.0.0, =0.4.0, =0.1.0, =0.3.0, =1.0.0, =0.2.0, =0.2.10 - @carnesen/www 0.1.0 - @catapult-tech/cp-design-system-site 1.0.0 - @caviar/cli 0.0.1 and more Source cves: CVE-2024-52011 Source advisory: OSV:GHSA-C27G-Q93R-2CWF...

3nit-utils (>=0.24.0, <=1.0.2), 6ix (0.0.0-canary.0) +298 more potentially affected by CVE-2024-52011 via launch-editor (>=2.2.1, <=2.8.2)

launch-editor NPM version =2.2.1, =0.24.0, =0.0.0-canary.0, =0.0.1, =7.0.2, =1.0.0, =0.4.0, =0.1.0, =0.3.0, =1.0.0, =0.2.0, =0.2.10 - @carnesen/www 0.1.0 - @catapult-tech/cp-design-system-site 1.0.0 - @caviar/cli 0.0.1 and more Source cves: CVE-2024-52011 Source advisory:...

org.webjars.npm:launch-editor-middleware (2.2.1) potentially affected by CVE-2024-52011 via org.webjars.npm:launch-editor (2.14.1)

org.webjars.npm:launch-editor MAVEN version 2.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:launch-editor and may be impacted: - org.webjars.npm:launch-editor-middleware 2.2.1 Source cves: CVE-2024-52011 Source advisory:...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +419 more potentially affected by CVE-2024-52011 via vite (>=5.0.0, <=5.4.8)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-alpha.1 and more Source cves: CVE-2024-52011 Source advisory: OSV:GHSA-C27G-Q93R-2CWF...

20231122-npm (1.0.0), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +6010 more potentially affected by CVE-2026-5078 via morgan (>=1.2.0, <=1.10.1)

morgan NPM version =1.2.0, =1.0.2, =1.0.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.0, =12.1.0, =12.2.2 and more Source cves: CVE-2026-5078 Source advisory: SNYK:JS-MORGAN-17135841...

5dee (0.1.0), a2 (>=0.1.0, <=0.7.0) +5116 more potentially affected by CVE-2026-10705 via dask (>=0.11.0, <=2026.8.0)

dask PYPI version =0.11.0, =0.1.0, =0.4.0, =0.9.1.dev0, =25.9.23, =0.1.0, =0.4.5, =1.0.0, =0.4.1, =0.0.1, =2026.4.17, =0.1.14, =0.1.0, =0.1.12 and more Source cves: CVE-2026-10705 Source advisory: SNYK:PYTHON-DASK-17138893...

deebo-prototype (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-10691 via @wonderwhy-er/desktop-commander (0.1.39)

@wonderwhy-er/desktop-commander NPM version 0.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on @wonderwhy-er/desktop-commander and may be impacted: - deebo-prototype =1.0.0, =1.0.1 Source cves: CVE-2026-10691 Source advisory:...

deebo-prototype (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-10690 via @wonderwhy-er/desktop-commander (0.1.39)

@wonderwhy-er/desktop-commander NPM version 0.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on @wonderwhy-er/desktop-commander and may be impacted: - deebo-prototype =1.0.0, =1.0.1 Source cves: CVE-2026-10690 Source advisory:...

deebo-prototype (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-10690 via @wonderwhy-er/desktop-commander (0.1.39)

@wonderwhy-er/desktop-commander NPM version 0.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on @wonderwhy-er/desktop-commander and may be impacted: - deebo-prototype =1.0.0, =1.0.1 Source cves: CVE-2026-10690 Source advisory: OSV:GHSA-5XX3-J724-WMX...

deebo-prototype (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-10691 via @wonderwhy-er/desktop-commander (0.1.39)

@wonderwhy-er/desktop-commander NPM version 0.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on @wonderwhy-er/desktop-commander and may be impacted: - deebo-prototype =1.0.0, =1.0.1 Source cves: CVE-2026-10691 Source advisory: OSV:GHSA-R87G-78MX-3WG...

@accounter/client (>=0.0.6-alpha-20250716191627-847a4f732a66f2443e3141d5ef77222a6579ded3, <=0.0.11-alpha-20260328161521-814e4fc7c5b0b6b919590e293c0fac45b7c2513d), @boxyhq/react-ui (>=3.5.2, <=3.5.3) +155 more potentially affected by CVE-2026-33245 via react-router (>=7.7.0, <=7.13.1-pre.0)

react-router NPM version =7.7.0, =0.0.6-alpha-20250716191627-847a4f732a66f2443e3141d5ef77222a6579ded3, =3.5.2, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =3.3.7, =3.0.0-alpha.2, =3.2.0-beta.0, =0.1.9, =0.0.1, =1.21.9, =1.21.9, =0.3.1, =0.5.1 - @depup/react-router-dom 7.13.1-depup...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.11-alpha-20260404002702-9340365def1af08a5cdbbf734a87d1d4839bdaff) +287 more potentially affected by CVE-2026-34077 via react-router (>=7.0.0, <=7.13.2-pre.0)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =0.1.0, =0.3.3 and more Source cves: CVE-2026-34077 Source advisory: SNYK:JS-REACTROUTER-17138883...

@0xmike/web-kit (>=0.0.6, <=0.1.1), @abundiko/expo-template (1.0.0) +321 more potentially affected by CVE-2026-34077 via turbo-stream (2.4.1)

turbo-stream NPM version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on turbo-stream and may be impacted: - @0xmike/web-kit =0.0.6, =4.0.0-beta.10, =4.15.0, =1.4.0, =0.0.1, =1.2.0, =1.2.0, =0.1.0, =1.0.10, =1.0.0, =0.0.2, =0.0.1, =1.0.6, =2.1.0 ...

@1023-ventures/merope2 (>=0.2.1, <=0.2.9), @1023-ventures/vega-core (>=0.5.0, <=0.6.2) +1201 more potentially affected by CVE-2026-40181 via react-router (>=6.7.0, <=6.30.3-pre-v6.0)

react-router NPM version =6.7.0, =0.2.1, =0.5.0, =0.0.1, =0.0.1, =3.0.0, =0.0.0-beta-20260120211922, =1.0.0, =1.0.0, =1.0.0, =2.7.0, =0.0.1, =0.1.0, =0.0.0, =2.13.1, =2.13.94 and more Source cves: CVE-2026-40181 Source advisory: SNYK:JS-REACTROUTER-17138887...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260421081155-bb6cc4c0b0b59fff41df172e2f4212eca6906193) +291 more potentially affected by CVE-2026-40181 via react-router (>=7.0.0, <=7.14.0-pre.0)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =1.0.8 and more Source cves: CVE-2026-40181 Source advisory: SNYK:JS-REACTROUTER-17138887...