9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +758 more potentially affected by unknown CVE via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: unknown CVE Source advisory:...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +2283 more potentially affected by CVE-2026-44902 via @opentelemetry/exporter-prometheus (>=0.9.0, <=0.216.0)

@opentelemetry/exporter-prometheus NPM version =0.9.0, =0.1.0, =0.1.0-dev.00aaa03, =0.1.1, =0.1.0, =0.0.1, =1.0.21, =0.0.1, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.0.68 and more Source cves: CVE-2026-44902 Source advisor...

a1 (>=1.0.1, <=1.0.2), apfsds-protocol (>=0.1.0, <=0.4.0) +113 more potentially affected by unknown CVE via rkyv (0.8.2)

rkyv CARGO version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on rkyv and may be impacted: - a1 =1.0.1, =0.1.0, =0.9.0, =0.1.0, =0.2.1, =0.1.0, =0.4.0, =0.9.0, =0.5.0, =0.5.0, =2.0.0-alpha.1, =0.1.2, =0.2.24, =0.2.27 and more Source cves: unkno...

a1 (>=1.0.1, <=1.0.2), apfsds-protocol (>=0.1.0, <=0.4.0) +113 more potentially affected by unknown CVE via rkyv (0.8.2)

rkyv CARGO version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on rkyv and may be impacted: - a1 =1.0.1, =0.1.0, =0.9.0, =0.1.0, =0.2.1, =0.1.0, =0.4.0, =0.9.0, =0.5.0, =0.5.0, =2.0.0-alpha.1, =0.1.2, =0.2.24, =0.2.27 and more Source cves: unkno...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +591 more potentially affected by CVE-2026-44458 via hono (>=4.0.0, <=4.12.17)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.0.1, =0.0.12 and more Source cves: CVE-2026-44458 Source advisory: OSV:GHSA-QP7P-654G-CW7P...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +591 more potentially affected by CVE-2026-44459 via hono (>=4.0.0, <=4.12.17)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.0.1, =0.0.12 and more Source cves: CVE-2026-44459 Source advisory: OSV:GHSA-HM8Q-7F3Q-5F36...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +869 more potentially affected by CVE-2026-44459 via hono (>=1.6.4, <=4.12.17)

hono NPM version =1.6.4, =0.1.8-fix.3, =0.0.2, =0.3.1, =5.0.0, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.28.7 and more Source cves: CVE-2026-44459 Source advisory: SNYK:JS-HONO-16624529...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +591 more potentially affected by CVE-2026-44457 via hono (>=4.0.0, <=4.12.17)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.1.4, =0.0.1, =0.0.12 and more Source cves: CVE-2026-44457 Source advisory: OSV:GHSA-P77W-8QQV-26RM...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +869 more potentially affected by CVE-2026-44457 via hono (>=2.1.4, <=4.12.17)

hono NPM version =2.1.4, =0.1.8-fix.3, =0.0.2, =0.3.1, =5.0.0, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.2.0, =0.17.0, =0.28.7 and more Source cves: CVE-2026-44457 Source advisory: SNYK:JS-HONO-16624532...

@2kk/miniprogram-ci (>=0.0.2, <=0.0.8), @agilejs/cli (1.0.0) +329 more potentially affected by CVE-2026-44728 via @babel/plugin-transform-modules-systemjs (>=7.12.1, <=7.29.0)

@babel/plugin-transform-modules-systemjs NPM version =7.12.1, =0.0.2, =1.0.0, =7.21.4-esm.2, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.74, =1.0.0, =1.1.5 and more Source cves: CVE-2026-44728 Source advisory: SNYK:JS-BABELPLUGINTRANSFORMMODULESSYSTEMJS-16624576...

@2kk/miniprogram-ci (>=0.0.2, <=0.0.8), @agilejs/cli (1.0.0) +329 more potentially affected by CVE-2026-44728 via @babel/plugin-transform-modules-systemjs (>=7.12.1, <=7.29.0)

@babel/plugin-transform-modules-systemjs NPM version =7.12.1, =0.0.2, =1.0.0, =7.21.4-esm.2, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.74, =1.0.0, =1.1.5 and more Source cves: CVE-2026-44728 Source advisory: OSV:GHSA-FV7C-FP4J-7GWP...

@acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94), @acmekit/cli (>=2.13.1, <=2.13.94) +108 more potentially affected by CVE-2026-44680 via @mikro-orm/knex (>=6.0.0, <=6.6.13-dev.5)

@mikro-orm/knex NPM version =6.0.0, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =0.5.0, =0.1.29, =0.5.0, =0.6.8 and more Source cves: CVE-2026-44680 Source advisory: OSV:GHSA-CFW5-68C4-FFQP...

@acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94), @acmekit/cli (>=2.13.1, <=2.13.94) +108 more potentially affected by CVE-2026-44680 via @mikro-orm/knex (>=6.0.0, <=6.6.13-dev.5)

@mikro-orm/knex NPM version =6.0.0, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =0.5.0, =0.1.29, =0.5.0, =0.6.8 and more Source cves: CVE-2026-44680 Source advisory: SNYK:JS-MIKROORMKNEX-16624725...

@adlanarifzr/mikro-orm-migrations (>=7.0.5-next.0, <=7.0.9), @mikro-orm/entity-generator (>=7.0.0-dev.97, <=7.0.13) +10 more potentially affected by CVE-2026-44680 via @mikro-orm/sql (>=7.0.0, <=7.0.13-dev.16)

@mikro-orm/sql NPM version =7.0.0, =7.0.5-next.0, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.316, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.13 - @reldens/cms 0.61.0 - @reldens/storage 0.93.0 Source cves: CVE-2026-44680 Source advisory:...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +4 more potentially affected by CVE-2026-6322 via fast-uri (>=3.0.1, <=3.1.0)

fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =2.2.0, =2.3.1 Source cves: CVE-2026-6322 Source advisory: OSV:GHSA-V39H-62P7-JPJC...

@datastream/validate (>=0.0.4, <=0.0.38), @dearmrzhang/customs-mcp-server (>=0.1.2, <=1.1.0) +15 more potentially affected by CVE-2026-6322 via fast-uri (>=2.1.0, <=2.3.0)

fast-uri NPM version =2.1.0, =0.0.4, =0.1.2, =0.0.1, =0.0.1, =3.1.0-rc.0, =0.2.0, =0.2.0, =0.2.0, =0.0.1, =0.0.0, =1.0.0, =3.0.0, =1.7.0, =1.8.0 and more Source cves: CVE-2026-6322 Source advisory: OSV:GHSA-V39H-62P7-JPJC...

aurora-cycler-manager (>=0.10.0, <=0.11.4), fusion-tools (>=3.6.19, <=3.6.90) +9 more potentially affected by CVE-2026-38360 via dash-uploader (>=0.6.0, <=0.7.0a2)

dash-uploader PYPI version =0.6.0, =0.10.0, =3.6.19, =0.0.11, =0.0.30, =0.2.4b0, =0.0.50.0, =0.1.7.3, =2.0.1, =0.2.0, =0.4.1 Source cves: CVE-2026-38360 Source advisory: SNYK:PYTHON-DASHUPLOADER-16635838...

aurora-cycler-manager (>=0.10.0, <=0.11.4), fusion-tools (>=3.6.19, <=3.6.90) +9 more potentially affected by CVE-2026-38361 via dash-uploader (>=0.6.0, <=0.7.0a2)

dash-uploader PYPI version =0.6.0, =0.10.0, =3.6.19, =0.0.11, =0.0.30, =0.2.4b0, =0.0.50.0, =0.1.7.3, =2.0.1, =0.2.0, =0.4.1 Source cves: CVE-2026-38361 Source advisory: SNYK:PYTHON-DASHUPLOADER-16635848...

@activepieces/piece-amazon-textract (>=0.2.0, <=0.3.0), @activepieces/piece-salesforce (0.7.2) +4 more potentially affected by CVE-2026-44665 via fast-xml-builder (>=1.1.1, <=1.1.4)

fast-xml-builder NPM version =1.1.1, =0.2.0, =0.2.1, =0.0.4, =10.4.0, =10.5.0 Source cves: CVE-2026-44665 Source advisory: OSV:GHSA-5WM8-GMM8-39J9...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-44008 via vm2 (>=3.0.0, <=3.11.1)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

bitcoin-harness (0.1.0), bitcoin_rpc_client (>=0.5.0, <=0.6.1) +82 more potentially affected by CVE-2026-44662 via openssl (>=0.10.7, <=0.10.68)

openssl CARGO version =0.10.7, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.0.3, =0.1.24, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2026-44662 Source advisory: OSV:GHSA-XV59-967R-8726...

mailman-web (>=0.0.5, <=0.0.9) potentially affected by CVE-2026-44742 via postorius (>=1.3.10, <=1.3.13)

postorius PYPI version =1.3.10, =0.0.5, =0.0.9 Source cves: CVE-2026-44742 Source advisory: SNYK:PYTHON-POSTORIUS-16635974...

artemproject2 (>=1.2.1, <=1.8.8) potentially affected by CVE-2025-63703 via parse-ini (1.0.6)

parse-ini NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on parse-ini and may be impacted: - artemproject2 =1.2.1, =1.8.8 Source cves: CVE-2025-63703 Source advisory: SNYK:JS-PARSEINI-16787377...

stats-fr-emarque-basketball-extractor (>=1.0.0, <=1.0.2) potentially affected by CVE-2025-63705 via node-ts-ocr (1.0.15)

node-ts-ocr NPM version 1.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on node-ts-ocr and may be impacted: - stats-fr-emarque-basketball-extractor =1.0.0, =1.0.2 Source cves: CVE-2025-63705 Source advisory: SNYK:JS-NODETSOCR-16787371...

@accordproject/cicero-cli (>=0.23.0-20220318211856, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.23.0-20220318211856, <=0.24.1-20230627140514) +173 more potentially affected by CVE-2026-44007 via vm2 (>=3.9.6, <=3.10.5)

vm2 NPM version =3.9.6, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220317205016, =0.23.0-20220317205016, =0.23.0-20220317205016, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =0.0.2, =1.0.2, =3.0.34 and more Source...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-43998 via vm2 (>=3.0.0, <=3.10.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-44003 via vm2 (>=3.0.0, <=3.10.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-44003 via vm2 (>=3.0.0, <=3.10.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-44004 via vm2 (>=3.0.0, <=3.10.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-44001 via vm2 (>=3.0.0, <=3.10.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-44001 via vm2 (>=3.0.0, <=3.10.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-44001 via org.webjars.npm:vm2 (3.9.19)

org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...

@xapp/cli (1.8.11), stentor (>=1.68.30, <=1.72.1) +9 more potentially affected by CVE-2026-43999 via vm2 (3.10.5)

vm2 NPM version 3.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on vm2 and may be impacted: - @xapp/cli 1.8.11 - stentor =1.68.30, =1.68.30, =1.68.30, =1.68.30, =1.68.30, =1.68.30, =1.68.30, =1.68.30, =1.68.30, =1.68.30, =1.72.1 Source cves:...

org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-43999 via org.webjars.npm:vm2 (3.9.19)

org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...

@accordproject/cicero-cli (>=0.23.0-20220318211856, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.23.0-20220318211856, <=0.24.1-20230627140514) +173 more potentially affected by CVE-2026-44005 via vm2 (>=3.9.6, <=3.10.5)

vm2 NPM version =3.9.6, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220317205016, =0.23.0-20220317205016, =0.23.0-20220317205016, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =0.0.2, =1.0.2, =3.0.34 and more Source...

org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-44005 via org.webjars.npm:vm2 (3.9.19)

org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...

org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-43997 via org.webjars.npm:vm2 (3.9.19)

org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...

sar-core (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via imageproc (0.25.0)

imageproc CARGO version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on imageproc and may be impacted: - sar-core =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-W5P8-4JCX-2J6R...

annatar (>=0.4.3, <=0.5.8), ansi2png-rs (>=0.1.0, <=0.1.1) +63 more potentially affected by unknown CVE via imageproc (>=0.6.1, <=0.22.0)

imageproc CARGO version =0.6.1, =0.4.3, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W5P8-4JCX-2J6R...

sar-core (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via imageproc (0.25.0)

imageproc CARGO version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on imageproc and may be impacted: - sar-core =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-QG8R-F7X3-25F7...

annatar (>=0.4.3, <=0.5.8), ansi2png-rs (>=0.1.0, <=0.1.1) +63 more potentially affected by unknown CVE via imageproc (>=0.6.1, <=0.22.0)

imageproc CARGO version =0.6.1, =0.4.3, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QG8R-F7X3-25F7...

sar-core (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via imageproc (0.25.0)

imageproc CARGO version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on imageproc and may be impacted: - sar-core =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-5QV7-J6W5-FR4M...

acme-validation-propagation (>=0.1.5, <=0.1.8), agnostic (>=0.2.1, <=0.2.6) +37 more potentially affected by unknown CVE via hickory-proto (>=0.24.4, <=0.25.0-alpha.5)

hickory-proto CARGO version =0.24.4, =0.1.5, =0.2.1, =0.24.0, =0.9.3, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.2.6, =0.2.8 - getip 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q2QQ-HMJ6-3WPP...

@caliperai/caliper (>=0.2.0, <=0.3.0), @doccov/api (>=0.6.0, <=0.6.4) +12 more potentially affected by CVE-2026-44479 via vercel (>=50.41.0, <=51.8.0)

vercel NPM version =50.41.0, =0.2.0, =0.6.0, =0.3.0-rc.2, =3.10.3, =1.1.1, =1.0.1, =1.0.2, =0.1.19, =0.4.0-rc.3, =1.0.0, =2.0.0 Source cves: CVE-2026-44479 Source advisory: SNYK:JS-VERCEL-16638653...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +544 more potentially affected by CVE-2026-44456 via hono (>=4.0.0, <=4.12.15)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: CVE-2026-44456 Source advisory: OSV:GHSA-9VQF-7F2P-GF9V...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +544 more potentially affected by CVE-2026-44456 via hono (>=4.0.0, <=4.12.15)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: CVE-2026-44456 Source advisory: SNYK:JS-HONO-16438966...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +544 more potentially affected by CVE-2026-44455 via hono (>=4.0.0, <=4.12.15)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: CVE-2026-44455 Source advisory: SNYK:JS-HONO-16438965...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +544 more potentially affected by CVE-2026-44455 via hono (>=4.0.0, <=4.12.15)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: CVE-2026-44455 Source advisory: OSV:GHSA-69XW-7HCM-H432...

create-momentum-app (>=0.1.2, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-44437 via @angular/ssr (>=21.1.2, <=21.2.7)

@angular/ssr NPM version =21.1.2, =0.1.2, =0.0.2, =0.0.3 Source cves: CVE-2026-44437 Source advisory: SNYK:JS-ANGULARSSR-16438975...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) potentially affected by CVE-2026-44437 via @angular/ssr (>=20.3.18, <=20.3.24)

@angular/ssr NPM version =20.3.18, =7.3.49-4369, =4.2.16-4435, =4.2.17 Source cves: CVE-2026-44437 Source advisory: OSV:GHSA-69XR-M8H6-H664...