@wmfs/tymly-fastify-plugin (>=1.57.0, <=1.59.0), homebridge-config-ui-x (>=4.41.4-test.3, <=4.43.0-test.2) potentially affected by CVE-2020-8136 +1 more via fastify-multipart (>=5.2.1, <=5.3.0)

fastify-multipart NPM version =5.2.1, =1.57.0, =4.41.4-test.3, =4.43.0-test.2 Source cves: CVE-2020-8136, CVE-2021-23597 Source advisory: SNYK:JS-FASTIFYMULTIPART-2395480...

@3kles/3kles-socketio (>=1.0.0, <=1.0.5), @livejack/broker (1.3.4) +22 more potentially affected by CVE-2022-21676 via engine.io (6.0.1)

engine.io NPM version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on engine.io and may be impacted: - @3kles/3kles-socketio =1.0.0, =0.1.0, =8.1.2, =1.4.0, =0.4.11, =0.4.0, =0.4.0, =0.4.10, =0.4.11, =0.4.5-beta4, =5.0.0, =1.0.0-alpha.1,...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +2000 more potentially affected by CVE-2021-23566 via nanoid (>=3.0.0, <=3.1.30)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.3, =1.0.0, =0.1.1-alpha.51, =0.0.20, =1.0.1, =0.0.1, =0.4.2, =0.4.11 - @agrippa-io/node-connection-manager 1.0.0 and more Source cves: CVE-2021-23566 Source advisory: SNYK:JS-NANOID-2332193...

@10yun/cv-mobile-ui (0.3.20), @aiot-toolkit/aiotpack (>=2.0.5-beta.11, <=2.0.5-widget-provider-beta.2) +184 more potentially affected by CVE-2020-7636 via adb-driver (>=0.0.1, <=0.1.8)

adb-driver NPM version =0.0.1, =2.0.5-beta.11, =1.0.0-beta.0, =1.0.0-beta.0, =2.0.0-26820200330001, =2.0.0-27520200518001, =2.0.0-26920200420001, =0.1.0, =1.0.0, =1.9.3, =1.9.3, =0.4.0-beta.0, =2.1.1 and more Source cves: CVE-2020-7636 Source advisory: OSV:GHSA-4M6Q-RXHM-675W...

@asephermann/capacitor-filechooser (0.0.1), @jewel998/mock-location (>=0.0.9, <=0.0.10) +53 more potentially affected by unknown CVE via mixme (>=0.0.1, <=0.4.0)

mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3-alpha.5, =0.0.1-alpha.1, =0.9.7-alpha.0, =0.8.1-alpha.0, =0.0.1-alpha.1, =0.2.1-alpha.1, =0.0.2-alpha.0, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-84P7-FH9C-6G8H...

rkyv_dyn (>=0.1.0, <=0.5.1), stackstring (0.0.2) +12 more potentially affected by CVE-2021-31919 via rkyv (>=0.1.1, <=0.5.2)

rkyv CARGO version =0.1.1, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.9.0, =0.9.0, =0.9.0, =0.8.0, =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.5 Source cves: CVE-2021-31919 Source advisory: OSV:GHSA-W5CR-FRPH-HW7F...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=1.0.2) +1234 more potentially affected by CVE-2021-37699 via next (>=1.2.3, <=11.0.1)

next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.0-canary.0, =0.0.1, =1.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2021-37699 Source advisory: OSV:GHSA-VXF5-WXWP-M7G9...

sealious (>=0.9.4, <=0.12.6) potentially affected by CVE-2021-25948 via expand-hash (1.0.1)

expand-hash NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on expand-hash and may be impacted: - sealious =0.9.4, =0.12.6 Source cves: CVE-2021-25948 Source advisory: OSV:GHSA-X3WR-V4WX-5QPC...

@agentlab/ldkg-ui-basetable (0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2, <=0.1.7) +163 more potentially affected by CVE-2021-32640 via ws (>=5.0.0, <=5.2.2)

ws NPM version =5.0.0, =0.1.2, =0.3.7, =0.1.8, =1.0.0, =1.0.0, =1.0.17-beta, =1.3.6, =0.1.0, =3.0.0-alpha.1, =3.0.0-alpha.1, =1.0.21, =1.0.27 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...

@ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=2.8.0), @apolitical/apis-client (>=1.0.0, <=1.1.5) +14 more potentially affected by CVE-2021-30246 via jsrsasign (>=10.0.0, <=10.1.13)

jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.2.0, =0.0.11, =9.21.5, =20.12.0, =20.12.0, =1.0.11, =0.1.1, =0.1.10, =0.1.11 and more Source cves: CVE-2021-30246 Source advisory: OSV:GHSA-27FJ-MC8W-J9WG...

hltc-webapi-master (>=1.0.0, <=1.2.0), verda (>=0.1.0, <=1.2.1) potentially affected by CVE-2020-7784 via ts-process-promises (1.0.2)

ts-process-promises NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ts-process-promises and may be impacted: - hltc-webapi-master =1.0.0, =0.1.0, =1.2.1 Source cves: CVE-2020-7784 Source advisory: OSV:GHSA-WW4J-C2RQ-47Q8...

ifinfo (0.1.0), prosafe_exporter (>=0.1.1, <=0.2.7) potentially affected by unknown CVE via interfaces2 (0.0.5)

interfaces2 CARGO version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on interfaces2 and may be impacted: - ifinfo 0.1.0 - prosafeexporter =0.1.1, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0002...

@concord-consortium/cloud-file-manager (>=2.0.0-pre.1, <=2.3.1), @hat-core/juggler (>=0.4.0-dev20200410, <=0.4.1-dev20210707) +45 more potentially affected by unknown CVE via jiff (>=0.6.0, <=0.7.3)

jiff NPM version =0.6.0, =2.0.0-pre.1, =0.4.0-dev20200410, =0.5.1-dev20210809, =0.1.0, =1.0.0, =1.0.1, =0.0.3, =2.0.0, =1.0.0, =0.0.1, =0.5.5, =1.0.0-3, =1.0.0-0, =1.0.0, =1.1.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-JIFF-1017118...

20mk-utils (>=1.0.0, <=1.0.3), 2o3t-icon-font (0.0.11) +8833 more potentially affected by unknown CVE via highlight.js (>=9.0.0, <=10.4.0)

highlight.js NPM version =9.0.0, =1.0.0, =0.0.1, =0.1.3, =1.0.0, =0.0.2, =0.3.0-alpha.22-10p, =0.1.56, =1.0.0, =1.3.0, =0.1.4, =11.0.1, =11.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7WWV-VH3V-89CQ...

00.demo (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +39570 more potentially affected by CVE-2020-7608 via yargs-parser (>=6.0.1, <=13.1.1)

yargs-parser NPM version =6.0.1, =1.0.0, =1.0.0, =8.3.5, =0.1.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2020-7608 Source advisory: OSV:GHSA-P9PC-299P-VXGP...

chalona-server (>=1.0.25, <=1.0.26), fbkt (>=1.0.4, <=2.0.10) +10 more potentially affected by unknown CVE via sql-injection (>=0.0.5, <=0.0.7)

sql-injection NPM version =0.0.5, =1.0.25, =1.0.4, =1.0.2, =1.0.0, =1.0.1, =1.0.1, =1.0.0, =0.0.1, =1.0.0, =0.9.49, =2.0.0, =2.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-HVXQ-J2R4-4JM8...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by unknown CVE via lodash.merge (>=4.0.1, <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H726-X36V-RX45...

webfm (>=0.9.0, <=0.9.37) potentially affected by CVE-2018-21036 via sails-hook-sockets (1.4.3)

sails-hook-sockets NPM version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on sails-hook-sockets and may be impacted: - webfm =0.9.0, =0.9.37 Source cves: CVE-2018-21036 Source advisory: OSV:GHSA-F7F4-HQP2-7PRC...

norska (>=0.7.0, <=0.8.4), norska-frontend (>=0.7.4, <=0.9.11) +5 more potentially affected by CVE-2020-7642 via lazysizes (>=5.1.1, <=5.2.0)

lazysizes NPM version =5.1.1, =0.7.0, =0.7.4, =0.7.4, =2.1.4, =0.5.2, =0.5.2, =0.7.2 - sov 0.2.4 Source cves: CVE-2020-7642 Source advisory: SNYK:JS-LAZYSIZES-567144...

sulu-file-system-view-prompt-here (>=1.0.2, <=1.0.4) potentially affected by CVE-2020-7602 via node-prompt-here (1.0.1)

node-prompt-here NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on node-prompt-here and may be impacted: - sulu-file-system-view-prompt-here =1.0.2, =1.0.4 Source cves: CVE-2020-7602 Source advisory: SNYK:JS-NODEPROMPTHERE-560115...

@philipplgh/electron-app-manager (>=0.12.0, <=0.56.0), electron-app-manager (>=0.56.0, <=0.57.1) +4 more potentially affected by unknown CVE via electron-updater (>=4.0.0, <=4.1.2)

electron-updater NPM version =4.0.0, =0.12.0, =0.56.0, =0.0.2, =4.0.3, =1.0.0, =1.3.1 Source cves: unknown CVE Source advisory: SNYK:JS-ELECTRONUPDATER-561421...

aart (>=0.1.0, <=0.1.1), advancedresearch-higher_order_point (>=0.1.0, <=0.3.0) +684 more potentially affected by unknown CVE via lzw (>=0.5.0, <=0.10.0)

lzw CARGO version =0.5.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0144...

@abtnode/mongoose-nedb (1.0.16), @andriyf/node-odata (>=0.7.15, <=0.7.1501) +515 more potentially affected by CVE-2019-17426 via mongoose (>=4.0.0, <=4.13.20)

mongoose NPM version =4.0.0, =0.7.15, =1.0.7, =0.0.0-alpha.1, =0.0.0, =0.0.1, =2.0.8, =1.2.17, =0.5.10, =0.2.0, =0.2.5-1, =0.1.2-beta.1, =0.4.0, =0.2.0, =0.3.1 and more Source cves: CVE-2019-17426 Source advisory: OSV:GHSA-8687-VV9J-HGPH...

@agoric/ertp (>=0.0.1, <=0.1.4), @agoric/marshal (>=0.0.1, <=0.1.0) +9 more potentially affected by unknown CVE via ses (>=0.0.1, <=0.5.3)

ses NPM version =0.0.1, =0.0.1, =0.0.1, =0.0.16, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.4, =0.6.0, =0.0.0, =0.0.19 Source cves: unknown CVE Source advisory: OSV:GHSA-6JG8-7333-554W...

@amitport/useful (>=0.5.0, <=0.5.2), @bb-cli/bb-test-plugin-ngmock (1.5.8) +688 more potentially affected by unknown CVE via angular (>=1.0.8, <=1.5.11)

angular NPM version =1.0.8, =0.5.0, =0.2.7, =1.0.21, =0.2.1, =1.10.5, =0.2.0, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.0, =1.0.0, =3.0.2, =4.5.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-28HP-FGCR-2R4H...

anjiayi-elf (>=1.0.0, <=1.0.9), anjiayi-exp (>=1.0.0, <=1.2.6) +5 more potentially affected by unknown CVE via lutils-merge (>=0.1.4, <=0.2.6)

lutils-merge NPM version =0.1.4, =1.0.0, =1.0.0, =1.0.0, =0.0.1-alpha, =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F7QW-5PVG-MMWP...

@doxteam/libs (>=1.0.0, <=1.0.3), @frenz/sql-repl (0.1.0) +111 more potentially affected by unknown CVE via sql (>=0.0.5, <=0.77.0)

sql NPM version =0.0.5, =1.0.0, =1.7.99, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =0.0.2, =0.0.31, =0.1.1, =1.0.1, =0.1.0, =0.1.0, =0.0.2, =0.1.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8F93-RV4P-X4JW...

contentful-import (5.0.2-beta1), http_bouncer_client (>=1.0.1, <=1.0.3) +1 more potentially affected by unknown CVE via http-proxy-agent (2.0.0)

http-proxy-agent NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on http-proxy-agent and may be impacted: - contentful-import 5.0.2-beta1 - httpbouncerclient =1.0.1, =1.0.3 - request-light 0.2.2 Source cves: unknown CVE Source advisory:...

accepted (>=0.2.0, <=0.3.2), aigc_api (5.1.2) +505 more potentially affected by unknown CVE via typemap (0.3.3)

typemap CARGO version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on typemap and may be impacted: - accepted =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0039...

chainsql-remixd (1.0.0), fusuma (0.11.4) +1 more potentially affected by CVE-2019-5417 via serve (7.0.0)

serve NPM version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on serve and may be impacted: - chainsql-remixd 1.0.0 - fusuma 0.11.4 - remixd =0.1.8-alpha.11, =0.1.8-alpha.16 Source cves: CVE-2019-5417 Source advisory: OSV:GHSA-XG75-3277-GVVJ...

@emartech/me-psql-query-builder (>=1.0.0, <=1.1.0), @evocodes/parse-server (>=2.2.17, <=2.2.27) +48 more potentially affected by CVE-2017-16082 via pg (>=5.0.0, <=5.1.0)

pg NPM version =5.0.0, =1.0.0, =2.2.17, =0.9.28, =1.0.0, =0.4.0, =0.1.0, =0.0.2, =0.1.3, =0.2.30, =0.2.33 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@launchql/cli (>=0.3.34, <=0.4.44), @launchql/db-testing (>=0.0.9, <=0.1.8) +8 more potentially affected by CVE-2017-16082 via pg (>=6.4.0, <=6.4.1)

pg NPM version =6.4.0, =0.3.34, =0.0.9, =0.0.4, =1.0.0, =0.6.22, =0.6.12, =1.0.31, =1.0.61 Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

10er10 (0.23.0), 10tcl (>=0.0.1, <=0.0.10) +4235 more potentially affected by CVE-2014-6394 via send (>=0.0.1, <=0.8.3)

send NPM version =0.0.1, =0.0.1, =1.0.1, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =1.0.6 - @axerunners/p2pool-scanner 0.0.2 - @azu/api-mock 1.0.0 and more Source cves: CVE-2014-6394 Source advisory: OSV:GHSA-XWG4-93C6-3H42...

cn.123tool.chen:commons (1.0.0), cn.acooly:acooly-auth-google-authenticator (5.2.1) +683 more potentially affected by CVE-2014-9515 via net.sf.dozer:dozer (>=4.0, <=5.5.1)

net.sf.dozer:dozer MAVEN version =4.0, =1.0.0, =2.1.0 and more Source cves: CVE-2014-9515 Source advisory: SNYK:JAVA-NETSFDOZER-15338467...

@fancyliu/speclite (>=0.1.0, <=0.3.0), actual-moneymoney (>=3.0.0, <=3.4.0) +1 more potentially affected by CVE-2026-77465 via toml (>=4.1.1, <=4.1.2)

toml NPM version =4.1.1, =0.1.0, =3.0.0, =2.7.0, =2.12.4 Source cves: CVE-2026-77465 Source advisory: OSV:GHSA-82X6-Q7MM-W9CF...

@absinthe/graphql-playground (>=1.3.1, <=1.3.5), @absinthe/socket (>=0.1.0, <=0.2.0) +52 more potentially affected by CVE-2026-56812 via phoenix (>=1.3.0, <=1.5.12)

phoenix NPM version =1.3.0, =1.3.1, =0.1.0, =0.1.2, =0.1.0, =0.1.2, =1.7.5, =1.5.1, =1.7.5, =1.8.1, =1.0.0, =1.5.6, =1.8.1, =1.8.1, =1.7.26, =1.7.26, =1.16.6-beta-eaa4d39d and more Source cves: CVE-2026-56812 Source advisory: OSV:GHSA-63MC-HW7G-86RR...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71869 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71869 Source advisory: OSV:GHSA-2H9G-J24R-H63G...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71868 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71868 Source advisory: OSV:GHSA-3575-W9FC-C2J6...

btree-leaderboard (2.3.1), btree-lru-cache (2.1.0) +7 more potentially affected by unknown CVE via btree-core (3.2.4)

btree-core NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on btree-core and may be impacted: - btree-leaderboard 2.3.1 - btree-lru-cache 2.1.0 - btree-range-store 1.0.2 - btree-time-index 1.2.1 - neighbor-key-map 2.1.4 -...

03-api-solid (>=1.0.0, <=1.1.2), 0uth (>=1.0.5, <=1.2.1) +2936 more potentially affected by CVE-2026-84394 via fast-uri (2.4.5)

fast-uri NPM version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on fast-uri and may be impacted: - 03-api-solid =1.0.0, =1.0.5, =1.0.3, =0.5.2-alpha-20231022145212-c0afe8d, =0.1.4-alpha-20231022145212-c0afe8d, =0.1.4-alpha-20231022145212-c0afe8...

@00rez/form-runner (>=1.0.0, <=1.0.6), @0gflow/explorer-api (>=1.0.0, <=1.0.3) +4144 more potentially affected by CVE-2026-84292 via fast-uri (>=4.1.2, <=4.1.3)

fast-uri NPM version =4.1.2, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =1.6.0, =0.1.0, =0.1.0, =1.0.0, =0.0.3, =0.1.6, =1.0.0, =1.1.0, =2.1.0 and more Source cves: CVE-2026-84292 Source advisory: SNYK:JS-FASTURI-19502739...

@diviops/mcp-server (1.5.40), @donadiosolutions/lcm (>=1.4.2, <=1.4.3) +17 more potentially affected by CVE-2026-75931 via fast-uri (>=3.1.4, <=3.1.5)

fast-uri NPM version =3.1.4, =1.4.2, =1.2.0, =1.4.18, =0.2.0-alpha.5, =0.1.0, =0.1.6, =0.16.2-cloud-1, =0.1.5, =0.1.3, =3.38.11, =0.1.0, =0.1.0, =0.1.12, =0.1.14 and more Source cves: CVE-2026-75931 Source advisory: OSV:GHSA-5JGF-P345-68V8...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (1.5.40) +24 more potentially affected by CVE-2026-75975 via fast-uri (>=3.0.1, <=3.1.5)

fast-uri NPM version =3.0.1, =0.3.1, =1.4.2, =1.2.0, =1.4.18, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.0, =0.1.6, =0.16.2-cloud-1, =1.25.0, =1.28.1 and more Source cves: CVE-2026-75975 Source advisory: OSV:GHSA-F65P-4M7J-42XC...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-72716 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-72716 Source advisory: OSV:GHSA-P4CG-3328-RVFG...

@noema/mfs (>=0.1.0, <=0.3.0), @storm-software/config-tools (>=1.28.2, <=1.30.2) +1 more potentially affected by unknown CVE via @humanfs/node (>=0.11.0, <=0.16.7)

@humanfs/node NPM version =0.11.0, =0.1.0, =1.28.2, =3.0.0, =3.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-P498-V437-472G...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1086 more potentially affected by CVE-2026-83609 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83609 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499073...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1086 more potentially affected by CVE-2026-83612 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83612 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499086...

abstract-hugpy-dev (>=0.1.32, <=0.1.35), abstract-ocr (>=0.0.1.69, <=0.0.1.70) +406 more potentially affected by CVE-2026-84202 via modelscope (>=1.1.1, <=1.39.1)

modelscope PYPI version =1.1.1, =0.1.32, =0.0.1.69, =0.0.29, =1.11.4, =20260210.0.0, =0.1.0, =0.4.0, =2.0.0, =0.4.0, =1.0.0, =1.1.2, =1.1.4 and more Source cves: CVE-2026-84202 Source advisory: SNYK:PYTHON-MODELSCOPE-19497923...

@yane88/workbuddy (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via @yane88/workbuddy-01 (>=1.0.0, <=1.0.2)

@yane88/workbuddy-01 NPM version =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: SNYK:JS-YANE88WORKBUDDY01-19477009...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +2280 more potentially affected by CVE-2026-77037 via multer (>=2.0.0, <=2.2.0)

multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =1.0.0, =0.0.1, =0.0.0-alpha.119, =1.2.1-dev.3, =1.0.0, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-77037 Source advisory: SNYK:JS-MULTER-19432131...