11219 matches found
17fe-ui23 (>=0.0.0, <=0.0.24), @2kog/pkg-editor (>=0.0.1, <=0.1.3) +716 more potentially affected by CVE-2026-47760 via tinymce (>=6.8.1, <=7.0.1)
tinymce NPM version =6.8.1, =0.0.0, =0.0.1, =12.1.0, =4.1.0, =1.0.0-beta.1, =4.1.2-rc, =1.0.0, =1.1.1 - @amis-adapter/amis-editor-react 0.0.1 - @amis-adapter/vue-amis-editor-webpack 0.1.0 - @amis-adapter/vue-editor2.7 0.0.0 - @amis-adapter/vue2.7 0.0.0 - @anhoang/tinymce-vue 5.1.2-rc -...
a-data-processing (0.0.1), ab-data-processing (0.0.1) +80 more potentially affected by CVE-2026-37737 via sanic-cors (>=0.9.2, <=2.2.0)
sanic-cors PYPI version =0.9.2, =1.0.0, =2.0.0, =0.2.2, =0.0.3, =0.3.0, =0.4.9, =1.1.0, =1.1.0, =0.0.3, =0.0.25 - cde 0.2.0.1 and more Source cves: CVE-2026-37737 Source advisory: SNYK:PYTHON-SANICCORS-17675647...
dbgate-serve (>=7.1.3-alpha.3, <=7.1.8), dbmodel (>=7.1.3-alpha.3, <=7.1.8) potentially affected by CVE-2026-47670 via dbgate-api (>=7.1.3-alpha.3, <=7.1.8-alpha.7)
dbgate-api NPM version =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.8 Source cves: CVE-2026-47670 Source advisory: OSV:GHSA-WM5R-5QP3-5VXF...
dbgate-serve (>=7.1.3-alpha.3, <=7.1.8), dbmodel (>=7.1.3-alpha.3, <=7.1.8) potentially affected by CVE-2026-47668 via dbgate-api (>=7.1.3-alpha.3, <=7.1.8-alpha.7)
dbgate-api NPM version =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.8 Source cves: CVE-2026-47668 Source advisory: SNYK:JS-DBGATEAPI-17817037...
adala (>=0.0.3, <=0.0.4), agent-actors (0.1.0) +42 more potentially affected by CVE-2026-10812 via gptcache (>=0.1.29.1, <=0.1.44)
gptcache PYPI version =0.1.29.1, =0.0.3, =0.0.5, =0.1.3, =0.28.9rc1, =0.13.0, =0.3.1, =0.1.48, =0.1.120a1, =0.1.120, =0.0.2, =0.5.17.post1, =0.6.0a2 and more Source cves: CVE-2026-10812 Source advisory: SNYK:PYTHON-GPTCACHE-17751096...
-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +11621 more potentially affected by CVE-2026-44488 via axios (>=1.7.0, <=1.15.2)
axios NPM version =1.7.0, =0.0.8, =1.0.54, =0.1.0, =1.0.0, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.0.0, =1.0.0, =1.1.40, =1.1.65 and more Source cves: CVE-2026-44488 Source advisory: OSV:GHSA-777C-7FJR-54VF...
-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16256 more potentially affected by CVE-2026-44486 via axios (>=1.0.0, <=1.15.2)
axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44486 Source advisory: SNYK:JS-AXIOS-17172681...
browserstack-tape-runner (>=1.0.0, <=3.0.0), duplo (>=1.6.11, <=1.9.1) +4 more potentially affected by CVE-2026-49143 via browserstack-runner (>=0.2.1, <=0.9.4)
browserstack-runner NPM version =0.2.1, =1.0.0, =1.6.11, =0.1.4, =0.1.1, =2.0.2 - run-browserstack-tests 1.0.2 - yasmf-localization 0.0.2 Source cves: CVE-2026-49143 Source advisory: OSV:GHSA-6VR3-7WCX-V5G5...
31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.12-alpha-20260427054851-6925deba4595cf0c72d3875df0a094608b394a27) +294 more potentially affected by CVE-2026-42211 via react-router (>=7.0.0, <=7.14.1)
react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =1.0.8 and more Source cves: CVE-2026-42211 Source advisory: OSV:GHSA-49RJ-9FVP-4H2H...
@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +419 more potentially affected by CVE-2024-52011 via vite (>=5.0.0, <=5.4.8)
vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-alpha.1 and more Source cves: CVE-2024-52011 Source advisory: OSV:GHSA-C27G-Q93R-2CWF...
5dee (0.1.0), a2 (>=0.1.0, <=0.7.0) +5116 more potentially affected by CVE-2026-10705 via dask (>=0.11.0, <=2026.8.0)
dask PYPI version =0.11.0, =0.1.0, =0.4.0, =0.9.1.dev0, =25.9.23, =0.1.0, =0.4.5, =1.0.0, =0.4.1, =0.0.1, =2026.4.17, =0.1.14, =0.1.0, =0.1.12 and more Source cves: CVE-2026-10705 Source advisory: SNYK:PYTHON-DASK-17138893...
@astralis-os/vitest (2.4.1), @aws/nx-plugin (>=0.79.1, <=0.84.2) +76 more potentially affected by CVE-2026-47429 via vitest (>=4.0.0-beta.7, <=4.0.18)
vitest NPM version =4.0.0-beta.7, =0.79.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =4.0.0-alpha.31, =2.1.0, =1.2.3-preview-a960555.0, =7.2.0, =11.0.33, =21.0.0-alpha.33, =23.0.0-alpha.1 - @forgeax/engine 0.1.7 and more Source cves: CVE-2026-47429...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.249, <=2.1.0-alpha.251) +7 more potentially affected by CVE-2026-47429 via @vitest/browser (>=3.0.5, <=3.2.4)
@vitest/browser NPM version =3.0.5, =0.0.1, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =3.8.0, =1.0.1, =0.0.2, =0.0.5 Source cves: CVE-2026-47429 Source advisory: SNYK:JS-VITESTBROWSER-17120327...
@baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281), @baic/preset-yolk-umi-mobile (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +8 more potentially affected by CVE-2026-47429 via @vitest/browser (>=4.0.0, <=4.0.18)
@vitest/browser NPM version =4.0.0, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =4.0.0-beta.15, =4.0.0-beta.15, =4.0.0-beta.15, =0.5.0-rc.1, =0.1.0, =0.2.0-alpha.4 Source cves: CVE-2026-47429 Source advisory: SNYK:JS-VITESTBROWSER-17120327...
@astralis-os/vitest (2.4.1), @aws/nx-plugin (>=0.79.1, <=0.84.2) +76 more potentially affected by CVE-2026-47429 via vitest (>=4.0.0-beta.7, <=4.0.18)
vitest NPM version =4.0.0-beta.7, =0.79.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =4.0.0-alpha.31, =2.1.0, =1.2.3-preview-a960555.0, =7.2.0, =11.0.33, =21.0.0-alpha.33, =23.0.0-alpha.1 - @forgeax/engine 0.1.7 and more Source cves: CVE-2026-47429...
@leav/ui (>=1.13.0-0ceda52e, <=1.14.0) potentially affected by CVE-2026-47423 via dompurify (3.4.4)
dompurify NPM version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on dompurify and may be impacted: - @leav/ui =1.13.0-0ceda52e, =1.14.0 Source cves: CVE-2026-47423 Source advisory: OSV:GHSA-87XG-PXX2-7HVX...
@leav/ui (>=1.13.0-0ceda52e, <=1.14.0) potentially affected by CVE-2026-47423 via dompurify (3.4.4)
dompurify NPM version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on dompurify and may be impacted: - @leav/ui =1.13.0-0ceda52e, =1.14.0 Source cves: CVE-2026-47423 Source advisory: SNYK:JS-DOMPURIFY-17119837...
@agenticmail/api (>=0.6.0, <=0.7.21), @agenticmail/claudecode (>=0.1.0, <=0.1.17) +1 more potentially affected by CVE-2026-50287 via @agenticmail/mcp (>=0.6.2, <=0.7.9)
@agenticmail/mcp NPM version =0.6.2, =0.6.0, =0.1.0, =0.6.0, =0.8.36 Source cves: CVE-2026-50287 Source advisory: OSV:GHSA-63GR-G7JC-V8RG...
liteyukibot-v7-runtime-astrbot (>=0.1.0a1, <=0.1.0a7) potentially affected by CVE-2026-10210 via astrbot (>=4.27.2, <=4.27.5)
astrbot PYPI version =4.27.2, =0.1.0a1, =0.1.0a7 Source cves: CVE-2026-10210 Source advisory: SNYK:PYTHON-ASTRBOT-17675206...
@agenticmail/cli (>=0.5.57, <=0.8.36), agenticmail (>=0.3.0, <=0.5.56) potentially affected by CVE-2026-47255 via @agenticmail/api (>=0.3.3, <=0.7.21)
@agenticmail/api NPM version =0.3.3, =0.5.57, =0.3.0, =0.5.56 Source cves: CVE-2026-47255 Source advisory: OSV:GHSA-WJJV-3MJ2-39HF...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +288 more potentially affected by CVE-2026-47139 via vm2 (>=3.0.0, <=3.11.3)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.13) +65 more potentially affected by CVE-2026-8813 via exifreader (>=2.13.1, <=4.38.1)
exifreader NPM version =2.13.1, =0.0.5, =0.1.0, =1.8.0-dev.1617120897319, =1.0.2, =1.1.17, =1.0.6, =0.0.17, =4.10.0, =4.10.2 - @juhasztibi/browser-image-resizer 2.2.1 and more Source cves: CVE-2026-8813 Source advisory: OSV:GHSA-H64W-W9PR-82M4...
org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-47210 via org.webjars.npm:vm2 (3.9.19)
org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +288 more potentially affected by CVE-2026-47210 via vm2 (>=3.0.0, <=3.11.3)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +288 more potentially affected by CVE-2026-47210 via vm2 (>=3.0.0, <=3.11.3)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-47137 via org.webjars.npm:vm2 (3.9.19)
org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...
@dataform/cli (>=3.0.57, <=3.0.59), @proompter/demo-next (>=0.0.16, <=0.0.19) +14 more potentially affected by unknown CVE via vm2 (>=3.11.1, <=3.11.3)
vm2 NPM version =3.11.1, =3.0.57, =0.0.16, =1.4.13, =1.0.0, =1.0.0, =3.1.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.4 and more Source cves: unknown CVE Source advisory: SNYK:JS-VM2-17111162...
@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-32905 via openclaw (>=2026.3.22, <=2026.5.2)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-32905 Source advisory: SNYK:JS-OPENCLAW-17111730...
-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16256 more potentially affected by CVE-2026-44490 via axios (>=1.0.0, <=1.15.2)
axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44490 Source advisory: OSV:GHSA-898C-Q2CR-XWHG...
dicom-transfer-syntax-registry (>=0.8.2, <=0.9.1), dset (>=0.1.0, <=0.1.2) +10 more potentially affected by CVE-2026-52834 via jxl-grid (>=0.1.1, <=0.5.3)
jxl-grid CARGO version =0.1.1, =0.8.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0-rc0 Source cves: CVE-2026-52834 Source advisory: OSV:RUSTSEC-2026-0151...
@3deye-toolkit/core (>=0.0.1-alpha.7, <=0.0.10), @3deye-toolkit/react-camera (>=0.0.1-alpha.7, <=0.0.10) +89 more potentially affected by CVE-2026-46509 via @ranfdev/deepobj (1.0.2)
@ranfdev/deepobj NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @ranfdev/deepobj and may be impacted: - @3deye-toolkit/core =0.0.1-alpha.7, =0.0.1-alpha.7, =0.0.1-alpha.7, =0.0.1-alpha.12, =0.0.1, =0.0.1, =0.0.3, =0.0.6-beta.0,...
aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +209 more potentially affected by CVE-2026-4944 via vllm (>=0.1.3, <=0.28.0)
vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =0.2.0, =0.3.0 and more Source cves: CVE-2026-4944 Source advisory: SNYK:PYTHON-VLLM-17675624...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +645 more potentially affected by CVE-2026-47675 via hono (>=4.0.0, <=4.12.19)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-47675 Source advisory: SNYK:JS-HONO-17055753...
17fe-ui23 (>=0.0.0, <=0.0.24), @2kog/pkg-editor (>=0.0.1, <=0.1.3) +716 more potentially affected by CVE-2026-47760 via tinymce (>=6.8.1, <=7.0.1)
tinymce NPM version =6.8.1, =0.0.0, =0.0.1, =12.1.0, =4.1.0, =1.0.0-beta.1, =4.1.2-rc, =1.0.0, =1.1.1 - @amis-adapter/amis-editor-react 0.0.1 - @amis-adapter/vue-amis-editor-webpack 0.1.0 - @amis-adapter/vue-editor2.7 0.0.0 - @amis-adapter/vue2.7 0.0.0 - @anhoang/tinymce-vue 5.1.2-rc -...
com.cloudbees.plugins:build-flow-plugin (>=0.10, <=0.11.1), org.jenkins-ci.plugins:build-flow-extensions-plugin (0.1.1) potentially affected by CVE-2026-48927 via org.jenkins-ci.plugins:buildgraph-view (1.0)
org.jenkins-ci.plugins:buildgraph-view MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:buildgraph-view and may be impacted: - com.cloudbees.plugins:build-flow-plugin =0.10, =0.11.1 -...
@agiflowai/aicode-toolkit (>=0.6.0, <=1.1.0), @agiflowai/one-mcp (0.4.0) +103 more potentially affected by CVE-2026-45617 via liquidjs (>=10.15.0, <=10.25.7)
liquidjs NPM version =10.15.0, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =1.0.1-beta.0, =1.6.3, =1.6.6 and more Source cves: CVE-2026-45617 Source advisory: SNYK:JS-LIQUIDJS-16960001...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-45357 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-45357 Source advisory: OSV:GHSA-HH27-HF48-9F5Q...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44644 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44644 Source advisory: OSV:GHSA-2QV6-9WX5-CWV4...
@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.198), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.198) +1 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.1.0, <=2.1.13)
@fedify/fedify NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.13 Source cves: CVE-2026-42462 Source advisory: SNYK:JS-FEDIFYFEDIFY-16895732...
@typebot.io/nextjs (>=0.3.23, <=0.6.0), @typebot.io/react (>=0.3.23, <=0.10.0) potentially affected by CVE-2026-28445 via @typebot.io/js (>=0.3.23, <=0.10.0)
@typebot.io/js NPM version =0.3.23, =0.3.23, =0.3.23, =0.10.0 Source cves: CVE-2026-28445 Source advisory: SNYK:JS-TYPEBOTIOJS-16895731...
@edoday/react-sdk (>=1.2.0, <=1.2.1), weavedb-client (>=0.45.0, <=0.45.4) +4 more potentially affected by unknown CVE via weavedb-base (0.45.4)
weavedb-base NPM version 0.45.4 is affected by a known vulnerability. The following packages have a transitive dependency on weavedb-base and may be impacted: - @edoday/react-sdk =1.2.0, =0.45.0, =0.45.0, =0.45.0, =0.45.0, =0.45.1, =0.45.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-47...
@aquacloud_ai/aqc-charts (>=0.1.1, <=0.1.3), @arkxos/arkos-system (>=0.1.1, <=0.1.10) +69 more potentially affected by CVE-2026-45249 via echarts (6.0.0)
echarts NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on echarts and may be impacted: - @aquacloudai/aqc-charts =0.1.1, =0.1.1, =5.1.121, =0.1.1, =1023.48.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =0.19.0,...
@airalogy/airalogy-engine (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-46703 via @boxlite-ai/boxlite (0.8.2)
@boxlite-ai/boxlite NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @boxlite-ai/boxlite and may be impacted: - @airalogy/airalogy-engine =0.0.1, =0.0.5 Source cves: CVE-2026-46703 Source advisory: OSV:GHSA-F396-4RP4-7V2J...
@airalogy/airalogy-engine (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-46695 via @boxlite-ai/boxlite (0.8.2)
@boxlite-ai/boxlite NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @boxlite-ai/boxlite and may be impacted: - @airalogy/airalogy-engine =0.0.1, =0.0.5 Source cves: CVE-2026-46695 Source advisory: OSV:GHSA-G6WW-W5J2-R7X3...
@bitsocial/ai-moderation-challenge (>=0.1.0, <=0.1.1), @bitsocial/bitsocial-cli (>=0.19.44, <=0.19.72) +6 more potentially affected by CVE-2026-46679 via @libp2p/gossipsub (>=15.0.0-049bfa0fa, <=15.0.22-5692f3f16)
@libp2p/gossipsub NPM version =15.0.0-049bfa0fa, =0.1.0, =0.19.44, =0.1.0, =0.1.0, =0.1.0, =6.0.0-049bfa0fa, =9.0.0-049bfa0fa, =0.0.17, =0.0.47 Source cves: CVE-2026-46679 Source advisory: SNYK:JS-LIBP2PGOSSIPSUB-16798774...
assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +7 more potentially affected by CVE-2026-46673 via russh (>=0.34.0, <=0.43.0)
russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - sshrpc 0.1.0 - tunnels 0.1.0 Source cves: CVE-2026-46673 Source advisory: OSV:GHSA-G9F8-WQJ9-FJW5...
org.webjars.npm:dash0__sdk-web (0.18.4), org.webjars.npm:scalar__import (>=0.3.16, <=0.4.6) +3 more potentially affected by CVE-2026-12644 via org.webjars.npm:ts-deepmerge (7.0.3)
org.webjars.npm:ts-deepmerge MAVEN version 7.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:ts-deepmerge and may be impacted: - org.webjars.npm:dash0sdk-web 0.18.4 - org.webjars.npm:scalarimport =0.3.16, =0.2.107, =1.1.13, =0.1.30,...
dbgate-serve (>=7.1.3-alpha.3, <=7.1.8), dbmodel (>=7.1.3-alpha.3, <=7.1.8) potentially affected by CVE-2026-47670 via dbgate-api (>=7.1.3-alpha.3, <=7.1.8-alpha.7)
dbgate-api NPM version =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.8 Source cves: CVE-2026-47670 Source advisory: SNYK:JS-DBGATEAPI-17223765...
@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8) potentially affected by CVE-2026-46417 via @angular/platform-server (19.2.18)
@angular/platform-server NPM version 19.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @cosla/sensemaking-web-ui =1.0.5, =1.0.8 Source cves: CVE-2026-46417 Source advisory: OSV:GHSA-RFH7-FXQC-Q52V...
@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +20 more potentially affected by CVE-2026-46342 via nuxt (>=4.0.0-rc.0, <=4.4.4)
nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...