gloglet (2.3.3) potentially affected by unknown CVE via gloggo (1.1.3)

gloggo NPM version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.3 Source cves: unknown CVE Source advisory: GHSA-WMGG-555M-P7H6...

gloglet (2.3.2) potentially affected by unknown CVE via gloggo (1.1.2)

gloggo NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.2 Source cves: unknown CVE Source advisory: GHSA-WMGG-555M-P7H6...

02112019lab6 (1.0.0), 03-custom-tian (>=1.0.1, <=1.0.6) +9361 more potentially affected by unknown CVE via nodemailer (>=6.9.16, <=9.0.6)

nodemailer NPM version =6.9.16, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 123ac 1.0.8 - 123acyashu 1.0.8 - 123acyashuac 1.0.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CC9R-2J5M-2M83...

@azure-tools/typespec-rust (>=0.40.0, <=0.41.5), @fox-hound-tools/protobuf-grpc-json-transcoding (>=0.70.0, <=0.71.0) +7 more potentially affected by unknown CVE via @typespec/compiler (>=1.0.0, <=1.14.0)

@typespec/compiler NPM version =1.0.0, =0.40.0, =0.70.0, =1.0.0-Preview.4, =1.0.0, =1.0.0-Preview.5, =0.1.16, =0.1.0, =0.1.6 - typespec-swift 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-2Q42-4Q24-7RGV...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22866 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: unknown CVE Source advisory: SNYK:JS-SHARP-19653587...

@a3s-lab/office (>=0.1.0, <=0.76.0), @adminforge/ai (>=0.2.0, <=0.3.1) +302 more potentially affected by unknown CVE via @tiptap/core (>=3.7.0, <=3.30.4)

@tiptap/core NPM version =3.7.0, =0.1.0, =0.2.0, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.1.26, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819143124, =1.0.0, =0.2.0, =2.2.2, =1.3.7-beta.22, =2.0.11, =2.1.12, =2.2.1 - @bizjs/richer-editor 0.1.0 and more Source cves: unknown CVE...

@usemosaik/cli (1.1.0), create-mosaik (1.1.0) potentially affected by unknown CVE via @usemosaik/template-react-js (1.0.1)

@usemosaik/template-react-js NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @usemosaik/template-react-js and may be impacted: - @usemosaik/cli 1.1.0 - create-mosaik 1.1.0 Source cves: unknown CVE Source advisory: GHSA-8RCC-9GGM-659P...

@dokja/dokja (1.1.4), above_angelfish_peach-86 (3.1.4) +249 more potentially affected by unknown CVE via dokja (1.1.4)

dokja NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dokja and may be impacted: - @dokja/dokja 1.1.4 - aboveangelfishpeach-86 3.1.4 - abundanttickmaroon-44 3.1.3 - activesnakewhite-91 3.2.4 - adverseelkblush-92 3.1.1 -...

gulu-ui (>=0.0.6, <=0.0.7) potentially affected by unknown CVE via dev-test (0.0.1-security)

dev-test NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on dev-test and may be impacted: - gulu-ui =0.0.6, =0.0.7 Source cves: unknown CVE Source advisory: GHSA-JMPP-FW65-X36Q...

@depup/artillery (>=2.0.33-depup.28, <=2.0.33-depup.50), @eduzz/e2e-playwright-base (0.4.0) +81 more potentially affected by CVE-2026-73231 via @faker-js/faker (>=10.0.0, <=10.4.0)

@faker-js/faker NPM version =10.0.0, =2.0.33-depup.28, =1.0.0-rc.1, =3.22.0-next.38, =9.0.0-next.68, =19.8.4, =1.0.7, =3.1.2, =0.2.9, =0.4.7, =0.2.12, =1.0.5, =0.2.10, =0.3.2, =0.3.6 and more Source cves: CVE-2026-73231 Source advisory: OSV:GHSA-QXC2-J82W-R537...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83612 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83612 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499086...

actix-postgres (>=0.1.0, <=0.4.0), actyx_sdk (>=0.1.0, <=0.3.0) +567 more potentially affected by unknown CVE via postgres-protocol (>=0.4.0, <=0.6.10)

postgres-protocol CARGO version =0.4.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5X78-73V4-XG6W...

@appweaver/core (>=1.0.0, <=1.4.1), @bryopsida/object-store (>=0.1.0, <=0.1.7) +11 more potentially affected by CVE-2026-18165 via @fastify/oauth2 (>=7.9.0, <=8.2.0)

@fastify/oauth2 NPM version =7.9.0, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.13.0, =1.4.30, =1.2.0, =0.0.14, =0.0.19 Source cves: CVE-2026-18165 Source advisory: SNYK:JS-FASTIFYOAUTH2-18902506...

avml (>=0.7.0, <=0.8.0), azeventhubs (>=0.1.0, <=0.19.4) +335 more potentially affected by unknown CVE via azure_core (>=0.2.2, <=0.21.0)

azurecore CARGO version =0.2.2, =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =0.2.0, =0.3.0, =0.3.0, =0.3.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.21.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0275...

@babely/cli (>=1.0.3, <=1.0.6), @fyfirman/trigger.dev (4.1.2) +40 more potentially affected by CVE-2026-73654 via @trigger.dev/core (>=3.3.8, <=4.5.5)

@trigger.dev/core NPM version =3.3.8, =1.0.3, =0.0.1-0, =0.0.2-18, =3.1.4, =0.1.2, =7.0.1, =0.1.0, =0.2.8, =0.1.2, =0.0.2, =3.0.0-beta.0, =3.3.8, =3.0.0, =3.3.12 and more Source cves: CVE-2026-73654 Source advisory: OSV:GHSA-P28V-F755-9QRG...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +19393 more potentially affected by CVE-2026-73088 via browserslist (>=4.0.0, <=4.28.6)

browserslist NPM version =4.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by CVE-2026-66062 via @sveltejs/kit (>=2.0.0, <=2.70.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-66062 Source advisory: SNYK:JS-SVELTEJSKIT-18592743...

@qingwave/cclens (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-72744 via nuxt (3.21.8)

nuxt NPM version 3.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @qingwave/cclens =0.1.0, =0.2.0 Source cves: CVE-2026-72744 Source advisory: OSV:GHSA-7C4V-FWGW-9RF7...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2559 more potentially affected by CVE-2026-75838 via dompurify (>=3.0.0, <=3.4.12)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.0.1, =0.1.0, =0.10.2, =0.1.0-alpha.1, =0.1.0-alpha.35 and more Source cves: CVE-2026-75838 Source advisory: OSV:GHSA-55Q2-FJHQ-7XH7...

@appweaver/core (>=1.1.6, <=1.4.1), @cappa/cli (>=0.11.1, <=0.12.0) +33 more potentially affected by CVE-2026-18427 via @fastify/static (>=10.1.0, <=10.1.2)

@fastify/static NPM version =10.1.0, =1.1.6, =0.11.1, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =0.0.4, =0.0.6 - @darthcav/ts-http-server 0.9.1 -...

@holocronlab/botruntime-adk (2.4.2), @holocronlab/brt (0.7.25) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.4.2)

@holocronlab/botruntime-runtime NPM version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.4.2 - @holocronlab/brt 0.7.25 Source cves: unknown CVE Source advisor...

@holocronlab/botruntime-adk (2.6.4), @holocronlab/brt (0.9.8) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.4)

@holocronlab/botruntime-runtime NPM version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.4 - @holocronlab/brt 0.9.8 Source cves: unknown CVE Source advisory...

@ccfly/setup (0.1.17) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.17)

@ccfly/setup-linux-x64 NPM version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.17 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@apicity/mcp-server (0.8.5) potentially affected by unknown CVE via @apicity/meta (0.8.5)

@apicity/meta NPM version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

@apicity/mcp-server (0.8.2) potentially affected by unknown CVE via @apicity/meta (0.8.2)

@apicity/meta NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +77 more potentially affected by CVE-2026-71321 via nuxt (>=3.1.2, <=3.21.8)

nuxt NPM version =3.1.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-71321 Source advisory: SNYK:JS-NUXT-18565112...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +77 more potentially affected by CVE-2026-71321 via nuxt (>=3.1.2, <=3.21.8)

nuxt NPM version =3.1.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-71321 Source advisory: OSV:GHSA-9PGF-384G-P7MV...

@whalent/agent (0.3.258) potentially affected by unknown CVE via @whalent/agent-core (0.3.258)

@whalent/agent-core NPM version 0.3.258 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.258 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.282) potentially affected by unknown CVE via @whalent/agent-core (0.3.282)

@whalent/agent-core NPM version 0.3.282 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.282 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4), @qingwave/cclens (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2026-71320 via @nuxt/nitro-server (>=3.20.0, <=3.21.9)

@nuxt/nitro-server NPM version =3.20.0, =9.13.1-rc.9, =0.1.0, =3.20.0, =3.21.9 Source cves: CVE-2026-71320 Source advisory: SNYK:JS-NUXTNITROSERVER-18565116...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70605 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70602 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@codeanywhere/filesystem (>=1.13.0, <=1.13.2), @codeanywhere/theia-plugin-ext (>=1.11.0, <=1.11.4) +196 more potentially affected by CVE-2026-14574 via @theia/core (>=0.7.0-next.a88ef75e, <=1.73.1)

@theia/core NPM version =0.7.0-next.a88ef75e, =1.13.0, =1.11.0, =0.1.7, =0.0.1, =0.0.1-1569582205, =0.0.1-1646139429, =0.0.1-1569582204, =1.0.0-theia1.27.0, =0.7.0, =0.0.1-next.20220331.125641, =0.0.5, =0.1.0-next.f008ff69 and more Source cves: CVE-2026-14574 Source advisory:...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30581 more potentially affected by CVE-2026-58062 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2026-58062 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519200...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +21471 more potentially affected by CVE-2026-59639 via org.bouncycastle:bcpkix-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcpkix-jdk15on MAVEN version =1.47, =1.0.1, =0.2.3, =4.4.0.0, =0.1.12, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-59639 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18513024...

venturo-playwright (1.0.10) potentially affected by unknown CVE via venturo-playwright-runner (1.0.6)

venturo-playwright-runner NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.10 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

@agent-native/core (>=0.26.5, <=0.157.8), @agent-native/skills (>=0.2.9, <=0.2.558) +224 more potentially affected by CVE-2026-67327 via better-auth (>=1.1.3, <=1.6.21)

better-auth NPM version =1.1.3, =0.26.5, =0.2.9, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.1.4 and more Source cves: CVE-2026-67327 Source advisory: SNYK:JS-BETTERAUTH-18319507...

@automate.ax/components-core (>=0.1.3, <=0.3.1), @grease.sh/components-core (0.1.2) +4 more potentially affected by CVE-2026-67329 via @better-auth/stripe (>=1.6.9, <=1.6.11)

@better-auth/stripe NPM version =1.6.9, =0.1.3, =0.1.3, =0.1.0, =0.2.7 - grease.sh 0.1.2 Source cves: CVE-2026-67329 Source advisory: SNYK:JS-BETTERAUTHSTRIPE-18319505...

astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by CVE-2026-73423 via astro (>=7.0.2, <=7.0.3)

astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: CVE-2026-73423 Source advisory: OSV:GHSA-8MV7-9C27-98VC...

io.lighty.applications.rcgnmi:lighty-rcgnmi-app-module (>=14.1.0, <=24.0.0), io.lighty.applications.rnc:lighty-rnc-module (>=13.2.0, <=24.0.0) +609 more potentially affected by CVE-2026-36501 via org.opendaylight.controller:sal-akka-raft (>=1.1-helium, <=13.0.5)

org.opendaylight.controller:sal-akka-raft MAVEN version =1.1-helium, =14.1.0, =13.2.0, =17.0.0, =12.2.1, =8.4.1, =9.1.2, =8.4.1, =23.0.0, =14.1.0, =8.4.1, =16.0.0, =17.0.0, =8.4.1, =19.0.0, =9.2.1, =14.4.0 and more Source cves: CVE-2026-36501 Source advisory:...

swift-scality-backend (0.4.4) potentially affected by CVE-2025-65073 via swift (2.38.1)

swift PYPI version 2.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on swift and may be impacted: - swift-scality-backend 0.4.4 Source cves: CVE-2025-65073 Source advisory: SNYK:PYTHON-SWIFT-14038401...

askai (0.1.0), doh-client (3.1.2) +25 more potentially affected by unknown CVE via tokio (>=1.19.2, <=1.20.1)

tokio CARGO version =1.19.2, =2.3.0, =4.1.2, =1.4.0, =1.18.1, =0.2.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0005...

@biconomy/hyphen-contracts (1.0.4), @bobanetwork/contracts (0.0.2) +17 more potentially affected by unknown CVE via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.3.2)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.0.1, =0.5.0, =3.4.0, =1.1.2, =1.0.1, =1.1.2, =1.0.0, =0.8.1-pr-brioux-1333.92b26c3a.36, =1.0.5, =2.3.0, =2.0.0, =3.0.0-beta, =3.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WMPV-C2JP-J2XG...

@commercial/hapi (19.0.2), @hapi/hapi (>=19.0.0, <=19.0.4) potentially affected by unknown CVE via @hapi/ammo (4.0.1)

@hapi/ammo NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/ammo and may be impacted: - @commercial/hapi 19.0.2 - @hapi/hapi =19.0.0, =19.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-GJPH-XF5Q-6MFQ...

@badzz88/baileys (8.5.8), @sakataoffc/baileys (5.0.1) +3 more potentially affected by unknown CVE via @vnxsync/libsignal-node (1.0.0)

@vnxsync/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @vnxsync/libsignal-node and may be impacted: - @badzz88/baileys 8.5.8 - @sakataoffc/baileys 5.0.1 - @vnxsync/xbails =1.0.0, =1.0.0, =1.0.6 Source cves: unknown CV...

@chocolatey-software/astro (2.10.0), @domainbook/site (1.0.0) +13 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)

astro NPM version =7.0.2, =3.1.0, =0.4.9, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =1.0.0, =1.0.1 - stropress 0.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-26W7-CXV4-GFX2...

@chocolatey-software/astro (2.10.0), @domainbook/site (1.0.0) +13 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)

astro NPM version =7.0.2, =3.1.0, =0.4.9, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =1.0.0, =1.0.1 - stropress 0.0.9 Source cves: unknown CVE Source advisory: SNYK:JS-ASTRO-19652369...

@0xshogun/sdk (>=1.0.3, <=1.1.6), @100xsystems/test-suite-typescript (>=0.1.0, <=0.1.2) +1715 more potentially affected by CVE-2026-84373 via @vitest/mocker (>=2.1.0, <=4.1.10)

@vitest/mocker NPM version =2.1.0, =1.0.3, =0.1.0, =0.0.1, =0.2.4, =0.0.3, =0.2.0, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.8.0, =0.0.14, =0.6.0, =1.2.0, =1.2.11 and more Source cves: CVE-2026-84373 Source advisory: OSV:GHSA-82FW-GWWQ-J7X9...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71869 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71869 Source advisory: OSV:GHSA-2H9G-J24R-H63G...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71871 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71871 Source advisory: OSV:GHSA-8J6P-R8JG-MXQH...