11219 matches found
@mpticketsmodule/common (>=1.0.4, <=1.0.13), @o.yilmaz/shared (>=1.0.0, <=1.0.28) +1 more potentially affected by unknown CVE via epxress (0.0.1-security)
epxress NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epxress and may be impacted: - @mpticketsmodule/common =1.0.4, =1.0.0, =1.0.28 - @wikietickets/common 0.0.3 Source cves: unknown CVE Source advisory: GHSA-8MM6-RPGG-HR9V...
react-endless (>=1.0.4, <=1.0.6), react-templet (>=1.0.0, <=1.0.3) potentially affected by unknown CVE via epress (0.0.1-security)
epress NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epress and may be impacted: - react-endless =1.0.4, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: GHSA-H43M-47PV-5WRJ...
after-time (>=0.0.0, <=0.0.1), every-time (0.0.0) +17 more potentially affected by unknown CVE via english-time (>=0.0.1, <=2.0.0)
english-time NPM version =0.0.1, =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1, =0.0.2, =0.0.0, =0.0.6, =0.0.0, =0.0.5 - taky-cache-loop 0.0.1 and more Source cves: unknown CVE Source advisory: GHSA-J3F3-7HQV-5F24...
vce-terminal (>=1.2.4, <=1.2.8) potentially affected by unknown CVE via eletron (0.0.1-security)
eletron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eletron and may be impacted: - vce-terminal =1.2.4, =1.2.8 Source cves: unknown CVE Source advisory: GHSA-9MG6-398P-2RP4...
dm-ide (>=0.0.1, <=1.2.8) potentially affected by unknown CVE via electrin (0.0.1-security)
electrin NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on electrin and may be impacted: - dm-ide =0.0.1, =1.2.8 Source cves: unknown CVE Source advisory: GHSA-8V6P-857J-8V8Q...
rhys19-verbatim (2.0.2) potentially affected by unknown CVE via elctron (0.0.1-security)
elctron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on elctron and may be impacted: - rhys19-verbatim 2.0.2 Source cves: unknown CVE Source advisory: GHSA-7395-26F5-X3G9...
@badzz88/baileys (8.5.8), @sakataoffc/baileys (5.0.1) +3 more potentially affected by unknown CVE via @vnxsync/libsignal-node (1.0.0)
@vnxsync/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @vnxsync/libsignal-node and may be impacted: - @badzz88/baileys 8.5.8 - @sakataoffc/baileys 5.0.1 - @vnxsync/xbails =1.0.0, =1.0.0, =1.0.6 Source cves: unknown CV...
openhop (>=0.1.0-beta.3, <=0.3.6) potentially affected by CVE-2026-59179 via @openhop/server (>=0.1.0, <=0.3.5)
@openhop/server NPM version =0.1.0, =0.1.0-beta.3, =0.3.6 Source cves: CVE-2026-59179 Source advisory: OSV:GHSA-G72F-JW3W-MGH7...
@0xsequence/codegenie (>=0.1.0, <=0.5.1), @2h2d/new (>=0.0.2, <=0.1.1-alpha.3) +802 more potentially affected by CVE-2026-85730 via smol-toml (>=1.1.2, <=1.7.0)
smol-toml NPM version =1.1.2, =0.1.0, =0.0.2, =1.0.0, =4.10.0, =0.3.0, =0.1.0, =0.0.1-alpha.5, =0.0.1, =2.8.0, =0.1.0-alpha.0, =0.1.0, =0.1.3, =0.1.3, =0.1.3, =0.2.0 and more Source cves: CVE-2026-85730 Source advisory: OSV:GHSA-7W5X-HRQM-74C2...
ai.konduit.serving:konduit-serving-api (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-cli (>=0.0.2, <=0.3.0) +3471 more potentially affected by CVE-2026-87822 via com.tdunning:t-digest (>=3.0, <=3.3)
com.tdunning:t-digest MAVEN version =3.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.1.0, =j8.2.2.0, =j11.2.6.2 and more Source cves: CVE-2026-87822 Source advisory: SNYK:JAVA-COMTDUNNING-19659413...
agentengine-sdk-python (>=0.2.0, <=0.4.0), agentic-chat-ui (>=0.1.0, <=0.2.4) +46 more potentially affected by CVE-2026-86099 via chainlit (>=1.0.0, <=2.12.0)
chainlit PYPI version =1.0.0, =0.2.0, =0.1.0, =0.3.0, =0.0.3, =0.14.0, =0.0.0, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.0.2, =0.1.0 - context-protector 1.0.0 and more Source cves: CVE-2026-86099 Source advisory: SNYK:PYTHON-CHAINLIT-19659988...
@badzz88/baileys (8.5.8), @sakataoffc/baileys (5.0.1) +3 more potentially affected by unknown CVE via @vnxsync/libsignal-node (1.0.0)
@vnxsync/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @vnxsync/libsignal-node and may be impacted: - @badzz88/baileys 8.5.8 - @sakataoffc/baileys 5.0.1 - @vnxsync/xbails =1.0.0, =1.0.0, =1.0.6 Source cves: unknown CV...
@badzz88/baileys (8.5.8), @sakataoffc/baileys (5.0.1) +3 more potentially affected by unknown CVE via @vnxsync/libsignal-node (1.0.0)
@vnxsync/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @vnxsync/libsignal-node and may be impacted: - @badzz88/baileys 8.5.8 - @sakataoffc/baileys 5.0.1 - @vnxsync/xbails =1.0.0, =1.0.0, =1.0.6 Source cves: unknown CV...
fips-md (0.3.0) potentially affected by unknown CVE via aligned_box (0.2.1)
alignedbox CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on alignedbox and may be impacted: - fips-md 0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0282...
@adobe/aem-site-template-builder (>=0.1.7, <=2.0.2), @ns3/nx-serverless (>=3.2.2, <=4.1.0) +4 more potentially affected by CVE-2026-87794 via bestzip (>=2.1.6, <=2.2.1)
bestzip NPM version =2.1.6, =0.1.7, =3.2.2, =0.3.0, =1.0.7-6, =1.0.2-1, =1.0.0, =1.0.2 Source cves: CVE-2026-87794 Source advisory: SNYK:JS-BESTZIP-19653586...
express-helmet (1.0.1), gloggo (>=1.1.2, <=1.1.4) +2 more potentially affected by unknown CVE via file-type-detector (1.1.1)
file-type-detector NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on file-type-detector and may be impacted: - express-helmet 1.0.1 - gloggo =1.1.2, =2.3.2, =2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory:...
gloglet (2.3.2) potentially affected by unknown CVE via gloggo (1.1.2)
gloggo NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.2 Source cves: unknown CVE Source advisory: SNYK:JS-GLOGGO-19653625...
express-helmet (1.0.1), gloglet (2.3.4) +1 more potentially affected by unknown CVE via gloggo (1.1.4)
gloggo NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - express-helmet 1.0.1 - gloglet 2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory: SNYK:JS-GLOGGO-19653625...
@usemosaik/cli (1.1.0), create-mosaik (1.1.0) potentially affected by unknown CVE via @usemosaik/template-react-js (1.0.1)
@usemosaik/template-react-js NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @usemosaik/template-react-js and may be impacted: - @usemosaik/cli 1.1.0 - create-mosaik 1.1.0 Source cves: unknown CVE Source advisory:...
gloglet (2.3.3) potentially affected by unknown CVE via gloggo (1.1.3)
gloggo NPM version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.3 Source cves: unknown CVE Source advisory: SNYK:JS-GLOGGO-19653625...
express-helmet (1.0.1), gloglet (2.3.4) +1 more potentially affected by unknown CVE via gloggo (1.1.4)
gloggo NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - express-helmet 1.0.1 - gloglet 2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory: GHSA-WMGG-555M-P7H6...
gloglet (2.3.3) potentially affected by unknown CVE via gloggo (1.1.3)
gloggo NPM version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.3 Source cves: unknown CVE Source advisory: GHSA-WMGG-555M-P7H6...
express-helmet (1.0.1), gloggo (>=1.1.2, <=1.1.4) +2 more potentially affected by unknown CVE via file-type-detector (1.1.1)
file-type-detector NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on file-type-detector and may be impacted: - express-helmet 1.0.1 - gloggo =1.1.2, =2.3.2, =2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory:...
gloglet (2.3.2) potentially affected by unknown CVE via gloggo (1.1.2)
gloggo NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.2 Source cves: unknown CVE Source advisory: GHSA-WMGG-555M-P7H6...
express-helmet (1.0.1), gloggo (>=1.1.2, <=1.1.4) +2 more potentially affected by unknown CVE via file-type-detector (1.1.1)
file-type-detector NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on file-type-detector and may be impacted: - express-helmet 1.0.1 - gloggo =1.1.2, =2.3.2, =2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory:...
gloglet (2.3.3) potentially affected by unknown CVE via gloggo (1.1.3)
gloggo NPM version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-16054...
express-helmet (1.0.1), gloglet (2.3.4) +1 more potentially affected by unknown CVE via gloggo (1.1.4)
gloggo NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - express-helmet 1.0.1 - gloglet 2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-16054...
gloglet (2.3.2) potentially affected by unknown CVE via gloggo (1.1.2)
gloggo NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-16054...
@27works/posto (>=1.0.0, <=2.0.2), @3ngram/server (>=0.7.0, <=1.6.1) +357 more potentially affected by unknown CVE via nodemailer (>=9.0.0, <=9.0.6)
nodemailer NPM version =9.0.0, =1.0.0, =0.7.0, =2.0.2, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.0.1, =0.0.10, =1.0.0, =2.0.1 - @aopslabs/xf-mail 0.2.0 - @app4you/n8n-nodes-portal-invoices 0.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WMMP-3585-3RMP...
@27works/posto (>=1.0.0, <=2.0.2), @3ngram/server (>=0.7.0, <=1.6.1) +357 more potentially affected by unknown CVE via nodemailer (>=9.0.0, <=9.0.6)
nodemailer NPM version =9.0.0, =1.0.0, =0.7.0, =2.0.2, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.0.1, =0.0.10, =1.0.0, =2.0.1 - @aopslabs/xf-mail 0.2.0 - @app4you/n8n-nodes-portal-invoices 0.3.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-19652370...
@27works/posto (>=1.0.0, <=2.0.2), @3ngram/server (>=0.7.0, <=1.6.1) +357 more potentially affected by unknown CVE via nodemailer (>=9.0.0, <=9.0.6)
nodemailer NPM version =9.0.0, =1.0.0, =0.7.0, =2.0.2, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.0.1, =0.0.10, =1.0.0, =2.0.1 - @aopslabs/xf-mail 0.2.0 - @app4you/n8n-nodes-portal-invoices 0.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2X7J-588G-CCC2...
@27works/posto (>=1.0.0, <=2.0.2), @3ngram/server (>=0.7.0, <=1.6.1) +357 more potentially affected by unknown CVE via nodemailer (>=9.0.0, <=9.0.6)
nodemailer NPM version =9.0.0, =1.0.0, =0.7.0, =2.0.2, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.0.1, =0.0.10, =1.0.0, =2.0.1 - @aopslabs/xf-mail 0.2.0 - @app4you/n8n-nodes-portal-invoices 0.3.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-19651822...
02112019lab6 (1.0.0), 03-custom-tian (>=1.0.1, <=1.0.6) +9361 more potentially affected by unknown CVE via nodemailer (>=6.9.16, <=9.0.6)
nodemailer NPM version =6.9.16, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 123ac 1.0.8 - 123acyashu 1.0.8 - 123acyashuac 1.0.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CC9R-2J5M-2M83...
02112019lab6 (1.0.0), 03-custom-tian (>=1.0.1, <=1.0.6) +9361 more potentially affected by unknown CVE via nodemailer (>=6.9.16, <=9.0.6)
nodemailer NPM version =6.9.16, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 123ac 1.0.8 - 123acyashu 1.0.8 - 123acyashuac 1.0.8 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-19651818...
@fox-hound-tools/protobuf-grpc-json-transcoding (>=0.70.0, <=0.71.0), @octocloud/typespec (>=0.1.16, <=0.1.37) potentially affected by unknown CVE via @typespec/openapi3 (>=1.0.0, <=1.7.0)
@typespec/openapi3 NPM version =1.0.0, =0.70.0, =0.1.16, =0.1.37 Source cves: unknown CVE Source advisory: OSV:GHSA-2Q42-4Q24-7RGV...
@azure-tools/typespec-rust (>=0.40.0, <=0.41.5), @fox-hound-tools/protobuf-grpc-json-transcoding (>=0.70.0, <=0.71.0) +7 more potentially affected by unknown CVE via @typespec/compiler (>=1.0.0, <=1.14.0)
@typespec/compiler NPM version =1.0.0, =0.40.0, =0.70.0, =1.0.0-Preview.4, =1.0.0, =1.0.0-Preview.5, =0.1.16, =0.1.0, =0.1.6 - typespec-swift 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-2Q42-4Q24-7RGV...
4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +2257 more potentially affected by CVE-2026-77078 via multer (>=2.0.0, <=2.2.0)
multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =1.0.0, =0.0.1, =0.0.0-alpha.119, =1.2.1-dev.3, =1.0.0, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-77078 Source advisory: OSV:GHSA-WC9G-MQFW-JRWM...
@20206205tech/nestjs-auth (>=1.0.0, <=1.4.1), @20206205tech/nestjs-common (>=0.0.1, <=0.11.4) +879 more potentially affected by CVE-2026-77037 via multer (2.2.0)
multer NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on multer and may be impacted: - @20206205tech/nestjs-auth =1.0.0, =0.0.1, =1.0.0, =1.1.0, =1.1.0, =0.6.3, =1.0.0, =2.0.0, =1.19.0, =0.0.1, =1.5.0, =3.0.0 and more Source cves:...
4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +2257 more potentially affected by CVE-2026-77063 via multer (>=2.0.0, <=2.2.0)
multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =1.0.0, =0.0.1, =0.0.0-alpha.119, =1.2.1-dev.3, =1.0.0, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-77063 Source advisory: OSV:GHSA-QVFW-J98X-7Q72...
4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +2257 more potentially affected by CVE-2026-82333 via multer (>=2.0.0, <=2.2.0)
multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =1.0.0, =0.0.1, =0.0.0-alpha.119, =1.2.1-dev.3, =1.0.0, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-82333 Source advisory: OSV:GHSA-535W-7CP7-47Q4...
20231122-npm (1.0.0), 2048.io (0.0.1) +6571 more potentially affected by CVE-2026-15603 via morgan (>=1.0.0, <=1.11.0)
morgan NPM version =1.0.0, =1.0.2, =1.0.0, =0.2.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.67 and more Source cves: CVE-2026-15603 Source advisory: OSV:GHSA-JXFW-X594-9X9M...
@chocolatey-software/astro (2.10.0), @domainbook/site (1.0.0) +13 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)
astro NPM version =7.0.2, =3.1.0, =0.4.9, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =1.0.0, =1.0.1 - stropress 0.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-26W7-CXV4-GFX2...
@chocolatey-software/astro (2.10.0), @domainbook/site (1.0.0) +13 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)
astro NPM version =7.0.2, =3.1.0, =0.4.9, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =1.0.0, =1.0.1 - stropress 0.0.9 Source cves: unknown CVE Source advisory: SNYK:JS-ASTRO-19652369...
@chocolatey-software/astro (2.10.0), @domainbook/site (1.0.0) +11 more potentially affected by CVE-2026-84376 via astro (>=7.0.2, <=7.2.2)
astro NPM version =7.0.2, =3.1.0, =0.4.9, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.1 Source cves: CVE-2026-84376 Source advisory: OSV:GHSA-376H-93R7-7G6F...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22866 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)
sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RGJ7-G3M4-5G8C...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22866 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)
sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: unknown CVE Source advisory: SNYK:JS-SHARP-19653587...
02.aula (1.0.0), 0xrtest (1.0.0) +11423 more potentially affected by CVE-2026-84375 via js-yaml (>=4.0.0, <=4.3.1)
js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =1.3.0, =6.1.5, =0.0.0-develop-20260120180031, =0.5.6 - @0xr404/0xrtest 1.0.0 and more Source cves: CVE-2026-84375 Source advisory: OSV:GHSA-2883-XCG3-V3HH...
02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21438 more potentially affected by CVE-2026-84375 via js-yaml (>=3.0.0, <=3.15.1)
js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-84375 Source advisory: OSV:GHSA-2883-XCG3-V3HH...
@a3s-lab/office (>=0.1.0, <=0.76.0), @adminforge/ai (>=0.2.0, <=0.3.1) +302 more potentially affected by unknown CVE via @tiptap/core (>=3.7.0, <=3.30.4)
@tiptap/core NPM version =3.7.0, =0.1.0, =0.2.0, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.1.26, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819143124, =1.0.0, =0.2.0, =2.2.2, =1.3.7-beta.22, =2.0.11, =2.1.12, =2.2.1 - @bizjs/richer-editor 0.1.0 and more Source cves: unknown CVE...
@a3s-lab/office (>=0.1.0, <=0.76.0), @adminforge/ai (>=0.2.0, <=0.3.1) +302 more potentially affected by unknown CVE via @tiptap/core (>=3.7.0, <=3.30.4)
@tiptap/core NPM version =3.7.0, =0.1.0, =0.2.0, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.1.26, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819143124, =1.0.0, =0.2.0, =2.2.2, =1.3.7-beta.22, =2.0.11, =2.1.12, =2.2.1 - @bizjs/richer-editor 0.1.0 and more Source cves: unknown CVE...