10827 matches found
org.scala-sbt:sbt (>=0.99.2, <=1.0.0-m4), org.scala-sbt:scripted-plugin_2.10 (>=0.99.2, <=1.0.0-m4) +1 more potentially affected by CVE-2026-32948 via org.scala-sbt:main_2.11 (>=0.99.2, <=1.0.0-m4)
org.scala-sbt:main2.11 MAVEN version =0.99.2, =0.99.2, =0.99.2, =0.99.2, =1.0.0-m4 Source cves: CVE-2026-32948 Source advisory: SNYK:JAVA-ORGSCALASBT-15763414...
01os (>=0.0.1, <=0.0.13), 0din-litellm-shield (>=0.2.0, <=0.3.0) +3633 more potentially affected by unknown CVE via litellm (>=0.1.400, <=1.97.0rc1)
litellm PYPI version =0.1.400, =0.0.1, =0.2.0, =0.1.0, =0.1.0, =0.3.0, =0.0.13, =0.0.13, =0.1.3, =0.0.4, =0.1.0, =0.3.5, =0.1.1.dev1, =0.2.2, =0.2.1, =0.2.0, =0.6.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-LITELLM-15762713...
@brendonovich/solidjs__start (>=0.0.0, <=0.0.3), @h3ravel/arquebus (>=0.3.3, <=0.6.6) +43 more potentially affected by unknown CVE via h3 (2.0.0-rc.1)
h3 NPM version 2.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on h3 and may be impacted: - @brendonovich/solidjsstart =0.0.0, =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.24...
@atomicservice/ascf-toolkit (>=1.0.0, <=1.0.17), @atomicservice/ascf-toolkit-hvigor-plugin (>=1.0.1-beta.1, <=1.0.17) +77 more potentially affected by CVE-2026-4601 via jsrsasign (>=11.0.0, <=11.1.0)
jsrsasign NPM version =11.0.0, =1.0.0, =1.0.1-beta.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 - @citrineos/ocpi-charging-profiles 2.0.1 - @citrineos/ocpi-commands 2.0.1 - @citrineos/ocpi-credentials 2.0.1 - @citrineos/ocpi-locations 2.0.1 -...
cy-ai-trainer (>=0.0.1, <=0.0.2), llama-index-packs-vanna (>=0.0.1, <=0.3.0) +2 more potentially affected by CVE-2026-4513 via vanna (>=0.0.30, <=2.0.2)
vanna PYPI version =0.0.30, =0.0.1, =0.0.1, =1.4.0a20260123, =1.0.0, =2.0.0 Source cves: CVE-2026-4513 Source advisory: SNYK:PYTHON-VANNA-15756488...
webpki-roots (>=0.26.0-alpha.0, <=0.26.0-alpha.1) potentially affected by unknown CVE via rustls-webpki (0.102.8)
rustls-webpki CARGO version 0.102.8 is affected by a known vulnerability. The following packages have a transitive dependency on rustls-webpki and may be impacted: - webpki-roots =0.26.0-alpha.0, =0.26.0-alpha.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PWJX-QHCG-RVJ4...
@adpush/start (>=1.87.14, <=1.87.16), @akkuma/vinxi (0.3.12) +213 more potentially affected by unknown CVE via h3 (>=1.0.1, <=1.15.6)
h3 NPM version =1.0.1, =1.87.14, =1.0.7, =1.0.0, =1.5.0, =1.0.0, =0.8.16-canary.v20250123185645, =8.3.3, =3.1.0, =0.0.11, =3.1.0-0, =3.2.0 - @enrypase/solidstart-endpoint 0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-H3-15746329...
@adpush/start (>=1.87.14, <=1.87.16), @akkuma/vinxi (0.3.12) +213 more potentially affected by unknown CVE via h3 (>=1.0.1, <=1.15.6)
h3 NPM version =1.0.1, =1.87.14, =1.0.7, =1.0.0, =1.5.0, =1.0.0, =0.8.16-canary.v20250123185645, =8.3.3, =3.1.0, =0.0.11, =3.1.0-0, =3.2.0 - @enrypase/solidstart-endpoint 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-72GR-QFP7-VWHW...
@adpush/start (>=1.87.14, <=1.87.16), @akkuma/vinxi (0.3.12) +213 more potentially affected by unknown CVE via h3 (>=1.0.1, <=1.15.6)
h3 NPM version =1.0.1, =1.87.14, =1.0.7, =1.0.0, =1.5.0, =1.0.0, =0.8.16-canary.v20250123185645, =8.3.3, =3.1.0, =0.0.11, =3.1.0-0, =3.2.0 - @enrypase/solidstart-endpoint 0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-H3-15745711...
@abiswas97/postgres-mcp (2.0.0), @ampt/sql (1.0.1) +743 more potentially affected by CVE-2026-33468 via kysely (>=0.3.9, <=0.28.13)
kysely NPM version =0.3.9, =1.0.25-beta.0, =0.0.19, =1.2.6-beta.2, =0.0.1, =0.0.0, =0.1.0, =0.0.2, =0.0.1, =2.7.6, =0.2.0, =11.3.0 and more Source cves: CVE-2026-33468 Source advisory: OSV:GHSA-8CPQ-38P9-67GX...
dicebear (>=9.0.0, <=9.4.1) potentially affected by CVE-2026-33418 via @dicebear/converter (>=9.0.0, <=9.4.1)
@dicebear/converter NPM version =9.0.0, =9.0.0, =9.4.1 Source cves: CVE-2026-33418 Source advisory: SNYK:JS-DICEBEARCONVERTER-15746952...
@2digits/tlo-mcp (>=0.1.0, <=0.1.10), @6qat/tcp-connection (>=0.2.6, <=0.2.9) +727 more potentially affected by CVE-2026-32887 via effect (>=3.0.0, <=3.19.19)
effect NPM version =3.0.0, =0.1.0, =0.2.6, =1.0.0, =0.1.0-alpha.1, =0.0.1, =0.1.0-alpha.1, =0.1.1, =0.0.1, =0.0.5, =0.0.1, =0.2.1, =0.4.2 - @arvkonstantin/framework-provider-local-pg 3.4.3 - @awstin/effect-zero-v3 0.1.0 and more Source cves: CVE-2026-32887 Source advisory: SNYK:JS-EFFECT-15746380...
@2digits/tlo-mcp (>=0.1.0, <=0.1.10), @6qat/tcp-connection (>=0.2.6, <=0.2.9) +727 more potentially affected by CVE-2026-32887 via effect (>=3.0.0, <=3.19.19)
effect NPM version =3.0.0, =0.1.0, =0.2.6, =1.0.0, =0.1.0-alpha.1, =0.0.1, =0.1.0-alpha.1, =0.1.1, =0.0.1, =0.0.5, =0.0.1, =0.2.1, =0.4.2 - @arvkonstantin/framework-provider-local-pg 3.4.3 - @awstin/effect-zero-v3 0.1.0 and more Source cves: CVE-2026-32887 Source advisory: OSV:GHSA-38F7-945M-QR2G...
aati (>=0.10.2, <=0.11.3), ablavema (0.4.2) +1660 more potentially affected by CVE-2026-33056 via tar (>=0.2.14, <=0.4.40)
tar CARGO version =0.2.14, =0.10.2, =0.1.0, =0.1.2, =0.23.0, =0.23.0, =0.9.0, =0.2.5-rc.5, =1.2.0, =0.5.4-rc.1, =0.5.4-rc.1, =0.6.0, =0.4.0, =0.4.2 and more Source cves: CVE-2026-33056 Source advisory: OSV:GHSA-J4XF-2G29-59PH...
aati (>=0.10.2, <=0.11.3), ablavema (0.4.2) +1660 more potentially affected by CVE-2026-33055 via tar (>=0.2.14, <=0.4.40)
tar CARGO version =0.2.14, =0.10.2, =0.1.0, =0.1.2, =0.23.0, =0.23.0, =0.9.0, =0.2.5-rc.5, =1.2.0, =0.5.4-rc.1, =0.5.4-rc.1, =0.6.0, =0.4.0, =0.4.2 and more Source cves: CVE-2026-33055 Source advisory: OSV:GHSA-GCHP-Q4R4-X4FF...
@react-portable/core (>=0.4.0, <=0.11.2), storybook-framework-qwik (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-32701 via @builder.io/qwik-city (>=1.2.6, <=1.4.1)
@builder.io/qwik-city NPM version =1.2.6, =0.4.0, =0.3.0, =0.4.0 Source cves: CVE-2026-32701 Source advisory: SNYK:JS-BUILDERIOQWIKCITY-15747112...
a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.7.1) +3196 more potentially affected by unknown CVE via tokio-executor (>=0.1.10, <=0.2.0-alpha.6)
tokio-executor CARGO version =0.1.10, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.8.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0063...
a2 (>=0.2.0, <=0.4.1), abci (>=0.5.3, <=0.7.1) +3049 more potentially affected by unknown CVE via tokio-tcp (>=0.1.4, <=0.2.0-alpha.1)
tokio-tcp CARGO version =0.1.4, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0059...
a2 (>=0.2.0, <=0.4.1), abci (>=0.5.3, <=0.7.1) +3082 more potentially affected by unknown CVE via tokio-reactor (>=0.1.3, <=0.2.0-alpha.1)
tokio-reactor CARGO version =0.1.3, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0057...
abci-rs (0.10.0), abuseipdb (>=0.1.0, <=0.2.1) +1837 more potentially affected by unknown CVE via tokio-tls (>=0.2.1, <=0.3.1)
tokio-tls CARGO version =0.2.1, =0.1.0, =0.1.0, =0.7.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.4.0, =1.0.0-alpha.3, =0.7.4, =0.7.19 - actori-tls 1.0.0 - actyxosdataflow 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0053...
webpki-roots (>=0.26.0-alpha.0, <=0.26.0-alpha.1) potentially affected by unknown CVE via rustls-webpki (0.102.8)
rustls-webpki CARGO version 0.102.8 is affected by a known vulnerability. The following packages have a transitive dependency on rustls-webpki and may be impacted: - webpki-roots =0.26.0-alpha.0, =0.26.0-alpha.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0049...
adventure-rusoto-ecs (0.4.0), adventure-rusoto-sns (0.4.0) +240 more potentially affected by unknown CVE via tokio-process (>=0.1.6, <=0.3.0-alpha.2)
tokio-process CARGO version =0.1.6, =0.0.2, =0.0.1, =0.1.5, =0.1.0, =0.2.1, =0.3.0, =0.1.0, =0.21.0, =0.2.0, =0.6.0, =0.6.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0055...
@hmcts/media-viewer (>=4.2.16-exui-4425, <=4.2.16-exui-4425-rel1) potentially affected by CVE-2026-33397 via @angular/ssr (20.3.18)
@angular/ssr NPM version 20.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/ssr and may be impacted: - @hmcts/media-viewer =4.2.16-exui-4425, =4.2.16-exui-4425-rel1 Source cves: CVE-2026-33397 Source advisory: OSV:GHSA-VFX2-HV2G-XJ5F...
create-momentum-app (>=0.1.2, <=0.5.11), foliokit (0.0.0) potentially affected by CVE-2026-33397 via @angular/ssr (>=21.1.2, <=21.2.0)
@angular/ssr NPM version =21.1.2, =0.1.2, =0.5.11 - foliokit 0.0.0 Source cves: CVE-2026-33397 Source advisory: OSV:GHSA-VFX2-HV2G-XJ5F...
create-momentum-app (>=0.1.2, <=0.5.11), foliokit (0.0.0) potentially affected by CVE-2026-27738 +1 more via @angular/ssr (>=21.1.2, <=21.2.0)
@angular/ssr NPM version =21.1.2, =0.1.2, =0.5.11 - foliokit 0.0.0 Source cves: CVE-2026-27738, CVE-2026-33397 Source advisory: SNYK:JS-ANGULARSSR-15701178...
0xuath-sdk-react (>=0.0.2, <=0.0.23), 1-test-gulp-1 (>=0.0.1, <=0.0.4) +15367 more potentially affected by CVE-2026-33349 via fast-xml-parser (>=4.0.0, <=5.5.6)
fast-xml-parser NPM version =4.0.0, =0.0.2, =0.0.1, =0.0.1, =1.0.0, =3.1.4, =0.1.0, =3.1.6, =0.1.0, =0.0.2, =4.11.2, =4.11.46 - @0610studio/rn-layout 0.0.1 - @0xflick/jest-dynamodb 4.0.1-pre.2 and more Source cves: CVE-2026-33349 Source advisory: SNYK:JS-FASTXMLPARSER-15699647...
5-ifc-check-cli (1.0.0), 7ghost (>=4.11.2, <=4.11.46) +4222 more potentially affected by CVE-2026-33349 via fast-xml-parser (>=4.0.0, <=4.5.4)
fast-xml-parser NPM version =4.0.0, =4.11.2, =0.1.1, =0.0.2, =1.0.1, =1.0.0, =1.52.0, =0.0.1, =1.0.0, =0.0.1, =1.1.2 and more Source cves: CVE-2026-33349 Source advisory: OSV:GHSA-JP2Q-39XQ-3W4G...
com.codbex.atlas:codbex-atlas-application (>=2.62.0, <=2.117.0), com.codbex.gaia:codbex-gaia-application (>=2.61.0, <=2.99.0) +25 more potentially affected by CVE-2026-33349 via org.webjars.npm:fast-xml-parser (>=4.5.3, <=5.8.0)
org.webjars.npm:fast-xml-parser MAVEN version =4.5.3, =2.62.0, =2.61.0, =2.52.0, =2.52.0, =2.51.0, =2.51.0, =3.6.0, =2.50.0, =5.0.0, =5.0.0, =11.58.0, =12.2.0, =11.58.0, =11.58.0, =12.1.0 - org.eclipse.dirigible:dirigible-components-group-ui 14.19.0 and more Source cves: CVE-2026-33349 Source...
@dicebear/collection (>=8.0.0-rc.0, <=8.0.2), dicebear (>=8.0.0-rc.0, <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/initials (>=8.0.0, <=8.0.2)
@dicebear/initials NPM version =8.0.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
dicebear (>=6.0.0-alpha.0, <=6.1.3) potentially affected by CVE-2026-33311 via @dicebear/core (>=6.0.0, <=6.1.3)
@dicebear/core NPM version =6.0.0, =6.0.0-alpha.0, =6.1.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARCORE-15746954...
dicebear (>=6.0.0-alpha.0, <=6.1.3) potentially affected by CVE-2026-33311 via @dicebear/core (>=6.0.0, <=6.1.3)
@dicebear/core NPM version =6.0.0, =6.0.0-alpha.0, =6.1.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
@dicebear/collection (>=6.0.0-alpha.0, <=6.1.3), dicebear (>=6.0.0-alpha.0, <=6.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=6.0.0, <=6.1.3)
@dicebear/initials NPM version =6.0.0, =6.0.0-alpha.0, =6.0.0-alpha.0, =6.1.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
dicebear (>=7.0.0-rc.1, <=7.1.3) potentially affected by CVE-2026-33311 via @dicebear/core (>=7.0.0, <=7.1.3)
@dicebear/core NPM version =7.0.0, =7.0.0-rc.1, =7.1.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARCORE-15746954...
@dicebear/collection (>=5.0.6, <=5.4.3), dicebear (>=5.0.6, <=5.4.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=5.0.6, <=5.4.3)
@dicebear/initials NPM version =5.0.6, =5.0.6, =5.0.6, =5.4.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
@dicebear/collection (>=6.0.0-alpha.0, <=6.1.3), dicebear (>=6.0.0-alpha.0, <=6.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=6.0.0, <=6.1.3)
@dicebear/initials NPM version =6.0.0, =6.0.0-alpha.0, =6.0.0-alpha.0, =6.1.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...
@dicebear/collection (>=8.0.0-rc.0, <=8.0.2), dicebear (>=8.0.0-rc.0, <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/initials (>=8.0.0, <=8.0.2)
@dicebear/initials NPM version =8.0.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...
@dicebear/collection (>=9.0.0, <=9.4.0), @fduenascoink/ui-sdk (>=18.0.0, <=18.0.4) +1 more potentially affected by CVE-2026-33311 via @dicebear/initials (>=9.0.0, <=9.4.0)
@dicebear/initials NPM version =9.0.0, =9.0.0, =18.0.0, =9.0.0, =9.4.0 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...
@dicebear/collection (>=9.0.0, <=9.4.0), @fduenascoink/ui-sdk (>=18.0.0, <=18.0.4) +1 more potentially affected by CVE-2026-33311 via @dicebear/initials (>=9.0.0, <=9.4.0)
@dicebear/initials NPM version =9.0.0, =9.0.0, =18.0.0, =9.0.0, =9.4.0 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
@dicebear/collection (>=7.0.0-rc.1, <=7.1.3), dicebear (>=7.0.0-rc.1, <=7.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=7.0.0, <=7.1.3)
@dicebear/initials NPM version =7.0.0, =7.0.0-rc.1, =7.0.0-rc.1, =7.1.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
dicebear (>=8.0.0-rc.0, <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/core (>=8.0.0, <=8.0.2)
@dicebear/core NPM version =8.0.0, =8.0.0-rc.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...
dicebear (>=8.0.0-rc.0, <=8.0.2) potentially affected by CVE-2026-33311 via @dicebear/core (>=8.0.0, <=8.0.2)
@dicebear/core NPM version =8.0.0, =8.0.0-rc.0, =8.0.2 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARCORE-15746954...
@dicebear/collection (>=7.0.0-rc.1, <=7.1.3), dicebear (>=7.0.0-rc.1, <=7.1.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=7.0.0, <=7.1.3)
@dicebear/initials NPM version =7.0.0, =7.0.0-rc.1, =7.0.0-rc.1, =7.1.3 Source cves: CVE-2026-33311 Source advisory: SNYK:JS-DICEBEARINITIALS-15746953...
org.webjars.npm:file-entry-cache (>=5.0.1, <=6.0.1), org.webjars.npm:flat-cache (>=2.0.1, <=3.0.4) +6 more potentially affected by CVE-2026-33228 via org.webjars.npm:flatted (>=2.0.1, <=3.3.4)
org.webjars.npm:flatted MAVEN version =2.0.1, =5.0.1, =2.0.1, =3.3.1, =0.3.16, =0.2.107, =1.1.13, =0.1.30, =1.7.6, =2.0.2 Source cves: CVE-2026-33228 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15700434...
http-api-problem (>=0.23.0, <=0.50.2) potentially affected by CVE-2026-33241 via salvo (>=0.9.7, <=0.11.6)
salvo CARGO version =0.9.7, =0.23.0, =0.50.2 Source cves: CVE-2026-33241 Source advisory: OSV:GHSA-PP9R-XG4C-8J4X...
@acampkin/mcc (>=2.1.0, <=2.5.0), @kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.6.0) +24 more potentially affected by CVE-2026-33068 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.52)
@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =2.0.0 - ch-go 1.0.3 and more Source cves: CVE-2026-33068 Source advisory: OSV:GHSA-MMGP-WC2J-QCV7...
@acampkin/mcc (>=2.1.0, <=2.5.0), @kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.6.0) +24 more potentially affected by CVE-2026-33068 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.71)
@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =2.0.0 - ch-go 1.0.3 and more Source cves: CVE-2026-33068 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-15701841...
0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +1927 more potentially affected by CVE-2026-33151 via socket.io-parser (>=4.0.1-rc1, <=4.2.5)
socket.io-parser NPM version =4.0.1-rc1, =1.0.49, =1.0.0, =0.0.28, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =0.0.9 and more Source cves: CVE-2026-33151 Source advisory: OSV:GHSA-677M-J7P3-52F9...
@oneuptime/cli (>=10.0.23, <=10.0.33) potentially affected by CVE-2026-33143 via @oneuptime/common (>=10.0.23, <=10.0.33)
@oneuptime/common NPM version =10.0.23, =10.0.23, =10.0.33 Source cves: CVE-2026-33143 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15842853...
@brendonovich/solidjs__start (>=0.0.0, <=0.0.3), @h3ravel/arquebus (>=0.3.3, <=0.6.6) +43 more potentially affected by unknown CVE via h3 (2.0.0-rc.1)
h3 NPM version 2.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on h3 and may be impacted: - @brendonovich/solidjsstart =0.0.0, =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.24...
@adpush/start (>=1.87.14, <=1.87.16), @akkuma/vinxi (0.3.12) +213 more potentially affected by unknown CVE via h3 (>=1.0.1, <=1.15.5)
h3 NPM version =1.0.1, =1.87.14, =1.0.7, =1.0.0, =1.5.0, =1.0.0, =0.8.16-canary.v20250123185645, =8.3.3, =3.1.0, =0.0.11, =3.1.0-0, =3.2.0 - @enrypase/solidstart-endpoint 0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-H3-15683856...