@adv-ui/nc-strings (3.2.0), @arshad/gatsby-theme-phoenix (>=1.1.0, <=1.1.8) +154 more potentially affected by CVE-2021-32696 via striptags (>=3.0.0, <=3.1.1)

striptags NPM version =3.0.0, =1.1.0, =1.0.0, =0.1.0, =0.3.0, =1.1.1-alpha.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.3.3, =1.0.2, =1.0.6 and more Source cves: CVE-2021-32696 Source advisory: OSV:GHSA-QXG5-2QFF-P49R...

@agentlab/ldkg-ui-basetable (0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2, <=0.1.7) +163 more potentially affected by CVE-2021-32640 via ws (>=5.0.0, <=5.2.2)

ws NPM version =5.0.0, =0.1.2, =0.3.7, =0.1.8, =1.0.0, =1.0.0, =1.0.17-beta, =1.3.6, =0.1.0, =3.0.0-alpha.1, =3.0.0-alpha.1, =1.0.21, =1.0.27 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...

@abramltd/jwt-oauth2-middleware (0.1.0), @aerocorp/cli (7.0.5) +143 more potentially affected by CVE-2017-18924 via oauth2-server (>=3.0.0, <=3.1.1)

oauth2-server NPM version =3.0.0, =1.0.0, =0.0.1, =2.1.0, =3.0.0, =0.4.1, =0.1.0, =3.0.0, =3.0.0, =3.5.8 and more Source cves: CVE-2017-18924 Source advisory: OSV:GHSA-2FW4-MGQ9-39CX...

@ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=2.8.0), @apolitical/apis-client (>=1.0.0, <=1.1.5) +14 more potentially affected by CVE-2021-30246 via jsrsasign (>=10.0.0, <=10.1.13)

jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.2.0, =0.0.11, =9.21.5, =20.12.0, =20.12.0, =1.0.11, =0.1.1, =0.1.10, =0.1.11 and more Source cves: CVE-2021-30246 Source advisory: OSV:GHSA-27FJ-MC8W-J9WG...

hltc-webapi-master (>=1.0.0, <=1.2.0), verda (>=0.1.0, <=1.2.1) potentially affected by CVE-2020-7784 via ts-process-promises (1.0.2)

ts-process-promises NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ts-process-promises and may be impacted: - hltc-webapi-master =1.0.0, =0.1.0, =1.2.1 Source cves: CVE-2020-7784 Source advisory: OSV:GHSA-WW4J-C2RQ-47Q8...

system_uri (>=0.2.0, <=0.4.0) potentially affected by unknown CVE via ffi_utils (>=0.2.0, <=0.4.0)

ffiutils CARGO version =0.2.0, =0.2.0, =0.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0064...

@alesju/sphinxapi (1.2.2), @aquanomix/symodbus (1.0.3) +159 more potentially affected by unknown CVE via put (0.0.6)

put NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on put and may be impacted: - @alesju/sphinxapi 1.2.2 - @aquanomix/symodbus 1.0.3 - @aredridel/clockworkmod-tether =1.0.0, =1.5.16, =1.0.0, =3.3.3, =0.0.0, =0.0.1, =0.0.0, =0.0.0, =1.0....

@cc_server/api (>=1.4.0, <=1.7.0), @colmena/api (0.1.0) +16 more potentially affected by unknown CVE via loopback (>=3.0.0-alpha.2, <=3.23.0)

loopback NPM version =3.0.0-alpha.2, =1.4.0, =0.20.8, =0.20.8, =0.13.0-beta.1, =0.13.2-20171004211143, =0.13.2-20171004211143, =0.0.1, =0.13.2-20171004211143, =1.0.0, =1.0.3 - oe-batch-processing 2.0.0 - oe-cloud 2.0.0 - oe-data-acl 2.0.0 - oe-service-personalization 2.0.0 - oe-skeleton 2.0.0 and...

@jurajkubelka/wiki (>=0.9.4, <=0.9.6), bolt-leecher (1.0.1) +8 more potentially affected by CVE-2017-1000048 via qs (>=6.0.0, <=6.0.2)

qs NPM version =6.0.0, =0.9.4, =0.0.12, =1.0.3, =0.1.0-alpha.0, =0.9.4, =0.9.0-beta.1, =0.9.3 - wiki-security-persona 0.1.2 Source cves: CVE-2017-1000048 Source advisory: OSV:GHSA-GQGV-6JQ5-JJJ9...

hiproxy (1.3.3) potentially affected by CVE-2020-7625 via op-browser (1.0.6)

op-browser NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on op-browser and may be impacted: - hiproxy 1.3.3 Source cves: CVE-2020-7625 Source advisory: SNYK:JS-OPBROWSER-564259...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @ec.components/tinymce (>=0.5.7, <=0.6.0) +37 more potentially affected by CVE-2020-17480 via tinymce (>=4.5.1, <=4.9.5)

tinymce NPM version =4.5.1, =1.0.0, =0.5.7, =0.1.1, =0.0.13, =1.3.0, =8.0.0, =0.8.8, =0.6.3, =1.2.0, =1.0.0-alpha.0, =1.1.0, =2.2.0 - common-library 0.0.0 - connectwise-manager 10.0.0 and more Source cves: CVE-2020-17480 Source advisory: OSV:GHSA-27GM-GHR9-4V95...

3nit-utils (>=0.24.0, <=1.0.2), @36node/template-service (0.3.5) +273 more potentially affected by CVE-2019-17426 via mongoose (>=5.0.0, <=5.7.4)

mongoose NPM version =5.0.0, =0.24.0, =0.0.1, =0.0.2, =1.0.33, =1.0.1, =1.0.1, =1.0.9, =6.5.1, =0.1.8, =3.2.9, =3.4.11 - @codate/email 3.1.0 and more Source cves: CVE-2019-17426 Source advisory: OSV:GHSA-8687-VV9J-HGPH...

agrisoln (1.0.0), drafty (>=0.1.14, <=0.2.37) +1 more potentially affected by unknown CVE via react-svg (>=2.1.10, <=2.1.22)

react-svg NPM version =2.1.10, =0.1.14, =0.2.37 - pcs-remote-monitoring-webui 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8XQR-4CPM-WX7G...

@panosoft/prince-server (>=0.1.0, <=0.1.2), componentdoc (>=0.9.0, <=0.9.3) +2 more potentially affected by CVE-2016-10591 via prince (>=1.0.5, <=1.2.1)

prince NPM version =1.0.5, =0.1.0, =0.9.0, =0.9.0, =0.0.1, =0.2.4 Source cves: CVE-2016-10591 Source advisory: OSV:GHSA-CR79-9PWF-R6F5...

@yihangho/express-admin (1.3.2-2), analyst (>=0.0.3, <=0.0.8) +58 more potentially affected by CVE-2017-16082 via pg (>=2.0.0, <=2.11.1)

pg NPM version =2.0.0, =0.0.3, =0.1.0, =0.0.1, =0.0.62, =0.0.1, =0.0.1, =1.0.1, =0.0.1, =0.1.0, =0.0.1, =0.0.3 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@awearsolutions/node-red (>=0.17.5, <=0.17.6-rc.1), @device-management/device-base (>=0.0.1, <=0.1.0) +71 more potentially affected by CVE-2017-10910 via mqtt (>=2.0.1, <=2.14.0)

mqtt NPM version =2.0.1, =0.17.5, =0.0.1, =1.0.0, =1.0.0, =4.0.0-beta.15, =1.0.76, =1.0.2, =0.1.1, =0.0.5, =1.0.0, =0.4.1, =2.0.0, =2.0.3, =2.0.4 and more Source cves: CVE-2017-10910 Source advisory: OSV:GHSA-H9MJ-FGHC-664W...

@babely/cli (>=1.0.3, <=1.0.6), @fyfirman/trigger.dev (4.1.2) +40 more potentially affected by CVE-2026-73654 via @trigger.dev/core (>=3.3.8, <=4.5.5)

@trigger.dev/core NPM version =3.3.8, =1.0.3, =0.0.1-0, =0.0.2-18, =3.1.4, =0.1.2, =7.0.1, =0.1.0, =0.2.8, =0.1.2, =0.0.2, =3.0.0-beta.0, =3.3.8, =3.0.0, =3.3.12 and more Source cves: CVE-2026-73654 Source advisory: OSV:GHSA-P28V-F755-9QRG...

@hanssoft/baileys (>=2.0.4, <=10.0.0), @lynnidoffc/baileys (>=3.1.0, <=3.1.7) potentially affected by unknown CVE via @hanssoft/libsignal-node (3.0.4)

@hanssoft/libsignal-node NPM version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on @hanssoft/libsignal-node and may be impacted: - @hanssoft/baileys =2.0.4, =3.1.0, =3.1.7 Source cves: unknown CVE Source advisory:...

@torbeck/priority-queue (>=6.3.5, <=6.3.10) potentially affected by unknown CVE via @torbeck/heap (>=4.3.8, <=4.3.14)

@torbeck/heap NPM version =4.3.8, =6.3.5, =6.3.10 Source cves: unknown CVE Source advisory: SNYK:JS-TORBECKHEAP-18758939...

@dreamguyxeon/baileyx (>=1.0.0, <=5.0.0), @rishi56/baileys (1.0.0) +2 more potentially affected by unknown CVE via @dgxeon13/libsignal-node (1.0.0)

@dgxeon13/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @dgxeon13/libsignal-node and may be impacted: - @dreamguyxeon/baileyx =1.0.0, =1.0.0, =1.0.2 - sayan-soket 1.0.0 Source cves: unknown CVE Source advisory:...

my-auto-follow (1.0.3) potentially affected by unknown CVE via @dreamguyxeon/libsignal-node (1.0.1)

@dreamguyxeon/libsignal-node NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @dreamguyxeon/libsignal-node and may be impacted: - my-auto-follow 1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-DREAMGUYXEONLIBSIGNALNODE-18748591...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73411 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73411 Source advisory: SNYK:JS-SHESCAPE-18752076...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73412 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73412 Source advisory: SNYK:JS-SHESCAPE-18752072...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: SNYK:JS-SHESCAPE-18752068...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10907 more potentially affected by CVE-2026-73086 via nanoid (>=3.0.0, <=3.3.11)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.1, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.2 and more Source cves: CVE-2026-73086 Source advisory: SNYK:JS-NANOID-18748186...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5825 more potentially affected by CVE-2026-73086 via nanoid (>=4.0.0, <=5.1.9)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-73086 Source advisory: SNYK:JS-NANOID-18748186...

noxleys (>=1.1.1, <=1.1.5) potentially affected by unknown CVE via @noxzacode/libsignal-node (1.0.0)

@noxzacode/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @noxzacode/libsignal-node and may be impacted: - noxleys =1.1.1, =1.1.5 Source cves: unknown CVE Source advisory: SNYK:JS-NOXZACODELIBSIGNALNODE-18677384...

signalo (>=0.9.0, <=0.10.0) potentially affected by unknown CVE via circular-buffer (2.0.0)

circular-buffer CARGO version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on circular-buffer and may be impacted: - signalo =0.9.0, =0.10.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0256...

accesskit_consumer (>=0.1.0, <=0.7.1), accesskit_windows (>=0.1.0, <=0.8.0) +1182 more potentially affected by unknown CVE via sized-chunks (>=0.1.3, <=0.6.5)

sized-chunks CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =1.0.5, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.0.1, =0.0.1, =0.2.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0255...

my-auto-follow (1.0.3) potentially affected by unknown CVE via @dreamguyxeon/libsignal-node (1.0.1)

@dreamguyxeon/libsignal-node NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @dreamguyxeon/libsignal-node and may be impacted: - my-auto-follow 1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13931...

agentgui (>=1.0.111, <=1.0.931) potentially affected by unknown CVE via fsbrowse (0.2.28)

fsbrowse NPM version 0.2.28 is affected by a known vulnerability. The following packages have a transitive dependency on fsbrowse and may be impacted: - agentgui =1.0.111, =1.0.931 Source cves: unknown CVE Source advisory: SNYK:JS-FSBROWSE-18609759...

agentgui (>=1.0.111, <=1.0.931) potentially affected by unknown CVE via fsbrowse (0.2.28)

fsbrowse NPM version 0.2.28 is affected by a known vulnerability. The following packages have a transitive dependency on fsbrowse and may be impacted: - agentgui =1.0.111, =1.0.931 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13722...

0x-assert (>=0.0.2, <=0.0.3), 0xauth (>=0.0.5, <=0.1.0) +7324 more potentially affected by CVE-2026-71851 via crypto-js (>=3.1.2, <=3.3.0)

crypto-js NPM version =3.1.2, =0.0.2, =0.0.5, =1.0.0, =1.0.0, =1.34.1, =0.1.0, =4.11.2, =0.0.1, =3.3.9, =3.10.1, =0.0.16-0.1, =0.0.4, =0.0.7 and more Source cves: CVE-2026-71851 Source advisory: SNYK:JS-CRYPTOJS-18599395...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +980 more potentially affected by CVE-2026-71850 via hono (>=3.8.4, <=4.12.33)

hono NPM version =3.8.4, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =5.0.0, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.28.7 and more Source cves: CVE-2026-71850 Source advisory: OSV:GHSA-F23P-VX2J-J53R...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +980 more potentially affected by CVE-2026-71850 via hono (>=3.8.4, <=4.12.33)

hono NPM version =3.8.4, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =5.0.0, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.28.7 and more Source cves: CVE-2026-71850 Source advisory: SNYK:JS-HONO-18592332...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +665 more potentially affected by CVE-2026-71849 via hono (>=4.7.0, <=4.12.33)

hono NPM version =4.7.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.30.7 and more Source cves: CVE-2026-71849 Source advisory: OSV:GHSA-79QM-7RJ5-M7R9...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-72744 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-72744 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@0xwork/connect (0.1.8), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +1443 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)

pdfjs-dist NPM version =5.6.205, =0.1.8-fix.3, =1.0.0, =0.2.0, =0.0.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.104.0, =0.1.0, =0.2.340, =0.1.0, =0.17.9, =0.22.4 and more Source cves: CVE-2026-16633 Source advisory: SNYK:JS-PDFJSDIST-18592344...

bai-provider (1.0.10) potentially affected by unknown CVE via supersig (1.0.5)

supersig NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on supersig and may be impacted: - bai-provider 1.0.10 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13461...

@appweaver/core (>=1.1.6, <=1.2.1), @cappa/cli (0.11.1) +12 more potentially affected by CVE-2026-18427 via @fastify/static (>=10.1.0, <=10.1.2)

@fastify/static NPM version =10.1.0, =1.1.6, =3.1.17, =0.4.0, =0.1.0-rc.2, =5.27.1-beta.7, =9.0.0-canary.19, =1.0.0, =1.2.0 - rollipop 1.0.0-alpha.29 Source cves: CVE-2026-18427 Source advisory: SNYK:JS-FASTIFYSTATIC-18592349...

@holocronlab/botruntime-adk (2.2.5), @holocronlab/brt (0.7.5) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.2.5)

@holocronlab/botruntime-runtime NPM version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.2.5 - @holocronlab/brt 0.7.5 Source cves: unknown CVE Source advisory...

@ccfly/setup (0.1.9) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.9)

@ccfly/setup-linux-x64 NPM version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

comiconv (>=0.1.0, <=0.1.2), waifu-diffuser-types (0.0.0) potentially affected by unknown CVE via sevenz-rust (0.2.10)

sevenz-rust CARGO version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on sevenz-rust and may be impacted: - comiconv =0.1.0, =0.1.2 - waifu-diffuser-types 0.0.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0245...

@whalent/agent (0.3.273) potentially affected by unknown CVE via @whalent/agent-core (0.3.273)

@whalent/agent-core NPM version 0.3.273 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.273 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.264) potentially affected by unknown CVE via @whalent/agent-core (0.3.264)

@whalent/agent-core NPM version 0.3.264 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.264 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +55 more potentially affected by CVE-2026-71320 via nuxt (>=3.4.2, <=3.21.8)

nuxt NPM version =3.4.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.12.0-rc.7 and more Source cves: CVE-2026-71320 Source advisory: OSV:GHSA-9473-5F9J-94WQ...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +15 more potentially affected by CVE-2026-71316 via @nuxt/nitro-server (>=4.4.2, <=4.5.0)

@nuxt/nitro-server NPM version =4.4.2, =3.2.0, =4.4.2-depup.0, =1.4.4, =1.2.1, =1.6.0-rc.3, =1.0.0-alpha.1, =4.3.1-dev.1, =1.0.0, =4.4.2, =0.6.0-rc.1, =0.2.0-alpha.5, =0.3.0-alpha.2 and more Source cves: CVE-2026-71316 Source advisory: SNYK:JS-NUXTNITROSERVER-18565121...

@geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4), @qingwave/cclens (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2026-71314 via @nuxt/nitro-server (>=3.20.0, <=3.21.9)

@nuxt/nitro-server NPM version =3.20.0, =9.13.1-rc.9, =0.1.0, =3.20.0, =3.21.9 Source cves: CVE-2026-71314 Source advisory: SNYK:JS-NUXTNITROSERVER-18565123...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +79 more potentially affected by CVE-2026-71314 via nuxt (>=3.1.2, <=3.21.8)

nuxt NPM version =3.1.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-71314 Source advisory: SNYK:JS-NUXT-18565122...