@adobe-apimesh/mesh-builder (1.4.0-beta.5), @apollo/composition (>=2.3.0-beta.2, <=2.9.5) +19 more potentially affected by CVE-2026-32621 via @apollo/federation-internals (>=2.3.0, <=2.9.5)

@apollo/federation-internals NPM version =2.3.0, =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.13.8-alpha-20230126151930-d229ec52b, =0.10.7-alpha-20230126151930-d229ec52b, =0.0.1, =9.2.0, =3.11.1, =2.8.54, =0.0.0-preview-20230314213245...

@lenne.tech/nest-server (>=10.8.3, <=11.1.13), @pothos-examples/federation (3.1.13) +1 more potentially affected by CVE-2026-32621 via @apollo/gateway (>=2.10.0, <=2.10.2)

@apollo/gateway NPM version =2.10.0, =10.8.3, =11.1.13 - @pothos-examples/federation 3.1.13 - @pothos-examples/prisma-federation 3.1.24 Source cves: CVE-2026-32621 Source advisory: OSV:GHSA-PFJJ-6F4P-RVMH...

@apollo/composition (>=2.13.0-preview.0, <=2.13.1), @apollo/gateway (>=2.13.0-preview.0, <=2.13.1) +4 more potentially affected by CVE-2026-32621 via @apollo/federation-internals (>=2.13.0, <=2.13.1)

@apollo/federation-internals NPM version =2.13.0, =2.13.0-preview.0, =2.13.0-preview.0, =2.13.0-preview.0, =2.13.0-preview.0, =2.13.0-preview.0, =0.0.0, =0.0.2-alpha-20260313130016-7fe861602b61cb29c75e6d7e84eae979268037af Source cves: CVE-2026-32621 Source advisory:...

@apollo/composition (>=2.11.0-preview.0, <=2.11.5), @apollo/gateway (>=2.11.0-preview.0, <=2.11.5) +5 more potentially affected by CVE-2026-32621 via @apollo/federation-internals (>=2.11.0, <=2.11.5-preview.1)

@apollo/federation-internals NPM version =2.11.0, =2.11.0-preview.0, =2.11.0-preview.0, =2.11.0-preview.0, =2.11.0-preview.0, =2.11.0-preview.0, =11.1.14, =11.2.0 Source cves: CVE-2026-32621 Source advisory: OSV:GHSA-PFJJ-6F4P-RVMH...

@apollo/composition (>=2.13.0-preview.0, <=2.13.1), @apollo/gateway (>=2.13.0-preview.0, <=2.13.1) +4 more potentially affected by CVE-2026-32621 via @apollo/federation-internals (>=2.13.0, <=2.13.1)

@apollo/federation-internals NPM version =2.13.0, =2.13.0-preview.0, =2.13.0-preview.0, =2.13.0-preview.0, =2.13.0-preview.0, =2.13.0-preview.0, =0.0.0, =0.0.2-alpha-20260313130016-7fe861602b61cb29c75e6d7e84eae979268037af Source cves: CVE-2026-32621 Source advisory: OSV:GHSA-PFJJ-6F4P-RVMH...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +465 more potentially affected by CVE-2026-1528 via undici (>=7.0.0, <=7.22.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.33, =0.0.1, =1.0.0, =21.0.0-rc.2, =21.0.0-rc.2, =0.5.0, =1.0.1-dev.120, =0.1.0, =12.6.9, =13.0.0-alpha.4 and more Source cves: CVE-2026-1528 Source advisory: OSV:GHSA-F269-VFMQ-VJVJ...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +465 more potentially affected by CVE-2026-1528 via undici (>=7.0.0, <=7.22.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.33, =0.0.1, =1.0.0, =21.0.0-rc.2, =21.0.0-rc.2, =0.5.0, =1.0.1-dev.120, =0.1.0, =12.6.9, =13.0.0-alpha.4 and more Source cves: CVE-2026-1528 Source advisory: SNYK:JS-UNDICI-15518064...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.8, <=2.1.15)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-TRIX-15481278...

@studiocms/migrator (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-32106 via studiocms (>=0.2.0, <=0.3.0)

studiocms NPM version =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2026-32106 Source advisory: OSV:GHSA-WJ56-G96R-673Q...

@studiocms/migrator (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-32103 via studiocms (>=0.2.0, <=0.3.0)

studiocms NPM version =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2026-32103 Source advisory: SNYK:JS-STUDIOCMS-15627222...

@snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1), @snyk/snyk-hex-plugin (>=2.0.0, <=2.2.2) +4 more potentially affected by CVE-2026-32094 via shescape (>=2.1.0, <=2.1.6)

shescape NPM version =2.1.0, =2.6.0, =2.0.0, =8.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-32094 Source advisory: OSV:GHSA-9JFH-9XRQ-4VWM...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +409 more potentially affected by unknown CVE via hono (>=4.0.0, <=4.12.6)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =0.0.26 and more Source cves: unknown CVE Source advisory: SNYK:JS-HONO-15459469...

org.webjars.npm:canvas (>=2.5.0, <=2.6.0), org.webjars.npm:color-thief (2.2.5) +12 more potentially affected by CVE-2026-31802 via org.webjars.npm:tar (>=0.1.20, <=4.4.19)

org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz 1.0.7 Source cves: CVE-2026-31802 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15456202...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-29792 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-29792 Source advisory: OSV:GHSA-WG9X-QFGW-PXHJ...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +127 more potentially affected by CVE-2026-30952 via liquidjs (>=10.2.0, <=10.24.0)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0, =1.0.10 and more Source cves: CVE-2026-30952 Source advisory: SNYK:JS-LIQUIDJS-15443434...

@aimo.network/svm (>=1.0.0, <=1.8.0), @andesmountain/x402-request (>=1.0.0, <=1.0.3) +9 more potentially affected by unknown CVE via @x402/svm (>=2.0.0, <=2.5.0)

@x402/svm NPM version =2.0.0, =1.0.0, =1.0.0, =0.1.0, =4.0.0, =0.12.7, =0.2.0, =0.2.3 Source cves: unknown CVE Source advisory: SNYK:JS-X402SVM-15440550...

@igea/oac_backend (>=1.0.35, <=1.0.119), @igea/oac_frontend (>=1.0.31, <=1.0.119) +11 more potentially affected by CVE-2026-30827 via express-rate-limit (8.1.0)

express-rate-limit NPM version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on express-rate-limit and may be impacted: - @igea/oacbackend =1.0.35, =1.0.31, =7.0.0-canary.2, =2.0.0-test.19, =0.29.0, =0.16.0, =0.42.0, =0.27.0, =0.42.0, =0.70.0,...

@george.talusan/node-red-contrib-copilot (>=0.0.5, <=1.0.5), @github/copilot-sdk (>=0.1.9, <=0.1.31-unstable.0) +19 more potentially affected by CVE-2026-29783 via @github/copilot (>=0.0.375, <=0.0.421)

@github/copilot NPM version =0.0.375, =0.0.5, =0.1.9, =1.1.0, =0.0.0, =0.13.0, =0.0.1, =1.2.3, =0.6.0, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.15 - devdoctor-js 0.1.0 and more Source cves: CVE-2026-29783 Source advisory: OSV:GHSA-G8R9-G2V8-JV6F...

@amedia/brick-mcp (>=0.0.0-vSNAPSHOT-20260217144000, <=1.0.0), @area15/ticket-component (0.1.0) +109 more potentially affected by CVE-2026-3419 via fastify (>=5.7.2, <=5.7.4)

fastify NPM version =5.7.2, =0.0.0-vSNAPSHOT-20260217144000, =0.5.2, =0.5.2, =0.5.2, =0.5.2, =0.2.11, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.11.6, =5.1.19, =2.21.2, =2.21.2, =2.21.3 and more Source cves: CVE-2026-3419 Source advisory: OSV:GHSA-573F-X89G-HQP9...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +673 more potentially affected by CVE-2026-29086 via hono (>=0.5.10, <=4.12.3)

hono NPM version =0.5.10, =0.1.8-fix.3, =0.0.2, =5.0.0, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.66, =0.0.1, =0.0.16 and more Source cves: CVE-2026-29086 Source advisory: SNYK:JS-HONO-15418360...

@343dev/optimizt (>=12.0.0, <=12.1.1), @cjy0812/inspect-plus (>=0.0.1772240426360, <=0.0.1774152861718) +37 more potentially affected by CVE-2026-29074 via svgo (4.0.0-rc.0)

svgo NPM version 4.0.0-rc.0 is affected by a known vulnerability. The following packages have a transitive dependency on svgo and may be impacted: - @343dev/optimizt =12.0.0, =0.0.1772240426360, =6.13.0, =0.0.1769658265953, =1.1.0, =1.1.0, =1.1.0, =1.0.0, =1.0.0, =1.47.0, =0.1.202510281000, =0.1....

lemmy_server (>=0.11.3-rc.5, <=0.16.7) potentially affected by CVE-2026-29178 via lemmy_routes (>=0.11.3-rc.5, <=0.16.7)

lemmyroutes CARGO version =0.11.3-rc.5, =0.11.3-rc.5, =0.16.7 Source cves: CVE-2026-29178 Source advisory: OSV:GHSA-JVXV-2JJP-JXC3...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +396 more potentially affected by CVE-2026-29086 via hono (>=4.0.0, <=4.12.3)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =0.0.26 and more Source cves: CVE-2026-29086 Source advisory: OSV:GHSA-5PQ2-9X2X-5P6W...

libcrux-aead (>=0.0.4-pre.1, <=0.0.6) potentially affected by unknown CVE via libcrux-poly1305 (0.0.4)

libcrux-poly1305 CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-poly1305 and may be impacted: - libcrux-aead =0.0.4-pre.1, =0.0.6 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0073...

@3t-transform/threeteeui (>=1.5.1, <=1.11.0), @8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4) +1256 more potentially affected by CVE-2025-15599 via dompurify (>=3.0.0, <=3.2.6)

dompurify NPM version =3.0.0, =1.5.1, =0.18.0-beta.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =1.0.0, =4.4.0-rc1, =6.4.10, =5.1.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2, =1.0.9 and more Source cves: CVE-2025-15599 Source advisory: SNYK:JS-DOMPURIFY-15371386...

@atlassian/aui (>=9.3.22, <=10.0.0-M02), @charcoal-ui/icons (>=3.16.0, <=3.21.0) +116 more potentially affected by CVE-2025-15599 via dompurify (>=2.5.4, <=2.5.8)

dompurify NPM version =2.5.4, =9.3.22, =3.16.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240719153432, =0.0.0-fec-156-react19-20250116105607,...

@dyyxyzz/baileys-mod (>=6.0.32, <=6.0.54) potentially affected by unknown CVE via @daffadeveloper/libsignal-node (0.0.1-security)

@daffadeveloper/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @daffadeveloper/libsignal-node and may be impacted: - @dyyxyzz/baileys-mod =6.0.32, =6.0.54 Source cves: unknown CVE Source advisory:...

@internxt/cli (>=1.0.5, <=1.2.2), @latitude-data/cli (>=0.0.29, <=1.11.0-canary.8) +10 more potentially affected by unknown CVE via serialize-javascript (>=7.0.0, <=7.0.2)

serialize-javascript NPM version =7.0.0, =1.0.5, =0.0.29, =0.7.5, =1.3.0, =0.1.0, =1.0.7, =0.2.0, =0.7.0-alpha.6 Source cves: unknown CVE Source advisory: OSV:GHSA-5C6J-R48X-RMVQ...

@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), @turnipxenon/pineapple (>=5.0.0-alpha.1, <=5.0.0-alpha.5) +1 more potentially affected by unknown CVE via @sveltejs/kit (>=2.49.0, <=2.49.5)

@sveltejs/kit NPM version =2.49.0, =0.0.137, =5.0.0-alpha.1, =1.12.2, =1.12.3 Source cves: unknown CVE Source advisory: SNYK:JS-SVELTEJSKIT-15366380...

leanplum-sdk (1.13.0) potentially affected by CVE-2026-26861 via clevertap-web-sdk (1.9.2)

clevertap-web-sdk NPM version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on clevertap-web-sdk and may be impacted: - leanplum-sdk 1.13.0 Source cves: CVE-2026-26861 Source advisory: SNYK:JS-CLEVERTAPWEBSDK-15366963...

leanplum-sdk (1.13.0) potentially affected by CVE-2026-26862 via clevertap-web-sdk (1.9.2)

clevertap-web-sdk NPM version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on clevertap-web-sdk and may be impacted: - leanplum-sdk 1.13.0 Source cves: CVE-2026-26862 Source advisory: OSV:GHSA-JFRQ-HJ9F-C8QX...

@sync-in/server (2.0.0), homebridge-config-ui-x (>=5.15.3-beta.3, <=5.17.1-beta.3) potentially affected by CVE-2026-2293 via @nestjs/platform-fastify (11.1.13)

@nestjs/platform-fastify NPM version 11.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on @nestjs/platform-fastify and may be impacted: - @sync-in/server 2.0.0 - homebridge-config-ui-x =5.15.3-beta.3, =5.17.1-beta.3 Source cves: CVE-2026-2293 Source...

@felixid/baileys-mod (8.0.8), @hanzzy/baileys-mod (>=8.0.5, <=8.0.11) +11 more potentially affected by unknown CVE via @skyzopedia/libsignal-node (0.0.1-security)

@skyzopedia/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @skyzopedia/libsignal-node and may be impacted: - @felixid/baileys-mod 8.0.8 - @hanzzy/baileys-mod =8.0.5, =8.0.2, =3.0.0, =8.0.8, =0.5.0, =1.0.11,...

com.github.psi-probe:psi-probe-tomcat10 (>=5.0.0, <=5.4.0), com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0) +5 more potentially affected by CVE-2026-3270 via com.github.psi-probe:psi-probe-core (>=3.0.0, <=5.4.0)

com.github.psi-probe:psi-probe-core MAVEN version =3.0.0, =5.0.0, =5.0.0, =3.0.0.rc2, =3.0.0.rc2, =3.0.0.rc2, =3.0.0.rc2, =3.0.0.rc2, =5.4.0 Source cves: CVE-2026-3270 Source advisory: SNYK:JAVA-COMGITHUBPSIPROBE-15369739...

@lapidist/design-lint (>=6.1.0, <=7.0.1), @markuplint/svelte-parser (>=5.0.0-alpha.0, <=5.0.0-alpha.2) +1 more potentially affected by CVE-2026-27902 via svelte (>=5.53.0, <=5.53.3)

svelte NPM version =5.53.0, =6.1.0, =5.0.0-alpha.0, =5.0.0-alpha.2 - dumbo-svelte 0.3.1 Source cves: CVE-2026-27902 Source advisory: OSV:GHSA-QGVG-PR8V-6RR3...

@activepieces/piece-amazon-s3 (>=0.5.4, <=0.6.4), @activepieces/piece-amazon-ses (>=0.0.1, <=0.1.4) +1263 more potentially affected by CVE-2026-27942 via fast-xml-parser (>=5.0.1, <=5.3.7)

fast-xml-parser NPM version =5.0.1, =0.5.4, =0.0.1, =0.1.3, =0.5.3, =0.2.1, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.0.0, =1.7.16, =1.10.0 and more Source cves: CVE-2026-27942 Source advisory: SNYK:JS-FASTXMLPARSER-15353391...

@0zd0/nx-oxfmt (>=0.0.1, <=0.1.1), @10xly/eslint-config (>=1.0.0, <=1.0.8) +1209 more potentially affected by CVE-2026-27903 via minimatch (>=10.0.0, <=10.2.2)

minimatch NPM version =10.0.0, =0.0.1, =1.0.0, =6.0.0-test.1, =10.0.0, =10.0.0, =8.0.1, =13.0.0, =5.1.3, =0.2.0, =0.9.2, =0.5.1-alpha.0, =4.10.0, =4.16.0 and more Source cves: CVE-2026-27903 Source advisory: SNYK:JS-MINIMATCH-15353389...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02.aula (1.0.0) +55771 more potentially affected by CVE-2026-27903 via minimatch (>=3.0.0, <=3.1.2)

minimatch NPM version =3.0.0, =1.0.1, =1.1.0 - 02.aula 1.0.0 - 0726react 0.1.1 - 08cms 1.0.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 -...

02strich-markdown (>=1.0.0, <=1.0.2), @0xintuition/slang-cli (>=0.0.1-b, <=0.0.8) +1944 more potentially affected by CVE-2026-27903 via minimatch (>=4.1.1, <=4.2.4)

minimatch NPM version =4.1.1, =1.0.0, =0.0.1-b, =0.5.2, =5.0.2, =2.2.0, =1.1.4, =1.3.1, =1.0.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =1.1.8, =1.0.0, =1.5.0 and more Source cves: CVE-2026-27903 Source advisory:...

@graphql-mesh/plugin-rate-limit (>=0.2.23-alpha-20230403140649-57714f1dd, <=1.0.0), @graphql-mesh/plugin-snapshot (>=0.1.24-alpha-20230403140649-57714f1dd, <=1.0.0) +13 more potentially affected by CVE-2026-27904 via minimatch (>=8.0.2, <=8.0.4)

minimatch NPM version =8.0.2, =0.2.23-alpha-20230403140649-57714f1dd, =0.1.24-alpha-20230403140649-57714f1dd, =0.15.24-alpha-20230403140649-57714f1dd, =2.0.0-beta.0, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =1.6.0-alpha.9, =1.4.1, =1.4.4 Source cves: CVE-2026-27904...

@cognigy/cognigy-cli (>=1.9.7, <=2.2.7), @forestadmin/agent (>=1.71.0, <=1.72.9) +29 more potentially affected by CVE-2026-27795 via @langchain/community (>=1.0.0, <=1.1.16)

@langchain/community NPM version =1.0.0, =1.9.7, =1.71.0, =1.1.0, =1.12.76, =0.0.1, =0.1.0, =0.2.0, =0.20.0, =0.21.0, =0.0.16, =1.4.13, =1.0.1, =1.0.24, =1.0.26 and more Source cves: CVE-2026-27795 Source advisory: OSV:GHSA-MPHV-75CG-56WG...

@eui/deps-base-light-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32), @eui/deps-base-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32) +1 more potentially affected by CVE-2026-27739 via @angular-devkit/build-angular (>=20.0.0, <=20.1.0)

@angular-devkit/build-angular NPM version =20.0.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 - ng-deploy-oss 20.0.0 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-ANGULARDEVKITBUILDANGULAR-15357315...

@abp/ng.schematics (>=9.3.0-rc.3, <=10.0.3), @ama-styling/style-dictionary (>=13.0.0-next.10, <=14.0.0-next.2) +14 more potentially affected by CVE-2026-27739 via @schematics/angular (>=20.0.0, <=20.3.16)

@schematics/angular NPM version =20.0.0, =9.3.0-rc.3, =13.0.0-next.10, =20.0.0-next.0, =20.0.0-next.0, =20.0.0-next.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.0.0-next.1, =13.0.0-next.10, =13.0.0-next.10, =0.0.1-alpha.564, =1.0.8, =1.0.9 -...

@angular-devkit/build-angular (>=21.0.0-next.0, <=21.1.4), @eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1) +3 more potentially affected by CVE-2026-27739 via @angular/build (>=21.0.0, <=21.1.4)

@angular/build NPM version =21.0.0, =21.0.0-next.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =21.0.0-next.1, =21.2.0 - ng-deploy-oss 21.0.0 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-ANGULARBUILD-15357312...

create-momentum-app (>=0.1.2, <=0.5.0) potentially affected by CVE-2026-27739 via @angular/ssr (21.1.2)

@angular/ssr NPM version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/ssr and may be impacted: - create-momentum-app =0.1.2, =0.5.0 Source cves: CVE-2026-27739 Source advisory: OSV:GHSA-X288-3778-4HHX...

create-momentum-app (>=0.1.2, <=0.5.0) potentially affected by CVE-2026-27738 via @angular/ssr (21.1.2)

@angular/ssr NPM version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/ssr and may be impacted: - create-momentum-app =0.1.2, =0.5.0 Source cves: CVE-2026-27738 Source advisory: SNYK:JS-ANGULARSSR-15357598...

@klardaten/n8n-nodes-datevconnect (>=1.0.1, <=1.0.2), @n8n/ai-workflow-builder (>=0.2.0, <=0.33.2) +20 more potentially affected by CVE-2026-27498 via @n8n/config (>=1.15.0, <=1.65.1)

@n8n/config NPM version =1.15.0, =1.0.1, =0.2.0, =0.33.0, =0.26.0, =0.34.0, =1.3.0, =0.23.8, =1.51.0, =1.65.0, =1.65.0, =1.0.1, =0.3.3, =0.1.3, =0.2.0, =0.2.0, =4.1.23 and more Source cves: CVE-2026-27498 Source advisory: SNYK:JS-N8NCONFIG-15357607...

@gardenfi/core (>=2.4.3-beta.3, <=3.1.3), @gardenfi/hyperliquid-swaps (>=0.0.1, <=1.0.4) +63 more potentially affected by CVE-2026-27452 via asn1-ts (>=7.1.0, <=8.0.5)

asn1-ts NPM version =7.1.0, =2.4.3-beta.3, =0.0.1, =0.0.2-beta.21, =0.0.1-beta.3, =2.3.3-beta.3, =1.10.0, =1.4.0, =1.27.7, =1.27.7, =0.2.0, =0.0.0-dev-20251015065834, =0.6.0-nightly.1, =0.0.0-experimental-20250325202207, =0.13.0 and more Source cves: CVE-2026-27452 Source advisory:...

org.webjars.npm:jsrsasign-util (1.0.5) potentially affected by CVE-2026-4603 via org.webjars.npm:jsrsasign (11.1.0)

org.webjars.npm:jsrsasign MAVEN version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jsrsasign and may be impacted: - org.webjars.npm:jsrsasign-util 1.0.5 Source cves: CVE-2026-4603 Source advisory:...

org.webjars.npm:jsrsasign-util (1.0.5) potentially affected by CVE-2026-4602 via org.webjars.npm:jsrsasign (11.1.0)

org.webjars.npm:jsrsasign MAVEN version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jsrsasign and may be impacted: - org.webjars.npm:jsrsasign-util 1.0.5 Source cves: CVE-2026-4602 Source advisory:...