@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8), @manniwatch/client-desktop (>=0.30.0, <=0.30.1) +3 more potentially affected by CVE-2026-44437 via @angular/ssr (>=19.0.5, <=19.2.19)

@angular/ssr NPM version =19.0.5, =1.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2026-44437 Source advisory: SNYK:JS-ANGULARSSR-16438975...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) potentially affected by CVE-2026-44437 via @angular/ssr (>=20.3.18, <=20.3.24)

@angular/ssr NPM version =20.3.18, =7.3.49-4369, =4.2.16-4435, =4.2.17 Source cves: CVE-2026-44437 Source advisory: SNYK:JS-ANGULARSSR-16438975...

ldap3_cli (>=0.3.1, <=0.6.1), ldap3_client (>=0.1.0, <=0.6.1) potentially affected by unknown CVE via ldap3_proto (>=0.2.3, <=0.6.1)

ldap3proto CARGO version =0.2.3, =0.3.1, =0.1.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-QCXQ-75WR-5CM8...

kanidm_client (>=1.1.0-alpha, <=1.1.0-alpha.12), kanidm_tools (>=1.1.0-alpha, <=1.1.0-alpha.12) potentially affected by CVE-2026-46689 via kanidm_proto (>=1.1.0-alpha.10, <=1.1.0-alpha.12)

kanidmproto CARGO version =1.1.0-alpha.10, =1.1.0-alpha, =1.1.0-alpha, =1.1.0-alpha.12 Source cves: CVE-2026-46689 Source advisory: OSV:GHSA-R5FR-9GMV-JGGH...

kanidm_client (>=1.1.0-alpha.3, <=1.1.0-alpha.7), kanidm_tools (>=1.1.0-alpha.3, <=1.1.0-alpha.12) potentially affected by unknown CVE via webauthn-authenticator-rs (>=0.3.2, <=0.4.9)

webauthn-authenticator-rs CARGO version =0.3.2, =1.1.0-alpha.3, =1.1.0-alpha.3, =1.1.0-alpha.12 Source cves: unknown CVE Source advisory: OSV:GHSA-22W3-693W-X895...

@vrabbi/backstage-devtools-wrapper (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-44374 via @backstage/plugin-catalog-unprocessed-entities (0.1.4)

@backstage/plugin-catalog-unprocessed-entities NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-catalog-unprocessed-entities and may be impacted: - @vrabbi/backstage-devtools-wrapper =0.2.0, =0.2.1 Source cves:...

@backstage/plugin-catalog-backend-module-unprocessed (>=0.0.0-nightly-20240321021124, <=0.6.10), @backstage/plugin-catalog-unprocessed-entities (>=0.0.0-nightly-20251203024610, <=0.2.29) potentially affected by CVE-2026-44374 via @backstage/plugin-catalog-unprocessed-entities-common (>=0.0.0-nightly-20241116023418, <=0.0.14-next.0)

@backstage/plugin-catalog-unprocessed-entities-common NPM version =0.0.0-nightly-20241116023418, =0.0.0-nightly-20240321021124, =0.0.0-nightly-20251203024610, =0.2.29 Source cves: CVE-2026-44374 Source advisory: OSV:GHSA-P7G9-RP3G-MGFG...

@augu/fastify-nitro (>=1.0.0, <=1.2.0), @bicou/countries-server (>=1.5.0, <=1.6.7) +25 more potentially affected by CVE-2026-44372 via nitropack (>=2.1.0, <=2.13.1)

nitropack NPM version =2.1.0, =1.0.0, =1.5.0, =0.4.4, =0.6.1, =1.0.0, =5.0.0-rc.212, =5.0.0-rc.212, =3.0.0, =4.0.0-alpha.1, =4.0.0-29145487.7beaa672, =7.40.3, =0.0.0-beta.0, =1.15.3, =1.31.23, =1.32.5 and more Source cves: CVE-2026-44372 Source advisory: SNYK:JS-NITROPACK-16757946...

@100x/application (>=0.0.1, <=0.0.6), @aero-js/cli (0.4.0) +64 more potentially affected by CVE-2026-44372 via nitro (>=3.0.0, <=3.0.260415-beta)

nitro NPM version =3.0.0, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =0.2.9, =2.4.0-alpha.2, =3.0.0-alpha.55 and more Source cves: CVE-2026-44372 Source advisory: SNYK:JS-NITRO-16757947...

@100x/application (>=0.0.1, <=0.0.6), @aero-js/cli (0.4.0) +64 more potentially affected by CVE-2026-44372 via nitro (>=3.0.0, <=3.0.260415-beta)

nitro NPM version =3.0.0, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =0.2.9, =2.4.0-alpha.2, =3.0.0-alpha.55 and more Source cves: CVE-2026-44372 Source advisory: OSV:GHSA-9PHM-9P8F-HW5M...

@augu/fastify-nitro (>=1.0.0, <=1.2.0), @bicou/countries-server (>=1.5.0, <=1.6.7) +25 more potentially affected by CVE-2026-44372 via nitropack (>=2.1.0, <=2.13.1)

nitropack NPM version =2.1.0, =1.0.0, =1.5.0, =0.4.4, =0.6.1, =1.0.0, =5.0.0-rc.212, =5.0.0-rc.212, =3.0.0, =4.0.0-alpha.1, =4.0.0-29145487.7beaa672, =7.40.3, =0.0.0-beta.0, =1.15.3, =1.31.23, =1.32.5 and more Source cves: CVE-2026-44372 Source advisory: OSV:GHSA-9PHM-9P8F-HW5M...

@augu/fastify-nitro (>=1.0.0, <=1.2.0), @bicou/countries-server (>=1.5.0, <=1.6.7) +25 more potentially affected by CVE-2026-44373 via nitropack (>=2.1.0, <=2.13.1)

nitropack NPM version =2.1.0, =1.0.0, =1.5.0, =0.4.4, =0.6.1, =1.0.0, =5.0.0-rc.212, =5.0.0-rc.212, =3.0.0, =4.0.0-alpha.1, =4.0.0-29145487.7beaa672, =7.40.3, =0.0.0-beta.0, =1.15.3, =1.31.23, =1.32.5 and more Source cves: CVE-2026-44373 Source advisory: SNYK:JS-NITROPACK-16757953...

@100x/application (>=0.0.1, <=0.0.6), @aero-js/cli (0.4.0) +64 more potentially affected by CVE-2026-44373 via nitro (>=3.0.0, <=3.0.260415-beta)

nitro NPM version =3.0.0, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =0.2.9, =2.4.0-alpha.2, =3.0.0-alpha.55 and more Source cves: CVE-2026-44373 Source advisory: SNYK:JS-NITRO-16757954...

@100x/application (>=0.0.1, <=0.0.6), @aero-js/cli (0.4.0) +64 more potentially affected by CVE-2026-44373 via nitro (>=3.0.0, <=3.0.260415-beta)

nitro NPM version =3.0.0, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =0.2.9, =2.4.0-alpha.2, =3.0.0-alpha.55 and more Source cves: CVE-2026-44373 Source advisory: OSV:GHSA-5W89-W975-HF9Q...

@augu/fastify-nitro (>=1.0.0, <=1.2.0), @bicou/countries-server (>=1.5.0, <=1.6.7) +25 more potentially affected by CVE-2026-44373 via nitropack (>=2.1.0, <=2.13.1)

nitropack NPM version =2.1.0, =1.0.0, =1.5.0, =0.4.4, =0.6.1, =1.0.0, =5.0.0-rc.212, =5.0.0-rc.212, =3.0.0, =4.0.0-alpha.1, =4.0.0-29145487.7beaa672, =7.40.3, =0.0.0-beta.0, =1.15.3, =1.31.23, =1.32.5 and more Source cves: CVE-2026-44373 Source advisory: OSV:GHSA-5W89-W975-HF9Q...

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.13.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.13.1) +1 more potentially affected by CVE-2026-44351 via fast-jwt (>=6.0.0, <=6.0.1)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.13.1 Source cves: CVE-2026-44351 Source advisory: SNYK:JS-FASTJWT-16439016...

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.13.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.13.1) +1 more potentially affected by CVE-2026-44351 via fast-jwt (>=6.0.0, <=6.0.1)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.13.1 Source cves: CVE-2026-44351 Source advisory: OSV:GHSA-GMVF-9V4P-V8JC...

lemmy_server (>=0.11.3-rc.5, <=0.16.7) potentially affected by unknown CVE via lemmy_api (>=0.11.3-rc.5, <=0.16.7)

lemmyapi CARGO version =0.11.3-rc.5, =0.11.3-rc.5, =0.16.7 Source cves: unknown CVE Source advisory: OSV:GHSA-95Q8-X6R6-672M...

lemmy_server (>=0.11.3-rc.5, <=0.16.7) potentially affected by unknown CVE via lemmy_api (>=0.11.3-rc.5, <=0.16.7)

lemmyapi CARGO version =0.11.3-rc.5, =0.11.3-rc.5, =0.16.7 Source cves: unknown CVE Source advisory: OSV:GHSA-JMXC-HHWX-GVV3...

ironhide (>=1.0.0, <=1.0.7), rorm-cli (0.5.0) +1 more potentially affected by unknown CVE via rpassword (>=7.0.0, <=7.2.0)

rpassword CARGO version =7.0.0, =1.0.0, =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-2P6R-X3VV-XQM2...