@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107383 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107383 Source advisory: OSV:GHSA-48QF-XH34-Q73R...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-107383 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-107383 Source advisory: OSV:GHSA-48QF-XH34-Q73R...

@aliceo2/infologger (>=1.16.0, <=1.18.0), @code-sentinel-cli/code-sentinel-cli (>=3.0.5, <=4.0.13) +2 more potentially affected by CVE-2026-107383 via mariadb (>=3.5.2, <=3.5.3)

mariadb NPM version =3.5.2, =1.16.0, =3.0.5, =8.1.0-dev.5, =8.1.0-dev.7 Source cves: CVE-2026-107383 Source advisory: OSV:GHSA-48QF-XH34-Q73R...

@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.158) +62 more potentially affected by CVE-2026-107383 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107383 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107383 Source advisory: SNYK:JS-MARIADB-20883241...

@aliceo2/infologger (>=1.14.0, <=1.18.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +35 more potentially affected by CVE-2026-107382 via mariadb (>=3.3.0, <=3.5.3)

mariadb NPM version =3.3.0, =1.14.0, =0.1.0, =0.1.0, =3.0.5, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.1.13-dev.2, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.85.0 and more Source cves: CVE-2026-107382 Source advisory: SNYK:JS-MARIADB-20883240...

@aliceo2/infologger (>=1.14.0, <=1.18.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +35 more potentially affected by CVE-2026-107382 via mariadb (>=3.3.0, <=3.5.3)

mariadb NPM version =3.3.0, =1.14.0, =0.1.0, =0.1.0, =3.0.5, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.1.13-dev.2, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.85.0 and more Source cves: CVE-2026-107382 Source advisory: OSV:GHSA-CX2F-J9FH-8G68...

@aliceo2/infologger (>=1.14.0, <=1.18.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +35 more potentially affected by CVE-2026-107382 via mariadb (>=3.3.0, <=3.5.3)

mariadb NPM version =3.3.0, =1.14.0, =0.1.0, =0.1.0, =3.0.5, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.1.13-dev.2, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.85.0 and more Source cves: CVE-2026-107382 Source advisory: GHSA-CX2F-J9FH-8G68...

wiking (>=2.2.1, <=2.3.3) potentially affected by CVE-2026-107378 via cairosvg (0.5.0)

cairosvg PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cairosvg and may be impacted: - wiking =2.2.1, =2.3.3 Source cves: CVE-2026-107378 Source advisory: OSV:GHSA-C3JG-QH8M-J3H2...

aksharify (0.2.0), chem-eclipse (0.1.0) +56 more potentially affected by CVE-2026-107378 via cairosvg (>=2.1.3, <=2.9.0)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-107378 Source advisory: SNYK:PYTHON-CAIROSVG-20574178...

aksharify (0.2.0), chem-eclipse (0.1.0) +56 more potentially affected by CVE-2026-107378 via cairosvg (>=2.1.3, <=2.9.0)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-107378 Source advisory: OSV:GHSA-C3JG-QH8M-J3H2...

buildbot-badges (>=1.7.0, <=1.8.2), no-cloud (0.0.8) potentially affected by CVE-2026-107378 via cairosvg (1.0.22)

cairosvg PYPI version 1.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on cairosvg and may be impacted: - buildbot-badges =1.7.0, =1.8.2 - no-cloud 0.0.8 Source cves: CVE-2026-107378 Source advisory: OSV:GHSA-C3JG-QH8M-J3H2...

aksharify (0.2.0), chem-eclipse (0.1.0) +56 more potentially affected by CVE-2026-107378 via cairosvg (>=2.1.3, <=2.9.0)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-107378 Source advisory: GHSA-C3JG-QH8M-J3H2...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +19 more potentially affected by CVE-2026-107392 via music-metadata (>=11.0.0, <=11.14.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =1.0.44, =1.0.64 and more Source cves: CVE-2026-107392 Source advisory: OSV:GHSA-8J4C-6X6G-RQ3J...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +19 more potentially affected by CVE-2026-107392 via music-metadata (>=11.0.0, <=11.14.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =1.0.44, =1.0.64 and more Source cves: CVE-2026-107392 Source advisory: SNYK:JS-MUSICMETADATA-20877455...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +19 more potentially affected by CVE-2026-107392 via music-metadata (>=11.0.0, <=11.14.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =1.0.44, =1.0.64 and more Source cves: CVE-2026-107392 Source advisory: GHSA-8J4C-6X6G-RQ3J...

apus-cli (0.0.21), asaas-cdk-constructs (0.1.0) +183 more potentially affected by CVE-2026-107608 via aws-cdk-lib (>=2.0.0, <=2.260.0)

aws-cdk-lib PYPI version =2.0.0, =0.0.1, =0.0.3, =2.6.4, =2.82.0a0, =0.0.0, =2.73.0a0, =2.73.0a0, =2.73.0a0, =2.73.0a0, =2.91.0a0, =2.73.0a0, =2.73.0a0, =2.95.1a0 and more Source cves: CVE-2026-107608 Source advisory: MEND:CVE-2026-107608...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +629 more potentially affected by CVE-2026-107608 via aws-cdk-lib (>=2.0.0-rc.4, <=2.266.0)

aws-cdk-lib NPM version =2.0.0-rc.4, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: CVE-2026-107608 Source advisory: MEND:CVE-2026-10760...

cloud.pianola:cdk-fluent-assertions (>=1.0.0, <=1.0.1), com.cloudcamphq:aws-runtime (0.0.1) +781 more potentially affected by CVE-2026-107608 via software.amazon.awscdk:aws-cdk-lib (>=2.0.0-rc.27, <=2.266.0)

software.amazon.awscdk:aws-cdk-lib MAVEN version =2.0.0-rc.27, =1.0.0, =1.0.8, =1.0.8, =1.0.8, =1.0.8, =1.0.8, =2.0.0 and more Source cves: CVE-2026-107608 Source advisory: MEND:CVE-2026-107608...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +19 more potentially affected by CVE-2026-107392 via music-metadata (>=11.0.0, <=11.14.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =1.0.44, =1.0.64 and more Source cves: CVE-2026-107392 Source advisory: MEND:CVE-2026-107392...

bragi-audio (>=0.2.1, <=0.2.2), bragi-cli (0.1.0) potentially affected by CVE-2026-107391 via music-metadata (11.15.0)

music-metadata NPM version 11.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on music-metadata and may be impacted: - bragi-audio =0.2.1, =0.2.2 - bragi-cli 0.1.0 Source cves: CVE-2026-107391 Source advisory: MEND:CVE-2026-107391...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +21 more potentially affected by CVE-2026-107390 via music-metadata (>=11.0.0, <=11.15.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =0.2.1, =0.2.2 and more Source cves: CVE-2026-107390 Source advisory: MEND:CVE-2026-107390...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +21 more potentially affected by CVE-2026-107389 via music-metadata (>=11.0.0, <=11.15.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =0.2.1, =0.2.2 and more Source cves: CVE-2026-107389 Source advisory: MEND:CVE-2026-107389...

2app (>=1.2.7, <=1.2.8), @01/service-core (>=2.0.1, <=2.1.4) +1601 more potentially affected by CVE-2026-107709 via decompress-zip (>=0.0.2, <=0.3.3)

decompress-zip NPM version =0.0.2, =1.2.7, =2.0.1, =0.0.3, =1.0.7, =0.0.0, =2.0.0, =0.6.0, =1.0.6, =1.0.0, =3.0.0-alpha.0, =3.0.0-next.36, =3.8.4, =4.0.17 and more Source cves: CVE-2026-107709 Source advisory: SNYK:JS-DECOMPRESSZIP-20883330...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +21 more potentially affected by CVE-2026-107388 via music-metadata (>=11.0.0, <=11.15.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =0.2.1, =0.2.2 and more Source cves: CVE-2026-107388 Source advisory: MEND:CVE-2026-107388...

@actagent/matrix (>=2026.6.2, <=2026.6.5), @dada78641/tunetags (0.1.1) +21 more potentially affected by CVE-2026-107387 via music-metadata (>=11.0.0, <=11.15.0)

music-metadata NPM version =11.0.0, =2026.6.2, =2.0.1, =0.17.4, =2026.5.39, =0.6.0, =2.0.3, =2026.5.12-beta.1, =1.0.0, =6.7.4, =0.1.0, =0.1.0, =0.2.1, =0.2.2 and more Source cves: CVE-2026-107387 Source advisory: MEND:CVE-2026-107387...

@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.158) +62 more potentially affected by CVE-2026-107385 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107385 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107385 Source advisory: MEND:CVE-2026-107385...

@aliceo2/infologger (>=1.16.0, <=1.18.0), @code-sentinel-cli/code-sentinel-cli (>=3.0.5, <=4.0.13) +2 more potentially affected by CVE-2026-107385 via mariadb (>=3.5.2, <=3.5.3)

mariadb NPM version =3.5.2, =1.16.0, =3.0.5, =8.1.0-dev.5, =8.1.0-dev.7 Source cves: CVE-2026-107385 Source advisory: MEND:CVE-2026-107385...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-107385 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-107385 Source advisory: MEND:CVE-2026-107385...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-107384 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-107384 Source advisory: MEND:CVE-2026-107384...

@aliceo2/infologger (>=1.16.0, <=1.18.0), @code-sentinel-cli/code-sentinel-cli (>=3.0.5, <=4.0.13) +2 more potentially affected by CVE-2026-107384 via mariadb (>=3.5.2, <=3.5.3)

mariadb NPM version =3.5.2, =1.16.0, =3.0.5, =8.1.0-dev.5, =8.1.0-dev.7 Source cves: CVE-2026-107384 Source advisory: MEND:CVE-2026-107384...

@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.158) +62 more potentially affected by CVE-2026-107384 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107384 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107384 Source advisory: MEND:CVE-2026-107384...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-107383 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-107383 Source advisory: MEND:CVE-2026-107383...

@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.158) +62 more potentially affected by CVE-2026-107383 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-107383 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-107383 Source advisory: MEND:CVE-2026-107383...

@aliceo2/infologger (>=1.16.0, <=1.18.0), @code-sentinel-cli/code-sentinel-cli (>=3.0.5, <=4.0.13) +2 more potentially affected by CVE-2026-107383 via mariadb (>=3.5.2, <=3.5.3)

mariadb NPM version =3.5.2, =1.16.0, =3.0.5, =8.1.0-dev.5, =8.1.0-dev.7 Source cves: CVE-2026-107383 Source advisory: MEND:CVE-2026-107383...

@aliceo2/infologger (>=1.14.0, <=1.18.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +35 more potentially affected by CVE-2026-107382 via mariadb (>=3.3.0, <=3.5.3)

mariadb NPM version =3.3.0, =1.14.0, =0.1.0, =0.1.0, =3.0.5, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.1.13-dev.2, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.85.0 and more Source cves: CVE-2026-107382 Source advisory: MEND:CVE-2026-107382...

aksharify (0.2.0), chem-eclipse (0.1.0) +56 more potentially affected by CVE-2026-107378 via cairosvg (>=2.1.3, <=2.9.0)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-107378 Source advisory: MEND:CVE-2026-107378...

agency-swarm (>=1.10.0, <=1.11.0), appai (1.0.1) +7 more potentially affected by CVE-2026-107377 via datamodel-code-generator (>=0.59.1, <=0.76.2)

datamodel-code-generator PYPI version =0.59.1, =1.10.0, =0.61.0, =0.7.0, =1.3.0, =0.1.1, =0.5.0, =0.1.0, =0.2.0 Source cves: CVE-2026-107377 Source advisory: OSV:GHSA-77XJ-X4RM-935C...

agency-swarm (>=1.10.0, <=1.11.0), appai (1.0.1) +7 more potentially affected by CVE-2026-107377 via datamodel-code-generator (>=0.59.1, <=0.76.2)

datamodel-code-generator PYPI version =0.59.1, =1.10.0, =0.61.0, =0.7.0, =1.3.0, =0.1.1, =0.5.0, =0.1.0, =0.2.0 Source cves: CVE-2026-107377 Source advisory: SNYK:PYTHON-DATAMODELCODEGENERATOR-20574179...

agency-swarm (>=1.10.0, <=1.11.0), appai (1.0.1) +7 more potentially affected by CVE-2026-107377 via datamodel-code-generator (>=0.59.1, <=0.76.2)

datamodel-code-generator PYPI version =0.59.1, =1.10.0, =0.61.0, =0.7.0, =1.3.0, =0.1.1, =0.5.0, =0.1.0, =0.2.0 Source cves: CVE-2026-107377 Source advisory: GHSA-77XJ-X4RM-935C...

agency-swarm (>=1.10.0, <=1.11.0), appai (1.0.1) +7 more potentially affected by CVE-2026-107377 via datamodel-code-generator (>=0.59.1, <=0.76.2)

datamodel-code-generator PYPI version =0.59.1, =1.10.0, =0.61.0, =0.7.0, =1.3.0, =0.1.1, =0.5.0, =0.1.0, =0.2.0 Source cves: CVE-2026-107377 Source advisory: MEND:CVE-2026-107377...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +4451 more potentially affected by CVE-2026-106444 via handlebars (>=4.0.0, <=4.7.9)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-106444 Source advisory: GHSA-XW65-4HP5-5HC7...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +4451 more potentially affected by CVE-2026-106444 via handlebars (>=4.0.0, <=4.7.9)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-106444 Source advisory: OSV:GHSA-XW65-4HP5-5HC7...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +4451 more potentially affected by CVE-2026-106446 via handlebars (>=4.0.0, <=4.7.9)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-106446 Source advisory: SNYK:JS-HANDLEBARS-20574183...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +4451 more potentially affected by CVE-2026-106446 via handlebars (>=4.0.0, <=4.7.9)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-106446 Source advisory: GHSA-8R5X-FM3F-WHWJ...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +4451 more potentially affected by CVE-2026-106446 via handlebars (>=4.0.0, <=4.7.9)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-106446 Source advisory: OSV:GHSA-8R5X-FM3F-WHWJ...

org.webjars.npm:okta__okta-signin-widget (2.21.0), ro.isdc.wro4j:wro4j-extensions (>=2.0.0, <=2.1.1) +2 more potentially affected by CVE-2026-106446 via org.webjars.npm:handlebars (>=4.0.14, <=4.7.7)

org.webjars.npm:handlebars MAVEN version =4.0.14, =2.0.0, =2.0.0, =2.1.0, =2.1.1 Source cves: CVE-2026-106446 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-20574184...