@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +453 more potentially affected by CVE-2018-20676 via bootstrap (>=3.1.1, <=3.3.7)

bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-20676 Source advisory: OSV:GHSA-3MGP-FX93-9XV5...

@angular/bazel (>=5.0.0-beta.5, <=7.0.0), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +123 more potentially affected by CVE-2018-3738 via protobufjs (>=5.0.0, <=5.0.2)

protobufjs NPM version =5.0.0, =5.0.0-beta.5, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =0.2.2-20180615211533, =0.2.4-20180621213746, =0.1.0-20180815155955, =0.0.6, =1.2.1, =1.0.2, =5.0.1, =1.3.1, =0.0.7, =1.3.0, =0.0.1, =0.0.1, =0.0.12 and more Source cves: CVE-2018-3738 Source...

@alyzenpublic/craco (>=3.2.3-dev, <=3.2.3-dev2), @amory/core (>=2018.8.29-1, <=2018.8.31-0) +153 more potentially affected by CVE-2018-16487 +1 more via lodash.mergewith (>=4.0.3, <=4.6.1)

lodash.mergewith NPM version =4.0.3, =3.2.3-dev, =2018.8.29-1, =2018.8.29-0, =2018.8.31-0, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =1.0.0, =1.10.0, =1.10.1, =1.0.0, =1.0.0, =1.0.0, =5.0.0, =5.2.8, =6.2.0 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source...

@drubin/garden-cli (>=0.8.0-rc10, <=0.8.0-rc8), eysi-garden-test (>=0.8.1-ci-test, <=0.8.1-ci-test-3) +5 more potentially affected by CVE-2018-3784 via cryo (>=0.0.5, <=0.0.6)

cryo NPM version =0.0.5, =0.8.0-rc10, =0.8.1-ci-test, =0.0.1, =0.1.0-alpha.0e685d62, =0.1.1, =0.1.2 Source cves: CVE-2018-3784 Source advisory: OSV:GHSA-38F5-GHC2-FCMV...

@jamie452/open-graph-scraper (2.3.2), bind-rest (>=1.4.0, <=1.4.6) +2 more potentially affected by CVE-2017-16098 via charset (1.0.0)

charset NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on charset and may be impacted: - @jamie452/open-graph-scraper 2.3.2 - bind-rest =1.4.0, =2.2.2, =2.5.4 - request-url-open-graph 1.1.2 Source cves: CVE-2017-16098 Source advisory:...

apeman-app-mqtt (>=1.0.0, <=2.0.1), apeman-proto-mqtt (>=1.0.0, <=2.0.0) +20 more potentially affected by CVE-2017-16224 via st (1.1.0)

st NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on st and may be impacted: - apeman-app-mqtt =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.0.0, =0.0.1, =1.0.0-pre1, =1.0.2, =0.0.8, =0.2.1 - mqtter 0.3.1 and more Source cves: CVE-2017-16224 Sourc...

@yihangho/express-admin (1.3.2-2), analyst (>=0.0.3, <=0.0.8) +58 more potentially affected by CVE-2017-16082 via pg (>=2.0.0, <=2.11.1)

pg NPM version =2.0.0, =0.0.3, =0.1.0, =0.0.1, =0.0.62, =0.0.1, =0.0.1, =1.0.1, =0.0.1, =0.1.0, =0.0.1, =0.0.3 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@folk-org/js-dav (>=1.0.0, <=1.0.3), @lettercms/models (>=0.0.1, <=0.0.12) +187 more potentially affected by CVE-2017-16082 via pg (>=4.0.0, <=4.5.6)

pg NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.15 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@arpinum/postgres (>=4.0.0-beta12, <=4.0.0-beta14), appointmed-epr-template-common (>=0.0.46, <=0.0.65) +9 more potentially affected by CVE-2017-16082 via pg (>=6.2.2, <=6.2.3)

pg NPM version =6.2.2, =4.0.0-beta12, =0.0.46, =0.0.35, =0.13.3, =0.0.1, =0.0.1, =1.0.0, =1.0.3 - pg-promise-strict 0.3.4 - pgo 0.2.1 Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@starboard/models (>=2.0.0, <=3.0.1), @starboard/shared-backend (3.0.0) +24 more potentially affected by CVE-2017-16082 via pg (>=6.0.0, <=6.0.4)

pg NPM version =6.0.0, =2.0.0, =0.6.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =2.0.2, =1.3.1, =0.0.4, =0.1.0, =0.2.0, =0.6.0 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

acidjs (>=0.0.2, <=1.0.1), acl-knex (>=0.1.2, <=0.1.3) +41 more potentially affected by CVE-2017-16082 via pg (>=3.0.3, <=3.6.3)

pg NPM version =3.0.3, =0.0.2, =0.1.2, =0.0.1, =0.0.2, =0.1.0, =0.0.4, =0.3.0, =0.0.11, =0.0.12, =0.1.2, =0.0.2, =0.0.1, =0.0.64 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@accoio/react-pdf-highlighter (>=2.0.0, <=2.0.1), @activelylearn/react-pdf (>=2.5.0, <=2.5.2) +118 more potentially affected by CVE-2018-5158 via pdfjs-dist (>=2.0.104, <=2.0.550)

pdfjs-dist NPM version =2.0.104, =2.0.0, =2.5.0, =1.0.32, =1.2.0, =1.0.9, =15.0.0, =6.0.0, =39.0.0, =7.0.0, =110.0.0, =7.0.0, =6.0.0, =3.0.6, =8.0.0, =9.0.0, =9.11.13 and more Source cves: CVE-2018-5158 Source advisory: SNYK:JS-PDFJSDIST-469200...

mercenary-core (>=2.19.0, <=2.40.1) potentially affected by CVE-2018-1000160 via @risingstack/protect (>=1.0.0, <=1.1.0)

@risingstack/protect NPM version =1.0.0, =2.19.0, =2.40.1 Source cves: CVE-2018-1000160 Source advisory: OSV:GHSA-VPCH-RXW3-FGX8...

@anjuna/charts (>=1.0.0-preview.45, <=1.0.0-preview.47), @badgeup/badgeup-browser-client (>=0.3.0, <=3.0.0) +186 more potentially affected by CVE-2018-3721 via lodash.defaultsdeep (>=4.3.2, <=4.6.0)

lodash.defaultsdeep NPM version =4.3.2, =1.0.0-preview.45, =0.3.0, =0.1.0, =0.3.0, =6.0.2, =1.0.0-rc.1, =1.2.0, =1.0.0, =0.9.16, =0.0.1, =0.275.1-chore-update-deps.3894.0, =0.18.2-alpha.1, =3.0.0, =6.8.1, =7.1.11 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHDEFAULTSDEEP-4501...

@blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1), @blackbaud/skyux-builder (>=1.10.1, <=1.31.0) +72 more potentially affected by CVE-2018-3721 via lodash.mergewith (>=4.0.3, <=4.6.0)

lodash.mergewith NPM version =4.0.3, =1.10.0, =1.10.1, =5.0.0, =5.2.8, =5.0.0, =5.0.0, =5.1.1, =1.3.0, =1.0.0-alpha.1, =1.0.4, =1.1.3, =1.0.0-alpha.4, =1.1.11, =1.0.3, =1.0.0-alpha.3, =1.0.0 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHMERGEWITH-174137...

@awearsolutions/node-red (>=0.17.5, <=0.17.6-rc.1), @device-management/device-base (>=0.0.1, <=0.1.0) +71 more potentially affected by CVE-2017-10910 via mqtt (>=2.0.1, <=2.14.0)

mqtt NPM version =2.0.1, =0.17.5, =0.0.1, =1.0.0, =1.0.0, =4.0.0-beta.15, =1.0.76, =1.0.2, =0.1.1, =0.0.5, =1.0.0, =0.4.1, =2.0.0, =2.0.3, =2.0.4 and more Source cves: CVE-2017-10910 Source advisory: OSV:GHSA-H9MJ-FGHC-664W...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +2064 more potentially affected by CVE-2026-63670 via sanitize-html (>=2.1.0, <=2.17.5)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =5.0.2, =0.0.1, =1.0.0, =3.0.0, =1.3.0, =1.0.0, =1.38.0, =1.3.2, =1.7.1 and more Source cves: CVE-2026-63670 Source advisory: OSV:GHSA-JXWJ-J7WR-GFRW...

@crashtest-ai/cli (>=0.1.0, <=0.1.1), @crashtest-ai/report-viewer (>=0.1.0, <=0.1.1) +21 more potentially affected by CVE-2026-75899 via fast-uri (>=3.1.2, <=3.1.5)

fast-uri NPM version =3.1.2, =0.1.0, =0.1.0, =0.1.0, =1.5.40, =1.4.2, =1.2.0, =1.4.18, =0.2.0-alpha.5, =0.1.0, =0.1.6, =0.16.2-cloud-1, =1.25.0, =0.1.5, =0.1.3, =0.4.0 and more Source cves: CVE-2026-75899 Source advisory: OSV:GHSA-FPH4-WMHF-6FWF...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83610 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83610 Source advisory: OSV:GHSA-6GMQ-8VP8-GCM6...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11363 more potentially affected by CVE-2026-83610 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.0.9 and more Source cves: CVE-2026-83610 Source advisory: OSV:GHSA-6GMQ-8VP8-GCM6...

7pmlabs-design-system (>=0.5.0, <=0.5.15), @10planet/deva-sdk (>=0.7.0, <=0.7.2) +2855 more potentially affected by unknown CVE via @tiptap/core (>=2.0.0, <=3.30.3)

@tiptap/core NPM version =2.0.0, =0.5.0, =0.7.0, =0.1.2, =0.2.0, =1.0.0, =1.2.1, =0.1.0, =2.2.0-rc.7, =1.0.0, =1.0.0, =1.0.0, =2.12.2, =3.0.3, =4.0.5 - @.aayush./novelsh 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CP6Q-959Q-F8RH...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21438 more potentially affected by CVE-2026-84375 via js-yaml (>=3.0.0, <=3.15.1)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-84375 Source advisory: SNYK:JS-JSYAML-19496768...

@3ngram/server (>=1.2.6, <=1.6.1), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +889 more potentially affected by CVE-2026-39408 +1 more via hono (>=4.0.0, <=4.13.4)

hono NPM version =4.0.0, =1.2.6, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.5 and more Source cves: CVE-2026-39408, CVE-2026-84365 Source advisory: SNYK:JS-HONO-19499068...

@343dev/optimizt (>=12.0.0, <=13.0.0), @agilebot/vitepress-preset (>=0.8.9, <=0.9.6) +79 more potentially affected by CVE-2026-84370 via svgo (>=4.0.0, <=4.0.2)

svgo NPM version =4.0.0, =12.0.0, =0.8.9, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =2.47.0, =1.3.0-next.0, =3.0.0-next.0, =6.13.0, =0.0.1769658265953, =21.2.6, =1.6.9, =0.1.0-dev.00e4942, =0.3.0 and more Source cves: CVE-2026-84370 Source advisory: SNYK:JS-SVGO-19498539...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +246 more potentially affected by CVE-2026-84370 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-84370 Source advisory: SNYK:JS-SVGO-19498539...

@343dev/optimizt (>=12.0.0, <=13.0.0), @agilebot/vitepress-preset (>=0.8.9, <=0.9.6) +79 more potentially affected by CVE-2026-84369 via svgo (>=4.0.0, <=4.0.2)

svgo NPM version =4.0.0, =12.0.0, =0.8.9, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =2.47.0, =1.3.0-next.0, =3.0.0-next.0, =6.13.0, =0.0.1769658265953, =21.2.6, =1.6.9, =0.1.0-dev.00e4942, =0.3.0 and more Source cves: CVE-2026-84369 Source advisory: SNYK:JS-SVGO-19498536...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +246 more potentially affected by CVE-2026-84369 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-84369 Source advisory: SNYK:JS-SVGO-19498536...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5837 more potentially affected by CVE-2026-73086 via nanoid (>=4.0.0, <=5.1.9)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-73086 Source advisory: OSV:GHSA-XWG4-73V4-XW9W...

@forgeax/game (>=0.3.0, <=0.3.4), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +7 more potentially affected by unknown CVE via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.2.4, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: unknown CVE Source advisory: OSV:GHSA-VX52-2968-3VC6...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83608 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83608 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498556...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4328 more potentially affected by CVE-2026-83610 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83610 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499074...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4328 more potentially affected by CVE-2026-83613 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83613 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499072...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83613 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83613 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499072...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83615 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83615 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499069...

@142vip/egg (>=0.0.1-alpha.5, <=0.0.1-alpha.6), @142vip/egg-grpc-client (0.0.1-alpha.4) +496 more potentially affected by unknown CVE via mysql2 (>=3.0.0, <=3.21.1)

mysql2 NPM version =3.0.0, =0.0.1-alpha.5, =0.0.1-alpha.4, =0.0.1-alpha.1, =4.2.3, =15.0.0, =0.2.0, =1.0.0, =0.0.27, =1.0.43, =0.1.0, =0.3.1, =0.9.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3F6P-5WW8-9RCR...

@pnpm/building.commands (>=1100.0.0, <=1100.1.8), @pnpm/deps.compliance.commands (>=1100.0.0, <=1101.5.1) +10 more potentially affected by CVE-2026-82393 via @pnpm/installing.deps-resolver (>=1100.0.0, <=1100.2.6)

@pnpm/installing.deps-resolver NPM version =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =0.0.1, =0.0.21 Source cves: CVE-2026-82393 Source advisory: SNYK:JS-PNPMINSTALLINGDEPSRESOLVER-19477039...

@pnpm/building.commands (>=1100.0.0, <=1100.1.7), @pnpm/deps.compliance.commands (>=1100.0.0, <=1101.5.0) +10 more potentially affected by CVE-2026-82392 via @pnpm/deps.graph-builder (>=1100.0.0, <=1100.0.18)

@pnpm/deps.graph-builder NPM version =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =0.0.1, =0.0.21 Source cves: CVE-2026-82392 Source advisory: SNYK:JS-PNPMDEPSGRAPHBUILDER-19477021...

@meow-meow-dev/server-utilities (>=1.0.1, <=3.5.2), @nile-squad/nile (>=1.2.0, <=1.4.11) +2 more potentially affected by CVE-2026-81888 via @hono/oauth-providers (>=0.6.2, <=0.8.5)

@hono/oauth-providers NPM version =0.6.2, =1.0.1, =1.2.0, =0.1.0, =0.1.1, =0.8.3 Source cves: CVE-2026-81888 Source advisory: OSV:GHSA-FM3F-CH8H-QW8Q...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55854 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-55854 Source advisory: OSV:GHSA-42R5-VHPQ-M858...

@alancode95/core-prisma (1.0.0), @aliceo2/infologger (>=1.15.0, <=1.15.1) +39 more potentially affected by CVE-2026-55854 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =1.0.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =1.0.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =1.2.1, =2.1.0, =0.61.0, =0.93.0, =0.112.0 and more Source cves: CVE-2026-55854 Source advisory: OSV:GHSA-42R5-VHPQ-M858...

@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.155) +62 more potentially affected by CVE-2026-55854 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

@aliceo2/infologger (>=1.16.0, <=1.18.0) potentially affected by CVE-2026-55854 via mariadb (3.5.2)

mariadb NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on mariadb and may be impacted: - @aliceo2/infologger =1.16.0, =1.18.0 Source cves: CVE-2026-55854 Source advisory: OSV:GHSA-42R5-VHPQ-M858...

@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.155) +62 more potentially affected by CVE-2026-55215 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

@aliceo2/infologger (>=1.16.0, <=1.18.0) potentially affected by CVE-2026-55215 via mariadb (3.5.2)

mariadb NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on mariadb and may be impacted: - @aliceo2/infologger =1.16.0, =1.18.0 Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +1030 more potentially affected by CVE-2026-75604 via next (>=16.0.0, <=16.3.2)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-75604 Source advisory:...

@adobe/probot-serverless-openwhisk (>=4.0.24, <=4.0.55), @csnext/cs-layer-server (>=0.0.101-beta.22, <=0.0.132-beta.207) +248 more potentially affected by CVE-2026-16231 via hbs (>=2.1.0, <=4.2.1)

hbs NPM version =2.1.0, =4.0.24, =0.0.101-beta.22, =0.7.0, =0.7.0, =0.7.0, =1.0.0, =0.19.0, =2.0.1, =0.1.5, =1.0.36, =0.9.0, =0.0.1-alpha.0, =0.1.2, =0.1.2, =0.3.2 and more Source cves: CVE-2026-16231 Source advisory: SNYK:JS-HBS-19256914...

abraham3k (>=1.3.8, <=1.5.3), accutuning-helpers (>=1.0.32, <=1.0.33) +75 more potentially affected by CVE-2026-76843 via flair (>=0.4.5, <=0.15.1)

flair PYPI version =0.4.5, =1.3.8, =1.0.32, =0.0.1, =0.1.0, =0.0.6, =0.1.20, =0.1.0, =0.1.0, =0.0.1.1, =0.2.4, =0.1.1, =0.0.1rc2, =0.0.1rc3488056308109 and more Source cves: CVE-2026-76843 Source advisory: SNYK:PYTHON-FLAIR-19256938...

@crashtest-ai/cli (>=0.1.0, <=0.1.1), @crashtest-ai/report-viewer (>=0.1.0, <=0.1.1) +20 more potentially affected by CVE-2026-75931 via fast-uri (>=3.1.4, <=3.1.5)

fast-uri NPM version =3.1.4, =0.1.0, =0.1.0, =0.1.0, =1.5.40, =1.4.2, =1.2.0, =1.4.18, =0.2.0-alpha.5, =0.1.0, =0.1.6, =0.16.2-cloud-1, =0.1.5, =0.1.3, =3.38.11, =3.38.21 and more Source cves: CVE-2026-75931 Source advisory: SNYK:JS-FASTURI-19256867...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @crashtest-ai/cli (>=0.1.0, <=0.1.1) +27 more potentially affected by CVE-2026-75975 via fast-uri (>=3.0.1, <=3.1.5)

fast-uri NPM version =3.0.1, =0.3.1, =0.1.0, =0.1.0, =0.1.0, =1.5.40, =1.4.2, =1.2.0, =1.4.18, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.0, =0.1.6, =0.2.5 and more Source cves: CVE-2026-75975 Source advisory: SNYK:JS-FASTURI-19256871...

a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.0.16, <=0.10.15) +13708 more potentially affected by unknown CVE via h2 (>=0.1.26, <=0.3.27)

h2 CARGO version =0.1.26, =0.1.0, =0.0.16, =0.2.0, =0.1.0, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0-beta.4, =0.2.0-beta.7 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0258...