11219 matches found
@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +30 more potentially affected by CVE-2026-62192 via openclaw (>=2026.3.22, <=2026.6.6)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =1.1.50, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =2026.4.3-2 and more Source cves: CVE-2026-62192 Source advisory: SNYK:JS-OPENCLAW-17970202...
@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +30 more potentially affected by CVE-2026-62188 via openclaw (>=2026.3.22, <=2026.6.6)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =1.1.50, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =2026.4.3-2 and more Source cves: CVE-2026-62188 Source advisory: SNYK:JS-OPENCLAW-17966765...
@datastream/validate (>=0.1.4, <=0.7.0), @lukoweb/apitogo (>=0.1.0, <=0.1.94) +9 more potentially affected by CVE-2026-15195 via @apidevtools/json-schema-ref-parser (>=15.1.1, <=15.3.5)
@apidevtools/json-schema-ref-parser NPM version =15.1.1, =0.1.4, =0.1.0, =0.1.26, =0.12.0, =0.8.2, =1.0.4, =2.12.0, =3.1.1-alpha-1765531917303-eb0309c.0, =1.0.0, =1.5.15, =0.0.0-chore-migrate-to-snippetz.zccff2a2a, =0.82.4 Source cves: CVE-2026-15195 Source advisory:...
@mockoon/cli (>=9.0.0, <=9.6.1), @mockoon/cloud (>=9.0.0, <=9.6.1) +4 more potentially affected by CVE-2026-59148 via @mockoon/commons (>=9.0.0, <=9.6.1)
@mockoon/commons NPM version =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =0.0.1, =0.30.0, =0.40.0 Source cves: CVE-2026-59148 Source advisory: SNYK:JS-MOCKOONCOMMONS-17957233...
@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by CVE-2026-53514 via better-auth (>=1.0.0, <=1.6.10)
better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: CVE-2026-53514 Source advisory: SNYK:JS-BETTERAUTH-17889813...
whs4_ays (>=1.0.0, <=1.0.1) potentially affected by unknown CVE via whs4_npm (0.0.1-security)
whs4npm NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on whs4npm and may be impacted: - whs4ays =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-WHS4NPM-17881408...
@rocketmakers/prettier-config (>=1.0.1, <=2.1.0), @rocketmakers/stylelint-config (>=1.0.1, <=2.1.0) potentially affected by CVE-2026-59710 via showdown (2.0.1)
showdown NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on showdown and may be impacted: - @rocketmakers/prettier-config =1.0.1, =1.0.1, =2.1.0 Source cves: CVE-2026-59710 Source advisory: OSV:GHSA-22G5-R2X5-97CX...
-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +28851 more potentially affected by CVE-2026-53486 via decompress (>=0.1.6, <=4.2.1)
decompress NPM version =0.1.6, =1.0.0, =0.0.1, =0.0.4 - 1095h-cli 1.0.1 - 10secondsofcode-custom 1.0.0 and more Source cves: CVE-2026-53486 Source advisory: SNYK:JS-DECOMPRESS-17874437...
@grackle-ai/cli (>=0.37.0, <=0.132.1), @grackle-ai/server (>=0.37.0, <=0.132.1) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.132.1)
@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VV65-F55V-XM6G...
@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +23 more potentially affected by CVE-2026-53826 via openclaw (>=2026.3.22, <=2026.4.24)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 and more Source cves: CVE-2026-53826 Source advisory: OSV:GHSA-6C4R-G249-WV3C...
@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +12 more potentially affected by CVE-2026-50014 via pnpm (>=10.0.0, <=10.33.2)
pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.0-beta.3, =0.1.8, =0.1.0, =2.7.2, =0.0.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-50014 Source advisory: OSV:GHSA-P4XF-RF54-RJ3X...
@activeboxes/piece-gmail (0.8.1), @activeboxes/piece-imap (0.2.10) +95 more potentially affected by CVE-2026-48801 via linkify-it (5.0.0)
linkify-it NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on linkify-it and may be impacted: - @activeboxes/piece-gmail 0.8.1 - @activeboxes/piece-imap 0.2.10 - @activepieces/piece-gmail =0.6.0, =0.2.6, =0.0.1, =1.0.0, =1.0.6 -...
10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3308 more potentially affected by CVE-2026-11998 via angular (>=1.2.0, <=1.8.3)
angular NPM version =1.2.0, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2026-11998 Source advisory: OSV:GHSA-7X27-G8RG-X87W...
0xkobold (>=0.0.1, <=0.8.0), @0xwork/connect (>=0.1.0, <=0.1.7) +561 more potentially affected by CVE-2026-54327 via @mariozechner/pi-coding-agent (>=0.14.2, <=0.73.1)
@mariozechner/pi-coding-agent NPM version =0.14.2, =0.0.1, =0.1.0, =1.0.0-alpha, =0.1.8-fix.3, =0.0.183-staging.22859086, =5.0.0, =0.1.6-staging.22859086, =0.1.1-staging.04cc300a, =4.0.153, =0.1.1-staging.04cc300a, =0.1.0, =0.1.1-staging.29187771, =0.1.1-staging.0dc03363, =0.0.2-staging.29187771,...
@theia/ai-claude-code (>=1.65.0, <=1.70.2), @theia/ai-codex (>=1.67.0-next.56, <=1.70.2) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0, <=1.70.2)
@theia/ai-chat-ui NPM version =1.57.0, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.70.2 Source cves: CVE-2026-22551 Source advisory: OSV:GHSA-QWJM-9C66-W4Q4...
@a1st/aix (>=0.0.3, <=0.6.0), @a1st/aix-core (>=0.2.0, <=0.6.0) +18 more potentially affected by CVE-2026-50146 via astro (>=6.0.0-beta.1, <=6.3.1)
astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =1.4.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.1.0 - astro-papyrus 0.2.2 and more Source cves: CVE-2026-50146 Source advisory: SNYK:JS-ASTRO-17356186...
@cwa/nuxt-edge (>=1.0.0-29304822.f444f03, <=1.0.0-29317775.3ebbdc9), @geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4) +1 more potentially affected by CVE-2026-56301 via nuxt (>=3.18.1, <=3.20.1)
nuxt NPM version =3.18.1, =1.0.0-29304822.f444f03, =9.13.1-rc.9, =1.0.1-alpha.0, =1.0.1-alpha.33 Source cves: CVE-2026-56301 Source advisory: OSV:GHSA-534H-C3CW-V3H9...
@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +36 more potentially affected by CVE-2026-54265 via @angular/compiler (>=20.0.0, <=20.3.21)
@angular/compiler NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-54265 Source advisory:...
4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +40 more potentially affected by CVE-2026-52725 via @angular/core (>=19.0.0, <=19.2.20)
@angular/core NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.0.5, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.0.0-beta-20260114160010, =0.0.1-canary.0.0, =1.0.0-canary.1 and more Source cves: CVE-2026-52725 Source advisory:...
libcrux-aead (>=0.0.4-pre.1, <=0.0.7) potentially affected by unknown CVE via libcrux-chacha20poly1305 (>=0.0.4, <=0.0.7-rc.1)
libcrux-chacha20poly1305 CARGO version =0.0.4, =0.0.4-pre.1, =0.0.7 Source cves: unknown CVE Source advisory: OSV:GHSA-HC3C-63HC-2R9F...
org.webjars.npm:github-com-daichirata-vue-sanitize (0.2.2), org.webjars.npm:github-com-daichirata-vue-sanitize- (0.2.2) potentially affected by CVE-2026-44990 via org.webjars.npm:sanitize-html (2.7.0)
org.webjars.npm:sanitize-html MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sanitize-html and may be impacted: - org.webjars.npm:github-com-daichirata-vue-sanitize 0.2.2 -...
@cedarjs/api-server (>=1.0.0-canary.12863, <=9.0.0-canary.1784), @cedarjs/cli (>=1.0.0-canary.12863, <=9.0.0-canary.1784) +16 more potentially affected by CVE-2026-23870 via react-server-dom-webpack (>=19.2.0-canary-cee7939b-20250625, <=19.2.4)
react-server-dom-webpack NPM version =19.2.0-canary-cee7939b-20250625, =1.0.0-canary.12863, =1.0.0-canary.12863, =6.0.0-canary.2639, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =3.0.0-canary.13429, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...
async-std-resolver (>=0.25.0-alpha.1, <=0.25.0-alpha.5), ezk-sip-ua (>=0.5.0, <=0.7.1) +5 more potentially affected by unknown CVE via hickory-proto (>=0.25.0-alpha.1, <=0.25.0-alpha.5)
hickory-proto CARGO version =0.25.0-alpha.1, =0.25.0-alpha.1, =0.5.0, =0.25.0-alpha.1, =0.25.0-alpha.5 - hickory-resolver 0.25.0-alpha.1 - hickory-server 0.25.0-alpha.1 - shadowsocks 1.22.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3V94-MW7P-V465...
0xble (>=14.0.0, <=21.9.1), 100xchat (>=1.1.5, <=1.3.5) +4483 more potentially affected by CVE-2026-8656 via jsondiffpatch (>=0.0.11, <=0.7.3)
jsondiffpatch NPM version =0.0.11, =14.0.0, =1.1.5, =1.0.0, =1.0.0, =1.0.4, =0.10.6, =0.1.6, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.1, =0.1.0-alpha.1, =0.1.0, =0.3.1, =0.5.10, =1.2.4 and more Source cves: CVE-2026-8656 Source advisory: SNYK:JS-JSONDIFFPATCH-1663594...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +550 more potentially affected by unknown CVE via hono (>=4.0.0, <=4.12.12)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-HONO-16080667...
-lidonghui (1.0.0), -test-bitbucket-branch-manager (1.0.1) +60186 more potentially affected by CVE-2026-40895 via follow-redirects (>=1.0.0, <=1.15.11)
follow-redirects NPM version =1.0.0, =1.0.1, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - 03-asenkronsdasdsadavehttprequest 1.0.0 - 04-17 1.0.0 - 04-17zy 1.0.0 - 04-a 1.0.0 and more Source cves: CVE-2026-40895 Source advisory: OSV:GHSA-R4Q5-VMMM-2653...
net.mingsoft:ms-mweixin (1.0.7) potentially affected by CVE-2026-2666 via net.mingsoft:ms-mcms (6.2.1)
net.mingsoft:ms-mcms MAVEN version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-mcms and may be impacted: - net.mingsoft:ms-mweixin 1.0.7 Source cves: CVE-2026-2666 Source advisory: SNYK:JAVA-NETMINGSOFT-15323728...
actix-web-csp (0.1.0), actor-kit (>=0.1.0, <=0.2.1) +659 more potentially affected by unknown CVE via lru (>=0.9.0, <=0.15.0)
lru CARGO version =0.9.0, =0.1.0, =0.9.0, =0.0.24, =0.0.23, =0.1.0, =1.0.0, =0.4.0, =0.1.0, =0.1.0, =0.1.3, =0.3.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0002...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +297 more potentially affected by unknown CVE via next (>=15.3.0, <=15.3.6)
next NPM version =15.3.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.1.0, =0.0.5-alpha-20250409222818-a35bb677fde1e4e9cf3db443e9ae36abf4f8e21b, =0.0.20, =0.0.22 - @aeon-ai-pay/x402-axios 0.0.1 - @aeon-ai-pay/x402-hono 0.0.3 - @affrawidy/wawok 1.1.4 - @agogic/business-data 0.0.2 and more Source cves:...
@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +222 more potentially affected by unknown CVE via hono (>=4.0.0, <=4.10.2)
hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.7.1, =0.2.1, =0.6.1, =0.5.2, =0.0.3, =1.3.2, =0.1.0, =0.75.0, =0.81.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-HONO-13720736...
@cedarjs/api-server (>=0.0.4, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=5.0.7-next.219, <=7.0.0-canary.3122) +53 more potentially affected by unknown CVE via @escape.tech/graphql-armor-max-depth (>=2.0.0, <=2.4.1)
@escape.tech/graphql-armor-max-depth NPM version =2.0.0, =0.0.4, =5.0.7-next.219, =0.0.4, =5.0.4-next.167, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.9.1-next.19, =7.0.0-canary.3092, =0.0.4, =7.0.0-canary.3114, =0.0.4, =9.0.0-canary.1784 and more Source cves: unknown CVE Source advisory:...
@cedarjs/api-server (>=0.0.4, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=5.0.7-next.219, <=7.0.0-canary.3122) +53 more potentially affected by unknown CVE via @escape.tech/graphql-armor-max-depth (>=2.0.0, <=2.4.1)
@escape.tech/graphql-armor-max-depth NPM version =2.0.0, =0.0.4, =5.0.7-next.219, =0.0.4, =5.0.4-next.167, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.9.1-next.19, =7.0.0-canary.3092, =0.0.4, =7.0.0-canary.3114, =0.0.4, =9.0.0-canary.1784 and more Source cves: unknown CVE Source advisory:...
brick (0.0.0), bud (>=0.0.0, <=0.1.2) +16 more potentially affected by unknown CVE via first-val (0.0.0)
first-val NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on first-val and may be impacted: - brick 0.0.0 - bud =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =0.0.0, =3.1.1, =0.0.0, =0.0.4, =0.0.0, =0.0.2 and more Source cves:...
@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)
babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15281...
@blinkk/root-cms (>=1.2.0, <=2.0.0-rc.1), @genkit-ai/ai (>=0.5.0-rc.0, <=0.9.0) +47 more potentially affected by unknown CVE via @genkit-ai/core (>=0.5.0, <=0.9.0-rc.3)
@genkit-ai/core NPM version =0.5.0, =1.2.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.7, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-GENKITAICORE-12671226...
@ronin-dist/render (>=1.0.386-leo-ron-885-experimental.35, <=1.0.490), @ronin/blade (>=0.0.1, <=0.2.7) +1 more potentially affected by unknown CVE via @sentry/bun (>=8.11.0, <=8.41.0)
@sentry/bun NPM version =8.11.0, =1.0.386-leo-ron-885-experimental.35, =0.0.1, =0.1.0, =0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...
@laboratory-one/api-components (>=0.0.16, <=0.0.21), @rxap/nest-sentry (>=10.4.5-dev.1, <=10.4.5) potentially affected by unknown CVE via @sentry/nestjs (>=8.18.0, <=8.26.0)
@sentry/nestjs NPM version =8.18.0, =0.0.16, =10.4.5-dev.1, =10.4.5 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...
cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)
cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RG2Q-2JH9-447Q...
crabsay (>=0.1.0, <=0.1.1), craterfinder (>=0.1.0, <=0.1.1) +11 more potentially affected by unknown CVE via ferris-says (0.2.1)
ferris-says CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on ferris-says and may be impacted: - crabsay =0.1.0, =0.1.0, =0.1.0, =0.1.1 - rs-lean 0.1.0 - rust-study 0.1.0 - rustbyexample 0.2.0 - rusty-grep 0.1.0 - rusty-redis 0.1.0...
@berrywallet/core (>=0.1.0, <=0.2.1), @counterplay/simpleflake (>=2.0.0, <=2.0.1) +55 more potentially affected by unknown CVE via bignum (>=0.12.5, <=0.13.0)
bignum NPM version =0.12.5, =0.1.0, =2.0.0, =1.0.0, =1.0.0, =0.14.6, =0.1.0, =1.1.0, =0.0.2, =0.0.17, =0.5.0, =1.0.0, =1.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7CGC-FJV4-52X6...
abci-storage (0.0.3), arcon_backend (>=0.1.0, <=0.1.1) +138 more potentially affected by unknown CVE via rocksdb (>=0.1.1, <=0.18.0)
rocksdb CARGO version =0.1.1, =0.1.0, =0.2.0, =0.2.0, =0.1.1, =1.2.0-alpha-1, =0.6.0, =6.0.0, =0.1.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XPP3-XRFF-W6RH...
@codingsh/harmony-crypto (>=0.1.57, <=0.1.58) potentially affected by unknown CVE via scrypt-shim (0.0.1-security)
scrypt-shim NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on scrypt-shim and may be impacted: - @codingsh/harmony-crypto =0.1.57, =0.1.58 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5972...
abci-storage (0.0.3), arcon_backend (>=0.1.0, <=0.1.1) +138 more potentially affected by unknown CVE via rocksdb (>=0.1.1, <=0.18.0)
rocksdb CARGO version =0.1.1, =0.1.0, =0.2.0, =0.2.0, =0.1.1, =1.2.0-alpha-1, =0.6.0, =6.0.0, =0.1.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0046...
08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +10866 more potentially affected by CVE-2021-21366 via xmldom (>=0.1.2, <=0.4.0)
xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.1.0, =6.0.0-rc.0 and more Source cves: CVE-2021-21366 Source advisory: OSV:GHSA-H6Q6-9HQW-RWFV...
amethyst_nphysics (>=0.0.1, <=0.2.0), arci-urdf-viz (>=0.0.1, <=0.1.0) +52 more potentially affected by unknown CVE via ncollide3d (>=0.15.4, <=0.33.0)
ncollide3d CARGO version =0.15.4, =0.0.1, =0.0.1, =0.1.1, =0.1.0, =0.3.0, =0.12.0, =0.2.0, =0.2.0, =0.3.0, =0.2.0, =0.2.2 - f3lsurface 0.2.0 - fere 0.0.0 - fere-common 0.0.0 - fere-resources 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0150...
@dotgov/bpmn (>=0.0.1, <=0.0.29), @dotgov/z_bpmn (>=0.0.1, <=2.0.0) +19 more potentially affected by unknown CVE via bpmn-js-properties-panel (>=0.11.2, <=0.30.0)
bpmn-js-properties-panel NPM version =0.11.2, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.1, =1.1.22, =1.0.97, =2.0.0, =1.0.14, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VPJ4-89Q8-RH38...
@any4/model (>=0.0.1, <=1.2.4), @boundstate/hapi-typeorm (0.0.1) +35 more potentially affected by unknown CVE via typeorm (>=0.0.2-alpha.43, <=0.1.14)
typeorm NPM version =0.0.2-alpha.43, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.6.2, =0.1.2, =0.1.19, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W7Q7-VJP8-7JV4...
@chumbas/common (>=1.0.3, <=1.0.4), @safnode/common (1.0.3) potentially affected by unknown CVE via expess (0.0.1-security)
expess NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on expess and may be impacted: - @chumbas/common =1.0.3, =1.0.4 - @safnode/common 1.0.3 Source cves: unknown CVE Source advisory: GHSA-FP26-772H-P6RF...
@dudadev/zip-modifier-utils (1.1.0), @newsssticketing/common (>=1.0.4, <=1.0.16) +4 more potentially affected by unknown CVE via experss (0.0.1-security)
experss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on experss and may be impacted: - @dudadev/zip-modifier-utils 1.1.0 - @newsssticketing/common =1.0.4, =2.0.1, =1.0.2, =1.0.6 Source cves: unknown CVE Source advisory:...
ai.konduit.serving:konduit-serving-api (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-cli (>=0.0.2, <=0.3.0) +3471 more potentially affected by CVE-2026-87822 via com.tdunning:t-digest (>=3.0, <=3.3)
com.tdunning:t-digest MAVEN version =3.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.1.0, =j8.2.2.0, =j11.2.6.2 and more Source cves: CVE-2026-87822 Source advisory: SNYK:JAVA-COMTDUNNING-19659413...