1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2559 more potentially affected by CVE-2026-75838 via dompurify (>=3.0.0, <=3.4.12)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.0.1, =0.1.0, =0.10.2, =0.1.0-alpha.1, =0.1.0-alpha.35 and more Source cves: CVE-2026-75838 Source advisory: OSV:GHSA-55Q2-FJHQ-7XH7...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21429 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.15.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-JSYAML-18593780...

02.aula (1.0.0), 0xrtest (1.0.0) +10589 more potentially affected by unknown CVE via js-yaml (>=4.0.0, <=4.3.0)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5P4M-2WFM-XMQJ...

@holocronlab/botruntime-adk (>=2.0.10, <=2.9.7), @holocronlab/brt (>=0.5.8, <=0.12.3) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.9.7)

@holocronlab/botruntime-runtime NPM version 2.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk =2.0.10, =0.5.8, =0.12.3 Source cves: unknown CVE Source advisory:...

@holocronlab/botruntime-adk (2.6.1), @holocronlab/brt (0.9.5) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.1)

@holocronlab/botruntime-runtime NPM version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.1 - @holocronlab/brt 0.9.5 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.6.4), @holocronlab/brt (0.9.8) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.4)

@holocronlab/botruntime-runtime NPM version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.4 - @holocronlab/brt 0.9.8 Source cves: unknown CVE Source advisory...

@ccfly/setup (0.1.10) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.10)

@ccfly/setup-linux-x64 NPM version 0.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.10 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.9) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.9)

@ccfly/setup-linux-x64 NPM version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.14) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.14)

@ccfly/setup-linux-x64 NPM version 0.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.14 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@apicity/mcp-server (0.8.4) potentially affected by unknown CVE via @apicity/meta (0.8.4)

@apicity/meta NPM version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.4 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

@apicity/mcp-server (0.8.3) potentially affected by unknown CVE via @apicity/meta (0.8.3)

@apicity/meta NPM version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

comiconv (>=0.1.0, <=0.1.2), waifu-diffuser-types (0.0.0) potentially affected by unknown CVE via sevenz-rust (0.2.10)

sevenz-rust CARGO version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on sevenz-rust and may be impacted: - comiconv =0.1.0, =0.1.2 - waifu-diffuser-types 0.0.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0245...

@whalent/agent (0.3.244) potentially affected by unknown CVE via @whalent/agent-core (0.3.244)

@whalent/agent-core NPM version 0.3.244 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.244 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.258) potentially affected by unknown CVE via @whalent/agent-core (0.3.258)

@whalent/agent-core NPM version 0.3.258 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.258 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.288) potentially affected by unknown CVE via @whalent/agent-core (0.3.288)

@whalent/agent-core NPM version 0.3.288 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.288 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.294) potentially affected by unknown CVE via @whalent/agent-core (0.3.294)

@whalent/agent-core NPM version 0.3.294 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.294 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.278) potentially affected by unknown CVE via @whalent/agent-core (0.3.278)

@whalent/agent-core NPM version 0.3.278 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.278 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.230) potentially affected by unknown CVE via @whalent/agent-core (0.3.230)

@whalent/agent-core NPM version 0.3.230 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.230 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.239) potentially affected by unknown CVE via @whalent/agent-core (0.3.239)

@whalent/agent-core NPM version 0.3.239 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.239 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.276) potentially affected by unknown CVE via @whalent/agent-core (0.3.276)

@whalent/agent-core NPM version 0.3.276 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.276 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...