@amitport/useful (>=0.5.0, <=0.5.2), @bb-cli/bb-test-plugin-ngmock (1.5.8) +688 more potentially affected by unknown CVE via angular (>=1.0.8, <=1.5.11)

angular NPM version =1.0.8, =0.5.0, =0.2.7, =1.0.21, =0.2.1, =1.10.5, =0.2.0, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.0, =1.0.0, =3.0.2, =4.5.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-28HP-FGCR-2R4H...

@peak-stone/vue-admin (>=1.0.1, <=2.1.1) potentially affected by CVE-2019-10745 via assign-deep (1.0.0)

assign-deep NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on assign-deep and may be impacted: - @peak-stone/vue-admin =1.0.1, =2.1.1 Source cves: CVE-2019-10745 Source advisory: SNYK:JS-ASSIGNDEEP-450211...

88slot-ap (1.0.0), @brainsights/models (>=2.1.0, <=3.3.0) +21 more potentially affected by unknown CVE via squel (>=5.0.4, <=5.12.2)

squel NPM version =5.0.4, =2.1.0, =1.1.2, =0.0.1, =1.0.2, =0.1.1, =0.1.1, =0.0.2, =0.0.2, =0.0.31, =0.0.4, =1.0.0, =1.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4QHX-G9WP-G9M6...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +16174 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.13.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =2.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8J8C-7JFH-H6HX...

@dequelabs/amaze-tdd (>=0.2.9, <=0.3.2), @holisticon/angularjs-common (>=0.2.0-23, <=0.5.3) +15 more potentially affected by CVE-2016-10579 via chromedriver (>=2.10.0, <=2.25.1)

chromedriver NPM version =2.10.0, =0.2.9, =0.2.0-23, =0.2.6, =0.0.5, =0.0.10, =1.3.2, =0.0.1, =0.1.0, =1.0.0, =1.3.9, =0.0.1, =1.4.23, =4.0.0 - testarmada-performance-reporter 1.1.1 and more Source cves: CVE-2016-10579 Source advisory: OSV:GHSA-JH5W-6964-X5CF...

strider (>=1.4.0, <=1.4.5) potentially affected by CVE-2016-10611 via strider-sauce (0.6.2)

strider-sauce NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on strider-sauce and may be impacted: - strider =1.4.0, =1.4.5 Source cves: CVE-2016-10611 Source advisory: OSV:GHSA-8GF4-PCJ6-54RP...

10er10 (0.23.0), 1405-authtokens (>=1.0.1, <=1.0.5) +8058 more potentially affected by CVE-2016-10539 via negotiator (>=0.2.3, <=0.6.0)

negotiator NPM version =0.2.3, =1.0.1, =1.0.3, =1.0.2, =1.0.0, =0.0.1-alpha, =0.2.0, =0.0.1, =0.0.1, =1.0.0, =1.2.9 and more Source cves: CVE-2016-10539 Source advisory: OSV:GHSA-7MC5-CHHP-FMC3...

@angular/bazel (>=5.0.0-beta.5, <=7.0.0), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +123 more potentially affected by CVE-2018-3738 via protobufjs (>=5.0.0, <=5.0.2)

protobufjs NPM version =5.0.0, =5.0.0-beta.5, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =0.2.2-20180615211533, =0.2.4-20180621213746, =0.1.0-20180815155955, =0.0.6, =1.2.1, =1.0.2, =5.0.1, =1.3.1, =0.0.7, =1.3.0, =0.0.1, =0.0.1, =0.0.12 and more Source cves: CVE-2018-3738 Source...

libsbmlsim (>=0.0.1, <=0.0.2), wa-bisnis-bot (1.0.0) potentially affected by CVE-2016-10642 via cmake (>=0.0.1, <=0.0.4)

cmake NPM version =0.0.1, =0.0.1, =0.0.2 - wa-bisnis-bot 1.0.0 Source cves: CVE-2016-10642 Source advisory: OSV:GHSA-4J59-HFW6-6W7H...

@jamie452/open-graph-scraper (2.3.2), bind-rest (>=1.4.0, <=1.4.6) +2 more potentially affected by CVE-2017-16098 via charset (1.0.0)

charset NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on charset and may be impacted: - @jamie452/open-graph-scraper 2.3.2 - bind-rest =1.4.0, =2.2.2, =2.5.4 - request-url-open-graph 1.1.2 Source cves: CVE-2017-16098 Source advisory:...

@folk-org/js-dav (>=1.0.0, <=1.0.3), @lettercms/models (>=0.0.1, <=0.0.12) +187 more potentially affected by CVE-2017-16082 via pg (>=4.0.0, <=4.5.6)

pg NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.15 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@yihangho/express-admin (1.3.2-2), analyst (>=0.0.3, <=0.0.8) +58 more potentially affected by CVE-2017-16082 via pg (>=2.0.0, <=2.11.1)

pg NPM version =2.0.0, =0.0.3, =0.1.0, =0.0.1, =0.0.62, =0.0.1, =0.0.1, =1.0.1, =0.0.1, =0.1.0, =0.0.1, =0.0.3 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@launchql/cli (>=0.3.34, <=0.4.44), @launchql/db-testing (>=0.0.9, <=0.1.8) +8 more potentially affected by CVE-2017-16082 via pg (>=6.4.0, <=6.4.1)

pg NPM version =6.4.0, =0.3.34, =0.0.9, =0.0.4, =1.0.0, =0.6.22, =0.6.12, =1.0.31, =1.0.61 Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@arpinum/postgres (>=4.0.0-beta12, <=4.0.0-beta14), appointmed-epr-template-common (>=0.0.46, <=0.0.65) +9 more potentially affected by CVE-2017-16082 via pg (>=6.2.2, <=6.2.3)

pg NPM version =6.2.2, =4.0.0-beta12, =0.0.46, =0.0.35, =0.13.3, =0.0.1, =0.0.1, =1.0.0, =1.0.3 - pg-promise-strict 0.3.4 - pgo 0.2.1 Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@starboard/models (>=2.0.0, <=3.0.1), @starboard/shared-backend (3.0.0) +24 more potentially affected by CVE-2017-16082 via pg (>=6.0.0, <=6.0.4)

pg NPM version =6.0.0, =2.0.0, =0.6.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =2.0.2, =1.3.1, =0.0.4, =0.1.0, =0.2.0, =0.6.0 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@accoio/react-pdf-highlighter (>=2.0.0, <=2.0.1), @activelylearn/react-pdf (>=2.5.0, <=2.5.2) +118 more potentially affected by CVE-2018-5158 via pdfjs-dist (>=2.0.104, <=2.0.550)

pdfjs-dist NPM version =2.0.104, =2.0.0, =2.5.0, =1.0.32, =1.2.0, =1.0.9, =15.0.0, =6.0.0, =39.0.0, =7.0.0, =110.0.0, =7.0.0, =6.0.0, =3.0.6, =8.0.0, =9.0.0, =9.11.13 and more Source cves: CVE-2018-5158 Source advisory: SNYK:JS-PDFJSDIST-469200...

421752593pro (5.6.0), @pnpm/default-fetcher (>=0.3.0, <=0.3.2) +8 more potentially affected by CVE-2018-7651 via ssri (>=5.0.0, <=5.2.1)

ssri NPM version =5.0.0, =0.3.0, =0.3.4, =1.19.6, =1.23.2, =1.4.9, =0.7.12, =0.7.13, =2.2.2 Source cves: CVE-2018-7651 Source advisory: OSV:GHSA-325J-24F4-QV5X...

@awearsolutions/node-red (>=0.17.5, <=0.17.6-rc.1), @device-management/device-base (>=0.0.1, <=0.1.0) +71 more potentially affected by CVE-2017-10910 via mqtt (>=2.0.1, <=2.14.0)

mqtt NPM version =2.0.1, =0.17.5, =0.0.1, =1.0.0, =1.0.0, =4.0.0-beta.15, =1.0.76, =1.0.2, =0.1.1, =0.0.5, =1.0.0, =0.4.1, =2.0.0, =2.0.3, =2.0.4 and more Source cves: CVE-2017-10910 Source advisory: OSV:GHSA-H9MJ-FGHC-664W...

attester (>=1.1.0, <=1.2.0), awsboxen (>=0.1.0, <=0.5.1) +7 more potentially affected by CVE-2013-4660 via js-yaml (>=2.0.1, <=2.0.4)

js-yaml NPM version =2.0.1, =1.1.0, =0.1.0, =0.13.13, =0.5.0, =0.8.3, =0.0.2, =0.1.8, =0.0.1, =0.2.4 Source cves: CVE-2013-4660 Source advisory: OSV:GHSA-XXVW-45RP-3MJ2...

abstract-boot (>=0.2.0-beta.4, <=0.2.0-beta.7), ace-test-lib (0.1.0) +712 more potentially affected by unknown CVE via rust-crypto (0.2.36)

rust-crypto CARGO version 0.2.36 is affected by a known vulnerability. The following packages have a transitive dependency on rust-crypto and may be impacted: - abstract-boot =0.2.0-beta.4, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0, =0.8.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more...

baal (>=0.1.0, <=0.4.2), bit_crusher (0.2.0) +20 more potentially affected by CVE-2016-10933 via portaudio (>=0.4.19, <=0.8.0)

portaudio CARGO version =0.4.19, =0.1.0, =0.1.0, =0.0.1, =0.2.0, =0.1.0, =0.3.0, =0.3.0, =0.5.0, =0.2.0, =0.4.0, =0.1.0, =0.2.0, =0.6.2, =0.11.0 and more Source cves: CVE-2016-10933 Source advisory: OSV:RUSTSEC-2016-0003...

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +12 more potentially affected by CVE-2026-70606 via electron (>=40.0.0, <=40.10.2)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =0.15.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-70606 Source advisory: OSV:GHSA-R4W5-6PFG-JXP5...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +928 more potentially affected by CVE-2026-13697 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.0.5 - @agnocon/connector-http 0.1.0 and more Source cves: CVE-2026-13697 Source advisory:...

@a-rt-works/auth0-deploy-cli (3.3.3), @acknow-srl/express-openid (>=1.0.0, <=1.0.1) +543 more potentially affected by CVE-2026-42264 +1 more via axios (>=0.31.1, <=0.32.0)

axios NPM version =0.31.1, =1.0.0, =0.0.1, =0.0.2, =1.3.2, =0.2.0, =0.0.2-beta.0, =2.0.14, =0.5.12, =1.0.0, =1.0.1, =32.0.0, =0.2.4, =0.3.0 and more Source cves: CVE-2026-42264, CVE-2026-67320 Source advisory: SNYK:JS-AXIOS-18065351...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62222 via openclaw (>=2026.3.22, <=2026.5.20)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62222 Source advisory: SNYK:JS-OPENCLAW-18017835...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62224 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62224 Source advisory: SNYK:JS-OPENCLAW-18017831...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @agentuity/evals (>=0.0.104, <=2.0.30) +427 more potentially affected by CVE-2026-50289 via systeminformation (>=5.0.6, <=5.31.6)

systeminformation NPM version =5.0.6, =1.17.6-next.0, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.1.1, =0.1.1, =4.1.0-rc.4, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =4.260426.2, =4.260510.3 and more Source cves: CVE-2026-50289 Source advisory:...

liteyukibot-v7-runtime-astrbot (>=0.1.0a1, <=0.1.0a7) potentially affected by CVE-2026-15500 via astrbot (>=4.27.2, <=4.27.5)

astrbot PYPI version =4.27.2, =0.1.0a1, =0.1.0a7 Source cves: CVE-2026-15500 Source advisory: SNYK:PYTHON-ASTRBOT-17954638...

@alessiodf/core-chameleon (0.0.1), @arkecosystem/core (>=3.0.0-alpha.0, <=3.13.0) +142 more potentially affected by CVE-2026-59879 via immutable (>=5.0.0, <=5.1.6)

immutable NPM version =5.0.0, =3.0.0-alpha.0, =3.0.0-alpha.0, =3.0.0-alpha.0, =3.0.0-alpha.0, =3.0.0-alpha.0, =3.0.0-alpha.6, =3.9.0-rc.0, =3.0.0-alpha.0, =3.0.0-alpha.0, =9.1.1-ruixiang.1, =0.1.0, =1.0.6 and more Source cves: CVE-2026-59879 Source advisory: SNYK:JS-IMMUTABLE-17900573...

@0xwork/connect (>=0.1.0, <=0.1.9), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +916 more potentially affected by CVE-2026-59871 via tar (>=7.0.0, <=7.5.17)

tar NPM version =7.0.0, =0.1.0, =0.1.8-fix.3, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.4.23-zh, =0.1.0, =0.1.1, =0.1.1, =2026.4.4, =0.59.0, =0.64.0 - @aivibeclaw/speech-core 2026.6.10 and more Source cves: CVE-2026-59871 Source advisory: SNYK:JS-TAR-17909104...

@sqlite-list/sql-creator (1.0.7) potentially affected by unknown CVE via @sqlite-list/schema-generator (1.0.2)

@sqlite-list/schema-generator NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sqlite-list/schema-generator and may be impacted: - @sqlite-list/sql-creator 1.0.7 Source cves: unknown CVE Source advisory:...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35355 via uu_install (>=0.0.14, <=0.0.16)

uuinstall CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35355 Source advisory: OSV:GHSA-239G-2685-54X3...

vegas-chat (>=2.10.0, <=2.16.2) potentially affected by CVE-2026-49353 via 9router (0.5.69)

9router NPM version 0.5.69 is affected by a known vulnerability. The following packages have a transitive dependency on 9router and may be impacted: - vegas-chat =2.10.0, =2.16.2 Source cves: CVE-2026-49353 Source advisory: SNYK:JS-9ROUTER-17817940...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-53811 via openclaw (>=2026.3.22, <=2026.5.6)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53811 Source advisory: OSV:GHSA-7HXM-F538-3XP6...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +23 more potentially affected by CVE-2026-53813 via openclaw (>=2026.3.22, <=2026.4.24)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 and more Source cves: CVE-2026-53813 Source advisory: OSV:GHSA-V8CX-933X-R976...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-32905 via openclaw (>=2026.3.22, <=2026.5.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-32905 Source advisory: OSV:GHSA-XR4F-MJXJ-W6W5...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-35673 via openclaw (>=2026.3.22, <=2026.4.26)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-35673 Source advisory: OSV:GHSA-HCM3-8F6R-6XWG...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-34507 via openclaw (>=2026.3.22, <=2026.4.26)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-34507 Source advisory: OSV:GHSA-W4V6-G3WM-W36C...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-53808 via openclaw (>=2026.3.22, <=2026.5.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53808 Source advisory: OSV:GHSA-CQWV-9QJX-VXW2...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-32906 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-32906 Source advisory: OSV:GHSA-WV26-J37Q-2G7P...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53817 via openclaw (>=2026.3.22, <=2026.5.20)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53817 Source advisory: OSV:GHSA-CHR9-M4Q2-76HW...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53810 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53810 Source advisory: OSV:GHSA-V6R2-JH58-XX6W...

@donmai/core (>=0.9.0, <=0.9.5), @donmai/mcp-server (>=0.9.0, <=0.9.5) +14 more potentially affected by CVE-2026-48815 via @sigstore/verify (>=3.0.0, <=3.1.0)

@sigstore/verify NPM version =3.0.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.8.62, =0.1.1, =0.0.0, =0.0.4 and more Source cves: CVE-2026-48815 Source advisory: SNYK:JS-SIGSTOREVERIFY-17817052...

03-api-solid (>=1.0.0, <=1.1.2), 0uth (>=1.0.5, <=1.2.1) +2932 more potentially affected by CVE-2026-13676 via fast-uri (>=2.4.6, <=3.1.2)

fast-uri NPM version =2.4.6, =1.0.0, =1.0.5, =1.0.3, =0.5.2-alpha-20231022145212-c0afe8d, =0.1.4-alpha-20231022145212-c0afe8d, =0.1.4-alpha-20231022145212-c0afe8d, =0.6.0, =0.2.0, =0.2.0, =0.0.1-alpha-20240310235646-1ea207b758e2c4cacf2c0f592448d86a94ff5ba4, =0.3.1, =0.3.4 - @adbl/cartridg...

hermes-next (>=0.1.0, <=0.7.1), openviking-curator (0.7.0) +1 more potentially affected by CVE-2026-13507 via openviking (>=0.3.24, <=0.4.17.1)

openviking PYPI version =0.3.24, =0.1.0, =0.7.1 - openviking-curator 0.7.0 - vikingbot 0.1.3 Source cves: CVE-2026-13507 Source advisory: SNYK:PYTHON-OPENVIKING-17751095...

@forgeax/game (>=0.3.0, <=0.3.4), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +7 more potentially affected by CVE-2026-59195 via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.2.4, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: CVE-2026-59195 Source advisory: SNYK:JS-PNPM-17660535...

0.extends.wechat (>=1.0.51, <=1.0.65), 007putra-my-bot (1.1.1) +17639 more potentially affected by CVE-2026-56876 via extract-zip (>=2.0.0, <=2.0.1)

extract-zip NPM version =2.0.0, =1.0.51, =0.0.1, =1.0.0, =0.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.4 and more Source cves: CVE-2026-56876 Source advisory: OSV:GHSA-JMR9-QJV8-65GV...

@diia-inhouse/i18n (>=2.8.2, <=3.1.16), @genie23/electron-base (>=0.0.4-alpha, <=0.0.225) +56 more potentially affected by CVE-2026-48713 via i18next-fs-backend (>=2.0.0, <=2.6.5)

i18next-fs-backend NPM version =2.0.0, =2.8.2, =0.0.4-alpha, =3.0.0-rc.0, =7.1.2, =2.4.2, =1.1.8, =1.1.8, =2.4.2, =2.4.2, =2.6.9, =2.4.2, =2.4.2, =2.4.2, =2.4.2, =2.5.5 and more Source cves: CVE-2026-48713 Source advisory: OSV:GHSA-2933-Q333-QG83...

abe (0.3.0-rc1), annembed (>=0.0.3, <=0.0.7) +80 more potentially affected by unknown CVE via anyhow (>=1.0.13, <=1.0.102)

anyhow CARGO version =1.0.13, =0.0.3, =0.0.5, =0.1.4, =0.5.0, =0.1.15, =0.2.1, =0.2.0, =0.2.0, =0.2.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0190...

@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by CVE-2026-54353 via @budibase/backend-core (>=3.0.0, <=3.2.26)

@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-54353 Source advisory: OSV:GHSA-GFQ7-5X4G-3XHF...