@cbsanal/node-red-opcua-browse-subscribe (>=0.0.1, <=0.0.4), @frangoteam/fuxa (>=1.1.7, <=1.3.1) +46 more potentially affected by CVE-2026-54155 via node-opcua (>=2.1.9, <=2.164.2)

node-opcua NPM version =2.1.9, =0.0.1, =1.1.7, =1.1.19, =1.3.2-alpha.86, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.159, =1.3.5, =1.4.15-alpha.197, =1.4.15-alpha.279, =1.4.15-alpha.182, =1.4.15-alpha.196 and more Source cves:...

@contentful/mcp-server (>=1.7.0-dev-20251016T1739-07b05ef.0, <=1.7.18), @iflow-mcp/contentful-contentful-mcp-server (>=1.7.7, <=1.7.8) potentially affected by CVE-2026-53957 via @contentful/mcp-tools (>=0.1.0, <=0.4.4)

@contentful/mcp-tools NPM version =0.1.0, =1.7.0-dev-20251016T1739-07b05ef.0, =1.7.7, =1.7.8 Source cves: CVE-2026-53957 Source advisory: OSV:GHSA-2XHG-73J7-RRGX...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +2064 more potentially affected by CVE-2026-63670 via sanitize-html (>=2.1.0, <=2.17.5)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =5.0.2, =0.0.1, =1.0.0, =3.0.0, =1.3.0, =1.0.0, =1.38.0, =1.3.2, =1.7.1 and more Source cves: CVE-2026-63670 Source advisory: SNYK:JS-SANITIZEHTML-18913500...

0token (>=0.1.0, <=0.4.0), 3-04-2025-ttm (0.1.0) +12410 more potentially affected by CVE-2026-75104 via transformers (>=0.1.0, <=5.16.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.5, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.6 and more Source cves: CVE-2026-75104 Source advisory: SNYK:PYTHON-TRANSFORMERS-18965959...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +290 more potentially affected by CVE-2026-47683 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.0.16, <=0.10.15) +13708 more potentially affected by unknown CVE via h2 (>=0.1.26, <=0.3.27)

h2 CARGO version =0.1.26, =0.1.0, =0.0.16, =0.2.0, =0.1.0, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0-beta.4, =0.2.0-beta.7 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0258...

bs58-77 (6.0.1) potentially affected by unknown CVE via base65-77x (5.0.2)

base65-77x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-77x and may be impacted: - bs58-77 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6577X-18616641...

bs58-15 (6.0.1) potentially affected by unknown CVE via base65-15x (5.0.2)

base65-15x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-15x and may be impacted: - bs58-15 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6515X-18616640...

bs58-77 (6.0.1) potentially affected by unknown CVE via base65-77x (5.0.2)

base65-77x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-77x and may be impacted: - bs58-77 6.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13750...

bs58-33 (6.0.1) potentially affected by unknown CVE via base65-33x (5.0.2)

base65-33x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-33x and may be impacted: - bs58-33 6.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13749...

cbtham-feast-az-provider (0.2.299), elemeno-ai-sdk (>=0.0.5, <=0.6.11) +26 more potentially affected by CVE-2026-18941 via feast (>=0.9.3, <=0.66.0)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.0rc3, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =0.4.0 and more Source cves: CVE-2026-18941 Source advisory: SNYK:PYTHON-FEAST-18612620...

01os (>=0.0.5, <=0.0.13), 3m (>=0.1.0, <=0.1.3) +6934 more potentially affected by CVE-2026-12261 via nltk (>=2.0.4, <=3.10.3)

nltk PYPI version =2.0.4, =0.0.5, =0.1.0, =0.1.0, =0.0.0, =0.10.11, =0.3.7, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.0, =1.0.4, =1.1.0 and more Source cves: CVE-2026-12261 Source advisory: SNYK:PYTHON-NLTK-18592338...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.29), @142vip/vuepress (0.0.1-alpha.19) +120 more potentially affected by CVE-2026-71439 via mermaid (>=11.6.0, <=11.16.0)

mermaid NPM version =11.6.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.16.0, =0.35.0, =0.2.0, =1.0.1 - @cognitivesand/md2pdf 0.1.3 and more Source cves: CVE-2026-71439 Source advisory: SNYK:JS-MERMAID-18592314...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.29), @142vip/vuepress (0.0.1-alpha.19) +211 more potentially affected by CVE-2026-71436 via mermaid (>=11.0.0, <=11.16.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.15.0, =0.35.0, =0.2.0, =1.0.1 and more Source cves: CVE-2026-71436 Source advisory: SNYK:JS-MERMAID-18592327...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +201 more potentially affected by CVE-2026-71436 via mermaid (>=10.6.1, <=10.9.5)

mermaid NPM version =10.6.1, =0.18.0-beta.0, =0.17.1-alkemio-5, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.0.1, =0.0.1, =7.1.0, =0.114.3, =0.141.3 and more Source cves: CVE-2026-71436 Source advisory: OSV:GHSA-2V8P-3F2J-5MP7...

@holocronlab/botruntime-adk (2.5.4), @holocronlab/brt (0.9.3) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.5.4)

@holocronlab/botruntime-runtime NPM version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.5.4 - @holocronlab/brt 0.9.3 Source cves: unknown CVE Source advisory...

@whalent/agent (0.3.261) potentially affected by unknown CVE via @whalent/agent-core (0.3.261)

@whalent/agent-core NPM version 0.3.261 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.261 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.278) potentially affected by unknown CVE via @whalent/agent-core (0.3.278)

@whalent/agent-core NPM version 0.3.278 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.278 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

big-tss (5.0.5) potentially affected by unknown CVE via npm-dc-dev (1.1.1)

npm-dc-dev NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on npm-dc-dev and may be impacted: - big-tss 5.0.5 Source cves: unknown CVE Source advisory: SNYK:JS-NPMDCDEV-18565244...

@whalent/agent (0.3.263) potentially affected by unknown CVE via @whalent/agent-core (0.3.263)

@whalent/agent-core NPM version 0.3.263 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.263 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@bloggrify/bento (>=3.0.0, <=3.1.0), @bloggrify/core (>=3.0.0, <=3.3.0) +23 more potentially affected by CVE-2026-71320 via nuxt (>=4.0.0-rc.0, <=4.5.0)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =1.6.0-rc.3, =0.4.5, =0.0.0, =1.1.0, =2.0.1 - @uxfront/layer-app 0.1.0 - @zach-mac/zachscommoncomponents 1.0.4 and more Source cves: CVE-2026-71320 Source advisory: SNYK:JS-NUXT-18565115...

@bloggrify/bento (>=3.0.0, <=3.1.0), @bloggrify/core (>=3.0.0, <=3.3.0) +23 more potentially affected by CVE-2026-71318 via nuxt (>=4.0.0-rc.0, <=4.5.0)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =1.6.0-rc.3, =0.4.5, =0.0.0, =1.1.0, =2.0.1 - @uxfront/layer-app 0.1.0 - @zach-mac/zachscommoncomponents 1.0.4 and more Source cves: CVE-2026-71318 Source advisory: SNYK:JS-NUXT-18565118...

@geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4), @qingwave/cclens (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2026-71318 via @nuxt/nitro-server (>=3.20.0, <=3.21.9)

@nuxt/nitro-server NPM version =3.20.0, =9.13.1-rc.9, =0.1.0, =3.20.0, =3.21.9 Source cves: CVE-2026-71318 Source advisory: SNYK:JS-NUXTNITROSERVER-18565119...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +13 more potentially affected by CVE-2026-71316 via nuxt (>=4.4.2, <=4.5.0)

nuxt NPM version =4.4.2, =3.2.0, =1.4.4, =1.2.1, =1.6.0-rc.3, =1.0.0-alpha.1, =4.3.1-dev.1, =1.0.0, =0.6.0-rc.1, =0.2.0-alpha.5, =1.0.0-alpha.1, =9.1.1, =9.4.4 Source cves: CVE-2026-71316 Source advisory: OSV:GHSA-WM8W-6QJM-CV43...

@qingwave/cclens (>=0.1.0, <=0.2.0), nuxt (>=3.21.7, <=3.21.9) potentially affected by CVE-2026-71315 via @nuxt/nitro-server (>=3.21.7, <=3.21.9)

@nuxt/nitro-server NPM version =3.21.7, =0.1.0, =3.21.7, =3.21.9 Source cves: CVE-2026-71315 Source advisory: SNYK:JS-NUXTNITROSERVER-18565126...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-71315 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-71315 Source advisory: OSV:GHSA-HXVH-4H3W-PRP9...

@geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4), @qingwave/cclens (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2026-71314 via @nuxt/nitro-server (>=3.20.0, <=3.21.9)

@nuxt/nitro-server NPM version =3.20.0, =9.13.1-rc.9, =0.1.0, =3.20.0, =3.21.9 Source cves: CVE-2026-71314 Source advisory: SNYK:JS-NUXTNITROSERVER-18565123...

@bloggrify/bento (>=3.0.0, <=3.1.0), @bloggrify/core (>=3.0.0, <=3.3.0) +23 more potentially affected by CVE-2026-71314 via nuxt (>=4.0.0-rc.0, <=4.5.0)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =1.6.0-rc.3, =0.4.5, =0.0.0, =1.1.0, =2.0.1 - @uxfront/layer-app 0.1.0 - @zach-mac/zachscommoncomponents 1.0.4 and more Source cves: CVE-2026-71314 Source advisory: SNYK:JS-NUXT-18565122...

@bloggrify/bento (>=3.0.0, <=3.1.0), @bloggrify/core (>=3.0.0, <=3.3.0) +19 more potentially affected by CVE-2026-71314 via @nuxt/nitro-server (>=4.2.0, <=4.5.0)

@nuxt/nitro-server NPM version =4.2.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.2.2-depup.0, =10.0.2-rc.5, =1.1.11, =1.0.8, =1.6.0-rc.3, =0.4.5, =3.0.0-dev.27, =1.0.0, =4.2.0, =0.5.0, =0.6.0 and more Source cves: CVE-2026-71314 Source advisory: SNYK:JS-NUXTNITROSERVER-18565123...

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +11 more potentially affected by CVE-2026-70612 via electron (>=40.0.0, <=40.8.5)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-70612 Source advisory: OSV:GHSA-P2RR-RVMM-C5FP...

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +11 more potentially affected by CVE-2026-70611 via electron (>=40.0.0, <=40.8.5)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-70611 Source advisory: OSV:GHSA-F2R8-JV7C-XQMP...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70610 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70610 Source advisory: SNYK:JS-ELECTRON-18563332...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +5 more potentially affected by CVE-2026-70609 via electron (>=41.0.3, <=41.1.1)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =1.3.0, =2.1.30, =0.1.0, =1.0.5, =1.3.0 Source cves: CVE-2026-70609 Source advisory: SNYK:JS-ELECTRON-18565023...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +5 more potentially affected by CVE-2026-70609 via electron (>=41.0.3, <=41.1.1)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =1.3.0, =2.1.30, =0.1.0, =1.0.5, =1.3.0 Source cves: CVE-2026-70609 Source advisory: OSV:GHSA-4F78-QHMW-8J8M...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70609 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

pixlab-pet (0.2.0) potentially affected by CVE-2026-70608 via electron (42.0.0)

electron NPM version 42.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - pixlab-pet 0.2.0 Source cves: CVE-2026-70608 Source advisory: OSV:GHSA-9F4C-93C8-JC8G...

@ascua/electron (>=0.8.0, <=0.18.0), @barnaby.build/barnaby (>=0.0.131, <=0.0.253) +68 more potentially affected by CVE-2026-70608 via electron (>=40.0.0, <=41.7.1)

electron NPM version =40.0.0, =0.8.0, =0.0.131, =1.1.1, =0.1.6, =0.28.2-next.1.g0672c8f47, =1.0.0-alpha.3, =1.0.0-alpha.3, =1.4.2, =0.11.0, =9.10.13-beta.1, =9.10.13-beta.1, =0.6.1, =1.0.0 and more Source cves: CVE-2026-70608 Source advisory: OSV:GHSA-9F4C-93C8-JC8G...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70607 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70607 Source advisory: SNYK:JS-ELECTRON-18565025...

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +11 more potentially affected by CVE-2026-70607 via electron (>=40.0.0, <=40.8.5)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-70607 Source advisory: OSV:GHSA-V93F-FGJR-HJRJ...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70605 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70605 Source advisory: OSV:GHSA-V64R-4M7R-3MVQ...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70602 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70602 Source advisory: OSV:GHSA-M55F-7GQJ-FR98...

@xwiki/cristal-electron-main (>=1.3.0, <=1.5.0), cicy-desktop (>=2.1.30, <=2.1.342) +2 more potentially affected by CVE-2026-70603 via electron (>=41.0.3, <=41.1.0)

electron NPM version =41.0.3, =1.3.0, =2.1.30, =0.1.0, =1.0.5, =1.3.0 Source cves: CVE-2026-70603 Source advisory: SNYK:JS-ELECTRON-18563328...

@xwiki/cristal-electron-main (>=1.3.0, <=1.5.0), cicy-desktop (>=2.1.30, <=2.1.342) +2 more potentially affected by CVE-2026-70603 via electron (>=41.0.3, <=41.1.0)

electron NPM version =41.0.3, =1.3.0, =2.1.30, =0.1.0, =1.0.5, =1.3.0 Source cves: CVE-2026-70603 Source advisory: OSV:GHSA-5C9J-MHMV-5XGX...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70603 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70598 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70598 Source advisory: OSV:GHSA-PFMC-3MGC-P6FP...

@ccfly/setup (0.1.16) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.16)

@ccfly/setup-darwin-x64 NPM version 0.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.16 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

new-native-tools (>=3.1.42-as2-9980-418-1785845663, <=3.1.42-origin-chrom-468-delete-windows-32-bit-changelog-fix-416-1785842977) potentially affected by unknown CVE via new-native-tools-linux-x64-gnu (3.1.42)

new-native-tools-linux-x64-gnu NPM version 3.1.42 is affected by a known vulnerability. The following packages have a transitive dependency on new-native-tools-linux-x64-gnu and may be impacted: - new-native-tools =3.1.42-as2-9980-418-1785845663,...

@ccfly/setup (0.1.13) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.13)

@ccfly/setup-darwin-arm64 NPM version 0.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.13 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.9) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.9)

@ccfly/setup-darwin-arm64 NPM version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

sign-alex (1.0.1) potentially affected by CVE-2026-70592 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-70592 Source advisory: OSV:GHSA-CJ62-HVV2-2Q5H...