360shitu (0.1.0), 4icloud-engine (1.0.1) +10922 more potentially affected by CVE-2026-46625 via js-cookie (>=2.1.0, <=3.0.5)

js-cookie NPM version =2.1.0, =1.0.6, =0.1.0, =0.37.2, =0.37.2, =0.0.1, =1.0.0, =1.0.0-alpha, =1.0.0-alpha, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-46625 Source advisory: SNYK:JS-JSCOOKIE-17816999...

@hulumi/platform-patterns (0.0.0-bootstrap.0) potentially affected by unknown CVE via @hulumi/baseline (1.3.1)

@hulumi/baseline NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hulumi/baseline and may be impacted: - @hulumi/platform-patterns 0.0.0-bootstrap.0 Source cves: unknown CVE Source advisory: SNYK:JS-HULUMIBASELINE-17660557...

monerochan-stark (>=5.2.2, <=5.2.12), p3-circle (>=0.1.0, <=0.3.3-succinct) +20 more potentially affected by CVE-2026-46654 via p3-challenger (>=0.1.0, <=0.3.3-succinct)

p3-challenger CARGO version =0.1.0, =5.2.2, =0.1.0, =0.1.0, =0.1.0, =0.1.5-succinct, =0.1.0, =0.1.0, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.2.1 and more Source cves: CVE-2026-46654 Source advisory: OSV:GHSA-VJ64-RJF3-W3V7...

nimiq-account (0.1.0), nimiq-accounts (0.1.0) +15 more potentially affected by CVE-2026-46539 via nimiq-primitives (0.1.0)

nimiq-primitives CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-primitives and may be impacted: - nimiq-account 0.1.0 - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 -...

@alexaegis/svelte-config (>=0.15.0, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=1.2.0, <=2.1.0) +7 more potentially affected by unknown CVE via @sveltejs/kit (>=2.39.1, <=2.59.1)

@sveltejs/kit NPM version =2.39.1, =0.15.0, =1.2.0, =0.0.137, =0.1.0, =2.0.0, =5.0.0-alpha.1, =0.0.3-next.8, =0.3.2, =1.7.0, =1.15.1 Source cves: unknown CVE Source advisory: SNYK:JS-SVELTEJSKIT-16796279...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24206 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24206 Source advisory:...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24207 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24207 Source advisory:...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24210 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24210 Source advisory:...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24208 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24208 Source advisory:...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24209 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24209 Source advisory:...

dbgate-serve (>=7.1.3-alpha.3, <=7.1.8), dbmodel (>=7.1.3-alpha.3, <=7.1.8) potentially affected by CVE-2026-47670 via dbgate-api (>=7.1.3-alpha.3, <=7.1.8-alpha.7)

dbgate-api NPM version =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.8 Source cves: CVE-2026-47670 Source advisory: SNYK:JS-DBGATEAPI-17223765...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-46417 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-46417 Source advisory: OSV:GHSA-RFH7-FXQC-Q52V...

@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8) potentially affected by CVE-2026-46417 via @angular/platform-server (19.2.18)

@angular/platform-server NPM version 19.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @cosla/sensemaking-web-ui =1.0.5, =1.0.8 Source cves: CVE-2026-46417 Source advisory: OSV:GHSA-RFH7-FXQC-Q52V...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-46417 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-46417 Source advisory: OSV:GHSA-RFH7-FXQC-Q52V...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-46417 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-46417 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-16770437...

@libp2p/daemon (>=6.0.0-049bfa0fa, <=6.0.23-9c3c0b22a), @libp2p/daemon-server (>=9.0.0-049bfa0fa, <=9.0.23-9c3c0b22a) +4 more potentially affected by CVE-2026-45783 via @libp2p/kad-dht (>=16.0.0-049bfa0fa, <=16.2.5-5692f3f16)

@libp2p/kad-dht NPM version =16.0.0-049bfa0fa, =6.0.0-049bfa0fa, =9.0.0-049bfa0fa, =0.2.1, =0.2.1, =0.2.2 Source cves: CVE-2026-45783 Source advisory: SNYK:JS-LIBP2PKADDHT-16770413...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-46342 via nuxt (>=4.0.0-rc.0, <=4.4.4)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-46342 via nuxt (>=4.0.0-rc.0, <=4.4.4)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-46342 Source advisory: SNYK:JS-NUXT-16770418...

@geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4), nuxt (>=3.20.0, <=3.21.5) potentially affected by CVE-2026-46342 via @nuxt/nitro-server (>=3.20.0, <=3.21.5)

@nuxt/nitro-server NPM version =3.20.0, =9.13.1-rc.9, =3.20.0, =3.21.5 Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...

@geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4), nuxt (>=3.20.0, <=3.21.5) potentially affected by CVE-2026-46342 via @nuxt/nitro-server (>=3.20.0, <=3.21.5)

@nuxt/nitro-server NPM version =3.20.0, =9.13.1-rc.9, =3.20.0, =3.21.5 Source cves: CVE-2026-46342 Source advisory: SNYK:JS-NUXTNITROSERVER-16770417...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +78 more potentially affected by CVE-2026-46342 via nuxt (>=3.1.2, <=3.20.1)

nuxt NPM version =3.1.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +15 more potentially affected by CVE-2026-46342 via @nuxt/nitro-server (>=4.2.0, <=4.4.5)

@nuxt/nitro-server NPM version =4.2.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.2.2-depup.0, =10.0.2-rc.5, =1.1.11, =1.0.8, =0.4.5, =3.0.0-dev.27, =4.2.0, =0.5.0, =0.4.0, =0.1.13, =0.4.0, =1.0.0-alpha.11 and more Source cves: CVE-2026-46342 Source advisory: SNYK:JS-NUXTNITROSERVER-16770417...

@142vip/fairy-cli (>=0.0.3-alpha.19, <=0.0.3-alpha.28), @better-builds/turbo-tools (>=6.0.0, <=7.4.4) +9 more potentially affected by CVE-2026-45773 via turbo (>=2.0.1, <=2.9.12)

turbo NPM version =2.0.1, =0.0.3-alpha.19, =6.0.0, =1.0.0, =0.0.234, =0.3.0, =1.5.1, =0.3.2, =0.5.0, =1.1.0, =1.4.1 - kbc-cinema-custom-app 1.0.0 Source cves: CVE-2026-45773 Source advisory: OSV:GHSA-HCF7-66RW-9F5R...

@turbo/gen (>=2.3.4-canary.0, <=2.8.8-canary.3) potentially affected by CVE-2026-45772 via @turbo/workspaces (>=2.3.4, <=2.8.8-canary.3)

@turbo/workspaces NPM version =2.3.4, =2.3.4-canary.0, =2.8.8-canary.3 Source cves: CVE-2026-45772 Source advisory: OSV:GHSA-3QCW-2RHX-2726...

@turbo/gen (>=2.3.4-canary.0, <=2.8.8-canary.3) potentially affected by CVE-2026-45772 via @turbo/workspaces (>=2.3.4, <=2.8.8-canary.3)

@turbo/workspaces NPM version =2.3.4, =2.3.4-canary.0, =2.8.8-canary.3 Source cves: CVE-2026-45772 Source advisory: SNYK:JS-TURBOWORKSPACES-16773152...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M9P2-FXP5-V3FP...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q8X8-JRHJ-FH9P...

@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by CVE-2026-46424 via @budibase/backend-core (>=3.0.0, <=3.2.26)

@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-46424 Source advisory: SNYK:JS-BUDIBASEBACKENDCORE-16874300...

10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3384 more potentially affected by CVE-2026-45740 via protobufjs (>=7.0.0, <=7.5.6)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =2.0.2, =3.3.3 and more Source cves: CVE-2026-45740 Source advisory: OSV:GHSA-JGGG-4JG4-V7C6...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1021 more potentially affected by CVE-2026-45740 via protobufjs (>=8.0.0, <=8.0.3)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-45740 Source advisory: OSV:GHSA-JGGG-4JG4-V7C6...

parley-core (>=0.2.0, <=0.6.1), pqc-combo (0.1.0) +2 more potentially affected by unknown CVE via libcrux-ml-dsa (>=0.0.4, <=0.0.8)

libcrux-ml-dsa CARGO version =0.0.4, =0.2.0, =0.6.1 - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-FHVH-VW7H-9XF3...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-45669 via nuxt (>=4.0.0-rc.0, <=4.4.4)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-45669 Source advisory: OSV:GHSA-FX6J-W5W5-H468...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-45669 via nuxt (>=4.0.0-rc.0, <=4.4.4)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-45669 Source advisory: SNYK:JS-NUXT-16770149...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +53 more potentially affected by CVE-2026-45669 via nuxt (>=3.4.3, <=3.20.1)

nuxt NPM version =3.4.3, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.12.0-rc.7 and more Source cves: CVE-2026-45669 Source advisory: SNYK:JS-NUXT-16770149...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +53 more potentially affected by CVE-2026-45669 via nuxt (>=3.4.3, <=3.20.1)

nuxt NPM version =3.4.3, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.12.0-rc.7 and more Source cves: CVE-2026-45669 Source advisory: OSV:GHSA-FX6J-W5W5-H468...

agent-framework-azurefunctions (>=1.0.0b260519, <=1.0.0b260730), agent-framework-durabletask (>=0.0.1b260113, <=1.0.0b260730) +7 more potentially affected by unknown CVE via durabletask (1.9.0)

durabletask PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on durabletask and may be impacted: - agent-framework-azurefunctions =1.0.0b260519, =0.0.1b260113, =2.0.0b1, =0.1.0rc1, =0.0.1rc1.dev1567, =0.0.0.dev1, =0.0.0.dev1, =0.3.0,...

-fides-amor-et-lux (1.0.0), -price-checker (>=1.0.0, <=1.0.5) +33551 more potentially affected by CVE-2026-45736 via ws (>=8.0.0, <=8.20.0)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0-beta.3 - 0g-vibekit 0.1.0 - 0g-zksettlement-client 1.0.0 - 0wcc9yywcywy 1.0.0 and more Source cves: CVE-2026-45736 Source advisory: OSV:GHSA-58QX-3VCG-4XPX...

@addtodoist/twitter-autohook (2.2.0), @alessiodf/core-chameleon (0.0.1) +157 more potentially affected by CVE-2025-57282 via ngrok (4.3.3)

ngrok NPM version 4.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on ngrok and may be impacted: - @addtodoist/twitter-autohook 2.2.0 - @alessiodf/core-chameleon 0.0.1 - @archer-edu/qa-test-cli =0.1.0-alpha.60, =0.1.1, =3.8.2-rc.0, =3.0.0-next.34,...

5htp-airtable (>=0.0.1, <=0.1.2), @01/service-core (>=2.0.1, <=2.1.4) +635 more potentially affected by CVE-2025-57282 via ngrok (>=0.1.98, <=5.0.0-beta.2)

ngrok NPM version =0.1.98, =0.0.1, =2.0.1, =1.0.0, =1.0.0, =0.0.3, =1.0.7, =5.0.0, =1.0.0, =2.0.0, =0.6.0, =1.4.4, =1.0.6, =1.4.3 and more Source cves: CVE-2025-57282 Source advisory: SNYK:JS-NGROK-17363059...

@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +591 more potentially affected by CVE-2026-8159 via multiparty (>=4.0.0, <=4.2.3)

multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8159 Source advisory: OSV:GHSA-65X3-RW7Q-GX94...

@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +591 more potentially affected by CVE-2026-8159 via multiparty (>=4.0.0, <=4.2.3)

multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8159 Source advisory: SNYK:JS-MULTIPARTY-16790693...

@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +591 more potentially affected by CVE-2026-8162 via multiparty (>=4.0.0, <=4.2.3)

multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8162 Source advisory: OSV:GHSA-XH3C-6GCQ-G4RV...

@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +591 more potentially affected by CVE-2026-8161 via multiparty (>=4.0.0, <=4.2.3)

multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8161 Source advisory: SNYK:JS-MULTIPARTY-16790691...

@aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9), @aaa-backend-stack/image-service (>=1.16.0, <=1.16.9) +591 more potentially affected by CVE-2026-8161 via multiparty (>=4.0.0, <=4.2.3)

multiparty NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.2, =0.1.155, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =0.58.14, =0.1.0, =1.0.0, =2.101.2 and more Source cves: CVE-2026-8161 Source advisory: OSV:GHSA-QXCH-WHHJ-8956...

@aws/nx-plugin (>=0.105.0, <=1.0.0-rc.2), @breadstone-infrastructure/nx-tasks (>=0.0.237, <=0.0.289) +46 more potentially affected by CVE-2026-45149 via brace-expansion (>=5.0.2, <=5.0.5)

brace-expansion NPM version =5.0.2, =0.105.0, =0.0.237, =0.0.237, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =23.0.0-pr.35465.2bc2643 and more Source cve...

@aws/nx-plugin (>=0.105.0, <=1.0.0-rc.2), @breadstone-infrastructure/nx-tasks (>=0.0.237, <=0.0.289) +46 more potentially affected by CVE-2026-45149 via brace-expansion (>=5.0.2, <=5.0.5)

brace-expansion NPM version =5.0.2, =0.105.0, =0.0.237, =0.0.237, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =22.7.0-beta.11, =23.0.0-pr.35465.2bc2643 and more Source cve...

@kaspernj/api-maker (>=1.0.68, <=1.0.2174), @kaspernj/api-maker-bootstrap (>=1.0.40, <=1.0.216) +3 more potentially affected by CVE-2026-46510 via form-data-objectizer (1.0.2)

form-data-objectizer NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on form-data-objectizer and may be impacted: - @kaspernj/api-maker =1.0.68, =1.0.40, =1.0.14, =1.0.0, =0.1.0, =0.1.2 Source cves: CVE-2026-46510 Source advisory:...

@kilocode/plugin (>=7.0.27, <=7.0.46) potentially affected by CVE-2026-8765 via @kilocode/sdk (>=7.0.27, <=7.0.46)

@kilocode/sdk NPM version =7.0.27, =7.0.27, =7.0.46 Source cves: CVE-2026-8765 Source advisory: SNYK:JS-KILOCODESDK-17878140...

org.webjars.npm:adal-node (0.1.28), org.webjars.npm:angular-lock (2.0.3) +82 more potentially affected by CVE-2026-8723 via org.webjars.npm:qs (>=0.6.6, <=6.15.3)

org.webjars.npm:qs MAVEN version =0.6.6, =8.4.0, =1.4.3, =1.5.2, =4.14.0, =4.18.1 and more Source cves: CVE-2026-8723 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16721867...

@airalogy/airalogy-engine (>=0.0.1, <=0.0.4) potentially affected by CVE-2026-46703 via @boxlite-ai/boxlite (0.8.2)

@boxlite-ai/boxlite NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @boxlite-ai/boxlite and may be impacted: - @airalogy/airalogy-engine =0.0.1, =0.0.4 Source cves: CVE-2026-46703 Source advisory: SNYK:JS-BOXLITEAIBOXLITE-16787373...