ai-sdk-provider-claude-code (>=0.2.0, <=1.1.1), claude-code-webui (>=0.1.34, <=0.1.48) +5 more potentially affected by unknown CVE via @anthropic-ai/claude-code (>=1.0.8, <=1.0.83)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =0.1.34, =1.8.0, =1.9.0 - cyrus-ai 0.1.44 - cyrus-claude-runner 0.0.22 - cyrus-edge-worker 0.0.27 - locadex 0.0.2-alpha.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PH6W-F82W-28W6...

@blubox/body-parser (>=1.0.0, <=1.0.1), @breautek/storm (>=8.0.0, <=8.4.0) +70 more potentially affected by CVE-2025-46653 via formidable (>=3.2.4, <=3.5.2)

formidable NPM version =3.2.4, =1.0.0, =8.0.0, =0.0.1, =0.0.1, =0.0.1, =3.4.4, =0.1036.4000, =40.0.1, =1.2.1, =0.2.14, =16.0.1, =2.13.1, =2.15.3 and more Source cves: CVE-2025-46653 Source advisory: OSV:GHSA-75V8-2H7P-7M2M...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +683 more potentially affected by unknown CVE via hpack (0.2.0)

hpack CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - acme-client =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.5.0, =0.1.3, =0.1.13 and more Source cves: unknown CVE Source advisory...

@agoric/access-token (>=0.4.16-dev-23c942c.0, <=0.4.16-dev.0), @agoric/assert (>=0.1.0, <=0.3.15-dev.2) +100 more potentially affected by unknown CVE via ses (>=0.0.1, <=0.15.24)

ses NPM version =0.0.1, =0.4.16-dev-23c942c.0, =0.1.0, =1.2.0, =1.3.0, =0.1.0, =0.10.8-dev.0, =0.2.0, =1.5.1, =0.5.6-dev-f662032.0, =0.0.1, =0.1.1, =0.0.9, =0.1.1, =0.2.0, =0.5.30-dev-fe997f2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WHPX-Q3RQ-W8JC...

@whalent/agent (0.3.288) potentially affected by unknown CVE via @whalent/agent-core (0.3.288)

@whalent/agent-core NPM version 0.3.288 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.288 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.232) potentially affected by unknown CVE via @whalent/agent-core (0.3.232)

@whalent/agent-core NPM version 0.3.232 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.232 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18308463...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22394 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F88M-G3JW-G9CJ...

@3ngram/server (0.7.0), @compeso/node-red-contrib-imap-email (1.0.0) +8 more potentially affected by unknown CVE via nodemailer (9.0.0)

nodemailer NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nodemailer and may be impacted: - @3ngram/server 0.7.0 - @compeso/node-red-contrib-imap-email 1.0.0 - @hybridaione/hybridclaw =0.25.3, =2.71.0, =2.72.0 - imapflow 1.4.1 -...

crypt_guard (0.1.4), env_encryption_tool (0.9.17) +8 more potentially affected by unknown CVE via pqcrypto-hqc (>=0.0.4, <=0.2.2)

pqcrypto-hqc CARGO version =0.0.4, =0.12.2, =0.1.0, =0.1.0, =0.2.0, =0.2.1, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0168...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +2332 more potentially affected by CVE-2026-44902 via @opentelemetry/exporter-prometheus (>=0.9.0, <=0.216.0)

@opentelemetry/exporter-prometheus NPM version =0.9.0, =0.1.0, =0.1.0-dev.00aaa03, =0.1.1, =0.1.0, =0.0.1, =1.0.21, =0.0.1, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.0.68 and more Source cves: CVE-2026-44902 Source advisor...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @alkemio/excalidraw (>=0.17.1-alkemio-5, <=0.19.0-alkemio-1) +101 more potentially affected by unknown CVE via @excalidraw/mermaid-to-excalidraw (>=0.3.0, <=1.1.2)

@excalidraw/mermaid-to-excalidraw NPM version =0.3.0, =0.18.0-beta.0, =0.17.1-alkemio-5, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.5.0-1848650, =0.17.1, =18.0.3, =0.18.0-patch.1, =0.17.1-08b13f9, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-39H7-PWV7-RC3X...

@bitblit/ratchet-aws-node-only (>=6.1.196-alpha, <=6.1.200-alpha), @bitblit/ratchet-epsilon-common (>=6.1.196-alpha, <=6.1.200-alpha) +71 more potentially affected by CVE-2026-82853 via nodemailer (>=8.0.0, <=8.0.4)

nodemailer NPM version =8.0.0, =6.1.196-alpha, =6.1.196-alpha, =6.1.196-alpha, =0.0.1, =3.35.0, =4.0.0-canary.13686, =4.0.0-canary.13686, =20.6.0, =5.0.10, =0.0.1-beta.0, =0.2.0-alpha.1, =0.19.1, =6.0.0-beta.9, =11.14.0, =11.22.1 and more Source cves: CVE-2026-82853 Source advisory:...

abe_gpsw (>=0.2.4, <=2.0.0), abstract-boot (>=0.2.0-beta.4, <=0.2.0-beta.7) +2546 more potentially affected by unknown CVE via gcc (>=0.3.35, <=0.3.55)

gcc CARGO version =0.3.35, =0.2.4, =0.2.0-beta.4, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0121...

@aarc-dev/auth-widget (>=0.0.1, <=0.0.20), @aarc-dev/wallet-auth (>=0.0.11, <=0.0.20) +9 more potentially affected by unknown CVE via @metamask/sdk-react (>=0.16.0, <=0.30.2)

@metamask/sdk-react NPM version =0.16.0, =0.0.1, =0.0.11, =0.0.12, =0.16.0, =0.3.0, =0.5.6, =0.9.0, =0.0.7, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-QJ3P-XC97-XW74...

watch-array (>=0.0.0, <=0.0.4) potentially affected by unknown CVE via new-list (>=0.0.5, <=2.0.0)

new-list NPM version =0.0.5, =0.0.0, =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27362...

srb2kartjs (>=2.2.7, <=2.2.9) potentially affected by unknown CVE via ldoash (0.0.1-security)

ldoash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldoash and may be impacted: - srb2kartjs =2.2.7, =2.2.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25007...

@actindo/core-ui (>=1.0.1, <=1.0.20), @dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8) +52 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=11.0.0, <=11.1.9)

@intlify/core-base NPM version =11.0.0, =1.0.1, =1.0.7, =1.1.2-app-13.7.1, =1.0.95, =0.0.1, =0.0.1, =0.0.1, =3.1.55, =11.0.0-beta.0, =11.0.0-beta.0, =11.0.0-beta.0, =11.1.9 - @mohaq/directus-extension-tiptap 1.0.3 and more Source cves: CVE-2025-53892 Source advisory: OSV:GHSA-X8QP-WQQM-57PH...

@ai-em/opentelemetry-nestjs (5.0.0), @amplication/opentelemetry-nestjs (>=1.0.0, <=4.2.1) +260 more potentially affected by unknown CVE via @opentelemetry/instrumentation (>=0.40.0, <=0.41.1)

@opentelemetry/instrumentation NPM version =0.40.0, =1.0.0, =1.0.14, =1.0.20, =3.0.1, =0.0.0-2023-07-27--11-15, =0.0.1, =0.0.0-alpha.20230501.1, =1.0.0-alpha.20230614.2, =0.1.2, =1.0.0, =2.3.95, =1.0.2-beta.0, =1.0.2-beta.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F8PQ-3926-8GX...

aubio-sys (>=0.2.0, <=0.2.1), bioutils (>=0.1.5, <=0.2.4) +31 more potentially affected by unknown CVE via ftp (3.0.1)

ftp CARGO version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ftp and may be impacted: - aubio-sys =0.2.0, =0.1.5, =0.2.0, =0.32.0, =0.0.1, =0.6.0, =0.6.0, =0.1.0, =0.0.1, =1.1.1, =0.3.0, =0.5.0, =0.0.1, =0.4.17, =0.6.0 and more Source cves:...

@byted/beejs (>=1.1.2, <=1.2.18), @wenbo/fis3-deploy-zip (1.0.0) +43 more potentially affected by unknown CVE via concat-stream (>=1.4.1, <=1.4.8)

concat-stream NPM version =1.4.1, =1.1.2, =0.0.0, =0.3.4, =0.0.0, =0.0.1, =1.0.0, =0.0.19, =0.0.1, =1.0.0, =1.0.0, =2.0.0, =0.0.7, =0.0.69 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G74R-FFVR-5Q9F...

agrisoln (1.0.0), drafty (>=0.1.14, <=0.2.37) +1 more potentially affected by unknown CVE via react-svg (>=2.1.10, <=2.1.22)

react-svg NPM version =2.1.10, =0.1.14, =0.2.37 - pcs-remote-monitoring-webui 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8XQR-4CPM-WX7G...

dhrav1 (1.1.2), irma-dodol78-riris (3.3.4) +2 more potentially affected by unknown CVE via dhrafortea (>=1.1.2, <=4.1.4)

dhrafortea NPM version =1.1.2, =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dhrafortea and may be impacted: - dhrav1 1.1.2 - irma-dodol78-riris 3.3.4 - joko-tek48-riris 4.3.2 - kurnia-sambel16-riris 2.3.1 Source cves: unknown CVE Source...

my-auto-follow (1.0.3) potentially affected by unknown CVE via @dreamguyxeon/libsignal-node (1.0.1)

@dreamguyxeon/libsignal-node NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @dreamguyxeon/libsignal-node and may be impacted: - my-auto-follow 1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-DREAMGUYXEONLIBSIGNALNODE-18748591...

@whalent/agent (0.3.241) potentially affected by unknown CVE via @whalent/agent-core (0.3.241)

@whalent/agent-core NPM version 0.3.241 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.241 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

5ug-cli (>=1.0.72, <=1.4.0), @343dev/optimizt (6.0.0) +85 more potentially affected by unknown CVE via svgo (>=2.0.0, <=2.8.0)

svgo NPM version =2.0.0, =1.0.72, =1.1.2, =2.0.0-fix-trigger-remove-colors-config-e26731597751d1581014163b7e73df159cf80be3.1, =0.0.2-0, =4.55.0, =2.12.3-canary.621.14971.0, =2.1.0-beta-1, =2.1.0-beta-1, =2.1.8, =5.0.0, =0.0.1, =2.7.4, =3.59.1--canary.1316.b3452bb.0, =4.0.0--canary.2146.fe4f461.0...

@343dev/optimizt (>=12.0.0, <=13.0.0), @brickflow/cli (>=0.0.8, <=0.0.27) +63 more potentially affected by unknown CVE via svgo (>=4.0.0, <=4.0.1)

svgo NPM version =4.0.0, =12.0.0, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =6.13.0, =0.0.1769658265953, =0.1.0-dev.00e4942, =1.1.0, =1.1.0, =1.1.0, =0.1.0, =1.0.44, =1.0.62 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVGO-18170231...

acme-validation-propagation (>=0.1.5, <=0.1.8), agnostic (>=0.2.1, <=0.2.6) +37 more potentially affected by unknown CVE via hickory-proto (>=0.24.4, <=0.25.0-alpha.5)

hickory-proto CARGO version =0.24.4, =0.1.5, =0.2.1, =0.24.0, =0.9.3, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.2.6, =0.2.8 - getip 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q2QQ-HMJ6-3WPP...

adventure-rusoto-ecs (0.4.0), adventure-rusoto-sns (0.4.0) +240 more potentially affected by unknown CVE via tokio-process (>=0.1.6, <=0.3.0-alpha.2)

tokio-process CARGO version =0.1.6, =0.0.2, =0.0.1, =0.1.5, =0.1.0, =0.2.1, =0.3.0, =0.1.0, =0.21.0, =0.2.0, =0.6.0, =0.6.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0055...

cn.herodotus.engine:oauth2-authentication-autoconfigure (>=3.5.5.3, <=3.5.6.2), cn.herodotus.engine:oauth2-authorization-server-autoconfigure (>=3.3.0.5, <=3.5.5.2) +2 more potentially affected by CVE-2026-23966 via org.webjars.npm:sm-crypto (0.3.13)

org.webjars.npm:sm-crypto MAVEN version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sm-crypto and may be impacted: - cn.herodotus.engine:oauth2-authentication-autoconfigure =3.5.5.3, =3.3.0.5, =3.3.0.5, =3.5.5.3, =3.5.6.2...

cargo-kconfig (0.0.1), cli-todo (>=0.2.0, <=0.7.0) potentially affected by unknown CVE via ncurses (6.0.1)

ncurses CARGO version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ncurses and may be impacted: - cargo-kconfig 0.0.1 - cli-todo =0.2.0, =0.7.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X77X-7MMH-CXV3...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-iam-project-select (1.0.1-alpha.1)

h1-cli-ext-iam-project-select NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-iam-project-select and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE...

@simplyjoe/private-package (1.0.1), antra567 (1.0.0) +1 more potentially affected by unknown CVE via lodashh (0.0.1-security)

lodashh NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodashh and may be impacted: - @simplyjoe/private-package 1.0.1 - antra567 1.0.0 - cfn-resolver-lib =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory:...

@aws-amplify/amplify-app (>=5.0.39-beta-latest.0, <=5.0.42), @aws-amplify/amplify-appsync-simulator (>=2.16.10-beta-latest.0, <=2.16.12) +67 more potentially affected by unknown CVE via aws-cdk-lib (>=2.172.0, <=2.189.0)

aws-cdk-lib NPM version =2.172.0, =5.0.39-beta-latest.0, =2.16.10-beta-latest.0, =5.0.38-beta-latest.0, =3.7.18-beta-latest.0, =3.1.26-beta-latest.0, =5.7.12-beta-latest.0, =3.5.18-beta-latest.0, =3.5.39-beta-latest.0, =5.1.31-beta-latest.0, =2.26.28-beta-latest.0, =5.5.18-beta-latest.0,...

czkawka_gui_orbtk (>=1.0.1, <=1.5.1), orbtk-simple-modal (0.1.0) +1 more potentially affected by unknown CVE via orbtk (>=0.1.9, <=0.3.1-alpha3)

orbtk CARGO version =0.1.9, =1.0.1, =0.1.0, =0.1.10 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0060...

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: SNYK:JS-CHRONONODE-1083228...

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.12), @belvoly-vue-aioa/tinymce (>=0.1.6, <=0.1.9) +56 more potentially affected by unknown CVE via tinymce (>=5.0.6, <=5.5.1)

tinymce NPM version =5.0.6, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =0.18.0, =0.0.1-alpha.9, =15.0.1, =1.2.2, =0.17.0, =0.1.0, =0.0.1, =0.0.4 - @yanghp/amis 1.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H96F-FC7C-9R55...

@baosight/xinrong (>=0.0.36, <=0.0.37), npm_1st_publish (1.0.0) +1 more potentially affected by unknown CVE via jqeury (0.0.1-security)

jqeury NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jqeury and may be impacted: - @baosight/xinrong =0.0.36, =0.0.37 - npm1stpublish 1.0.0 - wypulldom 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-4964-CJRR-JG97...

kik (>=0.0.0, <=1.3.0), kik-starter (2.2.0) potentially affected by unknown CVE via install-module (>=0.2.0, <=1.1.0)

install-module NPM version =0.2.0, =0.0.0, =1.3.0 - kik-starter 2.2.0 Source cves: unknown CVE Source advisory: GHSA-9X87-JGF4-PQWX...

ifood2-github-io (9.9.9) potentially affected by unknown CVE via ifood-github-io (9.9.9)

ifood-github-io NPM version 9.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ifood-github-io and may be impacted: - ifood2-github-io 9.9.9 Source cves: unknown CVE Source advisory: GHSA-RPXC-542F-P7HQ...

@tgticketing/common (>=1.0.2, <=1.0.25), pirvp (1.0.0) potentially affected by unknown CVE via exrpess (0.0.1-security)

exrpess NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on exrpess and may be impacted: - @tgticketing/common =1.0.2, =1.0.25 - pirvp 1.0.0 Source cves: unknown CVE Source advisory: GHSA-2JPR-64M9-6R9C...

@forgeax/game (>=0.3.0, <=0.3.4), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +7 more potentially affected by CVE-2026-82392 via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.2.4, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: CVE-2026-82392 Source advisory: OSV:GHSA-C59Q-G84Q-2GJ5...

byterag-core (0.3.0), byterag-ffi (0.3.0) +7 more potentially affected by CVE-2026-10740 via s2n-quic (1.37.0)

s2n-quic CARGO version 1.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on s2n-quic and may be impacted: - byterag-core 0.3.0 - byterag-ffi 0.3.0 - cryprot-net 0.1.0 - dbx-core =0.2.0-beta, =0.2.0-beta, =0.10.0, =0.1.0, =0.1.0, =0.2.2, =0.3.0 Source...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73412 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73412 Source advisory: SNYK:JS-SHESCAPE-18752072...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: SNYK:JS-SHESCAPE-18752068...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-72744 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0-rc.33), @hublo/sentinel (>=1.1.0-alpha.3, <=1.2.0-alpha.18) +39 more potentially affected by CVE-2026-71476 via nx (>=23.0.0, <=23.0.1)

nx NPM version =23.0.0, =1.0.0-rc.24, =1.1.0-alpha.3, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.1 and more Source cves: CVE-2026-71476 Source...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-71315 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-71315 Source advisory: SNYK:JS-NUXT-18565125...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +246 more potentially affected by unknown CVE via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVGO-18170231...

@whalent/agent (0.3.266) potentially affected by unknown CVE via @whalent/agent-core (0.3.266)

@whalent/agent-core NPM version 0.3.266 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.266 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...