@aws-amplify/amplify-util-uibuilder (>=1.2.13-studio-q1-release.0, <=1.14.27), @aws-amplify/cli (>=7.6.11-beta.0, <=7.6.26) +4 more potentially affected by CVE-2026-18245 via @aws-amplify/codegen-ui-react (>=2.1.0, <=2.14.2)

@aws-amplify/codegen-ui-react NPM version =2.1.0, =1.2.13-studio-q1-release.0, =7.6.11-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2026-18245 Source advisory: SNYK:JS-AWSAMPLIFYCODEGENUIREACT-18601829...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18570 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18570 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752067...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18573 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18573 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752054...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +915 more potentially affected by CVE-2026-16728 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-16728 Source advisory: SNYK:JS-UNDICI-18426063...

@0x0.bug/pi-coding-agent (1.0.0), @0xwork/connect (>=0.1.0, <=0.1.9) +1141 more potentially affected by CVE-2026-16728 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =2026.6.2, =2026.6.5 and more Source cves: CVE-2026-16728 Source...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2167 more potentially affected by CVE-2026-16728 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =1.10.0-release and more Source cves: CVE-2026-16728 Source advisory: SNYK:JS-UNDICI-18426063...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +915 more potentially affected by CVE-2026-14643 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-14643 Source advisory: SNYK:JS-UNDICI-18426065...

@0x0.bug/pi-coding-agent (1.0.0), @0xwork/connect (>=0.1.0, <=0.1.9) +1141 more potentially affected by CVE-2026-14643 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =2026.6.2, =2026.6.5 and more Source cves: CVE-2026-14643 Source...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2167 more potentially affected by CVE-2026-15157 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =1.10.0-release and more Source cves: CVE-2026-15157 Source advisory: SNYK:JS-UNDICI-18426067...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +915 more potentially affected by CVE-2026-15157 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-15157 Source advisory: SNYK:JS-UNDICI-18426067...

@0x0.bug/pi-coding-agent (1.0.0), @0xwork/connect (>=0.1.0, <=0.1.9) +1141 more potentially affected by CVE-2026-15157 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =2026.6.2, =2026.6.5 and more Source cves: CVE-2026-15157 Source...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2167 more potentially affected by CVE-2026-16729 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =1.10.0-release and more Source cves: CVE-2026-16729 Source advisory: SNYK:JS-UNDICI-18426061...

@0x0.bug/pi-coding-agent (1.0.0), @0xwork/connect (>=0.1.0, <=0.1.9) +1141 more potentially affected by CVE-2026-16729 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =2026.6.2, =2026.6.5 and more Source cves: CVE-2026-16729 Source...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +915 more potentially affected by CVE-2026-16729 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-16729 Source advisory: SNYK:JS-UNDICI-18426061...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +915 more potentially affected by CVE-2026-13697 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-13697 Source advisory: SNYK:JS-UNDICI-18426521...

@0x0.bug/pi-coding-agent (1.0.0), @0xwork/connect (>=0.1.0, <=0.1.9) +1141 more potentially affected by CVE-2026-13697 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =2026.6.2, =2026.6.5 and more Source cves: CVE-2026-13697 Source...

@aulazero/task (>=0.0.1, <=0.7.2), @aulazero/task-2 (>=2.0.1, <=2.0.5) +272 more potentially affected by CVE-2026-54705 via mathlive (>=0.25.0, <=0.109.2)

mathlive NPM version =0.25.0, =0.0.1, =2.0.1, =1.17.3, =0.2.6, =0.0.1, =0.1.0, =0.1.0, =0.5.0, =1.0.0, =1.20.0, =11.25.1, =1.0.0, =0.1.1, =0.1.1, =0.1.14 and more Source cves: CVE-2026-54705 Source advisory: OSV:GHSA-FM7P-GW32-828P...

@aulazero/task (>=0.0.1, <=0.7.2), @aulazero/task-2 (>=2.0.1, <=2.0.5) +272 more potentially affected by CVE-2025-29049 +1 more via mathlive (>=0.25.0, <=0.109.2)

mathlive NPM version =0.25.0, =0.0.1, =2.0.1, =1.17.3, =0.2.6, =0.0.1, =0.1.0, =0.1.0, =0.5.0, =1.0.0, =1.20.0, =11.25.1, =1.0.0, =0.1.1, =0.1.1, =0.1.14 and more Source cves: CVE-2025-29049, CVE-2026-54705 Source advisory: SNYK:JS-MATHLIVE-18508174...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5349 more potentially affected by CVE-2026-67213 via nanoid (>=4.0.0, <=5.1.5)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-67213 Source advisory: SNYK:JS-NANOID-18506897...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10910 more potentially affected by CVE-2026-67213 via nanoid (>=3.0.0, <=3.3.16)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.1, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.2 and more Source cves: CVE-2026-67213 Source advisory: SNYK:JS-NANOID-18506897...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10909 more potentially affected by CVE-2026-67214 via nanoid (>=3.0.0, <=3.3.15)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.1, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.2 and more Source cves: CVE-2026-67214 Source advisory: SNYK:JS-NANOID-18506894...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5890 more potentially affected by CVE-2026-67214 via nanoid (>=4.0.0, <=5.1.15)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-67214 Source advisory: SNYK:JS-NANOID-18506894...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5890 more potentially affected by CVE-2026-67214 via nanoid (>=4.0.0, <=5.1.15)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-67214 Source advisory: OSV:GHSA-28WG-GHJ8-5HJV...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10910 more potentially affected by CVE-2026-67213 via nanoid (>=3.0.0, <=3.3.17)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.1, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.2 and more Source cves: CVE-2026-67213 Source advisory: OSV:GHSA-2V37-7H3G-55P8...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5349 more potentially affected by CVE-2026-67213 via nanoid (>=4.0.0, <=5.1.5)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-67213 Source advisory: OSV:GHSA-2V37-7H3G-55P8...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10909 more potentially affected by CVE-2026-67214 via nanoid (>=3.0.0, <=3.3.15)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.1, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.2 and more Source cves: CVE-2026-67214 Source advisory: OSV:GHSA-28WG-GHJ8-5HJV...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.41) +21 more potentially affected by CVE-2026-54666 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =2.31.2, =0.3.4, =0.3.6 and more Source cves: CVE-2026-54666 Source advisory: OSV:GHSA-W284-33MX-6G9V...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.41) +21 more potentially affected by CVE-2026-54664 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =2.31.2, =0.3.4, =0.3.6 and more Source cves: CVE-2026-54664 Source advisory: OSV:GHSA-5F94-X226-CCPM...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.41) +21 more potentially affected by CVE-2026-54661 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =2.31.2, =0.3.4, =0.3.6 and more Source cves: CVE-2026-54661 Source advisory: OSV:GHSA-38C3-WV3C-V3XJ...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.41) +21 more potentially affected by CVE-2026-54663 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =2.31.2, =0.3.4, =0.3.6 and more Source cves: CVE-2026-54663 Source advisory: OSV:GHSA-X36R-4347-PM5X...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.41) +21 more potentially affected by CVE-2026-54662 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =2.31.2, =0.3.4, =0.3.6 and more Source cves: CVE-2026-54662 Source advisory: OSV:GHSA-HQJ5-CW9F-RX67...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.41) +21 more potentially affected by CVE-2026-54660 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =2.31.2, =0.3.4, =0.3.6 and more Source cves: CVE-2026-54660 Source advisory: OSV:GHSA-H754-FXP7-88WX...

chatgpt-panic-hook (>=0.1.1, <=0.1.5), formation-chess-web (0.2.0) +5 more potentially affected by unknown CVE via webbrowser (1.0.0)

webbrowser CARGO version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on webbrowser and may be impacted: - chatgpt-panic-hook =0.1.1, =0.13.2, =0.1.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0257...

@aios-alpha/design (>=0.2.1, <=0.3.0), @aiosbrain/aios (>=0.9.1, <=0.10.0) +143 more potentially affected by CVE-2026-54639 via style-dictionary (>=4.3.0, <=5.4.0)

style-dictionary NPM version =4.3.0, =0.2.1, =0.9.1, =0.2.0, =1.0.0, =1.0.0, =0.1.2, =0.1.1, =0.0.12-beta.1, =0.0.229 - @bu-da/ai-context 0.1.2 - @bu-da/component-specs 0.1.2 - @bu-da/mcp-server 0.1.2 - @bu-da/react-native 0.1.2 and more Source cves: CVE-2026-54639 Source advisory:...

svelte-streak-board (1.0.0) potentially affected by unknown CVE via streak-core-lib (1.0.0)

streak-core-lib NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streak-core-lib and may be impacted: - svelte-streak-board 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-STREAKCORELIB-18503763...

korvath (1.0.0) potentially affected by unknown CVE via korvica (1.0.0)

korvica NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on korvica and may be impacted: - korvath 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-KORVICA-18503747...

anansi (>=0.10.0, <=0.14.2), anansi-core (>=0.10.0, <=0.14.2) +77 more potentially affected by CVE-2026-46428 via lettre (>=0.10.1, <=0.10.4)

lettre CARGO version =0.10.1, =0.10.0, =0.10.0, =0.1.0, =0.111.0, =0.1.2, =1.6.0, =1.0.0, =1.3.0-beta1, =1.6.4, =0.0.1, =0.1.0, =0.1.1 and more Source cves: CVE-2026-46428 Source advisory: OSV:GHSA-4PJ9-G833-QX53...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.6, <=1.4.11), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.5, <=1.4.11) +54 more potentially affected by CVE-2026-18203 via org.keycloak:keycloak-authz-policy-common (>=2.0.0.cr1, <=26.7.1)

org.keycloak:keycloak-authz-policy-common MAVEN version =2.0.0.cr1, =1.2.6, =1.2.5, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =24.3.0.0, =24.3.0.0, =2.5.6-24.0, =0.1.0, =8.1, =1.0.0, =1.1.0 and more Source cves: CVE-2026-18203 Source advisory:...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18206 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18206 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18751614...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18208 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18208 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18751971...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18209 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18209 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18751613...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18211 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18211 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18751612...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18214 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18214 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752077...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18215 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18215 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752074...

webp-https-errors (4.7.2) potentially affected by unknown CVE via prettier-lint-lenz (2.6.4)

prettier-lint-lenz NPM version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on prettier-lint-lenz and may be impacted: - webp-https-errors 4.7.2 Source cves: unknown CVE Source advisory: SNYK:JS-PRETTIERLINTLENZ-18505266...

venturo-playwright (1.0.12) potentially affected by unknown CVE via venturo-playwright-runner (1.0.8)

venturo-playwright-runner NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.12 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

@robit/oaai (>=0.1.0, <=0.2.0), hdra-ai (>=0.1.0, <=0.2.0) +2 more potentially affected by unknown CVE via open-agents-ai (0.187.596)

open-agents-ai NPM version 0.187.596 is affected by a known vulnerability. The following packages have a transitive dependency on open-agents-ai and may be impacted: - @robit/oaai =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: SNYK:JS-OPENAGENTSAI-18550671...

venturo-playwright (1.0.13) potentially affected by unknown CVE via venturo-playwright-runner (1.0.9)

venturo-playwright-runner NPM version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.13 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

@pmate/account-sdk (>=0.6.1, <=0.9.12), @pmate/agent-sdk (>=1.0.2, <=2.0.0) +2 more potentially affected by unknown CVE via @pmate/utils (1.1.4)

@pmate/utils NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @pmate/utils and may be impacted: - @pmate/account-sdk =0.6.1, =1.0.2, =0.1.3, =0.12.0, =0.28.3 Source cves: unknown CVE Source advisory: SNYK:JS-PMATEUTILS-18550696...

@godscene/playground-electron (1.7.22), @godscene/visualizer (1.7.22) potentially affected by unknown CVE via @godscene/web (1.7.22)

@godscene/web NPM version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on @godscene/web and may be impacted: - @godscene/playground-electron 1.7.22 - @godscene/visualizer 1.7.22 Source cves: unknown CVE Source advisory: SNYK:JS-GODSCENEWEB-18550...