acid-rs (>=1.0.0, <=1.1.1), aframe (>=0.6.0, <=0.7.1) +251 more potentially affected by unknown CVE via anymap2 (0.13.0)

anymap2 CARGO version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on anymap2 and may be impacted: - acid-rs =1.0.0, =0.6.0, =0.0.5, =0.0.2, =0.2.0-rc5, =0.2.0-rc5, =0.1.0, =0.0.39, =0.1.3, =0.10.0, =0.6.0, =0.12.0 and more Source cves: unknown...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai_kit/workflow-world (>=0.1.0, <=0.2.0) +144 more potentially affected by unknown CVE via devalue (>=5.0.0, <=5.9.2)

devalue NPM version =5.0.0, =0.0.1, =0.1.0, =6.1.0, =6.1.0, =7.0.0, =6.1.0, =0.3.0, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7, =0.1.1, =4.3.15, =4.3.33 and more Source cves: unknown CVE Source advisory: SNYK:JS-DEVALUE-20416736...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai_kit/workflow-world (>=0.1.0, <=0.2.0) +144 more potentially affected by unknown CVE via devalue (>=5.0.0, <=5.9.2)

devalue NPM version =5.0.0, =0.0.1, =0.1.0, =6.1.0, =6.1.0, =7.0.0, =6.1.0, =0.3.0, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7, =0.1.1, =4.3.15, =4.3.33 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MCM9-63F2-9J32...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai_kit/workflow-world (>=0.1.0, <=0.2.0) +144 more potentially affected by unknown CVE via devalue (>=5.0.0, <=5.9.2)

devalue NPM version =5.0.0, =0.0.1, =0.1.0, =6.1.0, =6.1.0, =7.0.0, =6.1.0, =0.3.0, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7, =0.1.1, =4.3.15, =4.3.33 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R9W8-H9R3-54W4...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai_kit/workflow-world (>=0.1.0, <=0.2.0) +98 more potentially affected by unknown CVE via devalue (>=5.8.1, <=5.9.2)

devalue NPM version =5.8.1, =0.0.1, =0.1.0, =6.1.0, =6.1.0, =7.0.0, =6.1.0, =0.3.0, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7, =0.1.1, =4.3.15, =4.3.33 and more Source cves: unknown CVE Source advisory: SNYK:JS-DEVALUE-20416740...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai_kit/workflow-world (>=0.1.0, <=0.2.0) +144 more potentially affected by unknown CVE via devalue (>=5.0.0, <=5.9.2)

devalue NPM version =5.0.0, =0.0.1, =0.1.0, =6.1.0, =6.1.0, =7.0.0, =6.1.0, =0.3.0, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7, =0.1.1, =4.3.15, =4.3.33 and more Source cves: unknown CVE Source advisory: SNYK:JS-DEVALUE-20416744...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai_kit/workflow-world (>=0.1.0, <=0.2.0) +144 more potentially affected by unknown CVE via devalue (>=5.0.0, <=5.9.2)

devalue NPM version =5.0.0, =0.0.1, =0.1.0, =6.1.0, =6.1.0, =7.0.0, =6.1.0, =0.3.0, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7, =0.1.1, =4.3.15, =4.3.33 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4Q55-J62X-FR9H...

@hrmony/account-management (1.99.0), @hrmony/gutscheinverwaltung (1.99.0) +3 more potentially affected by unknown CVE via @hrmony/kit-5 (1.0.1)

@hrmony/kit-5 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hrmony/kit-5 and may be impacted: - @hrmony/account-management 1.99.0 - @hrmony/gutscheinverwaltung 1.99.0 - @hrmony/interfaces 0.99.0 - @hrmony/organisationsverwaltung...

@0xwork/connect (>=0.1.8, <=0.1.9), @7n/rules (>=1.0.0, <=1.118.11) +528 more potentially affected by unknown CVE via markdown-it (>=14.0.0, <=14.3.0)

markdown-it NPM version =14.0.0, =0.1.8, =1.0.0, =2026.6.2, =4.10.0, =2026.5.2-zh, =1.0.0, =5.52.1-fa.2, =5.52.1-fa.2, =2.3.0, =2.24.0 - @amap-lbs/amap-a2ui 0.1.0 - @apilium/mayros-matrix 0.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-253C-MCHW-3W2R...

@1-click/shared-lib (0.0.1), @20206205tech/nestjs-auth (>=1.0.0, <=1.4.1) +871 more potentially affected by unknown CVE via js-yaml (>=5.0.0, <=5.4.0)

js-yaml NPM version =5.0.0, =1.0.0, =0.3.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.1.0, =16.21.1, =1.9.29, =6.29.8, =3.4.141, =7.1.20, =2.2.62, =2.2.73 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R3PH-W7GJ-G6XM...

@raycashxyz/confidential-primitives (>=0.1.0, <=0.1.1), @zentity/contracts (>=0.6.0, <=0.7.0) +1 more potentially affected by unknown CVE via @openzeppelin/confidential-contracts (>=0.3.0, <=0.3.1)

@openzeppelin/confidential-contracts NPM version =0.3.0, =0.1.0, =0.6.0, =0.1.0, =0.5.0 Source cves: unknown CVE Source advisory: SNYK:JS-OPENZEPPELINCONFIDENTIALCONTRACTS-20158601...

@gudman/charter-conformance (0.1.0), @gudman/charter-core (0.1.0) +1 more potentially affected by unknown CVE via @openzeppelin/confidential-contracts (0.5.1)

@openzeppelin/confidential-contracts NPM version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/confidential-contracts and may be impacted: - @gudman/charter-conformance 0.1.0 - @gudman/charter-core 0.1.0 -...

aquatic (0.2.0), aquatic_http (0.2.0) +159 more potentially affected by unknown CVE via owned-alloc (0.2.0)

owned-alloc CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on owned-alloc and may be impacted: - aquatic 0.2.0 - aquatichttp 0.2.0 - aquatichttploadtest 0.2.0 - aquaticws 0.2.0 - aquaticwsloadtest 0.2.0 - asyncexecutors =0.6.0, =1.0.0...

a3mo_lib (>=0.1.0, <=0.1.1), android-abx (0.1.0) +199 more potentially affected by unknown CVE via faster-hex (>=0.3.1, <=0.10.0)

faster-hex CARGO version =0.3.1, =0.1.0, =4.0.0, =0.19.7, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.101.0, =0.37.0-pre, =0.119.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0306...

srb2kartjs (>=2.2.7, <=2.2.9) potentially affected by unknown CVE via ldoash (0.0.1-security)

ldoash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldoash and may be impacted: - srb2kartjs =2.2.7, =2.2.9 Source cves: unknown CVE Source advisory: SNYK:JS-LDOASH-19882839...

gloglet (2.3.3) potentially affected by unknown CVE via gloggo (1.1.3)

gloggo NPM version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-16054...

@3ngram/server (>=0.7.0, <=1.6.1), @adatechnology/conversation-module (>=0.2.0, <=0.4.2) +191 more potentially affected by CVE-2026-92596 via nodemailer (>=9.0.0, <=9.0.6)

nodemailer NPM version =9.0.0, =0.7.0, =0.2.0, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.2.0, =0.1.3, =6.1.211-alpha, =6.1.211-alpha, =6.1.211-alpha, =0.6.0, =0.8.0 and more Source cves: CVE-2026-92596 Source advisory: SNYK:JS-NODEMAILER-19651822...

@apisurf/canonui (>=0.1.1, <=0.2.1), @apisurf/deckui (>=0.1.1, <=0.1.2) +16 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =1.0.1, =1.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-26W7-CXV4-GFX2...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22148 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-SHARP-19653587...

@a3s-lab/office (>=0.1.0, <=0.312.0), @acms-subir/core (>=0.3.4, <=0.3.21) +307 more potentially affected by unknown CVE via @tiptap/core (>=3.7.0, <=3.30.4)

@tiptap/core NPM version =3.7.0, =0.1.0, =0.3.4, =0.2.0, =0.2.0-nightly-20260914153919, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.1.26, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819143124, =1.0.0, =0.2.0, =2.2.2, =1.3.7-beta.22, =3.0.0-beta.4 and more Source cves: unknown CVE...