6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83610 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83610 Source advisory: OSV:GHSA-6GMQ-8VP8-GCM6...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-72716 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-72716 Source advisory: OSV:GHSA-P4CG-3328-RVFG...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71866 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71866 Source advisory: OSV:GHSA-6MR6-JVCR-2F25...

7pmlabs-design-system (>=0.5.0, <=0.5.15), @10planet/deva-sdk (>=0.7.0, <=0.7.2) +2855 more potentially affected by unknown CVE via @tiptap/core (>=2.0.0, <=3.30.3)

@tiptap/core NPM version =2.0.0, =0.5.0, =0.7.0, =0.1.2, =0.2.0, =1.0.0, =1.2.1, =0.1.0, =2.2.0-rc.7, =1.0.0, =1.0.0, =1.0.0, =2.12.2, =3.0.3, =4.0.5 - @.aayush./novelsh 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CP6Q-959Q-F8RH...

@forgeax/game (>=0.3.0, <=0.3.4), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +7 more potentially affected by CVE-2026-82393 via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.2.4, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: CVE-2026-82393 Source advisory: OSV:GHSA-VQ4V-J7R6-JQ4M...

02.aula (1.0.0), 0xrtest (1.0.0) +11423 more potentially affected by CVE-2026-84375 via js-yaml (>=4.0.0, <=4.3.1)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =1.3.0, =6.1.5, =0.0.0-develop-20260120180031, =0.5.6 - @0xr404/0xrtest 1.0.0 and more Source cves: CVE-2026-84375 Source advisory: SNYK:JS-JSYAML-19496768...

io.javalin.community.openapi:javalin-redoc-plugin (>=5.0.0, <=5.2.0), io.javalin.community.openapi:openapi-test (>=5.0.0, <=5.0.1) +41 more potentially affected by CVE-2026-84375 via org.webjars.npm:js-yaml (>=3.1.0, <=4.3.1)

org.webjars.npm:js-yaml MAVEN version =3.1.0, =5.0.0, =5.0.0, =9.0.6, =2.0.0, =2.1.3, =0.1.3, =1.1.4, =2.1.0, =4.0.3 and more Source cves: CVE-2026-84375 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-19496769...

@3ngram/server (>=1.2.6, <=1.6.1), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +889 more potentially affected by CVE-2026-84364 via hono (>=4.0.0, <=4.13.4)

hono NPM version =4.0.0, =1.2.6, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.5 and more Source cves: CVE-2026-84364 Source advisory: SNYK:JS-HONO-19499093...

@adobe/spacecat-shared-brand-client (>=1.1.31, <=1.1.35), @adobe/spacecat-shared-cloud-manager-client (>=1.0.0, <=1.4.3) +307 more potentially affected by CVE-2026-84368 via joi (>=18.0.0, <=18.2.3)

joi NPM version =18.0.0, =1.1.31, =1.0.0, =1.8.6, =2.61.4, =1.4.60, =1.6.11, =1.19.1, =1.11.2, =2.2.1, =1.0.0, =1.12.0, =3.14.0, =0.0.14, =0.0.39 and more Source cves: CVE-2026-84368 Source advisory: SNYK:JS-JOI-19498543...

@0xsequence/web3-onboard-plugin (2.0.5), @0xzoz/tallyho (>=2.0.11, <=2.0.14) +1793 more potentially affected by CVE-2026-84368 via joi (>=17.2.0, <=17.13.4)

joi NPM version =17.2.0, =2.0.11, =0.1.6-alpha.2, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.16.17-beta-0213b250, =1.8.31, =1.1.12, =1.7.1, =1.8.31, =1.0.0, =1.16.34-beta-20241113-102431-65542b84 and more Source cves: CVE-2026-84368 Source advisory: SNYK:JS-JOI-19498543...

@adobe/spacecat-shared-brand-client (>=1.1.31, <=1.1.35), @adobe/spacecat-shared-cloud-manager-client (>=1.0.0, <=1.4.3) +307 more potentially affected by CVE-2026-84367 via joi (>=18.0.0, <=18.2.3)

joi NPM version =18.0.0, =1.1.31, =1.0.0, =1.8.6, =2.61.4, =1.4.60, =1.6.11, =1.19.1, =1.11.2, =2.2.1, =1.0.0, =1.12.0, =3.14.0, =0.0.14, =0.0.39 and more Source cves: CVE-2026-84367 Source advisory: SNYK:JS-JOI-19498547...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4320 more potentially affected by CVE-2026-83605 via @xmldom/xmldom (>=0.7.0, <=0.8.13)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83605 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499081...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1067 more potentially affected by CVE-2026-83607 via @xmldom/xmldom (>=0.9.0, <=0.9.10)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83607 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499075...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83608 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83608 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498556...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4328 more potentially affected by CVE-2026-83608 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83608 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498556...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83613 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83613 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499072...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83611 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83611 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498557...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +2257 more potentially affected by CVE-2026-77037 via multer (>=2.0.0, <=2.2.0)

multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =1.0.0, =0.0.1, =0.0.0-alpha.119, =1.2.1-dev.3, =1.0.0, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-77037 Source advisory: SNYK:JS-MULTER-19432131...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +2257 more potentially affected by CVE-2026-82333 via multer (>=2.0.0, <=2.2.0)

multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =1.0.0, =0.0.1, =0.0.0-alpha.119, =1.2.1-dev.3, =1.0.0, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-82333 Source advisory: SNYK:JS-MULTER-19432136...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55855 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-55855 Source advisory: OSV:GHSA-G5XC-5W98-JFVM...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55854 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-55854 Source advisory: OSV:GHSA-42R5-VHPQ-M858...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55215 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...

20231122-npm (1.0.0), 2048.io (0.0.1) +6571 more potentially affected by CVE-2026-15603 +1 more via morgan (>=1.0.0, <=1.11.0)

morgan NPM version =1.0.0, =1.0.2, =1.0.0, =0.2.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.67 and more Source cves: CVE-2026-15603, CVE-2026-5078 Source advisory: SNYK:JS-MORGAN-19432128...

@cluesurf/task (0.5.4), @tadashi/doc2pdf (>=1.1.0, <=1.1.3) potentially affected by CVE-2026-54732 via libreoffice-convert (>=1.6.1, <=1.8.1)

libreoffice-convert NPM version =1.6.1, =1.1.0, =1.1.3 Source cves: CVE-2026-54732 Source advisory: OSV:GHSA-GMXC-R82Q-347R...

@anejs/anne-migration-vue (>=2.1.0-beta.10, <=2.3.0-beta.10), @anejs/anne-plugin-qiniu (>=2.2.0-beta.1, <=2.3.0-beta.10) +344 more potentially affected by CVE-2026-55553 via urllib (>=2.0.2, <=2.41.0)

urllib NPM version =2.0.2, =2.1.0-beta.10, =2.2.0-beta.1, =0.0.1-beta.0, =0.0.1-beta.0, =0.15.0-beta.2 and more Source cves: CVE-2026-55553 Source advisory: OSV:GHSA-HQ3H-G68C-HP78...

descartes (0.1.20), michelangelo (>=0.1.0, <=0.2.5) potentially affected by unknown CVE via stable-vec (0.3.2)

stable-vec CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on stable-vec and may be impacted: - descartes 0.1.20 - michelangelo =0.1.0, =0.2.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0267...

@ablula/blog-jinchan (>=0.0.1, <=0.0.9), @ablula/default-blog-theme (>=0.0.1, <=0.0.6) +10959 more potentially affected by CVE-2026-78180 via @alifd/next (>=1.9.23, <=1.27.34)

@alifd/next NPM version =1.9.23, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =0.0.2, =0.0.1, =0.1.5 and more Source cves: CVE-2026-78180 Source advisory: SNYK:JS-ALIFDNEXT-19233840...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77414 via jsonata (>=1.0.10, <=1.8.7)

jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77414 Source advisory: SNYK:JS-JSONATA-19233336...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77413 via jsonata (>=1.0.10, <=1.8.7)

jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77413 Source advisory: OSV:GHSA-8GQ3-VP5J-2GRP...

@activepieces/piece-json (>=0.1.6, <=0.1.7), @bifravst/muninn-proto (>=5.0.0, <=5.2.0) +109 more potentially affected by CVE-2026-77413 via jsonata (>=2.0.0, <=2.1.0)

jsonata NPM version =2.0.0, =0.1.6, =5.0.0, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =1.0.0, =0.0.2, =1.0.0, =1.0.0, =3.3.0 and more Source cves: CVE-2026-77413 Source advisory: SNYK:JS-JSONATA-19233338...

@cbsanal/node-red-opcua-browse-subscribe (>=0.0.1, <=0.0.4), @frangoteam/fuxa (>=1.1.7, <=1.3.1) +46 more potentially affected by CVE-2026-54155 via node-opcua (>=2.1.9, <=2.164.2)

node-opcua NPM version =2.1.9, =0.0.1, =1.1.7, =1.1.19, =1.3.2-alpha.86, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.159, =1.3.5, =1.4.15-alpha.197, =1.4.15-alpha.279, =1.4.15-alpha.182, =1.4.15-alpha.196 and more Source cves:...

@cmmv/ai (0.0.5), @graphql-mesh/neo4j (>=0.103.0, <=0.106.2) +2 more potentially affected by CVE-2026-19869 via @neo4j/graphql (6.6.4)

@neo4j/graphql NPM version 6.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on @neo4j/graphql and may be impacted: - @cmmv/ai 0.0.5 - @graphql-mesh/neo4j =0.103.0, =0.7.13-alpha-20241031110808-e6f493d3529c46de0c7c0358ed1e2b5942f2a2a2, =0.7.0, =0.10.2...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +2064 more potentially affected by CVE-2026-63670 via sanitize-html (>=2.1.0, <=2.17.5)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =5.0.2, =0.0.1, =1.0.0, =3.0.0, =1.3.0, =1.0.0, =1.38.0, =1.3.2, =1.7.1 and more Source cves: CVE-2026-63670 Source advisory: SNYK:JS-SANITIZEHTML-18913500...

0token (>=0.1.0, <=0.4.0), 3-04-2025-ttm (0.1.0) +12410 more potentially affected by CVE-2026-75104 via transformers (>=0.1.0, <=5.16.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.5, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.6 and more Source cves: CVE-2026-75104 Source advisory: SNYK:PYTHON-TRANSFORMERS-18965959...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +290 more potentially affected by CVE-2026-47683 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

bs58-77 (6.0.1) potentially affected by unknown CVE via base65-77x (5.0.2)

base65-77x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-77x and may be impacted: - bs58-77 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6577X-18616641...

bs58-15 (6.0.1) potentially affected by unknown CVE via base65-15x (5.0.2)

base65-15x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-15x and may be impacted: - bs58-15 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6515X-18616640...

bs58-77 (6.0.1) potentially affected by unknown CVE via base65-77x (5.0.2)

base65-77x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-77x and may be impacted: - bs58-77 6.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13750...

bs58-33 (6.0.1) potentially affected by unknown CVE via base65-33x (5.0.2)

base65-33x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-33x and may be impacted: - bs58-33 6.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13749...

@qingwave/cclens (>=0.1.0, <=0.2.0), nuxt (>=3.21.7, <=3.21.9) potentially affected by unknown CVE via @nuxt/nitro-server (>=3.21.7, <=3.21.9)

@nuxt/nitro-server NPM version =3.21.7, =0.1.0, =3.21.7, =3.21.9 Source cves: unknown CVE Source advisory: SNYK:JS-NUXTNITROSERVER-18857957...

cbtham-feast-az-provider (0.2.299), elemeno-ai-sdk (>=0.0.5, <=0.6.11) +26 more potentially affected by CVE-2026-18941 via feast (>=0.9.3, <=0.66.0)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.0rc3, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =0.4.0 and more Source cves: CVE-2026-18941 Source advisory: SNYK:PYTHON-FEAST-18612620...

01os (>=0.0.5, <=0.0.13), 3m (>=0.1.0, <=0.1.3) +6934 more potentially affected by CVE-2026-12261 via nltk (>=2.0.4, <=3.10.3)

nltk PYPI version =2.0.4, =0.0.5, =0.1.0, =0.1.0, =0.0.0, =0.10.11, =0.3.7, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.0, =1.0.4, =1.1.0 and more Source cves: CVE-2026-12261 Source advisory: SNYK:PYTHON-NLTK-18592338...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.29), @142vip/vuepress (0.0.1-alpha.19) +120 more potentially affected by CVE-2026-71439 via mermaid (>=11.6.0, <=11.16.0)

mermaid NPM version =11.6.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.16.0, =0.35.0, =0.2.0, =1.0.1 - @cognitivesand/md2pdf 0.1.3 and more Source cves: CVE-2026-71439 Source advisory: SNYK:JS-MERMAID-18592314...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.29), @142vip/vuepress (0.0.1-alpha.19) +211 more potentially affected by CVE-2026-71438 via mermaid (>=11.0.0, <=11.16.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.15.0, =0.35.0, =0.2.0, =1.0.1 and more Source cves: CVE-2026-71438 Source advisory: SNYK:JS-MERMAID-18592324...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +243 more potentially affected by CVE-2026-71438 via mermaid (>=10.0.0, <=10.9.5)

mermaid NPM version =10.0.0, =0.18.0-beta.0, =0.17.0-alkemio-1, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.17.1, =0.0.19, =0.0.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-71438 Source advisory: OSV:GHSA-C4C3-PG64-4M4V...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.29), @142vip/vuepress (0.0.1-alpha.19) +211 more potentially affected by CVE-2026-71436 via mermaid (>=11.0.0, <=11.16.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.15.0, =0.35.0, =0.2.0, =1.0.1 and more Source cves: CVE-2026-71436 Source advisory: SNYK:JS-MERMAID-18592327...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +201 more potentially affected by CVE-2026-71436 via mermaid (>=10.6.1, <=10.9.5)

mermaid NPM version =10.6.1, =0.18.0-beta.0, =0.17.1-alkemio-5, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.0.1, =0.0.1, =7.1.0, =0.114.3, =0.141.3 and more Source cves: CVE-2026-71436 Source advisory: OSV:GHSA-2V8P-3F2J-5MP7...

@holocronlab/botruntime-adk (2.5.4), @holocronlab/brt (0.9.3) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.5.4)

@holocronlab/botruntime-runtime NPM version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.5.4 - @holocronlab/brt 0.9.3 Source cves: unknown CVE Source advisory...

@whalent/agent (0.3.261) potentially affected by unknown CVE via @whalent/agent-core (0.3.261)

@whalent/agent-core NPM version 0.3.261 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.261 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.278) potentially affected by unknown CVE via @whalent/agent-core (0.3.278)

@whalent/agent-core NPM version 0.3.278 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.278 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...