03-gs-ee-6 (0.3.5), @alauda-fe/dynamic-plugin-sdk-rspack (>=0.0.1-alpha.5, <=0.0.1-alpha.12) +3099 more potentially affected by CVE-2026-69152 via brace-expansion (>=4.0.0, <=5.0.8)

brace-expansion NPM version =4.0.0, =0.0.1-alpha.5, =0.0.4, =1.1.7, =1.1.8 - @angranit/fantom-virma 0.1.0 - @angranit/first-step-to-get-tea 0.1.0 - @angranit/hapeipons 1.1.2 - @angranit/nearly-vm 0.1.0 - @angranit/newme-project 0.1.0 - @angranit/npmjs-for-tea-project 0.1.0 - @angranit/phantompirs...

@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +21 more potentially affected by CVE-2026-69151 via @angular/compiler (>=21.0.0, <=21.2.17)

@angular/compiler NPM version =21.0.0, =1.0.8, =6.1.182-alpha, =6.1.182-alpha, =0.1.0-beta.54, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =1.0.0, =4.4.0-beta.2, =1.0.0-next.27766, =1.0.77-rc.1, =0.0.1, =0.5.11 - foliokit 0.0.0 and more Source cves: CVE-2026-69151 Source advisory:...

com.amazonaws.s3:jets3t (0.5.0), org.bouncycastle:bcpg-jdk12 (130) +2 more potentially affected by CVE-2026-12860 via org.bouncycastle:bcprov-jdk12 (130)

org.bouncycastle:bcprov-jdk12 MAVEN version 130 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcprov-jdk12 and may be impacted: - com.amazonaws.s3:jets3t 0.5.0 - org.bouncycastle:bcpg-jdk12 130 - org.vafer:jdeb =0.2, =0.2.1, =0.5.0...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.h2o:h2o-app (>=0.1.22, <=0.1.25) +1041 more potentially affected by CVE-2026-12860 via org.bouncycastle:bcprov-jdk15 (>=1.38, <=1.46)

org.bouncycastle:bcprov-jdk15 MAVEN version =1.38, =1.3, =0.1.22, =0.1.22, =1.0.0, =2.1.0, =1.0.1, =4.2.0, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.0.3, =1.3.3 and more Source cves: CVE-2026-12860 Source advisory:...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30572 more potentially affected by CVE-2026-58061 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2026-58061 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519133...

com.amazonaws.s3:jets3t (0.5.0), org.bouncycastle:bcpg-jdk12 (130) +2 more potentially affected by CVE-2026-58061 via org.bouncycastle:bcprov-jdk12 (130)

org.bouncycastle:bcprov-jdk12 MAVEN version 130 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcprov-jdk12 and may be impacted: - com.amazonaws.s3:jets3t 0.5.0 - org.bouncycastle:bcpg-jdk12 130 - org.vafer:jdeb =0.2, =0.2.1, =0.5.0...

com.walterjwhite.java.examples:ssh (0.0.17), com.walterjwhite.java.modules.linux-builder.modules.cli.providers:cdi (0.0.17) +24 more potentially affected by CVE-2026-58063 via org.bouncycastle:bcprov-ext-jdk14 (>=1.45, <=1.72)

org.bouncycastle:bcprov-ext-jdk14 MAVEN version =1.45, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-58063 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519082...

com.walterjwhite.java.examples:ssh (0.0.17), com.walterjwhite.java.modules.linux-builder.modules.cli.providers:cdi (0.0.17) +24 more potentially affected by CVE-2026-13586 via org.bouncycastle:bcprov-ext-jdk14 (>=1.45, <=1.72)

org.bouncycastle:bcprov-ext-jdk14 MAVEN version =1.45, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-13586 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518988...

br.com.swconsultoria:java-cte (>=3.00.4, <=3.00.8), br.com.swconsultoria:java-mdfe (>=3.00.3, <=3.00.4) +1215 more potentially affected by CVE-2026-13506 via org.bouncycastle:bcprov-jdk16 (>=1.38, <=1.46)

org.bouncycastle:bcprov-jdk16 MAVEN version =1.38, =3.00.4, =3.00.3, =4.00.10, =1.0, =2.0, =1.2.4, =2.0.0, =2.1-alpha1, =2.1-alpha1, =2.10.0, =2.10.0, =2.11.0 and more Source cves: CVE-2026-13506 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519015...

com.amazonaws.s3:jets3t (0.5.0), org.bouncycastle:bcpg-jdk12 (130) +2 more potentially affected by CVE-2026-13506 via org.bouncycastle:bcprov-jdk12 (130)

org.bouncycastle:bcprov-jdk12 MAVEN version 130 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcprov-jdk12 and may be impacted: - com.amazonaws.s3:jets3t 0.5.0 - org.bouncycastle:bcpg-jdk12 130 - org.vafer:jdeb =0.2, =0.2.1, =0.5.0...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30572 more potentially affected by CVE-2026-13586 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2026-13586 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518980...

com.walterjwhite.java.examples:ssh (0.0.17), com.walterjwhite.java.modules.linux-builder.modules.cli.providers:cdi (0.0.17) +24 more potentially affected by CVE-2026-14682 via org.bouncycastle:bcprov-ext-jdk14 (>=1.45, <=1.72)

org.bouncycastle:bcprov-ext-jdk14 MAVEN version =1.45, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-14682 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518098...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +21468 more potentially affected by CVE-2026-13586 via org.bouncycastle:bcpkix-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcpkix-jdk15on MAVEN version =1.47, =1.0.1, =0.2.3, =4.4.0.0, =0.1.12, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-13586 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518995...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30572 more potentially affected by CVE-2026-12185 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2026-12185 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512523...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +21468 more potentially affected by CVE-2026-59642 via org.bouncycastle:bcpkix-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcpkix-jdk15on MAVEN version =1.47, =1.0.1, =0.2.3, =4.4.0.0, =0.1.12, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-59642 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512973...

amdonov.ospackage-init:amdonov.ospackage-init.gradle.plugin (>=0.1.0, <=0.5.0), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +1653 more potentially affected by CVE-2026-59649 via org.bouncycastle:bcpg-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcpg-jdk15on MAVEN version =1.46, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =2023.06.07.114626-93b9d6f, =0.1.3-20210127.1838-76ab4fc, =0.1.4-20220614.0152-5ae0eef, =1.0.0-m11, =1.0.0-m6, =1.0.0-m11, =0.0.1-m20, =0.0.1-m20, =0.0.1-m27, =1.0.0-m11,...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-8763 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-8763 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512786...

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0228...

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0226...

svelte-streak-board (1.0.0) potentially affected by unknown CVE via streak-core-lib (1.0.0)

streak-core-lib NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streak-core-lib and may be impacted: - svelte-streak-board 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-STREAKCORELIB-18503763...

@merceas/anchor (>=0.32.1, <=0.32.3) potentially affected by unknown CVE via @merceas/cross-fetch (3.1.9)

@merceas/cross-fetch NPM version 3.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @merceas/cross-fetch and may be impacted: - @merceas/anchor =0.32.1, =0.32.3 Source cves: unknown CVE Source advisory: SNYK:JS-MERCEASCROSSFETCH-18487713...

@aikidosec/broker-client (>=1.0.47, <=1.0.50), @clickview/curator (>=1.100.0-rc.0, <=1.100.0-rc.2) +3 more potentially affected by CVE-2026-54272 via ip-address (>=10.1.1, <=10.2.0)

ip-address NPM version =10.1.1, =1.0.47, =1.100.0-rc.0, =0.1.3, =7.6.5-beta.0, =8.0.3 Source cves: CVE-2026-54272 Source advisory: SNYK:JS-IPADDRESS-18343249...

@0xd541ecb3/byte-babe (>=1.0.0, <=1.2.1), @514labs/aurora-mcp (>=0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, <=0.0.64) +763 more potentially affected by CVE-2026-55968 via thrift (>=0.6.0-1, <=0.23.0)

thrift NPM version =0.6.0-1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.6, =0.0.0-dev, =1.0.0, =0.9.0, =0.3.0, =0.0.1, =0.2.0, =0.2.0, =0.1.0, =1.0.0-beta.1, =1.0.0-beta.6 and more Source cves: CVE-2026-55968 Source advisory: SNYK:JS-THRIFT-18388780...

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0216...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +116 more potentially affected by CVE-2026-73562 via mongoose (>=7.0.0, <=7.8.8)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =1.0.0, =1.0.6-beta.0, =0.2.0-alpha.1, =0.2.0-alpha.0, =0.0.0, =1.0.2, =1.0.0, =7.6.10, =7.8.6 and more Source cves: CVE-2026-73562 Source advisory: OSV:GHSA-664H-WQGQ-64GW...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +419 more potentially affected by unknown CVE via mongoose (>=6.0.1, <=6.13.9)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.1.16 and more Source cves: unknown CVE Source advisory: SNYK:JS-MONGOOSE-18319533...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by unknown CVE via @sveltejs/kit (>=2.0.0, <=2.65.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVELTEJSKIT-18319512...

@agent-native/core (>=0.26.5, <=0.157.8), @agent-native/skills (>=0.2.9, <=0.2.558) +225 more potentially affected by CVE-2026-67327 via better-auth (>=1.1.3, <=1.6.21)

better-auth NPM version =1.1.3, =0.26.5, =0.2.9, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.1.4 and more Source cves: CVE-2026-67327 Source advisory: OSV:GHSA-QQ9H-G4JM-XGF3...

@accounter/client (>=0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, <=0.0.10-alpha-20260124220016-4e2b62f7c68c0c6fd69aea71f714b37188ddd976), @boxyhq/react-ui (3.5.2) +64 more potentially affected by CVE-2026-53668 via react-router (>=7.9.6, <=7.12.0-pre.0)

react-router NPM version =7.9.6, =0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, =1.0.1-MON-198407-add-selinux-sudo-check.0, =3.4.9, =0.1.9, =1.21.9, =1.21.9, =0.3.1, =1.5.0, =0.4.0, =0.0.5, =0.0.7 and more Source cves: CVE-2026-53668 Source advisory:...

@aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.6), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.2) +265 more potentially affected by CVE-2026-53667 via react-router (>=7.11.0, <=7.17.0)

react-router NPM version =7.11.0, =1.0.0, =1.0.1, =0.0.9-alpha-20251217170854-13a5505369f22d85f29bcbbbe455c23672e2aca3, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source...

@depup/prisma (7.9.0-depup.0), @depup/prisma__dev (0.24.14-depup.40) +22 more potentially affected by CVE-2026-47219 via find-my-way (>=9.3.0, <=9.6.0)

find-my-way NPM version =9.3.0, =1.0.3-alpha.0b30e6d.0, =11.1.11, =7.8.0-lossless.12, =0.1.4, =0.2.2, =1.10.0, =11.1.0, =0.7.0, =0.8.0 and more Source cves: CVE-2026-47219 Source advisory: SNYK:JS-FINDMYWAY-18313040...

@depup/prisma (7.9.0-depup.0), @depup/prisma__dev (0.24.14-depup.40) +22 more potentially affected by CVE-2026-47219 via find-my-way (>=9.3.0, <=9.6.0)

find-my-way NPM version =9.3.0, =1.0.3-alpha.0b30e6d.0, =11.1.11, =7.8.0-lossless.12, =0.1.4, =0.2.2, =1.10.0, =11.1.0, =0.7.0, =0.8.0 and more Source cves: CVE-2026-47219 Source advisory: OSV:GHSA-C96F-X56V-GQ3H...

@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)

n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18323973...

@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @a700/n8n-nodes-agent700 (>=1.0.5, <=1.0.7) +2136 more potentially affected by unknown CVE via n8n-workflow (>=2.0.0, <=2.31.2)

n8n-workflow NPM version =2.0.0, =1.0.0, =1.0.5, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.2.2, =0.3.6, =0.1.0, =1.0.0, =1.3.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NWORKFLOW-18323974...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.249, <=2.1.0-alpha.251) +7 more potentially affected by unknown CVE via @vitest/browser (>=3.0.5, <=3.2.4)

@vitest/browser NPM version =3.0.5, =0.0.1, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =3.8.0, =1.0.1, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: SNYK:JS-VITESTBROWSER-18171374...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +326 more potentially affected by unknown CVE via @hono/node-server (>=1.0.2, <=1.19.14)

@hono/node-server NPM version =1.0.2, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.3.1, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.27, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.66, =1.0.25-beta.0, =1.0.44 and more Source cves: unknown CVE Source advisory: OSV:GHSA-FRVP-7C67-39W9...

astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by CVE-2026-59729 via astro (>=7.0.2, <=7.0.3)

astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: CVE-2026-59729 Source advisory: SNYK:JS-ASTRO-18085589...

@whalent/agent (0.3.257) potentially affected by unknown CVE via @whalent/agent-core (0.3.257)

@whalent/agent-core NPM version 0.3.257 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.257 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.261) potentially affected by unknown CVE via @whalent/agent-core (0.3.261)

@whalent/agent-core NPM version 0.3.261 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.261 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

agentverse (0.1.8.1), airoboros (2.1.1) +34 more potentially affected by CVE-2026-6608 via fschat (>=0.2.2, <=0.2.36)

fschat PYPI version =0.2.2, =0.3.0, =0.0.1, =1.1.0, =1.1.0, =0.1.1, =0.1.1, =0.9.0.8, =1.0.0, =1.1.4 and more Source cves: CVE-2026-6608 Source advisory: SNYK:PYTHON-FSCHAT-17971638...

@mockoon/cli (>=9.0.0, <=9.6.1), @mockoon/serverless (>=9.0.0, <=9.6.1) +2 more potentially affected by CVE-2026-59149 via @mockoon/commons-server (>=9.0.0, <=9.6.1)

@mockoon/commons-server NPM version =9.0.0, =9.0.0, =9.0.0, =0.0.1, =0.30.0, =0.40.0 Source cves: CVE-2026-59149 Source advisory: SNYK:JS-MOCKOONCOMMONSSERVER-17954402...

magique-ai (>=0.1.0, <=0.4.3), pantheon-agents (>=0.3.0, <=0.3.3) +2 more potentially affected by unknown CVE via magique (0.6.7)

magique PYPI version 0.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on magique and may be impacted: - magique-ai =0.1.0, =0.3.0, =0.1.1, =0.5.0, =0.5.4 Source cves: unknown CVE Source advisory: SNYK:PYTHON-MAGIQUE-17220140...

async-std-resolver (>=0.25.0-alpha.1, <=0.25.0-alpha.5), ezk-sip-ua (>=0.5.0, <=0.7.1) +5 more potentially affected by unknown CVE via hickory-proto (>=0.25.0-alpha.1, <=0.25.0-alpha.5)

hickory-proto CARGO version =0.25.0-alpha.1, =0.25.0-alpha.1, =0.5.0, =0.25.0-alpha.1, =0.25.0-alpha.5 - hickory-resolver 0.25.0-alpha.1 - hickory-server 0.25.0-alpha.1 - shadowsocks 1.22.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3V94-MW7P-V465...

fagoon-upgrade (>=2.0.0, <=2.1.7), gpt-researcher-mcp (>=0.1.0, <=0.1.5) +2 more potentially affected by CVE-2026-5631 via gpt-researcher (>=0.14.4, <=0.16.0)

gpt-researcher PYPI version =0.14.4, =2.0.0, =0.1.0, =2.1.6, =2.1.8 Source cves: CVE-2026-5631 Source advisory: SNYK:PYTHON-GPTRESEARCHER-15917487...

@aaquib/whatsasenanpm (1.3.5), @alexandersen01/sharepoint-mcp-server-better (0.3.23) +86 more potentially affected by CVE-2026-26832 via node-tesseract-ocr (>=0.1.0, <=2.2.1)

node-tesseract-ocr NPM version =0.1.0, =1.0.10, =0.0.1, =2.3.50-snapshot-1724322551764, =2.0.0, =0.0.1, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-26832 Source advisory: SNYK:JS-NODETESSERACTOCR-15874141...

ifood2-github-io (9.9.9) potentially affected by unknown CVE via ifood-github-io (9.9.9)

ifood-github-io NPM version 9.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ifood-github-io and may be impacted: - ifood2-github-io 9.9.9 Source cves: unknown CVE Source advisory: SNYK:JS-IFOODGITHUBIO-16300296...

org.webjars.npm:nestjs__platform-express (>=8.4.7, <=9.0.0-next.2) potentially affected by CVE-2026-3520 via org.webjars.npm:multer (1.4.4-lts.1)

org.webjars.npm:multer MAVEN version 1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2026-3520 Source advisory:...

actix-web-csp (0.1.0), adguard-tui (>=0.9.0, <=1.5.0) +662 more potentially affected by unknown CVE via lru (>=0.9.0, <=0.15.0)

lru CARGO version =0.9.0, =0.9.0, =0.0.24, =0.0.23, =0.1.0, =1.0.0, =0.4.0, =0.1.0, =0.1.0, =0.1.3, =0.3.1 - anni-repo 0.4.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0002...

cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (>=1.0.0, <=1.0.1), com.alibaba.fastjson2:fastjson2-extension (>=2.0.27, <=2.0.64) +46 more potentially affected by CVE-2025-12183 via org.lz4:lz4-pure-java (1.8.0)

org.lz4:lz4-pure-java MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.lz4:lz4-pure-java and may be impacted: - cc.ddrpa.dorian.polystash:polystash-spring-boot-starter =1.0.0, =2.0.27, =0.3.1, =0.40.8-public, =0.40.8-public,...

400par (1.1.1), abadatest1 (1.1.1) +160 more potentially affected by unknown CVE via siddheshtea (1.1.8)

siddheshtea NPM version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on siddheshtea and may be impacted: - 400par 1.1.1 - abadatest1 1.1.1 - adani1 1.1.1 - akhil1 1.1.1 - akhiyann1 1.1.1 - amalprotest44 1.1.1 - ambani1 1.1.1 - amey3 1.1.1 - amey4...