actix-postgres (>=0.1.0, <=0.4.0), actyxos_data_flow (0.1.0) +484 more potentially affected by unknown CVE via tokio-postgres (>=0.4.0-rc.2, <=0.7.17)

tokio-postgres CARGO version =0.4.0-rc.2, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.3.5, =0.2.0, =0.13.2, =0.14.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3GJW-F78C-VVPW...

actix-postgres (>=0.1.0, <=0.4.0), actyx_sdk (>=0.1.0, <=0.3.0) +567 more potentially affected by unknown CVE via postgres-protocol (>=0.1.1, <=0.6.10)

postgres-protocol CARGO version =0.1.1, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RGQC-3X5P-6GWG...

actix-postgres (>=0.1.0, <=0.4.0), actyx_sdk (>=0.1.0, <=0.3.0) +555 more potentially affected by unknown CVE via postgres-protocol (>=0.4.0, <=0.6.10)

postgres-protocol CARGO version =0.4.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5X78-73V4-XG6W...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +174 more potentially affected by CVE-2026-69222 via liquidjs (>=10.2.0, <=10.27.1)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.4.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.8.0, =12.0.0, =1.0.1-beta.0, =1.0.4 and more Source cves: CVE-2026-69222 Source advisory: SNYK:JS-LIQUIDJS-19233385...

@postman-cse/okta-aio (0.11.1) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.11.1)

@postman-cse/okta-aio-linux-arm64 NPM version 0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.11.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.8.11) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.8.11)

@postman-cse/okta-aio-linux-arm64 NPM version 0.8.11 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.8.11 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.9.1) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.9.1)

@postman-cse/okta-aio-linux-arm64 NPM version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.9.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.10.4) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.10.4)

@postman-cse/okta-aio-linux-arm64 NPM version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.10.4 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.10.6) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.10.6)

@postman-cse/okta-aio-linux-arm64 NPM version 0.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.10.6 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.11.2) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.11.2)

@postman-cse/okta-aio-linux-arm64 NPM version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.11.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.10.9) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.10.9)

@postman-cse/okta-aio-linux-arm64 NPM version 0.10.9 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.10.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.10.7) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.10.7)

@postman-cse/okta-aio-linux-arm64 NPM version 0.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.10.7 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.10.1) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.10.1)

@postman-cse/okta-aio-linux-arm64 NPM version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.10.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.10.5) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.10.5)

@postman-cse/okta-aio-linux-arm64 NPM version 0.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.10.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.10.8) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.10.8)

@postman-cse/okta-aio-linux-arm64 NPM version 0.10.8 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.10.8 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.10.2) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.10.2)

@postman-cse/okta-aio-linux-arm64 NPM version 0.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.10.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.8.10) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.8.10)

@postman-cse/okta-aio-linux-arm64 NPM version 0.8.10 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.8.10 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.11.3) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.11.3)

@postman-cse/okta-aio-linux-arm64 NPM version 0.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.11.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (0.10.3) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (0.10.3)

@postman-cse/okta-aio-linux-arm64 NPM version 0.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on @postman-cse/okta-aio-linux-arm64 and may be impacted: - @postman-cse/okta-aio 0.10.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-14357...

@postman-cse/okta-aio (>=0.8.10, <=0.11.3) potentially affected by unknown CVE via @postman-cse/okta-aio-linux-arm64 (>=0.8.10, <=0.11.3)

@postman-cse/okta-aio-linux-arm64 NPM version =0.8.10, =0.8.10, =0.11.3 Source cves: unknown CVE Source advisory: SNYK:JS-POSTMANCSEOKTAAIOLINUXARM64-19161445...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +2057 more potentially affected by CVE-2026-72848 via langchain-community (>=0.0.1, <=1.0.0a1)

langchain-community PYPI version =0.0.1, =0.1.0, =0.1.0b1, =0.1.0, =0.1.0, =0.1.0, =4.8.2, =0.1.3, =0.1.0, =1.0.1, =0.1.0, =0.1.0, =3.2.0, =3.4.0 and more Source cves: CVE-2026-72848 Source advisory: SNYK:PYTHON-LANGCHAINCOMMUNITY-19233333...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77415 via jsonata (>=1.0.10, <=1.8.7)

jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77415 Source advisory: SNYK:JS-JSONATA-19233334...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77415 via jsonata (>=1.0.10, <=1.8.7)

jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77415 Source advisory: OSV:GHSA-66MM-25PP-RFFF...

@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +161 more potentially affected by CVE-2026-77415 via jsonata (>=2.0.0, <=2.1.0)

jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77415 Source advisory: SNYK:JS-JSONATA-19233334...

@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +161 more potentially affected by CVE-2026-77415 via jsonata (>=2.0.0, <=2.1.0)

jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77415 Source advisory: OSV:GHSA-66MM-25PP-RFFF...

@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +161 more potentially affected by CVE-2026-77414 via jsonata (>=2.0.0, <=2.1.0)

jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77414 Source advisory: OSV:GHSA-2943-5XFG-GQ5F...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77414 via jsonata (>=1.0.10, <=1.8.7)

jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77414 Source advisory: SNYK:JS-JSONATA-19233336...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77414 via jsonata (>=1.0.10, <=1.8.7)

jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77414 Source advisory: OSV:GHSA-2943-5XFG-GQ5F...

@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +161 more potentially affected by CVE-2026-77414 via jsonata (>=2.0.0, <=2.1.0)

jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77414 Source advisory: SNYK:JS-JSONATA-19233336...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77413 via jsonata (>=1.0.10, <=1.8.7)

jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77413 Source advisory: OSV:GHSA-8GQ3-VP5J-2GRP...

@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +161 more potentially affected by CVE-2026-77413 via jsonata (>=2.0.0, <=2.1.0)

jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77413 Source advisory: SNYK:JS-JSONATA-19233338...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77413 via jsonata (>=1.0.10, <=1.8.7)

jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77413 Source advisory: SNYK:JS-JSONATA-19233338...

@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +161 more potentially affected by CVE-2026-77413 via jsonata (>=2.0.0, <=2.1.0)

jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77413 Source advisory: OSV:GHSA-8GQ3-VP5J-2GRP...

@kids-reporter/cms-core (>=1.0.17, <=1.0.36), @kids-reporter/draft-editor (>=1.0.19, <=1.0.36) potentially affected by CVE-2026-63421 via @keystone-6/core (6.5.1)

@keystone-6/core NPM version 6.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @kids-reporter/cms-core =1.0.17, =1.0.19, =1.0.36 Source cves: CVE-2026-63421 Source advisory: OSV:GHSA-CQMQ-8755-7XVH...

@agent-infra/browser-context (>=0.1.2, <=0.2.2), @agent-infra/mcp-server-browser (>=1.2.15, <=1.2.29) +113 more potentially affected by CVE-2026-61824 via defuddle (>=0.3.8, <=0.18.1)

defuddle NPM version =0.3.8, =0.1.2, =1.2.15, =0.1.2, =2.4.0, =0.1.0, =0.0.1777999615-g5ad1bf1, =0.8.0, =26.7.0, =0.3.1-alpha.1, =2.6.0, =1.0.0, =1.0.2, =0.0.1, =0.0.2 and more Source cves: CVE-2026-61824 Source advisory: OSV:GHSA-JG4P-G6XJ-4QMF...

tailwind-animate-css-plugin (>=1.0.0, <=4.0.3) potentially affected by unknown CVE via postcss-animate-css-vars (>=1.0.0, <=2.0.3)

postcss-animate-css-vars NPM version =1.0.0, =1.0.0, =4.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-POSTCSSANIMATECSSVARS-19161341...

@fduenascoink/ui-sdk (>=18.0.0, <=18.0.4), @nextorders/avatar (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +3 more potentially affected by CVE-2026-68921 via @dicebear/core (>=9.0.0, <=9.4.2)

@dicebear/core NPM version =9.0.0, =18.0.0, =0.1.0-alpha.1, =0.0.119, =0.1.0, =9.0.0, =9.4.2 Source cves: CVE-2026-68921 Source advisory: SNYK:JS-DICEBEARCORE-19233389...

@argustech/agentflow (>=1.0.0, <=1.3.1), @assisly-orgnazation/embed (0.1.0) +38 more potentially affected by CVE-2026-68921 via @dicebear/initials (>=9.0.0, <=9.4.2)

@dicebear/initials NPM version =9.0.0, =1.0.0, =9.0.0, =18.0.0, =1.0.9, =0.0.4, =1.1.2, =1.4.0, =1.0.2, =4.2.12, =21.0.30, =0.0.1, =0.0.143 and more Source cves: CVE-2026-68921 Source advisory: SNYK:JS-DICEBEARINITIALS-19233390...

@gluuten/gluuten-cli (0.9.5), @open-xchange/vite-plugin-i18next-gettext (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2026-55451 via gettext-converter (>=1.0.3, <=1.3.2)

gettext-converter NPM version =1.0.3, =0.0.1, =7.1.0, =4.11.2, =4.18.0 Source cves: CVE-2026-55451 Source advisory: OSV:GHSA-F4JP-RW7W-CCWG...

@nocobase/devtools (>=2.0.0-alpha.2, <=2.1.0-beta.44), @nocobase/test (>=2.0.0-alpha.2, <=2.1.0-beta.44) potentially affected by unknown CVE via @nocobase/server (>=2.0.0, <=2.1.0-beta.44)

@nocobase/server NPM version =2.0.0, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.1.0-beta.44 Source cves: unknown CVE Source advisory: OSV:GHSA-GHVF-QF6H-G8X5...

@cbsanal/node-red-opcua-browse-subscribe (>=0.0.1, <=0.0.4), @frangoteam/fuxa (>=1.1.7, <=1.3.1) +46 more potentially affected by CVE-2026-54156 via node-opcua (>=2.1.9, <=2.167.0)

node-opcua NPM version =2.1.9, =0.0.1, =1.1.7, =1.1.19, =1.3.2-alpha.86, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.159, =1.3.5, =1.4.15-alpha.197, =1.4.15-alpha.279, =1.4.15-alpha.182, =1.4.15-alpha.196 and more Source cves:...

@cbsanal/node-red-opcua-browse-subscribe (>=0.0.1, <=0.0.4), @frangoteam/fuxa (>=1.1.7, <=1.3.1) +46 more potentially affected by CVE-2026-54155 via node-opcua (>=2.1.9, <=2.164.2)

node-opcua NPM version =2.1.9, =0.0.1, =1.1.7, =1.1.19, =1.3.2-alpha.86, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.159, =1.3.5, =1.4.15-alpha.197, =1.4.15-alpha.279, =1.4.15-alpha.182, =1.4.15-alpha.196 and more Source cves:...

loadutils (>=1.0.4, <=1.0.6), pino-debugging (>=1.1.3, <=1.1.5) potentially affected by unknown CVE via lessload (1.0.1)

lessload NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on lessload and may be impacted: - loadutils =1.0.4, =1.1.3, =1.1.5 Source cves: unknown CVE Source advisory: SNYK:JS-LESSLOAD-19161419...

pino-debugging (>=1.1.3, <=1.1.5) potentially affected by unknown CVE via loadutils (1.0.6)

loadutils NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on loadutils and may be impacted: - pino-debugging =1.1.3, =1.1.5 Source cves: unknown CVE Source advisory: SNYK:JS-LOADUTILS-19161549...

postcss-selector-minify (2.0.0) potentially affected by unknown CVE via layerd-unit-codec-parser (2.0.0)

layerd-unit-codec-parser NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on layerd-unit-codec-parser and may be impacted: - postcss-selector-minify 2.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-LAYERDUNITCODECPARSER-19161336...

jest-test-plugin-utils (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via vite-common-utils (1.0.5)

vite-common-utils NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on vite-common-utils and may be impacted: - jest-test-plugin-utils =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: SNYK:JS-VITECOMMONUTILS-19161383...

@agiflowai/aicode-toolkit (>=1.2.0, <=1.3.0), @agiflowai/one-mcp (>=0.4.1, <=0.4.2) +29 more potentially affected by CVE-2026-61556 via liquidjs (>=10.26.0, <=10.27.0)

liquidjs NPM version =10.26.0, =1.2.0, =0.4.1, =1.2.0, =1.1.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =36.0.0-rc.0, =0.0.1-beta.0, =3.0.0, =0.5.0, =0.3024.0, =0.3024.0, =1.1.1 and more Source cves: CVE-2026-61556 Source advisory: SNYK:JS-LIQUIDJS-19006352...

@contentful/mcp-server (>=1.7.0-dev-20251016T1739-07b05ef.0, <=1.7.18), @iflow-mcp/contentful-contentful-mcp-server (>=1.7.7, <=1.7.8) potentially affected by CVE-2026-53957 via @contentful/mcp-tools (>=0.1.0, <=0.4.4)

@contentful/mcp-tools NPM version =0.1.0, =1.7.0-dev-20251016T1739-07b05ef.0, =1.7.7, =1.7.8 Source cves: CVE-2026-53957 Source advisory: OSV:GHSA-2XHG-73J7-RRGX...

eslint-commit-parser (1.0.0) potentially affected by unknown CVE via express-mocha-test (0.0.1)

express-mocha-test NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-mocha-test and may be impacted: - eslint-commit-parser 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-EXPRESSMOCHATEST-19003439...

@0layimika/api-response-kit (>=0.1.0, <=0.1.3), @0xinfrax/session-key-server (>=0.1.0, <=0.1.1) +3677 more potentially affected by CVE-2026-16732 via fastify (>=5.8.3, <=5.12.0)

fastify NPM version =5.8.3, =0.1.0, =0.1.0, =1.6.0, =0.1.0, =0.1.0, =1.0.0, =0.0.3, =0.1.6, =1.0.0, =1.1.0, =1.2.0, =0.2.0, =0.4.0 and more Source cves: CVE-2026-16732 Source advisory: SNYK:JS-FASTIFY-18965771...