@atomicservice/ascf-toolkit (>=1.0.0, <=1.0.17), @atomicservice/ascf-toolkit-hvigor-plugin (>=1.0.1-beta.1, <=1.0.17) +77 more potentially affected by CVE-2026-4602 via jsrsasign (>=11.0.0, <=11.1.0)

jsrsasign NPM version =11.0.0, =1.0.0, =1.0.1-beta.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 - @citrineos/ocpi-charging-profiles 2.0.1 - @citrineos/ocpi-commands 2.0.1 - @citrineos/ocpi-credentials 2.0.1 - @citrineos/ocpi-locations 2.0.1 -...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27193 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27193 Source advisory: OSV:GHSA-9M9C-VPV5-9G85...

@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), @turnipxenon/pineapple (>=5.0.0-alpha.1, <=5.0.0-alpha.5) +1 more potentially affected by unknown CVE via @sveltejs/kit (>=2.49.0, <=2.49.5)

@sveltejs/kit NPM version =2.49.0, =0.0.137, =5.0.0-alpha.1, =1.12.2, =1.12.3 Source cves: unknown CVE Source advisory: SNYK:JS-SVELTEJSKIT-15323056...

@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +381 more potentially affected by CVE-2026-56764 via hono (>=4.0.0, <=4.11.9)

hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.8.0 and more Source cves: CVE-2026-56764 Source advisory: OSV:GHSA-GQ3J-XVXP-8HRF...

@osdlabel/react (0.0.1), @osdlabel/solid (0.0.1) +1 more potentially affected by CVE-2026-27013 via fabric (7.1.0)

fabric NPM version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fabric and may be impacted: - @osdlabel/react 0.0.1 - @osdlabel/solid 0.0.1 - osdlabel 0.0.1 Source cves: CVE-2026-27013 Source advisory: SNYK:JS-FABRIC-15317311...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02.aula (1.0.0) +55771 more potentially affected by CVE-2026-26996 via minimatch (>=3.0.0, <=3.1.2)

minimatch NPM version =3.0.0, =1.0.1, =1.1.0 - 02.aula 1.0.0 - 0726react 0.1.1 - 08cms 1.0.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 -...

net.mingsoft:ms-mweixin (1.0.7) potentially affected by CVE-2026-2666 via net.mingsoft:ms-mcms (6.2.1)

net.mingsoft:ms-mcms MAVEN version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-mcms and may be impacted: - net.mingsoft:ms-mweixin 1.0.7 Source cves: CVE-2026-2666 Source advisory: SNYK:JAVA-NETMINGSOFT-15323728...

org.webjars.npm:canvas (>=2.5.0, <=2.6.0), org.webjars.npm:color-thief (2.2.5) +12 more potentially affected by CVE-2026-26960 via org.webjars.npm:tar (>=0.1.20, <=4.4.19)

org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz 1.0.7 Source cves: CVE-2026-26960 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15307073...

5-ifc-check-cli (1.0.0), 7ghost (>=4.11.2, <=4.11.46) +3946 more potentially affected by CVE-2026-26278 via fast-xml-parser (>=4.1.3, <=4.5.3)

fast-xml-parser NPM version =4.1.3, =4.11.2, =0.1.1, =0.0.2, =1.0.1, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2026-26278 Source advisory: OSV:GHSA-JMR7-XGP7-CMFJ...

org.webjars.npm:github-com-aws-amazon-cognito-identity-js (1.12.0) potentially affected by CVE-2026-4258 via org.webjars.npm:sjcl (1.0.8)

org.webjars.npm:sjcl MAVEN version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sjcl and may be impacted: - org.webjars.npm:github-com-aws-amazon-cognito-identity-js 1.12.0 Source cves: CVE-2026-4258 Source advisory:...

figma-tree (>=0.0.1, <=0.0.11) potentially affected by CVE-2026-2544 via lu2 (2023.9.15)

lu2 NPM version 2023.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on lu2 and may be impacted: - figma-tree =0.0.1, =0.0.11 Source cves: CVE-2026-2544 Source advisory: SNYK:JS-LU2-15285654...

org.webjars.npm:jsrsasign-util (1.0.5) potentially affected by CVE-2026-4600 via org.webjars.npm:jsrsasign (11.1.0)

org.webjars.npm:jsrsasign MAVEN version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jsrsasign and may be impacted: - org.webjars.npm:jsrsasign-util 1.0.5 Source cves: CVE-2026-4600 Source advisory:...

hpke-rs (>=0.1.0-pre.1, <=0.1.0-pre.2), openmls (>=0.4.0-pre.1, <=0.4.0-pre.2) +2 more potentially affected by unknown CVE via hpke-rs-rust-crypto (0.1.1)

hpke-rs-rust-crypto CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on hpke-rs-rust-crypto and may be impacted: - hpke-rs =0.1.0-pre.1, =0.4.0-pre.1, =0.1.0-pre.1, =0.4.0, =0.9.0 Source cves: unknown CVE Source advisory:...

modern-web-swiss-army-knife (>=2.7.0, <=2.7.2) potentially affected by CVE-2025-56647 via @farmfe/core (1.6.6)

@farmfe/core NPM version 1.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on @farmfe/core and may be impacted: - modern-web-swiss-army-knife =2.7.0, =2.7.2 Source cves: CVE-2025-56647 Source advisory: SNYK:JS-FARMFECORE-15282805...

1k-utils (>=2.1.0, <=2.2.3), 20190403-utils (1.0.0) +13357 more potentially affected by CVE-2026-2391 via qs (>=6.7.0, <=6.14.1)

qs NPM version =6.7.0, =2.1.0, =2.0.0, =1.0.0, =0.0.28, =1.0.8, =4.11.0, =2.0.1, =0.0.1, =3.10.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-2391 Source advisory: SNYK:JS-QS-15268416...

@cognigy/cognigy-cli (>=1.9.7, <=2.1.0), @forestadmin/agent (>=1.71.0, <=1.72.9) +13 more potentially affected by CVE-2026-26019 via @langchain/community (>=1.0.0, <=1.1.12)

@langchain/community NPM version =1.0.0, =1.9.7, =1.71.0, =1.1.0, =1.12.76, =0.0.1, =0.2.0, =0.0.16, =1.4.13, =1.0.24, =1.0.0, =3.1.0, =0.3.0, =0.0.210, =0.1.1, =0.1.2 Source cves: CVE-2026-26019 Source advisory: SNYK:JS-LANGCHAINCOMMUNITY-15268428...

3thfloor (>=0.1.0, <=0.1.3), a-simple-llm-kit (>=0.3.0, <=0.4.2) +3722 more potentially affected by CVE-2025-69872 via diskcache (>=2.4.1, <=5.6.3)

diskcache PYPI version =2.4.1, =0.1.0, =0.3.0, =0.9.2, =0.1.0, =0.2.1, =0.1.1.dev1, =0.1.0, =0.1.0, =0.3.4, =0.1.1, =0.3.3, =0.1.32, =0.1.35 and more Source cves: CVE-2025-69872 Source advisory: SNYK:PYTHON-DISKCACHE-15268422...

@abip/scp-common (1.0.1-alpha.0), @aftership/automizely-rbac-react (>=0.1.0, <=0.6.1) +401 more potentially affected by CVE-2026-1774 via @casl/ability (>=2.4.2, <=6.7.3)

@casl/ability NPM version =2.4.2, =0.1.0, =3.7.0, =0.2.0, =0.3.1, =4.25.19-patch.1, =0.0.1, =0.0.1, =0.1.0, =1.7.0, =2.16.10 and more Source cves: CVE-2026-1774 Source advisory: OSV:GHSA-X9VF-53Q3-CVX6...

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.31.0-alpha, <=1.57.0) +11 more potentially affected by CVE-2026-25723 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.51)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.31.0-alpha, =0.0.1-rc.1, =0.5.2, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =0.10.2, =0.11.2, =0.13.22 Source cves: CVE-2026-25723 Source advisory: OSV:GHSA-MHG7-666J-CQG4...

abacuz (>=0.1.0, <=0.1.1), acceptxmr (>=0.1.0, <=0.13.0) +167 more potentially affected by CVE-2026-72814 via actix-files (>=0.1.0-alpha.6, <=0.6.6)

actix-files CARGO version =0.1.0-alpha.6, =0.1.0, =0.1.0, =1.0.0-alpha.6, =0.3.0, =0.9.0, =0.1.0, =0.1.0, =3.6.0, =0.6.0, =0.34.0 - bassment 0.1.0 - boltserver 0.11.11 and more Source cves: CVE-2026-72814 Source advisory: OSV:GHSA-8V2V-WJWG-VX6R...

@nelluriramu/oegesbot (1.0.0) potentially affected by CVE-2026-25651 via client-certificate-auth (0.3.0)

client-certificate-auth NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on client-certificate-auth and may be impacted: - @nelluriramu/oegesbot 1.0.0 Source cves: CVE-2026-25651 Source advisory: SNYK:JS-CLIENTCERTIFICATEAUTH-15248346...

@enclave-vm/broker (>=2.8.0, <=2.10.0), @enclave-vm/runtime (>=2.8.0, <=2.10.0) potentially affected by CVE-2026-25533 via @enclave-vm/core (>=2.8.0, <=2.10.0)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.10.0 Source cves: CVE-2026-25533 Source advisory: SNYK:JS-ENCLAVEVMCORE-15248347...

p2panda-rs (>=0.4.0, <=0.9.0) potentially affected by unknown CVE via openmls (0.4.1)

openmls CARGO version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openmls and may be impacted: - p2panda-rs =0.4.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8X3W-QJ7J-GQHF...

@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2026-24052 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2026-24052 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-15202062...

@amedia/brick-mcp (>=0.0.0-vEXPORT-20260113150210, <=0.1.5), @andesite-lab/andesite-core (>=1.60.2, <=1.62.0) +263 more potentially affected by CVE-2026-25223 via fastify (>=5.0.0, <=5.7.1)

fastify NPM version =5.0.0, =0.0.0-vEXPORT-20260113150210, =1.60.2, =2.0.1, =1.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.35, =0.0.82, =0.0.1, =0.0.6, =0.1.68, =6.0.0-alpha.1, =0.2.305, =1.0.6, =1.0.22 and more Source cves: CVE-2026-25223 Source advisory: OSV:GHSA-JX2C-RXCM-JVMQ...

@orval/angular (>=7.19.0, <=7.20.0), @orval/axios (>=7.19.0, <=7.20.0) +8 more potentially affected by CVE-2026-25141 via @orval/core (>=7.19.0, <=7.20.0)

@orval/core NPM version =7.19.0, =7.19.0, =7.19.0, =7.19.0, =7.19.0, =7.19.0, =7.19.0, =7.19.0, =7.19.0, =7.19.0, =7.19.0, =7.20.0 Source cves: CVE-2026-25141 Source advisory: OSV:GHSA-GCH2-PHQH-FG9Q...

@1studio/ui (>=2.17.0, <=2.83.0), @elliemae/pui-e2e-test-sdk (>=0.1.0, <=7.3.4) +8 more potentially affected by CVE-2025-57283 via browserstack-local (>=1.3.0, <=1.5.4)

browserstack-local NPM version =1.3.0, =2.17.0, =0.1.0, =1.0.0, =5.0.0-beta.13, =1.13.0, =0.1.0, =3.0.2, =1.0.28-beta.9, =0.1.0, =1.0.576, =1.0.585 Source cves: CVE-2025-57283 Source advisory: OSV:GHSA-G4W6-C99W-4WH7...

7ghost (>=4.11.0, <=4.11.46), @accordproject/concerto-ui-react (>=0.6.0-alpha.1, <=0.83.1-20200224151908) +271 more potentially affected by CVE-2025-61140 via jsonpath (>=1.0.0, <=1.1.1)

jsonpath NPM version =1.0.0, =4.11.0, =0.6.0-alpha.1, =0.82.10-20200221024018, =1.0.0, =1.1.0-dev.2, =3.0.6371, =4.0.2, =2.0.4, =0.2.0-dev.1, =4.0.149, =3.0.129, =4.0.174, =0.11.8, =1.2.5, =1.4.0 and more Source cves: CVE-2025-61140 Source advisory: OSV:GHSA-6C59-MWGH-R2X6...

flowflops (>=0.0.1.post2211140919, <=0.0.1.post2211151211) potentially affected by CVE-2025-70999 via oneflow (0.9.0)

oneflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on oneflow and may be impacted: - flowflops =0.0.1.post2211140919, =0.0.1.post2211151211 Source cves: CVE-2025-70999 Source advisory: SNYK:PYTHON-ONEFLOW-15162589...

3llm (0.0.1), @3bitmt/3bit-sidebar-dashboard (1.1.4) +266 more potentially affected by unknown CVE via next (>=15.1.1, <=15.1.11)

next NPM version =15.1.1, =0.0.4-alpha-20241218130538-b1235534784f95b3524711b50802add67747c676, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.1, =0.1.1, =0.1.0, =1.0.0, =1.0.6 - @axle-energy/components 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H25M-26QC-WCJF...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +310 more potentially affected by CVE-2025-59471 via next (>=15.6.0-canary.41, <=16.1.4)

next NPM version =15.6.0-canary.41, =0.1.0, =1.0.0, =0.3.128, =1.0.0-canary.3, =0.1.0, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.1.0, =0.1.0, =1.0.4186, =1.0.4319 and more Source cves: CVE-2025-59471 Source advisory: OSV:GHSA-9G9P-9GW9-JX7F...

@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +352 more potentially affected by CVE-2026-24472 via hono (>=4.0.0, <=4.11.6)

hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =2.0.0-beta.66, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.7.1, =1.8.0 and more Source cves: CVE-2026-24472 Source advisory: SNYK:JS-HONO-15123484...

pamai (>=1.0.0, <=1.0.5) potentially affected by CVE-2025-33234 via runx (0.0.11)

runx PYPI version 0.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on runx and may be impacted: - pamai =1.0.0, =1.0.5 Source cves: CVE-2025-33234 Source advisory: SNYK:PYTHON-RUNX-15146881...

dydx-trading-sdk (>=0.1.1, <=0.1.5), locast (>=0.1.0, <=0.1.9) +1 more potentially affected by unknown CVE via dydx-v4-client (1.1.6)

dydx-v4-client PYPI version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on dydx-v4-client and may be impacted: - dydx-trading-sdk =0.1.1, =0.1.0, =0.1.1, =1.0.7 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DYDXV4CLIENT-15244902...

@071yoon/log-console-core (0.1.0), @3bitmt/3bit-sidebar-dashboard (1.2.0) +217 more potentially affected by CVE-2025-59471 +1 more via next (>=16.0.0, <=16.1.0)

next NPM version =16.0.0, =1.0.0, =0.3.128, =1.0.0-canary.3, =0.1.0, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.1.0, =1.0.4186, =1.0.4144, =1.0.4257, =1.0.4556 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory:...

@kcconfigs/commitlint (>=0.1.0-beta.2, <=0.2.0), @pnpm/cache.commands (>=1000.0.52, <=1000.0.54) +35 more potentially affected by CVE-2026-23888 via @pnpm/fetching.binary-fetcher (>=1005.0.0, <=1005.0.1)

@pnpm/fetching.binary-fetcher NPM version =1005.0.0, =0.1.0-beta.2, =1000.0.52, =1001.2.17, =1001.1.13, =1016.0.0, =1002.2.21, =1003.0.24, =1002.0.3, =1000.0.52, =1001.0.16, =1001.1.10, =1002.1.28, =1000.3.8, =1002.0.23, =1000.1.51, =1000.1.53 and more Source cves: CVE-2026-23888 Source advisory:...

47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +209 more potentially affected by CVE-2025-55184 +1 more via next (>=15.5.0, <=15.5.9)

next NPM version =15.5.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2025-55184, CVE-2026-23864 Source advisory: SNYK:JS-NEXT-15921797...

@aandyw/ybf (>=0.1.0, <=0.1.29), @accounter/client (>=0.0.4-alpha-20250227014300-bbaee6f285ce9d54b581b115d444233911983665, <=0.0.5-alpha-20250410150030-25fea893fb3523b55c835620f6692430d5bc9bee) +213 more potentially affected by CVE-2025-55184 +1 more via next (>=15.2.0, <=15.2.8)

next NPM version =15.2.0, =0.1.0, =0.0.4-alpha-20250227014300-bbaee6f285ce9d54b581b115d444233911983665, =0.0.1-alpha, =0.1.0, =3.2.0, =0.1.0, =1.1.0-canary.0, =1.1.0-canary.0, =1.2.0-canary.0, =1.2.2-canary-20250514183211, =1.2.0-canary.8, =1.6.0 and more Source cves: CVE-2025-55184, CVE-2026-238...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +281 more potentially affected by CVE-2026-22709 via vm2 (>=3.0.0, <=3.10.1)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

d2m-apigen (>=1.0.1, <=2.1.7), dm-apigen (>=0.0.0, <=1.0.0) +3 more potentially affected by CVE-2026-24132 via @orval/mock (>=7.0.0, <=7.19.0)

@orval/mock NPM version =7.0.0, =1.0.1, =0.0.0, =1.2.0, =7.0.0, =7.1.0, =7.13.2 Source cves: CVE-2026-24132 Source advisory: SNYK:JS-ORVALMOCK-15091570...

@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2025-13465 +1 more via lodash-amd (4.16.4)

lodash-amd NPM version 4.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on lodash-amd and may be impacted: - @dojo/cli-test-intern =0.1.0, =4.1.1, =3.4.0, =0.0.1, =1.0.14, =0.0.7, =0.0.1, =0.1.5 - xirtam--matrix-operations 0.1.3 Source cves:...

@alauda/dp-dynamic-plugin-backend-core (>=0.1.11, <=0.1.12), @alithya-oss/backstage-plugin-aws-apps-backend (>=0.4.5, <=0.4.7) +252 more potentially affected by CVE-2026-24046 via @backstage/backend-defaults (>=0.0.0-nightly-20240929023448, <=0.12.1-next.1)

@backstage/backend-defaults NPM version =0.0.0-nightly-20240929023448, =0.1.11, =0.4.5, =1.0.0, =2.0.6, =1.0.7, =0.1.8, =0.3.10, =3.0.5, =0.4.1, =2.0.3, =1.0.4, =0.1.5, =0.3.6, =2.5.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-24046 Source advisory:...

org.webjars.npm:solid-js (1.9.5) potentially affected by CVE-2026-23957 via org.webjars.npm:seroval (1.2.1)

org.webjars.npm:seroval MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:seroval and may be impacted: - org.webjars.npm:solid-js 1.9.5 Source cves: CVE-2026-23957 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15054526...

@beshkenadze/orval-mcp (7.11.2-fix.2), @latest-version/orval-angular (7.4.1) +19 more potentially affected by CVE-2026-23947 +1 more via @orval/core (>=7.0.0, <=7.18.0)

@orval/core NPM version =7.0.0, =7.4.1, =7.4.1, =7.4.1, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.9.0, =7.0.0, =7.0.0, =7.0.0, =7.18.0 and more Source cves: CVE-2026-23947, CVE-2026-25141 Source advisory: OSV:GHSA-H526-WF6G-67JV...

aegis-game (>=2.0.0, <=2.9.11), auditnlg (0.0.1) +29 more potentially affected by CVE-2025-66902 via websocket-server (>=0.4.0, <=0.6.4)

websocket-server PYPI version =0.4.0, =2.0.0, =0.2.3, =0.1.7, =0.2.0, =0.1.0, =0.1.1, =0.1.0, =0.7.0, =0.0.11, =0.2.16 and more Source cves: CVE-2025-66902 Source advisory: SNYK:PYTHON-WEBSOCKETSERVER-15046798...

@orval/angular (>=8.0.0-rc.0, <=8.0.1), @orval/axios (>=8.0.0-rc.0, <=8.0.1) +9 more potentially affected by CVE-2026-23947 via @orval/core (>=8.0.0, <=8.0.1)

@orval/core NPM version =8.0.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.6, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.1 Source cves: CVE-2026-23947 Source advisory: SNYK:JS-ORVALCORE-15038726...

filecc (>=0.0.1, <=1.0.1), gm-i18n-migrate (>=2.7.0, <=2.9.0) +3 more potentially affected by CVE-2025-15536 via opencc (>=1.0.6, <=1.1.3)

opencc NPM version =1.0.6, =0.0.1, =2.7.0, =2.7.2, =1.0.2, =1.0.5 - wise-paas-notify-utility 1.4.10-s2t1 Source cves: CVE-2025-15536 Source advisory: OSV:GHSA-5PR6-CRVP-2J9F...

@alexaegis/svelte-config (>=0.14.0, <=0.14.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=1.2.0, <=2.1.0) +5 more potentially affected by CVE-2025-67647 via @sveltejs/kit (>=2.20.7, <=2.49.3)

@sveltejs/kit NPM version =2.20.7, =0.14.0, =1.2.0, =0.0.137, =0.0.1, =1.0.1-next.0, =0.0.1, =1.3.0, =1.12.3 Source cves: CVE-2025-67647 Source advisory: OSV:GHSA-J62C-4X62-9R35...

@0k.io/prettier (>=0.0.2, <=0.0.3), @0k/prettier (>=0.2.0, <=0.2.1) +319 more potentially affected by CVE-2026-24001 via diff (>=4.0.1, <=4.0.2)

diff NPM version =4.0.1, =0.0.2, =0.2.0, =1.2.0, =0.3.2, =0.4.0-next.6, =7.0.0-alpha.0, =7.0.0-alpha.0, =7.0.0-alpha.0, =7.0.0-alpha.0, =7.0.0-alpha.0, =0.4.0, =1.5.0, =4.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2026-24001 Source advisory: OSV:GHSA-73RR-HH4G-FPGX...

01-numacert (>=1.0.0, <=3.0.0), 12g (>=0.0.15, <=1.0.1) +7553 more potentially affected by CVE-2026-24001 via diff (>=3.0.0, <=3.5.0)

diff NPM version =3.0.0, =1.0.0, =0.0.15, =1.0.4, =5.4.4, =5.4.4, =2.2.1, =1.1.8, =1.0.0, =2.0.0, =0.0.1, =0.1.1, =0.1.0, =1.0.0, =1.8.1 and more Source cves: CVE-2026-24001 Source advisory: OSV:GHSA-73RR-HH4G-FPGX...