@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: SNYK:JS-SHESCAPE-18752068...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-72744 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0-rc.33), @hublo/sentinel (>=1.1.0-alpha.3, <=1.2.0-alpha.18) +39 more potentially affected by CVE-2026-71476 via nx (>=23.0.0, <=23.0.1)

nx NPM version =23.0.0, =1.0.0-rc.24, =1.1.0-alpha.3, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.1 and more Source cves: CVE-2026-71476 Source...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-71315 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-71315 Source advisory: SNYK:JS-NUXT-18565125...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +246 more potentially affected by unknown CVE via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVGO-18170231...

@whalent/agent (0.3.266) potentially affected by unknown CVE via @whalent/agent-core (0.3.266)

@whalent/agent-core NPM version 0.3.266 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.266 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +201 more potentially affected by unknown CVE via better-auth (>=0.4.9, <=1.6.10)

better-auth NPM version =0.4.9, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.0.1, =1.5.0-beta.13 and more Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTH-17889825...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +38 more potentially affected by CVE-2026-11779 via payload (>=3.0.0-alpha.49, <=3.87.1)

payload NPM version =3.0.0-alpha.49, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.3, =1.0.1-beta.0, =0.14.0, =1.0.0, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =1.1.8 and more Source cves: CVE-2026-11779 Source advisory: OSV:GHSA-JG8R-5JH2-V2XJ...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0172...

@4via6/relay (>=1.0.0, <=1.1.3), @circleci/agents (>=1.0.6, <=2.3.1) +6 more potentially affected by CVE-2025-61260 via @openai/codex (>=0.1.2504211509, <=0.20.0)

@openai/codex NPM version =0.1.2504211509, =1.0.0, =1.0.6, =0.0.1, =0.23.0, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.0.2 Source cves: CVE-2025-61260 Source advisory: SNYK:JS-OPENAICODEX-16111764...

a2 (>=0.2.0, <=0.4.1), abci (>=0.5.3, <=0.7.1) +2900 more potentially affected by unknown CVE via tokio-threadpool (>=0.1.14, <=0.2.0-alpha.1)

tokio-threadpool CARGO version =0.1.14, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0051...

adi (>=0.7.0, <=0.13.0-pre2), adi_gpu (>=0.7.0, <=0.11.0) +431 more potentially affected by unknown CVE via cgmath (>=0.1.5, <=0.18.0)

cgmath CARGO version =0.1.5, =0.7.0, =0.7.0, =0.8.0, =0.6.0, =0.5.3, =0.8.0, =0.1.0, =0.4.0, =0.2.0, =0.4.0, =0.5.0, =0.1.0, =0.11.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0197...

0.extends.wechat (>=1.0.51, <=1.0.65), 1-test-gulp-1 (>=0.0.1, <=0.0.4) +16157 more potentially affected by CVE-2026-31808 via file-type (>=13.0.3, <=21.3.0)

file-type NPM version =13.0.3, =1.0.51, =0.0.1, =2.2.0-alpha.0, =3.1.4, =1.0.0, =0.0.1, =1.0.0, =3.1.6, =1.0.0, =1.0.0, =0.0.1, =0.0.2, =0.6.4 and more Source cves: CVE-2026-31808 Source advisory: SNYK:JS-FILETYPE-15456217...

muaddib-scanner (>=1.1.0, <=1.1.1) potentially affected by unknown CVE via @vietmoney/react-big-calendar (0.0.1-security)

@vietmoney/react-big-calendar NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-big-calendar and may be impacted: - muaddib-scanner =1.1.0, =1.1.1 Source cves: unknown CVE Source advisory:...

blyss-rs (0.2.0), lunarbase-pmm-math (>=0.1.0, <=0.2.6) +8 more potentially affected by unknown CVE via ruint (>=1.8.0, <=1.16.0)

ruint CARGO version =1.8.0, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-9FJQ-45QV-PCM7...

12boowjljk-notthedevs (1.6.9), ahahscroot (1.0.1) +14 more potentially affected by unknown CVE via 666-tea (1.1.4)

666-tea NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on 666-tea and may be impacted: - 12boowjljk-notthedevs 1.6.9 - ahahscroot 1.0.1 - bacoritul 1.0.1 - basuki 1.0.0 - df6fqftol9-notthedevs 1.6.9 - forilcuy 1.0.1 - gasmbut 1.0.1 -...

baluni (>=1.0.0, <=2.7.2), fast-publish (>=0.0.1-alpha.0, <=0.0.2) potentially affected by unknown CVE via chakl (0.0.1-security)

chakl NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chakl and may be impacted: - baluni =1.0.0, =0.0.1-alpha.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16766...

h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-auth (1.0.1-alpha.1)

h1-cli-ext-root-auth NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-auth and may be impacted: - h1-cli-device-node =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22080...

kik (>=0.0.0, <=1.3.0), kik-starter (2.2.0) potentially affected by unknown CVE via install-module (>=0.2.0, <=1.1.0)

install-module NPM version =0.2.0, =0.0.0, =1.3.0 - kik-starter 2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23249...

@dm3-org/delivery-service (>=1.4.0, <=1.7.1), @dm3-org/dm3-backend (>=1.0.1, <=1.7.1) +18 more potentially affected by unknown CVE via @dm3-org/dm3-lib-crypto (1.7.2)

@dm3-org/dm3-lib-crypto NPM version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on @dm3-org/dm3-lib-crypto and may be impacted: - @dm3-org/delivery-service =1.4.0, =1.0.1, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =0.0.1-alpha1, =1.0.5, =1.4.0,...

byterag-core (0.3.0), byterag-ffi (0.3.0) +8 more potentially affected by unknown CVE via s2n-tls (>=0.0.6, <=0.3.1)

s2n-tls CARGO version =0.0.6, =0.2.0-beta, =0.2.0-beta, =0.1.0, =1.18.0, =0.18.2, =0.18.2, =0.0.6, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RP9H-RF7G-HWGR...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0401...

difftastic (>=0.29.1, <=0.52.0), difftastic-lib (>=0.0.1, <=0.0.2) +4 more potentially affected by unknown CVE via mimalloc (>=0.1.28, <=0.1.37)

mimalloc CARGO version =0.1.28, =0.29.1, =0.0.1, =0.1.6, =0.17.0-alpha.4, =0.15.0, =0.16.0-alpha.3, =0.18.1 Source cves: unknown CVE Source advisory: OSV:GHSA-G23H-7VF9-XC25...

aquatic_common (0.2.0), core-allocator (>=0.1.0, <=0.1.6) +16 more potentially affected by unknown CVE via hwloc (>=0.3.0, <=0.5.0)

hwloc CARGO version =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =0.1.6, =5.0.0, =5.0.0, =0.1.1, =0.11.0, =5.0.0, =6.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0382...

btrfsutil (0.2.0), btrfsutil-fake (>=0.2.0-8324fe2, <=0.2.0) +15 more potentially affected by unknown CVE via loopdev (>=0.1.3, <=0.4.0)

loopdev CARGO version =0.1.3, =0.2.0-8324fe2, =0.1.0, =0.1.0, =0.6.3, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =2.4.2, =3.5.8 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0088...

animation-directive (>=1.0.0, <=1.1.1), lrc-common (1.1.1) +1 more potentially affected by unknown CVE via webpack-cil (0.0.1-security)

webpack-cil NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on webpack-cil and may be impacted: - animation-directive =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-7100...

@adaptable/client (>=0.0.9, <=1.26.0), @adaptable/cloud (>=0.0.1, <=1.28.0) +446 more potentially affected by CVE-2021-37713 via tar (>=6.0.0, <=6.1.8)

tar NPM version =6.0.0, =0.0.9, =0.0.1, =1.6.0, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.1.0, =0.6.5, =1.1.0, =1.0.0, =0.0.2, =1.1.4-alpha.1, =1.1.4-alpha.2 and more Source cves: CVE-2021-37713 Source advisory: OSV:GHSA-5955-9WPR-37JH...

@c0b41/prettify-error (1.0.0), assume (>=0.0.10, <=1.4.0) +22 more potentially affected by unknown CVE via failing-code (>=0.0.2, <=0.1.0)

failing-code NPM version =0.0.2, =0.0.10, =7.1.0, =1.0.0, =0.1.1, =1.0.0, =0.0.1, =0.0.4 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 and more Source cves: unknown CVE Source advisory: GHSA-46H6-93WR-8579...

gloglet (2.3.3) potentially affected by unknown CVE via gloggo (1.1.3)

gloggo NPM version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.3 Source cves: unknown CVE Source advisory: SNYK:JS-GLOGGO-19653625...

express-helmet (1.0.1), gloglet (2.3.4) +1 more potentially affected by unknown CVE via gloggo (1.1.4)

gloggo NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - express-helmet 1.0.1 - gloglet 2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory: GHSA-WMGG-555M-P7H6...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-62681 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-62681 Source advisory: OSV:GHSA-FG9P-MRXR-HVQ7...

@142vip/egg (>=0.0.1-alpha.5, <=0.0.1-alpha.6), @142vip/egg-grpc-client (0.0.1-alpha.4) +517 more potentially affected by unknown CVE via mysql2 (>=3.0.0, <=3.23.0)

mysql2 NPM version =3.0.0, =0.0.1-alpha.5, =0.0.1-alpha.4, =0.0.1-alpha.1, =4.2.3, =15.0.0, =0.2.0, =1.0.0, =0.0.27, =1.0.43, =0.1.0, =0.3.1, =0.9.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RGWJ-5XJ2-C3M3...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73411 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73411 Source advisory: SNYK:JS-SHESCAPE-18752076...

accesskit_consumer (>=0.1.0, <=0.7.1), accesskit_windows (>=0.1.0, <=0.8.0) +1176 more potentially affected by unknown CVE via sized-chunks (>=0.1.3, <=0.6.5)

sized-chunks CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =1.0.5, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.0.1, =0.0.1, =0.0.0-alpha, =0.0.0-alpha.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0255...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +720 more potentially affected by CVE-2026-71849 via hono (>=4.7.0, <=4.12.33)

hono NPM version =4.7.0, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.9, =0.1.12 and more Source cves: CVE-2026-71849 Source advisory: SNYK:JS-HONO-18592333...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-72744 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@0xwork/connect (0.1.8), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +1432 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)

pdfjs-dist NPM version =5.6.205, =0.1.8-fix.3, =1.0.0, =0.2.0, =0.0.0, =0.1.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.0.0-beta-20260819155526, =0.0.0-beta-20260820202238, =0.0.0-beta-20260819155526, =0.1.0, =0.1.1 and more Source cves:...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21429 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.15.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5P4M-2WFM-XMQJ...

@fernir2/saas-kit (>=0.0.173, <=0.0.207), @fernir2/saas-kit-cli (>=0.1.38, <=0.1.40) +1 more potentially affected by CVE-2026-71476 via @nx/s3-cache (>=5.0.0, <=5.0.7)

@nx/s3-cache NPM version =5.0.0, =0.0.173, =0.1.38, =5.0.0, =5.0.7 Source cves: CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...

@whalent/agent (0.3.294) potentially affected by unknown CVE via @whalent/agent-core (0.3.294)

@whalent/agent-core NPM version 0.3.294 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.294 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@bloggrify/bento (>=3.0.0, <=3.1.0), @bloggrify/core (>=3.0.0, <=3.3.0) +19 more potentially affected by CVE-2026-71320 via @nuxt/nitro-server (>=4.2.0, <=4.5.0)

@nuxt/nitro-server NPM version =4.2.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.2.2-depup.0, =10.0.2-rc.5, =1.1.11, =1.0.8, =1.6.0-rc.3, =0.4.5, =3.0.0-dev.27, =1.0.0, =4.2.0, =0.5.0, =0.6.0 and more Source cves: CVE-2026-71320 Source advisory: SNYK:JS-NUXTNITROSERVER-18565116...

@142vip/midway (>=0.1.6-alpha.9, <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1, <=0.0.1-alpha.13) +2876 more potentially affected by unknown CVE via typeorm (>=0.0.2-alpha.43, <=0.3.30)

typeorm NPM version =0.0.2-alpha.43, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood 0.10.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-TYPEORM-18170276...

actix-web-location (>=0.1.0, <=0.7.0), bext-waf (0.2.0) +19 more potentially affected by unknown CVE via maxminddb (>=0.12.0, <=0.26.0)

maxminddb CARGO version =0.12.0, =0.1.0, =0.1.3, =1.5.1, =0.1.0, =0.7.0, =0.4.0, =0.0.1, =0.1.8, =0.3.0, =0.5.0, =0.1.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0132...

audio-processor-analysis (>=0.1.0-alpha.4, <=2.4.0), chalkboard (0.1.0) +73 more potentially affected by unknown CVE via unic-bidi (>=0.1.0, <=0.9.0)

unic-bidi CARGO version =0.1.0, =0.1.0-alpha.4, =0.4.0, =0.7.0, =0.4.0, =0.7.0, =0.2.0, =0.2.3 - frui 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0096...

tom-microservice (3.2.28) potentially affected by CVE-2025-62380 via mailgen (2.0.20)

mailgen NPM version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on mailgen and may be impacted: - tom-microservice 3.2.28 Source cves: CVE-2025-62380 Source advisory: SNYK:JS-MAILGEN-13559301...

@baosight/xinrong (>=0.0.36, <=0.0.37), npm_1st_publish (1.0.0) +1 more potentially affected by unknown CVE via jqeury (0.0.1-security)

jqeury NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jqeury and may be impacted: - @baosight/xinrong =0.0.36, =0.0.37 - npm1stpublish 1.0.0 - wypulldom 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23891...

brick (0.0.0), brick-browser (>=0.0.0, <=0.0.14) +11 more potentially affected by unknown CVE via methodify (>=0.0.2, <=0.0.3)

methodify NPM version =0.0.2, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26261...

brick-node (>=0.0.0, <=0.0.17), change-object (0.0.0) +8 more potentially affected by unknown CVE via stream-format (0.0.3)

stream-format NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on stream-format and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34079...

jones-mysql (1.0.0), jones-ndb (1.0.0) potentially affected by unknown CVE via database-jones (1.2.8)

database-jones NPM version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on database-jones and may be impacted: - jones-mysql 1.0.0 - jones-ndb 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17995...

@deck/app (>=1.0.1, <=1.4.11), octophant (0.1.0) potentially affected by unknown CVE via rimraf-glob (0.0.0)

rimraf-glob NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on rimraf-glob and may be impacted: - @deck/app =1.0.1, =1.4.11 - octophant 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32233...