11668 matches found
@acabai/android (>=1.0.0, <=1.0.1), @addfox/cli (>=0.1.1-beta.2, <=0.1.1) +176 more potentially affected by CVE-2026-31988 via yauzl (3.2.0)
yauzl NPM version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on yauzl and may be impacted: - @acabai/android =1.0.0, =0.1.1-beta.2, =0.1.1-beta.2, =1.6.10, =3.4.26, =2.1.83, =1.2.7, =1.1.22, =8.0.0, =10.0.0, =10.0.0, =1.0.0, =1.0.1, =8.9.4,...
@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-29792 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)
@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-29792 Source advisory: OSV:GHSA-WG9X-QFGW-PXHJ...
@igea/oac_backend (>=1.0.35, <=1.0.119), @igea/oac_frontend (>=1.0.31, <=1.0.119) +11 more potentially affected by CVE-2026-30827 via express-rate-limit (8.1.0)
express-rate-limit NPM version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on express-rate-limit and may be impacted: - @igea/oacbackend =1.0.35, =1.0.31, =7.0.0-canary.2, =2.0.0-test.19, =0.29.0, =0.16.0, =0.42.0, =0.27.0, =0.42.0, =0.70.0,...
@backstage/backend-defaults (>=0.0.0-nightly-20240929023448, <=0.15.2-next.1), @backstage/backend-dynamic-feature-service (>=0.0.0-nightly-20240929023448, <=0.7.9-next.1) +80 more potentially affected by CVE-2026-29185 via @backstage/integration (>=1.6.2, <=1.20.0-next.2)
@backstage/integration NPM version =1.6.2, =0.0.0-nightly-20240929023448, =0.0.0-nightly-20240929023448, =0.0.0-nightly-20240929023448, =0.0.0-nightly-20240929023448, =0.0.0-nightly-20250614024041, =0.0.0-nightly-20240929023448, =0.0.0-nightly-20250129022746, =0.0.0-nightly-20250129022746,...
-graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2), 01-test-button (>=1.0.0, <=1.0.2) +11003 more potentially affected by CVE-2026-29063 via immutable (>=3.0.1, <=3.8.2)
immutable NPM version =3.0.1, =2.0.1, =1.0.0, =0.0.2, =0.2.0, =2.0.0-rc3, =1.0.0, =1.0.0, =0.1.0, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2026-29063 Source advisory: SNYK:JS-IMMUTABLE-15423650...
leanplum-sdk (1.13.0) potentially affected by CVE-2026-26861 via clevertap-web-sdk (1.9.2)
clevertap-web-sdk NPM version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on clevertap-web-sdk and may be impacted: - leanplum-sdk 1.13.0 Source cves: CVE-2026-26861 Source advisory: OSV:GHSA-J5MF-6RH3-RHGG...
@felixid/baileys-mod (8.0.8), @hanzzy/baileys-mod (>=8.0.5, <=8.0.11) +11 more potentially affected by unknown CVE via @skyzopedia/libsignal-node (0.0.1-security)
@skyzopedia/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @skyzopedia/libsignal-node and may be impacted: - @felixid/baileys-mod 8.0.8 - @hanzzy/baileys-mod =8.0.5, =8.0.2, =3.0.0, =8.0.8, =0.5.0, =1.0.11,...
10up-toolkit (>=6.0.0-next.0, <=7.0.0), @0ti.me/ts-test-deps (0.2.0) +6554 more potentially affected by CVE-2026-27903 via minimatch (>=9.0.0, <=9.0.6)
minimatch NPM version =9.0.0, =6.0.0-next.0, =1.1.0-pre.1, =1.4.0, =9.1.0, =1.17.3-testing-284.48.0, =1.0.0, =1.1.6, =0.0.0-alpha.1011313d2aaf, =1.1.3, =1.0.6, =1.0.25 and more Source cves: CVE-2026-27903 Source advisory: OSV:GHSA-7R86-CG39-JMMJ...
@aadarshjr/reweb-js (>=1.0.7, <=1.0.17), @acentswap/ace-core-trial (>=10.4.0, <=10.7.0) +899 more potentially affected by CVE-2026-27904 via minimatch (>=5.0.0, <=5.1.7)
minimatch NPM version =5.0.0, =1.0.7, =10.4.0, =9.0.0, =10.0.0, =10.0.0, =10.5.0, =10.4.0, =0.4.13, =2.3.0, =2.3.0, =2.2.1, =2.2.1, =2.2.2 - @aid-on/aidify 0.1.2 and more Source cves: CVE-2026-27904 Source advisory: OSV:GHSA-23C5-XMQV-RM74...
@activepieces/piece-amazon-s3 (>=0.5.8, <=0.6.4), @activepieces/piece-amazon-ses (>=0.0.1, <=0.1.4) +1248 more potentially affected by CVE-2026-27942 via fast-xml-parser (>=5.0.1, <=5.3.7)
fast-xml-parser NPM version =5.0.1, =0.5.8, =0.0.1, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.0.0, =1.7.16, =2.33.6, =1.4.37, =1.6.3 and more Source cves: CVE-2026-27942 Source advisory: SNYK:JS-FASTXMLPARSER-15353391...
@graphql-mesh/plugin-rate-limit (>=0.2.23-alpha-20230403140649-57714f1dd, <=1.0.0), @graphql-mesh/plugin-snapshot (>=0.1.24-alpha-20230403140649-57714f1dd, <=1.0.0) +13 more potentially affected by CVE-2026-27903 via minimatch (>=8.0.2, <=8.0.4)
minimatch NPM version =8.0.2, =0.2.23-alpha-20230403140649-57714f1dd, =0.1.24-alpha-20230403140649-57714f1dd, =0.15.24-alpha-20230403140649-57714f1dd, =2.0.0-beta.0, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =1.6.0-alpha.9, =1.4.1, =1.4.4 Source cves: CVE-2026-27903...
@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8), @manniwatch/client-desktop (>=0.30.0, <=0.30.1) +3 more potentially affected by CVE-2026-27738 +1 more via @angular/ssr (>=19.0.5, <=19.2.19)
@angular/ssr NPM version =19.0.5, =1.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2026-27738, CVE-2026-33397 Source advisory: OSV:GHSA-XH43-G2FQ-WJRJ...
@atomicservice/ascf-toolkit (>=1.0.0, <=1.0.17), @atomicservice/ascf-toolkit-hvigor-plugin (>=1.0.1-beta.1, <=1.0.17) +77 more potentially affected by CVE-2026-4602 via jsrsasign (>=11.0.0, <=11.1.0)
jsrsasign NPM version =11.0.0, =1.0.0, =1.0.1-beta.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 - @citrineos/ocpi-charging-profiles 2.0.1 - @citrineos/ocpi-commands 2.0.1 - @citrineos/ocpi-credentials 2.0.1 - @citrineos/ocpi-locations 2.0.1 -...
@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27193 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)
@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27193 Source advisory: OSV:GHSA-9M9C-VPV5-9G85...
@firedesktop/react-portal-base (2.1.2), @imaginario27/air-ui-utils (>=1.0.8, <=1.0.9) +5 more potentially affected by CVE-2026-25940 via jspdf (>=4.0.0, <=4.1.0)
jspdf NPM version =4.0.0, =1.0.8, =1.4.0-I18n-QM, =0.5.129, =0.111.0-7, =4.4.0, =4.4.1 - svgedit 7.4.1 Source cves: CVE-2026-25940 Source advisory: SNYK:JS-JSPDF-15322684...
@amsterdamdatalabs/adl-agent-control (>=0.1.4, <=0.1.12), @amsterdamdatalabs/adl-agent-control-darwin-arm64 (>=0.1.4, <=0.1.12) +55 more potentially affected by CVE-2026-27122 via svelte (>=5.0.0, <=5.51.2)
svelte NPM version =5.0.0, =0.1.4, =0.1.4, =0.1.4, =0.3.6, =0.6.6, =4.0.0-alpha.1, =4.0.0-alpha.1, =0.1.0, =0.0.1, =1.3.0, =0.1.4, =0.0.20, =0.15.0-beta.2, =0.15.1 and more Source cves: CVE-2026-27122 Source advisory: OSV:GHSA-M56Q-VW4C-C2CP...
@0x590fab/sdcor2 (>=4.2.1, <=4.4.0), @cenk1cenk2/renovate-config (>=2.2.33, <=2.3.94) +22 more potentially affected by CVE-2026-26996 via minimatch (>=6.0.0, <=6.2.0)
minimatch NPM version =6.0.0, =4.2.1, =2.2.33, =0.2.6-alpha-20230114225627-66f5d9eac, =0.1.7-alpha-20230114225627-66f5d9eac, =0.15.7-alpha-20230114225627-66f5d9eac, =0.1.0, =3.108.8--canary.1.4727068200.0, =0.0.0, =1.12.0, =1.0.0-beta.13, =0.36.6-0, =0.36.6-0, =0.39.3-0 - editorconfig 1.0.2 and...
@0x590fab/sdcor2 (>=4.2.1, <=4.4.0), @cenk1cenk2/renovate-config (>=2.2.33, <=2.3.94) +22 more potentially affected by CVE-2026-26996 via minimatch (>=6.0.0, <=6.2.0)
minimatch NPM version =6.0.0, =4.2.1, =2.2.33, =0.2.6-alpha-20230114225627-66f5d9eac, =0.1.7-alpha-20230114225627-66f5d9eac, =0.15.7-alpha-20230114225627-66f5d9eac, =0.1.0, =3.108.8--canary.1.4727068200.0, =0.0.0, =1.12.0, =1.0.0-beta.13, =0.36.6-0, =0.36.6-0, =0.39.3-0 - editorconfig 1.0.2 and...
02strich-markdown (>=1.0.0, <=1.0.2), @0xintuition/slang-cli (>=0.0.1-b, <=0.0.8) +1943 more potentially affected by CVE-2026-26996 via minimatch (>=4.1.1, <=4.2.3)
minimatch NPM version =4.1.1, =1.0.0, =0.0.1-b, =0.5.2, =5.0.2, =2.2.0, =1.1.4, =1.3.1, =1.0.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =1.1.8, =1.0.0, =1.5.0 and more Source cves: CVE-2026-26996 Source advisory:...
@graphql-mesh/plugin-rate-limit (>=0.2.23-alpha-20230403140649-57714f1dd, <=1.0.0), @graphql-mesh/plugin-snapshot (>=0.1.24-alpha-20230403140649-57714f1dd, <=1.0.0) +13 more potentially affected by CVE-2026-26996 via minimatch (>=8.0.2, <=8.0.4)
minimatch NPM version =8.0.2, =0.2.23-alpha-20230403140649-57714f1dd, =0.1.24-alpha-20230403140649-57714f1dd, =0.15.24-alpha-20230403140649-57714f1dd, =2.0.0-beta.0, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =1.6.0-alpha.9, =1.4.1, =1.4.4 Source cves: CVE-2026-26996...
10up-toolkit (>=6.0.0-next.0, <=7.0.0), @0ti.me/ts-test-deps (0.2.0) +6553 more potentially affected by CVE-2026-26996 via minimatch (>=9.0.0, <=9.0.5)
minimatch NPM version =9.0.0, =6.0.0-next.0, =1.1.0-pre.1, =1.4.0, =9.1.0, =1.17.3-testing-284.48.0, =1.0.0, =1.1.6, =0.0.0-alpha.1011313d2aaf, =1.1.3, =1.0.6, =1.0.25 and more Source cves: CVE-2026-26996 Source advisory: OSV:GHSA-3PPC-4F35-3M26...
figma-tree (>=0.0.1, <=0.0.11) potentially affected by CVE-2026-2544 via lu2 (2023.9.15)
lu2 NPM version 2023.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on lu2 and may be impacted: - figma-tree =0.0.1, =0.0.11 Source cves: CVE-2026-2544 Source advisory: SNYK:JS-LU2-15285654...
1k-utils (>=2.1.0, <=2.2.3), 20190403-utils (1.0.0) +13354 more potentially affected by CVE-2026-2391 +1 more via qs (>=6.7.0, <=6.14.1)
qs NPM version =6.7.0, =2.1.0, =2.0.0, =1.0.0, =0.0.28, =1.0.8, =4.11.0, =2.0.1, =0.0.1, =3.10.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-2391, CVE-2026-82562 Source advisory: OSV:GHSA-W7FW-MJWX-W883...
modern-web-swiss-army-knife (>=2.7.0, <=2.7.2) potentially affected by CVE-2025-56647 via @farmfe/core (1.6.6)
@farmfe/core NPM version 1.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on @farmfe/core and may be impacted: - modern-web-swiss-army-knife =2.7.0, =2.7.2 Source cves: CVE-2025-56647 Source advisory: SNYK:JS-FARMFECORE-15282805...
@cognigy/cognigy-cli (>=1.9.7, <=2.1.0), @forestadmin/agent (>=1.71.0, <=1.72.9) +15 more potentially affected by CVE-2026-26019 via @langchain/community (>=1.0.0, <=1.1.12)
@langchain/community NPM version =1.0.0, =1.9.7, =1.71.0, =1.1.0, =1.12.76, =0.0.1, =0.2.0, =0.0.16, =1.4.13, =1.0.24, =1.0.0, =3.1.0, =0.3.0, =0.0.210, =0.0.259 and more Source cves: CVE-2026-26019 Source advisory: SNYK:JS-LANGCHAINCOMMUNITY-15268428...
003-gas-convert (1.0.1), 01-local-payment-flow (1.0.0) +13507 more potentially affected by CVE-2026-2739 via bn.js (>=4.5.2, <=4.12.0)
bn.js NPM version =4.5.2, =1.0.0-3, =0.0.3, =0.0.3, =0.0.11, =1.1.0, =1.1.1 and more Source cves: CVE-2026-2739 Source advisory: SNYK:JS-BNJS-15274301...
@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @machina.at/cli (>=19.24.1, <=19.43.0) +20 more potentially affected by CVE-2026-25724 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.76)
@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =1.9.1, =1.9.1, =1.9.6 and more Source cves: CVE-2026-25724 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-15248353...
a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.8.16, <=0.10.15) +9131 more potentially affected by CVE-2026-25727 via time (>=0.3.7, <=0.3.29)
time CARGO version =0.3.7, =0.1.0, =0.8.16, =0.3.2, =1.0.3, =0.1.0, =0.11.2, =0.2.0-beta.4, =0.15.1, =0.1.0, =0.0.0, =0.1.0, =0.0.1, =1.0.0, =1.1.1 and more Source cves: CVE-2026-25727 Source advisory: OSV:RUSTSEC-2026-0009...
@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1) +77 more potentially affected by CVE-2026-25631 via n8n-workflow (>=1.0.0, <=1.117.1)
n8n-workflow NPM version =1.0.0, =0.2.0, =0.1.5, =0.0.17, =1.0.2, =1.0.1, =0.2.0, =0.19.0, =0.4.0, =0.11.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1, =1.56.2 and more Source cves: CVE-2026-25631 Source advisory: SNYK:JS-N8NWORKFLOW-15225355...
@akanjs/config (>=0.0.4, <=0.0.16), @akanjs/nest (>=0.0.4, <=0.0.16) +95 more potentially affected by CVE-2026-23897 via @apollo/server (>=4.2.0, <=4.12.2-alpha.0)
@apollo/server NPM version =4.2.0, =0.0.4, =0.0.4, =0.0.4, =1.1.1, =4.2.0, =0.0.1, =2.0.8, =0.2.0, =0.0.2, =3.0.0-alpha.0, =3.0.0-alpha.0, =3.8.8, =1.93.0, =1.216.0 and more Source cves: CVE-2026-23897 Source advisory: SNYK:JS-APOLLOSERVER-15208673...
@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.0.0-broken, <=1.58.3) +15 more potentially affected by CVE-2026-24887 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.69)
@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.0.0-broken, =0.0.1-rc.1, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =1.2.1 and more Source cves: CVE-2026-24887 Source advisory: OSV:GHSA-QGQW-H4XQ-7W8W...
@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2026-24052 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)
@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2026-24052 Source advisory: OSV:GHSA-VHW5-3G5M-8GGF...
@backstage/plugin-techdocs-backend (>=0.0.0-nightly-20260123025240, <=0.0.0-nightly-20260126030220), @techdocs/cli (>=0.0.0-nightly-20260123025240, <=0.0.0-nightly-20260126030220) potentially affected by CVE-2026-25153 via @backstage/plugin-techdocs-node (1.14.0)
@backstage/plugin-techdocs-node NPM version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-techdocs-node and may be impacted: - @backstage/plugin-techdocs-backend =0.0.0-nightly-20260123025240, =0.0.0-nightly-20260123025240,...
@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2026-23864 via react-server-dom-webpack (>=19.0.0, <=19.0.1)
react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...
browserstack-cypress-cli (>=1.14.1, <=1.36.3) potentially affected by CVE-2025-57283 via browserstack-local (>=1.5.1, <=1.5.4)
browserstack-local NPM version =1.5.1, =1.14.1, =1.36.3 Source cves: CVE-2025-57283 Source advisory: SNYK:JS-BROWSERSTACKLOCAL-15149317...
@agentforce/adk (>=0.9.0, <=0.12.1), @agentkit-ai/bff-hono (1.0.0) +356 more potentially affected by CVE-2026-24472 via hono (>=4.0.0, <=4.11.6)
hono NPM version =4.0.0, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.8.0 and more Source cves: CVE-2026-24472 Source advisory: SNYK:JS-HONO-15123484...
@kyuda/n8n-nodes-databricks (>=2.0.0, <=2.0.6), @kyuda/n8n-nodes-databricks-simplified (1.0.0) +14 more potentially affected by CVE-2026-1470 via n8n-workflow (>=2.0.0, <=2.4.2)
n8n-workflow NPM version =2.0.0, =2.0.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.4.2 - n8n-nodes-cheerio-html-parser 0.5.9 and more Source cves: CVE-2026-1470 Source advisory:...
com.github.liuyueyi.media:svg-core (>=2.5, <=3.0.0) potentially affected by CVE-2026-24807 via com.github.liuyueyi.media:batik-codec-fix (>=2.5, <=3.0.0)
com.github.liuyueyi.media:batik-codec-fix MAVEN version =2.5, =2.5, =3.0.0 Source cves: CVE-2026-24807 Source advisory: SNYK:JAVA-COMGITHUBLIUYUEYIMEDIA-15127915...
9remote (>=0.1.0, <=0.1.8), @alecpapierniak/mcp-manager (>=0.1.0, <=0.1.2) +105 more potentially affected by CVE-2025-59471 +1 more via next (>=16.1.1, <=16.1.4)
next NPM version =16.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =1.0.8, =0.3.0, =0.0.0-canary-20260113162409, =1.53.0 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15105315...
@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +12 more potentially affected by CVE-2026-24056 via pnpm (>=10.0.0, <=10.18.3)
pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =2.7.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-24056 Source advisory: OSV:GHSA-M733-5W8F-5GGW...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +280 more potentially affected by CVE-2026-22709 via vm2 (>=3.0.0, <=3.10.1)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +280 more potentially affected by CVE-2026-22709 via vm2 (>=3.0.0, <=3.10.1)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
@accounter/server (>=0.0.0, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @aligent/auth-module (1.0.1) +1 more potentially affected by CVE-2026-23735 via graphql-modules (>=2.3.0, <=2.4.0)
graphql-modules NPM version =2.3.0, =0.0.0, =1.0.7, =1.0.9 Source cves: CVE-2026-23735 Source advisory: OSV:GHSA-53WG-R69P-V3R7...
@cenk1cenk2/renovate-config (>=2.0.0, <=2.3.148), @jamietanna/patch-testing (>=0.1.0, <=0.2.28) +9 more potentially affected by CVE-2026-76232 via renovate (>=31.97.3, <=40.21.2)
renovate NPM version =31.97.3, =2.0.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.2.0, =1.1.130, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config 1.0.3 Source cves: CVE-2026-76232 Source advisory: OSV:GHSA-3F44-XW83-3PMG...
@cenk1cenk2/renovate-config (>=2.0.0, <=2.3.148), @jamietanna/patch-testing (>=0.1.0, <=0.2.28) +8 more potentially affected by CVE-2026-76231 via renovate (>=32.241.11, <=40.21.2)
renovate NPM version =32.241.11, =2.0.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.2.0, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config 1.0.3 Source cves: CVE-2026-76231 Source advisory: OSV:GHSA-36J9-MX87-2CFF...
@cenk1cenk2/renovate-config (>=2.0.0, <=2.3.148), @jamietanna/patch-testing (>=0.1.0, <=0.2.28) +8 more potentially affected by unknown CVE via renovate (>=32.241.11, <=42.66.1)
renovate NPM version =32.241.11, =2.0.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.2.0, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config 1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-RENOVATE-14927386...
@haxtheweb/create (>=11.0.3, <=25.0.0), @haxtheweb/open-apis (11.0.3) potentially affected by CVE-2026-22704 via @haxtheweb/haxcms-nodejs (11.0.15)
@haxtheweb/haxcms-nodejs NPM version 11.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on @haxtheweb/haxcms-nodejs and may be impacted: - @haxtheweb/create =11.0.3, =25.0.0 - @haxtheweb/open-apis 11.0.3 Source cves: CVE-2026-22704 Source advisory:...
@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1) +77 more potentially affected by CVE-2026-21877 via n8n-workflow (>=1.0.0, <=1.118.1)
n8n-workflow NPM version =1.0.0, =0.2.0, =0.1.5, =0.0.17, =1.0.2, =1.0.1, =0.2.0, =0.19.0, =0.4.0, =0.11.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1, =1.57.1 and more Source cves: CVE-2026-21877 Source advisory: SNYK:JS-N8NWORKFLOW-14894273...
careful (>=0.1.0, <=0.2.0), dxh-test-package (1.1.2) +7 more potentially affected by CVE-2025-15095 via httpbin (0.10.4)
httpbin PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on httpbin and may be impacted: - careful =0.1.0, =0.1.4, =0.1.6, =0.3.2, =0.0.1, =0.7.1, =2.2.1, =2.7.5 Source cves: CVE-2025-15095 Source advisory: SNYK:PYTHON-HTTPBIN-14723357...
@071yoon/log-console-core (0.1.0), @3bitmt/3bit-sidebar-dashboard (1.2.0) +149 more potentially affected by CVE-2025-55183 +1 more via next (>=16.0.0, <=16.0.8)
next NPM version =16.0.0, =1.0.0, =0.3.128, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =1.0.4186, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.19 and more Source cves: CVE-2025-55183, CVE-2025-55184 Source advisory: SNYK:JS-NEXT-14400636...