0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2151 more potentially affected by CVE-2026-19534 via undici (>=6.7.0, <=6.28.0)

undici NPM version =6.7.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =2.1.1 and more Source cves: CVE-2026-19534 Source advisory: SNYK:JS-UNDICI-19635210...

3xhaustpi (>=0.1.3, <=0.2.5), @0x0.bug/pi-coding-agent (>=1.0.0, <=1.0.9) +1654 more potentially affected by CVE-2026-19534 via undici (>=8.0.0, <=8.10.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.8, =0.3.5, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a -...

3xhaustpi (>=0.1.3, <=0.2.5), @0x0.bug/pi-coding-agent (>=1.0.0, <=1.0.9) +1654 more potentially affected by CVE-2026-84890 via undici (>=8.0.0, <=8.10.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.8, =0.3.5, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a -...

@01.software/cli (>=0.1.1, <=0.10.3), @01.software/sdk (>=0.1.0-dev.260119.0a66443, <=0.29.0) +1963 more potentially affected by CVE-2026-84890 via undici (>=7.15.0, <=7.29.0)

undici NPM version =7.15.0, =0.1.1, =0.1.0-dev.260119.0a66443, =1.0.0, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =1.0.0, =1.3.2, =1.7.1 and more Source cves: CVE-2026-84890 Source advisory: SNYK:JS-UNDICI-19635208...

3xhaustpi (>=0.1.3, <=0.2.5), @0x0.bug/pi-coding-agent (>=1.0.0, <=1.0.9) +1654 more potentially affected by CVE-2026-18149 via undici (>=8.0.0, <=8.10.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.8, =0.3.5, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a -...

@01.software/cli (>=0.1.1, <=0.10.3), @01.software/sdk (>=0.1.0-dev.260119.0a66443, <=0.29.0) +2015 more potentially affected by CVE-2026-18149 via undici (>=7.11.0, <=7.29.0)

undici NPM version =7.11.0, =0.1.1, =0.1.0-dev.260119.0a66443, =1.0.0, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =1.0.0, =1.3.2, =1.7.1 and more Source cves: CVE-2026-18149 Source advisory: SNYK:JS-UNDICI-19635206...

@1auth/authn-webauthn (>=0.0.0-alpha.46, <=0.0.0-beta.3), @1auth/authn-webauthn-passkey (0.0.0-beta.3) +52 more potentially affected by unknown CVE via @simplewebauthn/server (>=13.0.0, <=13.3.1)

@simplewebauthn/server NPM version =13.0.0, =0.0.0-alpha.46, =0.6.0, =0.1.0, =1.22.0, =0.1.0, =5.0.569-alpha, =1.0.6, =1.9.6, =2.0.0, =0.0.10, =2.19.4, =2.24.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6HXQ-P678-4HR2...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2151 more potentially affected by CVE-2026-19534 via undici (>=6.7.0, <=6.28.0)

undici NPM version =6.7.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =2.1.1 and more Source cves: CVE-2026-19534 Source advisory: MEND:CVE-2026-19534...

@0xsequence/codegenie (>=0.1.0, <=0.5.1), @2h2d/new (>=0.0.2, <=0.1.1-alpha.3) +755 more potentially affected by CVE-2026-85730 via smol-toml (>=1.1.2, <=1.7.0)

smol-toml NPM version =1.1.2, =0.1.0, =0.0.2, =1.0.0, =4.10.0, =0.1.3, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.4 and more Source cves: CVE-2026-85730 Source advisory: SNYK:JS-SMOLTOML-19643959...

03-api-solid (>=1.0.0, <=1.1.2), 0uth (>=1.0.5, <=1.2.1) +3042 more potentially affected by CVE-2026-76169 via fastify (>=4.0.2, <=5.12.1)

fastify NPM version =4.0.2, =1.0.0, =1.0.5, =1.0.3, =0.0.3, =0.1.0, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =3.0.0, =0.1.0, =2.0.0, =3.0.0, =0.0.1, =0.1.0, =0.1.3 and more Source cves: CVE-2026-76169 Source advisory: SNYK:JS-FASTIFY-19639043...

create-graphene (>=0.0.24, <=0.0.30) potentially affected by CVE-2026-85525 via snowflake-sdk (3.1.0)

snowflake-sdk NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-sdk and may be impacted: - create-graphene =0.0.24, =0.0.30 Source cves: CVE-2026-85525 Source advisory: SNYK:JS-SNOWFLAKESDK-19638986...

@arenahito/droid-webscr (>=0.2.1, <=0.6.1), @cappa/cli (>=0.4.4, <=0.12.0) +3 more potentially affected by CVE-2026-85184 via @fastify/middie (>=9.1.0, <=9.3.3)

@fastify/middie NPM version =9.1.0, =0.2.1, =0.4.4, =0.2.8, =1.0.0, =1.0.0-alpha.23, =1.0.0-alpha.29 Source cves: CVE-2026-85184 Source advisory: SNYK:JS-FASTIFYMIDDIE-19643570...

org.webjars.npm:csv (>=5.3.0, <=5.5.0), org.webjars.npm:github-com-selectize-selectize-js (>=0.12.6, <=0.13.3) +4 more potentially affected by CVE-2026-85063 via org.webjars.npm:csv-parse (>=2.5.0, <=4.16.3)

org.webjars.npm:csv-parse MAVEN version =2.5.0, =5.3.0, =0.12.6, =0.12.2, =0.5.3, =0.5.4 Source cves: CVE-2026-85063 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-19639018...

@accounter/client (>=0.0.12-alpha-20260616111400-042980593a256ba48203b66c0e7e022e45b91fbd, <=0.1.0-alpha-20260806092250-bc394b1d7590fd72a701aba3bdd0e263201e18ab), @blinkk/root-cms (>=3.4.1, <=3.5.1) +36 more potentially affected by CVE-2026-85063 via csv-parse (>=7.0.0, <=7.0.1)

csv-parse NPM version =7.0.0, =0.0.12-alpha-20260616111400-042980593a256ba48203b66c0e7e022e45b91fbd, =3.4.1, =0.1.4, =0.1.0, =0.1.0, =0.1.0, =0.53.29, =20260617.1750.25, =20260617.1750.26, =0.15.2, =0.13.1, =0.13.1, =0.11.1, =0.11.3 and more Source cves: CVE-2026-85063 Source advisory:...

@fancyliu/speclite (>=0.1.0, <=0.4.1), actual-moneymoney (>=3.0.0, <=3.6.0) +1 more potentially affected by CVE-2026-77465 via toml (>=4.1.1, <=4.1.2)

toml NPM version =4.1.1, =0.1.0, =3.0.0, =2.7.0, =2.12.4 Source cves: CVE-2026-77465 Source advisory: OSV:GHSA-82X6-Q7MM-W9CF...

@fancyliu/speclite (>=0.1.0, <=0.4.1), actual-moneymoney (>=3.0.0, <=3.6.0) +1 more potentially affected by CVE-2026-77465 via toml (>=4.1.1, <=4.1.2)

toml NPM version =4.1.1, =0.1.0, =3.0.0, =2.7.0, =2.12.4 Source cves: CVE-2026-77465 Source advisory: SNYK:JS-TOML-19639695...

org.webjars.npm:remark-mdx-frontmatter (5.1.0), org.webjars.npm:snyk-go-plugin (1.5.2) potentially affected by CVE-2026-63376 via org.webjars.npm:toml (>=2.3.3, <=3.0.0)

org.webjars.npm:toml MAVEN version =2.3.3, =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:toml and may be impacted: - org.webjars.npm:remark-mdx-frontmatter 5.1.0 - org.webjars.npm:snyk-go-plugin 1.5.2 Source cves: CVE-2026-6337...

@fancyliu/speclite (>=0.1.0, <=0.4.1), actual-moneymoney (>=3.0.0, <=3.6.0) +1 more potentially affected by CVE-2026-63376 via toml (4.1.1)

toml NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @fancyliu/speclite =0.1.0, =3.0.0, =2.7.0, =2.11.3 Source cves: CVE-2026-63376 Source advisory: OSV:GHSA-V5MP-JGW5-2X6J...

@fancyliu/speclite (>=0.1.0, <=0.4.1), actual-moneymoney (>=3.0.0, <=3.6.0) +1 more potentially affected by CVE-2026-63376 via toml (4.1.1)

toml NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @fancyliu/speclite =0.1.0, =3.0.0, =2.7.0, =2.11.3 Source cves: CVE-2026-63376 Source advisory: SNYK:JS-TOML-19639693...

@edgebrix-sdk/react (>=0.0.58, <=0.0.74), @kimia_software/tellair-wc (0.0.0) +16 more potentially affected by CVE-2026-56812 via phoenix (>=1.6.2, <=1.6.16)

phoenix NPM version =1.6.2, =0.0.58, =0.8.10, =0.1.8, =0.1.5, =0.1.0-rc0, =0.8.1, =0.0.1, =0.0.1, =0.0.0-PR-1--182e1d3, =19.0.0-beta.1, =1.0.23, =0.3.0, =0.1.1, =0.1.6 and more Source cves: CVE-2026-56812 Source advisory: OSV:GHSA-63MC-HW7G-86RR...