11219 matches found
@geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4), nuxt (>=3.20.0, <=3.21.5) potentially affected by CVE-2026-46342 via @nuxt/nitro-server (>=3.20.0, <=3.21.5)
@nuxt/nitro-server NPM version =3.20.0, =9.13.1-rc.9, =3.20.0, =3.21.5 Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...
@turbo/gen (>=2.3.4-canary.0, <=2.8.8-canary.3) potentially affected by CVE-2026-45772 via @turbo/workspaces (>=2.3.4, <=2.8.8-canary.3)
@turbo/workspaces NPM version =2.3.4, =2.3.4-canary.0, =2.8.8-canary.3 Source cves: CVE-2026-45772 Source advisory: SNYK:JS-TURBOWORKSPACES-16773152...
armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)
diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q8X8-JRHJ-FH9P...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-46341 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-46341 Source advisory:...
@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +51 more potentially affected by CVE-2026-45669 via nuxt (>=3.4.3, <=3.20.1)
nuxt NPM version =3.4.3, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.12.0-rc.7 and more Source cves: CVE-2026-45669 Source advisory: SNYK:JS-NUXT-16770149...
@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +591 more potentially affected by CVE-2026-8159 via multiparty (>=4.0.0, <=4.2.3)
multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8159 Source advisory: SNYK:JS-MULTIPARTY-16790693...
org.webjars.npm:adal-node (0.1.28), org.webjars.npm:angular-lock (2.0.3) +82 more potentially affected by CVE-2026-8723 via org.webjars.npm:qs (>=0.6.6, <=6.15.3)
org.webjars.npm:qs MAVEN version =0.6.6, =8.4.0, =1.4.3, =1.5.2, =4.14.0, =4.18.1 and more Source cves: CVE-2026-8723 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16721867...
0xkobold (>=0.3.0, <=0.8.0), 4591-libs (>=0.0.1, <=0.2.0) +6072 more potentially affected by CVE-2026-8723 via qs (>=6.11.1, <=6.15.1)
qs NPM version =6.11.1, =0.3.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.0.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.2 - @142vip/data-source 0.0.1-alpha.1 and more Source cves: CVE-2026-8723 Source advisory: SNYK:JS-QS-1672186...
nimiq-account (0.1.0), nimiq-accounts (0.1.0) +15 more potentially affected by CVE-2026-40092 via nimiq-keys (0.1.0)
nimiq-keys CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-keys and may be impacted: - nimiq-account 0.1.0 - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 - nimiq-client 0.1.0...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-45411 via vm2 (>=3.0.0, <=3.11.2)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
@ekairos/cli (>=1.22.35, <=1.22.106-beta.feature-context-event-reaction-architecture.0), @ekairos/context (>=1.22.102-beta.feature-lab-task-sandbox-beta.0, <=1.22.106-beta.feature-context-event-reaction-architecture.0) +31 more potentially affected by CVE-2026-42570 via devalue (5.6.3)
devalue NPM version 5.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on devalue and may be impacted: - @ekairos/cli =1.22.35, =1.22.102-beta.feature-lab-task-sandbox-beta.0, =1.21.52-beta.0, =1.22.9-beta.development.0, =1.22.13-beta.development.0,...
org.webjars.npm:svelte (5.53.12) potentially affected by CVE-2026-42570 via org.webjars.npm:devalue (5.6.4)
org.webjars.npm:devalue MAVEN version 5.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:devalue and may be impacted: - org.webjars.npm:svelte 5.53.12 Source cves: CVE-2026-42570 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16697434...
org.webjars.npm:event-calendar__core (>=3.1.0, <=3.7.1), org.webjars.npm:event-calendar__day-grid (3.6.2) +2 more potentially affected by CVE-2026-42599 via org.webjars.npm:svelte (>=3.20.1, <=4.2.19)
org.webjars.npm:svelte MAVEN version =3.20.1, =3.1.0, =3.1.0, =3.6.2 - org.webjars.npm:stylesheet-switcher 3.0.0 Source cves: CVE-2026-42599 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16697616...
org.webjars.npm:github-com-daichirata-vue-sanitize (0.2.2), org.webjars.npm:github-com-daichirata-vue-sanitize- (0.2.2) potentially affected by CVE-2026-45011 via org.webjars.npm:sanitize-html (2.7.0)
org.webjars.npm:sanitize-html MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sanitize-html and may be impacted: - org.webjars.npm:github-com-daichirata-vue-sanitize 0.2.2 -...
@ardeora/start-devtools (>=1.0.0, <=1.0.1), @carvajalconsultants/headstart (>=1.0.0, <=1.0.2) +31 more potentially affected by unknown CVE via @tanstack/start-server-core (>=1.121.0-alpha.28, <=1.167.29)
@tanstack/start-server-core NPM version =1.121.0-alpha.28, =1.0.0, =1.0.0, =0.0.14, =1.0.0, =0.3.0, =0.3.0, =1.20.3-alpha.1, =1.111.10, =1.121.23, =0.0.1, =1.121.0-alpha.28, =1.20.3-alpha.1, =1.114.29, =1.121.23, =1.121.0-alpha.28, =2.0.0-beta.19 and more Source cves: unknown CVE Source advisory:...
@ardeora/start-devtools (>=1.0.0, <=1.0.1), @carvajalconsultants/headstart (>=1.0.0, <=1.0.2) +31 more potentially affected by unknown CVE via @tanstack/start-server-core (>=1.121.0-alpha.28, <=1.167.29)
@tanstack/start-server-core NPM version =1.121.0-alpha.28, =1.0.0, =1.0.0, =0.0.14, =1.0.0, =0.3.0, =0.3.0, =1.20.3-alpha.1, =1.111.10, =1.121.23, =0.0.1, =1.121.0-alpha.28, =1.20.3-alpha.1, =1.114.29, =1.121.23, =1.121.0-alpha.28, =2.0.0-beta.19 and more Source cves: unknown CVE Source advisory:...
@avorati/strapi-plugin-preview (1.0.1), @catchmexz/fedin-cms (>=5.30.1, <=5.30.2) +10 more potentially affected by CVE-2026-22707 via @strapi/upload (>=5.0.0, <=5.33.2)
@strapi/upload NPM version =5.0.0, =5.30.1, =2.0.0, =0.0.1-rc1, =2.0.0, =5.0.0-beta.6, =3.0.0-beta.1, =3.0.0-beta.2 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2026-22707 Source advisory: SNYK:JS-STRAPIUPLOAD-16691317...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-45411 via vm2 (>=3.0.0, <=3.11.2)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
7ghost-cli (>=1.17.6-next.0, <=1.18.4), @abtnode/core (>=1.0.15, <=1.1.9) +786 more potentially affected by CVE-2026-44724 via systeminformation (>=4.22.5, <=5.31.5)
systeminformation NPM version =4.22.5, =1.17.6-next.0, =1.0.15, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.1.1, =0.1.1, =4.1.0-rc.4, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =2.1.3 - @anticapture/observability 1.0.1 and more Source cves: CVE-2026-44724 Source...
@chocolatey-software/astro (2.7.0), @kyro-cms/admin (0.1.2) +8 more potentially affected by CVE-2026-45028 via astro (>=6.0.0-beta.1, <=6.1.8)
astro NPM version =6.0.0-beta.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.4.2, =0.0.1, =0.0.1, =0.0.7 Source cves: CVE-2026-45028 Source advisory: OSV:GHSA-XR5H-PHRJ-8VXV...
adaro-rl (0.3.0), advermorel (>=0.1.1, <=0.1.6) +16 more potentially affected by CVE-2026-31229 via adversarial-robustness-toolbox (>=0.5.0, <=1.20.1)
adversarial-robustness-toolbox PYPI version =0.5.0, =0.1.1, =0.1.0, =0.0.5, =24.6.0, =23.10.1, =1.0.1, =23.7.1, =0.2.1, =1.0.0, =0.2.0, =0.3.0, =0.4.0, =0.1.0b3, =0.1.0b6 and more Source cves: CVE-2026-31229 Source advisory: SNYK:PYTHON-ADVERSARIALROBUSTNESSTOOLBOX-17675445...
10minions-engine (>=0.0.1, <=0.0.4), @1amageek/document-propagator (>=0.10.1, <=1.0.0) +1539 more potentially affected by CVE-2026-44295 via protobufjs-cli (>=1.0.0, <=1.1.3)
protobufjs-cli NPM version =1.0.0, =0.0.1, =0.10.1, =1.1.0, =0.4.0, =1.22.0, =6.2.36, =1.0.0-alpha.2, =1.8.0, =0.0.0-beta.0, =1.0.0, =1.0.1, =3.1.0 and more Source cves: CVE-2026-44295 Source advisory: OSV:GHSA-6R35-46G8-JCW9...
10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3389 more potentially affected by CVE-2026-44288 via protobufjs (>=7.0.0, <=7.5.5)
protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =2.0.2, =3.3.4 and more Source cves: CVE-2026-44288 Source advisory: SNYK:JS-PROTOBUFJS-16643234...
a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1347 more potentially affected by unknown CVE via git2 (>=0.1.21, <=0.20.4)
git2 CARGO version =0.1.21, =0.1.0, =0.2.2, =1.1.0, =0.2.0, =0.2.0, =0.2.0, =0.0.1, =0.2.0, =0.2.9 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0183...
@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @bubblesjs/vue-ai-chart (>=0.0.3, <=0.0.4) +157 more potentially affected by CVE-2026-41150 via mermaid (>=11.0.0, <=11.14.0)
mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.3, =0.15.0, =0.35.0, =0.0.1-beta.1, =0.0.0-beta.1, =0.1.0, =0.0.1, =0.0.1-alpha.0, =0.11.1, =0.11.2, =1.10.5, =15.1.25, =16.0.121 and more Source cves: CVE-2026-41150 Source advisory: OSV:GHSA-6M6C-36F7-FHXH...
@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +243 more potentially affected by CVE-2026-41149 via mermaid (>=10.0.0, <=10.9.5)
mermaid NPM version =10.0.0, =0.18.0-beta.0, =0.17.0-alkemio-1, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.17.1, =0.0.19, =0.0.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-41149 Source advisory: OSV:GHSA-GHCM-XQFW-Q4VR...
@0xgg/echomd (>=1.0.0, <=1.0.4), @7nohe/vite-plugin-vue-marked (0.2.1) +949 more potentially affected by CVE-2026-41149 via mermaid (>=0.2.16, <=10.9.5)
mermaid NPM version =0.2.16, =1.0.0, =0.18.0-beta.0, =0.3.0, =0.1.0, =0.1.0-a0, =0.17.0-alkemio-1, =0.4.0, =0.0.18, =1.0.0, =3.130.1, =1.19.0, =1.50.0 and more Source cves: CVE-2026-41149 Source advisory: SNYK:JS-MERMAID-16642050...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +757 more potentially affected by CVE-2026-44575 +1 more via next (>=16.0.0, <=16.2.5)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44575, CVE-2026-45109...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44572 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44572 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44577 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44577 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44578 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44578 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44578 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44578 Source advisory:...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 03-gs-ee-6 (0.3.5) +40668 more potentially affected by CVE-2026-44576 via next (>=14.2.0, <=15.5.15)
next NPM version =14.2.0, =0.1.0, =1.0.0, =0.1.0, =1.1.4 - 21guns 1.1.2 - 2bv2 1.4.8 and more Source cves: CVE-2026-44576 Source advisory: SNYK:JS-NEXT-16638676...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44575 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44575 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44575 +1 more via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44575, CVE-2026-45109...
3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +353 more potentially affected by CVE-2026-44574 via next (>=15.4.0-canary.17, <=15.5.15)
next NPM version =15.4.0-canary.17, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44574 Source advisory: SNYK:JS-NEXT-16638679...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44573 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44573 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by unknown CVE via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: unknown CVE Source advisory:...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +636 more potentially affected by CVE-2026-44457 via hono (>=4.0.0, <=4.12.17)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-44457 Source advisory: OSV:GHSA-P77W-8QQV-26RM...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +912 more potentially affected by CVE-2026-44457 via hono (>=2.1.4, <=4.12.17)
hono NPM version =2.1.4, =0.1.8-fix.3, =0.0.2, =0.3.1, =5.0.0, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.15 and more Source cves: CVE-2026-44457 Source advisory: SNYK:JS-HONO-16624532...
@2kk/miniprogram-ci (>=0.0.2, <=0.0.8), @agilejs/cli (1.0.0) +332 more potentially affected by CVE-2026-44728 via @babel/plugin-transform-modules-systemjs (>=7.12.1, <=7.29.0)
@babel/plugin-transform-modules-systemjs NPM version =7.12.1, =0.0.2, =1.0.0, =7.21.4-esm.2, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.74, =1.0.0, =1.1.5 and more Source cves: CVE-2026-44728 Source advisory: SNYK:JS-BABELPLUGINTRANSFORMMODULESSYSTEMJS-16624576...
@2kk/miniprogram-ci (>=0.0.2, <=0.0.8), @agilejs/cli (1.0.0) +332 more potentially affected by CVE-2026-44728 via @babel/plugin-transform-modules-systemjs (>=7.12.1, <=7.29.0)
@babel/plugin-transform-modules-systemjs NPM version =7.12.1, =0.0.2, =1.0.0, =7.21.4-esm.2, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.74, =1.0.0, =1.1.5 and more Source cves: CVE-2026-44728 Source advisory: OSV:GHSA-FV7C-FP4J-7GWP...
@adlanarifzr/mikro-orm-migrations (>=7.0.5-next.0, <=7.0.9), @mikro-orm/entity-generator (>=7.0.0-dev.97, <=7.0.13) +10 more potentially affected by CVE-2026-44680 via @mikro-orm/sql (>=7.0.0, <=7.0.13-dev.16)
@mikro-orm/sql NPM version =7.0.0, =7.0.5-next.0, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.316, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.13 - @reldens/cms 0.61.0 - @reldens/storage 0.93.0 Source cves: CVE-2026-44680 Source advisory:...
aurora-cycler-manager (>=0.10.0, <=0.11.4), fusion-tools (>=3.6.19, <=3.6.90) +9 more potentially affected by CVE-2026-38361 via dash-uploader (>=0.6.0, <=0.7.0a2)
dash-uploader PYPI version =0.6.0, =0.10.0, =3.6.19, =0.0.11, =0.0.30, =0.2.4b0, =0.0.50.0, =0.1.7.3, =2.0.1, =0.2.0, =0.4.1 Source cves: CVE-2026-38361 Source advisory: SNYK:PYTHON-DASHUPLOADER-16635848...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by unknown CVE via vm2 (>=3.0.0, <=3.11.1)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves: unknown CVE...
org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-44003 via org.webjars.npm:vm2 (3.9.19)
org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-44008 via vm2 (>=3.0.0, <=3.11.1)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
stats-fr-emarque-basketball-extractor (>=1.0.0, <=1.0.2) potentially affected by CVE-2025-63705 via node-ts-ocr (1.0.15)
node-ts-ocr NPM version 1.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on node-ts-ocr and may be impacted: - stats-fr-emarque-basketball-extractor =1.0.0, =1.0.2 Source cves: CVE-2025-63705 Source advisory: OSV:GHSA-8JH2-3MW6-6PFM...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-43998 via vm2 (>=3.0.0, <=3.10.5)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-44003 via vm2 (>=3.0.0, <=3.10.5)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...