11219 matches found
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +218 more potentially affected by CVE-2026-39365 via vite (>=6.0.0, <=6.4.1)
vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =4.4.4-beta.0 and more Source cves: CVE-2026-39365 Source advisory: OSV:GHSA-4W7W-66W2-5VF9...
@142vip/vuepress (0.0.1-alpha.19), @agregio-solutions/design-system (>=1.89.2, <=1.89.4) +198 more potentially affected by CVE-2026-39364 via vite (>=7.1.0, <=7.3.1)
vite NPM version =7.1.0, =1.89.2, =20.2.0-next.3, =20.2.0-next.3, =0.1.0, =0.79.1, =1.0.0-beta.23, =2.1.2-alpha.0, =1.0.0-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.37.0 and more Source cves: CVE-2026-39364 Source advisory: SNYK:JS-VITE-15922245...
gpt-researcher-mcp (>=0.1.0, <=0.1.5), iflow-mcp-joshualelon-deep-research-mcp (0.1.0) +1 more potentially affected by CVE-2026-5633 via gpt-researcher (>=0.14.4, <=0.16.0)
gpt-researcher PYPI version =0.14.4, =0.1.0, =2.1.6, =2.1.8 Source cves: CVE-2026-5633 Source advisory: SNYK:PYTHON-GPTRESEARCHER-15917485...
cicy-desktop (>=2.1.30, <=2.1.342), snapview (>=1.0.5, <=1.3.0) potentially affected by CVE-2026-34764 via electron (41.0.3)
electron NPM version 41.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - cicy-desktop =2.1.30, =1.0.5, =1.3.0 Source cves: CVE-2026-34764 Source advisory: SNYK:JS-ELECTRON-15907847...
@alstar/studio (0.0.0-beta.20), @better-auth/cli (>=1.0.0-canary.2, <=1.4.6-beta.2) +72 more potentially affected by CVE-2026-67337 via better-auth (>=1.0.0, <=1.4.8-beta.4)
better-auth NPM version =1.0.0, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.26, =1.3.27, =0.18.0, =0.5.2, =1.0.2, =1.0.2, =1.0.2, =2.0.3 and more Source cves: CVE-2026-67337 Source advisory: OSV:GHSA-XG6X-H9C9-2M83...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41366 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41366 Source advisory: OSV:GHSA-57GH-M6RQ-54CF...
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34775 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34775 Source advisory: OSV:GHSA-XWR5-M59H-VWQR...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34773 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34773 Source advisory: OSV:GHSA-MWMH-MQ4G-G6GR...
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34773 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34773 Source advisory: OSV:GHSA-MWMH-MQ4G-G6GR...
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34770 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34770 Source advisory: OSV:GHSA-JJP3-MQ3X-295M...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34770 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34770 Source advisory: SNYK:JS-ELECTRON-15876712...
@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34767 via electron (>=39.0.0, <=39.2.7)
electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34766 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34766 Source advisory: SNYK:JS-ELECTRON-15876038...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41343 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41343 Source advisory: OSV:GHSA-QCC3-JQWP-5VH2...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41391 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41391 Source advisory: SNYK:JS-OPENCLAW-15899601...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41337 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41337 Source advisory: SNYK:JS-OPENCLAW-15900041...
-fides-amor-et-lux (1.0.0), -graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2) +50548 more potentially affected by CVE-2021-23337 +1 more via lodash (>=4.0.0, <=4.17.23)
lodash NPM version =4.0.0, =2.0.1, =1.0.49, =0.0.8, =0.2.0, =0.0.1, =1.0.0, =0.0.1, =2.3.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-R5FR-RJXR-66JC...
09-nodejs (1.0.0), 11.17r (1.0.0) +561 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.5.0)
lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.1, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.1.5 - @arezooq/webserverpackage 1.0.0 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-R5FR-RJXR-66JC...
4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +5671 more potentially affected by CVE-2025-13465 +1 more via lodash-es (>=4.0.0, <=4.17.23)
lodash-es NPM version =4.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1-alpha.23, =1.0.0, =1.0.0, =2.14.1, =41.3.1, =2.1.0, =0.3.4, =0.3.5, =0.3.5, =0.3.5, =0.3.5, =0.3.5, =0.4.1 and more Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: OSV:GHSA-F23M-R3PF-42RH...
@belym.a.2105/testcafe (>=0.13.0-nightly.96bf9c47, <=1.15.0-alpha.4), @benbender/jest-config (>=0.1.0, <=0.6.0) +128 more potentially affected by CVE-2026-2265 via replicator (1.0.5)
replicator NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on replicator and may be impacted: - @belym.a.2105/testcafe =0.13.0-nightly.96bf9c47, =0.1.0, =1.8.5, =0.1.0-alpha.1, =1.1.4-alpha.30, =0.0.49, =3.7.4-depup.0, =0.0.0, =1.0.1,...
@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +29 more potentially affected by CVE-2026-34751 via payload (>=3.0.0-alpha.49, <=3.79.0-internal.2874f3f)
payload NPM version =3.0.0-alpha.49, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.3, =1.0.1-beta.0, =1.0.0, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =3.64.0, =0.0.1-beta.0, =0.2.0, =0.2.14 and more Source cves: CVE-2026-34751 Source advisory: SNYK:JS-PAYLOAD-15871108...
@adobe/helix-importer-jcr-packaging (>=2.0.2, <=2.0.16), @aidin36/xmp (>=0.1.0, <=0.2.2) +35 more potentially affected by CVE-2026-34601 via @xmldom/xmldom (>=0.9.0, <=0.9.8)
@xmldom/xmldom NPM version =0.9.0, =2.0.2, =0.1.0, =5.5.3, =1.0.22, =1.35.0, =1.5.1-beta.1723, =0.1.0, =2.1.2, =2.6.1, =2.98.0, =3.1.0, =254.1008.0, =254.1026.0, =264.1004.0-beta.4 and more Source cves: CVE-2026-34601 Source advisory: OSV:GHSA-WH4C-J3R5-MJHP...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by CVE-2026-41367 via openclaw (>=2026.3.22, <=2026.3.24-beta.2)
openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-41367 Source advisory: SNYK:JS-OPENCLAW-15865234...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by CVE-2026-41303 via openclaw (>=2026.3.22, <=2026.3.24-beta.2)
openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-41303 Source advisory: OSV:GHSA-98HH-7GHG-X6RQ...
@acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94), @acmekit/cli (>=2.13.1, <=2.13.94) +92 more potentially affected by CVE-2026-34221 via @mikro-orm/core (>=6.0.0, <=6.6.9-dev.6)
@mikro-orm/core NPM version =6.0.0, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =0.1.29, =0.1.29, =0.5.0, =0.6.8 and more Source cves: CVE-2026-34221 Source advisory: OSV:GHSA-QPFV-44F3-QQX6...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +10 more potentially affected by CVE-2026-35647 via openclaw (>=2026.3.22, <=2026.3.24)
openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-35647 Source advisory: OSV:GHSA-9WQX-G2CW-VC7R...
07-calito-router (>=0.0.2, <=0.0.4), 07-dey-router (>=0.0.1, <=0.0.2) +1037 more potentially affected by CVE-2026-4923 via path-to-regexp (>=8.0.0, <=8.3.0)
path-to-regexp NPM version =8.0.0, =0.0.2, =0.0.1, =0.0.0, =0.0.1, =0.0.1, =0.0.0, =0.0.1, =0.0.2, =0.0.1-alpha.2, =0.0.1-alpha.1, =4.0.61, =4.0.61, =0.0.1, =0.3.1, =0.3.4 and more Source cves: CVE-2026-4923 Source advisory: OSV:GHSA-27V5-C462-WPQ7...
@n8n/backend-test-utils (1.11.0), @n8n/db (1.11.0) +1 more potentially affected by unknown CVE via n8n-core (2.11.0)
n8n-core NPM version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-core and may be impacted: - @n8n/backend-test-utils 1.11.0 - @n8n/db 1.11.0 - @n8n/task-runner 2.11.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NCORE-15825749...
@apollo/server-integration-testsuite (>=5.0.0-rc.0, <=5.4.0), @commitspark/graphql-api (>=1.0.0-beta.3, <=1.0.0-beta.6) +24 more potentially affected by unknown CVE via @apollo/server (>=5.0.0, <=5.4.0)
@apollo/server NPM version =5.0.0, =5.0.0-rc.0, =1.0.0-beta.3, =1.217.0, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.22.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-APOLLOSERVER-15790568...
@10life/strapi-plugin-advanced-cache-manager (>=1.0.1, <=1.0.6), @a11ywatch/a11ywatch (>=0.0.1, <=0.3.82) +52 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.12.1)
apollo-server-core NPM version =3.0.0-html.2, =1.0.1, =0.0.1, =0.1.1, =4.9.2, =1.0.1, =1.1.22, =1.1.19, =1.0.0, =1.1.0, =1.0.0, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q82-XGWF-VJ6H...
07-calito-router (>=0.0.2, <=0.0.4), 07-dey-router (>=0.0.1, <=0.0.2) +1037 more potentially affected by CVE-2026-4923 via path-to-regexp (>=8.0.0, <=8.3.0)
path-to-regexp NPM version =8.0.0, =0.0.2, =0.0.1, =0.0.0, =0.0.1, =0.0.1, =0.0.0, =0.0.1, =0.0.2, =0.0.1-alpha.2, =0.0.1-alpha.1, =4.0.61, =4.0.61, =0.0.1, =0.3.1, =0.3.4 and more Source cves: CVE-2026-4923 Source advisory: SNYK:JS-PATHTOREGEXP-15789765...
@antora/cli (>=2.3.2, <=3.0.0-alpha.9), @antora/playbook-builder (>=2.3.2, <=3.0.0-alpha.9) +111 more potentially affected by CVE-2026-33864 via convict (>=6.0.0, <=6.2.4)
convict NPM version =6.0.0, =2.3.2, =2.3.2, =2.3.2, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2026-33864 Source advisory: OSV:GHSA-44FC-8FM5-Q62H...
01-numacert (>=1.0.0, <=3.0.0), 05day (1.0.0) +15996 more potentially affected by CVE-2024-45296 +1 more via path-to-regexp (>=0.0.2, <=0.1.12)
path-to-regexp NPM version =0.0.2, =1.0.0, =1.0.1, =1.0.3, =0.2.0, =1.0.2, =1.0.0, =2.0.0, =0.2.0, =0.2.0, =0.2.3 and more Source cves: CVE-2024-45296, CVE-2026-4867 Source advisory: SNYK:JS-PATHTOREGEXP-15789761...
@100x/application (>=0.0.1, <=0.0.6), @abysslabs/cli (>=0.0.1, <=0.0.2) +254 more potentially affected by CVE-2026-33131 +1 more via srvx (>=0.1.4, <=0.11.12)
srvx NPM version =0.1.4, =0.0.1, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =2.4.0-alpha.2, =2.4.0-alpha.2, =0.3.7, =0.3.10 and more Source cves: CVE-2026-33131, CVE-2026-33732 Source advisory: SNYK:JS-SRVX-15790571...
jo-cli (1.0.2) potentially affected by CVE-2026-33750 via brace-expansion (3.0.0)
brace-expansion NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli 1.0.2 Source cves: CVE-2026-33750 Source advisory: OSV:GHSA-F886-M6HF-6M8V...
@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +27 more potentially affected by CVE-2026-33750 via brace-expansion (>=1.1.0, <=1.1.11)
brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =0.0.3, =0.0.1, =0.1.0 and more Source cves: CVE-2026-33750 Source advisory: SNYK:JS-BRACEEXPANSION-15789759...
@100x/application (>=0.0.1, <=0.0.6), @abysslabs/cli (>=0.0.1, <=0.0.2) +254 more potentially affected by CVE-2026-33732 via srvx (>=0.1.4, <=0.11.12)
srvx NPM version =0.1.4, =0.0.1, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =2.4.0-alpha.2, =2.4.0-alpha.2, =0.3.7, =0.3.10 and more Source cves: CVE-2026-33732 Source advisory: OSV:GHSA-P36Q-Q72M-GCHR...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +123 more potentially affected by CVE-2026-33287 via liquidjs (>=10.2.0, <=10.22.0)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0, =1.0.0, =1.0.11 - @deconz-community/directus-extension-ddf-store 0.1.0 and more Source cves: CVE-2026-33287 Source advisory: OSV:GHSA-6Q5M-63H6-5X4V...
@grackle-ai/cli (>=0.37.0, <=0.70.0), @grackle-ai/server (>=0.37.0, <=0.70.0) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.70.0)
@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.70.0 Source cves: unknown CVE Source advisory: OSV:GHSA-XQ7H-VWJP-5VRH...
@grackle-ai/cli (>=0.37.0, <=0.70.0), @grackle-ai/server (>=0.37.0, <=0.70.0) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.70.0)
@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.70.0 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIPOWERLINE-15871386...
@grackle-ai/cli (>=0.0.2, <=0.70.2) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.2)
@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.2 Source cves: unknown CVE Source advisory: OSV:GHSA-W3HV-X4FP-6H6J...
@grackle-ai/cli (>=0.0.2, <=0.70.0) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.0)
@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.0 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840033...
@aokyra/baileys (2.0.6), @arceos/baileys (>=10.0.0, <=10.0.4) +73 more potentially affected by unknown CVE via @shennmine/libsignal-node (0.0.1-security)
@shennmine/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @shennmine/libsignal-node and may be impacted: - @aokyra/baileys 2.0.6 - @arceos/baileys =10.0.0, =2.0.3, =1.0.0, =1.0.0, =1.0.3, =1.0.6, =3.2.4, =2.1....
@brendonovich/solidjs__start (>=0.0.0, <=0.0.3), @h3ravel/arquebus (>=0.3.3, <=0.6.6) +43 more potentially affected by CVE-2026-86250 via h3 (2.0.0-rc.1)
h3 NPM version 2.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on h3 and may be impacted: - @brendonovich/solidjsstart =0.0.0, =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.24...
@atomicservice/ascf-toolkit (>=1.0.0, <=1.0.17), @atomicservice/ascf-toolkit-hvigor-plugin (>=1.0.1-beta.1, <=1.0.17) +77 more potentially affected by CVE-2026-4602 via jsrsasign (>=11.0.0, <=11.1.0)
jsrsasign NPM version =11.0.0, =1.0.0, =1.0.1-beta.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 - @citrineos/ocpi-charging-profiles 2.0.1 - @citrineos/ocpi-commands 2.0.1 - @citrineos/ocpi-credentials 2.0.1 - @citrineos/ocpi-locations 2.0.1 -...
@adpush/start (>=1.87.14, <=1.87.16), @akkuma/vinxi (0.3.12) +220 more potentially affected by unknown CVE via h3 (>=1.0.1, <=1.15.6)
h3 NPM version =1.0.1, =1.87.14, =1.0.7, =1.0.0, =1.5.0, =1.0.0, =0.8.16-canary.v20250123185645, =8.3.3, =3.1.0, =0.0.11, =3.1.0-0, =3.2.0 - @enrypase/solidstart-endpoint 0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-H3-15746329...
@adpush/start (>=1.87.14, <=1.87.16), @akkuma/vinxi (0.3.12) +220 more potentially affected by unknown CVE via h3 (>=1.0.1, <=1.15.6)
h3 NPM version =1.0.1, =1.87.14, =1.0.7, =1.0.0, =1.5.0, =1.0.0, =0.8.16-canary.v20250123185645, =8.3.3, =3.1.0, =0.0.11, =3.1.0-0, =3.2.0 - @enrypase/solidstart-endpoint 0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-H3-15745711...
dicebear (>=9.0.0, <=9.4.1) potentially affected by CVE-2026-33418 via @dicebear/converter (>=9.0.0, <=9.4.1)
@dicebear/converter NPM version =9.0.0, =9.0.0, =9.4.1 Source cves: CVE-2026-33418 Source advisory: SNYK:JS-DICEBEARCONVERTER-15746952...
dicebear (>=9.0.0, <=9.4.1) potentially affected by CVE-2026-33418 via @dicebear/converter (>=9.0.0, <=9.4.1)
@dicebear/converter NPM version =9.0.0, =9.0.0, =9.4.1 Source cves: CVE-2026-33418 Source advisory: OSV:GHSA-7J2X-32W6-P43P...
@hmcts/media-viewer (>=4.2.16-exui-4425, <=4.2.16-exui-4425-rel1) potentially affected by CVE-2026-33397 via @angular/ssr (20.3.18)
@angular/ssr NPM version 20.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/ssr and may be impacted: - @hmcts/media-viewer =4.2.16-exui-4425, =4.2.16-exui-4425-rel1 Source cves: CVE-2026-33397 Source advisory: OSV:GHSA-VFX2-HV2G-XJ5F...