@aaravpos/appointment-barber-booking (>=1.0.0, <=5.0.0), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.9) +207 more potentially affected by CVE-2026-53663 via react-router (>=7.12.0, <=7.15.0)

react-router NPM version =7.12.0, =1.0.0, =1.0.1, =0.0.9-alpha-20260107202750-16b04dcbaa92c7fc2bbb580dbc1da723c76a5225, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.5.2, =2026.511.1, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =2.0.0-alpha.1 and more Source cves: CVE-2026-53663 Sour...

@remix-run/architect (>=2.17.3, <=2.17.4), @remix-run/cloudflare (>=2.17.3, <=2.17.4) +10 more potentially affected by CVE-2026-53663 via @remix-run/server-runtime (>=2.17.3, <=2.17.4)

@remix-run/server-runtime NPM version =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =0.11.30, =0.12.30 Source cves: CVE-2026-53663 Source advisory: SNYK:JS-REMIXRUNSERVERRUNTIME-17342509...

@aaravpos/appointment-barber-booking (>=1.0.0, <=5.0.0), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.9) +207 more potentially affected by CVE-2026-53663 via react-router (>=7.12.0, <=7.15.0)

react-router NPM version =7.12.0, =1.0.0, =1.0.1, =0.0.9-alpha-20260107202750-16b04dcbaa92c7fc2bbb580dbc1da723c76a5225, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.5.2, =2026.511.1, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =2.0.0-alpha.1 and more Source cves: CVE-2026-53663 Sour...

@remix-run/architect (>=2.17.3, <=2.17.4), @remix-run/cloudflare (>=2.17.3, <=2.17.4) +10 more potentially affected by CVE-2026-53663 via @remix-run/server-runtime (>=2.17.3, <=2.17.4)

@remix-run/server-runtime NPM version =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =0.11.30, =0.12.30 Source cves: CVE-2026-53663 Source advisory: OSV:GHSA-84G9-W2XQ-VCV6...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.249, <=2.1.0-alpha.251) +7 more potentially affected by CVE-2026-53633 via @vitest/browser (>=3.0.5, <=3.2.4)

@vitest/browser NPM version =3.0.5, =0.0.1, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =3.8.0, =1.0.1, =0.0.2, =0.0.5 Source cves: CVE-2026-53633 Source advisory: SNYK:JS-VITESTBROWSER-17375130...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.249, <=2.1.0-alpha.251) +7 more potentially affected by CVE-2026-53633 via @vitest/browser (>=3.0.5, <=3.2.4)

@vitest/browser NPM version =3.0.5, =0.0.1, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =3.8.0, =1.0.1, =0.0.2, =0.0.5 Source cves: CVE-2026-53633 Source advisory: OSV:GHSA-G8MR-85JM-7XHM...

@slidev-react/cli (>=0.4.6, <=0.5.0), @slidev-react/node (>=0.4.6, <=0.5.0) potentially affected by CVE-2026-53633 via vite-plus (>=0.1.11, <=0.1.19)

vite-plus NPM version =0.1.11, =0.4.6, =0.4.6, =0.5.0 Source cves: CVE-2026-53633 Source advisory: OSV:GHSA-G8MR-85JM-7XHM...

@aamini/config (>=0.0.1, <=0.0.13), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +9 more potentially affected by CVE-2026-53633 via @vitest/browser (>=4.0.0, <=4.1.7)

@vitest/browser NPM version =4.0.0, =0.0.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =4.0.0-beta.15, =4.0.0-beta.15, =4.0.0-beta.15, =0.5.0-rc.1, =0.1.0, =0.2.2 Source cves: CVE-2026-53633 Source advisory: SNYK:JS-VITESTBROWSER-17375130...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aklesky/vitest-config (1.0.2) +32 more potentially affected by CVE-2026-53633 via @vitest/coverage-v8 (>=3.0.3, <=3.2.4)

@vitest/coverage-v8 NPM version =3.0.3, =0.0.1, =1.0.388, =0.13.0, =2.2.0-app-13.13.1, =21.0.0-alpha.26, =4.0.9, =3.5.49, =5.1.3, =40.1.0, =3.0.9, =3.0.0, =3.1.4 and more Source cves: CVE-2026-53633 Source advisory: SNYK:JS-VITESTCOVERAGEV8-17375132...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @24hr/ettapi (>=0.2.4, <=0.2.5) +100 more potentially affected by CVE-2026-53633 via vitest (>=3.0.2, <=3.2.4)

vitest NPM version =3.0.2, =0.0.1, =0.2.4, =0.5.0, =2.2.1, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =0.0.0, =4.0.0-alpha.5, =0.1.2-next.95, =1.0.0, =1.0.2 - @chrom-ar/solver-sdk 1.0.2 and more Source cves: CVE-2026-53633 Source advisory:...

@aamini/config (>=0.0.1, <=0.0.13), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +9 more potentially affected by CVE-2026-53633 via @vitest/browser (>=4.0.0, <=4.1.7)

@vitest/browser NPM version =4.0.0, =0.0.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =4.0.0-beta.15, =4.0.0-beta.15, =4.0.0-beta.15, =0.5.0-rc.1, =0.1.0, =0.2.2 Source cves: CVE-2026-53633 Source advisory: OSV:GHSA-G8MR-85JM-7XHM...

@baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281), @baic/preset-yolk-umi-mobile (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +23 more potentially affected by CVE-2026-53633 via @vitest/coverage-v8 (>=4.0.2, <=4.1.7)

@vitest/coverage-v8 NPM version =4.0.2, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =0.0.1, =21.0.0-alpha.33, =1.0.1, =2.0.1, =2.0.1, =0.1.0, =1.2.0-alpha.35, =1.4.3 - @planvokter/riotplan-e2e 1.0.2-dev.0 - @planvokter/riotplan-mcp-http 1.1.4 and more...

@aamini/config (>=0.0.1, <=0.0.13), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +6 more potentially affected by CVE-2026-53633 via @vitest/browser-playwright (>=4.0.18, <=4.1.5)

@vitest/browser-playwright NPM version =4.0.18, =0.0.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =0.6.0-rc.1, =0.2.0-alpha.1, =0.2.2 Source cves: CVE-2026-53633 Source advisory: SNYK:JS-VITESTBROWSERPLAYWRIGHT-17375133...

@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +122 more potentially affected by CVE-2026-53633 via vitest (>=4.0.0-beta.7, <=4.1.7)

vitest NPM version =4.0.0-beta.7, =0.0.3, =0.2.0, =0.0.21, =0.79.1, =2.1.0-alpha.278, =2.1.0-alpha.281 and more Source cves: CVE-2026-53633 Source advisory: SNYK:JS-VITEST-17375131...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2185 more potentially affected by CVE-2026-65900 via dompurify (>=3.0.0, <=3.4.7)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-65900 Source advisory: OSV:GHSA-GVMJ-G25R-R7WR...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2185 more potentially affected by unknown CVE via dompurify (>=3.0.0, <=3.4.7)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: unknown CVE Source advisory: SNYK:JS-DOMPURIFY-17344549...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2176 more potentially affected by CVE-2026-49978 via dompurify (>=3.0.0, <=3.4.6)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-49978 Source advisory: SNYK:JS-DOMPURIFY-17344504...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2176 more potentially affected by CVE-2026-49978 via dompurify (>=3.0.0, <=3.4.6)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-49978 Source advisory: OSV:GHSA-RP9W-3FW7-7CWQ...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2185 more potentially affected by unknown CVE via dompurify (>=3.0.0, <=3.4.7)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: unknown CVE Source advisory: SNYK:JS-DOMPURIFY-17342528...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2176 more potentially affected by CVE-2026-65901 via dompurify (>=3.0.0, <=3.4.6)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-65901 Source advisory: OSV:GHSA-X4VX-RJVF-J5P4...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2176 more potentially affected by unknown CVE via dompurify (>=3.0.0, <=3.4.6)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: unknown CVE Source advisory: SNYK:JS-DOMPURIFY-17344516...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2176 more potentially affected by CVE-2026-65902 via dompurify (>=3.0.0, <=3.4.6)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-65902 Source advisory: OSV:GHSA-76MC-F452-CXCM...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2176 more potentially affected by CVE-2026-49458 via dompurify (>=3.0.0, <=3.4.5)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-49458 Source advisory: OSV:GHSA-HPCV-96WG-7VJ8...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2176 more potentially affected by CVE-2026-49458 via dompurify (>=3.0.0, <=3.4.5)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-49458 Source advisory: SNYK:JS-DOMPURIFY-17344526...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2176 more potentially affected by CVE-2026-49459 via dompurify (>=3.0.0, <=3.4.5)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-49459 Source advisory: OSV:GHSA-R47G-FVHR-H676...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2176 more potentially affected by CVE-2026-49459 via dompurify (>=3.0.0, <=3.4.5)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-49459 Source advisory: SNYK:JS-DOMPURIFY-17344538...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +1554 more potentially affected by CVE-2026-5038 via multer (>=2.0.0, <=2.1.1)

multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.0-alpha.119, =1.2.1-dev.3, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.0.10, =0.6.2 and more Source cves: CVE-2026-5038 Source advisory: SNYK:JS-MULTER-17342516...

org.webjars.npm:nestjs__platform-express (>=8.4.7, <=9.0.0-next.2) potentially affected by CVE-2026-5038 via org.webjars.npm:multer (1.4.4-lts.1)

org.webjars.npm:multer MAVEN version 1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2026-5038 Source advisory:...

@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +323 more potentially affected by CVE-2026-9595 via webpack-dev-server (>=5.0.0, <=5.2.4)

webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =0.7.7, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2 and more Source cves: CVE-2026-9595 Source advisory:...

@activepieces/piece-gmail (>=0.12.3, <=0.12.5), @activepieces/piece-sendgrid (>=0.5.3, <=0.5.5) +129 more potentially affected by CVE-2026-82661 via nodemailer (>=8.0.0, <=8.0.8)

nodemailer NPM version =8.0.0, =0.12.3, =0.5.3, =0.4.1, =3.19.2, =2.1.108, =0.0.1, =0.0.0-preview.10.8ccd25db, =6.1.196-alpha, =6.1.196-alpha, =6.1.196-alpha, =0.0.1, =3.35.0, =3.38.1 and more Source cves: CVE-2026-82661 Source advisory: OSV:GHSA-268H-HP4C-CRQ3...

@activepieces/piece-gmail (>=0.12.3, <=0.12.5), @activepieces/piece-sendgrid (>=0.5.3, <=0.5.5) +129 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.8)

nodemailer NPM version =8.0.0, =0.12.3, =0.5.3, =0.4.1, =3.19.2, =2.1.108, =0.0.1, =0.0.0-preview.10.8ccd25db, =6.1.196-alpha, =6.1.196-alpha, =6.1.196-alpha, =0.0.1, =3.35.0, =3.38.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-17342526...

@activepieces/piece-gmail (>=0.12.3, <=0.12.5), @activepieces/piece-sendgrid (>=0.5.3, <=0.5.5) +129 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.8)

nodemailer NPM version =8.0.0, =0.12.3, =0.5.3, =0.4.1, =3.19.2, =2.1.108, =0.0.1, =0.0.0-preview.10.8ccd25db, =6.1.196-alpha, =6.1.196-alpha, =6.1.196-alpha, =0.0.1, =3.35.0, =3.38.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-17342530...

@activepieces/piece-gmail (>=0.12.3, <=0.12.5), @activepieces/piece-sendgrid (>=0.5.3, <=0.5.5) +129 more potentially affected by CVE-2026-82660 via nodemailer (>=8.0.0, <=8.0.8)

nodemailer NPM version =8.0.0, =0.12.3, =0.5.3, =0.4.1, =3.19.2, =2.1.108, =0.0.1, =0.0.0-preview.10.8ccd25db, =6.1.196-alpha, =6.1.196-alpha, =6.1.196-alpha, =0.0.1, =3.35.0, =3.38.1 and more Source cves: CVE-2026-82660 Source advisory: OSV:GHSA-WQVQ-JVPQ-H66F...

@activepieces/piece-gmail (>=0.12.3, <=0.12.5), @activepieces/piece-sendgrid (>=0.5.3, <=0.5.5) +128 more potentially affected by CVE-2026-82662 via nodemailer (>=8.0.0, <=8.0.7)

nodemailer NPM version =8.0.0, =0.12.3, =0.5.3, =0.4.1, =3.19.2, =2.1.108, =0.0.1, =0.0.0-preview.10.8ccd25db, =6.1.196-alpha, =6.1.196-alpha, =6.1.196-alpha, =0.0.1, =3.35.0, =3.38.1 and more Source cves: CVE-2026-82662 Source advisory: OSV:GHSA-R7G4-QG5F-QQM2...

@activepieces/piece-gmail (>=0.12.3, <=0.12.5), @activepieces/piece-sendgrid (>=0.5.3, <=0.5.5) +128 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.7)

nodemailer NPM version =8.0.0, =0.12.3, =0.5.3, =0.4.1, =3.19.2, =2.1.108, =0.0.1, =0.0.0-preview.10.8ccd25db, =6.1.196-alpha, =6.1.196-alpha, =6.1.196-alpha, =0.0.1, =3.35.0, =3.38.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-17342524...

10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3460 more potentially affected by CVE-2026-48712 via protobufjs (>=7.0.0, <=7.5.9)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =2.0.2, =4.0.1 and more Source cves: CVE-2026-48712 Source advisory: SNYK:JS-PROTOBUFJS-17353320...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1108 more potentially affected by CVE-2026-48712 via protobufjs (>=8.0.0, <=8.4.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.6.0, =0.8.0 and more Source cves: CVE-2026-48712 Source advisory: OSV:GHSA-WCPC-WJ8M-HJX6...

10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3460 more potentially affected by CVE-2026-48712 via protobufjs (>=7.0.0, <=7.5.9)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =2.0.2, =4.0.1 and more Source cves: CVE-2026-48712 Source advisory: OSV:GHSA-WCPC-WJ8M-HJX6...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1108 more potentially affected by CVE-2026-48712 via protobufjs (>=8.0.0, <=8.4.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.6.0, =0.8.0 and more Source cves: CVE-2026-48712 Source advisory: SNYK:JS-PROTOBUFJS-17353320...

10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3463 more potentially affected by CVE-2026-54269 via protobufjs (>=7.0.0, <=7.6.2)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =2.0.2, =4.0.1 and more Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJS-17353168...

10minions-engine (>=0.0.1, <=0.0.4), @1amageek/document-propagator (>=0.10.1, <=1.0.0) +1541 more potentially affected by CVE-2026-54269 via protobufjs-cli (>=1.0.0, <=1.2.2)

protobufjs-cli NPM version =1.0.0, =0.0.1, =0.10.1, =1.1.0, =0.4.0, =1.22.0, =6.2.36, =1.0.0-alpha.2, =1.8.0, =0.0.0-beta.0, =1.0.0, =1.0.1, =3.1.0 and more Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJSCLI-17353169...

@forwardimpact/libcodegen (>=0.1.47, <=0.1.52) potentially affected by CVE-2026-54269 via protobufjs-cli (2.0.1)

protobufjs-cli NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobufjs-cli and may be impacted: - @forwardimpact/libcodegen =0.1.47, =0.1.52 Source cves: CVE-2026-54269 Source advisory: OSV:GHSA-F38Q-MGVJ-VPH7...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1110 more potentially affected by CVE-2026-54269 via protobufjs (>=8.0.0, <=8.5.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.6.0, =0.8.0 and more Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJS-17353168...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1110 more potentially affected by CVE-2026-54269 via protobufjs (>=8.0.0, <=8.5.0)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.6.0, =0.8.0 and more Source cves: CVE-2026-54269 Source advisory: OSV:GHSA-F38Q-MGVJ-VPH7...

@forwardimpact/libcodegen (>=0.1.47, <=0.1.52) potentially affected by CVE-2026-54269 via protobufjs-cli (2.0.1)

protobufjs-cli NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobufjs-cli and may be impacted: - @forwardimpact/libcodegen =0.1.47, =0.1.52 Source cves: CVE-2026-54269 Source advisory: SNYK:JS-PROTOBUFJSCLI-17353169...

10minions-engine (>=0.0.1, <=0.0.4), @0xr404/lol404 (>=1.1.0, <=1.1.6) +3463 more potentially affected by CVE-2026-54269 via protobufjs (>=7.0.0, <=7.6.2)

protobufjs NPM version =7.0.0, =0.0.1, =1.1.0, =1.0.1-beta.0, =0.0.2-beta.0, =1.0.0, =1.5.10, =0.10.1, =1.1.0, =6.0.0, =2.0.2, =4.0.1 and more Source cves: CVE-2026-54269 Source advisory: OSV:GHSA-F38Q-MGVJ-VPH7...

10minions-engine (>=0.0.1, <=0.0.4), @1amageek/document-propagator (>=0.10.1, <=1.0.0) +1541 more potentially affected by CVE-2026-54269 via protobufjs-cli (>=1.0.0, <=1.2.2)

protobufjs-cli NPM version =1.0.0, =0.0.1, =0.10.1, =1.1.0, =0.4.0, =1.22.0, =6.2.36, =1.0.0-alpha.2, =1.8.0, =0.0.0-beta.0, =1.0.0, =1.0.1, =3.1.0 and more Source cves: CVE-2026-54269 Source advisory: OSV:GHSA-F38Q-MGVJ-VPH7...

10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +7601 more potentially affected by CVE-2026-12143 via form-data (>=4.0.0, <=4.0.5)

form-data NPM version =4.0.0, =1.0.0, =1.2.0, =1.0.0, =0.1.0, =0.0.1, =0.1.1, =5.0.0, =0.0.1, =1.0.1, =1.0.32, =1.0.32, =1.1.11 and more Source cves: CVE-2026-12143 Source advisory: OSV:GHSA-HMW2-7CC7-3QXX...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @5ht/express (>=1.0.6, <=2.2.0) +650 more potentially affected by CVE-2026-12143 via form-data (>=3.0.0, <=3.0.4)

form-data NPM version =3.0.0, =1.17.6-next.0, =1.0.6, =1.0.0, =0.12.4, =1.1.3, =1.9.19, =1.1.0, =1.18.0, =2.13.1, =1.1.0, =10.1.0, =1.0.0, =1.9.2, =2.1.4 and more Source cves: CVE-2026-12143 Source advisory: OSV:GHSA-HMW2-7CC7-3QXX...

@eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1), @eui/deps-base-light (>=21.0.0-alpha.10, <=23.0.0-alpha.1) potentially affected by CVE-2026-54264 via @angular/service-worker (>=21.0.0, <=21.2.16)

@angular/service-worker NPM version =21.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =23.0.0-alpha.1 Source cves: CVE-2026-54264 Source advisory: SNYK:JS-ANGULARSERVICEWORKER-17359090...