02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10050 more potentially affected by CVE-2026-67213 via nanoid (>=3.0.0, <=3.3.16)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-67213 Source advisory: SNYK:JS-NANOID-18506897...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10045 more potentially affected by CVE-2026-67214 via nanoid (>=3.0.0, <=3.3.15)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-67214 Source advisory: SNYK:JS-NANOID-18506894...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +6045 more potentially affected by CVE-2026-67214 via nanoid (>=4.0.0, <=5.1.15)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-67214 Source advisory: SNYK:JS-NANOID-18506894...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10058 more potentially affected by CVE-2026-67213 via nanoid (>=3.0.0, <=3.3.17)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-67213 Source advisory: OSV:GHSA-2V37-7H3G-55P8...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +6045 more potentially affected by CVE-2026-67214 via nanoid (>=4.0.0, <=5.1.15)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-67214 Source advisory: OSV:GHSA-28WG-GHJ8-5HJV...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10045 more potentially affected by CVE-2026-67214 via nanoid (>=3.0.0, <=3.3.15)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-67214 Source advisory: OSV:GHSA-28WG-GHJ8-5HJV...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5410 more potentially affected by CVE-2026-67213 via nanoid (>=4.0.0, <=5.1.5)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-67213 Source advisory: OSV:GHSA-2V37-7H3G-55P8...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.54) +23 more potentially affected by CVE-2026-54666 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =1.2.7 and more Source cves: CVE-2026-54666 Source advisory: OSV:GHSA-W284-33MX-6G9V...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.54) +23 more potentially affected by CVE-2026-54664 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =1.2.7 and more Source cves: CVE-2026-54664 Source advisory: OSV:GHSA-5F94-X226-CCPM...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.54) +23 more potentially affected by CVE-2026-54661 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =1.2.7 and more Source cves: CVE-2026-54661 Source advisory: OSV:GHSA-38C3-WV3C-V3XJ...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.54) +23 more potentially affected by CVE-2026-54663 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =1.2.7 and more Source cves: CVE-2026-54663 Source advisory: OSV:GHSA-X36R-4347-PM5X...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.54) +23 more potentially affected by CVE-2026-54662 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =1.2.7 and more Source cves: CVE-2026-54662 Source advisory: OSV:GHSA-HQJ5-CW9F-RX67...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.54) +23 more potentially affected by CVE-2026-54660 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =1.2.7 and more Source cves: CVE-2026-54660 Source advisory: OSV:GHSA-H754-FXP7-88WX...

chatgpt-panic-hook (>=0.1.1, <=0.1.5), formation-chess-web (0.2.0) +5 more potentially affected by unknown CVE via webbrowser (1.0.0)

webbrowser CARGO version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on webbrowser and may be impacted: - chatgpt-panic-hook =0.1.1, =0.2.0, =0.13.2, =0.1.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0257...

@aios-alpha/design (>=0.2.1, <=0.3.0), @aleph-alpha/design-tokens (>=0.2.0, <=2.1.0) +154 more potentially affected by CVE-2026-54639 via style-dictionary (>=4.3.0, <=5.4.0)

style-dictionary NPM version =4.3.0, =0.2.1, =0.2.0, =1.0.0, =1.0.0, =0.1.2, =0.1.1, =0.0.12-beta.1, =0.1.1, =0.1.2 and more Source cves: CVE-2026-54639 Source advisory: OSV:GHSA-VJ5C-M527-MPFF...

svelte-streak-board (1.0.0) potentially affected by unknown CVE via streak-core-lib (1.0.0)

streak-core-lib NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streak-core-lib and may be impacted: - svelte-streak-board 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-STREAKCORELIB-18503763...

korvath (1.0.0) potentially affected by unknown CVE via korvica (1.0.0)

korvica NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on korvica and may be impacted: - korvath 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-KORVICA-18503747...

anansi (>=0.10.0, <=0.14.2), anansi-core (>=0.10.0, <=0.14.2) +77 more potentially affected by CVE-2026-46428 via lettre (>=0.10.1, <=0.10.4)

lettre CARGO version =0.10.1, =0.10.0, =0.10.0, =0.1.0, =0.111.0, =0.1.2, =1.6.0, =1.0.0, =1.3.0-beta1, =1.6.4, =0.0.1, =0.1.0, =0.1.1 and more Source cves: CVE-2026-46428 Source advisory: OSV:GHSA-4PJ9-G833-QX53...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.6, <=1.4.11), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.5, <=1.4.11) +55 more potentially affected by CVE-2026-18203 via org.keycloak:keycloak-authz-policy-common (>=2.0.0.cr1, <=26.8.0)

org.keycloak:keycloak-authz-policy-common MAVEN version =2.0.0.cr1, =1.2.6, =1.2.5, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =24.3.0.0, =24.3.0.0, =2.5.6-24.0, =0.1.0, =8.1, =1.0.0, =1.1.0 and more Source cves: CVE-2026-18203 Source advisory:...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), ch.nerdin.keycloak.extensions:avatar-extension (0.0.1) +242 more potentially affected by CVE-2026-18208 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.8.0)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18208 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18751971...

venturo-playwright (1.0.12) potentially affected by unknown CVE via venturo-playwright-runner (1.0.8)

venturo-playwright-runner NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.12 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

venturo-playwright (1.0.13) potentially affected by unknown CVE via venturo-playwright-runner (1.0.9)

venturo-playwright-runner NPM version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.13 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

@pmate/account-sdk (>=0.6.1, <=0.9.15), @pmate/agent-sdk (>=1.0.2, <=2.0.1) +3 more potentially affected by unknown CVE via @pmate/utils (1.1.4)

@pmate/utils NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @pmate/utils and may be impacted: - @pmate/account-sdk =0.6.1, =1.0.2, =0.1.3, =0.12.0, =0.2.0, =0.4.1 Source cves: unknown CVE Source advisory: SNYK:JS-PMATEUTILS-18550696...

@robit/oaai (>=0.1.0, <=0.2.0), hdra-ai (>=0.1.0, <=0.2.0) +2 more potentially affected by unknown CVE via open-agents-ai (0.187.596)

open-agents-ai NPM version 0.187.596 is affected by a known vulnerability. The following packages have a transitive dependency on open-agents-ai and may be impacted: - @robit/oaai =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: SNYK:JS-OPENAGENTSAI-18550671...

@godscene/playground-electron (1.7.22), @godscene/visualizer (1.7.22) potentially affected by unknown CVE via @godscene/web (1.7.22)

@godscene/web NPM version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on @godscene/web and may be impacted: - @godscene/playground-electron 1.7.22 - @godscene/visualizer 1.7.22 Source cves: unknown CVE Source advisory: SNYK:JS-GODSCENEWEB-18550...

shadowmd (8.6.87), shadowmd-baileys (>=8.6.49, <=8.6.91) potentially affected by unknown CVE via @shadowmd/libsignal-node (8.6.59)

@shadowmd/libsignal-node NPM version 8.6.59 is affected by a known vulnerability. The following packages have a transitive dependency on @shadowmd/libsignal-node and may be impacted: - shadowmd 8.6.87 - shadowmd-baileys =8.6.49, =8.6.91 Source cves: unknown CVE Source advisory:...

@onerjs/smart-filters-blocks (8.51.7) potentially affected by unknown CVE via @onerjs/smart-filters (8.51.7)

@onerjs/smart-filters NPM version 8.51.7 is affected by a known vulnerability. The following packages have a transitive dependency on @onerjs/smart-filters and may be impacted: - @onerjs/smart-filters-blocks 8.51.7 Source cves: unknown CVE Source advisory: SNYK:JS-ONERJSSMARTFILTERS-18550713...

@onerjs/smart-filters-blocks (8.51.8) potentially affected by unknown CVE via @onerjs/smart-filters (8.51.8)

@onerjs/smart-filters NPM version 8.51.8 is affected by a known vulnerability. The following packages have a transitive dependency on @onerjs/smart-filters and may be impacted: - @onerjs/smart-filters-blocks 8.51.8 Source cves: unknown CVE Source advisory: SNYK:JS-ONERJSSMARTFILTERS-18550713...

@exclipz/baileys (10.0.1), @exclipz/bails (>=2.0.3, <=2.0.7) +1 more potentially affected by unknown CVE via @shinzepelly/libsignal-node (2.2.4)

@shinzepelly/libsignal-node NPM version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on @shinzepelly/libsignal-node and may be impacted: - @exclipz/baileys 10.0.1 - @exclipz/bails =2.0.3, =2.0.7 - @shinzepelly/baileys 1.0.8 Source cves: unknown C...

venturo-playwright (1.0.16) potentially affected by unknown CVE via venturo-playwright-runner (1.0.12)

venturo-playwright-runner NPM version 1.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.16 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

venturo-playwright (1.0.10) potentially affected by unknown CVE via venturo-playwright-runner (1.0.6)

venturo-playwright-runner NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on venturo-playwright-runner and may be impacted: - venturo-playwright 1.0.10 Source cves: unknown CVE Source advisory: SNYK:JS-VENTUROPLAYWRIGHTRUNNER-18550644...

datatran (1.5.0), log-serialize (2.1.1) potentially affected by unknown CVE via proto-bin (2.5.3)

proto-bin NPM version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on proto-bin and may be impacted: - datatran 1.5.0 - log-serialize 2.1.1 Source cves: unknown CVE Source advisory: SNYK:JS-PROTOBIN-18385342...

@merceas/anchor (>=0.32.1, <=0.32.3) potentially affected by unknown CVE via @merceas/cross-fetch (3.1.9)

@merceas/cross-fetch NPM version 3.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @merceas/cross-fetch and may be impacted: - @merceas/anchor =0.32.1, =0.32.3 Source cves: unknown CVE Source advisory: SNYK:JS-MERCEASCROSSFETCH-18487713...

@c0b41/prettify-error (1.0.0), assume (>=0.0.10, <=1.4.0) +24 more potentially affected by unknown CVE via failing-line (>=0.0.0, <=0.1.0)

failing-line NPM version =0.0.0, =0.0.10, =7.1.0, =0.0.0, =1.0.0, =0.1.1, =0.0.0, =1.0.0, =0.0.1, =0.0.4 and more Source cves: unknown CVE Source advisory: SNYK:JS-FAILINGLINE-19778581...

@aikidosec/broker-client (>=1.0.47, <=1.0.50), @kirick/ip (0.2.1) +2 more potentially affected by CVE-2026-54272 via ip-address (>=10.1.1, <=10.2.0)

ip-address NPM version =10.1.1, =1.0.47, =0.1.3, =7.6.5-beta.0, =8.0.3 Source cves: CVE-2026-54272 Source advisory: SNYK:JS-IPADDRESS-18343249...

003-gas-convert (1.0.1), 108-gas-convert (1.0.0) +9492 more potentially affected by CVE-2018-1002203 +2 more via unzipper (>=0.3.0, <=0.12.5)

unzipper NPM version =0.3.0, =4.3.4, =2.0.0, =3.0.0, =2.0.0, =1.0.0, =1.0.26, =0.0.80, =1.0.0-beta.1, =0.0.1, =1.0.7, =0.0.1-0, =0.0.1-2 and more Source cves: CVE-2018-1002203, CVE-2026-17514, CVE-2026-59972 Source advisory: SNYK:JS-UNZIPPER-18365659...

@0xd541ecb3/byte-babe (>=1.0.0, <=1.2.1), @514labs/aurora-mcp (>=0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, <=0.0.64) +757 more potentially affected by CVE-2026-55968 via thrift (>=0.6.0-1, <=0.23.0)

thrift NPM version =0.6.0-1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.6, =0.0.0-dev, =1.0.0, =0.9.0, =0.3.0, =0.0.1, =0.2.0, =0.2.0, =0.1.0, =1.0.0-beta.1, =1.0.0-beta.6 and more Source cves: CVE-2026-55968 Source advisory: SNYK:JS-THRIFT-18388780...

@akunsansan0/pucuk5000 (1.1.6) potentially affected by unknown CVE via @akunsansan0/pucuk5000 (1.1.7)

@akunsansan0/pucuk5000 NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @akunsansan0/pucuk5000 and may be impacted: - @akunsansan0/pucuk5000 1.1.6 Source cves: unknown CVE Source advisory: SNYK:JS-AKUNSANSAN0PUCUK5000-18319552...

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0219...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +445 more potentially affected by CVE-2026-17459 via com.sparkjava:spark-core (>=1.0, <=2.9.4)

com.sparkjava:spark-core MAVEN version =1.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.6.1,...

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0216...

@frontmcp/plugin-skilled-openapi (>=0.0.1, <=1.5.5) potentially affected by unknown CVE via @frontmcp/adapters (>=1.0.4, <=1.5.5)

@frontmcp/adapters NPM version =1.0.4, =0.0.1, =1.5.5 Source cves: unknown CVE Source advisory: OSV:GHSA-8Q49-2H5H-434X...

aws-smithy-http-server-python (>=0.44.0, <=0.52.0) potentially affected by CVE-2026-16756 via aws-smithy-http-server (>=0.44.0, <=0.52.0)

aws-smithy-http-server CARGO version =0.44.0, =0.44.0, =0.52.0 Source cves: CVE-2026-16756 Source advisory: OSV:GHSA-JVXP-QMX7-GJPX...

@bedrock/quasar (>=10.0.1, <=11.0.0), @cabloy/front-quasar (>=5.0.82, <=5.0.96) +10 more potentially affected by CVE-2026-73647 via quasar (>=2.0.0-beta.1, <=2.18.6)

quasar NPM version =2.0.0-beta.1, =10.0.1, =5.0.82, =2.0.1, =0.1.1-beta.0, =1.0.25-alpha.11, =1.0.183, =1.0.0, =5.0.97, =5.0.215 Source cves: CVE-2026-73647 Source advisory: OSV:GHSA-3R53-75J5-3G7J...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: OSV:GHSA-GM3R-Q2WP-HW87...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by unknown CVE via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319522...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73411 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73411 Source advisory: OSV:GHSA-Q53C-4PRM-W95Q...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by unknown CVE via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319527...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by unknown CVE via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319518...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73414 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73414 Source advisory: OSV:GHSA-W4HW-QCX7-56PR...