10909 matches found
@forklaunch/core (>=0.19.0, <=1.2.2), @forklaunch/express (>=0.11.0, <=1.2.2) +15 more potentially affected by CVE-2026-34221 via @mikro-orm/core (>=7.0.0, <=7.0.5-dev.9)
@mikro-orm/core NPM version =7.0.0, =0.19.0, =0.11.0, =0.9.0, =0.6.0, =0.9.0, =0.9.0, =0.5.0, =0.5.0, =0.8.22, =0.8.22, =0.4.0, =0.1.0, =1.2.1 and more Source cves: CVE-2026-34221 Source advisory: OSV:GHSA-QPFV-44F3-QQX6...
@acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94), @acmekit/cli (>=2.13.1, <=2.13.94) +92 more potentially affected by CVE-2026-34221 via @mikro-orm/core (>=6.0.0, <=6.6.9-dev.6)
@mikro-orm/core NPM version =6.0.0, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =0.1.29, =0.1.29, =0.5.0, =0.6.8 and more Source cves: CVE-2026-34221 Source advisory: SNYK:JS-MIKROORMCORE-15917139...
@forklaunch/core (>=0.19.0, <=1.2.2), @forklaunch/express (>=0.11.0, <=1.2.2) +15 more potentially affected by CVE-2026-34220 via @mikro-orm/core (>=7.0.0, <=7.0.5-dev.9)
@mikro-orm/core NPM version =7.0.0, =0.19.0, =0.11.0, =0.9.0, =0.6.0, =0.9.0, =0.9.0, =0.5.0, =0.5.0, =0.8.22, =0.8.22, =0.4.0, =0.1.0, =1.2.1 and more Source cves: CVE-2026-34220 Source advisory: SNYK:JS-MIKROORMCORE-15916609...
@acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94), @acmekit/cli (>=2.13.1, <=2.13.94) +92 more potentially affected by CVE-2026-34220 via @mikro-orm/core (>=6.0.0, <=6.6.9-dev.6)
@mikro-orm/core NPM version =6.0.0, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =0.1.29, =0.1.29, =0.5.0, =0.6.8 and more Source cves: CVE-2026-34220 Source advisory: SNYK:JS-MIKROORMCORE-15916609...
@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by CVE-2026-73427 via trix (>=2.0.8, <=2.1.15)
trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: CVE-2026-73427 Source advisory: OSV:GHSA-53P3-C7VP-4MCC...
4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3664 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.7.8)
handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: unknown CVE Source advisory: SNYK:JS-HANDLEBARS-15813000...
@openinc/parse-server-opendash (>=4.0.0, <=4.0.10) potentially affected by CVE-2026-34215 via parse-server (>=9.6.0-alpha.37, <=9.6.1)
parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.10 Source cves: CVE-2026-34215 Source advisory: SNYK:JS-PARSESERVER-15812212...
@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34209 via mppx (>=0.1.1, <=0.4.9)
mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34209 Source advisory: OSV:GHSA-MV9J-8JVG-J8MR...
libcrux-aead (>=0.0.4-pre.1, <=0.0.7) potentially affected by unknown CVE via libcrux-chacha20poly1305 (>=0.0.4, <=0.0.7-rc.1)
libcrux-chacha20poly1305 CARGO version =0.0.4, =0.0.4-pre.1, =0.0.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0124...
@waigenie/mobile-mcp (0.0.16) potentially affected by CVE-2026-33989 via @mobilenext/mobile-mcp (0.0.12)
@mobilenext/mobile-mcp NPM version 0.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on @mobilenext/mobile-mcp and may be impacted: - @waigenie/mobile-mcp 0.0.16 Source cves: CVE-2026-33989 Source advisory: SNYK:JS-MOBILENEXTMOBILEMCP-15874414...
4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3664 more potentially affected by CVE-2026-33939 via handlebars (>=4.0.0, <=4.7.8)
handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33939 Source advisory: SNYK:JS-HANDLEBARS-15807042...
1dr-twig-templating (1.0.2), 433bf (0.0.1) +951 more potentially affected by CVE-2026-33994 via locutus (2.0.39)
locutus NPM version 2.0.39 is affected by a known vulnerability. The following packages have a transitive dependency on locutus and may be impacted: - 1dr-twig-templating 1.0.2 - 433bf 0.0.1 - @27works/posto 2.0.2 - @2gis/js-docs-generator =0.0.1, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.1.0, =1.0.0,...
1dr-twig-templating (1.0.2), 433bf (0.0.1) +951 more potentially affected by CVE-2026-25521 +1 more via locutus (2.0.39)
locutus NPM version 2.0.39 is affected by a known vulnerability. The following packages have a transitive dependency on locutus and may be impacted: - 1dr-twig-templating 1.0.2 - 433bf 0.0.1 - @27works/posto 2.0.2 - @2gis/js-docs-generator =0.0.1, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.1.0, =1.0.0,...
@dargmuesli/nuxt-vio (>=20.6.0, <=21.0.0-beta.11), @darraghor/nest-backend-libs (>=5.0.10, <=5.0.11) +51 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.3)
nodemailer NPM version =8.0.0, =20.6.0, =5.0.10, =0.0.1-beta.0, =0.2.0-alpha.1, =6.0.0-beta.9, =11.14.0, =5.8.38, =2.9.4-beta.9766, =0.1.10, =1.11.4, =2.1.8, =0.0.0-experimental.09a2220201377abea1f719e6f8d201b10ae3f7af, =2.0.0, =3.2.11, =20260208.152.42, =20260327.0.55 and more Source cves: unkno...
07-calito-router (>=0.0.2, <=0.0.4), @adbl/cartridge (>=0.0.0, <=0.0.8) +253 more potentially affected by CVE-2026-33943 via happy-dom (>=15.10.2, <=20.8.7)
happy-dom NPM version =15.10.2, =0.0.2, =0.0.0, =0.1.1, =0.1.0, =18.0.11, =0.5.0, =0.4.2, =0.1.10, =0.3.0, =0.1.0-alpha.1, =0.1.0 - @chialab/sveltekit-utils 0.1.0-alpha.8 - @choiceform/design-js-tokens 0.1.0 - @codai/testing-utils 1.0.0 and more Source cves: CVE-2026-33943 Source advisory:...
4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3664 more potentially affected by CVE-2026-33916 via handlebars (>=4.0.0, <=4.7.8)
handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33916 Source advisory: SNYK:JS-HANDLEBARS-15789775...
org.webjars.npm:github-com-cisco-node-jose (2.2.0), org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6) +7 more potentially affected by CVE-2026-33896 via org.webjars.npm:node-forge (>=0.7.1, <=1.3.3)
org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =2.1.1 Source cves: CVE-2026-33896 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15789772...
org.webjars.npm:github-com-cisco-node-jose (2.2.0), org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6) +7 more potentially affected by CVE-2026-33895 via org.webjars.npm:node-forge (>=0.7.1, <=1.3.3)
org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =2.1.1 Source cves: CVE-2026-33895 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15789768...
org.webjars.npm:github-com-cisco-node-jose (2.2.0), org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6) +7 more potentially affected by CVE-2026-33894 via org.webjars.npm:node-forge (>=0.7.1, <=1.3.3)
org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =2.1.1 Source cves: CVE-2026-33894 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15789774...
2mxdev-gql-gateway (1.0.0), 4m-node-server (>=0.0.1, <=0.0.8) +3198 more potentially affected by unknown CVE via apollo-server-core (>=1.3.2, <=3.13.0)
apollo-server-core NPM version =1.3.2, =0.0.1, =1.0.2, =0.0.80, =3.10.1, =1.2.0-pre.24, =1.0.1, =1.0.0, =1.0.0, =0.5.0, =1.0.0, =0.1.3, =0.0.1, =0.1.1, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-APOLLOSERVERCORE-15790567...
@antora/cli (>=2.3.2, <=3.0.0-alpha.9), @antora/playbook-builder (>=2.3.2, <=3.0.0-alpha.9) +111 more potentially affected by CVE-2026-33864 via convict (>=6.0.0, <=6.2.4)
convict NPM version =6.0.0, =2.3.2, =2.3.2, =2.3.2, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2026-33864 Source advisory: OSV:GHSA-44FC-8FM5-Q62H...
@antora/cli (>=2.3.2, <=3.0.0-alpha.9), @antora/playbook-builder (>=2.3.2, <=3.0.0-alpha.9) +111 more potentially affected by CVE-2026-33863 via convict (>=6.0.0, <=6.2.4)
convict NPM version =6.0.0, =2.3.2, =2.3.2, =2.3.2, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2026-33863 Source advisory: OSV:GHSA-HF2R-9GF9-RWCH...
@100x/application (>=0.0.1, <=0.0.6), @abysslabs/cli (>=0.0.1, <=0.0.2) +251 more potentially affected by CVE-2026-33131 +1 more via srvx (>=0.1.4, <=0.11.12)
srvx NPM version =0.1.4, =0.0.1, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =2.4.0-alpha.2, =2.4.0-alpha.2, =0.3.7, =0.3.10 and more Source cves: CVE-2026-33131, CVE-2026-33732 Source advisory: SNYK:JS-SRVX-15790571...
io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent-lettuce-5.0 (0.14.0), io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent-lettuce-5.1 (0.14.0) +3 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent (0.14.0)
io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent.instrumentation:opentelemetry-javaagent and may be impacted: -...
@100x/application (>=0.0.1, <=0.0.6), @abysslabs/cli (>=0.0.1, <=0.0.2) +251 more potentially affected by CVE-2026-33732 via srvx (>=0.1.4, <=0.11.12)
srvx NPM version =0.1.4, =0.0.1, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =2.4.0-alpha.2, =2.4.0-alpha.2, =0.3.7, =0.3.10 and more Source cves: CVE-2026-33732 Source advisory: OSV:GHSA-P36Q-Q72M-GCHR...
@10xsai/cloudflare-router-nx-plugin (1.0.0), @4itech/schematics (>=11.7.1, <=11.7.6) +1098 more potentially affected by CVE-2026-33672 via picomatch (>=4.0.0, <=4.0.3)
picomatch NPM version =4.0.0, =11.7.1, =1.2.0, =8.3.0-rc.2, =1.0.25, =0.0.17, =0.0.47, =0.0.1, =1.0.0, =1.0.0, =10.0.0-alpha.1, =10.0.0-prerelease.90, =13.0.0-next.10, =10.0.0-prerelease.90, =14.0.0-next.1 and more Source cves: CVE-2026-33672 Source advisory: OSV:GHSA-3V7F-55P6-F55P...
lemmy_api (>=0.18.0-rc.4, <=0.18.0), lemmy_api_crud (>=0.18.0-rc.4, <=0.18.0) +3 more potentially affected by CVE-2026-33693 via activitypub_federation (0.4.7)
activitypubfederation CARGO version 0.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on activitypubfederation and may be impacted: - lemmyapi =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0 Source cves: CVE-2026-33693...
@0dotxyz/p0-ts-sdk (>=2.1.1, <=2.2.0-alpha.4), @0l00000l/auth (>=1.0.0, <=1.0.8) +2940 more potentially affected by CVE-2026-33532 via yaml (>=2.0.0, <=2.8.2)
yaml NPM version =2.0.0, =2.1.1, =1.0.0, =0.0.53, =0.0.31, =4.0.0, =4.2.0, =6.0.0, =0.0.3, =1.0.0, =7.0.0-beta.1, =0.1.0-alpha.1, =0.0.9, =2.0.0, =0.24.1-20230627140514, =0.25.1-20250326172337, =0.25.2 and more Source cves: CVE-2026-33532 Source advisory: SNYK:JS-YAML-15765520...
@aaquib/whatsasenanpm (1.3.5), @alexandersen01/sharepoint-mcp-server-better (0.3.23) +81 more potentially affected by CVE-2026-26832 via node-tesseract-ocr (2.2.1)
node-tesseract-ocr NPM version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on node-tesseract-ocr and may be impacted: - @aaquib/whatsasenanpm 1.3.5 - @alexandersen01/sharepoint-mcp-server-better 0.3.23 - @artdotstyle/filepix =1.0.10, =0.0.1,...
@aokyra/baileys (2.0.6), @arceos/baileys (>=10.0.0, <=10.0.4) +74 more potentially affected by unknown CVE via @shennmine/libsignal-node (0.0.1-security)
@shennmine/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @shennmine/libsignal-node and may be impacted: - @aokyra/baileys 2.0.6 - @arceos/baileys =10.0.0, =2.0.3, =1.0.0, =1.0.0, =1.0.3, =1.0.6, =3.2.4, =2.1....
@aokyra/baileys (2.0.6), @arceos/baileys (>=10.0.0, <=10.0.4) +74 more potentially affected by unknown CVE via @shennmine/libsignal-node (0.0.1-security)
@shennmine/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @shennmine/libsignal-node and may be impacted: - @aokyra/baileys 2.0.6 - @arceos/baileys =10.0.0, =2.0.3, =1.0.0, =1.0.0, =1.0.3, =1.0.6, =3.2.4, =2.1....
@amedia/brick-mcp (>=0.0.0-vBRAND-20260313141110, <=1.0.3), @andesite-lab/andesite-core (>=1.60.2, <=1.61.0) +338 more potentially affected by CVE-2026-3635 via fastify (>=5.0.0, <=5.8.2)
fastify NPM version =5.0.0, =0.0.0-vBRAND-20260313141110, =1.60.2, =2.0.1, =1.1.1, =0.6.2, =0.1.1, =0.1.1, =0.6.0, =0.1.1, =0.0.35, =0.0.82, =0.0.1, =0.0.6, =0.1.68, =0.1.130 and more Source cves: CVE-2026-3635 Source advisory: SNYK:JS-FASTIFY-15762220...
@atomicservice/ascf-toolkit (>=1.0.0, <=1.0.17), @atomicservice/ascf-toolkit-hvigor-plugin (>=1.0.1-beta.1, <=1.0.17) +77 more potentially affected by CVE-2026-4598 via jsrsasign (>=11.0.0, <=11.1.0)
jsrsasign NPM version =11.0.0, =1.0.0, =1.0.1-beta.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 - @citrineos/ocpi-charging-profiles 2.0.1 - @citrineos/ocpi-commands 2.0.1 - @citrineos/ocpi-credentials 2.0.1 - @citrineos/ocpi-locations 2.0.1 -...
@0x5e/react-native-alipay (>=0.2.2, <=0.2.7-beta.2), @10yun/cv-mobile-ui (0.3.20) +1789 more potentially affected by CVE-2026-4599 via jsrsasign (>=7.1.2, <=11.1.0)
jsrsasign NPM version =7.1.2, =0.2.2, =0.0.0-alpha.0, =0.7.6, =0.7.6, =0.0.83, =0.7.6, =0.7.6, =0.9.0, =0.7.6, =0.7.6, =0.7.6, =0.3.4, =0.3.4, =0.3.4, =0.8.0 and more Source cves: CVE-2026-4599 Source advisory: OSV:GHSA-5JX8-Q4CP-RHH6...
@adpush/start (>=1.87.14, <=1.87.16), @akkuma/vinxi (0.3.12) +213 more potentially affected by unknown CVE via h3 (>=1.0.1, <=1.15.6)
h3 NPM version =1.0.1, =1.87.14, =1.0.7, =1.0.0, =1.5.0, =1.0.0, =0.8.16-canary.v20250123185645, =8.3.3, =3.1.0, =0.0.11, =3.1.0-0, =3.2.0 - @enrypase/solidstart-endpoint 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-72GR-QFP7-VWHW...
@cesarechazu/directus-extension-generate-pdf (1.0.6) potentially affected by unknown CVE via @pdfme/common (5.5.8)
@pdfme/common NPM version 5.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on @pdfme/common and may be impacted: - @cesarechazu/directus-extension-generate-pdf 1.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-PGX6-7JCQ-2QFF...
@cesarechazu/directus-extension-generate-pdf (1.0.6) potentially affected by unknown CVE via @pdfme/common (5.5.8)
@pdfme/common NPM version 5.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on @pdfme/common and may be impacted: - @cesarechazu/directus-extension-generate-pdf 1.0.6 Source cves: unknown CVE Source advisory: SNYK:JS-PDFMECOMMON-15746945...
dicebear (>=9.0.0, <=9.4.1) potentially affected by CVE-2026-33418 via @dicebear/converter (>=9.0.0, <=9.4.1)
@dicebear/converter NPM version =9.0.0, =9.0.0, =9.4.1 Source cves: CVE-2026-33418 Source advisory: SNYK:JS-DICEBEARCONVERTER-15746952...
5-ifc-check-cli (1.0.0), 7ghost (>=4.11.2, <=4.11.46) +4219 more potentially affected by CVE-2026-33349 via fast-xml-parser (>=4.0.0, <=4.5.4)
fast-xml-parser NPM version =4.0.0, =4.11.2, =0.1.1, =0.0.2, =1.0.1, =1.0.0, =1.52.0, =0.0.1, =1.0.0, =0.0.1, =1.1.2 and more Source cves: CVE-2026-33349 Source advisory: OSV:GHSA-JP2Q-39XQ-3W4G...
@kids-reporter/cms-core (>=1.0.17, <=1.0.36), @kids-reporter/draft-editor (>=1.0.19, <=1.0.36) potentially affected by CVE-2026-33326 via @keystone-6/core (6.5.1)
@keystone-6/core NPM version 6.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @kids-reporter/cms-core =1.0.17, =1.0.19, =1.0.36 Source cves: CVE-2026-33326 Source advisory: OSV:GHSA-CGCG-Q9JH-5PR2...
dicebear (>=6.0.0-alpha.0, <=6.1.3) potentially affected by CVE-2026-33311 via @dicebear/core (>=6.0.0, <=6.1.3)
@dicebear/core NPM version =6.0.0, =6.0.0-alpha.0, =6.1.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
@dicebear/collection (>=8.0.0-rc.0, <=8.0.2), dicebear (>=8.0.0-rc.0, <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/initials (>=8.0.0, <=8.0.2)
@dicebear/initials NPM version =8.0.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
dicebear (>=7.0.0-rc.1, <=7.1.3) potentially affected by CVE-2026-33311 via @dicebear/core (>=7.0.0, <=7.1.3)
@dicebear/core NPM version =7.0.0, =7.0.0-rc.1, =7.1.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARCORE-15746954...
@dicebear/collection (>=6.0.0-alpha.0, <=6.1.3), dicebear (>=6.0.0-alpha.0, <=6.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=6.0.0, <=6.1.3)
@dicebear/initials NPM version =6.0.0, =6.0.0-alpha.0, =6.0.0-alpha.0, =6.1.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...
dicebear (>=8.0.0-rc.0, <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/core (>=8.0.0, <=8.0.2)
@dicebear/core NPM version =8.0.0, =8.0.0-rc.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
dicebear (>=8.0.0-rc.0, <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/core (>=8.0.0, <=8.0.2)
@dicebear/core NPM version =8.0.0, =8.0.0-rc.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARCORE-15746954...
dicebear (>=7.0.0-rc.1, <=7.1.3) potentially affected by CVE-2026-33311 via @dicebear/core (>=7.0.0, <=7.1.3)
@dicebear/core NPM version =7.0.0, =7.0.0-rc.1, =7.1.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
@dicebear/collection (>=7.0.0-rc.1, <=7.1.3), dicebear (>=7.0.0-rc.1, <=7.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=7.0.0, <=7.1.3)
@dicebear/initials NPM version =7.0.0, =7.0.0-rc.1, =7.0.0-rc.1, =7.1.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
@dicebear/collection (>=9.0.0, <=9.4.0), @fduenascoink/ui-sdk (>=18.0.0, <=18.0.4) +1 more potentially affected by CVE-2026-33311 via @dicebear/initials (>=9.0.0, <=9.4.0)
@dicebear/initials NPM version =9.0.0, =9.0.0, =18.0.0, =9.0.0, =9.4.0 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
@dicebear/collection (>=7.0.0-rc.1, <=7.1.3), dicebear (>=7.0.0-rc.1, <=7.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=7.0.0, <=7.1.3)
@dicebear/initials NPM version =7.0.0, =7.0.0-rc.1, =7.0.0-rc.1, =7.1.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...