CVE-2026-15972

The CVE affects Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2, with an unauthenticated denial of service caused by unbounded connection acceptance on external gRPC listeners. The root cause is unbounded resource usage from opening many incomplete connections, leading to exha...

0x-assert (>=0.0.2, <=0.0.3), 0xauth (>=0.0.5, <=0.1.0) +7328 more potentially affected by CVE-2026-71851 via crypto-js (>=3.1.2, <=3.3.0)

crypto-js NPM version =3.1.2, =0.0.2, =0.0.5, =1.0.0, =1.0.0, =1.34.1, =0.1.0, =4.11.2, =0.0.1, =3.3.9, =3.10.1, =0.0.16-0.1, =0.0.4, =0.0.7 and more Source cves: CVE-2026-71851 Source advisory: SNYK:JS-CRYPTOJS-18599395...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by CVE-2026-66062 via @sveltejs/kit (>=2.0.0, <=2.70.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-66062 Source advisory: SNYK:JS-SVELTEJSKIT-18592743...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70608 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +11 more potentially affected by CVE-2026-70600 via electron (>=40.0.0, <=40.8.5)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-70600 Source advisory: SNYK:JS-ELECTRON-18563354...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +916 more potentially affected by CVE-2026-15157 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-15157 Source advisory: OSV:GHSA-M8RV-5G2X-5CG5...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2154 more potentially affected by CVE-2026-15157 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =1.10.0-release and more Source cves: CVE-2026-15157 Source advisory: OSV:GHSA-M8RV-5G2X-5CG5...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-65841 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-65841 Source advisory: SNYK:JS-JODIT-18507643...

@datastream/validate (>=0.0.4, <=0.0.38), @dearmrzhang/customs-mcp-server (>=0.1.2, <=1.1.0) +15 more potentially affected by CVE-2026-18446 via fast-uri (>=2.1.0, <=2.3.0)

fast-uri NPM version =2.1.0, =0.0.4, =0.1.2, =0.0.1, =0.0.1, =3.1.0-rc.0, =0.2.0, =0.2.0, =0.2.0, =0.0.1, =0.0.0, =1.0.0, =3.0.0, =1.7.0, =1.8.0 and more Source cves: CVE-2026-18446 Source advisory: SNYK:JS-FASTURI-18506908...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +916 more potentially affected by CVE-2026-14643 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-14643 Source advisory: SNYK:JS-UNDICI-18426065...

3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1217 more potentially affected by CVE-2026-15157 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.0, =1.28.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-15157 Source...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.2580522, <=0.1.0) +2193 more potentially affected by CVE-2026-59892 via @opentelemetry/propagator-jaeger (>=2.0.0, <=2.8.0)

@opentelemetry/propagator-jaeger NPM version =2.0.0, =0.1.0, =0.1.0-dev.2580522, =0.1.1, =0.0.1, =0.0.53, =0.0.31, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =1.9.0-1 and more Source cves: CVE-2026-59892 Source...

@a-rt-works/auth0-deploy-cli (3.3.3), @acknow-srl/express-openid (>=1.0.0, <=1.0.1) +540 more potentially affected by CVE-2026-67320 via axios (>=0.31.1, <=0.32.0)

axios NPM version =0.31.1, =1.0.0, =0.0.1, =0.0.2, =1.3.2, =0.2.0, =0.0.2-beta.0, =2.0.14, =0.5.12, =1.0.0, =1.0.1, =32.0.0, =0.2.4, =0.3.0 and more Source cves: CVE-2026-67320 Source advisory: OSV:GHSA-GCFJ-64VW-6MP9...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +14459 more potentially affected by CVE-2026-67317 via axios (>=1.7.0, <=1.17.0)

axios NPM version =1.7.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.0, =0.1.0, =0.1.2, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =0.1.2 and more Source cves: CVE-2026-67317 Source advisory: OSV:GHSA-JQH4-M9W3-8HP9...

0xtrails (>=0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, <=0.18.3), 123pancli (1.0.0) +6615 more potentially affected by CVE-2026-67315 via axios (>=1.15.0, <=1.17.0)

axios NPM version =1.15.0, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =0.1.0, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =1.0.10, =1.0.10, =0.6.6, =0.6.10, =0.6.9, =0.0.1, =0.0.7 and more Source cves: CVE-2026-67315 Source advisory: SNYK:JS-AXIOS-18065357...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +19073 more potentially affected by CVE-2026-67313 via axios (>=1.0.0, <=1.17.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.1.2, =1.1.0, =2.0.0 and more Source cves: CVE-2026-67313 Source advisory: SNYK:JS-AXIOS-18060167...

@0xjwlabs/discord-rpc (0.1.0), @0xsquid/react-hooks (>=1.0.0, <=2.0.0) +1564 more potentially affected by CVE-2026-67312 via axios (>=0.28.0, <=0.32.0)

axios NPM version =0.28.0, =1.0.0, =3.0.0-beta.0, =2.10.1, =1.0.0, =1.0.0, =0.1.0, =0.0.1, =0.0.2, =1.3.2, =1.4.13, =13.0.0, =16.5.4 and more Source cves: CVE-2026-67312 Source advisory: SNYK:JS-AXIOS-18060165...

-fides-amor-et-lux (1.0.0), -price-checker (>=1.0.0, <=1.0.5) +50534 more potentially affected by CVE-2026-62389 via ws (>=8.0.0, <=8.21.0)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =1.1.0, =0.1.0-rc.7, =0.1.0, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-62389 Source advisory: SNYK:JS-WS-17988732...

@fedify/amqp (0.2.0-dev.12), @fedify/botkit (>=0.3.0-dev.125, <=0.4.0-dev.175) +3 more potentially affected by CVE-2026-50131 via @fedify/fedify (>=1.5.0, <=1.9.2)

@fedify/fedify NPM version =1.5.0, =0.3.0-dev.125, =0.4.0-dev.167, =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +38 more potentially affected by CVE-2026-59209 via n8n-core (>=1.0.0, <=1.122.34)

n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.26.0, =0.34.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =1.0.1, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =1.4.1 and more Source cves: CVE-2026-59209 Source advisory: SNYK:JS-N8NCORE-17954281...