11668 matches found
@budibase/backend-core (>=3.0.0, <=3.2.26), @budibase/bbui (>=3.0.0, <=3.2.26) +7 more potentially affected by unknown CVE via @budibase/types (>=3.0.0, <=3.2.26)
@budibase/types NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASETYPES-18319719...
@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by unknown CVE via @budibase/backend-core (>=3.0.0, <=3.2.26)
@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASEBACKENDCORE-18319716...
budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)
@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18319707...
budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)
@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18319711...
assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +7 more potentially affected by CVE-2026-73429 via russh (>=0.34.0, <=0.43.0)
russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - sshrpc 0.1.0 - tunnels 0.1.0 Source cves: CVE-2026-73429 Source advisory: OSV:GHSA-G9HV-X236-4QP3...
3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +241 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)
next NPM version =15.5.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: OSV:GHSA-Q8WF-6R8G-63CH...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64644 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64641 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64641 Source advisory:...
@2gis/deck2gis-layer (>=3.0.0, <=3.0.13), @3cr/viewer-browser (>=0.0.327, <=0.0.333) +773 more potentially affected by CVE-2026-45820 via fflate (>=0.7.1, <=0.7.4)
fflate NPM version =0.7.1, =3.0.0, =0.0.327, =0.0.308, =1.0.29, =0.1.0, =3.0.17, =3.0.0-b.2, =1.3.1-isan.0, =1.3.3-isan.0, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =1.0.1, =2.7.3 and more Source cves: CVE-2026-45820 Source advisory: OSV:GHSA-PX8P-9VWX-VF98...
@chocolatey-software/astro (>=2.0.0, <=2.8.0), @kunyan/astro-blog (>=0.1.3, <=0.1.4) +19 more potentially affected by CVE-2026-59728 via @astrojs/rss (>=2.4.0, <=4.0.18)
@astrojs/rss NPM version =2.4.0, =2.0.0, =0.1.3, =0.0.1, =0.1.0, =0.0.9, =0.1.0, =0.2.0, =0.0.1, =1.0.29, =0.1.0, =0.2.0 and more Source cves: CVE-2026-59728 Source advisory: SNYK:JS-ASTROJSRSS-18085631...
@chocolatey-software/astro (>=2.0.0, <=2.8.0), @kunyan/astro-blog (>=0.1.3, <=0.1.4) +19 more potentially affected by CVE-2026-59728 via @astrojs/rss (>=2.4.0, <=4.0.18)
@astrojs/rss NPM version =2.4.0, =2.0.0, =0.1.3, =0.0.1, =0.1.0, =0.0.9, =0.1.0, =0.2.0, =0.0.1, =1.0.29, =0.1.0, =0.2.0 and more Source cves: CVE-2026-59728 Source advisory: OSV:GHSA-8J5Q-MFJ2-5Q9Q...
astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by CVE-2026-59727 via astro (>=7.0.2, <=7.0.3)
astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: CVE-2026-59727 Source advisory: SNYK:JS-ASTRO-18085579...
-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16499 more potentially affected by CVE-2026-42264 +1 more via axios (>=1.0.0, <=1.17.0)
axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42264, CVE-2026-67320 Source advisory: SNYK:JS-AXIOS-18065351...
@a-rt-works/auth0-deploy-cli (3.3.3), @acknow-srl/express-openid (>=1.0.0, <=1.0.1) +535 more potentially affected by CVE-2026-67320 via axios (>=0.31.1, <=0.32.0)
axios NPM version =0.31.1, =1.0.0, =0.0.1, =0.0.2, =1.3.2, =0.2.0, =0.0.2-beta.0, =2.0.14, =0.5.12, =1.0.0, =1.0.1, =32.0.0, =0.2.4, =0.3.0 and more Source cves: CVE-2026-67320 Source advisory: OSV:GHSA-GCFJ-64VW-6MP9...
@a-rt-works/auth0-deploy-cli (3.3.3), @acknow-srl/express-openid (>=1.0.0, <=1.0.1) +535 more potentially affected by CVE-2026-42264 +1 more via axios (>=0.31.1, <=0.32.0)
axios NPM version =0.31.1, =1.0.0, =0.0.1, =0.0.2, =1.3.2, =0.2.0, =0.0.2-beta.0, =2.0.14, =0.5.12, =1.0.0, =1.0.1, =32.0.0, =0.2.4, =0.3.0 and more Source cves: CVE-2026-42264, CVE-2026-67320 Source advisory: SNYK:JS-AXIOS-18065351...
@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +323 more potentially affected by CVE-2026-14631 via webpack-dev-server (>=5.0.0, <=5.2.5)
webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =0.7.7, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2 and more Source cves: CVE-2026-14631 Source advisory: OSV:GHSA-M28W-2PQF-7Q...
@0xwork/connect (>=0.1.0, <=0.1.9), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +922 more potentially affected by CVE-2026-59874 via tar (>=7.0.0, <=7.5.17)
tar NPM version =7.0.0, =0.1.0, =0.1.8-fix.3, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.4.23-zh, =0.1.0, =0.1.1, =0.1.1, =2026.4.4, =0.59.0, =0.64.0 - @aivibeclaw/speech-core 2026.6.10 and more Source cves: CVE-2026-59874 Source advisory: OSV:GHSA-8X88-C5MF-7J5W...
@0xwork/connect (>=0.1.0, <=0.1.9), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +920 more potentially affected by CVE-2026-59875 via tar (>=7.0.0, <=7.5.16)
tar NPM version =7.0.0, =0.1.0, =0.1.8-fix.3, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.4.23-zh, =0.1.0, =0.1.1, =0.1.1, =2026.4.4, =0.59.0, =0.64.0 - @aivibeclaw/speech-core 2026.6.10 and more Source cves: CVE-2026-59875 Source advisory: OSV:GHSA-GVWX-54WH-QM9J...
-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16499 more potentially affected by CVE-2026-42264 +1 more via axios (>=1.0.0, <=1.17.0)
axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42264, CVE-2026-67314 Source advisory: SNYK:JS-AXIOS-18060659...
@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +28 more potentially affected by CVE-2026-62211 via openclaw (>=2026.3.22, <=2026.5.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62211 Source advisory: SNYK:JS-OPENCLAW-18021338...
@0xwork/connect (>=0.1.0, <=0.1.8), @chrysb/alphaclaw (>=0.9.10, <=0.9.16) +7 more potentially affected by CVE-2026-62216 via openclaw (>=2026.4.21, <=2026.5.27)
openclaw NPM version =2026.4.21, =0.1.0, =0.9.10, =2.2.4, =4.0.0, =0.0.0, =2.1.8, =0.1.38, =0.0.1, =1.0.0, =1.3.1 Source cves: CVE-2026-62216 Source advisory: SNYK:JS-OPENCLAW-18021333...
@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.9.17, <=0.9.18) +2 more potentially affected by CVE-2026-62209 via openclaw (>=2026.5.20, <=2026.6.1)
openclaw NPM version =2026.5.20, =0.1.8, =0.9.17, =0.2.6, =1.0.0, =1.3.1 Source cves: CVE-2026-62209 Source advisory: SNYK:JS-OPENCLAW-18021331...
@0xwork/connect (0.1.8), @openclaw/kitchen-sink (0.2.6) potentially affected by CVE-2026-62221 via openclaw (>=2026.5.20, <=2026.5.24-beta.2)
openclaw NPM version =2026.5.20, =2026.5.24-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @0xwork/connect 0.1.8 - @openclaw/kitchen-sink 0.2.6 Source cves: CVE-2026-62221 Source advisory: SNYK:JS-OPENCLAW-180178...
@nohost/server (>=0.0.1-beta2, <=0.3.6) potentially affected by CVE-2026-55629 via whistle (>=2.3.7, <=2.9.85-beta)
whistle NPM version =2.3.7, =0.0.1-beta2, =0.3.6 Source cves: CVE-2026-55629 Source advisory: SNYK:JS-WHISTLE-18601847...
7ghost-cli (>=1.17.6-next.0, <=1.18.4), @agentuity/hono (>=3.0.0-alpha.0, <=3.0.0-beta.4) +424 more potentially affected by CVE-2026-50289 via systeminformation (>=5.0.6, <=5.31.6)
systeminformation NPM version =5.0.6, =1.17.6-next.0, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.26.4, =0.1.1, =0.1.1, =4.1.0-rc.4, =5.2.0-revision.1, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =4.260426.2, =4.260510.3 and more Source cves: CVE-2026-50289 Source advisory...
@budibase/backend-core (>=2.15.0, <=3.39.22), @budibase/cli (>=2.0.0, <=3.2.26) +10 more potentially affected by CVE-2026-50272 via dd-trace (>=5.0.0, <=5.98.0)
dd-trace NPM version =5.0.0, =2.15.0, =2.0.0, =2.15.0, =2.0.0, =2.0.0, =1.4.0, =1.11.0, =0.1.0-build.1.838647, =0.37.19, =0.37.5, =0.39.0 Source cves: CVE-2026-50272 Source advisory: OSV:GHSA-WXQQ-GCQ8-C443...
library_with_build_info_3 (>=0.0.2, <=0.0.7) potentially affected by unknown CVE via true (0.0.3)
true NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on true and may be impacted: - librarywithbuildinfo3 =0.0.2, =0.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10667...
@fedify/cli (>=2.2.0-dev.898, <=2.2.3), @fedify/fedify (>=2.2.0-dev.606, <=2.2.3) +3 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.2.0, <=2.2.3-dev.1098)
@fedify/vocab-runtime NPM version =2.2.0, =2.2.0-dev.898, =2.2.0-dev.606, =2.2.0-dev.606, =2.2.0-dev.606, =2.2.0-dev.606, =2.2.3 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...
subdependancy-packages-approuter (0.0.1) potentially affected by CVE-2026-27690 via @sap/approuter (20.8.3)
@sap/approuter NPM version 20.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/approuter and may be impacted: - subdependancy-packages-approuter 0.0.1 Source cves: CVE-2026-27690 Source advisory: OSV:GHSA-8M85-WQG7-C529...
@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +29 more potentially affected by CVE-2026-62197 via openclaw (>=2026.3.22, <=2026.6.5)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =1.1.50, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =2026.4.3-2 and more Source cves: CVE-2026-62197 Source advisory: SNYK:JS-OPENCLAW-17970209...
@0xwork/connect (0.1.9), @chrysb/alphaclaw (>=0.9.17, <=0.9.18) +2 more potentially affected by CVE-2026-62198 via openclaw (>=2026.5.28, <=2026.6.5)
openclaw NPM version =2026.5.28, =0.9.17, =0.2.8, =1.1.50, =1.1.64 Source cves: CVE-2026-62198 Source advisory: SNYK:JS-OPENCLAW-17966763...
@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @aayshian/n8n-aisensy-ay19 (0.0.1) +105 more potentially affected by CVE-2026-59209 via n8n-core (>=2.0.0, <=2.27.2)
n8n-core NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.3.6, =0.1.0, =1.0.0, =0.1.4, =1.1.3, =0.1.0, =0.1.13 and more Source cves: CVE-2026-59209 Source advisory: SNYK:JS-N8NCORE-17954281...
@n8n/backend-test-utils (>=1.0.0-rc.0, <=1.28.0) potentially affected by CVE-2026-59206 via @n8n/db (>=1.0.0, <=1.28.0)
@n8n/db NPM version =1.0.0, =1.0.0-rc.0, =1.28.0 Source cves: CVE-2026-59206 Source advisory: SNYK:JS-N8NDB-17954287...
@aoagents/ao (>=0.9.0-nightly-37d3a86d6de2bbeacfa7ad9050773dc7a8702180, <=0.10.1-nightly-249c67046d14809943d228b01eefedb10821e5dc), @aoagents/ao-cli (>=0.9.0-nightly-37d3a86d6de2bbeacfa7ad9050773dc7a8702180, <=0.10.1-nightly-249c67046d14809943d228b01eefedb10821e5dc) +80 more potentially affected by CVE-2026-59807 via @composio/core (>=0.1.0-rc.3, <=0.13.1)
@composio/core NPM version =0.1.0-rc.3, =0.9.0-nightly-37d3a86d6de2bbeacfa7ad9050773dc7a8702180, =0.9.0-nightly-37d3a86d6de2bbeacfa7ad9050773dc7a8702180, =0.9.0-nightly-37d3a86d6de2bbeacfa7ad9050773dc7a8702180, =0.0.2, =1.0.0, =0.1.0-rc.3, =4.4.0, =3.8.11, =3.8.11, =3.7.18, =3.7.18, =3.7.18,...
@agentbadge/mcp (0.1.9), @agentbadge/passport (>=0.1.8, <=0.2.1) +140 more potentially affected by CVE-2026-59876 via protobufjs (>=8.2.0, <=8.6.4)
protobufjs NPM version =8.2.0, =0.1.8, =0.1.1, =0.1.1, =1.16.0, =1.0.5, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.3.1, =0.1.37, =0.1.41 and more Source cves: CVE-2026-59876 Source advisory: SNYK:JS-PROTOBUFJS-17900554...
0perator (>=0.1.0, <=0.3.0), @0byte/oc_mlflow_plugin (>=0.1.1, <=0.1.3) +2140 more potentially affected by CVE-2026-59892 via @opentelemetry/propagator-jaeger (>=2.0.0, <=2.8.0)
@opentelemetry/propagator-jaeger NPM version =2.0.0, =0.1.0, =0.1.1, =0.0.1, =0.0.53, =0.0.31, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =5.1.1-staging.260347880488, =6.0.3 and more Source cves: CVE-2026-59892 Sourc...
@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +28 more potentially affected by CVE-2026-59261 via openclaw (>=2026.3.22, <=2026.5.27)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-59261 Source advisory: SNYK:JS-OPENCLAW-17905620...
0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +2038 more potentially affected by CVE-2026-59725 via engine.io (>=4.1.1, <=6.6.6)
engine.io NPM version =4.1.1, =1.0.49, =1.0.0, =0.0.28, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =1.2.1, =15.0.0, =1.0.1, =1.0.2 - @aaronconway7/create-gatsby-app 1.0.0 - @accio-cms/gatsby-starter-accio 0.0.1 and more Source cves: CVE-2026-59725 Source advisory: SNYK:JS-ENGINEIO-17900543...
llama-index-llms-openllm (>=0.0.1, <=0.4.0) potentially affected by CVE-2026-15035 via openllm (>=0.4.44, <=0.6.30)
openllm PYPI version =0.4.44, =0.0.1, =0.4.0 Source cves: CVE-2026-15035 Source advisory: SNYK:PYTHON-OPENLLM-17895040...
@briefhq/cli (>=0.1.6, <=0.1.22), @cobuild/review-gpt (>=0.5.10, <=0.5.151) +5 more potentially affected by CVE-2026-59703 via repomix (>=1.1.0, <=1.16.0)
repomix NPM version =1.1.0, =0.1.6, =0.5.10, =0.1.0-next.1, =1.0.0, =0.1.0, =0.63.0, =0.63.3 Source cves: CVE-2026-59703 Source advisory: SNYK:JS-REPOMIX-17905425...
@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +192 more potentially affected by CVE-2026-53518 via better-auth (>=1.0.0, <=1.6.10)
better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.37 and more Source cves: CVE-2026-53518 Source advisory: OSV:GHSA-7W99-5WM4-3G79...
@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +192 more potentially affected by unknown CVE via better-auth (>=1.0.0, <=1.6.10)
better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.37 and more Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTH-17889826...
@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +192 more potentially affected by CVE-2026-53516 via better-auth (>=1.0.0, <=1.6.10)
better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.37 and more Source cves: CVE-2026-53516 Source advisory: OSV:GHSA-G38M-R43W-P2Q7...
@absinthe/graphql-playground (>=1.3.1, <=1.3.5), @absinthe/socket (>=0.1.0, <=0.2.0) +52 more potentially affected by CVE-2026-56812 via phoenix (>=1.3.0, <=1.5.12)
phoenix NPM version =1.3.0, =1.3.1, =0.1.0, =0.1.2, =0.1.0, =0.1.2, =1.7.5, =1.5.1, =1.7.5, =1.8.1, =1.0.0, =1.5.6, =1.8.1, =1.8.1, =1.7.26, =1.7.26, =1.16.6-beta-eaa4d39d and more Source cves: CVE-2026-56812 Source advisory: OSV:EEF-CVE-2026-56812...
-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +21715 more potentially affected by CVE-2026-53486 via decompress (>=4.0.0, <=4.2.1)
decompress NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =2.2.0-alpha.3 and more Source cves: CVE-2026-53486 Source advisory: OSV:GHSA-MP2F-45PM-3CG9...
coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35347 via uu_comm (>=0.0.14, <=0.0.16)
uucomm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35347 Source advisory: OSV:GHSA-3WFC-MGPM-9RQ6...
coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35339 via uu_chmod (>=0.0.14, <=0.0.16)
uuchmod CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35339 Source advisory: OSV:GHSA-4X34-CHG5-MWJJ...
@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +323 more potentially affected by CVE-2026-14631 via webpack-dev-server (>=5.0.0, <=5.2.5)
webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =0.7.7, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2 and more Source cves: CVE-2026-14631 Source advisory:...
@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +323 more potentially affected by CVE-2026-14620 via webpack-dev-server (>=5.0.0, <=5.2.5)
webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =0.7.7, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2 and more Source cves: CVE-2026-14620 Source advisory:...
@codeanywhere/filesystem (>=1.13.0, <=1.13.2), @codeanywhere/theia-plugin-ext (>=1.11.0, <=1.11.4) +147 more potentially affected by CVE-2026-10055 via @theia/core (>=1.0.0, <=1.72.3)
@theia/core NPM version =1.0.0, =1.13.0, =1.11.0, =0.0.1-1646139429, =0.0.1-1585667205, =1.0.0-theia1.27.0, =0.8.0-next.0b7d765, =0.0.1-next.20220331.125641, =0.7.1, =0.9.1 - @popcornsar/che-theia-plugin-ext 7.4.0 and more Source cves: CVE-2026-10055 Source advisory: SNYK:JS-THEIACORE-17810718...