@automate.ax/components-core (>=0.1.3, <=0.3.1), @grease.sh/components-core (0.1.2) +4 more potentially affected by CVE-2026-67329 via @better-auth/stripe (>=1.6.9, <=1.6.11)

@better-auth/stripe NPM version =1.6.9, =0.1.3, =0.1.3, =0.1.0, =0.2.7 - grease.sh 0.1.2 Source cves: CVE-2026-67329 Source advisory: SNYK:JS-BETTERAUTHSTRIPE-18319505...

astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by CVE-2026-73423 via astro (>=7.0.2, <=7.0.3)

astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: CVE-2026-73423 Source advisory: OSV:GHSA-8MV7-9C27-98VC...

@whalent/agent (0.3.277) potentially affected by unknown CVE via @whalent/agent-core (0.3.277)

@whalent/agent-core NPM version 0.3.277 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.277 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

backroll_transport_steam (>=0.1.0, <=0.5.0), bevy-steamworks (>=0.1.0, <=0.2.0) +5 more potentially affected by unknown CVE via steamworks (>=0.6.1, <=0.12.2)

steamworks CARGO version =0.6.1, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0121...

@4via6/relay (>=1.0.0, <=1.1.3), @circleci/agents (>=1.0.6, <=2.3.1) +6 more potentially affected by CVE-2025-61260 via @openai/codex (>=0.1.2504211509, <=0.20.0)

@openai/codex NPM version =0.1.2504211509, =1.0.0, =1.0.6, =0.0.1, =0.23.0, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.0.2 Source cves: CVE-2025-61260 Source advisory: SNYK:JS-OPENAICODEX-16111764...

@brendonovich/solidjs__start (>=0.0.0, <=0.0.3), @h3ravel/arquebus (>=0.3.3, <=0.6.6) +43 more potentially affected by unknown CVE via h3 (2.0.0-rc.1)

h3 NPM version 2.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on h3 and may be impacted: - @brendonovich/solidjsstart =0.0.0, =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.24...

@dyyxyzz/baileys-mod (>=6.0.32, <=6.0.54) potentially affected by unknown CVE via @daffadeveloper/libsignal-node (0.0.1-security)

@daffadeveloper/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @daffadeveloper/libsignal-node and may be impacted: - @dyyxyzz/baileys-mod =6.0.32, =6.0.54 Source cves: unknown CVE Source advisory:...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +297 more potentially affected by unknown CVE via next (>=15.3.0, <=15.3.6)

next NPM version =15.3.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.1.0, =0.0.5-alpha-20250409222818-a35bb677fde1e4e9cf3db443e9ae36abf4f8e21b, =0.0.20, =0.0.22 - @aeon-ai-pay/x402-axios 0.0.1 - @aeon-ai-pay/x402-hono 0.0.3 - @affrawidy/wawok 1.1.4 - @agogic/business-data 0.0.2 and more Source cves:...

b4ae (>=2.0.0, <=2.1.3), clatter (>=0.1.2-alpha, <=2.0.0-rc.1) +28 more potentially affected by unknown CVE via pqcrypto-kyber (>=0.1.2, <=0.8.1)

pqcrypto-kyber CARGO version =0.1.2, =2.0.0, =0.1.2-alpha, =0.1.4, =0.1.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0 - qudag-exchange 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0381...

@gambalabs/sentry-nuxt (>=8.31.1, <=8.32.0), @globalbrain/sefirot (3.40.0) +31 more potentially affected by unknown CVE via @sentry/browser (>=8.0.0, <=8.32.0)

@sentry/browser NPM version =8.0.0, =8.31.1, =7.0.0, =8.9.0, =1.0.386-leo-ron-885-experimental.13, =0.0.1, =0.1.0, =8.0.0-alpha.2, =8.0.0-alpha.2, =8.0.0-alpha.2, =1.0.0-beta.1, =5.0.0-beta.0, =8.0.0-alpha.2, =8.0.0-alpha.2, =8.32.0 and more Source cves: unknown CVE Source advisory:...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +8 more potentially affected by unknown CVE via olm-sys (1.3.2)

olm-sys CARGO version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on olm-sys and may be impacted: - alerter =0.3.0, =0.2.0, =0.3.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.13.0, =0.1.0, =0.4.0 Source cves: unknown CVE Source advisory:...

arcon_compiler (>=0.1.0, <=0.1.1), astrology (>=0.1.0, <=0.1.55) +18 more potentially affected by unknown CVE via ferris-says (>=0.1.2, <=0.2.1)

ferris-says CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =10.10.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V363-RRF2-5FMJ...

@ancademy/platform-sdk-client (>=1.1.1, <=1.1.4), @apollo/server-integration-testsuite (>=4.1.0, <=4.9.2) +31 more potentially affected by unknown CVE via @apollo/server (>=4.1.0, <=4.9.2)

@apollo/server NPM version =4.1.0, =1.1.1, =4.1.0, =0.0.1, =3.0.0-alpha.0, =3.0.0-alpha.0, =0.3.0-rc.0, =0.2.0, =0.1.0-alpha.6, =0.1.18, =0.1.17, =0.2.0, =0.1.17, =0.2.0, =0.2.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

@story-telling-reporter/draft-editor (>=2.1.0-beta.0, <=2.1.2) potentially affected by unknown CVE via @keystone-6/core (5.2.0)

@keystone-6/core NPM version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @story-telling-reporter/draft-editor =2.1.0-beta.0, =2.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-5FP6-4XW3-XQQ3...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10618 more potentially affected by CVE-2026-73086 via nanoid (>=3.0.0, <=3.3.11)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-73086 Source advisory: SNYK:JS-NANOID-18748186...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +716 more potentially affected by CVE-2026-71849 via hono (>=4.7.0, <=4.12.33)

hono NPM version =4.7.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.5 and more Source cves: CVE-2026-71849 Source advisory: OSV:GHSA-79QM-7RJ5-M7R9...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +449 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0-dev.2580522, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.1.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-71848 Source advisory: SNYK:JS-HONO-18593786...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +13 more potentially affected by CVE-2026-72744 via @nuxt/nitro-server (>=4.4.7, <=4.5.0)

@nuxt/nitro-server NPM version =4.4.7, =3.2.0, =4.5.0-depup.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =4.4.7, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXTNITROSERVER-18593816...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-72744 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXT-18593815...

@qingwave/cclens (>=0.1.0, <=0.2.0), nuxt (>=3.21.7, <=3.21.9) potentially affected by CVE-2026-72744 via @nuxt/nitro-server (>=3.21.7, <=3.21.9)

@nuxt/nitro-server NPM version =3.21.7, =0.1.0, =3.21.7, =3.21.9 Source cves: CVE-2026-72744 Source advisory: SNYK:JS-NUXTNITROSERVER-18593816...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21410 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.15.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5P4M-2WFM-XMQJ...

@fernir2/saas-kit (>=0.0.173, <=0.0.207), @fernir2/saas-kit-cli (>=0.1.38, <=0.1.40) +1 more potentially affected by CVE-2026-71476 via @nx/s3-cache (>=5.0.0, <=5.0.7)

@nx/s3-cache NPM version =5.0.0, =0.0.173, =0.1.38, =5.0.0, =5.0.7 Source cves: CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...

@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0-rc.33), @hublo/sentinel (>=1.1.0-alpha.3, <=1.2.0-alpha.0) +39 more potentially affected by CVE-2026-71476 via nx (>=23.0.0, <=23.0.1)

nx NPM version =23.0.0, =1.0.0-rc.24, =1.1.0-alpha.3, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.1 and more Source cves: CVE-2026-71476 Source...

@appweaver/core (>=1.1.6, <=1.4.1), @cappa/cli (0.11.1) +32 more potentially affected by CVE-2026-18427 via @fastify/static (>=10.1.0, <=10.1.2)

@fastify/static NPM version =10.1.0, =1.1.6, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =0.0.4, =0.0.6 - @darthcav/ts-http-server 0.9.1 - @digitalpaws/starr 0.0...

@apicity/mcp-server (0.8.5) potentially affected by unknown CVE via @apicity/meta (0.8.5)

@apicity/meta NPM version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

@apicity/mcp-server (0.8.4) potentially affected by unknown CVE via @apicity/meta (0.8.4)

@apicity/meta NPM version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.4 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

@whalent/agent (0.3.294) potentially affected by unknown CVE via @whalent/agent-core (0.3.294)

@whalent/agent-core NPM version 0.3.294 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.294 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.259) potentially affected by unknown CVE via @whalent/agent-core (0.3.259)

@whalent/agent-core NPM version 0.3.259 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.259 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.296) potentially affected by unknown CVE via @whalent/agent-core (0.3.296)

@whalent/agent-core NPM version 0.3.296 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.296 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@bloggrify/bento (>=3.0.0, <=3.1.0), @bloggrify/core (>=3.0.0, <=3.3.0) +19 more potentially affected by CVE-2026-71320 via @nuxt/nitro-server (>=4.2.0, <=4.5.0)

@nuxt/nitro-server NPM version =4.2.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.2.2-depup.0, =10.0.2-rc.5, =1.1.11, =1.0.8, =1.6.0-rc.3, =0.4.5, =3.0.0-dev.27, =1.0.0, =4.2.0, =0.5.0, =0.6.0 and more Source cves: CVE-2026-71320 Source advisory: SNYK:JS-NUXTNITROSERVER-18565116...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +15 more potentially affected by CVE-2026-71316 via @nuxt/nitro-server (>=4.4.2, <=4.5.0)

@nuxt/nitro-server NPM version =4.4.2, =3.2.0, =4.4.2-depup.0, =1.4.4, =1.2.1, =1.6.0-rc.3, =1.0.0-alpha.1, =4.3.1-dev.1, =1.0.0, =4.4.2, =0.6.0-rc.1, =0.2.0-alpha.5, =0.3.0-alpha.2 and more Source cves: CVE-2026-71316 Source advisory: SNYK:JS-NUXTNITROSERVER-18565121...

jo-cli (1.0.2) potentially affected by CVE-2026-69152 via brace-expansion (3.0.0)

brace-expansion NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli 1.0.2 Source cves: CVE-2026-69152 Source advisory: OSV:GHSA-RGW5-RVV9-X895...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30572 more potentially affected by CVE-2026-58062 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2026-58062 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519200...

venturo-playwright (1.0.10) potentially affected by unknown CVE via venturo-playwright-runner (1.0.6)

venturo-playwright-runner NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.10 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by unknown CVE via @sveltejs/kit (>=2.0.0, <=2.65.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVELTEJSKIT-18319510...

@whalent/agent (0.3.288) potentially affected by unknown CVE via @whalent/agent-core (0.3.288)

@whalent/agent-core NPM version 0.3.288 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.288 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@adobe/spacecat-shared-brand-client (>=1.1.31, <=1.1.35), @adobe/spacecat-shared-cloud-manager-client (>=1.0.0, <=1.4.3) +255 more potentially affected by CVE-2026-48038 via joi (>=18.0.0, <=18.1.2)

joi NPM version =18.0.0, =1.1.31, =1.0.0, =1.8.6, =2.61.4, =1.4.60, =1.6.11, =1.19.1, =1.11.2, =2.2.1, =1.0.0, =1.12.0, =3.14.0, =25.109.0-beta.1, =26.1.0 and more Source cves: CVE-2026-48038 Source advisory: OSV:GHSA-Q7CG-457F-VX79...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +549 more potentially affected by unknown CVE via hono (>=4.0.0, <=4.12.12)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-HONO-16080667...

@daffaadev/baileys (1.0.1), @daffaadev/baileyss (1.0.0) potentially affected by unknown CVE via @daffadeveloper/signal-node (0.0.1-security)

@daffadeveloper/signal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @daffadeveloper/signal-node and may be impacted: - @daffaadev/baileys 1.0.1 - @daffaadev/baileyss 1.0.0 Source cves: unknown CVE Source advisory:...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +297 more potentially affected by unknown CVE via next (>=15.3.0, <=15.3.6)

next NPM version =15.3.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.1.0, =0.0.5-alpha-20250409222818-a35bb677fde1e4e9cf3db443e9ae36abf4f8e21b, =0.0.20, =0.0.22 - @aeon-ai-pay/x402-axios 0.0.1 - @aeon-ai-pay/x402-hono 0.0.3 - @affrawidy/wawok 1.1.4 - @agogic/business-data 0.0.2 and more Source cves:...

@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)

babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15281...

brick (0.0.0), bud (>=0.0.0, <=0.1.2) +16 more potentially affected by unknown CVE via first-val (0.0.0)

first-val NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on first-val and may be impacted: - brick 0.0.0 - bud =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =0.0.0, =3.1.1, =0.0.0, =0.0.4, =0.0.0, =0.0.2 and more Source cves:...

failing-line (0.0.1), mp3s (0.0.0) +3 more potentially affected by unknown CVE via findall (0.0.4)

findall NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on findall and may be impacted: - failing-line 0.0.1 - mp3s 0.0.0 - ourtunes =0.0.0, =0.0.2, =0.0.3, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20572...

@ronin-dist/render (>=1.0.386-leo-ron-885-experimental.35, <=1.0.490), @ronin/blade (>=0.0.1, <=0.2.7) +1 more potentially affected by unknown CVE via @sentry/bun (>=8.11.0, <=8.41.0)

@sentry/bun NPM version =8.11.0, =1.0.386-leo-ron-885-experimental.35, =0.0.1, =0.1.0, =0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

@boltboris/react-nodegui (0.14.0), @educandu/rooms-auth-lambda (>=1.0.0, <=1.0.1) +10 more potentially affected by unknown CVE via phin (>=3.2.4, <=3.7.0)

phin NPM version =3.2.4, =1.0.0, =2.0.0-alpha.1, =1.0.0, =0.13.0, =0.0.0, =0.0.1 - pusher-status 1.1.3 - weather-private 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X565-32QP-M3VF...

@berrywallet/core (>=0.1.0, <=0.2.1), @counterplay/simpleflake (>=2.0.0, <=2.0.1) +55 more potentially affected by unknown CVE via bignum (>=0.12.5, <=0.13.0)

bignum NPM version =0.12.5, =0.1.0, =2.0.0, =1.0.0, =1.0.0, =0.14.6, =0.1.0, =1.1.0, =0.0.2, =0.0.17, =0.5.0, =1.0.0, =1.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7CGC-FJV4-52X6...

acari-lib (>=0.1.1, <=0.1.8), agate (1.1.0) +59 more potentially affected by unknown CVE via tree_magic (0.2.3)

treemagic CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on treemagic and may be impacted: - acari-lib =0.1.1, =1.2.0, =0.6.0, =0.1.0, =0.1.0, =1.1.0, =0.10.1, =0.1.0, =0.1.4 - fractal-matrix-api 4.0.0 and more Source cves: unknown CV...

@2109-t5/server (>=1.0.0, <=1.0.9), @accounter/green-invoice-graphql (>=0.7.2-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, <=0.7.3-alpha-20250224164805-3a96c9f8d619656e3b6a8c0d26319b937adbafe6) +207 more potentially affected by CVE-2022-25881 via http-cache-semantics (>=4.0.3, <=4.1.0)

http-cache-semantics NPM version =4.0.3, =1.0.0, =0.7.2-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =0.2.3-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =0.2.3-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =1.1.3, =3.0.0, =1.9.19, =1.18.0,...

can2040 (>=0.1.2, <=0.1.5), card10-alloc (>=0.1.0, <=0.1.1) +13 more potentially affected by unknown CVE via alloc-cortex-m (>=0.2.2, <=0.4.4)

alloc-cortex-m CARGO version =0.2.2, =0.1.2, =0.1.0, =0.1.0, =0.0.4, =0.3.2, =0.1.0, =0.1.0, =0.5.6, =0.1.0, =0.1.1, =0.0.2, =0.0.11 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0073...

@codingsh/harmony-crypto (>=0.1.57, <=0.1.58) potentially affected by unknown CVE via scrypt-shim (0.0.1-security)

scrypt-shim NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on scrypt-shim and may be impacted: - @codingsh/harmony-crypto =0.1.57, =0.1.58 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5972...