@atlantjs/backend (>=11.0.11, <=11.0.79), @atlantjs/database (>=2.0.0, <=2.1.32) +6 more potentially affected by CVE-2026-73651 via typeorm (1.0.0)

typeorm NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on typeorm and may be impacted: - @atlantjs/backend =11.0.11, =2.0.0, =0.48.60, =1.6.5, =2.1.5, =0.2.0, =1.1.43, =1.1.45 Source cves: CVE-2026-73651 Source advisory:...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +2206 more potentially affected by CVE-2026-59892 via @opentelemetry/propagator-jaeger (>=2.0.0, <=2.8.0)

@opentelemetry/propagator-jaeger NPM version =2.0.0, =0.1.0, =0.1.0-dev.00aaa03, =0.1.1, =0.0.1, =0.0.53, =0.0.31, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =1.9.0-1 and more Source cves: CVE-2026-59892 Source...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +615 more potentially affected by CVE-2026-13760 via aws-cdk-lib (>=2.0.0, <=2.259.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: CVE-2026-13760 Source advisory: OSV:GHSA-VCRF-J523-4MRF...

@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +104 more potentially affected by unknown CVE via @hono/node-server (>=2.0.0, <=2.0.4)

@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: unknown CVE Source...

cc.zzzyu.seata:seata-server (>=2.4.0, <=2.5.0), cn.aifei:aifei-redis (1.0) +142 more potentially affected by CVE-2026-64609 via org.apache.fury:fury-core (>=0.5.0, <=0.10.3)

org.apache.fury:fury-core MAVEN version =0.5.0, =2.4.0, =1.1.4, =1.1.4, =1.0.0-solon, =1.0.0-solon, =1.0.0-solon, =1.0.0-solon, =1.0.0-solon, =1.0.0-solon, =1.0.0-solon, =1.7.0-beta1, =1.0.0-solon, =1.6.0-beta1, =1.6.0-beta1, =1.7.1 and more Source cves: CVE-2026-64609 Source advisory:...

@0xbigboss/starlight-llms-txt (>=0.8.0-beta.1, <=0.8.0-beta.2), @1771technologies/lytenyte-doc (1.0.13) +750 more potentially affected by CVE-2026-59730 via @astrojs/internal-helpers (>=0.3.0, <=0.10.0)

@astrojs/internal-helpers NPM version =0.3.0, =0.8.0-beta.1, =0.0.1, =1.0.0, =0.0.3, =0.2.0, =1.1.0, =1.0.0, =0.4.2, =0.9.0, =0.1.6, =1.0.1, =1.0.3 and more Source cves: CVE-2026-59730 Source advisory: SNYK:JS-ASTROJSINTERNALHELPERS-18085626...

astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by CVE-2026-59729 via astro (>=7.0.2, <=7.0.3)

astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: CVE-2026-59729 Source advisory: OSV:GHSA-F48W-9M4C-M7F5...

0xtrails (>=0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, <=0.18.4), 123pancli (1.0.0) +4526 more potentially affected by CVE-2026-67320 via axios (>=1.15.2, <=1.17.0)

axios NPM version =1.15.2, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =0.1.0, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =1.0.10, =1.0.10, =0.6.6, =0.6.10, =0.6.9, =0.0.1, =0.0.7 - @0xfps/voidcli 0.0.1 and more Source cves: CVE-2026-67320 Source advisory: OSV:GHSA-GCFJ-64VW-6MP9...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +19067 more potentially affected by CVE-2026-42039 +1 more via axios (>=1.0.0, <=1.17.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.1.2, =1.1.0, =2.0.0 and more Source cves: CVE-2026-42039, CVE-2026-67321 Source advisory: SNYK:JS-AXIOS-18060730...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +14458 more potentially affected by CVE-2026-67317 via axios (>=1.7.0, <=1.17.0)

axios NPM version =1.7.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.0, =0.1.0, =0.1.2, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =0.1.2 and more Source cves: CVE-2026-67317 Source advisory: OSV:GHSA-JQH4-M9W3-8HP9...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +19067 more potentially affected by CVE-2026-42264 +1 more via axios (>=1.0.0, <=1.17.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.1.2, =1.1.0, =2.0.0 and more Source cves: CVE-2026-42264, CVE-2026-67316 Source advisory: SNYK:JS-AXIOS-18065355...

@agentbadge/mcp (>=0.1.9, <=0.2.0), @agentbadge/passport (>=0.1.8, <=0.2.0) +120 more potentially affected by CVE-2026-59876 via protobufjs (>=8.2.0, <=8.6.4)

protobufjs NPM version =8.2.0, =0.1.9, =0.1.8, =0.1.1, =0.1.1, =1.16.0, =1.0.5, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.1.37, =0.1.29, =0.1.35 and more Source cves: CVE-2026-59876 Source advisory: OSV:GHSA-JFJ6-75FJ-8934...

@activepieces/piece-google-gemini (0.1.6), @activepieces/piece-google-vertexai (0.1.2) +8 more potentially affected by CVE-2026-13149 via brace-expansion (>=2.0.0, <=2.0.2)

brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver 1.1.2 - nx-cargo 1.0.0-alpha.2 Source cves: CVE-2026-13149 Source advisory: OSV:GHSA-3JXR-9VMJ-R5CP...

@0xjwlabs/discord-rpc (0.1.0), @0xsquid/react-hooks (>=1.0.0, <=2.0.0) +1566 more potentially affected by CVE-2026-67313 via axios (>=0.28.0, <=0.32.0)

axios NPM version =0.28.0, =1.0.0, =3.0.0-beta.0, =2.10.1, =1.0.0, =1.0.0, =0.1.0, =0.0.1, =0.0.2, =1.3.2, =1.4.13, =13.0.0, =16.5.4 and more Source cves: CVE-2026-67313 Source advisory: OSV:GHSA-42H9-826W-CGV3...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +19067 more potentially affected by CVE-2026-67313 via axios (>=1.0.0, <=1.17.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.1.2, =1.1.0, =2.0.0 and more Source cves: CVE-2026-67313 Source advisory: OSV:GHSA-42H9-826W-CGV3...

0xtrails (>=0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, <=0.18.4), 123pancli (1.0.0) +4526 more potentially affected by CVE-2026-67314 via axios (>=1.15.2, <=1.17.0)

axios NPM version =1.15.2, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =0.1.0, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =1.0.10, =1.0.10, =0.6.6, =0.6.10, =0.6.9, =0.0.1, =0.0.7 - @0xfps/voidcli 0.0.1 and more Source cves: CVE-2026-67314 Source advisory: OSV:GHSA-XJ6Q-8X83-JV6G...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +19067 more potentially affected by CVE-2026-67312 via axios (>=1.0.0, <=1.17.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.1.2, =1.1.0, =2.0.0 and more Source cves: CVE-2026-67312 Source advisory: SNYK:JS-AXIOS-18060165...

django-blog-zinnia-namespace (0.0.0) potentially affected by CVE-2026-16213 via django-blog-zinnia (0.20.0)

django-blog-zinnia PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-blog-zinnia and may be impacted: - django-blog-zinnia-namespace 0.0.0 Source cves: CVE-2026-16213 Source advisory: SNYK:PYTHON-DJANGOBLOGZINNIA-18017930...

@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +30 more potentially affected by CVE-2026-62206 via openclaw (>=2026.3.22, <=2026.6.6)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =1.1.50, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =2026.4.3-2 and more Source cves: CVE-2026-62206 Source advisory: SNYK:JS-OPENCLAW-18021343...

@whalent/agent (0.3.249) potentially affected by unknown CVE via @whalent/agent-core (0.3.249)

@whalent/agent-core NPM version 0.3.249 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.249 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.273) potentially affected by unknown CVE via @whalent/agent-core (0.3.273)

@whalent/agent-core NPM version 0.3.273 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.273 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.282) potentially affected by unknown CVE via @whalent/agent-core (0.3.282)

@whalent/agent-core NPM version 0.3.282 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.282 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.253) potentially affected by unknown CVE via @whalent/agent-core (0.3.253)

@whalent/agent-core NPM version 0.3.253 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.253 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.235) potentially affected by unknown CVE via @whalent/agent-core (0.3.235)

@whalent/agent-core NPM version 0.3.235 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.235 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.278) potentially affected by unknown CVE via @whalent/agent-core (0.3.278)

@whalent/agent-core NPM version 0.3.278 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.278 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

actix-prost (>=0.1.0, <=0.3.2), adns-server (>=0.1.0, <=0.3.0) +1309 more potentially affected by unknown CVE via serde_with (>=2.3.3, <=3.14.1)

serdewith CARGO version =2.3.3, =0.1.0, =0.1.0, =0.1.0, =0.40.23-1, =0.1.5, =0.4.0, =0.0.1, =1.0.0, =0.0.7, =0.1.1, =0.1.1, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7GCF-G7XR-8HXJ...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3502 more potentially affected by CVE-2026-54466 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54466 Source advisory: OSV:GHSA-XV26-6W52-CPH6...

-fides-amor-et-lux (1.0.0), -price-checker (>=1.0.0, <=1.0.5) +50706 more potentially affected by CVE-2026-62389 via ws (>=8.0.0, <=8.21.0)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =1.1.0, =0.1.0-rc.7, =0.1.0, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-62389 Source advisory: SNYK:JS-WS-17988732...

@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @a700/n8n-nodes-agent700 (>=1.0.5, <=1.0.7) +2130 more potentially affected by CVE-2026-59259 via n8n-workflow (>=2.0.0, <=2.27.1)

n8n-workflow NPM version =2.0.0, =1.0.0, =1.0.5, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.2.2, =0.3.6, =0.1.0, =1.0.0, =1.3.1 and more Source cves: CVE-2026-59259 Source advisory: SNYK:JS-N8NWORKFLOW-18017739...

@sigstore/cli (>=0.7.0, <=0.9.1) potentially affected by CVE-2026-59891 via @sigstore/oci (>=0.2.0, <=0.6.1)

@sigstore/oci NPM version =0.2.0, =0.7.0, =0.9.1 Source cves: CVE-2026-59891 Source advisory: SNYK:JS-SIGSTOREOCI-17972390...

@fedify/cli (>=2.2.0-dev.898, <=2.2.3) potentially affected by CVE-2026-50131 via @fedify/fedify (>=2.2.0, <=2.2.3-dev.1098)

@fedify/fedify NPM version =2.2.0, =2.2.0-dev.898, =2.2.3 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +5 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.0.0, <=2.0.18)

@fedify/vocab-runtime NPM version =2.0.0, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0-dev.1757, =2.0.0-dev.12, =2.0.0-dev.158, =2.0.0-dev.0, =2.0.0-dev.0, =2.0.18 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

@fedify/botkit (>=0.4.0-dev.177, <=0.4.0-dev.181), @fedify/botkit-sqlite (>=0.4.0-dev.177, <=0.4.0-dev.181) potentially affected by CVE-2026-50131 via @fedify/fedify (1.10.0)

@fedify/fedify NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.4.0-dev.177, =0.4.0-dev.177, =0.4.0-dev.181 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

a2grunnerp (>=0.1.0, <=0.1.8), a62-emotion (>=0.9.2, <=0.11.4) +2530 more potentially affected by CVE-2026-12482 via keras (>=1.2.1, <=3.15.1)

keras PYPI version =1.2.1, =0.1.0, =0.9.2, =1.0.0, =0.0.6, =0.0.1, =0.1.0.dev2, =0.0.1, =6.6.0, =0.0.3, =0.0.4 - adess 1.0.0 and more Source cves: CVE-2026-12482 Source advisory: SNYK:PYTHON-KERAS-17971535...

@ynhcj/xiaoyi-channel (>=0.0.1-release20260506, <=0.0.232-next) potentially affected by CVE-2026-62191 via openclaw (2026.6.6)

openclaw NPM version 2026.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @ynhcj/xiaoyi-channel =0.0.1-release20260506, =0.0.232-next Source cves: CVE-2026-62191 Source advisory: SNYK:JS-OPENCLAW-17970561...

@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +30 more potentially affected by CVE-2026-62190 via openclaw (>=2026.3.22, <=2026.6.6)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =1.1.50, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =2026.4.3-2 and more Source cves: CVE-2026-62190 Source advisory: SNYK:JS-OPENCLAW-17966767...

@openclaw/kitchen-sink (0.2.9), @shadowob/openclaw-shadowob (>=1.1.50, <=1.1.64) +1 more potentially affected by CVE-2026-62193 via openclaw (>=2026.6.5, <=2026.6.6)

openclaw NPM version =2026.6.5, =1.1.50, =0.0.1-release20260506, =0.0.232-next Source cves: CVE-2026-62193 Source advisory: SNYK:JS-OPENCLAW-17970567...

agora (>=0.0.3, <=0.1.2), ai-usvg (0.47.0) +278 more potentially affected by unknown CVE via rustybuzz (>=0.1.1, <=0.20.1)

rustybuzz CARGO version =0.1.1, =0.0.3, =0.1.0, =0.0.2, =0.0.2, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0206...

1password-node (>=3.0.0-rc.0, <=3.0.0), 2020-react (>=1.2.2, <=1.2.6) +9784 more potentially affected by CVE-2026-39244 via adm-zip (>=0.1.4, <=0.5.17)

adm-zip NPM version =0.1.4, =3.0.0-rc.0, =1.2.2, =1.0.0, =1.0.0, =3.4.0, =1.17.6-next.0, =0.0.89, =1.0.9, =0.0.1, =0.0.1, =0.1.2-alpha.0, =0.2.0, =0.1.0, =1.0.1, =1.0.2 and more Source cves: CVE-2026-39244 Source advisory: SNYK:JS-ADMZIP-17954277...

org.webjars.npm:karma-phantomjs2-launcher (0.3.2), org.webjars.npm:phantomjs (>=1.9.17, <=1.9.18) +4 more potentially affected by CVE-2026-39244 via org.webjars.npm:adm-zip (>=0.4.4, <=0.5.9)

org.webjars.npm:adm-zip MAVEN version =0.4.4, =1.9.17, =2.52.0, =2.53.3 Source cves: CVE-2026-39244 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17954278...

flaskbb-plugin-atom (>=0.1.0, <=0.2.0), flaskbb-plugin-conversations (>=2.0.1, <=2.0.2) +6 more potentially affected by CVE-2026-22659 via flaskbb (2.2.0)

flaskbb PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on flaskbb and may be impacted: - flaskbb-plugin-atom =0.1.0, =2.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0 Source cves: CVE-2026-22659 Source advisory: SNYK:PYTHON-FLASKBB-17950950...

flaskbb-plugin-atom (>=0.1.0, <=0.2.0), flaskbb-plugin-conversations (>=2.0.1, <=2.0.2) +6 more potentially affected by CVE-2026-22660 via flaskbb (2.2.0)

flaskbb PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on flaskbb and may be impacted: - flaskbb-plugin-atom =0.1.0, =2.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0 Source cves: CVE-2026-22660 Source advisory: SNYK:PYTHON-FLASKBB-17950951...

@mockoon/cli (>=9.0.0, <=9.6.1), @mockoon/serverless (>=9.0.0, <=9.6.1) +2 more potentially affected by CVE-2026-59148 via @mockoon/commons-server (>=9.0.0, <=9.6.1)

@mockoon/commons-server NPM version =9.0.0, =9.0.0, =9.0.0, =0.0.1, =0.30.0, =0.40.0 Source cves: CVE-2026-59148 Source advisory: SNYK:JS-MOCKOONCOMMONSSERVER-17957231...

@n8n/backend-test-utils (1.28.0), @n8n/db (1.28.0) +1 more potentially affected by CVE-2026-59209 via n8n-core (2.28.0)

n8n-core NPM version 2.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-core and may be impacted: - @n8n/backend-test-utils 1.28.0 - @n8n/db 1.28.0 - @n8n/task-runner 2.28.0 Source cves: CVE-2026-59209 Source advisory: SNYK:JS-N8NCORE-17954281...

@appium/base-plugin (>=3.2.0, <=3.3.0), @appium/fake-plugin (>=4.2.0, <=4.3.0) +9 more potentially affected by CVE-2026-58191 via @appium/base-driver (>=10.3.0, <=10.6.0)

@appium/base-driver NPM version =10.3.0, =3.2.0, =4.2.0, =1.0.0, =3.0.10, =2.107.37, =2.107.37, =3.3.0, =0.1.0-beta.1, =0.79.0, =1.0.96, =1.0.115 Source cves: CVE-2026-58191 Source advisory: SNYK:JS-APPIUMBASEDRIVER-17900619...

@injectivelabs/wallet-base (1.20.21), @injectivelabs/wallet-core (1.20.21) +9 more potentially affected by unknown CVE via @injectivelabs/sdk-ts (1.20.21)

@injectivelabs/sdk-ts NPM version 1.20.21 is affected by a known vulnerability. The following packages have a transitive dependency on @injectivelabs/sdk-ts and may be impacted: - @injectivelabs/wallet-base 1.20.21 - @injectivelabs/wallet-core 1.20.21 - @injectivelabs/wallet-cosmos 1.20.21 -...

@3kles/3kles-socketio (>=2.1.5, <=2.4.1), @5minds/processcube_engine (>=16.0.0-alpha.2, <=18.0.0-renovate-fc9b99-lz9hhvt1) +261 more potentially affected by CVE-2026-59724 via engine.io (>=6.5.1, <=6.6.6)

engine.io NPM version =6.5.1, =2.1.5, =16.0.0-alpha.2, =2.17.13, =1.16.10, =3.0.4, =2.0.28, =1.1.5-13, =0.1.0, =0.1.0, =0.1.0, =1.2.0, =12.0.1, =17.0.0 and more Source cves: CVE-2026-59724 Source advisory: SNYK:JS-ENGINEIO-17900560...

@adobe/helix-docx2md (1.9.29), @adobe/helix-importer (>=3.4.141, <=3.4.143) +33 more potentially affected by CVE-2026-59868 +1 more via js-yaml (>=5.0.0, <=5.1.0)

js-yaml NPM version =5.0.0, =3.4.141, =2.2.62, =1.0.8, =0.2.12, =0.2.12, =0.2.12, =0.2.13, =0.2.12, =0.2.16, =0.2.14, =0.2.12, =0.2.17 and more Source cves: CVE-2026-59868, CVE-2026-59869 Source advisory: SNYK:JS-JSYAML-17900092...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21427 more potentially affected by CVE-2026-59869 via js-yaml (>=3.0.0, <=3.14.2)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-59869 Source advisory: SNYK:JS-JSYAML-17900054...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +710 more potentially affected by CVE-2026-59897 via hono (>=4.3.6, <=4.12.26)

hono NPM version =4.3.6, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-59897 Source advisory: SNYK:JS-HONO-17900541...