@adatechnology/conversation-module (>=0.2.0, <=0.4.2), @adobe/spacecat-shared-brand-client (>=1.1.31, <=1.1.35) +302 more potentially affected by CVE-2026-84368 via joi (>=18.0.0, <=18.2.3)

joi NPM version =18.0.0, =0.2.0, =1.1.31, =1.0.0, =1.8.6, =2.61.4, =1.4.60, =1.6.11, =1.19.1, =1.11.2, =2.2.1, =1.0.0, =1.12.0, =3.14.0, =3.19.0 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-84368 Source advisory: SNYK:JS-JOI-19498543...

@0xsequence/web3-onboard-plugin (2.0.5), @0xzoz/tallyho (>=2.0.11, <=2.0.14) +1768 more potentially affected by CVE-2026-84368 via joi (>=17.2.0, <=17.13.4)

joi NPM version =17.2.0, =2.0.11, =0.1.6-alpha.2, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.16.17-beta-0213b250, =1.8.31, =1.1.12, =1.7.1, =1.8.31, =1.0.0, =1.16.34-beta-20241113-102431-65542b84 and more Source cves: CVE-2026-84368 Source advisory: SNYK:JS-JOI-19498543...

5ug-cli (>=1.0.72, <=1.4.0), @343dev/optimizt (6.0.0) +85 more potentially affected by CVE-2026-84370 via svgo (>=2.0.0, <=2.8.0)

svgo NPM version =2.0.0, =1.0.72, =1.1.2, =2.0.0-fix-trigger-remove-colors-config-e26731597751d1581014163b7e73df159cf80be3.1, =0.0.2-0, =4.55.0, =2.12.3-canary.621.14971.0, =2.1.0-beta-1, =2.1.0-beta-1, =2.1.8, =5.0.0, =0.0.1, =2.7.4, =3.59.1--canary.1316.b3452bb.0, =4.0.0--canary.2146.fe4f461.0...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +247 more potentially affected by CVE-2026-84370 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-84370 Source advisory: SNYK:JS-SVGO-19498539...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +247 more potentially affected by CVE-2026-84369 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-84369 Source advisory: SNYK:JS-SVGO-19498536...

5ug-cli (>=1.0.72, <=1.4.0), @343dev/optimizt (6.0.0) +85 more potentially affected by CVE-2026-84369 via svgo (>=2.0.0, <=2.8.0)

svgo NPM version =2.0.0, =1.0.72, =1.1.2, =2.0.0-fix-trigger-remove-colors-config-e26731597751d1581014163b7e73df159cf80be3.1, =0.0.2-0, =4.55.0, =2.12.3-canary.621.14971.0, =2.1.0-beta-1, =2.1.0-beta-1, =2.1.8, =5.0.0, =0.0.1, =2.7.4, =3.59.1--canary.1316.b3452bb.0, =4.0.0--canary.2146.fe4f461.0...

@adatechnology/conversation-module (>=0.2.0, <=0.4.2), @adobe/spacecat-shared-brand-client (>=1.1.31, <=1.1.35) +302 more potentially affected by CVE-2026-84367 via joi (>=18.0.0, <=18.2.3)

joi NPM version =18.0.0, =0.2.0, =1.1.31, =1.0.0, =1.8.6, =2.61.4, =1.4.60, =1.6.11, =1.19.1, =1.11.2, =2.2.1, =1.0.0, =1.12.0, =3.14.0, =3.19.0 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-84367 Source advisory: SNYK:JS-JOI-19498547...

1-topshiriq (1.0.0), 3nit-utils (>=0.11.1, <=0.23.0) +4147 more potentially affected by CVE-2026-84367 via joi (>=14.3.1, <=17.13.4)

joi NPM version =14.3.1, =0.11.1, =0.0.1, =2.0.0, =0.1.2, =2.0.11, =0.1.6-alpha.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.9 and more Source cves: CVE-2026-84367 Source advisory: SNYK:JS-JOI-19498547...

@0xshogun/sdk (>=1.0.3, <=1.1.6), @100xsystems/test-suite-typescript (>=0.1.0, <=0.1.2) +1677 more potentially affected by CVE-2026-84373 via @vitest/mocker (>=2.1.0, <=4.1.10)

@vitest/mocker NPM version =2.1.0, =1.0.3, =0.1.0, =0.0.1, =0.2.4, =0.0.3, =0.2.0, =0.0.1, =0.1.1, =0.1.1, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =0.0.14, =0.0.16 and more Source cves: CVE-2026-84373 Source advisory: SNYK:JS-VITESTMOCKER-19497933...

08cms (1.0.0), 10secondsofcode-custom (1.0.0) +4845 more potentially affected by CVE-2026-84371 via sanitize-html (>=1.10.1, <=2.17.6)

sanitize-html NPM version =1.10.1, =1.0.0, =4.11.0, =1.0.0, =1.0.0, =0.0.1, =0.6.0, =5.0.2, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =11.1.0, =11.3.0 and more Source cves: CVE-2026-84371 Source advisory: SNYK:JS-SANITIZEHTML-19498541...

08cms (1.0.0), 10secondsofcode-custom (1.0.0) +4845 more potentially affected by CVE-2026-84371 via sanitize-html (>=1.10.1, <=2.17.6)

sanitize-html NPM version =1.10.1, =1.0.0, =4.11.0, =1.0.0, =1.0.0, =0.0.1, =0.6.0, =5.0.2, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =11.1.0, =11.3.0 and more Source cves: CVE-2026-84371 Source advisory: OSV:GHSA-G8QQ-57P8-GGW5...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +11350 more potentially affected by CVE-2026-73086 via nanoid (>=3.0.0, <=3.3.11)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-73086 Source advisory: OSV:GHSA-XWG4-73V4-XW9W...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5937 more potentially affected by CVE-2026-73086 via nanoid (>=4.0.0, <=5.1.9)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-73086 Source advisory: OSV:GHSA-XWG4-73V4-XW9W...

@antfu/nip (0.1.1), @condu-feature/auto-package-exports (>=1.0.0, <=1.0.3) +92 more potentially affected by unknown CVE via @pnpm/config (>=1002.5.3, <=1004.11.5)

@pnpm/config NPM version =1002.5.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.2, =26.2.0, =1.0.6, =0.6.19, =0.1.0-beta.0, =0.4.0 - @mirta/rollup 0.3.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-PNPMCONFIG-19500674...

@forgeax/game (>=0.3.0, <=0.3.10), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +11 more potentially affected by CVE-2026-101043 via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.1.0-beta.3, =0.1.0-rc.20, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: CVE-2026-101043 Source advisory: OSV:GHSA-VX52-2968-3VC6...

@appium/base-plugin (>=3.2.0, <=3.3.0), @appium/fake-plugin (>=4.2.0, <=4.3.0) +8 more potentially affected by CVE-2026-58191 via @appium/base-driver (>=10.3.0, <=10.6.0)

@appium/base-driver NPM version =10.3.0, =3.2.0, =4.2.0, =3.0.10, =2.107.37, =2.107.37, =3.3.0, =0.1.0-beta.1, =0.79.0, =1.0.96, =1.0.115 Source cves: CVE-2026-58191 Source advisory: OSV:GHSA-3WGP-X9P5-C7CC...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4405 more potentially affected by CVE-2026-83605 via @xmldom/xmldom (>=0.7.0, <=0.8.13)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83605 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499081...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4405 more potentially affected by CVE-2026-83607 via @xmldom/xmldom (>=0.7.0, <=0.8.13)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83607 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499075...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4413 more potentially affected by CVE-2026-83608 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83608 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498556...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4413 more potentially affected by CVE-2026-83610 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83610 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499074...