ifood2-github-io (9.9.9) potentially affected by unknown CVE via ifood-github-io (9.9.9)

ifood-github-io NPM version 9.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ifood-github-io and may be impacted: - ifood2-github-io 9.9.9 Source cves: unknown CVE Source advisory: SNYK:JS-IFOODGITHUBIO-16300296...

@amedia/brick-mcp (>=0.0.0-vSNAPSHOT-20260217144000, <=1.0.0), @area15/ticket-component (0.1.0) +107 more potentially affected by CVE-2026-3419 via fastify (>=5.7.2, <=5.7.4)

fastify NPM version =5.7.2, =0.0.0-vSNAPSHOT-20260217144000, =0.5.2, =0.5.2, =0.5.2, =0.5.2, =0.2.11, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.11.6, =5.1.19, =2.21.2, =2.21.2, =2.21.3 and more Source cves: CVE-2026-3419 Source advisory: SNYK:JS-FASTIFY-15428269...

5ug-cli (>=1.0.72, <=1.4.0), @343dev/optimizt (6.0.0) +86 more potentially affected by CVE-2026-29074 via svgo (>=2.1.0, <=2.8.0)

svgo NPM version =2.1.0, =1.0.72, =1.1.2, =2.0.0-fix-trigger-remove-colors-config-e26731597751d1581014163b7e73df159cf80be3.1, =0.0.2-0, =4.55.0, =2.12.3-canary.621.15219.0, =2.1.0-beta-1, =2.1.0-beta-1, =2.1.8, =5.0.0, =0.0.1, =2.7.4, =3.59.1--canary.1316.b3452bb.0, =4.0.0--canary.2146.fe4f461.0...

@3t-transform/threeteeui (>=1.5.1, <=1.11.0), @8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4) +1256 more potentially affected by CVE-2025-15599 via dompurify (>=3.0.0, <=3.2.6)

dompurify NPM version =3.0.0, =1.5.1, =0.18.0-beta.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =1.0.0, =4.4.0-rc1, =6.4.10, =5.1.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2, =1.0.9 and more Source cves: CVE-2025-15599 Source advisory: SNYK:JS-DOMPURIFY-15371386...

@atlassian/aui (>=9.3.22, <=10.0.0-M02), @charcoal-ui/icons (>=3.16.0, <=3.21.0) +116 more potentially affected by CVE-2025-15599 via dompurify (>=2.5.4, <=2.5.8)

dompurify NPM version =2.5.4, =9.3.22, =3.16.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240719153432, =0.0.0-fec-156-react19-20250116105607,...

ai-dynamo (>=0.1.0, <=0.3.0), bento-sgl-router (>=0.0.1, <=0.0.6) +31 more potentially affected by CVE-2026-27905 via bentoml (>=0.9.2, <=1.4.39)

bentoml PYPI version =0.9.2, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.2.3, =0.0.1, =0.0.10, =0.1.0, =0.2.0, =0.0.1, =0.3.12.dev20240709150559, =0.3.52 and more Source cves: CVE-2026-27905 Source advisory: SNYK:PYTHON-BENTOML-15372202...

@bechara/crux (>=6.0.0-alpha.1, <=6.6.2), @cappa/cli (>=0.1.0, <=0.7.1) +11 more potentially affected by CVE-2026-2880 via @fastify/middie (>=9.0.2, <=9.1.0)

@fastify/middie NPM version =9.0.2, =6.0.0-alpha.1, =0.1.0, =0.1.0, =1.0.0-develop-pedago.0, =1.0.11, =0.1.51, =1.0.36, =11.0.0-next.1, =1.3.0, =5.0.0-beta.36, =0.6.1-dev, =1.1.48 Source cves: CVE-2026-2880 Source advisory: OSV:GHSA-8P85-9QPW-FWGW...

@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), @turnipxenon/pineapple (>=5.0.0-alpha.1, <=5.0.0-alpha.5) +1 more potentially affected by unknown CVE via @sveltejs/kit (>=2.49.0, <=2.49.5)

@sveltejs/kit NPM version =2.49.0, =0.0.137, =5.0.0-alpha.1, =1.12.2, =1.12.3 Source cves: unknown CVE Source advisory: OSV:GHSA-FPG4-JHQR-589C...

@0xyy/elpis (>=1.0.0, <=1.0.2), @10xsai/cloudflare-router-nx-plugin (1.0.0) +1508 more potentially affected by CVE-2026-27959 via koa (>=2.0.0, <=2.16.3)

koa NPM version =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.1.3 - @ahua0920/elpis 1.0.0 and more Source cves: CVE-2026-27959 Source advisory: OSV:GHSA-7GCC-R8M5-44QM...

@0x590fab/sdcor2 (>=4.2.1, <=4.4.0), @cenk1cenk2/renovate-config (>=2.2.33, <=2.3.94) +22 more potentially affected by CVE-2026-27903 via minimatch (>=6.0.0, <=6.2.0)

minimatch NPM version =6.0.0, =4.2.1, =2.2.33, =0.2.6-alpha-20230114225627-66f5d9eac, =0.1.7-alpha-20230114225627-66f5d9eac, =0.15.7-alpha-20230114225627-66f5d9eac, =0.1.0, =3.108.8--canary.1.4727068200.0, =0.0.0, =1.12.0, =1.0.0-beta.13, =0.36.6-0, =0.36.6-0, =0.39.3-0 - editorconfig 1.0.2 and...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02.aula (1.0.0) +55782 more potentially affected by CVE-2026-27903 via minimatch (>=3.0.0, <=3.1.2)

minimatch NPM version =3.0.0, =1.0.1, =1.1.0 - 02.aula 1.0.0 - 0726react 0.1.1 - 08cms 1.0.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 -...

@graphql-mesh/plugin-rate-limit (>=0.2.23-alpha-20230403140649-57714f1dd, <=1.0.0), @graphql-mesh/plugin-snapshot (>=0.1.24-alpha-20230403140649-57714f1dd, <=1.0.0) +13 more potentially affected by CVE-2026-27904 via minimatch (>=8.0.2, <=8.0.4)

minimatch NPM version =8.0.2, =0.2.23-alpha-20230403140649-57714f1dd, =0.1.24-alpha-20230403140649-57714f1dd, =0.15.24-alpha-20230403140649-57714f1dd, =2.0.0-beta.0, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =1.6.0-alpha.9, =1.4.1, =1.4.4 Source cves: CVE-2026-27904...

@abp/ng.schematics (>=10.1.0-rc.1, <=10.2.1), @ama-sdk/create (>=14.0.0-next.13, <=14.1.0-prerelease.6) +8 more potentially affected by CVE-2026-27739 via @schematics/angular (>=21.0.0, <=21.1.4)

@schematics/angular NPM version =21.0.0, =10.1.0-rc.1, =14.0.0-next.13, =14.0.0-next.13, =21.0.0-next.0, =21.0.0-next.0, =21.0.0-next.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =0.0.131, =14.0.0-next.13, =14.1.0-prerelease.6 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-SCHEMATICSANGULAR-15357...

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1) +79 more potentially affected by CVE-2025-68613 +1 more via n8n-workflow (>=1.0.0, <=1.120.8)

n8n-workflow NPM version =1.0.0, =0.2.0, =0.1.5, =0.0.17, =1.0.2, =1.0.1, =0.2.0, =0.19.0, =0.33.0, =0.4.0, =0.11.0, =0.33.0, =1.1.0, =1.1.0, =1.26.8 and more Source cves: CVE-2025-68613, CVE-2026-27577 Source advisory: SNYK:JS-N8NWORKFLOW-15357609...

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +38 more potentially affected by CVE-2026-27498 via n8n-core (>=1.0.0, <=1.122.3)

n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.26.0, =0.34.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =1.0.1, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =1.4.1 and more Source cves: CVE-2026-27498 Source advisory: SNYK:JS-N8NCORE-15357608...

@klardaten/n8n-nodes-datevconnect (>=1.0.1, <=1.0.2), @n8n/ai-workflow-builder (>=0.2.0, <=0.33.2) +20 more potentially affected by CVE-2026-27498 via @n8n/config (>=1.15.0, <=1.65.1)

@n8n/config NPM version =1.15.0, =1.0.1, =0.2.0, =0.33.0, =0.26.0, =0.34.0, =1.3.0, =0.23.8, =1.51.0, =1.65.0, =1.65.0, =1.0.1, =0.3.3, =0.1.3, =0.2.0, =0.2.0, =4.1.23 and more Source cves: CVE-2026-27498 Source advisory: SNYK:JS-N8NCONFIG-15357607...

parse-hipaa-dashboard (>=1.5.0, <=2.0.5) potentially affected by CVE-2026-27609 via parse-dashboard (>=7.3.0, <=8.5.0)

parse-dashboard NPM version =7.3.0, =1.5.0, =2.0.5 Source cves: CVE-2026-27609 Source advisory: SNYK:JS-PARSEDASHBOARD-15366640...

@chocolatey-software/astro (>=2.0.0, <=2.5.0), choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2026-27829 via @astrojs/node (>=9.2.2, <=9.5.2)

@astrojs/node NPM version =9.2.2, =2.0.0, =0.3.1, =0.4.0 Source cves: CVE-2026-27829 Source advisory: OSV:GHSA-CJ9F-H6R6-4CX2...

@chocolatey-software/astro (>=2.0.0, <=2.5.0), choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2026-25545 via @astrojs/node (>=9.2.2, <=9.5.2)

@astrojs/node NPM version =9.2.2, =2.0.0, =0.3.1, =0.4.0 Source cves: CVE-2026-25545 Source advisory: OSV:GHSA-QQ67-MVV5-FW3G...

@gardenfi/core (>=2.4.3-beta.3, <=3.1.3), @gardenfi/hyperliquid-swaps (>=0.0.1, <=1.0.4) +63 more potentially affected by CVE-2026-27452 via asn1-ts (>=7.1.0, <=8.0.5)

asn1-ts NPM version =7.1.0, =2.4.3-beta.3, =0.0.1, =0.0.2-beta.21, =0.0.1-beta.3, =2.3.3-beta.3, =1.10.0, =1.4.0, =1.27.7, =1.27.7, =0.2.0, =0.0.0-dev-20251015065834, =0.6.0-nightly.1, =0.0.0-experimental-20250325202207, =0.13.0 and more Source cves: CVE-2026-27452 Source advisory:...

com.netflix.ndbench:ndbench-cli (>=0.3.12, <=0.7.4), com.netflix.ndbench:ndbench-geode-plugins (>=0.3.5, <=0.7.4) +35 more potentially affected by CVE-2026-2818 via org.springframework.data:spring-data-geode (>=1.0.0.incubating-release, <=2.7.18)

org.springframework.data:spring-data-geode MAVEN version =1.0.0.incubating-release, =0.3.12, =0.3.5, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0.release, =2.0.0.release, =2.0.0.release, =2.0.0.release, =2.0.0.release, =2.0.0.release, =2.0.0.release, =2.0.0.release, =3.0.0, =3.2.1...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27193 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27193 Source advisory: OSV:GHSA-9M9C-VPV5-9G85...

@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), @turnipxenon/pineapple (>=5.0.0-alpha.1, <=5.0.0-alpha.5) +1 more potentially affected by unknown CVE via @sveltejs/kit (>=2.49.0, <=2.49.5)

@sveltejs/kit NPM version =2.49.0, =0.0.137, =5.0.0-alpha.1, =1.12.2, =1.12.3 Source cves: unknown CVE Source advisory: OSV:GHSA-88QP-P4QG-RQM6...

@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +367 more potentially affected by unknown CVE via hono (>=4.0.0, <=4.11.9)

hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.8.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-HONO-15322749...

@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +367 more potentially affected by CVE-2026-56764 via hono (>=4.0.0, <=4.11.9)

hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.8.0 and more Source cves: CVE-2026-56764 Source advisory: OSV:GHSA-GQ3J-XVXP-8HRF...

@osdlabel/react (0.0.1), @osdlabel/solid (0.0.1) +1 more potentially affected by CVE-2026-27013 via fabric (7.1.0)

fabric NPM version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fabric and may be impacted: - @osdlabel/react 0.0.1 - @osdlabel/solid 0.0.1 - osdlabel 0.0.1 Source cves: CVE-2026-27013 Source advisory: SNYK:JS-FABRIC-15317311...

org.webjars.npm:jsrsasign-util (1.0.5) potentially affected by CVE-2026-4598 via org.webjars.npm:jsrsasign (11.1.0)

org.webjars.npm:jsrsasign MAVEN version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jsrsasign and may be impacted: - org.webjars.npm:jsrsasign-util 1.0.5 Source cves: CVE-2026-4598 Source advisory:...

5-ifc-check-cli (1.0.0), 7ghost (>=4.11.2, <=4.11.46) +3934 more potentially affected by CVE-2026-26278 via fast-xml-parser (>=4.1.3, <=4.5.3)

fast-xml-parser NPM version =4.1.3, =4.11.2, =0.1.1, =0.0.2, =1.0.1, =1.0.0, =1.52.0, =0.0.1, =1.0.0, =0.0.1, =1.1.2 and more Source cves: CVE-2026-26278 Source advisory: OSV:GHSA-JMR7-XGP7-CMFJ...

figma-tree (>=0.0.1, <=0.0.11) potentially affected by CVE-2026-2544 via lu2 (2023.9.15)

lu2 NPM version 2023.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on lu2 and may be impacted: - figma-tree =0.0.1, =0.0.11 Source cves: CVE-2026-2544 Source advisory: SNYK:JS-LU2-15285654...

0.edsql (>=1.0.49, <=1.0.50), 360-lib (1.0.0) +10447 more potentially affected by CVE-2025-69873 via ajv (>=7.0.0, <=8.17.1)

ajv NPM version =7.0.0, =1.0.49, =10.0.2-0, =4.11.2, =0.1.0, =0.1.1, =0.0.1-251008.90016, =1.0.0, =1.4.0, =1.0.0, =0.0.2, =2.0.0, =2.0.1 - @49ing/ngx-videogular 5.0.1 and more Source cves: CVE-2025-69873 Source advisory: OSV:GHSA-2G4F-4PWH-QVX6...

a-simple-llm-kit (>=0.3.0, <=0.4.2), a62-emotion (>=0.9.2, <=0.11.4) +3660 more potentially affected by CVE-2025-69872 via diskcache (>=2.4.1, <=5.6.3)

diskcache PYPI version =2.4.1, =0.3.0, =0.9.2, =0.1.0, =0.2.1, =0.1.1.dev1, =0.1.0, =0.1.0, =0.3.4, =0.1.1, =0.3.3, =0.1.32, =0.1.35 - abstractframework 0.1.1 and more Source cves: CVE-2025-69872 Source advisory: SNYK:PYTHON-DISKCACHE-15268422...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2115 more potentially affected by CVE-2026-25536 via @modelcontextprotocol/sdk (>=1.10.0, <=1.25.3)

@modelcontextprotocol/sdk NPM version =1.10.0, =0.3.3, =1.0.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.0.1, =0.0.1, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =10.1.0-rc.1, =10.2.1 and more Source cves: CVE-2026-25536 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSDK-15208843...

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1) +79 more potentially affected by CVE-2026-25055 via n8n-workflow (>=1.0.0, <=1.120.4)

n8n-workflow NPM version =1.0.0, =0.2.0, =0.1.5, =0.0.17, =1.0.2, =1.0.1, =0.2.0, =0.19.0, =0.33.0, =0.4.0, =0.11.0, =0.33.0, =1.1.0, =1.1.0, =1.26.4 and more Source cves: CVE-2026-25055 Source advisory: SNYK:JS-N8NWORKFLOW-15220690...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-1518 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-1518 Source advisory: SNYK:JAVA-ORGKEYCLOAK-15170836...

@backstage/plugin-techdocs-backend (>=0.0.0-nightly-20260123025240, <=0.0.0-nightly-20260126030220), @techdocs/cli (>=0.0.0-nightly-20260123025240, <=0.0.0-nightly-20260126030220) potentially affected by CVE-2026-25152 via @backstage/plugin-techdocs-node (1.14.0)

@backstage/plugin-techdocs-node NPM version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-techdocs-node and may be impacted: - @backstage/plugin-techdocs-backend =0.0.0-nightly-20260123025240, =0.0.0-nightly-20260123025240,...

@activepieces/piece-amazon-s3 (>=0.5.4, <=0.6.4), @activepieces/piece-amazon-ses (>=0.0.1, <=0.1.4) +999 more potentially affected by CVE-2026-25128 via fast-xml-parser (>=5.0.9, <=5.3.3)

fast-xml-parser NPM version =5.0.9, =0.5.4, =0.0.1, =0.1.3, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.0.0, =1.7.16, =2.33.6, =1.4.37, =1.6.3 and more Source cves: CVE-2026-25128 Source advisory: OSV:GHSA-37QJ-FRW5-HHJH...

@applica-software-guru/cnc-bit-configurator (>=1.0.2, <=1.1.29), @damsenviet/keybits (>=0.0.0, <=0.0.2) +34 more potentially affected by CVE-2026-24888 via makerjs (>=0.1.5, <=0.18.2)

makerjs NPM version =0.1.5, =1.0.2, =0.0.0, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =1.1.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-24888 Source advisory: OSV:GHSA-2CP6-34R9-54XX...

flowflops (>=0.0.1.post2211140919, <=0.0.1.post2211151211) potentially affected by CVE-2025-70999 via oneflow (0.9.0)

oneflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on oneflow and may be impacted: - flowflops =0.0.1.post2211140919, =0.0.1.post2211151211 Source cves: CVE-2025-70999 Source advisory: SNYK:PYTHON-ONEFLOW-15162589...

@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +338 more potentially affected by CVE-2026-24771 via hono (>=4.0.0, <=4.11.6)

hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =2.0.0-beta.66, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.7.1, =1.8.0 and more Source cves: CVE-2026-24771 Source advisory: SNYK:JS-HONO-15123927...

47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +210 more potentially affected by CVE-2025-55184 +1 more via next (>=15.5.0, <=15.5.9)

next NPM version =15.5.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2025-55184, CVE-2026-23864 Source advisory: SNYK:JS-NEXT-15921797...

@aandyw/ybf (>=0.1.0, <=0.1.29), @accounter/client (>=0.0.4-alpha-20250227014300-bbaee6f285ce9d54b581b115d444233911983665, <=0.0.5-alpha-20250410150030-25fea893fb3523b55c835620f6692430d5bc9bee) +212 more potentially affected by CVE-2025-55184 +1 more via next (>=15.2.0, <=15.2.8)

next NPM version =15.2.0, =0.1.0, =0.0.4-alpha-20250227014300-bbaee6f285ce9d54b581b115d444233911983665, =0.0.1-alpha, =0.1.0, =3.2.0, =0.1.0, =1.1.0-canary.0, =1.1.0-canary.0, =1.2.0-canary.0, =1.2.2-canary-20250514183211, =1.2.0-canary.8, =1.6.0 and more Source cves: CVE-2025-55184, CVE-2026-238...

@1upmonster/duel (>=0.1.0, <=0.1.8), @flash_trade/magic-trade-client (>=0.1.0, <=1.0.51) +8 more potentially affected by CVE-2026-22696 via @phala/dcap-qvl-web (>=0.2.7, <=0.3.3)

@phala/dcap-qvl-web NPM version =0.2.7, =0.1.0, =0.1.0, =0.3.6, =0.2.9, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-22696 Source advisory: OSV:GHSA-796P-J2GH-9M2Q...

@0x57/pierre (>=0.0.3, <=0.0.16), @0xshogun/sdk (>=1.1.44, <=1.1.52) +457 more potentially affected by CVE-2025-50537 via eslint (>=9.0.0, <=9.25.1)

eslint NPM version =9.0.0, =0.0.3, =1.1.44, =1.1.14, =0.0.1-alpha.3, =2.4.7, =2.2.5, =0.0.2, =0.0.0-dev-20250424035410, =1.0.68, =0.0.1, =0.0.66, =0.0.3, =1.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2025-50537 Source advisory: SNYK:JS-ESLINT-15102420...

aegis-game (>=2.0.0, <=2.9.10), auditnlg (0.0.1) +30 more potentially affected by CVE-2025-66902 via websocket-server (>=0.4.0, <=0.6.4)

websocket-server PYPI version =0.4.0, =2.0.0, =0.2.3, =0.1.7, =0.2.0, =0.1.0, =0.1.1, =0.1.0, =0.7.0, =0.0.11, =0.2.16 and more Source cves: CVE-2025-66902 Source advisory: SNYK:PYTHON-WEBSOCKETSERVER-15046798...

net.risesoft:risenet-y9boot-support-platform-web (9.7.0-rc3) potentially affected by CVE-2026-1050 via net.risesoft:risenet-y9boot-support-platform-service (9.7.0-rc3)

net.risesoft:risenet-y9boot-support-platform-service MAVEN version 9.7.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on net.risesoft:risenet-y9boot-support-platform-service and may be impacted: - net.risesoft:risenet-y9boot-support-platform-web...

@bounded-systems/conformance-kit (>=0.2.0, <=0.11.0), @mapbox/vnu-validate-html (0.1.0) +35 more potentially affected by CVE-2025-15104 via vnu-jar (>=16.6.29, <=26.8.6)

vnu-jar NPM version =16.6.29, =0.2.0, =1.0.48, =1.0.3, =0.9.0, =0.1.1, =0.7.0-alpha.2, =0.1.2, =0.6.0, =8.1.0, =9.1.1, =1.0.0, =1.0.4 and more Source cves: CVE-2025-15104 Source advisory: SNYK:JS-VNUJAR-15010791...

@01.software/sdk (>=0.0.1-251008.90016, <=0.1.0-dev.260109.7cf07c9), @adenta/cms (>=0.0.6, <=1.1.1-0) +356 more potentially affected by CVE-2026-22036 via undici (>=7.0.0, <=7.18.0)

undici NPM version =7.0.0, =0.0.1-251008.90016, =0.0.6, =0.0.33, =0.0.1, =1.0.0, =21.0.0-rc.2, =21.0.0-rc.2, =0.5.0, =1.0.1-dev.120, =12.6.9, =1.6.3, =0.1.6, =0.13.70, =0.13.99 and more Source cves: CVE-2026-22036 Source advisory: OSV:GHSA-G9MF-H72J-4RW9...

0g-serving-broker (0.1.0), 10x-cli (0.0.7) +4391 more potentially affected by CVE-2026-24001 via diff (>=6.0.0, <=8.0.2)

diff NPM version =6.0.0, =0.1.0, =1.0.0, =0.5.0, =1.0.9, =0.0.1, =0.0.1, =0.1.0, =1.0.1, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.1.8 and more Source cves: CVE-2026-24001 Source advisory: SNYK:JS-DIFF-14917201...

adopt-a-doodle (>=0.0.1, <=0.0.3), bark-simulator (>=0.0.1, <=0.1.0) +109 more potentially affected by CVE-2026-22188 via panda3d (>=1.10.7, <=1.10.16)

panda3d PYPI version =1.10.7, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.1.1, =0.0.3, =0.1.0, =1.0.0, =21.2.0, =22.4.0, =20.12.0, =1.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2026-22188 Source advisory: SNYK:PYTHON-PANDA3D-14931134...

adopt-a-doodle (>=0.0.1, <=0.0.3), bark-simulator (>=0.0.1, <=0.1.0) +109 more potentially affected by CVE-2026-22190 via panda3d (>=1.10.7, <=1.10.16)

panda3d PYPI version =1.10.7, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.1.1, =0.0.3, =0.1.0, =1.0.0, =21.2.0, =22.4.0, =20.12.0, =1.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2026-22190 Source advisory: SNYK:PYTHON-PANDA3D-14931131...