cryprot-net (0.1.0), dbx-core (>=0.2.0-beta, <=0.2.2) +4 more potentially affected by CVE-2026-10740 via s2n-quic (1.37.0)

s2n-quic CARGO version 1.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on s2n-quic and may be impacted: - cryprot-net 0.1.0 - dbx-core =0.2.0-beta, =0.2.0-beta, =0.10.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-10740 Source advisory:...

@babely/cli (>=1.0.3, <=1.0.6), @fyfirman/trigger.dev (4.1.2) +40 more potentially affected by CVE-2026-73654 via @trigger.dev/core (>=3.3.8, <=4.5.5)

@trigger.dev/core NPM version =3.3.8, =1.0.3, =0.0.1-0, =0.0.2-18, =3.1.4, =0.1.2, =7.0.1, =0.1.0, =0.2.8, =0.1.2, =0.0.2, =3.0.0-beta.0, =3.3.8, =3.0.0, =3.3.12 and more Source cves: CVE-2026-73654 Source advisory: OSV:GHSA-P28V-F755-9QRG...

@caspianph/second-npm-package (1.0.1), @caspianph/third-npm-package (1.2.0) potentially affected by unknown CVE via @caspianph/first-npm-package (1.3.3)

@caspianph/first-npm-package NPM version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on @caspianph/first-npm-package and may be impacted: - @caspianph/second-npm-package 1.0.1 - @caspianph/third-npm-package 1.2.0 Source cves: unknown CVE Source...

@caspianph/third-npm-package (1.2.0) potentially affected by unknown CVE via @caspianph/second-npm-package (1.0.1)

@caspianph/second-npm-package NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @caspianph/second-npm-package and may be impacted: - @caspianph/third-npm-package 1.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13993...

@caspianph/third-npm-package (1.2.0) potentially affected by unknown CVE via @caspianph/second-npm-package (1.0.1)

@caspianph/second-npm-package NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @caspianph/second-npm-package and may be impacted: - @caspianph/third-npm-package 1.2.0 Source cves: unknown CVE Source advisory:...

@thomlecter1122/lab-helper-test (0.0.3) potentially affected by unknown CVE via @thomlecter1122/lab-helper-test (0.0.2)

@thomlecter1122/lab-helper-test NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @thomlecter1122/lab-helper-test and may be impacted: - @thomlecter1122/lab-helper-test 0.0.3 Source cves: unknown CVE Source advisory:...

@hanssoft/baileys (>=2.0.4, <=10.0.0), @lynnidoffc/baileys (>=3.1.0, <=3.1.7) potentially affected by unknown CVE via @hanssoft/libsignal-node (3.0.4)

@hanssoft/libsignal-node NPM version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on @hanssoft/libsignal-node and may be impacted: - @hanssoft/baileys =2.0.4, =3.1.0, =3.1.7 Source cves: unknown CVE Source advisory:...

ai-analyzer (1.0.10) potentially affected by unknown CVE via ai-analyzer (1.0.13)

ai-analyzer NPM version 1.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on ai-analyzer and may be impacted: - ai-analyzer 1.0.10 Source cves: unknown CVE Source advisory: SNYK:JS-AIANALYZER-18758914...

@caspianph/second-npm-package (1.0.1), @caspianph/third-npm-package (1.2.0) potentially affected by unknown CVE via @caspianph/first-npm-package (1.3.3)

@caspianph/first-npm-package NPM version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on @caspianph/first-npm-package and may be impacted: - @caspianph/second-npm-package 1.0.1 - @caspianph/third-npm-package 1.2.0 Source cves: unknown CVE Source...

@weirdorg/dotenv (>=1.0.1, <=1.0.4) potentially affected by unknown CVE via @weirdorg/config (1.0.3)

@weirdorg/config NPM version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on @weirdorg/config and may be impacted: - @weirdorg/dotenv =1.0.1, =1.0.4 Source cves: unknown CVE Source advisory: SNYK:JS-WEIRDORGCONFIG-18758961...

@torbeck/priority-queue (>=6.3.5, <=6.3.10) potentially affected by unknown CVE via @torbeck/heap (>=4.3.8, <=4.3.14)

@torbeck/heap NPM version =4.3.8, =6.3.5, =6.3.10 Source cves: unknown CVE Source advisory: SNYK:JS-TORBECKHEAP-18758939...

ai-analyzer (1.0.10) potentially affected by unknown CVE via ai-analyzer (1.0.13)

ai-analyzer NPM version 1.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on ai-analyzer and may be impacted: - ai-analyzer 1.0.10 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13934...

@dteam/safe-signer (0.1.0), @extrimian/kms-storage-vault (>=1.1.0, <=1.6.2) +15 more potentially affected by CVE-2026-55102 via hashi-vault-js (>=0.4.11, <=0.4.16)

hashi-vault-js NPM version =0.4.11, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1-beta.1, =3.1.13, =0.1.0, =1.0.0, =1.0.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-55102 Source advisory: OSV:GHSA-5PQ8-3FFP-7W5M...

my-auto-follow (1.0.3) potentially affected by unknown CVE via @dreamguyxeon/libsignal-node (1.0.1)

@dreamguyxeon/libsignal-node NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @dreamguyxeon/libsignal-node and may be impacted: - my-auto-follow 1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-DREAMGUYXEONLIBSIGNALNODE-18748591...

@dreamguyxeon/baileyx (>=1.0.0, <=5.0.0), @rishi56/baileys (1.0.0) +2 more potentially affected by unknown CVE via @dgxeon13/libsignal-node (1.0.0)

@dgxeon13/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @dgxeon13/libsignal-node and may be impacted: - @dreamguyxeon/baileyx =1.0.0, =1.0.0, =1.0.2 - sayan-soket 1.0.0 Source cves: unknown CVE Source advisory:...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73411 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73411 Source advisory: SNYK:JS-SHESCAPE-18752076...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73414 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73414 Source advisory: SNYK:JS-SHESCAPE-18752073...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73412 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73412 Source advisory: SNYK:JS-SHESCAPE-18752072...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: SNYK:JS-SHESCAPE-18752068...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10907 more potentially affected by CVE-2026-73086 via nanoid (>=3.0.0, <=3.3.11)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.1, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.2 and more Source cves: CVE-2026-73086 Source advisory: SNYK:JS-NANOID-18748186...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5825 more potentially affected by CVE-2026-73086 via nanoid (>=4.0.0, <=5.1.9)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-73086 Source advisory: SNYK:JS-NANOID-18748186...

noxleys (>=1.1.1, <=1.1.5) potentially affected by unknown CVE via @noxzacode/libsignal-node (1.0.0)

@noxzacode/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @noxzacode/libsignal-node and may be impacted: - noxleys =1.1.1, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13781...

noxleys (>=1.1.1, <=1.1.5) potentially affected by unknown CVE via @noxzacode/libsignal-node (1.0.0)

@noxzacode/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @noxzacode/libsignal-node and may be impacted: - noxleys =1.1.1, =1.1.5 Source cves: unknown CVE Source advisory: SNYK:JS-NOXZACODELIBSIGNALNODE-18677384...

signalo (>=0.9.0, <=0.10.0) potentially affected by unknown CVE via circular-buffer (2.0.0)

circular-buffer CARGO version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on circular-buffer and may be impacted: - signalo =0.9.0, =0.10.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0256...

sp-im (>=0.2.0, <=0.3.0), yatima-core (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via sp-sized-chunks (0.1.0)

sp-sized-chunks CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sp-sized-chunks and may be impacted: - sp-im =0.2.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0254...

accesskit_consumer (>=0.1.0, <=0.7.1), accesskit_windows (>=0.1.0, <=0.8.0) +1182 more potentially affected by unknown CVE via sized-chunks (>=0.1.3, <=0.6.5)

sized-chunks CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =1.0.5, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.0.1, =0.0.1, =0.2.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0255...

my-auto-follow (1.0.3) potentially affected by unknown CVE via @dreamguyxeon/libsignal-node (1.0.1)

@dreamguyxeon/libsignal-node NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @dreamguyxeon/libsignal-node and may be impacted: - my-auto-follow 1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13931...

3-04-2025-ttm (0.1.0), a2 (>=0.10.5, <=0.10.13) +3314 more potentially affected by CVE-2026-69112 via accelerate (>=0.5.1, <=1.14.0)

accelerate PYPI version =0.5.1, =0.10.5, =5.0.0, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 - aait-store-cut-part-003 0.0.1 - aait-store-cut-part-004 0.0.1 - aait-store-cut-part-005 0.0.1 - aait-store-cut-part-006 0.0.1 - aait-store-cut-part-007 0.0.1 -...

cbtham-feast-az-provider (0.2.299), elemeno-ai-sdk (>=0.0.5, <=0.6.11) +25 more potentially affected by CVE-2026-18947 via feast (>=0.9.3, <=0.65.0)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.0rc3, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =0.4.0 - mlops-ods 0.1.202406281646 and more Source cves: CVE-2026-18947 Source advisory: SNYK:PYTHON-FEAST-18612610...

cbtham-feast-az-provider (0.2.299), elemeno-ai-sdk (>=0.0.5, <=0.6.11) +25 more potentially affected by CVE-2026-18948 via feast (>=0.9.3, <=0.65.0)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.0rc3, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =0.4.0 - mlops-ods 0.1.202406281646 and more Source cves: CVE-2026-18948 Source advisory: SNYK:PYTHON-FEAST-18612609...

cbtham-feast-az-provider (0.2.299), elemeno-ai-sdk (>=0.0.5, <=0.6.11) +25 more potentially affected by CVE-2026-18941 via feast (>=0.9.3, <=0.65.0)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.0rc3, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =0.4.0 - mlops-ods 0.1.202406281646 and more Source cves: CVE-2026-18941 Source advisory: SNYK:PYTHON-FEAST-18612620...

svelte-kit-streak (1.0.0) potentially affected by unknown CVE via kit-map-streak (1.0.0)

kit-map-streak NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kit-map-streak and may be impacted: - svelte-kit-streak 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13724...

svelte-kit-streak (1.0.0) potentially affected by unknown CVE via kit-map-streak (1.0.0)

kit-map-streak NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kit-map-streak and may be impacted: - svelte-kit-streak 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-KITMAPSTREAK-18609761...

agentgui (>=1.0.111, <=1.0.931) potentially affected by unknown CVE via fsbrowse (0.2.28)

fsbrowse NPM version 0.2.28 is affected by a known vulnerability. The following packages have a transitive dependency on fsbrowse and may be impacted: - agentgui =1.0.111, =1.0.931 Source cves: unknown CVE Source advisory: SNYK:JS-FSBROWSE-18609759...

agentgui (>=1.0.111, <=1.0.931) potentially affected by unknown CVE via fsbrowse (0.2.28)

fsbrowse NPM version 0.2.28 is affected by a known vulnerability. The following packages have a transitive dependency on fsbrowse and may be impacted: - agentgui =1.0.111, =1.0.931 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13722...

0x-assert (>=0.0.2, <=0.0.3), 0xauth (>=0.0.5, <=0.1.0) +7324 more potentially affected by CVE-2026-71851 via crypto-js (>=3.1.2, <=3.3.0)

crypto-js NPM version =3.1.2, =0.0.2, =0.0.5, =1.0.0, =1.0.0, =1.34.1, =0.1.0, =4.11.2, =0.0.1, =3.3.9, =3.10.1, =0.0.16-0.1, =0.0.4, =0.0.7 and more Source cves: CVE-2026-71851 Source advisory: SNYK:JS-CRYPTOJS-18599395...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +980 more potentially affected by CVE-2026-71850 via hono (>=3.8.4, <=4.12.33)

hono NPM version =3.8.4, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =5.0.0, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.28.7 and more Source cves: CVE-2026-71850 Source advisory: OSV:GHSA-F23P-VX2J-J53R...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +980 more potentially affected by CVE-2026-71850 via hono (>=3.8.4, <=4.12.33)

hono NPM version =3.8.4, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =5.0.0, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.28.7 and more Source cves: CVE-2026-71850 Source advisory: SNYK:JS-HONO-18592332...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +665 more potentially affected by CVE-2026-71849 via hono (>=4.7.0, <=4.12.33)

hono NPM version =4.7.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.30.7 and more Source cves: CVE-2026-71849 Source advisory: SNYK:JS-HONO-18592333...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +665 more potentially affected by CVE-2026-71849 via hono (>=4.7.0, <=4.12.33)

hono NPM version =4.7.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.30.7 and more Source cves: CVE-2026-71849 Source advisory: OSV:GHSA-79QM-7RJ5-M7R9...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +414 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0-dev.2580522, =0.1.0, =0.3.1, =0.0.0-pr-306-20260707164534, =0.1.0, =0.5.5, =0.17.0, =0.6.0, =0.8.0, =0.5.3, =0.17.0, =0.1.4, =0.0.13, =0.1.5 and more Source cves: CVE-2026-71848 Source advisory: SNYK:JS-HONO-18593786...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +414 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0-dev.2580522, =0.1.0, =0.3.1, =0.0.0-pr-306-20260707164534, =0.1.0, =0.5.5, =0.17.0, =0.6.0, =0.8.0, =0.5.3, =0.17.0, =0.1.4, =0.0.13, =0.1.5 and more Source cves: CVE-2026-71848 Source advisory: OSV:GHSA-54FX-42GC-7VW4...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by CVE-2026-66062 via @sveltejs/kit (>=2.0.0, <=2.70.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-66062 Source advisory: OSV:GHSA-29G2-3RMR-QM68...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by CVE-2026-66062 via @sveltejs/kit (>=2.0.0, <=2.70.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-66062 Source advisory: SNYK:JS-SVELTEJSKIT-18592743...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +13 more potentially affected by CVE-2026-72744 via @nuxt/nitro-server (>=4.4.7, <=4.5.0)

@nuxt/nitro-server NPM version =4.4.7, =3.2.0, =4.5.0-depup.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =4.4.7, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXTNITROSERVER-18593816...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-72744 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-72744 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-72744 Source advisory: OSV:GHSA-7C4V-FWGW-9RF7...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-72744 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: OSV:GHSA-7C4V-FWGW-9RF7...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-72744 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@qingwave/cclens (>=0.1.0, <=0.2.0), nuxt (>=3.21.7, <=3.21.9) potentially affected by CVE-2026-72744 via @nuxt/nitro-server (>=3.21.7, <=3.21.9)

@nuxt/nitro-server NPM version =3.21.7, =0.1.0, =3.21.7, =3.21.9 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXTNITROSERVER-18593816...