10minions-engine (>=0.0.1 <=0.0.4), @0xr404/lol404 (>=1.1.0 <=1.1.6) +3357 more potentially affected by CVE-2026-48712 via protobufjs (>=7.0.0 <=7.5.9)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =0.0.6, =0.0.7 and more Source cves: CVE-2026-48712 Source advisory: SNYK:JS-PROTOBUFJS-17353320...

@0xchain/telemetry (>=1.1.0-beta.8 <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0 <=0.11.3) +1018 more potentially affected by CVE-2026-48712 via protobufjs (>=8.0.0 <=8.4.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-48712 Source advisory: SNYK:JS-PROTOBUFJS-17353320...

org.webjars.npm:bazel__typescript (=1.7.0), org.webjars.npm:cesium (>=1.96.0 <=1.137.0) +13 more potentially affected by CVE-2026-48712 via org.webjars.npm:protobufjs (>=6.11.3 <=8.0.0)

org.webjars.npm:protobufjs MAVEN version =6.11.3, =1.96.0, =1.0.0, =1.0.0, =10.13.0, =4.7.0, =0.3.35, =1.6.1, =0.5.2, =0.7.15 - org.webjars.npm:tiktok-live-connector =1.0.2 Source cves: CVE-2026-48712 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17353321...

@0xchain/telemetry (>=1.1.0-beta.8 <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0 <=0.11.3) +1018 more potentially affected by CVE-2026-48712 via protobufjs (>=8.0.0 <=8.4.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-48712 Source advisory: OSV:GHSA-WCPC-WJ8M-HJX6...

360solutions-bc-mcp (>=0.5.3 <=0.5.6), 3di-cmd-client (>=0.0.1a0 <=0.0.3) +1475 more potentially affected by CVE-2026-48524 via pyjwt (>=0.2.1 <=2.12.1)

pyjwt PYPI version =0.2.1, =0.5.3, =0.0.1a0, =0.1.1, =1.0.0, =2.0.0, =1.1.1, =0.8.44.4, =0.1.0, =0.1.1, =0.1.1, =0.1.5 - affo-user-service =1.0.4 and more Source cves: CVE-2026-48524 Source advisory: OSV:GHSA-FHV5-28VV-H8M8...

@forwardimpact/libcodegen (>=0.1.47 <=0.1.52) potentially affected by CVE-2026-54269 via protobufjs-cli (=2.0.1)

protobufjs-cli NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobufjs-cli and may be impacted: - @forwardimpact/libcodegen =0.1.47, =0.1.52 Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJSCLI-17353169...

@forwardimpact/libcodegen (>=0.1.47 <=0.1.52) potentially affected by CVE-2026-54269 via protobufjs-cli (=2.0.1)

protobufjs-cli NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobufjs-cli and may be impacted: - @forwardimpact/libcodegen =0.1.47, =0.1.52 Source cves: CVE-2026-54269 Source advisory: OSV:GHSA-F38Q-MGVJ-VPH7...

10minions-engine (>=0.0.1 <=0.0.4), @1amageek/document-propagator (>=0.10.1 <=1.0.0) +1533 more potentially affected by CVE-2026-54269 via protobufjs-cli (>=1.0.0 <=1.2.2)

protobufjs-cli NPM version =1.0.0, =0.0.1, =0.10.1, =1.1.0, =0.4.0, =1.22.0, =6.2.36, =1.0.0, =1.8.0, =0.0.0-beta.0, =1.0.0, =1.0.1, =3.1.0 and more Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJSCLI-17353169...

@0xchain/telemetry (>=1.1.0-beta.8 <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0 <=0.11.3) +1023 more potentially affected by CVE-2026-54269 via protobufjs (>=8.0.0 <=8.5.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJS-17353168...

10minions-engine (>=0.0.1 <=0.0.4), @0xr404/lol404 (>=1.1.0 <=1.1.6) +3358 more potentially affected by CVE-2026-54269 via protobufjs (>=7.0.0 <=7.6.1)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =0.0.6, =0.0.7 and more Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJS-17353168...

org.webjars.npm:bazel__typescript (=1.7.0), org.webjars.npm:cesium (>=1.96.0 <=1.137.0) +13 more potentially affected by CVE-2026-54269 via org.webjars.npm:protobufjs (>=6.11.3 <=8.0.0)

org.webjars.npm:protobufjs MAVEN version =6.11.3, =1.96.0, =1.0.0, =1.0.0, =10.13.0, =4.7.0, =0.3.35, =1.6.1, =0.5.2, =0.7.15 - org.webjars.npm:tiktok-live-connector =1.0.2 Source cves: CVE-2026-54269 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17353170...

@0xchain/telemetry (>=1.1.0-beta.8 <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0 <=0.11.3) +1023 more potentially affected by CVE-2026-54269 via protobufjs (>=8.0.0 <=8.5.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-54269 Source advisory: OSV:GHSA-F38Q-MGVJ-VPH7...

-react-file-list-components (=1.1.1), 01basicreact (>=0.1.0 <=0.1.9) +45932 more potentially affected by CVE-2026-12143 via form-data (>=3.0.0 <=3.0.4)

form-data NPM version =3.0.0, =0.1.0, =0.1.0, =0.1.6 - 0beny1s =1.1.6 - 0scarclassa =1.0.1 - 0scarclassb =1.0.1 - 0scarclassc =1.0.1 - 0scarclassd =1.0.1 - 0scarclasse =1.0.1 - 0scarclassf =1.0.1 - 0scarclassg =1.0.1 - 0scarclassh =1.0.1 - 0scarclassi =1.0.1 - 0scarclassj =1.0.1 - 0scarclassk...

@agilie/widget-template (>=1.0.6 <=1.1.6), @aiao/date (=1.0.3) +96 more potentially affected by CVE-2026-54264 via @angular/service-worker (>=10.0.0 <=19.2.25)

@angular/service-worker NPM version =10.0.0, =1.0.6, =0.0.18, =0.0.15, =1.0.0, =1.0.110, =1.2.3, =10.0.0-beta.1, =16.0.0-next.6, =1.0.0, =3.5.0-updated-zxing, =3.5.2 and more Source cves: CVE-2026-54264 Source advisory: OSV:GHSA-QXH6-94W6-9R5P...

3d-card (=0.0.2), 4science_ng-dynamic-forms (>=19.0.0 <=19.0.3) +5277 more potentially affected by CVE-2026-54268 via @angular/common (>=0.0.0-0 <=19.2.25)

@angular/common NPM version =0.0.0-0, =19.0.0, =0.0.0, =0.2.0, =3.0.2, =3.0.3 - @aakashsuryawanshi/ng-idle =1.0.0 - @aalsi/ap-lib-demo =0.0.3-SNAPSHOT - @abaza738/angular-editor =1.0.0 - @abdos/ngx-tinzert =0.0.0 - @abdullk00138/watch-list =1.0.0 - @abdullk00138/webui =1.0.2 -...

3d-card (=0.0.2), 4science_ng-dynamic-forms (>=19.0.0 <=19.0.3) +5277 more potentially affected by CVE-2026-54266 via @angular/common (>=0.0.0-0 <=19.2.25)

@angular/common NPM version =0.0.0-0, =19.0.0, =0.0.0, =0.2.0, =3.0.2, =3.0.3 - @aakashsuryawanshi/ng-idle =1.0.0 - @aalsi/ap-lib-demo =0.0.3-SNAPSHOT - @abaza738/angular-editor =1.0.0 - @abdos/ngx-tinzert =0.0.0 - @abdullk00138/watch-list =1.0.0 - @abdullk00138/webui =1.0.2 -...

3d-card (=0.0.2), 4science_ng-dynamic-forms (>=19.0.0 <=19.0.3) +4781 more potentially affected by CVE-2026-54265 via @angular/compiler (>=0.0.0-0 <=19.2.25)

@angular/compiler NPM version =0.0.0-0, =19.0.0, =6.0.0, =0.0.0, =0.2.0, =3.0.2, =3.0.3 - @aakashsuryawanshi/ng-idle =1.0.0 - @aalsi/ap-lib-demo =0.0.3-SNAPSHOT - @abaza738/angular-editor =1.0.0 - @abdos/ngx-tinzert =0.0.0 - @abdullk00138/watch-list =1.0.0 - @abdullk00138/webui =1.0.2 and more...

4science_ng-dynamic-forms (>=19.0.0 <=19.0.3), @123samir/gonna-build-a-mountain-po-ts-lint (>=6.0.0 <=10.0.0-rc.1) +5259 more potentially affected by CVE-2026-50557 via @angular/core (>=0.0.0-0 <=18.2.14)

@angular/core NPM version =0.0.0-0, =19.0.0, =6.0.0, =0.0.0, =0.2.0, =3.0.2, =3.0.3 - @aakashsuryawanshi/ng-idle =1.0.0 - @aalsi/ap-lib-demo =0.0.3-SNAPSHOT - @abaza738/angular-editor =1.0.0 - @abdos/ngx-tinzert =0.0.0 - @abdullk00138/watch-list =1.0.0 - @abdullk00138/webui =1.0.2 -...

4science_ng-dynamic-forms (>=19.0.0 <=19.0.3), @123samir/gonna-build-a-mountain-po-ts-lint (>=6.0.0 <=10.0.0-rc.1) +4546 more potentially affected by CVE-2026-50557 via @angular/compiler (>=0.0.0-0 <=18.2.14)

@angular/compiler NPM version =0.0.0-0, =19.0.0, =6.0.0, =0.0.0, =0.2.0, =3.0.2, =3.0.3 - @aakashsuryawanshi/ng-idle =1.0.0 - @aalsi/ap-lib-demo =0.0.3-SNAPSHOT - @abaza738/angular-editor =1.0.0 - @abdos/ngx-tinzert =0.0.0 - @abdullk00138/watch-list =1.0.0 - @abdullk00138/webui =1.0.2 -...

@afd-software/angular-ng-autocomplete (=14.0.0), @angularexpert/my-workspace (=0.0.0) +143 more potentially affected by CVE-2026-50556 via @angular/platform-server (>=0.0.0-0 <=18.2.14)

@angular/platform-server NPM version =0.0.0-0, =1.0.0, =0.0.1, =2.0.0, =0.0.6, =19.3.0, =1.5.0, =1.4.1, =1.5.2 - @nani-creative-labs/app-builder =1.0.0 - @nger/angular =1.0.3 - @nk-spirit/nk-ngx-bootstrap =7.1.16 and more Source cves: CVE-2026-50556 Source advisory: OSV:GHSA-GXX4-3XCV-F8QX...

@afd-software/angular-ng-autocomplete (=14.0.0), @angularexpert/my-workspace (=0.0.0) +143 more potentially affected by CVE-2026-50555 via @angular/platform-server (>=0.0.0-0 <=18.2.14)

@angular/platform-server NPM version =0.0.0-0, =1.0.0, =0.0.1, =2.0.0, =0.0.6, =19.3.0, =1.5.0, =1.4.1, =1.5.2 - @nani-creative-labs/app-builder =1.0.0 - @nger/angular =1.0.3 - @nk-spirit/nk-ngx-bootstrap =7.1.16 and more Source cves: CVE-2026-50555 Source advisory: OSV:GHSA-HQR9-C56F-3X7F...

@0xwork/connect (>=0.1.0 <=0.1.9), @actagent/fs-safe (=0.3.0) +791 more potentially affected by CVE-2026-53655 via tar (>=7.0.0 <=7.5.15)

tar NPM version =7.0.0, =0.1.0, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =1.6.0, =1.1.0, =2026.4.23-zh, =0.1.0, =0.1.1, =0.1.1, =2026.4.4, =0.59.0, =0.64.0 and more Source cves: CVE-2026-53655 Source advisory: SNYK:JS-TAR-17342362...

org.webjars.npm:canvas (>=2.5.0 <=2.6.0), org.webjars.npm:color-thief (=2.2.5) +12 more potentially affected by CVE-2026-53655 via org.webjars.npm:tar (>=0.1.20 <=4.4.19)

org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz =1.0.7 Source cves: CVE-2026-53655 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17342363...

org.webjars.npm:launch-editor-middleware (=2.2.1) potentially affected by CVE-2026-53632 via org.webjars.npm:launch-editor (=2.2.1)

org.webjars.npm:launch-editor MAVEN version =2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:launch-editor and may be impacted: - org.webjars.npm:launch-editor-middleware =2.2.1 Source cves: CVE-2026-53632 Source advisory:...

@jsenv/core (>=40.0.1 <=41.2.8), @jsenv/fetch (>=1.2.1 <=1.3.28) +9 more potentially affected by CVE-2026-53632 via launch-editor (>=2.10.0 <=2.13.2)

launch-editor NPM version =2.10.0, =40.0.1, =1.2.1, =0.2.14, =16.0.1, =2.13.1, =1.5.1, =3.6.1, =1.7.11, =1.0.0-alpha.6, =1.4.3, =1.4.4 Source cves: CVE-2026-53632 Source advisory: SNYK:JS-LAUNCHEDITOR-17345917...

@agregio-solutions/design-system (>=1.89.2 <=1.94.0), @altipla/directus-sdk-utils (=0.7.2) +230 more potentially affected by CVE-2026-53632 via vite (>=7.0.0 <=7.3.3)

vite NPM version =7.0.0, =1.89.2, =20.0.0, =20.1.0, =0.1.0, =0.0.4, =0.2.9, =0.79.1, =1.11.1, =1.0.0-beta.23, =2.1.2-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.29.0 and more Source cves: CVE-2026-53632 Source advisory: OSV:GHSA-V6WH-96G9-6WX3...

@arrange/framework (=0.0.0-m.2.1), @aws/nx-plugin (>=0.105.0 <=1.0.0-rc.7) +63 more potentially affected by CVE-2026-53632 via vite (>=8.0.0 <=8.0.14)

vite NPM version =8.0.0, =0.105.0, =3.0.1, =3.3.0, =11.17.0-depup.0, =0.1.1, =0.1.1, =35.0.0, =17.1.0, =0.0.16, =4.0.0, =0.0.1779369742024, =1.0.8, =9.6.10, =1.8.11, =1.9.1 and more Source cves: CVE-2026-53632 Source advisory: OSV:GHSA-V6WH-96G9-6WX3...

org.webjars.npm:vitepress (=1.0.0-draft.8) potentially affected by CVE-2026-53571 via org.webjars.npm:vite (=3.0.0-beta.9)

org.webjars.npm:vite MAVEN version =3.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vite and may be impacted: - org.webjars.npm:vitepress =1.0.0-draft.8 Source cves: CVE-2026-53571 Source advisory:...

@slidev-react/cli (>=0.4.6 <=0.5.0), @slidev-react/node (>=0.4.6 <=0.5.0) potentially affected by CVE-2026-53571 via vite-plus (>=0.1.11 <=0.1.19)

vite-plus NPM version =0.1.11, =0.4.6, =0.4.6, =0.5.0 Source cves: CVE-2026-53571 Source advisory: SNYK:JS-VITEPLUS-17353903...

@agregio-solutions/design-system (>=1.89.2 <=1.94.0), @altipla/directus-sdk-utils (=0.7.2) +230 more potentially affected by CVE-2026-53571 via vite (>=7.0.0 <=7.3.3)

vite NPM version =7.0.0, =1.89.2, =20.0.0, =20.1.0, =0.1.0, =0.0.4, =0.2.9, =0.79.1, =1.11.1, =1.0.0-beta.23, =2.1.2-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.29.0 and more Source cves: CVE-2026-53571 Source advisory: SNYK:JS-VITE-17353904...

@agregio-solutions/design-system (>=1.89.2 <=1.94.0), @altipla/directus-sdk-utils (=0.7.2) +230 more potentially affected by CVE-2026-53571 via vite (>=7.0.0 <=7.3.3)

vite NPM version =7.0.0, =1.89.2, =20.0.0, =20.1.0, =0.1.0, =0.0.4, =0.2.9, =0.79.1, =1.11.1, =1.0.0-beta.23, =2.1.2-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.29.0 and more Source cves: CVE-2026-53571 Source advisory: OSV:GHSA-FX2H-PF6J-XCFF...

@arrange/framework (=0.0.0-m.2.1), @aws/nx-plugin (>=0.105.0 <=1.0.0-rc.7) +63 more potentially affected by CVE-2026-53571 via vite (>=8.0.0 <=8.0.14)

vite NPM version =8.0.0, =0.105.0, =3.0.1, =3.3.0, =11.17.0-depup.0, =0.1.1, =0.1.1, =35.0.0, =17.1.0, =0.0.16, =4.0.0, =0.0.1779369742024, =1.0.8, =9.6.10, =1.8.11, =1.9.1 and more Source cves: CVE-2026-53571 Source advisory: OSV:GHSA-FX2H-PF6J-XCFF...

@arrange/framework (=0.0.0-m.2.1), @aws/nx-plugin (>=0.105.0 <=1.0.0-rc.7) +130 more potentially affected by CVE-2026-53571 via vite (>=8.0.0-beta.0 <=8.0.14)

vite NPM version =8.0.0-beta.0, =0.105.0, =3.0.1, =3.3.0, =11.17.0-depup.0, =0.1.1, =0.1.1, =35.0.0, =17.1.0, =0.0.16, =4.0.0, =0.0.1779369742024, =1.0.8, =9.6.10, =0.1.0, =0.1.2 and more Source cves: CVE-2026-53571 Source advisory: SNYK:JS-VITE-17353904...

@1771technologies/oneplay (>=0.0.1 <=0.0.6), @aicblock/cli (>=1.0.0 <=1.0.1) +204 more potentially affected by CVE-2026-53571 via vite (>=6.0.0-alpha.11 <=6.4.2)

vite NPM version =6.0.0-alpha.11, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0, =6.0.0, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =6.0.2-beta.0 and more Source cves: CVE-2026-53571 Source advisory: SNYK:JS-VITE-17353904...

org.webjars.npm:coveralls-next (=4.2.2) potentially affected by CVE-2026-53550 via org.webjars.npm:js-yaml (=4.1.0)

org.webjars.npm:js-yaml MAVEN version =4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:js-yaml and may be impacted: - org.webjars.npm:coveralls-next =4.2.2 Source cves: CVE-2026-53550 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17342...

02.aula (=1.0.0), 0xsodium (>=0.2.0 <=0.14.0) +11476 more potentially affected by CVE-2026-53550 via js-yaml (>=4.0.0 <=4.1.1)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 - @10abdullahbutt/nestjs-boilerplate =0.0.1 and more Source cves: CVE-2026-53550 Source advisory: OSV:GHSA-H67P-54HQ-RP68...

02.aula (=1.0.0), 0xsodium (>=0.2.0 <=0.14.0) +11476 more potentially affected by CVE-2026-53550 via js-yaml (>=4.0.0 <=4.1.1)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 - @10abdullahbutt/nestjs-boilerplate =0.0.1 and more Source cves: CVE-2026-53550 Source advisory: SNYK:JS-JSYAML-17342520...

@neetly/jest-config (>=1.0.0-alpha.14 <=1.0.0-alpha.16), @powerlines/plugin-alloy (>=0.14.0 <=0.26.152) +21 more potentially affected by CVE-2026-49356 via @babel/core (>=8.0.0-alpha.1 <=8.0.0-rc.5)

@babel/core NPM version =8.0.0-alpha.1, =1.0.0-alpha.14, =0.14.0, =0.12.396, =0.6.149, =0.9.0, =0.12.0, =0.12.0, =0.2.99, =0.1.0, =0.1.0, =0.1.71, =0.3.0, =0.3.0, =0.1.0, =0.7.301, =0.7.460 and more Source cves: CVE-2026-49356 Source advisory: SNYK:JS-BABELCORE-17342497...

@neetly/jest-config (>=1.0.0-alpha.14 <=1.0.0-alpha.16), @powerlines/plugin-alloy (>=0.14.0 <=0.26.152) +21 more potentially affected by CVE-2026-49356 via @babel/core (>=8.0.0-alpha.1 <=8.0.0-rc.5)

@babel/core NPM version =8.0.0-alpha.1, =1.0.0-alpha.14, =0.14.0, =0.12.396, =0.6.149, =0.9.0, =0.12.0, =0.12.0, =0.2.99, =0.1.0, =0.1.0, =0.1.71, =0.3.0, =0.3.0, =0.1.0, =0.7.301, =0.7.460 and more Source cves: CVE-2026-49356 Source advisory: OSV:GHSA-4X5R-PXFX-6JF8...

0xgank-tea-advice-pull (=1.0.0), 0xgank-tea-balance-pencil (=1.0.0) +18579 more potentially affected by CVE-2026-49356 via @babel/core (>=7.0.0-beta.31 <=7.29.0)

@babel/core NPM version =7.0.0-beta.31, =7.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on @babel/core and may be impacted: - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory...

@agilie/widget-template (>=1.0.6 <=1.1.6), @aiao/date (=1.0.3) +90 more potentially affected by CVE-2026-50184 via @angular/service-worker (>=10.0.0 <=18.2.14)

@angular/service-worker NPM version =10.0.0, =1.0.6, =10.0.0-beta.1, =16.0.0-next.6, =1.0.0, =3.5.0-updated-zxing, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =0.9.26, =0.15.0 and more Source cves: CVE-2026-50184 Source advisory: OSV:GHSA-95QP-CMMW-MGQV...

4science_ng-dynamic-forms (>=19.0.0 <=19.0.3), @27richie/npm-test-richie (>=0.0.0 <=1.0.6) +5034 more potentially affected by CVE-2026-50171 via @angular/common (>=0.0.0-0 <=18.2.14)

@angular/common NPM version =0.0.0-0, =19.0.0, =0.0.0, =0.2.0, =3.0.2, =3.0.3 - @aakashsuryawanshi/ng-idle =1.0.0 - @aalsi/ap-lib-demo =0.0.3-SNAPSHOT - @abaza738/angular-editor =1.0.0 - @abdos/ngx-tinzert =0.0.0 - @abdullk00138/watch-list =1.0.0 - @abdullk00138/webui =1.0.2 -...

4science_ng-dynamic-forms (>=19.0.0 <=19.0.3), @27richie/npm-test-richie (>=0.0.0 <=1.0.6) +5034 more potentially affected by CVE-2026-50170 via @angular/common (>=0.0.0-0 <=18.2.14)

@angular/common NPM version =0.0.0-0, =19.0.0, =0.0.0, =0.2.0, =3.0.2, =3.0.3 - @aakashsuryawanshi/ng-idle =1.0.0 - @aalsi/ap-lib-demo =0.0.3-SNAPSHOT - @abaza738/angular-editor =1.0.0 - @abdos/ngx-tinzert =0.0.0 - @abdullk00138/watch-list =1.0.0 - @abdullk00138/webui =1.0.2 -...

4science_ng-dynamic-forms (>=19.0.0 <=19.0.3), @123samir/gonna-build-a-mountain-po-ts-lint (>=6.0.0 <=10.0.0-rc.1) +5259 more potentially affected by CVE-2026-52725 via @angular/core (>=0.0.0-0 <=18.2.14)

@angular/core NPM version =0.0.0-0, =19.0.0, =6.0.0, =0.0.0, =0.2.0, =3.0.2, =3.0.3 - @aakashsuryawanshi/ng-idle =1.0.0 - @aalsi/ap-lib-demo =0.0.3-SNAPSHOT - @abaza738/angular-editor =1.0.0 - @abdos/ngx-tinzert =0.0.0 - @abdullk00138/watch-list =1.0.0 - @abdullk00138/webui =1.0.2 -...

@agilie/widget-template (>=1.0.6 <=1.1.6), @aiao/date (=1.0.3) +90 more potentially affected by CVE-2026-50169 via @angular/service-worker (>=10.0.0 <=18.2.14)

@angular/service-worker NPM version =10.0.0, =1.0.6, =10.0.0-beta.1, =16.0.0-next.6, =1.0.0, =3.5.0-updated-zxing, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =0.9.26, =0.15.0 and more Source cves: CVE-2026-50169 Source advisory: OSV:GHSA-GV2Q-MQQV-365M...

@afd-software/angular-ng-autocomplete (=14.0.0), @angularexpert/my-workspace (=0.0.0) +143 more potentially affected by CVE-2026-50168 via @angular/platform-server (>=0.0.0-0 <=18.2.14)

@angular/platform-server NPM version =0.0.0-0, =1.0.0, =0.0.1, =2.0.0, =0.0.6, =19.3.0, =1.5.0, =1.4.1, =1.5.2 - @nani-creative-labs/app-builder =1.0.0 - @nger/angular =1.0.3 - @nk-spirit/nk-ngx-bootstrap =7.1.16 and more Source cves: CVE-2026-50168 Source advisory: OSV:GHSA-XRXM-CP7J-8XF6...

@adeweb-be/volto-leaflet-block (=0.2.0), @alauda-fe/dynamic-plugin-sdk-rspack (>=0.0.1-alpha.5 <=0.0.1-alpha.12) +275 more potentially affected by CVE-2026-49982 via tmp (=0.2.6)

tmp NPM version =0.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on tmp and may be impacted: - @adeweb-be/volto-leaflet-block =0.2.0 - @alauda-fe/dynamic-plugin-sdk-rspack =0.0.1-alpha.5, =14.5.0, =0.122.0, =0.9.1-alpha.0, =0.2.0, =0.9.0, =2.3.1 -...

0.edsql (>=1.0.49 <=1.0.50), 0xlib (=5.6.6) +7747 more potentially affected by CVE-2026-48779 via ws (>=7.0.0 <=7.5.10)

ws NPM version =7.0.0, =1.0.49, =1.0.0, =0.1.0, =0.0.12, =0.0.12, =0.1.0, =1.0.22, =3.10.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

0.edsql (>=1.0.49 <=1.0.50), 0xlib (=5.6.6) +7747 more potentially affected by CVE-2026-48779 via ws (>=7.0.0 <=7.5.10)

ws NPM version =7.0.0, =1.0.49, =1.0.0, =0.1.0, =0.0.12, =0.0.12, =0.1.0, =1.0.22, =3.10.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-48779 Source advisory: OSV:GHSA-96HV-2XVQ-FX4P...

7ghost (>=4.11.25 <=4.11.46), @100mslive/hms-excalidraw (>=0.1.3 <=0.1.14) +1243 more potentially affected by CVE-2026-48779 via ws (>=6.0.0 <=6.2.3)

ws NPM version =6.0.0, =4.11.25, =0.1.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =7.0.0, =0.1.0, =4.4.0, =4.2.2, =2.9.0, =0.0.1-alpha.95, =1.0.0, =1.2.0, =1.6.2 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...