11057 matches found
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +644 more potentially affected by CVE-2026-47675 via hono (>=4.0.0, <=4.12.19)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-47675 Source advisory: SNYK:JS-HONO-17055753...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +644 more potentially affected by CVE-2026-47673 via hono (>=4.0.0, <=4.12.19)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-47673 Source advisory: SNYK:JS-HONO-17055751...
17fe-ui23 (>=0.0.0, <=0.0.24), @2kog/pkg-editor (>=0.0.1, <=0.1.3) +714 more potentially affected by CVE-2026-47760 via tinymce (>=6.8.1, <=7.0.1)
tinymce NPM version =6.8.1, =0.0.0, =0.0.1, =12.1.0, =4.1.0, =1.0.0-beta.1, =4.1.2-rc, =1.0.0, =1.1.1 - @amis-adapter/amis-editor-react 0.0.1 - @amis-adapter/vue-amis-editor-webpack 0.1.0 - @amis-adapter/vue-editor2.7 0.0.0 - @amis-adapter/vue2.7 0.0.0 - @anhoang/tinymce-vue 5.1.2-rc -...
@ifanrx/dashboard (>=0.1.1, <=1.3.0), @ithinkdt/editor (>=3.4.11, <=3.5.0) +6 more potentially affected by CVE-2026-47762 via tinymce (>=7.0.1, <=7.5.1)
tinymce NPM version =7.0.1, =0.1.1, =3.4.11, =3.0.7-9, =3.0.0, =4.0.0, =0.2.10, =0.2.19 Source cves: CVE-2026-47762 Source advisory: SNYK:JS-TINYMCE-17056141...
@andrewcturing/todoist (0.0.1), @bento-core/navigator (1.0.0) +57 more potentially affected by CVE-2026-9673 via json-2-csv (>=3.20.0, <=5.5.10)
json-2-csv NPM version =3.20.0, =1.8.0, =5.0.2, =0.0.1, =0.2.3, =0.1.0, =0.1.0, =0.5.1, =1.0.2, =1.3.1, =1.3.1-next.0, =1.4.0, =2.0.1 and more Source cves: CVE-2026-9673 Source advisory: OSV:GHSA-G27C-Q7CP-MHX6...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-45618 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-45618 Source advisory: OSV:GHSA-GF2Q-C269-PQGC...
@agiflowai/aicode-toolkit (>=0.6.0, <=1.1.0), @agiflowai/one-mcp (0.4.0) +103 more potentially affected by CVE-2026-45617 via liquidjs (>=10.15.0, <=10.25.7)
liquidjs NPM version =10.15.0, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =1.0.1-beta.0, =1.6.3, =1.6.6 and more Source cves: CVE-2026-45617 Source advisory: SNYK:JS-LIQUIDJS-16960001...
@userfront/bell (>=5.2.3-0, <=6.0.0), ffc-auth (>=0.1.0-alpha.1, <=0.13.0-alpha.2) +1 more potentially affected by CVE-2026-44979 via @hapi/wreck (>=18.0.0, <=18.0.1)
@hapi/wreck NPM version =18.0.0, =5.2.3-0, =0.1.0-alpha.1, =1.0.2, =1.0.4 Source cves: CVE-2026-44979 Source advisory: OSV:GHSA-VHJM-W67Q-G75C...
@userfront/bell (>=5.2.3-0, <=6.0.0), ffc-auth (>=0.1.0-alpha.1, <=0.13.0-alpha.2) +1 more potentially affected by CVE-2026-44979 via @hapi/wreck (>=18.0.0, <=18.0.1)
@hapi/wreck NPM version =18.0.0, =5.2.3-0, =0.1.0-alpha.1, =1.0.2, =1.0.4 Source cves: CVE-2026-44979 Source advisory: SNYK:JS-HAPIWRECK-16881586...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44646 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44646 Source advisory: SNYK:JS-LIQUIDJS-1688788...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44644 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44644 Source advisory: SNYK:JS-LIQUIDJS-1688788...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44644 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44644 Source advisory: OSV:GHSA-2QV6-9WX5-CWV4...
@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.198), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.198) +1 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.1.0, <=2.1.13)
@fedify/fedify NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.13 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...
@fedify/amqp (0.2.0-dev.12), @fedify/botkit (>=0.3.0-dev.125, <=0.4.0-dev.175) +3 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=1.5.0, <=1.9.2)
@fedify/fedify NPM version =1.5.0, =0.3.0-dev.125, =0.4.0-dev.167, =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...
@edoday/react-sdk (>=1.2.0, <=1.2.1), weavedb-client (>=0.45.0, <=0.45.4) +4 more potentially affected by unknown CVE via weavedb-base (0.45.4)
weavedb-base NPM version 0.45.4 is affected by a known vulnerability. The following packages have a transitive dependency on weavedb-base and may be impacted: - @edoday/react-sdk =1.2.0, =0.45.0, =0.45.0, =0.45.0, =0.45.0, =0.45.1, =0.45.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-47...
@aquacloud_ai/aqc-charts (>=0.1.1, <=0.1.3), @arkxos/arkos-system (>=0.1.1, <=0.1.10) +68 more potentially affected by CVE-2026-45249 via echarts (6.0.0)
echarts NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on echarts and may be impacted: - @aquacloudai/aqc-charts =0.1.1, =0.1.1, =5.1.121, =0.1.1, =1023.48.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =0.19.0,...
biz.devstack.springframework.boot:spring-boot-starter-api (>=1.0.0, <=1.2.1), biz.devstack:spring-boot-starter-api-quickstart (>=1.0.0, <=1.0.4) +1133 more potentially affected by CVE-2026-9370 via com.github.ulisesbocchio:jasypt-spring-boot (>=1.2, <=4.0.4)
com.github.ulisesbocchio:jasypt-spring-boot MAVEN version =1.2, =1.0.0, =1.0.0, =0.5.0, =0.1.0, =0.3.0, =0.5.0, =0.3.0, =0.3.0, =0.2.0, =0.2.0, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-9370 Source advisory: SNYK:JAVA-COMGITHUBULISESBOCCHIO-16873884...
org.webjars.npm:coreui__coreui (4.2.1), org.webjars.npm:css-loader (>=2.1.0, <=6.7.2) +19 more potentially affected by CVE-2026-9358 via org.webjars.npm:postcss-selector-parser (>=4.0.0-rc.1, <=7.1.0)
org.webjars.npm:postcss-selector-parser MAVEN version =4.0.0-rc.1, =2.1.0, =3.1.0, =7.0.1, =4.0.2, =2.0.6, =2.1.0, =4.1.2, =6.2.0 and more Source cves: CVE-2026-9358 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16873883...
@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-47138 via parse-server (>=9.6.0-alpha.37, <=9.8.0)
parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-47138 Source advisory: OSV:GHSA-38M6-82C8-4XFM...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +28157 more potentially affected by CVE-2026-9277 via shell-quote (>=1.3.3, <=1.8.3)
shell-quote NPM version =1.3.3, =1.0.1, =1.1.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...
@airalogy/airalogy-engine (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-46703 via @boxlite-ai/boxlite (0.8.2)
@boxlite-ai/boxlite NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @boxlite-ai/boxlite and may be impacted: - @airalogy/airalogy-engine =0.0.1, =0.0.5 Source cves: CVE-2026-46703 Source advisory: OSV:GHSA-F396-4RP4-7V2J...
360shitu (0.1.0), 4icloud-engine (1.0.1) +10914 more potentially affected by CVE-2026-46625 via js-cookie (>=2.1.0, <=3.0.5)
js-cookie NPM version =2.1.0, =1.0.6, =0.1.0, =0.37.2, =0.37.2, =0.0.1, =1.0.0, =1.0.0-alpha, =1.0.0-alpha, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-46625 Source advisory: SNYK:JS-JSCOOKIE-17816999...
antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24206 via nvidia-pytriton (0.7.0)
nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.7.0 Source cves: CVE-2026-24206 Source advisory:...
antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24210 via nvidia-pytriton (0.7.0)
nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.7.0 Source cves: CVE-2026-24210 Source advisory:...
antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24208 via nvidia-pytriton (0.7.0)
nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.7.0 Source cves: CVE-2026-24208 Source advisory:...
antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24209 via nvidia-pytriton (0.7.0)
nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.7.0 Source cves: CVE-2026-24209 Source advisory:...
create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-46417 via @angular/platform-server (>=21.1.2, <=21.2.9)
@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-46417 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-16770437...
@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-46417 via @angular/platform-server (>=20.0.0, <=20.3.19)
@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-46417 Source advisory: OSV:GHSA-RFH7-FXQC-Q52V...
@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8) potentially affected by CVE-2026-46417 via @angular/platform-server (19.2.18)
@angular/platform-server NPM version 19.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @cosla/sensemaking-web-ui =1.0.5, =1.0.8 Source cves: CVE-2026-46417 Source advisory: OSV:GHSA-RFH7-FXQC-Q52V...
@libp2p/daemon (>=6.0.0-049bfa0fa, <=6.0.23-9c3c0b22a), @libp2p/daemon-server (>=9.0.0-049bfa0fa, <=9.0.23-9c3c0b22a) +4 more potentially affected by CVE-2026-45783 via @libp2p/kad-dht (>=16.0.0-049bfa0fa, <=16.2.5-5692f3f16)
@libp2p/kad-dht NPM version =16.0.0-049bfa0fa, =6.0.0-049bfa0fa, =9.0.0-049bfa0fa, =0.2.1, =0.2.1, =0.2.2 Source cves: CVE-2026-45783 Source advisory: SNYK:JS-LIBP2PKADDHT-16770413...
@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +20 more potentially affected by CVE-2026-46342 via nuxt (>=4.0.0-rc.0, <=4.4.4)
nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...
@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +78 more potentially affected by CVE-2026-46342 via nuxt (>=3.1.2, <=3.20.1)
nuxt NPM version =3.1.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...
@142vip/fairy-cli (>=0.0.3-alpha.19, <=0.0.3-alpha.28), @better-builds/turbo-tools (>=6.0.0, <=7.4.4) +10 more potentially affected by CVE-2026-45773 via turbo (>=2.0.1, <=2.9.12)
turbo NPM version =2.0.1, =0.0.3-alpha.19, =6.0.0, =1.0.0, =0.0.234, =0.3.0, =1.5.1, =0.0.0, =0.3.2, =0.5.0, =1.1.0, =1.4.1 - kbc-cinema-custom-app 1.0.0 Source cves: CVE-2026-45773 Source advisory: OSV:GHSA-HCF7-66RW-9F5R...
armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)
diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q8X8-JRHJ-FH9P...
@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1054 more potentially affected by CVE-2026-45740 via protobufjs (>=8.0.0, <=8.0.3)
protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-45740 Source advisory: OSV:GHSA-JGGG-4JG4-V7C6...
@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +20 more potentially affected by CVE-2026-45669 via nuxt (>=4.0.0-rc.0, <=4.4.4)
nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-45669 Source advisory: OSV:GHSA-FX6J-W5W5-H468...
@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +20 more potentially affected by CVE-2026-45669 via nuxt (>=4.0.0-rc.0, <=4.4.4)
nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-45669 Source advisory: SNYK:JS-NUXT-16770149...
@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +53 more potentially affected by CVE-2026-45669 via nuxt (>=3.4.3, <=3.20.1)
nuxt NPM version =3.4.3, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.12.0-rc.7 and more Source cves: CVE-2026-45669 Source advisory: OSV:GHSA-FX6J-W5W5-H468...
-fides-amor-et-lux (1.0.0), -price-checker (>=1.0.0, <=1.0.5) +33514 more potentially affected by CVE-2026-45736 via ws (>=8.0.0, <=8.20.0)
ws NPM version =8.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0-beta.3 - 0g-vibekit 0.1.0 - 0g-zksettlement-client 1.0.0 - 0wcc9yywcywy 1.0.0 and more Source cves: CVE-2026-45736 Source advisory: OSV:GHSA-58QX-3VCG-4XPX...
@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +591 more potentially affected by CVE-2026-8159 via multiparty (>=4.0.0, <=4.2.3)
multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8159 Source advisory: OSV:GHSA-65X3-RW7Q-GX94...
@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +591 more potentially affected by CVE-2026-8161 via multiparty (>=4.0.0, <=4.2.3)
multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8161 Source advisory: SNYK:JS-MULTIPARTY-16790691...
@aws/nx-plugin (>=0.105.0, <=1.0.0-rc.2), @breadstone-infrastructure/nx-tasks (>=0.0.237, <=0.0.289) +46 more potentially affected by CVE-2026-45149 via brace-expansion (>=5.0.2, <=5.0.5)
brace-expansion NPM version =5.0.2, =0.105.0, =0.0.237, =0.0.237, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =23.0.0-pr.35465.2bc2643 and more Source cve...
@aws/nx-plugin (>=0.105.0, <=1.0.0-rc.2), @breadstone-infrastructure/nx-tasks (>=0.0.237, <=0.0.289) +46 more potentially affected by CVE-2026-45149 via brace-expansion (>=5.0.2, <=5.0.5)
brace-expansion NPM version =5.0.2, =0.105.0, =0.0.237, =0.0.237, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =23.0.0-pr.35465.2bc2643 and more Source cve...
a1 (>=1.0.1, <=1.0.2), apfsds-protocol (>=0.1.0, <=0.4.0) +125 more potentially affected by unknown CVE via rkyv (0.8.2)
rkyv CARGO version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on rkyv and may be impacted: - a1 =1.0.1, =0.1.0, =0.9.0, =0.1.0, =0.2.1, =0.1.0, =0.4.0, =0.9.0, =0.5.0, =0.5.0, =2.0.0-alpha.1, =0.1.2, =0.2.24, =0.2.27 and more Source cves: unkno...
@alstar/studio (0.0.0-beta.20), @better-auth/cli (>=1.0.0-canary.2, <=1.4.6-beta.2) +79 more potentially affected by CVE-2026-45364 via better-auth (>=1.0.0, <=1.4.16)
better-auth NPM version =1.0.0, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.26, =1.3.27, =0.18.0, =0.5.2, =1.0.2, =1.0.2, =1.0.2, =2.0.3 and more Source cves: CVE-2026-45364 Source advisory: OSV:GHSA-P6V2-XCPG-H6XW...
assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +9 more potentially affected by CVE-2026-46673 via russh-cryptovec (0.7.3)
russh-cryptovec CARGO version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on russh-cryptovec and may be impacted: - assistantdaemon 0.1.0 - async-ssh2-tokio =0.2.0, =0.1.0, =0.1.0, =0.34.0-beta.1, =0.22.0-beta.1, =0.2.0, =0.1.0, =0.4.1 - sshrpc...
org.webjars.npm:event-calendar__core (>=3.1.0, <=3.7.1), org.webjars.npm:event-calendar__day-grid (3.6.2) +2 more potentially affected by CVE-2026-42567 via org.webjars.npm:svelte (>=3.20.1, <=4.2.19)
org.webjars.npm:svelte MAVEN version =3.20.1, =3.1.0, =3.1.0, =3.6.2 - org.webjars.npm:stylesheet-switcher 3.0.0 Source cves: CVE-2026-42567 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16697649...
7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +1850 more potentially affected by CVE-2026-44990 via sanitize-html (>=2.1.0, <=2.17.3)
sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =5.0.2, =0.0.1, =1.0.0, =3.0.0, =1.3.0, =1.0.0, =0.2.0-a0, =1.0.0, =3.7.0, =3.19.3 and more Source cves: CVE-2026-44990 Source advisory: SNYK:JS-SANITIZEHTML-16697325...
@nivinjoseph/n-config (2.0.4), @nivinjoseph/n-data (4.0.3) +53 more potentially affected by CVE-2026-44990 via sanitize-html (2.17.3)
sanitize-html NPM version 2.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - @nivinjoseph/n-config 2.0.4 - @nivinjoseph/n-data 4.0.3 - @nivinjoseph/n-date 1.0.1 - @nivinjoseph/n-domain 3.0.6 - @nivinjoseph/n-eda...
@avorati/strapi-plugin-preview (1.0.1), @catchmexz/fedin-cms (>=5.30.1, <=5.30.2) +10 more potentially affected by CVE-2026-22707 via @strapi/upload (>=5.0.0, <=5.33.2)
@strapi/upload NPM version =5.0.0, =5.30.1, =2.0.0, =0.0.1-rc1, =2.0.0, =5.0.0-beta.6, =3.0.0-beta.1, =3.0.0-beta.2 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2026-22707 Source advisory: SNYK:JS-STRAPIUPLOAD-16691317...