10827 matches found
@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +54 more potentially affected by CVE-2026-73419 via next-auth (>=4.0.0-beta.6, <=4.24.13)
next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.0, =1.9.9, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =5.1.0 and more Source cves: CVE-2026-73419 Source advisory: OSV:GHSA-X445-F3H2-J279...
@12-apps/auth (>=1.2.0, <=1.20.0), @aangeles/jefeui (>=1.10.0, <=1.11.6) +281 more potentially affected by CVE-2026-73419 via @auth/core (>=0.0.0-manual.fdbc96ab, <=0.41.2)
@auth/core NPM version =0.0.0-manual.fdbc96ab, =1.2.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =2.0.0 and more Source cves: CVE-2026-73419 Source advisory: OSV:GHSA-X445-F3H2-J279...
@darthcav/ts-http-server (0.9.1), @digitalpaws/starr (0.0.2) +4 more potentially affected by CVE-2026-15074 via @fastify/static (10.1.0)
@fastify/static NPM version 10.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/static and may be impacted: - @darthcav/ts-http-server 0.9.1 - @digitalpaws/starr 0.0.2 - @node-cli/static-server =3.1.17, =9.0.0-canary.19, =9.0.2 Source cves:...
@darthcav/ts-http-server (0.9.1), @digitalpaws/starr (0.0.2) +4 more potentially affected by CVE-2026-7120 via @fastify/static (10.1.0)
@fastify/static NPM version 10.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/static and may be impacted: - @darthcav/ts-http-server 0.9.1 - @digitalpaws/starr 0.0.2 - @node-cli/static-server =3.1.17, =9.0.0-canary.19, =9.0.2 Source cves:...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322069...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322068...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64648 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64648 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64647 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64647 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64646 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64646 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64645 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64645 Source advisory:...
47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +237 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)
next NPM version =15.5.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: SNYK:JS-NEXT-18231604...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64644 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64644 Source advisory:...
47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +237 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)
next NPM version =15.5.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: OSV:GHSA-Q8WF-6R8G-63CH...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64643 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64643 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64643 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64643 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64642 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64642 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64641 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64641 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64641 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64641 Source advisory:...
@n8n/backend-test-utils (1.30.0), @n8n/db (1.30.0) +3 more potentially affected by CVE-2026-65594 via @n8n/client-oauth2 (1.12.0)
@n8n/client-oauth2 NPM version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/client-oauth2 and may be impacted: - @n8n/backend-test-utils 1.30.0 - @n8n/db 1.30.0 - @n8n/scheduler 0.2.0 - @n8n/task-runner 2.30.0 - n8n-core 2.30.0 Source...
@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @aayshian/n8n-aisensy-ay19 (0.0.1) +112 more potentially affected by CVE-2026-65594 via @n8n/client-oauth2 (>=1.0.0, <=1.11.1)
@n8n/client-oauth2 NPM version =1.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.3.6, =0.1.0, =1.0.0, =0.1.4, =1.1.3, =1.1.6 and more Source cves: CVE-2026-65594 Source advisory: SNYK:JS-N8NCLIENTOAUTH2-18322332...
@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +38 more potentially affected by unknown CVE via n8n-core (>=1.0.0, <=1.122.37)
n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.26.0, =0.34.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =1.0.1, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =1.4.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NCORE-18322419...
@n8n/backend-test-utils (1.32.0), @n8n/db (1.32.0) +3 more potentially affected by unknown CVE via n8n-core (2.32.0)
n8n-core NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-core and may be impacted: - @n8n/backend-test-utils 1.32.0 - @n8n/db 1.32.0 - @n8n/n8n-nodes-langchain 2.32.0 - @n8n/task-runner 2.32.0 - n8n 2.32.0 Source cves: unknown CV...
@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @aayshian/n8n-aisensy-ay19 (0.0.1) +112 more potentially affected by unknown CVE via n8n-core (>=2.0.0, <=2.31.2)
n8n-core NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.3.6, =0.1.0, =1.0.0, =0.1.4, =1.1.3, =1.1.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NCORE-18322419...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18323908...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18323973...
n8n (2.32.0) potentially affected by unknown CVE via @n8n/n8n-nodes-langchain (2.32.0)
@n8n/n8n-nodes-langchain NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/n8n-nodes-langchain and may be impacted: - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NN8NNODESLANGCHAIN-18323530...
@n8n/agents (0.17.0), @n8n/ai-node-sdk (0.22.0) +25 more potentially affected by unknown CVE via n8n-workflow (2.32.0)
n8n-workflow NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-workflow and may be impacted: - @n8n/agents 0.17.0 - @n8n/ai-node-sdk 0.22.0 - @n8n/ai-utilities 0.25.0 - @n8n/ai-workflow-builder 1.32.0 - @n8n/api-types 1.32.0 -...
@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @a700/n8n-nodes-agent700 (>=1.0.5, <=1.0.7) +2132 more potentially affected by unknown CVE via n8n-workflow (>=2.0.0, <=2.31.2)
n8n-workflow NPM version =2.0.0, =1.0.0, =1.0.5, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.2.2, =0.3.6, =0.1.0, =1.0.0, =1.3.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NWORKFLOW-18323974...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322078...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322072...
n8n (2.32.0) potentially affected by unknown CVE via @n8n/n8n-nodes-langchain (2.32.0)
@n8n/n8n-nodes-langchain NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/n8n-nodes-langchain and may be impacted: - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NN8NNODESLANGCHAIN-18322497...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322079...
abel (>=0.1.0, <=0.1.1), abel-core (>=0.1.0, <=0.1.1) +158 more potentially affected by unknown CVE via smallstr (>=0.1.0, <=0.3.1)
smallstr CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.1, =0.1.0, =0.1.20, =2.1.0, =0.4.0-beta.1, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0215...
abscissa (>=0.4.0, <=0.6.0-pre.1), abscissa_core (>=0.4.0, <=0.6.0-pre.1) +121 more potentially affected by unknown CVE via gumdrop (>=0.1.0, <=0.8.1)
gumdrop CARGO version =0.1.0, =0.4.0, =0.4.0, =0.5.0, =0.1.1, =0.1.0, =0.2.0, =1.0.0, =1.0.6, =1.0.8, =1.0.9, =1.0.9, =1.0.12 - amdguid-glium 1.0.13 - amdguid-glow 1.0.13 - amdguid-wayland 1.0.13 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0214...
soprano-tts (0.0.2) potentially affected by CVE-2026-63764 via lmdeploy (0.15.0)
lmdeploy PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on lmdeploy and may be impacted: - soprano-tts 0.0.2 Source cves: CVE-2026-63764 Source advisory: SNYK:PYTHON-LMDEPLOY-18304216...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +5 more potentially affected by CVE-2026-16221 via fast-uri (>=3.0.1, <=3.1.2)
fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =1.25.0, =2.2.0, =2.3.1 Source cves: CVE-2026-16221 Source advisory: OSV:GHSA-V2HH-GCRM-F6HX...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0to1-builders (0.1.0) +22906 more potentially affected by CVE-2026-35590 via sharp (>=0.4.2, <=0.34.5)
sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =1.252.0 and more Source cves: CVE-2026-35590 Source advisory: SNYK:JS-SHARP-18184416...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0to1-builders (0.1.0) +22906 more potentially affected by CVE-2026-33328 via sharp (>=0.4.2, <=0.34.5)
sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =1.252.0 and more Source cves: CVE-2026-33328 Source advisory: SNYK:JS-SHARP-18184262...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0to1-builders (0.1.0) +22906 more potentially affected by CVE-2026-33327 via sharp (>=0.4.2, <=0.34.5)
sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =1.252.0 and more Source cves: CVE-2026-33327 Source advisory: SNYK:JS-SHARP-18184259...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0to1-builders (0.1.0) +22906 more potentially affected by CVE-2026-35591 via sharp (>=0.4.2, <=0.34.5)
sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =1.252.0 and more Source cves: CVE-2026-35591 Source advisory: SNYK:JS-SHARP-18184418...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0to1-builders (0.1.0) +22906 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.34.5)
sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =1.252.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F88M-G3JW-G9CJ...
@bpmiq/mcp (>=1.0.0, <=2.3.0), @bpmiq/validator (>=1.0.0, <=2.3.0) +92 more potentially affected by CVE-2026-73569 via fast-xml-parser (>=5.9.3, <=5.10.0)
fast-xml-parser NPM version =5.9.3, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =1.18.42-test.0, =1.6.6, =0.24.0, =5.1.22, =5.1.22, =0.0.1, =0.0.1, =49.13.0, =50.0.0, =50.0.7 and more Source cves: CVE-2026-73569 Source advisory: OSV:GHSA-8R6M-32JQ-JX6Q...
@bpmiq/mcp (>=1.0.0, <=2.3.0), @bpmiq/validator (>=1.0.0, <=2.3.0) +92 more potentially affected by unknown CVE via fast-xml-parser (>=5.9.3, <=5.10.0)
fast-xml-parser NPM version =5.9.3, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =1.18.42-test.0, =1.6.6, =0.24.0, =5.1.22, =5.1.22, =0.0.1, =0.0.1, =49.13.0, =50.0.0, =50.0.7 and more Source cves: unknown CVE Source advisory: SNYK:JS-FASTXMLPARSER-18170229...