@flowaccount/scullyio (1.0.0), @flowaccount/scullyio-scully (>=2.0.0, <=2.0.14) +21 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=12.2.6, <=12.2.15)

@angular/platform-server NPM version =12.2.6, =2.0.0, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.41 and more Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

creme-crm (2.8.6) potentially affected by CVE-2026-110642 via xhtml2pdf (0.2.18)

xhtml2pdf PYPI version 0.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on xhtml2pdf and may be impacted: - creme-crm 2.8.6 Source cves: CVE-2026-110642 Source advisory: MEND:CVE-2026-110642...

@hankts/shopify-cli (>=3.53.0, <=3.56.0), @hankts/shopify-cli-kit (>=3.53.0, <=3.53.2) +24 more potentially affected by CVE-2026-110634 via git-diff (2.0.6)

git-diff NPM version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on git-diff and may be impacted: - @hankts/shopify-cli =3.53.0, =3.53.0, =3.53.0, =0.0.0-experimental-20230628155405, =0.0.0-experimental-20230628155405,...

@caldwell619/bulk-webp-converter (>=0.0.2, <=0.0.5), @gld5000-cli/image-scripts (>=1.0.1, <=1.0.23) +84 more potentially affected by CVE-2026-110635 via webp-converter (>=2.3.1, <=2.3.3)

webp-converter NPM version =2.3.1, =0.0.2, =1.0.1, =1.2.0, =1.13.0-0, =2.1.1-beta.0, =2.1.1-beta.0, =1.0.8, =1.0.0, =0.2.1, =5.9.0, =1.0.0, =2.14.0-alpha.DSY-0666.2.0, =7.19.0-DSY-2455.0, =0.13.62, =3.5.0-alpha.DSY-2608.1.0, =3.8.3 and more Source cves: CVE-2026-110635 Source advisory:...

ai.badmonkey.agentspaces:agentspaces-micronaut-processor (>=0.2.0, <=0.3.0), ai.codriverlabs:scaleout-build-maven-plugin (1.1.0-rc2) +7899 more potentially affected by CVE-2026-110591 via org.ow2.asm:asm (>=9.10, <=9.10.1)

org.ow2.asm:asm MAVEN version =9.10, =0.2.0, =0.9.3, =0.9.4, =0.9.7, =0.9.3, =0.9.9, =0.9.6, =0.9.3, =0.9.3, =0.9.9, =0.9.3, =0.9.3, =0.1.4, =0.1.5 - ai.pipestream.module:module-echo 0.1.4 and more Source cves: CVE-2026-110591 Source advisory: MEND:CVE-2026-110591...

ai.badmonkey.agentspaces:agentspaces-micronaut-processor (>=0.2.0, <=0.3.0), ai.pipestream.module:module-chunker (>=0.1.4, <=0.1.5) +2564 more potentially affected by CVE-2026-110591 via org.ow2.asm:asm-analysis (>=9.10, <=9.10.1)

org.ow2.asm:asm-analysis MAVEN version =9.10, =0.2.0, =0.1.4, =0.3.0, =0.3.0, =0.1.2, =0.1.4, =0.3.0, =0.3.0, =0.3.1 - ai.pipestream:account-manager 0.0.25 - ai.pipestream:connector-admin-service 0.1.19 and more Source cves: CVE-2026-110591 Source advisory: MEND:CVE-2026-110591...

ai.badmonkey.agentspaces:agentspaces-micronaut-processor (>=0.2.0, <=0.3.0), ai.covia:covia-claude-code (>=0.9.3, <=0.9.11) +4030 more potentially affected by CVE-2026-110270 via org.ow2.asm:asm-commons (>=9.10, <=9.10.1)

org.ow2.asm:asm-commons MAVEN version =9.10, =0.2.0, =0.9.3, =0.9.4, =0.9.7, =0.9.3, =0.9.9, =0.9.6, =0.9.3, =0.9.3, =0.9.9, =0.9.3, =0.9.3, =0.1.4, =0.3.0, =0.3.1 and more Source cves: CVE-2026-110270 Source advisory: MEND:CVE-2026-110270...

ai.badmonkey.agentspaces:agentspaces-micronaut-processor (>=0.2.0, <=0.3.0), ai.covia:covia-claude-code (>=0.9.3, <=0.9.11) +4030 more potentially affected by CVE-2026-110262 via org.ow2.asm:asm-commons (>=9.10, <=9.10.1)

org.ow2.asm:asm-commons MAVEN version =9.10, =0.2.0, =0.9.3, =0.9.4, =0.9.7, =0.9.3, =0.9.9, =0.9.6, =0.9.3, =0.9.3, =0.9.9, =0.9.3, =0.9.3, =0.1.4, =0.3.0, =0.3.1 and more Source cves: CVE-2026-110262 Source advisory: MEND:CVE-2026-110262...

ai.badmonkey.agentspaces:agentspaces-micronaut-processor (>=0.2.0, <=0.3.0), ai.codriverlabs:scaleout-build-maven-plugin (1.1.0-rc2) +7899 more potentially affected by CVE-2026-110263 via org.ow2.asm:asm (>=9.10, <=9.10.1)

org.ow2.asm:asm MAVEN version =9.10, =0.2.0, =0.9.3, =0.9.4, =0.9.7, =0.9.3, =0.9.9, =0.9.6, =0.9.3, =0.9.3, =0.9.9, =0.9.3, =0.9.3, =0.1.4, =0.1.5 - ai.pipestream.module:module-echo 0.1.4 and more Source cves: CVE-2026-110263 Source advisory: MEND:CVE-2026-110263...

ai.badmonkey.agentspaces:agentspaces-micronaut-processor (>=0.2.0, <=0.3.0), ai.codriverlabs:scaleout-build-maven-plugin (1.1.0-rc2) +7899 more potentially affected by CVE-2026-110261 via org.ow2.asm:asm (>=9.10, <=9.10.1)

org.ow2.asm:asm MAVEN version =9.10, =0.2.0, =0.9.3, =0.9.4, =0.9.7, =0.9.3, =0.9.9, =0.9.6, =0.9.3, =0.9.3, =0.9.9, =0.9.3, =0.9.3, =0.1.4, =0.1.5 - ai.pipestream.module:module-echo 0.1.4 and more Source cves: CVE-2026-110261 Source advisory: MEND:CVE-2026-110261...

ai.badmonkey.agentspaces:agentspaces-micronaut-processor (>=0.2.0, <=0.3.0), ai.codriverlabs:scaleout-build-maven-plugin (1.1.0-rc2) +7899 more potentially affected by CVE-2026-110259 via org.ow2.asm:asm (>=9.10, <=9.10.1)

org.ow2.asm:asm MAVEN version =9.10, =0.2.0, =0.9.3, =0.9.4, =0.9.7, =0.9.3, =0.9.9, =0.9.6, =0.9.3, =0.9.3, =0.9.9, =0.9.3, =0.9.3, =0.1.4, =0.1.5 - ai.pipestream.module:module-echo 0.1.4 and more Source cves: CVE-2026-110259 Source advisory: MEND:CVE-2026-110259...

ai.badmonkey.agentspaces:agentspaces-micronaut-processor (>=0.2.0, <=0.3.0), ai.codriverlabs:scaleout-build-maven-plugin (1.1.0-rc2) +7899 more potentially affected by CVE-2026-110260 via org.ow2.asm:asm (>=9.10, <=9.10.1)

org.ow2.asm:asm MAVEN version =9.10, =0.2.0, =0.9.3, =0.9.4, =0.9.7, =0.9.3, =0.9.9, =0.9.6, =0.9.3, =0.9.3, =0.9.9, =0.9.3, =0.9.3, =0.1.4, =0.1.5 - ai.pipestream.module:module-echo 0.1.4 and more Source cves: CVE-2026-110260 Source advisory: MEND:CVE-2026-110260...

ai.badmonkey.agentspaces:agentspaces-micronaut-processor (>=0.2.0, <=0.3.0), ai.codriverlabs:scaleout-build-maven-plugin (1.1.0-rc2) +7899 more potentially affected by CVE-2026-110258 via org.ow2.asm:asm (>=9.10, <=9.10.1)

org.ow2.asm:asm MAVEN version =9.10, =0.2.0, =0.9.3, =0.9.4, =0.9.7, =0.9.3, =0.9.9, =0.9.6, =0.9.3, =0.9.3, =0.9.9, =0.9.3, =0.9.3, =0.1.4, =0.1.5 - ai.pipestream.module:module-echo 0.1.4 and more Source cves: CVE-2026-110258 Source advisory: MEND:CVE-2026-110258...

ai.badmonkey.agentspaces:agentspaces-micronaut-processor (>=0.2.0, <=0.3.0), ai.codriverlabs:scaleout-build-maven-plugin (1.1.0-rc2) +7899 more potentially affected by CVE-2026-110257 via org.ow2.asm:asm (>=9.10, <=9.10.1)

org.ow2.asm:asm MAVEN version =9.10, =0.2.0, =0.9.3, =0.9.4, =0.9.7, =0.9.3, =0.9.9, =0.9.6, =0.9.3, =0.9.3, =0.9.9, =0.9.3, =0.9.3, =0.1.4, =0.1.5 - ai.pipestream.module:module-echo 0.1.4 and more Source cves: CVE-2026-110257 Source advisory: MEND:CVE-2026-110257...

a11ywatch_cli (>=0.0.26, <=0.6.51), abstractapi (>=0.1.0, <=0.1.3) +625 more potentially affected by unknown CVE via rustls (>=0.21.0, <=0.21.12)

rustls CARGO version =0.21.0, =0.0.26, =0.1.0, =0.6.0, =0.6.0, =0.1.0, =0.2.0, =1.0.0, =0.1.0, =0.2.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0346...

a11ywatch_cli (>=0.0.26, <=0.6.51), abstractapi (>=0.1.0, <=0.1.3) +1493 more potentially affected by unknown CVE via rustls (>=0.12.0, <=0.21.12)

rustls CARGO version =0.12.0, =0.0.26, =0.1.0, =0.1.0, =0.3.5, =0.3.0, =1.0.0, =1.0.0, =0.6.0, =0.1.0, =0.2.0, =1.0.0, =0.1.0, =0.1.10 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0349...

8base-js-sdk (>=0.1.0, <=0.1.6), 8base-react-sdk (>=0.37.2, <=2.6.6) +356 more potentially affected by CVE-2026-107371 via auth0-js (>=9.12.0, <=10.2.1)

auth0-js NPM version =9.12.0, =0.1.0, =0.37.2, =0.37.2, =1.0.1, =0.0.5, =0.0.0, =0.1.0, =0.37.2, =0.37.2, =0.37.2, =0.37.2, =0.37.2, =0.0.1, =0.4.1, =0.4.1, =3.1.0-beta.0 and more Source cves: CVE-2026-107371 Source advisory: SNYK:JS-AUTH0JS-20936882...

org.webjars.npm:github-com-auth0-angular-auth0 (3.0.0), org.webjars.npm:github-com-skiddoo-angular-lock (2.0.3) potentially affected by CVE-2026-107371 via org.webjars.npm:auth0-js (9.28.0)

org.webjars.npm:auth0-js MAVEN version 9.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:auth0-js and may be impacted: - org.webjars.npm:github-com-auth0-angular-auth0 3.0.0 - org.webjars.npm:github-com-skiddoo-angular-lock 2.0.3...

@advancedalgos/key-vault-client (>=0.0.1, <=0.0.8), @advancedalgos/teams-client (>=0.0.1, <=0.0.32) +73 more potentially affected by CVE-2026-107370 via auth0-lock (>=10.14.0, <=12.5.1)

auth0-lock NPM version =10.14.0, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.0.1, =1.4.5-next.1, =0.0.1, =2.2.0, =1.0.0, =0.1.0, =0.3.0, =0.0.1, =2.0.0, =15.4.335 and more Source cves: CVE-2026-107370 Source advisory: SNYK:JS-AUTH0LOCK-20936889...

@ctx-core/auth0-lock (>=15.4.336, <=15.4.337) potentially affected by CVE-2026-107370 via auth0-lock (14.3.0)

auth0-lock NPM version 14.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on auth0-lock and may be impacted: - @ctx-core/auth0-lock =15.4.336, =15.4.337 Source cves: CVE-2026-107370 Source advisory: SNYK:JS-AUTH0LOCK-20936889...

@smg-automotive/auth (>=6.8.0-auth0-update-access-token-endpoint.1, <=9.3.5) potentially affected by CVE-2026-107369 via @auth0/nextjs-auth0 (>=4.9.0, <=4.25.0)

@auth0/nextjs-auth0 NPM version =4.9.0, =6.8.0-auth0-update-access-token-endpoint.1, =9.3.5 Source cves: CVE-2026-107369 Source advisory: SNYK:JS-AUTH0NEXTJSAUTH0-20936946...

ai.expert:nlapi-java-sdk (>=2.6.1, <=2.7.0), ai.jokkoo:jokkoo-server (>=0.1.0, <=1.3.1) +1940 more potentially affected by CVE-2026-85473 via com.auth0:java-jwt (>=4.0.0, <=4.6.1)

com.auth0:java-jwt MAVEN version =4.0.0, =2.6.1, =0.1.0, =0.1.3, =0.1.0, =0.0.0.2-alpha, =0.1.0, =0.1.0-alpha, =5.3.1, =9.2.0, =7.2.0, =9.2.0, =1.1.4.2, =1.1.5 - br.com.sdkopen:security 1.0.0 and more Source cves: CVE-2026-85473 Source advisory: SNYK:JAVA-COMAUTH0-20937619...

cn.net.autocode:autocode-core (1.2.8), cn.net.autocode:autocode-platform (>=2.6.3, <=2.6.5) +357 more potentially affected by CVE-2026-85473 via com.auth0:java-jwt (>=4.6.0, <=4.6.1)

com.auth0:java-jwt MAVEN version =4.6.0, =2.6.3, =5.8.0, =1.3.6, =1.4.1 - com.codeheadsystems:hofmann-dropwizard 3.0.0 - com.codeheadsystems:hofmann-server 3.0.0 - com.codeheadsystems:hofmann-springboot 3.0.0 - com.fonrouge.fslib:fullstack-jvm 6.4.0 - com.fonrouge.fslib:media-jvm 6.4.0 -...

@agent-vm/agent-vm (>=0.0.109, <=0.0.153), @agent-vm/agent-vm-worker (>=0.0.109, <=0.0.148) +20 more potentially affected by CVE-2026-102599 via engine.io (>=6.6.2, <=6.6.9)

engine.io NPM version =6.6.2, =0.0.109, =0.0.109, =0.0.115, =0.0.109, =3.0.4, =2.0.28, =2.0.12, =1.0.0, =4.0.7, =1.0.3, =2.0.23, =0.0.1-beta2, =0.0.1-alpha, =0.0.1-alpha, =0.0.1-rc2 and more Source cves: CVE-2026-102599 Source advisory: MEND:CVE-2026-102599...

1shot (>=0.0.3, <=0.0.9), @4via6/relay (>=1.0.0, <=1.1.3) +243 more potentially affected by CVE-2026-86063 via @anthropic-ai/claude-code (>=0.2.14, <=2.1.175)

@anthropic-ai/claude-code NPM version =0.2.14, =0.0.3, =1.0.0, =2.1.0, =0.1.18, =1.0.0, =0.4.0, =0.2.3, =0.0.1, =0.0.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-86063 Source advisory: MEND:CVE-2026-86063...

abstractagent (>=0.2.0, <=0.3.19), abstractassistant (>=0.4.0, <=0.14.3) +132 more potentially affected by CVE-2026-104250 via unstructured (>=0.5.2, <=0.24.0)

unstructured PYPI version =0.5.2, =0.2.0, =0.4.0, =0.3.0, =0.3.0, =0.1.1, =0.1.0, =0.4.26, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =1.9.2 and more Source cves: CVE-2026-104250 Source advisory: SNYK:PYTHON-UNSTRUCTURED-20936875...

confluent-kafka-config (1.1.4), dc-avro (>=0.3.0, <=0.9.1) +3 more potentially affected by CVE-2026-108375 via dataclasses-avroschema (>=0.36.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.36.3, =0.3.0, =0.0.2, =0.1.15, =0.1.19 Source cves: CVE-2026-108375 Source advisory: MEND:CVE-2026-108375...

crocotiger-engine (>=0.1.0, <=0.3.0) potentially affected by CVE-2026-104250 via unstructured (0.24.0)

unstructured PYPI version 0.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on unstructured and may be impacted: - crocotiger-engine =0.1.0, =0.3.0 Source cves: CVE-2026-104250 Source advisory: MEND:CVE-2026-104250...

cellmerge (>=0.1.0, <=0.1.1), jupyter-quant (2606.1.0) +5 more potentially affected by CVE-2026-102832 via jupyterlab (>=4.6.0, <=4.6.2)

jupyterlab PYPI version =4.6.0, =0.1.0, =1.2.0, =0.1.0, =0.1.1 - tiatoolbox 2.1.3 Source cves: CVE-2026-102832 Source advisory: SNYK:PYTHON-JUPYTERLAB-20883327...

datasetinsights (>=0.2.4, <=0.2.5), dotpack (>=0.3.0, <=0.3.6) +4 more potentially affected by CVE-2026-102832 via notebook (>=7.5.6, <=7.5.8)

notebook PYPI version =7.5.6, =0.2.4, =0.3.0, =0.0.1, =0.1.0, =0.1.6 Source cves: CVE-2026-102832 Source advisory: SNYK:PYTHON-NOTEBOOK-20883329...

jupyterlite-pyodide-kernel (>=0.7.0a0, <=0.7.2), jupyterlite-sphinx (>=0.22.0, <=0.22.1) +5 more potentially affected by CVE-2026-102832 via jupyterlite-core (>=0.7.6, <=0.8.0rc0)

jupyterlite-core PYPI version =0.7.6, =0.7.0a0, =0.22.0, =1.0.1, =4.2.0, =0.3.0, =0.6.0, =0.10.0a0, =0.10.0 Source cves: CVE-2026-102832 Source advisory: SNYK:PYTHON-JUPYTERLITECORE-20883328...

ale-uy (1.5.0), datasetinsights (>=0.2.4, <=0.2.5) +7 more potentially affected by CVE-2026-102832 via jupyterlab (>=4.5.7, <=4.5.8)

jupyterlab PYPI version =4.5.7, =0.2.4, =0.0.1, =1.4.0, =0.1.0, =2.1.0, =2.1.2 Source cves: CVE-2026-102832 Source advisory: SNYK:PYTHON-JUPYTERLAB-20883327...

ai-sec (>=0.0.1, <=0.0.9), awslabs-ccapi-mcp-server (>=1.0.1, <=1.0.18) +54 more potentially affected by CVE-2026-102734 via asteval (>=1.0.5, <=1.0.8)

asteval PYPI version =1.0.5, =0.0.1, =1.0.1, =0.0.1, =1.0.254, =2.4.22, =3.2.415, =1.0.0, =0.1.130, =6.0.0, =0.1.0, =0.1.1, =0.1.0, =0.1.6.dev8, =0.1.6.dev40 and more Source cves: CVE-2026-102734 Source advisory: SNYK:PYTHON-ASTEVAL-20883326...

@apimatic/cli (>=2.0.0-beta.1, <=2.0.0-beta.6), @cangjielang/aceharness (>=1.0.0-rc.11, <=1.0.0-rc.13-test.0) +22 more potentially affected by CVE-2026-102989 via @tanstack/react-start (>=1.168.13, <=1.168.50)

@tanstack/react-start NPM version =1.168.13, =2.0.0-beta.1, =1.0.0-rc.11, =2.0.0, =2.0.0, =0.2.2, =0.1.77, =0.1.50, =0.1.43, =0.1.8, =0.5.0, =0.0.0, =0.0.2 - @kstackz/auth-toolkit 0.0.0 - @kstackz/ui-toolkit 0.0.0 and more Source cves: CVE-2026-102989 Source advisory: MEND:CVE-2026-102989...

@apimatic/cli (>=2.0.0-beta.1, <=2.0.0-beta.6), @bgub/fig-tanstack-start (>=0.1.0-alpha.1, <=1.0.0) +36 more potentially affected by CVE-2026-102989 via @tanstack/start-server-core (>=1.169.0, <=1.169.38)

@tanstack/start-server-core NPM version =1.169.0, =2.0.0-beta.1, =0.1.0-alpha.1, =1.0.0-rc.11, =2.0.0, =2.0.0, =1.168.32-depup.0, =0.1.31-depup.0, =1.167.23-depup.0, =0.2.2, =0.1.77, =0.1.50, =0.1.43, =0.1.8, =0.5.0, =0.10.0 and more Source cves: CVE-2026-102989 Source advisory: MEND:CVE-2026-102...

ai-sec (>=0.0.1, <=0.0.9), awslabs-ccapi-mcp-server (>=1.0.1, <=1.0.18) +54 more potentially affected by CVE-2026-102734 via asteval (>=1.0.5, <=1.0.8)

asteval PYPI version =1.0.5, =0.0.1, =1.0.1, =0.0.1, =1.0.254, =2.4.22, =3.2.415, =1.0.0, =0.1.130, =6.0.0, =0.1.0, =0.1.1, =0.1.0, =0.1.6.dev8, =0.1.6.dev40 and more Source cves: CVE-2026-102734 Source advisory: MEND:CVE-2026-102734...

cellmerge (>=0.1.0, <=0.1.1), jupyter-quant (2606.1.0) +5 more potentially affected by CVE-2026-102832 via jupyterlab (>=4.6.0, <=4.6.2)

jupyterlab PYPI version =4.6.0, =0.1.0, =1.2.0, =0.1.0, =0.1.1 - tiatoolbox 2.1.3 Source cves: CVE-2026-102832 Source advisory: MEND:CVE-2026-102832...

ale-uy (1.5.0), datasetinsights (>=0.2.4, <=0.2.5) +7 more potentially affected by CVE-2026-102832 via jupyterlab (>=4.5.7, <=4.5.8)

jupyterlab PYPI version =4.5.7, =0.2.4, =0.0.1, =1.4.0, =0.1.0, =2.1.0, =2.1.2 Source cves: CVE-2026-102832 Source advisory: MEND:CVE-2026-102832...

@agile-graph/engine (>=0.1.0, <=0.2.0), @aiconnect/matrix (>=0.4.0, <=0.14.0) +190 more potentially affected by CVE-2026-107832 via fastify (>=5.12.2, <=5.12.5)

fastify NPM version =5.12.2, =0.1.0, =0.4.0, =0.0.0-vSNAPSHOT-20261007141022, =1.6.2, =0.1.0, =0.13.0, =0.9.0, =6.0.2-rc.52, =6.0.2-rc.52, =6.0.2-rc.52, =6.0.2-rc.52, =6.0.2-rc.52, =6.0.2-rc.52, =6.0.2-rc.52, =9.0.0-canary.3124 and more Source cves: CVE-2026-107832 Source advisory:...

@3ngram/server (>=1.2.6, <=1.8.4), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +596 more potentially affected by CVE-2026-109955 via hono (>=4.12.4, <=4.13.10)

hono NPM version =4.12.4, =1.2.6, =0.1.0, =0.3.1, =0.4.3, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.148, =0.0.138, =0.0.0-pr-306-20260707164534, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.70 and more Source cves: CVE-2026-109955 Source advisory: SNYK:JS-HONO-20883336...

@adaptcom/api (>=0.4.3, <=0.4.4), @adaptcom/cli (0.4.3) +272 more potentially affected by CVE-2026-109955 via hono (>=4.13.0, <=4.13.10)

hono NPM version =4.13.0, =0.4.3, =0.29.24, =0.0.1-alpha.2, =0.0.1-alpha.40, =0.0.1-alpha.49, =0.0.1-alpha.40, =0.0.1-alpha.0, =0.0.1-alpha.39, =0.0.1-alpha.39, =0.29.24, =0.0.1-alpha.34, =0.4.3, =0.4.4 and more Source cves: CVE-2026-109955 Source advisory: MEND:CVE-2026-109955...

@agile-graph/engine (>=0.1.0, <=0.2.0), @aiconnect/matrix (>=0.4.0, <=0.14.0) +190 more potentially affected by CVE-2026-107832 via fastify (>=5.12.2, <=5.12.5)

fastify NPM version =5.12.2, =0.1.0, =0.4.0, =0.0.0-vSNAPSHOT-20261007141022, =1.6.2, =0.1.0, =0.13.0, =0.9.0, =6.0.2-rc.52, =6.0.2-rc.52, =6.0.2-rc.52, =6.0.2-rc.52, =6.0.2-rc.52, =6.0.2-rc.52, =6.0.2-rc.52, =9.0.0-canary.3124 and more Source cves: CVE-2026-107832 Source advisory:...

megatron-bridge (>=0.3.0, <=0.3.1) potentially affected by CVE-2026-65180 via megatron-core (0.17.0rc0)

megatron-core PYPI version 0.17.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on megatron-core and may be impacted: - megatron-bridge =0.3.0, =0.3.1 Source cves: CVE-2026-65180 Source advisory: MEND:CVE-2026-65180...

gobot (>=0.1.16, <=0.1.18), nexus-uav (>=0.1.0, <=0.4.0) potentially affected by CVE-2026-67456 via warp-lang (1.15.0)

warp-lang PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on warp-lang and may be impacted: - gobot =0.1.16, =0.1.0, =0.4.0 Source cves: CVE-2026-67456 Source advisory: MEND:CVE-2026-67456...

nvidia-dali-tf-plugin-cuda120 (2.2.0) potentially affected by CVE-2026-65148 via nvidia-dali-cuda120 (2.2.0)

nvidia-dali-cuda120 PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-dali-cuda120 and may be impacted: - nvidia-dali-tf-plugin-cuda120 2.2.0 Source cves: CVE-2026-65148 Source advisory: MEND:CVE-2026-65148...

nvidia-dali-tf-plugin-cuda120 (2.2.0) potentially affected by CVE-2026-65150 via nvidia-dali-cuda120 (2.2.0)

nvidia-dali-cuda120 PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-dali-cuda120 and may be impacted: - nvidia-dali-tf-plugin-cuda120 2.2.0 Source cves: CVE-2026-65150 Source advisory: MEND:CVE-2026-65150...

nvidia-dali-tf-plugin-cuda120 (2.2.0) potentially affected by CVE-2026-65149 via nvidia-dali-cuda120 (2.2.0)

nvidia-dali-cuda120 PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-dali-cuda120 and may be impacted: - nvidia-dali-tf-plugin-cuda120 2.2.0 Source cves: CVE-2026-65149 Source advisory: MEND:CVE-2026-65149...

nvidia-dali-tf-plugin-cuda120 (2.2.0) potentially affected by CVE-2026-65147 via nvidia-dali-cuda120 (2.2.0)

nvidia-dali-cuda120 PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-dali-cuda120 and may be impacted: - nvidia-dali-tf-plugin-cuda120 2.2.0 Source cves: CVE-2026-65147 Source advisory: MEND:CVE-2026-65147...

@adenta/cms (>=0.0.6, <=1.1.1-0), @lafllamme/personal-page-shared (>=1.0.0, <=1.2.0) +1 more potentially affected by CVE-2026-63316 via @payloadcms/db-postgres (>=3.46.0, <=3.61.0)

@payloadcms/db-postgres NPM version =3.46.0, =0.0.6, =1.0.0, =1.2.0 - @otherdev-software/canvas 1.0.0 Source cves: CVE-2026-63316 Source advisory: SNYK:JS-PAYLOADCMSDBPOSTGRES-20936944...

@frogbotai/db-d1-sqlite (>=0.0.1, <=0.23.0) potentially affected by CVE-2026-63316 via @payloadcms/db-d1-sqlite (>=3.85.1, <=3.88.0)

@payloadcms/db-d1-sqlite NPM version =3.85.1, =0.0.1, =0.23.0 Source cves: CVE-2026-63316 Source advisory: SNYK:JS-PAYLOADCMSDBD1SQLITE-20936945...