1shot (>=0.0.3, <=0.0.9), @4via6/relay (>=1.0.0, <=1.1.3) +251 more potentially affected by CVE-2026-54316 via @anthropic-ai/claude-code (>=0.2.126, <=2.1.154)

@anthropic-ai/claude-code NPM version =0.2.126, =0.0.3, =1.0.0, =2.1.0, =0.1.18, =1.0.0, =0.4.0, =1.0.0, =0.2.3, =0.0.1, =0.0.1, =0.0.55, =0.0.69 and more Source cves: CVE-2026-54316 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-17391874...

1shot (>=0.0.3, <=0.0.9), @4via6/relay (>=1.0.0, <=1.1.3) +251 more potentially affected by CVE-2026-54316 via @anthropic-ai/claude-code (>=0.2.126, <=2.1.154)

@anthropic-ai/claude-code NPM version =0.2.126, =0.0.3, =1.0.0, =2.1.0, =0.1.18, =1.0.0, =0.4.0, =1.0.0, =0.2.3, =0.0.1, =0.0.1, =0.0.55, =0.0.69 and more Source cves: CVE-2026-54316 Source advisory: OSV:GHSA-FG94-H982-F3MM...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +228 more potentially affected by CVE-2026-54233 via vllm (>=0.1.3, <=0.26.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.7, =0.0.1b1, =0.1.15, =0.2.4, =1.0.0, =1.0.14 and more Source cves: CVE-2026-54233 Source advisory: SNYK:PYTHON-VLLM-17372794...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +228 more potentially affected by CVE-2026-54236 via vllm (>=0.1.3, <=0.26.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.7, =0.0.1b1, =0.1.15, =0.2.4, =1.0.0, =1.0.14 and more Source cves: CVE-2026-54236 Source advisory: SNYK:PYTHON-VLLM-17372791...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +228 more potentially affected by CVE-2026-54235 via vllm (>=0.1.3, <=0.26.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.7, =0.0.1b1, =0.1.15, =0.2.4, =1.0.0, =1.0.14 and more Source cves: CVE-2026-54235 Source advisory: SNYK:PYTHON-VLLM-17372795...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +293 more potentially affected by CVE-2026-54325 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.1)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +259 more potentially affected by CVE-2026-54328 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +259 more potentially affected by CVE-2026-54328 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

0xkobold (>=0.0.1, <=0.8.0), @0xwork/connect (>=0.1.0, <=0.1.7) +554 more potentially affected by CVE-2026-54327 via @mariozechner/pi-coding-agent (>=0.28.0, <=0.73.1)

@mariozechner/pi-coding-agent NPM version =0.28.0, =0.0.1, =0.1.0, =1.0.0-alpha, =0.1.8-fix.3, =0.0.183-staging.22859086, =5.0.0, =0.1.6-staging.22859086, =0.1.1-staging.04cc300a, =4.0.153, =0.1.1-staging.04cc300a, =0.1.0, =0.1.1-staging.29187771, =0.1.1-staging.0dc03363, =0.0.2-staging.29187771,...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +259 more potentially affected by CVE-2026-54327 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +259 more potentially affected by CVE-2026-54326 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

0xkobold (>=0.0.1, <=0.8.0), @0xwork/connect (>=0.1.0, <=0.1.7) +554 more potentially affected by CVE-2026-54326 via @mariozechner/pi-coding-agent (>=0.27.9, <=0.73.1)

@mariozechner/pi-coding-agent NPM version =0.27.9, =0.0.1, =0.1.0, =1.0.0-alpha, =0.1.8-fix.3, =0.0.183-staging.22859086, =5.0.0, =0.1.6-staging.22859086, =0.1.1-staging.04cc300a, =4.0.153, =0.1.1-staging.04cc300a, =0.1.0, =0.1.1-staging.29187771, =0.1.1-staging.0dc03363, =0.0.2-staging.29187771,...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-56317 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-56317 Source advisory: OSV:GHSA-M3Q2-P4FW-W38M...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-56317 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-56317 Source advisory: SNYK:JS-NUXT-17353899...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +90 more potentially affected by CVE-2026-56317 via nuxt (>=3.0.0, <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-56317 Source advisory: SNYK:JS-NUXT-17353899...

nova-scheduler-filters (0.1.0) potentially affected by CVE-2026-46448 via nova (33.0.2)

nova PYPI version 33.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on nova and may be impacted: - nova-scheduler-filters 0.1.0 Source cves: CVE-2026-46448 Source advisory: SNYK:PYTHON-NOVA-17670530...

datatran (1.5.0), log-serialize (2.1.1) potentially affected by unknown CVE via proto-bin (2.5.3)

proto-bin NPM version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on proto-bin and may be impacted: - datatran 1.5.0 - log-serialize 2.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-5921...

@a1st/aix (>=0.0.3, <=0.5.1), @a1st/aix-core (>=0.2.0, <=0.5.1) +18 more potentially affected by CVE-2026-54298 via astro (>=6.0.0-beta.1, <=6.4.4)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =1.4.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-54298 Source advisory: OSV:GHSA-JRPJ-WCV7-9FH9...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +636 more potentially affected by CVE-2026-54288 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.22.7 and more Source cves: CVE-2026-54288 Source advisory: SNYK:JS-HONO-17356388...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +636 more potentially affected by CVE-2026-54288 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.22.7 and more Source cves: CVE-2026-54288 Source advisory: OSV:GHSA-RV63-4MWF-QQC2...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +636 more potentially affected by CVE-2026-54289 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.22.7 and more Source cves: CVE-2026-54289 Source advisory: OSV:GHSA-WGPF-JWQJ-8H8P...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +636 more potentially affected by CVE-2026-54289 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.22.7 and more Source cves: CVE-2026-54289 Source advisory: SNYK:JS-HONO-17356391...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +636 more potentially affected by CVE-2026-54290 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.22.7 and more Source cves: CVE-2026-54290 Source advisory: OSV:GHSA-88FW-HQM2-52QC...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +636 more potentially affected by CVE-2026-54290 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.22.7 and more Source cves: CVE-2026-54290 Source advisory: SNYK:JS-HONO-17356430...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +636 more potentially affected by CVE-2026-54286 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.22.7 and more Source cves: CVE-2026-54286 Source advisory: SNYK:JS-HONO-17356405...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +636 more potentially affected by CVE-2026-54286 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.22.7 and more Source cves: CVE-2026-54286 Source advisory: OSV:GHSA-WWFH-H76J-FC44...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +636 more potentially affected by CVE-2026-54287 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.22.7 and more Source cves: CVE-2026-54287 Source advisory: OSV:GHSA-J6C9-X7QJ-28XF...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +636 more potentially affected by CVE-2026-54287 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.22.7 and more Source cves: CVE-2026-54287 Source advisory: SNYK:JS-HONO-17356429...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 5gasp-cli (>=0.1.0, <=0.4.0) +3273 more potentially affected by unknown CVE via html5lib (>=0.95.0, <=1.1.0)

html5lib PYPI version =0.95.0, =0.0.0, =0.1.0, =0.1.0, =0.10.0, =1.0.0, =3.30.15, =0.7.0, =0.2.0, =0.4.0, =0.4.11 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-HTML5LIB-17356104...

@a1st/aix (>=0.0.3, <=0.5.1), @a1st/aix-core (>=0.2.0, <=0.5.1) +17 more potentially affected by CVE-2026-50146 via astro (>=6.0.0-beta.1, <=6.3.1)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =1.4.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.4.2, =1.4.6 and more Source cves: CVE-2026-50146 Source advisory: SNYK:JS-ASTRO-17356186...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-53722 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-53722 Source advisory: OSV:GHSA-934W-87QH-QR26...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +90 more potentially affected by CVE-2026-53722 via nuxt (>=3.0.0, <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-53722 Source advisory: OSV:GHSA-934W-87QH-QR26...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-56301 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-56301 Source advisory: OSV:GHSA-534H-C3CW-V3H9...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-56301 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-56301 Source advisory: SNYK:JS-NUXT-17353897...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +33 more potentially affected by CVE-2026-53721 via nuxt (>=3.11.2, <=3.20.1)

nuxt NPM version =3.11.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.2.1, =1.2.0, =1.1.0, =1.0.0-29304822.f444f03, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.0, =1.1.2 and more Source cves: CVE-2026-53721 Source advisory: OSV:GHSA-MM7M-92G8-7M47...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-56326 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-56326 Source advisory: SNYK:JS-NUXT-17353894...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +90 more potentially affected by CVE-2026-56326 via nuxt (>=3.0.0, <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-56326 Source advisory: SNYK:JS-NUXT-17353894...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +52 more potentially affected by CVE-2026-56326 +2 more via nuxt (>=3.5.0, <=3.20.1)

nuxt NPM version =3.5.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.12.0-rc.7 and more Source cves: CVE-2026-56326, CVE-2026-56697, CVE-2026-56698 Source advisory: OSV:GHSA-C9CV-MQ2M-PPP3...

@alok5953/videoextract (>=1.0.0, <=1.0.7), @aspects-ai/workspace-cli (>=0.1.16, <=0.1.24) +89 more potentially affected by CVE-2026-30120 via remotion (>=4.0.0, <=4.0.409)

remotion NPM version =4.0.0, =1.0.0, =0.1.16, =6.0.1, =0.1.38, =0.1.91, =0.1.0, =5.2.0, =0.0.2, =1.0.0, =1.0.0, =0.1.4, =0.1.3, =0.1.27 and more Source cves: CVE-2026-30120 Source advisory: OSV:GHSA-2JQP-F4GR-44FR...

@alok5953/videoextract (>=1.0.0, <=1.0.7), @aspects-ai/workspace-cli (>=0.1.16, <=0.1.24) +89 more potentially affected by CVE-2026-30121 via remotion (>=4.0.0, <=4.0.409)

remotion NPM version =4.0.0, =1.0.0, =0.1.16, =6.0.1, =0.1.38, =0.1.91, =0.1.0, =5.2.0, =0.0.2, =1.0.0, =1.0.0, =0.1.4, =0.1.3, =0.1.27 and more Source cves: CVE-2026-30121 Source advisory: OSV:GHSA-G6PC-6676-C23J...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by unknown CVE via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RQ7W-G337-39QQ...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by unknown CVE via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-NUXT-17353906...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.2580522, <=0.1.0) +4567 more potentially affected by CVE-2026-54285 via @opentelemetry/core (>=2.0.0, <=2.7.1)

@opentelemetry/core NPM version =2.0.0, =0.1.0, =0.1.0-dev.2580522, =0.1.1, =1.0.0, =0.0.1, =1.3.0, =0.1.0, =1.2.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.1.1, =0.1.11 and more Source cves: CVE-2026-54285 Source advisory: SNYK:JS-OPENTELEMETRYCORE-17373280...

@bechara/crux (>=6.0.0-alpha.1, <=6.6.2), @dismissible/nestjs-api (>=1.0.3-alpha.0b30e6d.0, <=2.0.2-canary.2913ba8.0) +7 more potentially affected by CVE-2026-54281 via @nestjs/platform-fastify (>=11.0.1, <=11.1.23)

@nestjs/platform-fastify NPM version =11.0.1, =6.0.0-alpha.1, =1.0.3-alpha.0b30e6d.0, =1.0.11, =0.1.51, =1.0.36, =1.3.0, =5.0.0-beta.36, =0.6.1-dev, =0.1.0, =0.2.8 Source cves: CVE-2026-54281 Source advisory: OSV:GHSA-6V32-FJC9-9QF6...

@aircall/http (1.7.7), @breadstone/archipel-platform-analytics (>=0.0.2, <=0.0.13) +57 more potentially affected by CVE-2026-48125 via ua-parser-js (>=2.0.1, <=2.0.9)

ua-parser-js NPM version =2.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.5.9-develop-pedago.20260213101441, =0.2.2-develop-pedago.2, =1.0.2-develop.0.20260622083059 and more Source cves: CVE-2026-48125 Source advisory:...

com.drivetribe:orchestra-core_sjs0.6_2.12 (>=0.1, <=0.7), com.drivetribe:orchestra-cron_sjs0.6_2.12 (>=0.1, <=0.7) +123 more potentially affected by CVE-2026-48125 via org.webjars.npm:ua-parser-js (>=0.7.41, <=2.0.0-alpha.3)

org.webjars.npm:ua-parser-js MAVEN version =0.7.41, =0.1, =0.1, =0.1, =0.8, =0.8, =0.8, =7.1.0-rc6, =7.1.0-rc3, =7.1.0-rc3, =7.1.0-rc3, =1.0.0-rc2, =1.0.0-rc2, =1.0.5 and more Source cves: CVE-2026-48125 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17353323...

10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3426 more potentially affected by CVE-2026-54271 via protobufjs (>=7.0.0, <=7.6.1)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =2.0.2, =3.3.3 and more Source cves: CVE-2026-54271 Source advisory: SNYK:JS-PROTOBUFJS-17362837...

10minions-engine (>=0.0.1, <=0.0.4), @1amageek/document-propagator (>=0.10.1, <=1.0.0) +1541 more potentially affected by CVE-2026-54271 via protobufjs-cli (>=1.0.0, <=1.2.2)

protobufjs-cli NPM version =1.0.0, =0.0.1, =0.10.1, =1.1.0, =0.4.0, =1.22.0, =6.2.36, =1.0.0-alpha.2, =1.8.0, =0.0.0-beta.0, =1.0.0, =1.0.1, =3.1.0 and more Source cves: CVE-2026-54271 Source advisory: OSV:GHSA-PR59-H9PH-3FR8...

@forwardimpact/libcodegen (>=0.1.47, <=0.1.52) potentially affected by CVE-2026-54271 via protobufjs-cli (2.0.1)

protobufjs-cli NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobufjs-cli and may be impacted: - @forwardimpact/libcodegen =0.1.47, =0.1.52 Source cves: CVE-2026-54271 Source advisory: SNYK:JS-PROTOBUFJSCLI-17362836...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1091 more potentially affected by CVE-2026-54271 via protobufjs (>=8.0.0, <=8.4.2)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-54271 Source advisory: SNYK:JS-PROTOBUFJS-17362837...