@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @abyedev/hono-dotenv (=1.0.0) +613 more potentially affected by CVE-2026-54288 via hono (>=0.5.10 <=4.12.23)

hono NPM version =0.5.10, =0.1.8-fix.3, =5.0.0, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =2026.4.4, =1.0.2, =1.0.0, =0.1.1, =0.0.1, =0.0.2-a, =0.0.67-a and more Source cves: CVE-2026-54288 Source advisory: OSV:GHSA-RV63-4MWF-QQC2...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @adhisang/minecraft-modding-mcp (=1.0.0) +332 more potentially affected by CVE-2026-54289 via hono (>=4.0.0 <=4.12.23)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =2026.4.4, =1.0.2, =1.0.0, =0.0.1, =0.2.0, =1.7.2, =1.7.1, =0.2.1, =0.2.3 and more Source cves: CVE-2026-54289 Source advisory: SNYK:JS-HONO-17356391...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @abyedev/hono-dotenv (=1.0.0) +613 more potentially affected by CVE-2026-54289 via hono (>=0.5.10 <=4.12.23)

hono NPM version =0.5.10, =0.1.8-fix.3, =5.0.0, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =2026.4.4, =1.0.2, =1.0.0, =0.1.1, =0.0.1, =0.0.2-a, =0.0.67-a and more Source cves: CVE-2026-54289 Source advisory: OSV:GHSA-WGPF-JWQJ-8H8P...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @abyedev/hono-dotenv (=1.0.0) +613 more potentially affected by CVE-2026-54290 via hono (>=0.5.10 <=4.12.23)

hono NPM version =0.5.10, =0.1.8-fix.3, =5.0.0, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =2026.4.4, =1.0.2, =1.0.0, =0.1.1, =0.0.1, =0.0.2-a, =0.0.67-a and more Source cves: CVE-2026-54290 Source advisory: OSV:GHSA-88FW-HQM2-52QC...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @adhisang/minecraft-modding-mcp (=1.0.0) +332 more potentially affected by CVE-2026-54290 via hono (>=4.0.0 <=4.12.23)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =2026.4.4, =1.0.2, =1.0.0, =0.0.1, =0.2.0, =1.7.2, =1.7.1, =0.2.1, =0.2.3 and more Source cves: CVE-2026-54290 Source advisory: SNYK:JS-HONO-17356430...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @adhisang/minecraft-modding-mcp (=1.0.0) +332 more potentially affected by CVE-2026-54286 via hono (>=4.0.0 <=4.12.23)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =2026.4.4, =1.0.2, =1.0.0, =0.0.1, =0.2.0, =1.7.2, =1.7.1, =0.2.1, =0.2.3 and more Source cves: CVE-2026-54286 Source advisory: SNYK:JS-HONO-17356405...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @abyedev/hono-dotenv (=1.0.0) +613 more potentially affected by CVE-2026-54286 via hono (>=0.5.10 <=4.12.23)

hono NPM version =0.5.10, =0.1.8-fix.3, =5.0.0, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =2026.4.4, =1.0.2, =1.0.0, =0.1.1, =0.0.1, =0.0.2-a, =0.0.67-a and more Source cves: CVE-2026-54286 Source advisory: OSV:GHSA-WWFH-H76J-FC44...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @abyedev/hono-dotenv (=1.0.0) +613 more potentially affected by CVE-2026-54287 via hono (>=0.5.10 <=4.12.23)

hono NPM version =0.5.10, =0.1.8-fix.3, =5.0.0, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =2026.4.4, =1.0.2, =1.0.0, =0.1.1, =0.0.1, =0.0.2-a, =0.0.67-a and more Source cves: CVE-2026-54287 Source advisory: OSV:GHSA-J6C9-X7QJ-28XF...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @adhisang/minecraft-modding-mcp (=1.0.0) +332 more potentially affected by CVE-2026-54287 via hono (>=4.0.0 <=4.12.23)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =2026.4.4, =1.0.2, =1.0.0, =0.0.1, =0.2.0, =1.7.2, =1.7.1, =0.2.1, =0.2.3 and more Source cves: CVE-2026-54287 Source advisory: SNYK:JS-HONO-17356429...

a-mailx (=0.1.0), a2grunnerp (>=0.1.0 <=0.1.8) +742 more potentially affected by unknown CVE via bleach (>=1.2.2 <=6.3.0)

bleach PYPI version =1.2.2, =0.1.0, =0.0.0, =2.0.0.1, =1.0.3, =0.1.0, =6.9.1, =1.0.1, =1.0.0, =1.0.9, =0.0.1, =0.0.2 - ak-sw-benchmarker =0.0.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GJ48-438W-JH9V...

11x-wagtail-blog (>=0.0.0 <=0.2.0), 5gasp-cli (>=0.1.0 <=0.4.0) +3220 more potentially affected by unknown CVE via html5lib (>=0.95.0 <=1.1.0)

html5lib PYPI version =0.95.0, =0.0.0, =0.1.0, =0.1.0, =0.10.0, =1.0.0, =3.30.15, =0.7.0, =0.2.0, =0.4.0, =0.4.8 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-HTML5LIB-17356104...

a-mailx (=0.1.0), ak-sw-benchmarker (=0.0.9) +250 more potentially affected by unknown CVE via bleach (>=6.0.0 <=6.3.0)

bleach PYPI version =6.0.0, =0.9.5, =0.4.0, =0.19.7, =0.4.0, =0.1.3, =0.0.1, =1.0.2, =1.0.1, =1.0.1, =0.1.0, =0.5.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-BLEACH-17356103...

128autograder-ipython (=1.0.0rc2), 3-04-2025-ttm (=0.1.0) +7629 more potentially affected by unknown CVE via bleach (>=1.2.2 <=6.4.0)

bleach PYPI version =1.2.2, =0.5.0a0, =0.1.0, =0.1.0, =0.4.0, =0.1.0a1, =0.6.0, =1.0.3, =1.14.4, =1.0.0, =0.0.1, =0.1.0, =1.0.1 - aa-membertools =0.2.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-BLEACH-17356127...

arthexis (>=0.1.31 <=0.8.0), creme-crm (>=2.8.0 <=2.8.2) +60 more potentially affected by unknown CVE via bleach (=6.3.0)

bleach PYPI version =6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - arthexis =0.1.31, =2.8.0, =2.2.0, =0.1.3a0, =4.1.0b1, =3.11.3, =2.1.1, =12.0.0, =3.3.10, =1.0.0, =0.1.0, =3.0.0, =3.2.0, =0.1.0, =3.0.0, =3.3.4 and...

a-mailx (=0.1.0), a2grunnerp (>=0.1.0 <=0.1.8) +742 more potentially affected by unknown CVE via bleach (>=1.2.2 <=6.3.0)

bleach PYPI version =1.2.2, =0.1.0, =0.0.0, =2.0.0.1, =1.0.3, =0.1.0, =6.9.1, =1.0.1, =1.0.0, =1.0.9, =0.0.1, =0.0.2 - ak-sw-benchmarker =0.0.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8RFP-98V4-MMR6...

a-mailx (=0.1.0), ak-sw-benchmarker (=0.0.9) +250 more potentially affected by unknown CVE via bleach (>=6.0.0 <=6.3.0)

bleach PYPI version =6.0.0, =0.9.5, =0.4.0, =0.19.7, =0.4.0, =0.1.3, =0.0.1, =1.0.2, =1.0.1, =1.0.1, =0.1.0, =0.5.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-BLEACH-17356111...

5mghost-rover (>=0.0.1 <=0.0.3), ace-framework (>=0.6.0 <=0.7.3) +98 more potentially affected by CVE-2026-54531 via pypdf (>=6.0.0 <=6.12.2)

pypdf PYPI version =6.0.0, =0.0.1, =0.6.0, =0.1.0, =0.0.2, =0.1.0, =0.0.24, =1.45.0, =0.1.2, =0.0.1.dev0, =0.0.1, =0.0.2, =0.0.5 - autopattern =0.2.0 and more Source cves: CVE-2026-54531 Source advisory: SNYK:PYTHON-PYPDF-17356482...

5mghost-rover (>=0.0.1 <=0.0.3), a-data-processing (=0.0.1) +676 more potentially affected by CVE-2026-54531 via pypdf (>=3.10.0 <=6.12.2)

pypdf PYPI version =3.10.0, =0.0.1, =0.6.0, =0.1.1, =0.8.1, =0.9.1, =0.1.0, =0.2.0, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.3 and more Source cves: CVE-2026-54531 Source advisory: OSV:GHSA-M2V9-299J-RV96...

5mghost-rover (>=0.0.1 <=0.0.3), a-data-processing (=0.0.1) +676 more potentially affected by CVE-2026-54530 via pypdf (>=3.10.0 <=6.12.2)

pypdf PYPI version =3.10.0, =0.0.1, =0.6.0, =0.1.1, =0.8.1, =0.9.1, =0.1.0, =0.2.0, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.3 and more Source cves: CVE-2026-54530 Source advisory: OSV:GHSA-52X6-GQ3R-VPF4...

5mghost-rover (>=0.0.1 <=0.0.3), ace-framework (>=0.6.0 <=0.7.3) +98 more potentially affected by CVE-2026-54530 via pypdf (>=6.0.0 <=6.12.2)

pypdf PYPI version =6.0.0, =0.0.1, =0.6.0, =0.1.0, =0.0.2, =0.1.0, =0.0.24, =1.45.0, =0.1.2, =0.0.1.dev0, =0.0.1, =0.0.2, =0.0.5 - autopattern =0.2.0 and more Source cves: CVE-2026-54530 Source advisory: SNYK:PYTHON-PYPDF-17356481...

@1771technologies/oneplay (>=0.0.1 <=0.0.6), @a1st/aix (>=0.0.3 <=0.5.1) +640 more potentially affected by CVE-2026-50146 via astro (>=0.20.12 <=6.3.1)

astro NPM version =0.20.12, =0.0.1, =0.0.3, =0.2.0, =0.1.6, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.0.1, =0.2.0 and more Source cves: CVE-2026-50146 Source advisory: OSV:GHSA-8HV8-536X-4WQP...

@a1st/aix (>=0.0.3 <=0.5.1), @a1st/aix-core (>=0.2.0 <=0.5.1) +18 more potentially affected by CVE-2026-50146 via astro (>=6.0.0-beta.1 <=6.3.1)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.4.2, =1.4.6 and more Source cves: CVE-2026-50146 Source advisory: SNYK:JS-ASTRO-17356186...

hexdrift (=10.0.1) potentially affected by unknown CVE via vortnode (=1.2.0)

vortnode NPM version =1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on vortnode and may be impacted: - hexdrift =10.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-5884...

@andor83/mother-may-i (>=1.0.1 <=1.0.10), @awes-io/base-nuxt (>=1.0.0 <=1.0.2) +175 more potentially affected by CVE-2026-53722 via nuxt (>=0.10.7 <=3.20.1)

nuxt NPM version =0.10.7, =1.0.1, =1.0.0, =1.0.6, =1.0.6, =1.22.17, =0.9.1, =1.1.1, =1.0.1, =1.1.0, =2.17.8, =1.0.0-29304822.f444f03, =0.1.5, =0.4.0, =0.1.0, =0.1.0-alpha.6 and more Source cves: CVE-2026-53722 Source advisory: OSV:GHSA-934W-87QH-QR26...

@bloggrify/bento (>=3.0.0 <=3.0.1), @bloggrify/core (>=3.0.0 <=3.1.2) +21 more potentially affected by CVE-2026-53722 via nuxt (>=4.0.3 <=4.4.6)

nuxt NPM version =4.0.3, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =0.0.1, =1.0.0, =1.1.0, =2.0.1 and more Source cves: CVE-2026-53722 Source advisory: OSV:GHSA-934W-87QH-QR26...

@classement-des-associations/website-theme (=0.1.3), @cwa/nuxt-edge (>=1.0.0-29304822.f444f03 <=1.0.0-29317775.3ebbdc9) +24 more potentially affected by CVE-2026-56301 via nuxt (>=3.18.1 <=3.20.1)

nuxt NPM version =3.18.1, =1.0.0-29304822.f444f03, =9.13.1, =1.0.1-alpha.0, =0.20.1, =0.15.1, =0.13.1, =0.16.0, =0.10.1, =0.16.1, =0.13.0, =0.16.0 - @neon.id/relation =0.28.1 and more Source cves: CVE-2026-56301 Source advisory: SNYK:JS-NUXT-17353897...

@classement-des-associations/website-theme (=0.1.3), @cwa/nuxt-edge (>=1.0.0-29304822.f444f03 <=1.0.0-29317775.3ebbdc9) +24 more potentially affected by unknown CVE via nuxt (>=3.18.1 <=3.20.1)

nuxt NPM version =3.18.1, =1.0.0-29304822.f444f03, =9.13.1, =1.0.1-alpha.0, =0.20.1, =0.15.1, =0.13.1, =0.16.0, =0.10.1, =0.16.1, =0.13.0, =0.16.0 - @neon.id/relation =0.28.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-534H-C3CW-V3H9...

@bloggrify/bento (>=3.0.0 <=3.0.1), @bloggrify/core (>=3.0.0 <=3.1.2) +22 more potentially affected by CVE-2026-56301 via nuxt (>=4.0.0-rc.0 <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =0.0.1, =1.0.0, =1.1.0, =2.0.1 and more Source cves: CVE-2026-56301 Source advisory: SNYK:JS-NUXT-17353897...

@bloggrify/bento (>=3.0.0 <=3.0.1), @bloggrify/core (>=3.0.0 <=3.1.2) +21 more potentially affected by unknown CVE via nuxt (>=4.0.3 <=4.4.6)

nuxt NPM version =4.0.3, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =0.0.1, =1.0.0, =1.1.0, =2.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-534H-C3CW-V3H9...

@bloggrify/bento (>=3.0.0 <=3.0.1), @bloggrify/core (>=3.0.0 <=3.1.2) +21 more potentially affected by CVE-2026-53721 via nuxt (>=4.0.3 <=4.4.6)

nuxt NPM version =4.0.3, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =0.0.1, =1.0.0, =1.1.0, =2.0.1 and more Source cves: CVE-2026-53721 Source advisory: OSV:GHSA-MM7M-92G8-7M47...

@andor83/mother-may-i (>=1.0.1 <=1.0.10), @base_/cli (>=1.0.6 <=1.0.29-beta.26) +56 more potentially affected by CVE-2026-53721 via nuxt (>=3.11.2 <=3.20.1)

nuxt NPM version =3.11.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.2.1, =1.2.0, =1.1.0, =1.0.0-29304822.f444f03, =8.0.0, =0.3.14, =9.8.3, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.1-alpha.33 and more Source cves: CVE-2026-53721 Source advisory: OSV:GHSA-MM7M-92G8-7M47...

@bloggrify/bento (>=3.0.0 <=3.0.1), @bloggrify/core (>=3.0.0 <=3.1.2) +21 more potentially affected by CVE-2026-56326 via nuxt (>=4.0.3 <=4.4.6)

nuxt NPM version =4.0.3, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =0.0.1, =1.0.0, =1.1.0, =2.0.1 and more Source cves: CVE-2026-56326 Source advisory: OSV:GHSA-C9CV-MQ2M-PPP3...

@andor83/mother-may-i (>=1.0.1 <=1.0.10), @awes-io/base-nuxt (>=1.0.0 <=1.0.2) +175 more potentially affected by CVE-2026-56326 via nuxt (>=0.10.7 <=3.20.1)

nuxt NPM version =0.10.7, =1.0.1, =1.0.0, =1.0.6, =1.0.6, =1.22.17, =0.9.1, =1.1.1, =1.0.1, =1.1.0, =2.17.8, =1.0.0-29304822.f444f03, =0.1.5, =0.4.0, =0.1.0, =0.1.0-alpha.6 and more Source cves: CVE-2026-56326 Source advisory: OSV:GHSA-C9CV-MQ2M-PPP3...

@bloggrify/bento (>=3.0.0 <=3.0.1), @bloggrify/core (>=3.0.0 <=3.1.2) +22 more potentially affected by CVE-2026-56326 via nuxt (>=4.0.0-rc.0 <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =0.0.1, =1.0.0, =1.1.0, =2.0.1 and more Source cves: CVE-2026-56326 Source advisory: SNYK:JS-NUXT-17353894...

@andor83/mother-may-i (>=1.0.1 <=1.0.10), @base_/cli (>=1.0.6 <=1.0.29-beta.26) +69 more potentially affected by CVE-2026-56326 via nuxt (>=3.0.0 <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1, =1.1.0, =1.0.0-29304822.f444f03, =8.0.0, =0.3.14, =9.8.3, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.1-alpha.33 and more Source cves: CVE-2026-56326 Source advisory: SNYK:JS-NUXT-17353894...

5mghost-rover (>=0.0.1 <=0.0.3), ace-framework (>=0.6.0 <=0.7.3) +98 more potentially affected by CVE-2026-49461 via pypdf (>=6.0.0 <=6.11.0)

pypdf PYPI version =6.0.0, =0.0.1, =0.6.0, =0.1.0, =0.0.2, =0.1.0, =0.0.24, =1.45.0, =0.1.2, =0.0.1.dev0, =0.0.1, =0.0.2, =0.0.5 - autopattern =0.2.0 and more Source cves: CVE-2026-49461 Source advisory: SNYK:PYTHON-PYPDF-17356472...

5mghost-rover (>=0.0.1 <=0.0.3), a-data-processing (=0.0.1) +676 more potentially affected by CVE-2026-49461 via pypdf (>=3.10.0 <=6.11.0)

pypdf PYPI version =3.10.0, =0.0.1, =0.6.0, =0.1.1, =0.8.1, =0.9.1, =0.1.0, =0.2.0, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.3 and more Source cves: CVE-2026-49461 Source advisory: OSV:GHSA-J543-4VMF-QM7V...

5mghost-rover (>=0.0.1 <=0.0.3), ace-framework (>=0.6.0 <=0.7.3) +98 more potentially affected by CVE-2026-49460 via pypdf (>=6.0.0 <=6.11.0)

pypdf PYPI version =6.0.0, =0.0.1, =0.6.0, =0.1.0, =0.0.2, =0.1.0, =0.0.24, =1.45.0, =0.1.2, =0.0.1.dev0, =0.0.1, =0.0.2, =0.0.5 - autopattern =0.2.0 and more Source cves: CVE-2026-49460 Source advisory: SNYK:PYTHON-PYPDF-17356485...

5mghost-rover (>=0.0.1 <=0.0.3), a-data-processing (=0.0.1) +676 more potentially affected by CVE-2026-49460 via pypdf (>=3.10.0 <=6.11.0)

pypdf PYPI version =3.10.0, =0.0.1, =0.6.0, =0.1.1, =0.8.1, =0.9.1, =0.1.0, =0.2.0, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.3 and more Source cves: CVE-2026-49460 Source advisory: OSV:GHSA-5HGR-HG42-57JG...

5mghost-rover (>=0.0.1 <=0.0.3), a-data-processing (=0.0.1) +676 more potentially affected by CVE-2026-48735 via pypdf (>=3.10.0 <=6.11.0)

pypdf PYPI version =3.10.0, =0.0.1, =0.6.0, =0.1.1, =0.8.1, =0.9.1, =0.1.0, =0.2.0, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.3 and more Source cves: CVE-2026-48735 Source advisory: OSV:GHSA-WJQC-6W8F-H24C...

@ainsleydev/payload-helper (>=0.0.1 <=0.0.2), @bsct/payload (=1.0.0) +90 more potentially affected by CVE-2026-48714 via i18next-http-middleware (>=3.0.2 <=3.9.6)

i18next-http-middleware NPM version =3.0.2, =0.0.1, =1.0.1, =0.0.1, =0.0.1, =0.0.1, =8.0.0, =3.0.0, =1.0.0, =1.0.6, =1.0.0, =0.0.1, =0.0.229 and more Source cves: CVE-2026-48714 Source advisory: SNYK:JS-I18NEXTHTTPMIDDLEWARE-17372918...

@diia-inhouse/i18n (>=2.8.2 <=3.1.8), @genie23/electron-base (>=0.0.4-alpha <=0.0.225) +54 more potentially affected by CVE-2026-48713 via i18next-fs-backend (>=2.0.0 <=2.6.5)

i18next-fs-backend NPM version =2.0.0, =2.8.2, =0.0.4-alpha, =3.0.0, =7.1.2, =2.4.2, =1.0.0, =1.0.0, =2.4.2, =2.4.2, =2.6.28, =2.4.2, =2.4.2, =2.4.2, =2.4.2, =2.5.5 and more Source cves: CVE-2026-48713 Source advisory: SNYK:JS-I18NEXTFSBACKEND-17372915...

@alok5953/videoextract (>=1.0.0 <=1.0.7), @anichart/remotion (>=0.0.6 <=0.2.1) +101 more potentially affected by CVE-2026-30121 via remotion (>=1.4.0-alpha.a42341a0 <=4.0.41)

remotion NPM version =1.4.0-alpha.a42341a0, =1.0.0, =0.0.6, =1.1.0, =1.1.0, =1.1.0, =0.1.16, =6.0.1, =0.1.38, =1.5.2, =0.1.91, =0.1.0, =5.2.0, =5.5.8 and more Source cves: CVE-2026-30121 Source advisory: OSV:GHSA-G6PC-6676-C23J...

@alok5953/videoextract (>=1.0.0 <=1.0.7), @anichart/remotion (>=0.0.6 <=0.2.1) +101 more potentially affected by CVE-2026-30120 via remotion (>=1.4.0-alpha.a42341a0 <=4.0.41)

remotion NPM version =1.4.0-alpha.a42341a0, =1.0.0, =0.0.6, =1.1.0, =1.1.0, =1.1.0, =0.1.16, =6.0.1, =0.1.38, =1.5.2, =0.1.91, =0.1.0, =5.2.0, =5.5.8 and more Source cves: CVE-2026-30120 Source advisory: OSV:GHSA-2JQP-F4GR-44FR...

@bloggrify/bento (>=3.0.0 <=3.0.1), @bloggrify/core (>=3.0.0 <=3.1.2) +22 more potentially affected by unknown CVE via nuxt (>=4.0.0-rc.0 <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =0.0.1, =1.0.0, =1.1.0, =2.0.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-NUXT-17353906...

@bloggrify/bento (>=3.0.0 <=3.0.1), @bloggrify/core (>=3.0.0 <=3.1.2) +22 more potentially affected by unknown CVE via nuxt (>=4.0.0-rc.0 <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =0.0.1, =1.0.0, =1.1.0, =2.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RQ7W-G337-39QQ...

@aligent/cdk-esbuild (=2.1.0), @aligent/cdk-graphql-mesh-server (>=2.2.0 <=2.17.0) +460 more potentially affected by CVE-2026-11417 via aws-cdk-lib (>=2.0.0-alpha.4 <=2.245.0)

aws-cdk-lib NPM version =2.0.0-alpha.4, =2.2.0, =2.3.7, =2.1.0, =2.1.0, =2.0.0-beta, =1.2.15, =5.0.31-acdk-upgrade-2-129.0, =2.16.0-acdk-upgrade-2-129.0, =5.0.31-acdk-upgrade-2-129.0, =3.7.10-acdk-upgrade-2-129.0, =3.1.19-acdk-upgrade-2-129.0, =5.7.5-acdk-upgrade-2-129.0,...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +19976 more potentially affected by CVE-2026-50560 via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.134.Final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.Beta4, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +3026 more potentially affected by CVE-2026-50560 via io.netty:netty-codec-http2 (>=4.2.0.Final <=4.2.14.Final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.Final, =0.1.0, =0.1.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-50560 Source advisory: OSV:GHSA-563Q-J3CM-6JXM...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +23887 more potentially affected by CVE-2026-50020 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.134.Final)

io.netty:netty-codec-http MAVEN version =4.0.0.Alpha1, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...