11057 matches found
@alancode95/core-prisma (1.0.0), @aliceo2/bookkeeping (>=0.27.0, <=1.20.0) +117 more potentially affected by CVE-2026-55855 via mariadb (>=3.0.0, <=3.5.2)
mariadb NPM version =3.0.0, =0.27.0, =1.14.0, =0.1.0, =0.1.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =1.0.0, =0.4.0, =0.0.6, =0.5.0-beta.7, =2.105.0, =2.117.0 and more Source cves: CVE-2026-55855 Source advisory: SNYK:JS-MARIADB-19432139...
@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55854 via mariadb (>=3.3.0, <=3.3.2)
mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-55854 Source advisory: OSV:GHSA-42R5-VHPQ-M858...
@alancode95/core-prisma (1.0.0), @aliceo2/infologger (>=1.15.0, <=1.15.1) +48 more potentially affected by CVE-2026-55854 via mariadb (>=3.4.0, <=3.4.5)
mariadb NPM version =3.4.0, =1.15.0, =1.0.0, =0.4.0, =0.5.0-beta.7, =2.105.0, =1.0.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =1.2.1, =2.1.0, =0.61.0, =0.93.0, =1.8.0, =2.3.2 and more Source cves: CVE-2026-55854 Source advisory: OSV:GHSA-42R5-VHPQ-M858...
@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.155) +62 more potentially affected by CVE-2026-55854 via mariadb (>=3.0.0, <=3.2.3)
mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...
@aliceo2/infologger (>=1.16.0, <=1.18.0) potentially affected by CVE-2026-55854 via mariadb (3.5.2)
mariadb NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on mariadb and may be impacted: - @aliceo2/infologger =1.16.0, =1.18.0 Source cves: CVE-2026-55854 Source advisory: OSV:GHSA-42R5-VHPQ-M858...
@alancode95/core-prisma (1.0.0), @aliceo2/bookkeeping (>=0.27.0, <=1.20.0) +117 more potentially affected by CVE-2026-55854 via mariadb (>=3.0.0, <=3.5.2)
mariadb NPM version =3.0.0, =0.27.0, =1.14.0, =0.1.0, =0.1.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =1.0.0, =0.4.0, =0.0.6, =0.5.0-beta.7, =2.105.0, =2.117.0 and more Source cves: CVE-2026-55854 Source advisory: SNYK:JS-MARIADB-19432140...
@aliceo2/infologger (>=1.16.0, <=1.18.0) potentially affected by CVE-2026-55215 via mariadb (3.5.2)
mariadb NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on mariadb and may be impacted: - @aliceo2/infologger =1.16.0, =1.18.0 Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...
@alancode95/core-prisma (1.0.0), @aliceo2/bookkeeping (>=0.27.0, <=1.20.0) +117 more potentially affected by CVE-2026-55215 via mariadb (>=3.0.0, <=3.5.2)
mariadb NPM version =3.0.0, =0.27.0, =1.14.0, =0.1.0, =0.1.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =1.0.0, =0.4.0, =0.0.6, =0.5.0-beta.7, =2.105.0, =2.117.0 and more Source cves: CVE-2026-55215 Source advisory: SNYK:JS-MARIADB-19432138...
@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.155) +62 more potentially affected by CVE-2026-55215 via mariadb (>=3.0.0, <=3.2.3)
mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...
@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55215 via mariadb (>=3.3.0, <=3.3.2)
mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...
@alancode95/core-prisma (1.0.0), @aliceo2/infologger (>=1.15.0, <=1.15.1) +48 more potentially affected by CVE-2026-55215 via mariadb (>=3.4.0, <=3.4.5)
mariadb NPM version =3.4.0, =1.15.0, =1.0.0, =0.4.0, =0.5.0-beta.7, =2.105.0, =1.0.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =1.2.1, =2.1.0, =0.61.0, =0.93.0, =1.8.0, =2.3.2 and more Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...
20231122-npm (1.0.0), 2048.io (0.0.1) +6572 more potentially affected by CVE-2026-15603 +1 more via morgan (>=1.0.0, <=1.11.0)
morgan NPM version =1.0.0, =1.0.2, =1.0.0, =0.2.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.67 and more Source cves: CVE-2026-15603, CVE-2026-5078 Source advisory: SNYK:JS-MORGAN-19432128...
@cluesurf/task (0.5.4), @tadashi/doc2pdf (>=1.1.0, <=1.1.3) potentially affected by CVE-2026-54732 via libreoffice-convert (>=1.6.1, <=1.8.1)
libreoffice-convert NPM version =1.6.1, =1.1.0, =1.1.3 Source cves: CVE-2026-54732 Source advisory: OSV:GHSA-GMXC-R82Q-347R...
kas (>=0.3.0, <=0.10.1), kas-core (>=0.10.0, <=0.10.1) +3 more potentially affected by unknown CVE via stack_dst (0.6.1)
stackdst CARGO version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on stackdst and may be impacted: - kas =0.3.0, =0.10.0, =0.3.0, =0.3.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0272...
@adobe/aem-site-template-builder (>=0.1.7, <=2.0.2), @ns3/nx-serverless (>=3.2.2, <=4.1.0) +4 more potentially affected by CVE-2026-80427 via bestzip (>=2.1.6, <=2.2.1)
bestzip NPM version =2.1.6, =0.1.7, =3.2.2, =0.3.0, =1.0.7-6, =1.0.2-1, =1.0.0, =1.0.2 Source cves: CVE-2026-80427 Source advisory: SNYK:JS-BESTZIP-19276666...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +1028 more potentially affected by CVE-2026-75604 via next (>=16.0.0, <=16.3.2)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-75604 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +1028 more potentially affected by unknown CVE via next (>=16.0.0, <=16.3.2)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: unknown CVE Source advisory:...
@arxen/sso (0.2.0), @inkeep/agents-api (>=0.0.0-dev-20260121145510, <=0.80.6) +18 more potentially affected by CVE-2026-80192 via @better-auth/sso (>=1.4.10, <=1.6.26)
@better-auth/sso NPM version =1.4.10, =0.0.0-dev-20260121145510, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260106221934, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260203033642...
@nohost/server (>=0.0.1-beta2, <=0.3.6) potentially affected by CVE-2026-55629 via whistle (>=2.3.7, <=2.9.85-beta)
whistle NPM version =2.3.7, =0.0.1-beta2, =0.3.6 Source cves: CVE-2026-55629 Source advisory: OSV:GHSA-3VFR-4GWF-QXFP...
shadcn-ui-lib (>=0.0.9, <=0.0.18) potentially affected by CVE-2026-55596 via @platejs/media (53.0.0)
@platejs/media NPM version 53.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @platejs/media and may be impacted: - shadcn-ui-lib =0.0.9, =0.0.18 Source cves: CVE-2026-55596 Source advisory: OSV:GHSA-QJ6X-XX2H-8HVV...
@anejs/anne-migration-vue (>=2.1.0-beta.10, <=2.3.0-beta.10), @anejs/anne-plugin-qiniu (>=2.2.0-beta.1, <=2.3.0-beta.10) +344 more potentially affected by CVE-2026-55553 via urllib (>=2.0.2, <=2.41.0)
urllib NPM version =2.0.2, =2.1.0-beta.10, =2.2.0-beta.1, =0.0.1-beta.0, =0.0.1-beta.0, =0.15.0-beta.2 and more Source cves: CVE-2026-55553 Source advisory: OSV:GHSA-HQ3H-G68C-HP78...
@142vip/egg (>=0.0.1-alpha.1, <=0.0.1-alpha.6), @142vip/egg-axios (>=0.0.1-alpha.1, <=0.0.1-alpha.2) +1610 more potentially affected by CVE-2026-55553 via urllib (>=3.1.2, <=4.9.0)
urllib NPM version =3.1.2, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.2, =0.0.1-alpha.2, =2.6.4, =1.7.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.0.15, =1.2.17 and more Source cves: CVE-2026-55553 Source advisory: OSV:GHSA-HQ3H-G68C-HP78...
@adobe/probot-serverless-openwhisk (>=4.0.24, <=4.0.55), @csnext/cs-layer-server (>=0.0.101-beta.22, <=0.0.132-beta.207) +248 more potentially affected by CVE-2026-16231 via hbs (>=2.1.0, <=4.2.1)
hbs NPM version =2.1.0, =4.0.24, =0.0.101-beta.22, =0.7.0, =0.7.0, =0.7.0, =1.0.0, =0.19.0, =2.0.1, =0.1.5, =1.0.36, =0.9.0, =0.0.1-alpha.0, =0.1.2, =0.1.2, =0.3.2 and more Source cves: CVE-2026-16231 Source advisory: SNYK:JS-HBS-19256914...
8004skill (>=1.1.0, <=2.0.0), @a3stack/identity (0.2.0) +224 more potentially affected by CVE-2026-77384 via @libp2p/circuit-relay-v2 (>=2.1.5, <=4.2.0)
@libp2p/circuit-relay-v2 NPM version =2.1.5, =1.1.0, =1.0.4, =1.0.0, =1.0.0, =1.0.1, =0.1.0-alpha.1, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.1, =0.0.12 - @blockless/browser-node 0.1.1 - @bluzelle/sdk 1.0.25 and more Source cves: CVE-2026-77384 Source advisory: SNYK:JS-LIBP2PCIRCUITRELAYV2-19256805...
actix-postgres (>=0.1.0, <=0.4.0), actyxos_data_flow (0.1.0) +491 more potentially affected by unknown CVE via tokio-postgres (>=0.4.0-rc.2, <=0.7.17)
tokio-postgres CARGO version =0.4.0-rc.2, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.3.5, =0.2.0, =0.13.2, =0.14.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3GJW-F78C-VVPW...
actix-postgres (>=0.1.0, <=0.4.0), actyx_sdk (>=0.1.0, <=0.3.0) +574 more potentially affected by unknown CVE via postgres-protocol (>=0.1.1, <=0.6.10)
postgres-protocol CARGO version =0.1.1, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RGQC-3X5P-6GWG...
actix-postgres (>=0.1.0, <=0.4.0), actyx_sdk (>=0.1.0, <=0.3.0) +562 more potentially affected by unknown CVE via postgres-protocol (>=0.4.0, <=0.6.10)
postgres-protocol CARGO version =0.4.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5X78-73V4-XG6W...
org.sakaiproject.basiclti:basiclti-impl (>=11.0, <=11.4), org.sakaiproject.commons:commons-api (>=12.0, <=23.3) +5 more potentially affected by CVE-2026-54050 via org.sakaiproject.profile2:profile2-api (>=1.5.0, <=23.3)
org.sakaiproject.profile2:profile2-api MAVEN version =1.5.0, =11.0, =12.0, =12.0, =19.1, =11.1, =11.0, =1.5.0-b03, =10.7 Source cves: CVE-2026-54050 Source advisory: SNYK:JAVA-ORGSAKAIPROJECTPROFILE2-19256952...
abraham3k (>=1.3.8, <=1.5.3), accutuning-helpers (>=1.0.32, <=1.0.33) +75 more potentially affected by CVE-2026-76843 via flair (>=0.4.5, <=0.15.1)
flair PYPI version =0.4.5, =1.3.8, =1.0.32, =0.0.1, =0.1.0, =0.0.6, =0.1.20, =0.1.0, =0.1.0, =0.0.1.1, =0.2.4, =0.1.1, =0.0.1rc2, =0.0.1rc3488056308109 and more Source cves: CVE-2026-76843 Source advisory: SNYK:PYTHON-FLAIR-19256938...
0.extends.whistle (1.0.65), 0g-aura (>=0.1.0, <=0.4.31) +10536 more potentially affected by CVE-2026-76845 via adm-zip (>=0.5.9, <=0.6.0)
adm-zip NPM version =0.5.9, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =1.125.0, =1.0.1, =0.0.112-rc1, =0.1.3-rc9 and more Source cves: CVE-2026-76845 Source advisory: SNYK:JS-ADMZIP-19276676...
@diviops/mcp-server (1.5.40), @donadiosolutions/lcm (>=1.4.2, <=1.4.3) +17 more potentially affected by CVE-2026-75931 via fast-uri (>=3.1.4, <=3.1.5)
fast-uri NPM version =3.1.4, =1.4.2, =1.2.0, =1.4.18, =0.2.0-alpha.5, =0.1.0, =0.1.6, =0.16.2-cloud-1, =0.1.5, =0.1.3, =3.38.11, =0.1.0, =0.1.0, =0.1.12, =0.1.14 and more Source cves: CVE-2026-75931 Source advisory: SNYK:JS-FASTURI-19256867...
@diviops/mcp-server (1.5.40), @donadiosolutions/lcm (>=1.4.2, <=1.4.3) +18 more potentially affected by CVE-2026-75899 via fast-uri (>=3.1.2, <=3.1.5)
fast-uri NPM version =3.1.2, =1.4.2, =1.2.0, =1.4.18, =0.2.0-alpha.5, =0.1.0, =0.1.6, =0.16.2-cloud-1, =1.25.0, =0.1.5, =0.1.3, =3.38.11, =0.1.0, =0.1.0, =0.1.3 and more Source cves: CVE-2026-75899 Source advisory: SNYK:JS-FASTURI-19256873...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (1.5.40) +24 more potentially affected by CVE-2026-75975 via fast-uri (>=3.0.1, <=3.1.5)
fast-uri NPM version =3.0.1, =0.3.1, =1.4.2, =1.2.0, =1.4.18, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.0, =0.1.6, =0.16.2-cloud-1, =1.25.0, =1.28.1 and more Source cves: CVE-2026-75975 Source advisory: SNYK:JS-FASTURI-19256871...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (1.5.40) +24 more potentially affected by CVE-2026-76172 via fast-uri (>=3.0.1, <=3.1.5)
fast-uri NPM version =3.0.1, =0.3.1, =1.4.2, =1.2.0, =1.4.18, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.0, =0.1.6, =0.16.2-cloud-1, =1.25.0, =1.28.1 and more Source cves: CVE-2026-76172 Source advisory: SNYK:JS-FASTURI-19256869...
descartes (0.1.20), michelangelo (>=0.1.0, <=0.2.5) potentially affected by unknown CVE via stable-vec (0.3.2)
stable-vec CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on stable-vec and may be impacted: - descartes 0.1.20 - michelangelo =0.1.0, =0.2.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0267...
@ablula/blog-jinchan (>=0.0.1, <=0.0.9), @ablula/default-blog-theme (>=0.0.1, <=0.0.6) +10957 more potentially affected by CVE-2026-78180 via @alifd/next (>=1.9.23, <=1.27.34)
@alifd/next NPM version =1.9.23, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =0.0.2, =0.0.1, =0.1.5 and more Source cves: CVE-2026-78180 Source advisory: SNYK:JS-ALIFDNEXT-19233840...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +176 more potentially affected by CVE-2026-69222 via liquidjs (>=10.2.0, <=10.27.1)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.4.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.19 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-69222 Source advisory:...
a-data-processing (0.0.1), a2a-client-handler (0.1.0) +2041 more potentially affected by CVE-2026-72848 via langchain-community (>=0.0.1, <=1.0.0a1)
langchain-community PYPI version =0.0.1, =0.1.0, =0.1.0b1, =0.1.0, =0.1.0, =0.1.0, =4.8.2, =0.1.3, =0.1.0, =1.0.1, =0.1.0, =0.1.0, =3.2.0, =3.4.0 and more Source cves: CVE-2026-72848 Source advisory: SNYK:PYTHON-LANGCHAINCOMMUNITY-19233333...
@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77415 via jsonata (>=1.0.10, <=1.8.7)
jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77415 Source advisory: SNYK:JS-JSONATA-19233334...
@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77415 via jsonata (>=1.0.10, <=1.8.7)
jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77415 Source advisory: OSV:GHSA-66MM-25PP-RFFF...
@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +162 more potentially affected by CVE-2026-77415 via jsonata (>=2.0.0, <=2.1.0)
jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.33.3-6623e55-202608121503.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77415 Source advisory: OSV:GHSA-66MM-25PP-RFFF...
@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +162 more potentially affected by CVE-2026-77415 via jsonata (>=2.0.0, <=2.1.0)
jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.33.3-6623e55-202608121503.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77415 Source advisory: SNYK:JS-JSONATA-1923333...
@godmode-team/godmode (1.6.1), @growthub/cli (>=0.3.1, <=0.3.44) +10 more potentially affected by CVE-2026-77087 via @paperclipai/server (>=0.2.7, <=2026.831.0-canary.0)
@paperclipai/server NPM version =0.2.7, =0.3.1, =0.1.45, =2026.324.0-canary.0, =0.0.2, =0.2.2, =0.6.5, =0.6.6 - solounicornclub 0.3.1 - stacy-cli 0.3.1 - superceo 0.3.2 - twinforgecli 0.3.2 Source cves: CVE-2026-77087 Source advisory: SNYK:JS-PAPERCLIPAISERVER-19233837...
@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +162 more potentially affected by CVE-2026-77414 via jsonata (>=2.0.0, <=2.1.0)
jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.33.3-6623e55-202608121503.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77414 Source advisory: OSV:GHSA-2943-5XFG-GQ5F...
@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77414 via jsonata (>=1.0.10, <=1.8.7)
jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77414 Source advisory: SNYK:JS-JSONATA-19233336...
@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77414 via jsonata (>=1.0.10, <=1.8.7)
jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77414 Source advisory: OSV:GHSA-2943-5XFG-GQ5F...
@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +162 more potentially affected by CVE-2026-77414 via jsonata (>=2.0.0, <=2.1.0)
jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.33.3-6623e55-202608121503.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77414 Source advisory: SNYK:JS-JSONATA-1923333...
@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77413 via jsonata (>=1.0.10, <=1.8.7)
jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77413 Source advisory: OSV:GHSA-8GQ3-VP5J-2GRP...
@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +162 more potentially affected by CVE-2026-77413 via jsonata (>=2.0.0, <=2.1.0)
jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.33.3-6623e55-202608121503.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77413 Source advisory: SNYK:JS-JSONATA-1923333...
@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77413 via jsonata (>=1.0.10, <=1.8.7)
jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77413 Source advisory: SNYK:JS-JSONATA-19233338...