7ghost (>=4.11.25 <=4.11.46), @100mslive/hms-excalidraw (>=0.1.3 <=0.1.14) +1243 more potentially affected by CVE-2026-48779 via ws (>=6.0.0 <=6.2.3)

ws NPM version =6.0.0, =4.11.25, =0.1.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =7.0.0, =0.1.0, =4.4.0, =4.2.2, =2.9.0, =0.0.1-alpha.95, =1.0.0, =1.2.0, =1.6.2 and more Source cves: CVE-2026-48779 Source advisory: OSV:GHSA-96HV-2XVQ-FX4P...

003-gas-convert (=1.0.1), 0x-hunter-core (>=1.0.0 <=1.0.1-5) +29218 more potentially affected by CVE-2026-48779 via ws (>=1.1.0 <=5.2.2)

ws NPM version =1.1.0, =1.0.0, =0.0.3, =1.1.0, =0.9.9, =1.0.0, =0.0.1, =0.11.3, =0.1.0, =1.0.2, =1.0.7 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

org.webjars.npm:angular-websocket (>=2.0.0 <=2.0.1), org.webjars.npm:atmosphere.js (=3.1.3) +39 more potentially affected by CVE-2026-48779 via org.webjars.npm:ws (>=2.0.0-beta.2 <=8.2.3)

org.webjars.npm:ws MAVEN version =2.0.0-beta.2, =2.0.0, =9.3.2, =2.3.0, =6.2.1, =6.2.1, =5.4.6, =0.19.11, =0.2.11, =0.2.19 - org.webjars.npm:github-com-SignalK-signalk-js-client =2.0.3 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17344548...

-fides-amor-et-lux (=1.0.0), -price-checker (>=1.0.0 <=1.0.5) +59934 more potentially affected by CVE-2026-48779 via ws (>=8.0.0 <=8.20.1)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.2.3 - 0g-orbit-cli =0.1.0 - 0g-orbit-core =0.1.0 and more Source cves: CVE-2026-48779 Source advisory: OSV:GHSA-96HV-2XVQ-FX4P...

-fides-amor-et-lux (=1.0.0), -price-checker (>=1.0.0 <=1.0.5) +59934 more potentially affected by CVE-2026-48779 via ws (>=8.0.0 <=8.20.1)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.2.3 - 0g-orbit-cli =0.1.0 - 0g-orbit-core =0.1.0 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

003-gas-convert (=1.0.1), 0x-hunter-core (>=1.0.0 <=1.0.1-5) +29218 more potentially affected by CVE-2026-48779 via ws (>=1.1.0 <=5.2.2)

ws NPM version =1.1.0, =1.0.0, =0.0.3, =1.1.0, =0.9.9, =1.0.0, =0.0.1, =0.11.3, =0.1.0, =1.0.2, =1.0.7 and more Source cves: CVE-2026-48779 Source advisory: OSV:GHSA-96HV-2XVQ-FX4P...

org.webjars.npm:nestjs__platform-express (>=8.4.7 <=9.0.0-next.2) potentially affected by CVE-2026-5079 via org.webjars.npm:multer (=1.4.4-lts.1)

org.webjars.npm:multer MAVEN version =1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2026-5079 Source advisory:...

02url-querystring-http (>=1.0.1 <=1.0.4), 04_nodeblog (=1.0.0) +15347 more potentially affected by CVE-2026-5079 via multer (>=1.0.3 <=2.1.1)

multer NPM version =1.0.3, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.3 and more Source cves: CVE-2026-5079 Source advisory: SNYK:JS-MULTER-17342512...

3d-card (=0.0.2), 4science_ng-dynamic-forms (>=19.0.0 <=19.0.3) +5521 more potentially affected by CVE-2026-54267 via @angular/core (>=0.0.0-0 <=19.2.25)

@angular/core NPM version =0.0.0-0, =19.0.0, =6.0.0, =0.0.0, =0.2.0, =3.0.2, =3.0.3 - @aakashsuryawanshi/ng-idle =1.0.0 - @aalsi/ap-lib-demo =0.0.3-SNAPSHOT - @abaza738/angular-editor =1.0.0 - @abdos/ngx-tinzert =0.0.0 - @abdullk00138/watch-list =1.0.0 - @abdullk00138/webui =1.0.2 and more Source...

auto-wasi (=0.1.0), deterministic-wasi-ctx (>=0.1.1 <=0.1.14) +53 more potentially affected by unknown CVE via wasmtime-wasi (>=0.10.0 <=1.0.2)

wasmtime-wasi CARGO version =0.10.0, =0.1.1, =0.5.3-0, =0.4.0, =0.4.0, =0.5.0, =0.0.1-alpha, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.0, =0.9.0, =0.7.0, =0.9.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0182...

org.webjars.npm:kie-tools__pmml-editor-marshaller (=0.32.0) potentially affected by CVE-2026-12208 via org.webjars.npm:jsonata (=1.8.7)

org.webjars.npm:jsonata MAVEN version =1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jsonata and may be impacted: - org.webjars.npm:kie-toolspmml-editor-marshaller =0.32.0 Source cves: CVE-2026-12208 Source advisory:...

@activepieces/piece-json (=0.1.6), @autexis/node-red-context-redis (>=1.0.0 <=1.0.1) +156 more potentially affected by CVE-2026-12208 via jsonata (>=2.0.3 <=2.1.0)

jsonata NPM version =2.0.3, =1.0.0, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =2.7.1-7dd573e-202408290941.0, =0.2.0, =1.2.8, =1.2.8, =1.3.1 and more Source cves: CVE-2026-12208 Source advisory: SNYK:JS-JSONATA-17339139...

@sql-access/nodesql (=1.0.0) potentially affected by unknown CVE via @antoncarlos1/nodelamp (=1.0.1)

@antoncarlos1/nodelamp NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @antoncarlos1/nodelamp and may be impacted: - @sql-access/nodesql =1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-ANTONCARLOS1NODELAMP-17356112...

@sql-access/nodesql (>=1.0.3 <=1.0.7) potentially affected by unknown CVE via @sqlite-node/createsql (=1.0.3)

@sqlite-node/createsql NPM version =1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on @sqlite-node/createsql and may be impacted: - @sql-access/nodesql =1.0.3, =1.0.7 Source cves: unknown CVE Source advisory: SNYK:JS-SQLITENODECREATESQL-17356113...

@node-cloud/create (>=1.0.0 <=1.0.3) potentially affected by unknown CVE via @sql-trigger/nodesql (=1.0.1)

@sql-trigger/nodesql NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @sql-trigger/nodesql and may be impacted: - @node-cloud/create =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-SQLTRIGGERNODESQL-17356114...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53821 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53821 Source advisory: SNYK:JS-OPENCLAW-17398169...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53822 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53822 Source advisory: SNYK:JS-OPENCLAW-17339816...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53820 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53820 Source advisory: SNYK:JS-OPENCLAW-17339341...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53831 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53831 Source advisory: SNYK:JS-OPENCLAW-17339818...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53827 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53827 Source advisory: SNYK:JS-OPENCLAW-17339813...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53825 via openclaw (>=2026.3.22 <=2026.4.5)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53825 Source advisory: SNYK:JS-OPENCLAW-17394045...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53829 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53829 Source advisory: SNYK:JS-OPENCLAW-17339342...

@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (>=0.8.3 <=0.9.10) +20 more potentially affected by CVE-2026-53830 via openclaw (>=2026.3.22 <=2026.4.21)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr =0.0.8 - morpho-vault-manager =0.1.0 and more Source cves: CVE-2026-53830 Source advisory: SNYK:JS-OPENCLAW-17339815...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53828 via openclaw (>=2026.3.22 <=2026.5.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53828 Source advisory: SNYK:JS-OPENCLAW-17394046...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53832 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53832 Source advisory: SNYK:JS-OPENCLAW-17394047...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53823 via openclaw (>=2026.3.22 <=2026.5.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53823 Source advisory: SNYK:JS-OPENCLAW-17339817...

@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (>=0.8.3 <=0.9.11) +21 more potentially affected by CVE-2026-53824 via openclaw (>=2026.3.22 <=2026.4.23)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.0.1, =0.0.3 and more Source cves: CVE-2026-53824 Source advisory: SNYK:JS-OPENCLAW-17394048...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +22 more potentially affected by CVE-2026-53826 via openclaw (>=2026.3.22 <=2026.4.24)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr =0.0.8 and more Source cves: CVE-2026-53826 Source advisory: SNYK:JS-OPENCLAW-17394050...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53835 via openclaw (>=2026.3.22 <=2026.5.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53835 Source advisory: SNYK:JS-OPENCLAW-17394051...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53839 via openclaw (>=2026.3.22 <=2026.5.6)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53839 Source advisory: SNYK:JS-OPENCLAW-17394053...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53836 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53836 Source advisory: SNYK:JS-OPENCLAW-17394043...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53837 via openclaw (>=2026.3.22 <=2026.5.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53837 Source advisory: SNYK:JS-OPENCLAW-17394030...

@0xwork/connect (>=0.1.0 <=0.1.8), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53838 via openclaw (>=2026.3.22 <=2026.5.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53838 Source advisory: SNYK:JS-OPENCLAW-17339814...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53834 via openclaw (>=2026.3.22 <=2026.4.26)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53834 Source advisory: SNYK:JS-OPENCLAW-17394034...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53833 via openclaw (>=2026.3.22 <=2026.4.26)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53833 Source advisory: SNYK:JS-OPENCLAW-17394037...

org.webjars.npm:github-com-daichirata-vue-sanitize (=0.2.2), org.webjars.npm:github-com-daichirata-vue-sanitize- (=0.2.2) potentially affected by CVE-2026-53606 via org.webjars.npm:sanitize-html (=2.7.0)

org.webjars.npm:sanitize-html MAVEN version =2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sanitize-html and may be impacted: - org.webjars.npm:github-com-daichirata-vue-sanitize =0.2.2 -...

@_sh/strapi-plugin-ckeditor (>=5.0.2 <=7.1.1), @a.agiir/cinny (>=0.0.1 <=0.0.2) +1336 more potentially affected by CVE-2026-53606 via sanitize-html (>=2.10.0 <=2.17.4)

sanitize-html NPM version =2.10.0, =5.0.2, =0.0.1, =1.0.0, =1.0.0, =1.38.0, =1.3.2, =1.0.1, =1.0.1, =1.1.0, =1.0.2, =1.0.0, =1.0.14 - @adminforth/email-adapter-mailgun =1.0.1 and more Source cves: CVE-2026-53606 Source advisory: SNYK:JS-SANITIZEHTML-17337018...

org.webjars.npm:github-com-nhn-tui-image-editor (=3.10.1), org.webjars.npm:tui-image-editor (=3.15.3) potentially affected by CVE-2026-44311 via org.webjars.npm:fabric (>=3.6.0 <=4.5.0)

org.webjars.npm:fabric MAVEN version =3.6.0, =4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:fabric and may be impacted: - org.webjars.npm:github-com-nhn-tui-image-editor =3.10.1 - org.webjars.npm:tui-image-editor =3.15.3 Source...

@lifesg/web-form-builder (=1.0.0-alpha.4), @lifesg/web-frontend-engine (>=1.19.1 <=2.2.4) +3 more potentially affected by CVE-2026-44311 via fabric (>=7.1.0 <=7.2.0)

fabric NPM version =7.1.0, =1.19.1, =2.2.4 - @osdlabel/react =0.0.1 - @osdlabel/solid =0.0.1 - osdlabel =0.0.1 Source cves: CVE-2026-44311 Source advisory: SNYK:JS-FABRIC-17337033...

1.1.0 (=1.0.0), 719component (>=1.1.1 <=1.1.6) +1041 more potentially affected by CVE-2026-44311 via fabric (>=1.4.13 <=7.2.0)

fabric NPM version =1.4.13, =1.1.1, =0.1.1-preview.0, =0.0.19, =0.14.2, =0.0.7, =1.0.5, =0.1.2, =1.0.0-beta.0, =0.0.1, =0.1.0, =0.2.5 - @alukos/vue-fabric-wrapper =0.3.72 and more Source cves: CVE-2026-44311 Source advisory: OSV:GHSA-W22M-HVVM-XMWX...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-53724 via parse-server (>=9.6.0-alpha.37 <=9.9.0)

parse-server NPM version =9.6.0-alpha.37, =3.31.25, =4.0.34 Source cves: CVE-2026-53724 Source advisory: SNYK:JS-PARSESERVER-17339129...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-53725 via parse-server (>=9.8.0 <=9.9.0)

parse-server NPM version =9.8.0, =3.31.25, =4.0.34 Source cves: CVE-2026-53725 Source advisory: SNYK:JS-PARSESERVER-17339130...

-react-file-list-components (=1.1.1), 01basicreact (>=0.1.0 <=0.1.9) +45932 more potentially affected by CVE-2026-12143 via form-data (>=3.0.0 <=3.0.4)

form-data NPM version =3.0.0, =0.1.0, =0.1.0, =0.1.6 - 0beny1s =1.1.6 - 0scarclassa =1.0.1 - 0scarclassb =1.0.1 - 0scarclassc =1.0.1 - 0scarclassd =1.0.1 - 0scarclasse =1.0.1 - 0scarclassf =1.0.1 - 0scarclassg =1.0.1 - 0scarclassh =1.0.1 - 0scarclassi =1.0.1 - 0scarclassj =1.0.1 - 0scarclassk...

com.alilitech:boot-plus-log (>=2.1.0 <=2.1.5), com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0 <=3.0.0) +38 more potentially affected by CVE-2026-12143 via org.webjars.npm:form-data (>=4.0.4 <=4.0.5)

org.webjars.npm:form-data MAVEN version =4.0.4, =2.1.0, =2.0.0, =1.0.3, =1.0.0, =2.1.1, =1.0.0, =1.0.0, =2.1.3, =2.0.0, =1.0.2, =4.22.2, =4.22.2, =9.21.0, =0.27.2, =1.17.0 and more Source cves: CVE-2026-12143 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17337016...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-50008 via parse-server (>=9.8.0 <=9.9.0)

parse-server NPM version =9.8.0, =3.31.25, =4.0.34 Source cves: CVE-2026-50008 Source advisory: SNYK:JS-PARSESERVER-17339128...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-53726 via parse-server (>=9.6.0-alpha.37 <=9.9.0)

parse-server NPM version =9.6.0-alpha.37, =3.31.25, =4.0.34 Source cves: CVE-2026-53726 Source advisory: SNYK:JS-PARSESERVER-17339137...

RuStream (>=0.0.1 <=0.0.2), RustPyNet (>=0.1.0 <=0.1.3) +592 more potentially affected by unknown CVE via pyo3 (>=0.10.1 <=0.28.3)

pyo3 CARGO version =0.10.1, =0.0.1, =0.1.0, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CHGR-C6PX-7XPP...

RuStream (>=0.0.1 <=0.0.2), RustPyNet (>=0.1.0 <=0.1.3) +592 more potentially affected by unknown CVE via pyo3 (>=0.10.1 <=0.28.3)

pyo3 CARGO version =0.10.1, =0.0.1, =0.1.0, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-36HH-V3QG-5JQ4...

a-mailx (=0.1.0), abracadabra (>=0.0.0 <=0.0.7) +747 more potentially affected by CVE-2026-49854 via tornado (>=6.0.0 <=6.5.5)

tornado PYPI version =6.0.0, =0.0.0, =0.2.2, =0.7.3, =0.3.0, =0.4.0, =0.0.5, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.31.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-49854 Source advisory: SNYK:PYTHON-TORNADO-17337026...

a-mailx (=0.1.0), abracadabra (>=0.0.0 <=0.0.7) +976 more potentially affected by CVE-2026-49854 via tornado (>=3.0.0 <=6.5.5)

tornado PYPI version =3.0.0, =0.0.0, =0.2.2, =0.0.3, =0.3.0, =0.4.0, =0.0.5, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.31.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-49854 Source advisory: OSV:GHSA-CX3H-4QPV-8HC9...