-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +28155 more potentially affected by CVE-2026-9277 via shell-quote (>=1.3.3, <=1.8.3)

shell-quote NPM version =1.3.3, =1.0.1, =1.1.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

org.webjars.npm:github-com-wavesoft-local-echo (0.2.0), org.webjars.npm:launch-editor (>=2.2.1, <=2.14.1) +2 more potentially affected by CVE-2026-9277 via org.webjars.npm:shell-quote (1.10.0)

org.webjars.npm:shell-quote MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:shell-quote and may be impacted: - org.webjars.npm:github-com-wavesoft-local-echo 0.2.0 - org.webjars.npm:launch-editor =2.2.1, =2.14.1 -...

@airalogy/airalogy-engine (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-46703 via @boxlite-ai/boxlite (0.8.2)

@boxlite-ai/boxlite NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @boxlite-ai/boxlite and may be impacted: - @airalogy/airalogy-engine =0.0.1, =0.0.5 Source cves: CVE-2026-46703 Source advisory: OSV:GHSA-F396-4RP4-7V2J...

@airalogy/airalogy-engine (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-46695 via @boxlite-ai/boxlite (0.8.2)

@boxlite-ai/boxlite NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @boxlite-ai/boxlite and may be impacted: - @airalogy/airalogy-engine =0.0.1, =0.0.5 Source cves: CVE-2026-46695 Source advisory: OSV:GHSA-G6WW-W5J2-R7X3...

@microsoft/applicationinsights-analytics-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03), @microsoft/applicationinsights-channel-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03) +11 more potentially affected by CVE-2026-46681 via @nevware21/ts-utils (>=0.3.5, <=0.7.3)

@nevware21/ts-utils NPM version =0.3.5, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =1.0.0, =1.1.2...

@microsoft/applicationinsights-analytics-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03), @microsoft/applicationinsights-channel-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03) +11 more potentially affected by CVE-2026-46681 via @nevware21/ts-utils (>=0.3.5, <=0.7.3)

@nevware21/ts-utils NPM version =0.3.5, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =1.0.0, =1.1.2...

@bitsocial/ai-moderation-challenge (>=0.1.0, <=0.1.1), @bitsocial/bitsocial-cli (>=0.19.44, <=0.19.72) +6 more potentially affected by CVE-2026-46679 via @libp2p/gossipsub (>=15.0.0-049bfa0fa, <=15.0.22-5692f3f16)

@libp2p/gossipsub NPM version =15.0.0-049bfa0fa, =0.1.0, =0.19.44, =0.1.0, =0.1.0, =0.1.0, =6.0.0-049bfa0fa, =9.0.0-049bfa0fa, =0.0.17, =0.0.47 Source cves: CVE-2026-46679 Source advisory: SNYK:JS-LIBP2PGOSSIPSUB-16798774...

@bitsocial/ai-moderation-challenge (>=0.1.0, <=0.1.1), @bitsocial/bitsocial-cli (>=0.19.44, <=0.19.72) +6 more potentially affected by CVE-2026-46679 via @libp2p/gossipsub (>=15.0.0-049bfa0fa, <=15.0.22-5692f3f16)

@libp2p/gossipsub NPM version =15.0.0-049bfa0fa, =0.1.0, =0.19.44, =0.1.0, =0.1.0, =0.1.0, =6.0.0-049bfa0fa, =9.0.0-049bfa0fa, =0.0.17, =0.0.47 Source cves: CVE-2026-46679 Source advisory: OSV:GHSA-4F8R-922H-2VGV...

360shitu (0.1.0), 4icloud-engine (1.0.1) +10920 more potentially affected by CVE-2026-46625 via js-cookie (>=2.1.0, <=3.0.5)

js-cookie NPM version =2.1.0, =1.0.6, =0.1.0, =0.37.2, =0.37.2, =0.0.1, =1.0.0, =1.0.0-alpha, =1.0.0-alpha, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-46625 Source advisory: SNYK:JS-JSCOOKIE-17816999...

@0xcarbon/alore-auth-sdk (>=1.0.0-alpha, <=2.0.1-alpha), @0xcarbon/alore-auth-ui (>=1.0.0-alpha, <=3.0.0-alpha) +959 more potentially affected by CVE-2026-46625 via js-cookie (>=3.0.0, <=3.0.5)

js-cookie NPM version =3.0.0, =1.0.0-alpha, =1.0.0-alpha, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1-alpha.9, =0.0.3-alpha.1, =0.1.6-alpha.9, =0.0.1-alpha.0, =0.2.7, =1.0.25, =4.0.0-alpha.0, =4.88.5 and more Source cves: CVE-2026-46625 Source advisory: OSV:GHSA-QJX8-664M-686J...

assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +9 more potentially affected by CVE-2026-46673 via russh-cryptovec (0.7.3)

russh-cryptovec CARGO version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on russh-cryptovec and may be impacted: - assistantdaemon 0.1.0 - async-ssh2-tokio =0.2.0, =0.1.0, =0.1.0, =0.34.0-beta.1, =0.22.0-beta.1, =0.2.0, =0.1.0, =0.4.1 - sshrpc...

assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +7 more potentially affected by CVE-2026-46673 via russh (>=0.34.0, <=0.43.0)

russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - sshrpc 0.1.0 - tunnels 0.1.0 Source cves: CVE-2026-46673 Source advisory: OSV:GHSA-G9F8-WQJ9-FJW5...

@hulumi/platform-patterns (0.0.0-bootstrap.0) potentially affected by unknown CVE via @hulumi/baseline (1.3.1)

@hulumi/baseline NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hulumi/baseline and may be impacted: - @hulumi/platform-patterns 0.0.0-bootstrap.0 Source cves: unknown CVE Source advisory: SNYK:JS-HULUMIBASELINE-17660557...

@hulumi/platform-patterns (0.0.0-bootstrap.0) potentially affected by unknown CVE via @hulumi/baseline (1.3.1)

@hulumi/baseline NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hulumi/baseline and may be impacted: - @hulumi/platform-patterns 0.0.0-bootstrap.0 Source cves: unknown CVE Source advisory: OSV:GHSA-GFP8-MP24-5VXG...

flaskbb-plugin-atom (>=0.1.0, <=0.2.0), flaskbb-plugin-conversations (>=2.0.1, <=2.0.2) +6 more potentially affected by CVE-2026-46556 via flaskbb (2.2.0)

flaskbb PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on flaskbb and may be impacted: - flaskbb-plugin-atom =0.1.0, =2.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0 Source cves: CVE-2026-46556 Source advisory: SNYK:PYTHON-FLASKBB-17283331...

monerochan-stark (>=5.2.2, <=5.2.12), p3-circle (>=0.1.0, <=0.3.3-succinct) +20 more potentially affected by CVE-2026-46654 via p3-challenger (>=0.1.0, <=0.3.3-succinct)

p3-challenger CARGO version =0.1.0, =5.2.2, =0.1.0, =0.1.0, =0.1.0, =0.1.5-succinct, =0.1.0, =0.1.0, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.2.1 and more Source cves: CVE-2026-46654 Source advisory: OSV:GHSA-VJ64-RJF3-W3V7...

nimiq-account (0.1.0), nimiq-accounts (0.1.0) +15 more potentially affected by CVE-2026-46539 via nimiq-primitives (0.1.0)

nimiq-primitives CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-primitives and may be impacted: - nimiq-account 0.1.0 - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 -...

@alexaegis/svelte-config (>=0.15.0, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=1.2.0, <=2.1.0) +7 more potentially affected by unknown CVE via @sveltejs/kit (>=2.39.1, <=2.59.1)

@sveltejs/kit NPM version =2.39.1, =0.15.0, =1.2.0, =0.0.137, =0.1.0, =2.0.0, =5.0.0-alpha.1, =0.0.3-next.8, =0.3.2, =1.7.0, =1.15.1 Source cves: unknown CVE Source advisory: SNYK:JS-SVELTEJSKIT-16796279...

@alexaegis/svelte-config (>=0.15.0, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=1.2.0, <=2.1.0) +7 more potentially affected by unknown CVE via @sveltejs/kit (>=2.39.1, <=2.59.1)

@sveltejs/kit NPM version =2.39.1, =0.15.0, =1.2.0, =0.0.137, =0.1.0, =2.0.0, =5.0.0-alpha.1, =0.0.3-next.8, =0.3.2, =1.7.0, =1.15.1 Source cves: unknown CVE Source advisory: OSV:GHSA-HGV7-V322-MMGR...

@altipla/directus-sdk-utils (0.7.2), @arc-directus/api (>=12.0.0, <=12.0.6) +69 more potentially affected by CVE-2026-46490 via samlify (>=2.5.1, <=2.12.0)

samlify NPM version =2.5.1, =12.0.0, =1.6.0, =1.6.3, =2.10.4, =1.0.0-beta.1, =1.0.0, =1.0.0, =11.16.1-depup.0, =2.0.0, =9.25.0, =9.26.0, =9.26.2 and more Source cves: CVE-2026-46490 Source advisory: SNYK:JS-SAMLIFY-16796318...

@altipla/directus-sdk-utils (0.7.2), @arc-directus/api (>=12.0.0, <=12.0.6) +69 more potentially affected by CVE-2026-46490 via samlify (>=2.5.1, <=2.12.0)

samlify NPM version =2.5.1, =12.0.0, =1.6.0, =1.6.3, =2.10.4, =1.0.0-beta.1, =1.0.0, =1.0.0, =11.16.1-depup.0, =2.0.0, =9.25.0, =9.26.0, =9.26.2 and more Source cves: CVE-2026-46490 Source advisory: OSV:GHSA-34R5-Q4JW-R36M...

atm0s-media-server-transport-rtmp (0.1.0), audio-opus-bsd (>=0.1.0, <=0.1.2) +35 more potentially affected by unknown CVE via audiopus_sys (>=0.1.8, <=0.2.2)

audiopussys CARGO version =0.1.8, =0.1.0, =0.1.0, =0.24.0, =0.3.0, =0.4.0, =0.1.0, =0.1.1-alpha, =0.1.0, =0.2.0, =1.2.0, =1.3.0 - ogg-opus 0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0150...

libcrux-digest (>=0.0.4-pre.1, <=0.0.8), libcrux-kem (>=0.0.2-alpha.1, <=0.0.2) +10 more potentially affected by unknown CVE via libcrux-sha3 (>=0.0.2, <=0.0.9-rc.1)

libcrux-sha3 CARGO version =0.0.2, =0.0.4-pre.1, =0.0.2-alpha.1, =0.0.3, =0.0.2-alpha.1, =1.20.4, =0.2.0, =0.4.3, =0.8.0 - wpa-next 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0208...

org.webjars.npm:dash0__sdk-web (0.18.4), org.webjars.npm:scalar__import (>=0.3.16, <=0.4.6) +3 more potentially affected by CVE-2026-12644 via org.webjars.npm:ts-deepmerge (7.0.3)

org.webjars.npm:ts-deepmerge MAVEN version 7.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:ts-deepmerge and may be impacted: - org.webjars.npm:dash0sdk-web 0.18.4 - org.webjars.npm:scalarimport =0.3.16, =0.2.107, =1.1.13, =0.1.30,...

@bentwnghk/chat (>=1.54.2, <=1.107.2), @bu-sail/s3-viewer (>=0.0.1-alpha.1, <=0.1.0-alpha.6) +135 more potentially affected by CVE-2026-30691 via @cyntler/react-doc-viewer (>=1.10.3, <=1.17.1)

@cyntler/react-doc-viewer NPM version =1.10.3, =1.54.2, =0.0.1-alpha.1, =1.1.0, =1.0.0, =1.0.1, =1.3.0, =1.3.0, =1.0.0, =0.0.1-beta.12, =2.0.0-dev-58 and more Source cves: CVE-2026-30691 Source advisory: SNYK:JS-CYNTLERREACTDOCVIEWER-17818153...

@bentwnghk/chat (>=1.54.2, <=1.107.2), @bu-sail/s3-viewer (>=0.0.1-alpha.1, <=0.1.0-alpha.6) +135 more potentially affected by CVE-2026-30691 via @cyntler/react-doc-viewer (>=1.10.3, <=1.17.1)

@cyntler/react-doc-viewer NPM version =1.10.3, =1.54.2, =0.0.1-alpha.1, =1.1.0, =1.0.0, =1.0.1, =1.3.0, =1.3.0, =1.0.0, =0.0.1-beta.12, =2.0.0-dev-58 and more Source cves: CVE-2026-30691 Source advisory: OSV:GHSA-FVHG-P4HF-79X3...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24206 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24206 Source advisory:...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24208 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24208 Source advisory:...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24210 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24210 Source advisory:...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24207 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24207 Source advisory:...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24209 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24209 Source advisory:...

cache-extensions (>=1.7.0, <=1.14.1) potentially affected by unknown CVE via setup-php (>=2.15.0, <=2.36.0)

setup-php NPM version =2.15.0, =1.7.0, =1.14.1 Source cves: unknown CVE Source advisory: SNYK:JS-SETUPPHP-16874160...

cache-extensions (>=1.9.1, <=1.14.1) potentially affected by CVE-2026-46420 via setup-php (>=2.25.0, <=2.36.0)

setup-php NPM version =2.25.0, =1.9.1, =1.14.1 Source cves: CVE-2026-46420 Source advisory: SNYK:JS-SETUPPHP-16874161...

@akshajrawatt/plugin-repo-cli (>=1.0.2, <=1.0.5), @joplin/plugin-repo-cli (>=2.2.3, <=3.6.3) +7 more potentially affected by CVE-2025-57798 via @joplin/lib (>=2.8.1, <=3.6.3)

@joplin/lib NPM version =2.8.1, =1.0.2, =2.2.3, =2.2.3, =0.1.0, =0.1.0, =1.6.3, =2.0.0, =0.5.2, =0.17.1 - pi-joplin 1.0.0 Source cves: CVE-2025-57798 Source advisory: SNYK:JS-JOPLINLIB-16771369...

dbgate-serve (>=7.1.3-alpha.3, <=7.1.8), dbmodel (>=7.1.3-alpha.3, <=7.1.8) potentially affected by CVE-2026-47670 via dbgate-api (>=7.1.3-alpha.3, <=7.1.8-alpha.7)

dbgate-api NPM version =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.8 Source cves: CVE-2026-47670 Source advisory: SNYK:JS-DBGATEAPI-17223765...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-46417 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-46417 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-16770437...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-46417 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-46417 Source advisory: OSV:GHSA-RFH7-FXQC-Q52V...

@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8) potentially affected by CVE-2026-46417 via @angular/platform-server (19.2.18)

@angular/platform-server NPM version 19.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @cosla/sensemaking-web-ui =1.0.5, =1.0.8 Source cves: CVE-2026-46417 Source advisory:...

@cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4), @irshadali/ngx-indexed-db (>=19.3.0, <=19.3.1) +16 more potentially affected by CVE-2026-46417 via @angular/platform-server (>=18.2.13, <=18.2.14)

@angular/platform-server NPM version =18.2.13, =1.0.0, =19.3.0, =0.0.0, =12.0.0, =0.0.0, =1.0.2, =0.0.0, =1.0.0, =0.0.1, =0.0.2 - my-unique-workspace 0.0.0 - my-workspace01 0.0.0 and more Source cves: CVE-2026-46417 Source advisory: OSV:GHSA-RFH7-FXQC-Q52V...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-46417 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-46417 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-16770437...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-46417 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-46417 Source advisory: OSV:GHSA-RFH7-FXQC-Q52V...

@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8) potentially affected by CVE-2026-46417 via @angular/platform-server (19.2.18)

@angular/platform-server NPM version 19.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @cosla/sensemaking-web-ui =1.0.5, =1.0.8 Source cves: CVE-2026-46417 Source advisory: OSV:GHSA-RFH7-FXQC-Q52V...

@libp2p/daemon (>=6.0.0-049bfa0fa, <=6.0.23-9c3c0b22a), @libp2p/daemon-server (>=9.0.0-049bfa0fa, <=9.0.23-9c3c0b22a) +4 more potentially affected by CVE-2026-45783 via @libp2p/kad-dht (>=16.0.0-049bfa0fa, <=16.2.5-5692f3f16)

@libp2p/kad-dht NPM version =16.0.0-049bfa0fa, =6.0.0-049bfa0fa, =9.0.0-049bfa0fa, =0.2.1, =0.2.1, =0.2.2 Source cves: CVE-2026-45783 Source advisory: SNYK:JS-LIBP2PKADDHT-16770413...

@libp2p/daemon (>=6.0.0-049bfa0fa, <=6.0.23-9c3c0b22a), @libp2p/daemon-server (>=9.0.0-049bfa0fa, <=9.0.23-9c3c0b22a) +4 more potentially affected by CVE-2026-45783 via @libp2p/kad-dht (>=16.0.0-049bfa0fa, <=16.2.5-5692f3f16)

@libp2p/kad-dht NPM version =16.0.0-049bfa0fa, =6.0.0-049bfa0fa, =9.0.0-049bfa0fa, =0.2.1, =0.2.1, =0.2.2 Source cves: CVE-2026-45783 Source advisory: OSV:GHSA-32MQ-HPPH-XFVR...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-46342 via nuxt (>=4.0.0-rc.0, <=4.4.4)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +15 more potentially affected by CVE-2026-46342 via @nuxt/nitro-server (>=4.2.0, <=4.4.5)

@nuxt/nitro-server NPM version =4.2.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.2.2-depup.0, =10.0.2-rc.5, =1.1.11, =1.0.8, =0.4.5, =3.0.0-dev.27, =4.2.0, =0.5.0, =0.4.0, =0.1.13, =0.4.0, =1.0.0-alpha.11 and more Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...

@geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4), nuxt (>=3.20.0, <=3.21.5) potentially affected by CVE-2026-46342 via @nuxt/nitro-server (>=3.20.0, <=3.21.5)

@nuxt/nitro-server NPM version =3.20.0, =9.13.1-rc.9, =3.20.0, =3.21.5 Source cves: CVE-2026-46342 Source advisory: OSV:GHSA-G8WJ-3CR3-6W7V...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-46342 via nuxt (>=4.0.0-rc.0, <=4.4.4)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-46342 Source advisory: SNYK:JS-NUXT-16770418...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +78 more potentially affected by CVE-2026-46342 via nuxt (>=3.1.2, <=3.20.1)

nuxt NPM version =3.1.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-46342 Source advisory: SNYK:JS-NUXT-16770418...

@geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4), nuxt (>=3.20.0, <=3.21.5) potentially affected by CVE-2026-46342 via @nuxt/nitro-server (>=3.20.0, <=3.21.5)

@nuxt/nitro-server NPM version =3.20.0, =9.13.1-rc.9, =3.20.0, =3.21.5 Source cves: CVE-2026-46342 Source advisory: SNYK:JS-NUXTNITROSERVER-16770417...