@regis-samurai/n8n (>=0.216.1, <=0.219.1), n8n-nodes-accelo (>=0.1.0, <=0.1.9) +11 more potentially affected by CVE-2026-110850 via n8n (>=0.81.0, <=0.219.1)

n8n NPM version =0.81.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-110850 Source advisory: MEND:CVE-2026-110850...

@regis-samurai/n8n (>=0.216.1, <=0.219.1), n8n-nodes-accelo (>=0.1.0, <=0.1.9) +11 more potentially affected by CVE-2026-110848 via n8n (>=0.81.0, <=0.219.1)

n8n NPM version =0.81.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-110848 Source advisory: MEND:CVE-2026-110848...

@regis-samurai/n8n (>=0.216.1, <=0.219.1), n8n-nodes-accelo (>=0.1.0, <=0.1.9) +11 more potentially affected by CVE-2026-110847 via n8n (>=0.81.0, <=0.219.1)

n8n NPM version =0.81.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-110847 Source advisory: MEND:CVE-2026-110847...

@regis-samurai/n8n (>=0.216.1, <=0.219.1), n8n-nodes-accelo (>=0.1.0, <=0.1.9) +11 more potentially affected by CVE-2026-110845 via n8n (>=0.81.0, <=0.219.1)

n8n NPM version =0.81.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-110845 Source advisory: MEND:CVE-2026-110845...

@regis-samurai/n8n (>=0.216.1, <=0.219.1), n8n-nodes-accelo (>=0.1.0, <=0.1.9) +11 more potentially affected by CVE-2026-110843 via n8n (>=0.81.0, <=0.219.1)

n8n NPM version =0.81.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-110843 Source advisory: MEND:CVE-2026-110843...

@aiqadam/qadam-clickup (0.9.1), @aiqadam/qadam-tables (0.5.1) +189 more potentially affected by CVE-2026-110816 via qs (6.16.0)

qs NPM version 6.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on qs and may be impacted: - @aiqadam/qadam-clickup 0.9.1 - @aiqadam/qadam-tables 0.5.1 - @burotan/strapi-client =0.0.1, =0.1.0, =3.0.0, =1.18.0, =4.2.0, =1.33.0, =1.0.0-beta,...

ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +5278 more potentially affected by CVE-2026-102460 via io.vertx:vertx-web (>=4.0.0, <=4.5.34)

io.vertx:vertx-web MAVEN version =4.0.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0, =0.1.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.tock:bot-test (26.9.0), ai.tock:bot-test-base (26.9.0) +101 more potentially affected by CVE-2026-102460 via io.vertx:vertx-web (5.2.0)

io.vertx:vertx-web MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - ai.tock:bot-test 26.9.0 - ai.tock:bot-test-base 26.9.0 - ai.tock:bot-toolkit 26.9.0 - ai.tock:bot-toolkit-base 26.9.0 -...

ai.tock:bot-test (>=25.9.0, <=26.3.4), ai.tock:bot-test-base (>=25.9.0, <=26.3.4) +885 more potentially affected by CVE-2026-102460 via io.vertx:vertx-web (>=5.0.0, <=5.1.8)

io.vertx:vertx-web MAVEN version =5.0.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.4 and more Source cves: CVE-2026-102460 Source advisory: SNYK:JAVA-IOVERTX-20954497...

ai.tock:bot-test (>=25.9.0, <=26.3.4), ai.tock:bot-test-base (>=25.9.0, <=26.3.4) +1961 more potentially affected by CVE-2026-102479 via io.vertx:vertx-core (>=5.0.0, <=5.1.9)

io.vertx:vertx-core MAVEN version =5.0.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.4 and more Source cves: CVE-2026-102479 Source advisory: SNYK:JAVA-IOVERTX-20948698...

ai.tock:bot-test (26.9.0), ai.tock:bot-test-base (26.9.0) +487 more potentially affected by CVE-2026-102479 via io.vertx:vertx-core (5.2.0)

io.vertx:vertx-core MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-core and may be impacted: - ai.tock:bot-test 26.9.0 - ai.tock:bot-test-base 26.9.0 - ai.tock:bot-toolkit 26.9.0 - ai.tock:bot-toolkit-base 26.9.0 -...

ai.tock:bot-test (26.9.0), ai.tock:bot-test-base (26.9.0) +487 more potentially affected by CVE-2026-102476 via io.vertx:vertx-core (5.2.0)

io.vertx:vertx-core MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-core and may be impacted: - ai.tock:bot-test 26.9.0 - ai.tock:bot-test-base 26.9.0 - ai.tock:bot-toolkit 26.9.0 - ai.tock:bot-toolkit-base 26.9.0 -...

ai.tock:bot-test (>=25.9.0, <=26.3.4), ai.tock:bot-test-base (>=25.9.0, <=26.3.4) +1961 more potentially affected by CVE-2026-102476 via io.vertx:vertx-core (>=5.0.0, <=5.1.9)

io.vertx:vertx-core MAVEN version =5.0.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.4 and more Source cves: CVE-2026-102476 Source advisory: SNYK:JAVA-IOVERTX-20948697...

br.com.seedgrid:seedgrid-ai-pricing (>=2026.10.08, <=2026.10.14), br.com.seedgrid:seedgrid-apikeys (>=2026.07.08, <=2026.10.14) +52 more potentially affected by CVE-2026-102471 via io.vertx:vertx-mail-client (>=4.0.0, <=4.5.34)

io.vertx:vertx-mail-client MAVEN version =4.0.0, =2026.10.08, =2026.07.08, =2026.07.08, =2026.07.08, =2026.07.08, =2026.09.10, =2026.09.10, =2026.10.08, =2026.09.10, =2026.09.10, =2026.10.08, =2026.07.09, =2026.07.09, =2026.10.08, =2026.10.08, =2026.10.15 and more Source cves: CVE-2026-102471...

ai.tock:bot-test (>=26.3.3, <=26.3.4), ai.tock:bot-test-base (>=26.3.3, <=26.3.4) +1283 more potentially affected by CVE-2026-102479 via io.vertx:vertx-core (>=5.1.0, <=5.1.9)

io.vertx:vertx-core MAVEN version =5.1.0, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.4 and more Source cves: CVE-2026-102479 Source advisory: MEND:CVE-2026-102479...

ai.tock:bot-test (26.9.0), ai.tock:bot-test-base (26.9.0) +487 more potentially affected by CVE-2026-102479 via io.vertx:vertx-core (5.2.0)

io.vertx:vertx-core MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-core and may be impacted: - ai.tock:bot-test 26.9.0 - ai.tock:bot-test-base 26.9.0 - ai.tock:bot-toolkit 26.9.0 - ai.tock:bot-toolkit-base 26.9.0 -...

better-social-notifications (>=1.0.0, <=20260529145048.0.0.dev0), changedetection-io (>=0.39.18, <=0.60.3) +20 more potentially affected by CVE-2026-59180 via apprise (>=1.0.0, <=1.10.0)

apprise PYPI version =1.0.0, =1.0.0, =0.39.18, =1.0.0, =0.1.0, =0.95.0, =1.3.0, =0.8.0, =0.3.0rc1, =0.0.6, =0.0.25 - proxy-rotator-toolkit 0.0.26 and more Source cves: CVE-2026-59180 Source advisory: OSV:GHSA-856C-92HV-3VXX...

apprise-transactions (1.0.0) potentially affected by CVE-2026-59180 via apprise (0.8.5)

apprise PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on apprise and may be impacted: - apprise-transactions 1.0.0 Source cves: CVE-2026-59180 Source advisory: OSV:GHSA-856C-92HV-3VXX...

changedetection-io (>=0.39.13, <=0.39.14.1) potentially affected by CVE-2026-59180 via apprise (0.9.8.3)

apprise PYPI version 0.9.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on apprise and may be impacted: - changedetection-io =0.39.13, =0.39.14.1 Source cves: CVE-2026-59180 Source advisory: OSV:GHSA-856C-92HV-3VXX...

changedetection-io (>=0.38.2, <=0.39.17.2) potentially affected by CVE-2026-59180 via apprise (0.9.9)

apprise PYPI version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on apprise and may be impacted: - changedetection-io =0.38.2, =0.39.17.2 Source cves: CVE-2026-59180 Source advisory: OSV:GHSA-856C-92HV-3VXX...

better-social-notifications (>=1.0.0, <=20260529145048.0.0.dev0), changedetection-io (>=0.39.18, <=0.60.3) +20 more potentially affected by CVE-2026-59180 via apprise (>=1.0.0, <=1.10.0)

apprise PYPI version =1.0.0, =1.0.0, =0.39.18, =1.0.0, =0.1.0, =0.95.0, =1.3.0, =0.8.0, =0.3.0rc1, =0.0.6, =0.0.25 - proxy-rotator-toolkit 0.0.26 and more Source cves: CVE-2026-59180 Source advisory: GHSA-856C-92HV-3VXX...

target-apprise (0.0.1) potentially affected by CVE-2026-59180 via apprise (0.9.7)

apprise PYPI version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on apprise and may be impacted: - target-apprise 0.0.1 Source cves: CVE-2026-59180 Source advisory: OSV:GHSA-856C-92HV-3VXX...

ai.tock:bot-test (>=26.3.3, <=26.3.4), ai.tock:bot-test-base (>=26.3.3, <=26.3.4) +578 more potentially affected by CVE-2026-102460 via io.vertx:vertx-web (>=5.1.0, <=5.1.8)

io.vertx:vertx-web MAVEN version =5.1.0, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.4 and more Source cves: CVE-2026-102460 Source advisory: MEND:CVE-2026-102460...

ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +3528 more potentially affected by CVE-2026-102460 via io.vertx:vertx-web (>=4.5.0, <=4.5.34)

io.vertx:vertx-web MAVEN version =4.5.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0, =0.1.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

amzn-nova-customization-sdk (1.3.14), amzn-nova-forge (>=1.3.14, <=1.3.18) potentially affected by CVE-2026-110248 via sagemaker (3.5.0)

sagemaker PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge =1.3.14, =1.3.18 Source cves: CVE-2026-110248 Source advisory: MEND:CVE-2026-110248...

ai.tock:bot-test (26.9.0), ai.tock:bot-test-base (26.9.0) +487 more potentially affected by CVE-2026-102476 via io.vertx:vertx-core (5.2.0)

io.vertx:vertx-core MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-core and may be impacted: - ai.tock:bot-test 26.9.0 - ai.tock:bot-test-base 26.9.0 - ai.tock:bot-toolkit 26.9.0 - ai.tock:bot-toolkit-base 26.9.0 -...

ai.tock:bot-test (>=26.3.3, <=26.3.4), ai.tock:bot-test-base (>=26.3.3, <=26.3.4) +1283 more potentially affected by CVE-2026-102476 via io.vertx:vertx-core (>=5.1.0, <=5.1.9)

io.vertx:vertx-core MAVEN version =5.1.0, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.4 and more Source cves: CVE-2026-102476 Source advisory: MEND:CVE-2026-102476...

@appium/base-driver (>=10.5.0, <=10.7.1), @appium/base-plugin (>=3.2.2, <=3.3.2) +15 more potentially affected by CVE-2026-103975 via @appium/support (>=7.2.0, <=7.2.5)

@appium/support NPM version =7.2.0, =10.5.0, =3.2.2, =2.4.0, =6.0.4, =4.2.2, =4.2.2, =1.1.2, =4.1.2, =2.1.4, =3.0.10, =1.0.0, =1.0.0, =3.4.0, =0.1.0-beta.1, =0.1.0-beta.15 and more Source cves: CVE-2026-103975 Source advisory: MEND:CVE-2026-103975...

adversary-mcp-server (>=0.1.0, <=1.11.1), ai-red-teaming-engine (>=0.5.0, <=0.6.0) +97 more potentially affected by CVE-2026-109527 via mcp (1.29.0)

mcp PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mcp and may be impacted: - adversary-mcp-server =0.1.0, =0.5.0, =0.2.1, =0.1.1, =0.2.0, =0.1.0, =1.0.0, =0.4.0, =0.1.0, =0.1.3, =0.9.0, =1.0.0, =1.0.2 and more Source cves:...

agent-memory-bridge (>=0.32.1, <=0.32.2), agentcrew-ai (0.21.0) +96 more potentially affected by CVE-2026-109527 via mcp (>=2.0.0, <=2.0.1)

mcp PYPI version =2.0.0, =0.32.1, =0.12.0, =0.6.0, =1.0.12, =0.11.0, =0.1.0, =0.3.0, =0.13.0, =1.0.3, =0.2.0, =0.9.1, =0.9.3 and more Source cves: CVE-2026-109527 Source advisory: MEND:CVE-2026-109527...

cn.net.pap.example:pap4j-boot3-example-spring-ai (0.0.4), com.embabel.agent:embabel-agent-a2a (>=0.5.0, <=1.0.0) +288 more potentially affected by CVE-2026-108395 via io.modelcontextprotocol.sdk:mcp-core (>=0.18.0, <=0.18.3)

io.modelcontextprotocol.sdk:mcp-core MAVEN version =0.18.0, =0.5.0, =0.5.0, =0.5.0, =1.0.0-rc1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.0.0 and more Source cves: CVE-2026-108395 Source advisory: MEND:CVE-2026-108395...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +248 more potentially affected by CVE-2026-108395 via io.modelcontextprotocol.sdk:mcp-core (>=1.1.0, <=1.1.3)

io.modelcontextprotocol.sdk:mcp-core MAVEN version =1.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.7.1 and more Source cves:...

ai.authplane.sdk:authplane-mcp (>=0.1.0, <=0.3.0), ai.authplane.sdk:authplane-spring (>=0.1.0, <=0.3.0) +406 more potentially affected by CVE-2026-108395 via io.modelcontextprotocol.sdk:mcp-core (>=2.0.0-m1, <=2.0.0)

io.modelcontextprotocol.sdk:mcp-core MAVEN version =2.0.0-m1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.8.0, =0.6.0, =0.4.0, =0.4.0, =0.4.0, =1.0.15, =2.2.0, =2.2.0, =2.3.1 and more Source cves: CVE-2026-108395 Source advisory: MEND:CVE-2026-108395...

1claw-crewai-tools (>=0.1.0, <=0.3.4), 1xn-vmcp (>=0.5.2, <=0.6.1) +1518 more potentially affected by CVE-2026-59951 via mcp (>=1.8.0, <=1.29.1)

mcp PYPI version =1.8.0, =0.1.0, =0.5.2, =0.1.1rc0, =0.0.2, =0.2.0, =0.1.0, =0.1.7rc1, =0.1.0, =0.1.2 and more Source cves: CVE-2026-59951 Source advisory: MEND:CVE-2026-59951...

5mghost-rover (>=0.0.1, <=0.0.3), a4ui-agent (0.1.0) +420 more potentially affected by CVE-2026-59951 via mcp (>=2.0.0, <=2.1.1)

mcp PYPI version =2.0.0, =0.0.1, =0.6.0, =0.1.0, =0.1.0a1, =0.32.1, =0.1.0, =0.21.0, =0.8.0, =0.10.0, =0.21.0 and more Source cves: CVE-2026-59951 Source advisory: MEND:CVE-2026-59951...

adstoolbox (2025.12.2.2), aequitas (>=0.26.0, <=0.42.0) +47 more potentially affected by CVE-2026-110642 via xhtml2pdf (>=0.0.6, <=0.2.18)

xhtml2pdf PYPI version =0.0.6, =0.26.0, =2.3.1, =0.3.0, =1.0.0, =1.0.0, =1.0.3, =1.0.3, =1.3.1, =1.3.3 and more Source cves: CVE-2026-110642 Source advisory: SNYK:PYTHON-XHTML2PDF-20969951...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.27), @angelmartz/template-drawer-navigation-ng (9.1.0) +19 more potentially affected by CVE-2026-101896 via @angular/router (>=22.0.0, <=22.1.8)

@angular/router NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =22.0.0-alpha.1, =22.0.0-alpha.1, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: CVE-2026-101896 Source advisory: MEND:CVE-2026-101896...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +32 more potentially affected by CVE-2026-101896 via @angular/router (>=20.0.0, <=20.3.25)

@angular/router NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.0.60 and more Source cves: CVE-2026-101896 Source advisory: MEND:CVE-2026-101896...

@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +35 more potentially affected by CVE-2026-101896 via @angular/router (>=21.0.0, <=21.2.19)

@angular/router NPM version =21.0.0, =1.0.8, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-next.10, =21.0.0-next.10, =3.0.1, =6.0.1, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =6.1.0-edge.5 and more Source cves: CVE-2026-101896 Source advisory: MEND:CVE-2026-101896...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@landsoft/wng-auth-module (>=1.0.0, <=1.0.4), anb-forms (>=1.2.0, <=1.3.0) +11 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=5.2.0, <=5.2.10)

@angular/platform-server NPM version =5.2.0, =1.0.0, =1.2.0, =1.2.1, =3.0.0, =5.0.1, =1.0.6, =0.0.57, =0.0.1, =0.0.0, =0.0.11 - wng-id-components 1.0.2 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@flowaccount/scullyio (1.0.0), @flowaccount/scullyio-scully (>=2.0.0, <=2.0.14) +21 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=12.2.6, <=12.2.15)

@angular/platform-server NPM version =12.2.6, =2.0.0, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.41 and more Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@nk-spirit/nk-ngx-bootstrap (7.1.16) potentially affected by CVE-2026-101895 via @angular/platform-server (11.2.0)

@angular/platform-server NPM version 11.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @nk-spirit/nk-ngx-bootstrap 7.1.16 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@hmcts/annotation-ui (1.0.0), @hmcts/annotation-ui-lib (>=1.0.1, <=1.0.2-RC) +10 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=6.1.0, <=6.1.9)

@angular/platform-server NPM version =6.1.0, =1.0.1, =1.1.8-bata.1, =2.0.0, =1.23.14, =1.0.634, =1.0.635 - shivs-angular5-painter 1.1.0 - totvs-thf2-components 0.0.2 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@proactive-as/angular.vendor (7.2.13), @sitespirit/mediaspirit-module (>=0.0.71, <=7.2.17) +3 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=7.2.4, <=7.2.15)

@angular/platform-server NPM version =7.2.4, =0.0.71, =0.0.2, =0.0.1-1.1, =2.0.11, =2.1.499 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

angular-store-locator (>=0.0.1, <=0.1.0), angular5-canvas-drawer (1.6.5) +2 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=8.2.0, <=8.2.12)

@angular/platform-server NPM version =8.2.0, =0.0.1, =1.0.135, =2.0.20 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@mxtommy/kip (>=1.1.1, <=1.1.2), calendarevents.app (>=0.0.0, <=0.0.1) +1 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=9.1.7, <=9.1.11)

@angular/platform-server NPM version =9.1.7, =1.1.1, =0.0.0, =0.0.1 - shared-encoding-library 0.0.0 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) potentially affected by CVE-2026-101895 via @angular/platform-server (>=21.1.2, <=21.2.0)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.5.11 - foliokit 0.0.0 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8) potentially affected by CVE-2026-101895 via @angular/platform-server (19.2.18)

@angular/platform-server NPM version 19.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @cosla/sensemaking-web-ui =1.0.5, =1.0.8 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4) potentially affected by CVE-2026-101895 via @angular/platform-server (18.2.13)

@angular/platform-server NPM version 18.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @cosla/sensemaking-web-ui =1.0.0, =1.0.4 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...