2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4328 more potentially affected by CVE-2026-83614 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83614 Source advisory: OSV:GHSA-93R5-FHX6-VMG9...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83614 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83614 Source advisory: OSV:GHSA-93R5-FHX6-VMG9...

5ug-cli (>=1.0.84, <=1.4.0), @1d/analytics (3.0.0) +1206 more potentially affected by CVE-2026-83614 via xmldom (>=0.3.0, <=0.5.0)

xmldom NPM version =0.3.0, =1.0.84, =0.1.96, =0.0.59, =0.0.12, =2.2.0, =1.0.0, =1.2.0, =1.3.0, =1.3.2 - @accordproject/markdown-cicero 0.14.1-20210808180043 - @accordproject/markdown-cli 0.14.1-20210808180043 - @accordproject/markdown-common 0.14.1-20210808180043 - @accordproject/markdown-docx...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83612 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83612 Source advisory: OSV:GHSA-6MJ3-QW4J-HGRW...

@adobe/spacecat-shared-brand-client (>=1.1.31, <=1.1.35), @adobe/spacecat-shared-cloud-manager-client (>=1.0.0, <=1.4.3) +307 more potentially affected by CVE-2026-84367 via joi (>=18.0.0, <=18.2.3)

joi NPM version =18.0.0, =1.1.31, =1.0.0, =1.8.6, =2.61.4, =1.4.60, =1.6.11, =1.19.1, =1.11.2, =2.2.1, =1.0.0, =1.12.0, =3.14.0, =0.0.14, =0.0.39 and more Source cves: CVE-2026-84367 Source advisory: OSV:GHSA-GG4H-3HG2-GRPC...

@0xsequence/web3-onboard-plugin (2.0.5), @0xzoz/tallyho (>=2.0.11, <=2.0.14) +1800 more potentially affected by CVE-2026-84367 via joi (>=17.1.1, <=17.13.4)

joi NPM version =17.1.1, =2.0.11, =0.1.6-alpha.2, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.16.17-beta-0213b250, =1.8.31, =1.1.12, =1.7.1, =1.8.31, =1.0.0, =1.16.34-beta-20241113-102431-65542b84 and more Source cves: CVE-2026-84367 Source advisory: OSV:GHSA-GG4H-3HG2-GRPC...

@0xshogun/sdk (>=1.0.3, <=1.1.6), @100xsystems/test-suite-typescript (>=0.1.0, <=0.1.2) +1535 more potentially affected by CVE-2026-84373 via vitest (>=2.1.0, <=4.1.10)

vitest NPM version =2.1.0, =1.0.3, =0.1.0, =0.0.1, =0.2.4, =0.0.3, =0.2.0, =0.1.1, =0.1.1, =0.1.0, =0.8.0, =0.0.14, =0.6.0, =1.2.0, =1.0.30, =1.0.33 and more Source cves: CVE-2026-84373 Source advisory: OSV:GHSA-82FW-GWWQ-J7X9...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4320 more potentially affected by CVE-2026-83607 via @xmldom/xmldom (>=0.7.0, <=0.8.13)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83607 Source advisory: OSV:GHSA-W2RR-34G9-RVRJ...

org.webjars.npm:actions__core (>=1.10.0, <=1.11.1), org.webjars.npm:actions__http-client (>=2.2.1, <=2.2.3) +14 more potentially affected by CVE-2026-84961 via org.webjars.npm:undici (>=4.12.2, <=5.29.0)

org.webjars.npm:undici MAVEN version =4.12.2, =1.10.0, =2.2.1, =0.1.16, =0.1.28 - org.webjars.npm:elasticelasticsearch 8.6.0 - org.webjars.npm:elastictransport 8.3.1 - org.webjars.npm:firebase 10.13.0 - org.webjars.npm:firebaseauth 1.7.7 - org.webjars.npm:firebaseauth-compat 0.5.12 -...

org.webjars.npm:actions__core (>=1.10.0, <=1.11.1), org.webjars.npm:actions__http-client (>=2.2.1, <=2.2.3) +14 more potentially affected by CVE-2026-84933 via org.webjars.npm:undici (>=4.12.2, <=5.29.0)

org.webjars.npm:undici MAVEN version =4.12.2, =1.10.0, =2.2.1, =0.1.16, =0.1.28 - org.webjars.npm:elasticelasticsearch 8.6.0 - org.webjars.npm:elastictransport 8.3.1 - org.webjars.npm:firebase 10.13.0 - org.webjars.npm:firebaseauth 1.7.7 - org.webjars.npm:firebaseauth-compat 0.5.12 -...

@01.software/cli (>=0.1.1, <=0.10.3), @01.software/sdk (>=0.1.0-dev.260119.0a66443, <=0.29.0) +2190 more potentially affected by CVE-2026-18149 via undici (>=7.11.0, <=7.29.0)

undici NPM version =7.11.0, =0.1.1, =0.1.0-dev.260119.0a66443, =0.4.0, =1.0.0, =0.6.0, =0.1.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.260505.5, =0.260605.2 and more Source cves: CVE-2026-18149 Source advisory: SNYK:JS-UNDICI-19635206...

03-api-solid (>=1.0.0, <=1.1.2), 0uth (>=1.0.5, <=1.2.1) +3014 more potentially affected by CVE-2026-76169 via fastify (>=4.0.2, <=5.12.1)

fastify NPM version =4.0.2, =1.0.0, =1.0.5, =1.0.3, =0.0.3, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =3.0.0, =0.1.0, =2.0.0, =3.0.0, =0.0.1, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-76169 Source advisory: SNYK:JS-FASTIFY-19639043...

@agent-tool-platform/ast-summarizer (>=0.1.0, <=0.1.1), @agent-tool-platform/runtime (>=0.1.0, <=0.1.2) +582 more potentially affected by CVE-2026-84504 via fastify (>=5.0.0, <=5.12.1)

fastify NPM version =5.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.4, =0.0.0-vBETA-20260417080530, =0.0.1, =1.60.2, =1.0.0, =0.0.0, =2.0.1, =0.1.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-84504 Source advisory: SNYK:JS-FASTIFY-19639040...

org.webjars.npm:github-com-cisco-node-jose (2.2.0), org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6) +7 more potentially affected by CVE-2026-33894 +1 more via org.webjars.npm:node-forge (>=0.7.1, <=1.3.3)

org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =2.1.1 Source cves: CVE-2026-33894, CVE-2026-85393 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-19635205...

@cedarjs/api-server (>=1.0.0-canary.12281, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=5.0.7-next.219, <=7.0.0-canary.3116) +41 more potentially affected by CVE-2026-85124 via @fastify/http-proxy (>=11.1.2, <=11.6.1)

@fastify/http-proxy NPM version =11.1.2, =1.0.0-canary.12281, =5.0.7-next.219, =1.0.0-canary.12281, =5.0.4-next.167, =1.0.0-canary.12281, =1.0.0-canary.12281, =4.0.0-canary.13864, =4.0.0-canary.13864, =1.0.0-canary.12281, =3.0.0-alpha-1, =0.0.4, =0.3.0, =0.1.0, =0.4.22 and more Source cves:...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +246 more potentially affected by CVE-2026-84369 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-84369 Source advisory: SNYK:JS-SVGO-19498536...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +11138 more potentially affected by CVE-2026-73086 via nanoid (>=3.0.0, <=3.3.11)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-73086 Source advisory: OSV:GHSA-XWG4-73V4-XW9W...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4328 more potentially affected by CVE-2026-83611 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83611 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498557...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +19393 more potentially affected by CVE-2026-73089 via browserslist (>=4.0.0, <=4.28.6)

browserslist NPM version =4.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0...

1st-project (1.0.2), 2c2p-integration (>=0.2.0, <=0.2.2) +14127 more potentially affected by CVE-2026-83606 via @xmldom/xmldom (>=0.7.0, <=0.9.10)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.0, =1.0.8, =0.1.3, =0.0.7, =0.0.1, =0.1.3 and more Source cves: CVE-2026-83606 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498551...

com.alibaba.rsocket:alibaba-broker-grpc-gateway (>=1.0.0.m1, <=1.1.6), com.santaobrand.nexus:core-grpc (0.0.1) +47 more potentially affected by CVE-2026-82594 via io.github.lognet:grpc-spring-boot-starter (>=2.4.4, <=5.2.0)

io.github.lognet:grpc-spring-boot-starter MAVEN version =2.4.4, =1.0.0.m1, =0.0.1, =1.0.7, =0.0.4, =1.7.0, =2025.02, =2025.02, =2023.05, =0.11.1, =0.11.1, =0.11.1, =2.1.2 and more Source cves: CVE-2026-82594 Source advisory: SNYK:JAVA-IOGITHUBLOGNET-19433209...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +2257 more potentially affected by CVE-2026-77063 via multer (>=2.0.0, <=2.2.0)

multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =1.0.0, =0.0.1, =0.0.0-alpha.119, =1.2.1-dev.3, =1.0.0, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-77063 Source advisory: SNYK:JS-MULTER-19432134...

@aliceo2/infologger (>=1.16.0, <=1.18.0) potentially affected by CVE-2026-55215 via mariadb (3.5.2)

mariadb NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on mariadb and may be impacted: - @aliceo2/infologger =1.16.0, =1.18.0 Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...

@nohost/server (>=0.0.1-beta2, <=0.3.6) potentially affected by CVE-2026-55629 via whistle (>=2.3.7, <=2.9.85-beta)

whistle NPM version =2.3.7, =0.0.1-beta2, =0.3.6 Source cves: CVE-2026-55629 Source advisory: OSV:GHSA-3VFR-4GWF-QXFP...

abraham3k (>=1.3.8, <=1.5.3), accutuning-helpers (>=1.0.32, <=1.0.33) +75 more potentially affected by CVE-2026-76843 via flair (>=0.4.5, <=0.15.1)

flair PYPI version =0.4.5, =1.3.8, =1.0.32, =0.0.1, =0.1.0, =0.0.6, =0.1.20, =0.1.0, =0.1.0, =0.0.1.1, =0.2.4, =0.1.1, =0.0.1rc2, =0.0.1rc3488056308109 and more Source cves: CVE-2026-76843 Source advisory: SNYK:PYTHON-FLAIR-19256938...

0.app1 (1.0.52), 0.edsql (>=1.0.49, <=1.0.50) +29741 more potentially affected by CVE-2026-19693 via extract-zip (>=1.0.3, <=2.0.1)

extract-zip NPM version =1.0.3, =1.0.49, =1.0.49, =1.0.49, =1.0.51, =0.0.1, =0.8.0 - 10bis-shufersal-automation 1.0.0 - 123-movies 1.0.0 - 16promax-monitor 1.0.0 - 192.168.0.172 4.6.1 and more Source cves: CVE-2026-19693 Source advisory: SNYK:JS-EXTRACTZIP-19653641...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.29), @142vip/vuepress (0.0.1-alpha.19) +120 more potentially affected by CVE-2026-71439 via mermaid (>=11.6.0, <=11.16.0)

mermaid NPM version =11.6.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.16.0, =0.35.0, =0.2.0, =1.0.1 - @cognitivesand/md2pdf 0.1.3 and more Source cves: CVE-2026-71439 Source advisory: OSV:GHSA-RHH3-JPG6-66XH...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +243 more potentially affected by CVE-2026-71438 via mermaid (>=10.0.0, <=10.9.5)

mermaid NPM version =10.0.0, =0.18.0-beta.0, =0.17.0-alkemio-1, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.17.1, =0.0.19, =0.0.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-71438 Source advisory: SNYK:JS-MERMAID-18592324...

@apicity/mcp-server (0.8.6) potentially affected by unknown CVE via @apicity/meta (0.8.6)

@apicity/meta NPM version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.6 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +77 more potentially affected by CVE-2026-71314 via nuxt (>=3.1.2, <=3.21.8)

nuxt NPM version =3.1.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-71314 Source advisory: OSV:GHSA-HXCR-HM88-MPQ6...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70612 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70612 Source advisory: OSV:GHSA-P2RR-RVMM-C5FP...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70611 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70611 Source advisory: OSV:GHSA-F2R8-JV7C-XQMP...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70609 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70607 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70607 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-70606 via electron (>=42.0.0, <=42.4.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.1.20 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-70606 Source advisory: SNYK:JS-ELECTRON-18563352...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70605 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70605 Source advisory: SNYK:JS-ELECTRON-18563326...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70600 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +11 more potentially affected by CVE-2026-70599 via electron (>=40.0.0, <=40.8.5)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-70599 Source advisory: SNYK:JS-ELECTRON-18563334...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70598 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70597 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70597 Source advisory: OSV:GHSA-JM7P-CC5G-QWXX...

@ccfly/setup (0.1.7) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.7)

@ccfly/setup-darwin-x64 NPM version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.7 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.7) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.7)

@ccfly/setup-darwin-arm64 NPM version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.7 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70593 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70593 Source advisory: SNYK:JS-GHOST-18601956...

sign-alex (1.0.1) potentially affected by CVE-2026-70592 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-70592 Source advisory: SNYK:JS-GHOST-18612530...

@24hr/content-next (>=1.0.0, <=3.0.18), @24hr/natswrapper (>=1.0.0, <=1.0.20) +339 more potentially affected by CVE-2026-69240 via sequelize (>=6.0.0-beta.4, <=6.37.3)

sequelize NPM version =6.0.0-beta.4, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =15.0.0, =1.0.0, =1.0.43, =0.13.0, =5.0.0-alpha.3, =13.0.7-feature-244b53-kvkvw2nk, =1.0.63, =1.0.2, =1.1.3 and more Source cves: CVE-2026-69240 Source advisory: SNYK:JS-SEQUELIZE-18517006...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2158 more potentially affected by CVE-2026-16728 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =4.3.3, =4.3.3, =4.3.3, =4.3.3, =4.3.3, =4.5.7 - @adminjs/firebase-auth 1.0.0 and more Source cves: CVE-2026-16728 Source advisory: OSV:GHSA-8XCM-R25X-G524...

3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1081 more potentially affected by CVE-2026-13697 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-13697 Source...

@datastream/validate (>=0.0.4, <=0.0.38), @dearmrzhang/customs-mcp-server (>=0.1.2, <=1.1.0) +15 more potentially affected by CVE-2026-18446 via fast-uri (>=2.1.0, <=2.3.0)

fast-uri NPM version =2.1.0, =0.0.4, =0.1.2, =0.0.1, =0.0.1, =3.1.0-rc.0, =0.2.0, =0.2.0, =0.2.0, =0.0.1, =0.0.0, =1.0.0, =3.0.0, =1.7.0, =1.8.0 and more Source cves: CVE-2026-18446 Source advisory: OSV:GHSA-7P8R-X3MC-P8W7...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +28 more potentially affected by CVE-2026-14257 +1 more via brace-expansion (>=1.1.0, <=1.1.16)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.3, =0.1.0 and more Source cves: CVE-2026-14257, CVE-2026-69152 Source advisory: SNYK:JS-BRACEEXPANSION-18512280...