10827 matches found
@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @lucid-agents/mpp (1.0.0) +9 more potentially affected by unknown CVE via mppx (>=0.1.1, <=0.4.7)
mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.0.0-pr-153-20260307193247, =0.1.0, =0.1.1, =0.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-MPPX-15857153...
@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34210 via mppx (>=0.1.1, <=0.4.9)
mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34210 Source advisory: OSV:GHSA-8MHJ-RFFC-RCVW...
@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34210 via mppx (>=0.1.1, <=0.4.9)
mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34210 Source advisory: SNYK:JS-MPPX-15857146...
@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34209 via mppx (>=0.1.1, <=0.4.9)
mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34209 Source advisory: OSV:GHSA-MV9J-8JVG-J8MR...
@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34209 via mppx (>=0.1.1, <=0.4.9)
mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34209 Source advisory: SNYK:JS-MPPX-15857147...
libcrux-aead (>=0.0.4-pre.1, <=0.0.7) potentially affected by unknown CVE via libcrux-chacha20poly1305 (>=0.0.4, <=0.0.7-rc.1)
libcrux-chacha20poly1305 CARGO version =0.0.4, =0.0.4-pre.1, =0.0.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0124...
1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2045 more potentially affected by unknown CVE via dompurify (>=3.0.0, <=3.3.1)
dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: unknown CVE Source advisory: SNYK:JS-DOMPURIFY-15810938...
1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2045 more potentially affected by CVE-2026-65914 via dompurify (>=3.0.0, <=3.3.1)
dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: CVE-2026-65914 Source advisory: OSV:GHSA-H8R8-WCCR-V5F2...
letta-nory (0.1.0) potentially affected by CVE-2025-6101 +1 more via letta (0.16.8)
letta PYPI version 0.16.8 is affected by a known vulnerability. The following packages have a transitive dependency on letta and may be impacted: - letta-nory 0.1.0 Source cves: CVE-2025-6101, CVE-2026-4965 Source advisory: SNYK:PYTHON-LETTA-15874391...
@waigenie/mobile-mcp (0.0.16) potentially affected by CVE-2026-33989 via @mobilenext/mobile-mcp (0.0.12)
@mobilenext/mobile-mcp NPM version 0.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on @mobilenext/mobile-mcp and may be impacted: - @waigenie/mobile-mcp 0.0.16 Source cves: CVE-2026-33989 Source advisory: SNYK:JS-MOBILENEXTMOBILEMCP-15874414...
@waigenie/mobile-mcp (0.0.16) potentially affected by CVE-2026-33989 via @mobilenext/mobile-mcp (0.0.12)
@mobilenext/mobile-mcp NPM version 0.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on @mobilenext/mobile-mcp and may be impacted: - @waigenie/mobile-mcp 0.0.16 Source cves: CVE-2026-33989 Source advisory: OSV:GHSA-3P2M-H2V6-G9MX...
4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3662 more potentially affected by CVE-2026-33941 via handlebars (>=4.0.0, <=4.7.8)
handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33941 Source advisory: SNYK:JS-HANDLEBARS-15807040...
4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3662 more potentially affected by CVE-2026-33939 via handlebars (>=4.0.0, <=4.7.8)
handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33939 Source advisory: OSV:GHSA-9CX6-37PM-9JFF...
4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3662 more potentially affected by CVE-2026-33937 via handlebars (>=4.0.0, <=4.7.8)
handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33937 Source advisory: OSV:GHSA-2W6W-674Q-4C4Q...
-react-file-list-components (1.1.1), 00ld8nuivn (2.1.0) +45588 more potentially affected by CVE-2026-34043 via serialize-javascript (>=5.0.0, <=7.0.4)
serialize-javascript NPM version =5.0.0, =0.1.0, =0.1.9 - 01dk01majk 2.1.0 - 02.aula 1.0.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1.0 - 06dre15t8r 2.1.0 - 06p998toez 0.1.0 - 07fgapmu9l 1.1.0 - 07t2xvu6t4 2.1.0 and more Source cves: CVE-2026-3404...
@internxt/cli (>=1.0.5, <=1.2.2), @latitude-data/cli (>=0.0.29, <=1.11.0-canary.8) +19 more potentially affected by CVE-2026-34043 via serialize-javascript (>=7.0.0, <=7.0.4)
serialize-javascript NPM version =7.0.0, =1.0.5, =0.0.29, =1.23.0-beta.0, =1.23.0-beta.0, =1.23.0-beta.0, =1.23.0-beta.0, =1.23.0-beta.0, =18.33.0, =0.7.5, =0.9.8, =0.15.8, =1.3.0, =1.5.1 - @sigmaott/media-live 0.5.0 and more Source cves: CVE-2026-34043 Source advisory:...
@n8n/backend-test-utils (1.11.0), @n8n/db (1.11.0) +1 more potentially affected by unknown CVE via n8n-core (2.11.0)
n8n-core NPM version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-core and may be impacted: - @n8n/backend-test-utils 1.11.0 - @n8n/db 1.11.0 - @n8n/task-runner 2.11.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NCORE-15825749...
@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +38 more potentially affected by unknown CVE via n8n-core (>=1.0.0, <=1.122.16)
n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.26.0, =0.34.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =1.0.1, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =1.4.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NCORE-15825749...
@omchat/common (>=1.0.0, <=1.0.4), @tverse/ui (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-33979 via express-xss-sanitizer (1.2.1)
express-xss-sanitizer NPM version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-xss-sanitizer and may be impacted: - @omchat/common =1.0.0, =0.1.0, =1.0.0, =1.14.31, =1.15.2 Source cves: CVE-2026-33979 Source advisory:...
jf-langflow (>=1.10.0, <=1.10.0.post7), langflow (>=1.8.0rc0, <=1.8.0rc2) +1 more potentially affected by CVE-2026-5022 via langflow-base (>=0.7.2, <=0.11.3rc0)
langflow-base PYPI version =0.7.2, =1.10.0, =1.8.0rc0, =1.8.0rc2 - langflow-nightly 1.8.0.dev24 Source cves: CVE-2026-5022 Source advisory: SNYK:PYTHON-LANGFLOWBASE-15840036...
@dargmuesli/nuxt-vio (>=20.6.0, <=21.0.0-beta.11), @darraghor/nest-backend-libs (>=5.0.10, <=5.0.11) +51 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.3)
nodemailer NPM version =8.0.0, =20.6.0, =5.0.10, =0.0.1-beta.0, =0.2.0-alpha.1, =6.0.0-beta.9, =11.14.0, =5.8.38, =2.9.4-beta.9766, =0.1.10, =1.11.4, =2.1.8, =0.0.0-experimental.09a2220201377abea1f719e6f8d201b10ae3f7af, =2.0.0, =3.2.11, =20260208.152.42, =20260327.0.55 and more Source cves: unkno...
07-calito-router (>=0.0.2, <=0.0.4), @adbl/cartridge (>=0.0.0, <=0.0.8) +253 more potentially affected by CVE-2026-33943 via happy-dom (>=15.10.2, <=20.8.7)
happy-dom NPM version =15.10.2, =0.0.2, =0.0.0, =0.1.1, =0.1.0, =18.0.11, =0.5.0, =0.4.2, =0.1.10, =0.3.0, =0.1.0-alpha.1, =0.1.0 - @chialab/sveltekit-utils 0.1.0-alpha.8 - @choiceform/design-js-tokens 0.1.0 - @codai/testing-utils 1.0.0 and more Source cves: CVE-2026-33943 Source advisory:...
07-calito-router (>=0.0.2, <=0.0.4), @adbl/cartridge (>=0.0.0, <=0.0.8) +253 more potentially affected by CVE-2026-33943 via happy-dom (>=15.10.2, <=20.8.7)
happy-dom NPM version =15.10.2, =0.0.2, =0.0.0, =0.1.1, =0.1.0, =18.0.11, =0.5.0, =0.4.2, =0.1.10, =0.3.0, =0.1.0-alpha.1, =0.1.0 - @chialab/sveltekit-utils 0.1.0-alpha.8 - @choiceform/design-js-tokens 0.1.0 - @codai/testing-utils 1.0.0 and more Source cves: CVE-2026-33943 Source advisory:...
-fides-amor-et-lux (1.0.0), 1ib (>=1.0.9, <=1.0.11) +1161 more potentially affected by CVE-2026-33896 via node-forge (>=1.0.0, <=1.3.3)
node-forge NPM version =1.0.0, =1.0.9, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =0.0.1-custom-install-dir, =1.2.1, =1.0.0, =1.0.0, =1.2.6, =1.23.2, =1.35.0 - @arextest/arex-request-runtime 7.36.3 and more Source cves: CVE-2026-33896 Source advisory: SNYK:JS-NODEFORGE-15789771...
org.webjars.npm:github-com-cisco-node-jose (2.2.0), org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6) +7 more potentially affected by CVE-2026-33891 via org.webjars.npm:node-forge (>=0.7.1, <=1.3.3)
org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =2.1.1 Source cves: CVE-2026-33891 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15789770...
-fides-amor-et-lux (1.0.0), 1ib (>=1.0.9, <=1.0.11) +1161 more potentially affected by CVE-2026-33891 via node-forge (>=1.0.0, <=1.3.3)
node-forge NPM version =1.0.0, =1.0.9, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =0.0.1-custom-install-dir, =1.2.1, =1.0.0, =1.0.0, =1.2.6, =1.23.2, =1.35.0 - @arextest/arex-request-runtime 7.36.3 and more Source cves: CVE-2026-33891 Source advisory: OSV:GHSA-5M6Q-G25R-MVWX...
2mxdev-gql-gateway (1.0.0), 4m-node-server (>=0.0.1, <=0.0.8) +3199 more potentially affected by unknown CVE via apollo-server-core (>=1.3.2, <=3.13.0)
apollo-server-core NPM version =1.3.2, =0.0.1, =1.0.2, =0.0.80, =3.10.1, =1.2.0-pre.24, =1.0.1, =1.0.0, =1.0.0, =0.5.0, =1.0.0, =0.1.3, =0.0.1, =0.1.1, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-APOLLOSERVERCORE-15790567...
@apollo/server-integration-testsuite (>=5.0.0-rc.0, <=5.4.0), @commitspark/graphql-api (>=1.0.0-beta.3, <=1.0.0-beta.6) +24 more potentially affected by unknown CVE via @apollo/server (>=5.0.0, <=5.4.0)
@apollo/server NPM version =5.0.0, =5.0.0-rc.0, =1.0.0-beta.3, =1.217.0, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.22.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-APOLLOSERVER-15790568...
@apollo/server-integration-testsuite (>=5.0.0-rc.0, <=5.4.0), @commitspark/graphql-api (>=1.0.0-beta.3, <=1.0.0-beta.6) +24 more potentially affected by unknown CVE via @apollo/server (>=5.0.0, <=5.4.0)
@apollo/server NPM version =5.0.0, =5.0.0-rc.0, =1.0.0-beta.3, =1.217.0, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.22.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q82-XGWF-VJ6H...
@10life/strapi-plugin-advanced-cache-manager (>=1.0.1, <=1.0.6), @a11ywatch/a11ywatch (>=0.0.1, <=0.3.82) +52 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.12.1)
apollo-server-core NPM version =3.0.0-html.2, =1.0.1, =0.0.1, =0.1.1, =4.9.2, =1.0.1, =1.1.22, =1.1.19, =1.0.0, =1.1.0, =1.0.0, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q82-XGWF-VJ6H...
07-calito-router (>=0.0.2, <=0.0.4), 07-dey-router (>=0.0.1, <=0.0.2) +1025 more potentially affected by CVE-2026-4926 via path-to-regexp (>=8.0.0, <=8.3.0)
path-to-regexp NPM version =8.0.0, =0.0.2, =0.0.1, =0.0.0, =0.0.1, =0.0.1, =0.0.0, =0.0.1, =0.0.2, =0.0.1-alpha.2, =0.0.1-alpha.1, =4.0.61, =4.0.61, =0.0.1, =0.3.1, =0.3.4 and more Source cves: CVE-2026-4926 Source advisory: SNYK:JS-PATHTOREGEXP-15789763...
com.codbex.aion:codbex-aion-platform (>=0.5.6, <=0.5.7), com.codbex.aion:codbex-aion-platform-keycloack (>=0.5.6, <=0.5.7) +95 more potentially affected by CVE-2026-4926 via org.webjars.npm:path-to-regexp (>=0.1.7, <=8.4.2)
org.webjars.npm:path-to-regexp MAVEN version =0.1.7, =0.5.6, =0.5.6, =0.5.6, =0.4.0, =0.4.0, =0.5.3, =0.5.5 - com.codbex.kronos:codbex-kronos-coverage-aggregate 0.4.0 - com.codbex.kronos:codbex-kronos-modules-all 0.4.0 - com.codbex.kronos:codbex-kronos-modules-engines-all 0.4.0 -...
com.codbex.aion:codbex-aion-platform (>=0.5.6, <=0.5.7), com.codbex.aion:codbex-aion-platform-keycloack (>=0.5.6, <=0.5.7) +95 more potentially affected by CVE-2026-4923 via org.webjars.npm:path-to-regexp (>=0.1.7, <=8.4.2)
org.webjars.npm:path-to-regexp MAVEN version =0.1.7, =0.5.6, =0.5.6, =0.5.6, =0.4.0, =0.4.0, =0.5.3, =0.5.5 - com.codbex.kronos:codbex-kronos-coverage-aggregate 0.4.0 - com.codbex.kronos:codbex-kronos-modules-all 0.4.0 - com.codbex.kronos:codbex-kronos-modules-engines-all 0.4.0 -...
@antora/cli (>=2.3.2, <=3.0.0-alpha.9), @antora/playbook-builder (>=2.3.2, <=3.0.0-alpha.9) +113 more potentially affected by CVE-2026-33863 via convict (>=6.0.0, <=6.2.4)
convict NPM version =6.0.0, =2.3.2, =2.3.2, =2.3.2, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2026-33863 Source advisory: SNYK:JS-CONVICT-15790594...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +315 more potentially affected by CVE-2026-33769 via astro (>=2.10.12, <=5.18.0)
astro NPM version =2.10.12, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.1, =0.0.1, =0.0.1, =0.3.3 and more Source cves: CVE-2026-33769 Source advisory: OSV:GHSA-G735-7G2W-HH3F...
03-gs-ee-6 (0.3.5), @albgen/capacitor-escpos-plugin (>=0.0.4, <=1.0.1) +2903 more potentially affected by CVE-2026-33750 via brace-expansion (>=4.0.0, <=5.0.2)
brace-expansion NPM version =4.0.0, =0.0.4, =1.1.7, =1.1.8 - @angranit/fantom-virma 0.1.0 - @angranit/first-step-to-get-tea 0.1.0 - @angranit/hapeipons 1.1.2 - @angranit/nearly-vm 0.1.0 - @angranit/newme-project 0.1.0 - @angranit/npmjs-for-tea-project 0.1.0 - @angranit/phantompirs 0.1.0 -...
@activepieces/piece-google-gemini (0.1.6), @activepieces/piece-google-vertexai (0.1.2) +8 more potentially affected by CVE-2026-33750 via brace-expansion (>=2.0.0, <=2.0.2)
brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver 1.1.2 - nx-cargo 1.0.0-alpha.2 Source cves: CVE-2026-33750 Source advisory: OSV:GHSA-F886-M6HF-6M8V...
@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +27 more potentially affected by CVE-2026-33750 via brace-expansion (>=1.1.0, <=1.1.11)
brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =0.0.3, =0.0.1, =0.1.0 and more Source cves: CVE-2026-33750 Source advisory: OSV:GHSA-F886-M6HF-6M8V...
@activepieces/piece-google-gemini (0.1.6), @activepieces/piece-google-vertexai (0.1.2) +8 more potentially affected by CVE-2026-33750 via brace-expansion (>=2.0.0, <=2.0.2)
brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver 1.1.2 - nx-cargo 1.0.0-alpha.2 Source cves: CVE-2026-33750 Source advisory: SNYK:JS-BRACEEXPANSION-15789759...
03-gs-ee-6 (0.3.5), @albgen/capacitor-escpos-plugin (>=0.0.4, <=1.0.1) +2903 more potentially affected by CVE-2026-33750 via brace-expansion (>=4.0.0, <=5.0.2)
brace-expansion NPM version =4.0.0, =0.0.4, =1.1.7, =1.1.8 - @angranit/fantom-virma 0.1.0 - @angranit/first-step-to-get-tea 0.1.0 - @angranit/hapeipons 1.1.2 - @angranit/nearly-vm 0.1.0 - @angranit/newme-project 0.1.0 - @angranit/npmjs-for-tea-project 0.1.0 - @angranit/phantompirs 0.1.0 -...
libcrux-digest (>=0.0.4-pre.1, <=0.0.6), libcrux-kem (>=0.0.2-alpha.1, <=0.0.2) +7 more potentially affected by unknown CVE via libcrux-sha3 (>=0.0.2, <=0.0.7-pre.2)
libcrux-sha3 CARGO version =0.0.2, =0.0.4-pre.1, =0.0.2-alpha.1, =0.0.3, =0.0.2-alpha.1, =0.0.2-alpha.3 - libcrux-psq 0.0.2-beta.3 - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 - wpa-next 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-Q29P-9PFR-J652...
@0xlimao/n8n-nodes-ethereum (0.1.1), @advenimuss/n8n-nodes-msgraph (>=0.1.0, <=0.2.1) +320 more potentially affected by CVE-2026-33722 via @n8n/permissions (>=0.6.0, <=0.47.0)
@n8n/permissions NPM version =0.6.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.7, =0.1.0, =0.3.4, =1.1.2, =1.0.0, =1.0.4 and more Source cves: CVE-2026-33722 Source advisory: SNYK:JS-N8NPERMISSIONS-15840035...
4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33672 via picomatch (3.0.1)
picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...
4itech-schematics (>=11.0.0-0, <=11.3.0-1), @142vip/midway (>=0.1.6-alpha.2, <=0.1.6-alpha.12) +573 more potentially affected by CVE-2026-33672 via picomatch (>=2.1.1, <=2.3.1)
picomatch NPM version =2.1.1, =11.0.0-0, =0.1.6-alpha.2, =7.4.1, =0.0.1, =1.0.1, =0.0.2, =2.0.0, =9.0.0-alpha.28, =9.2.0-alpha.9, =9.2.0-alpha.9, =1.0.101, =1.1.0, =1.4.1 and more Source cves: CVE-2026-33672 Source advisory: SNYK:JS-PICOMATCH-15765513...
4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33672 via picomatch (3.0.1)
picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...
@10xsai/cloudflare-router-nx-plugin (1.0.0), @4itech/schematics (>=11.7.1, <=11.7.6) +1098 more potentially affected by CVE-2026-33671 via picomatch (>=4.0.0, <=4.0.3)
picomatch NPM version =4.0.0, =11.7.1, =1.2.0, =8.3.0-rc.2, =1.0.25, =0.0.17, =0.0.47, =0.0.1, =1.0.0, =1.0.0, =10.0.0-alpha.1, =10.0.0-prerelease.90, =13.0.0-next.10, =10.0.0-prerelease.90, =14.0.0-next.1 and more Source cves: CVE-2026-33671 Source advisory: OSV:GHSA-C2C7-RCM5-VVQJ...
4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33671 via picomatch (3.0.1)
picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...
@actinc/eslint-config (>=4.10.0, <=4.16.0), @alexgorbatchev/dotfiles (>=0.0.1, <=1.0.4) +330 more potentially affected by unknown CVE via smol-toml (>=1.1.2, <=1.6.0)
smol-toml NPM version =1.1.2, =4.10.0, =0.0.1, =2.8.0, =0.1.0-alpha.0, =0.1.3, =0.1.3, =0.1.3, =0.2.2, =0.32.3, =0.2.2, =1.0.0, =1.0.4, =0.1.3, =1.0.30, =1.0.32 - @cadcamfun/nikcli 1.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-SMOLTOML-15768230...
lemmy_api (>=0.18.0-rc.4, <=0.18.0), lemmy_api_crud (>=0.18.0-rc.4, <=0.18.0) +3 more potentially affected by CVE-2026-33693 via activitypub_federation (0.4.7)
activitypubfederation CARGO version 0.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on activitypubfederation and may be impacted: - lemmyapi =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0 Source cves: CVE-2026-33693...
@0xgraph/cli (>=0.0.1, <=0.2.1), @7speck/logger (>=1.0.2, <=1.0.3) +936 more potentially affected by CVE-2026-33532 via yaml (>=1.0.0, <=1.10.2)
yaml NPM version =1.0.0, =0.0.1, =1.0.2, =1.0.1, =0.0.1, =0.0.0-nightly-20240619-f62ef04, =1.6.3, =1.0.0, =0.9.1-pre.3, =0.11.1-pre.3, =0.6.1-pre.1, =1.0.0, =0.0.10, =2.9.1, =1.0.3, =0.6.6, =0.12.9 and more Source cves: CVE-2026-33532 Source advisory: SNYK:JS-YAML-15765520...