11219 matches found
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-45357 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-45357 Source advisory: OSV:GHSA-HH27-HF48-9F5Q...
@userfront/bell (>=5.2.3-0, <=6.0.0), ffc-auth (>=0.1.0-alpha.1, <=0.13.0-alpha.2) +1 more potentially affected by CVE-2026-44979 via @hapi/wreck (>=18.0.0, <=18.0.1)
@hapi/wreck NPM version =18.0.0, =5.2.3-0, =0.1.0-alpha.1, =1.0.2, =1.0.4 Source cves: CVE-2026-44979 Source advisory: OSV:GHSA-VHJM-W67Q-G75C...
@userfront/bell (>=5.2.3-0, <=6.0.0), ffc-auth (>=0.1.0-alpha.1, <=0.13.0-alpha.2) +1 more potentially affected by CVE-2026-44979 via @hapi/wreck (>=18.0.0, <=18.0.1)
@hapi/wreck NPM version =18.0.0, =5.2.3-0, =0.1.0-alpha.1, =1.0.2, =1.0.4 Source cves: CVE-2026-44979 Source advisory: SNYK:JS-HAPIWRECK-16881586...
org.webjars.npm:bazel__karma (1.7.0), org.webjars.npm:broccoli-merge-trees (2.0.0) +15 more potentially affected by CVE-2026-44705 +1 more via org.webjars.npm:tmp (>=0.0.24, <=0.2.3)
org.webjars.npm:tmp MAVEN version =0.0.24, =2.1.0, =0.19.11, =0.2.11, =3.2.3, =6.5.0, =2.52.0, =4.10.0 - org.webjars.npm:snyk-go-plugin 1.5.2 - org.webjars.npm:snyk-python-plugin 1.8.1 and more Source cves: CVE-2026-44705, CVE-2026-49982 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16881241...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44646 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44646 Source advisory: SNYK:JS-LIQUIDJS-1688788...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44646 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44646 Source advisory: OSV:GHSA-9X9P-QF8F-MVJG...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44645 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44645 Source advisory: SNYK:JS-LIQUIDJS-1688254...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44645 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44645 Source advisory: OSV:GHSA-8XX9-69P8-7JP3...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44644 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44644 Source advisory: SNYK:JS-LIQUIDJS-1688788...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44644 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44644 Source advisory: OSV:GHSA-2QV6-9WX5-CWV4...
@fedify/botkit (>=0.4.0-dev.177, <=0.4.0-dev.181), @fedify/botkit-sqlite (>=0.4.0-dev.177, <=0.4.0-dev.181) potentially affected by CVE-2026-42462 via @fedify/fedify (1.10.0)
@fedify/fedify NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.4.0-dev.177, =0.4.0-dev.177, =0.4.0-dev.181 Source cves: CVE-2026-42462 Source advisory:...
@fedify/amqp (0.2.0-dev.12), @fedify/botkit (>=0.3.0-dev.125, <=0.4.0-dev.175) +3 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=1.5.0, <=1.9.2)
@fedify/fedify NPM version =1.5.0, =0.3.0-dev.125, =0.4.0-dev.167, =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...
@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.198), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.198) +1 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.1.0, <=2.1.13)
@fedify/fedify NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.13 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...
@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.198), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.198) +1 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.1.0, <=2.1.13)
@fedify/fedify NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.13 Source cves: CVE-2026-42462 Source advisory: SNYK:JS-FEDIFYFEDIFY-16895732...
@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +1 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.0.0, <=2.0.17)
@fedify/fedify NPM version =2.0.0, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0-dev.1757, =2.0.17 Source cves: CVE-2026-42462 Source advisory: SNYK:JS-FEDIFYFEDIFY-16895732...
@fedify/botkit (>=0.4.0-dev.177, <=0.4.0-dev.181), @fedify/botkit-sqlite (>=0.4.0-dev.177, <=0.4.0-dev.181) potentially affected by CVE-2026-42462 via @fedify/fedify (1.10.0)
@fedify/fedify NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.4.0-dev.177, =0.4.0-dev.177, =0.4.0-dev.181 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...
@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +1 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.0.0, <=2.0.17)
@fedify/fedify NPM version =2.0.0, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0-dev.1757, =2.0.17 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...
@fedify/cli (>=2.2.0-dev.898, <=2.2.2) potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.2.0, <=2.2.2)
@fedify/fedify NPM version =2.2.0, =2.2.0-dev.898, =2.2.2 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...
@fedify/cli (>=2.2.0-dev.898, <=2.2.2) potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.2.0, <=2.2.2)
@fedify/fedify NPM version =2.2.0, =2.2.0-dev.898, =2.2.2 Source cves: CVE-2026-42462 Source advisory: SNYK:JS-FEDIFYFEDIFY-16895732...
@fedify/amqp (0.2.0-dev.12), @fedify/botkit (>=0.3.0-dev.125, <=0.4.0-dev.175) +3 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=1.5.0, <=1.9.2)
@fedify/fedify NPM version =1.5.0, =0.3.0-dev.125, =0.4.0-dev.167, =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2026-42462 Source advisory: SNYK:JS-FEDIFYFEDIFY-16895732...
20190403-utils (1.0.0), 433bf (0.0.1) +7980 more potentially affected by CVE-2026-42089 via yeoman-environment (>=2.9.5, <=6.0.0)
yeoman-environment NPM version =2.9.5, =0.0.0, =0.1.0, =1.0.1-alpha.0, =2.0.0-beta.2, =1.18.0, =4.2.0, =6.0.0, =1.0.0, =1.0.0, =0.0.0, =0.2.46, =0.24.0 and more Source cves: CVE-2026-42089 Source advisory: SNYK:JS-YEOMANENVIRONMENT-17753983...
20190403-utils (1.0.0), 433bf (0.0.1) +7980 more potentially affected by CVE-2026-42089 via yeoman-environment (>=2.9.5, <=6.0.0)
yeoman-environment NPM version =2.9.5, =0.0.0, =0.1.0, =1.0.1-alpha.0, =2.0.0-beta.2, =1.18.0, =4.2.0, =6.0.0, =1.0.0, =1.0.0, =0.0.0, =0.2.46, =0.24.0 and more Source cves: CVE-2026-42089 Source advisory: OSV:GHSA-VV9J-GJW2-J8WP...
@typebot.io/nextjs (>=0.3.23, <=0.6.0), @typebot.io/react (>=0.3.23, <=0.10.0) potentially affected by CVE-2026-39964 via @typebot.io/js (>=0.3.23, <=0.10.0)
@typebot.io/js NPM version =0.3.23, =0.3.23, =0.3.23, =0.10.0 Source cves: CVE-2026-39964 Source advisory: SNYK:JS-TYPEBOTIOJS-16895730...
@typebot.io/nextjs (>=0.3.23, <=0.6.0), @typebot.io/react (>=0.3.23, <=0.10.0) potentially affected by CVE-2026-39964 via @typebot.io/js (>=0.3.23, <=0.10.0)
@typebot.io/js NPM version =0.3.23, =0.3.23, =0.3.23, =0.10.0 Source cves: CVE-2026-39964 Source advisory: OSV:GHSA-HQMV-V56G-4M47...
@typebot.io/nextjs (>=0.3.23, <=0.6.0), @typebot.io/react (>=0.3.23, <=0.10.0) potentially affected by CVE-2026-28445 via @typebot.io/js (>=0.3.23, <=0.10.0)
@typebot.io/js NPM version =0.3.23, =0.3.23, =0.3.23, =0.10.0 Source cves: CVE-2026-28445 Source advisory: SNYK:JS-TYPEBOTIOJS-16895731...
@typebot.io/nextjs (>=0.3.23, <=0.6.0), @typebot.io/react (>=0.3.23, <=0.10.0) potentially affected by CVE-2026-28445 via @typebot.io/js (>=0.3.23, <=0.10.0)
@typebot.io/js NPM version =0.3.23, =0.3.23, =0.3.23, =0.10.0 Source cves: CVE-2026-28445 Source advisory: OSV:GHSA-6M7C-XFHP-P9FH...
aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +209 more potentially affected by CVE-2026-9540 via vllm (>=0.1.3, <=0.28.0)
vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =0.2.0, =0.3.0 and more Source cves: CVE-2026-9540 Source advisory: SNYK:PYTHON-VLLM-16887889...
1k-tasks (>=0.0.1, <=1.0.5), 360-lib (1.0.0) +5501 more potentially affected by CVE-2026-9496 via pacote (>=11.2.7, <=21.5.0)
pacote NPM version =11.2.7, =0.0.1, =0.1.13, =52.3.0, =4.0.0, =4.2.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.2.17 and more Source cves: CVE-2026-9496 Source advisory: OSV:GHSA-W4PP-8PJF-RMXW...
2dev (0.1.3), @actualwave/traceability-matrices (1.0.7) +51 more potentially affected by CVE-2026-9495 via @koa/router (14.0.0)
@koa/router NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @koa/router and may be impacted: - 2dev 0.1.3 - @actualwave/traceability-matrices 1.0.7 - @bbc/sofie-server-core-integration...
@blitzjs/auth (>=2.0.0-alpha.1, <=2.0.0-danger.67), @blitzjs/codemod (>=0.0.0-a78bd33-20230114151431, <=3.0.2) +10 more potentially affected by CVE-2026-9520 via blitz (>=0.0.0-a78bd33-20230114151431, <=3.0.2)
blitz NPM version =0.0.0-a78bd33-20230114151431, =2.0.0-alpha.1, =0.0.0-a78bd33-20230114151431, =2.0.0-alpha.1, =2.0.0-alpha.1, =0.0.1, =1.0.1, =0.1.0, =0.0.1-h, =0.0.1-a, =1.2.1-d, =1.3.2-b Source cves: CVE-2026-9520 Source advisory: SNYK:JS-BLITZ-17818126...
@blitzjs/codemod (>=3.0.0, <=3.0.2) potentially affected by CVE-2026-9520 via blitz (>=3.0.0, <=3.0.2)
blitz NPM version =3.0.0, =3.0.0, =3.0.2 Source cves: CVE-2026-9520 Source advisory: OSV:GHSA-H2P9-CR4H-PX24...
@aquacloud_ai/aqc-charts (>=0.1.1, <=0.1.3), @arkxos/arkos-system (>=0.1.1, <=0.1.10) +69 more potentially affected by CVE-2026-45249 via echarts (6.0.0)
echarts NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on echarts and may be impacted: - @aquacloudai/aqc-charts =0.1.1, =0.1.1, =5.1.121, =0.1.1, =1023.48.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =0.19.0,...
@1stg/app-config (>=10.0.0, <=15.0.0), @1stg/common-config (>=10.0.0, <=15.0.0) +415 more potentially affected by CVE-2026-9358 via postcss-selector-parser (>=7.1.0, <=7.1.2)
postcss-selector-parser NPM version =7.1.0, =10.0.0, =10.0.0, =8.1.0, =13.0.0, =0.1.0-dev25004766367, =0.7.0-rohit-magnitude-valuetext.1, =1.0.3, =1.11.1, =1.11.1, =1.11.1, =1.12.0, =1.11.1, =1.11.1, =1.11.1, =1.11.1, =1.19.0 and more Source cves: CVE-2026-9358 Source advisory:...
@ahnlabcloudmate/design-system (>=0.0.1-beta.0, <=0.2526.3), @azu/eslint-plugin-panda-oxc (>=1.0.1, <=1.0.2) +223 more potentially affected by CVE-2026-9358 via postcss-selector-parser (>=6.1.0, <=6.1.2)
postcss-selector-parser NPM version =6.1.0, =0.0.1-beta.0, =1.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =0.0.4, =0.0.3, =0.0.3, =0.0.1, =0.0.1, =0.0.9, =0.0.1, =0.0.4, =0.0.32 and more Source cves: CVE-2026-9358 Source advisory: OSV:GHSA-W9M9-85WC-3X92...
libcrux-aead (>=0.0.4-pre.1, <=0.0.8), libcrux-aesgcm (>=0.0.4-pre.1, <=0.0.8) +17 more potentially affected by unknown CVE via libcrux-secrets (>=0.0.4, <=0.0.5-pre.1)
libcrux-secrets CARGO version =0.0.4, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =0.0.4-pre.1, =1.20.4, =0.2.0, =0.6.1 and more Source cves: unknown CVE Source advisory:...
@edoday/react-sdk (>=1.2.0, <=1.2.1), weavedb-client (>=0.45.0, <=0.45.4) +4 more potentially affected by unknown CVE via weavedb-base (0.45.4)
weavedb-base NPM version 0.45.4 is affected by a known vulnerability. The following packages have a transitive dependency on weavedb-base and may be impacted: - @edoday/react-sdk =1.2.0, =0.45.0, =0.45.0, =0.45.0, =0.45.0, =0.45.1, =0.45.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-47...
@aquacloud_ai/aqc-charts (>=0.1.1, <=0.1.3), @arkxos/arkos-system (>=0.1.1, <=0.1.10) +69 more potentially affected by CVE-2026-45249 via echarts (6.0.0)
echarts NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on echarts and may be impacted: - @aquacloudai/aqc-charts =0.1.1, =0.1.1, =5.1.121, =0.1.1, =1023.48.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =0.19.0,...
biz.devstack.springframework.boot:spring-boot-starter-api (>=1.0.0, <=1.2.1), biz.devstack:spring-boot-starter-api-quickstart (>=1.0.0, <=1.0.4) +1133 more potentially affected by CVE-2026-9370 via com.github.ulisesbocchio:jasypt-spring-boot (>=1.2, <=4.0.4)
com.github.ulisesbocchio:jasypt-spring-boot MAVEN version =1.2, =1.0.0, =1.0.0, =0.5.0, =0.1.0, =0.3.0, =0.5.0, =0.3.0, =0.3.0, =0.2.0, =0.2.0, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-9370 Source advisory: SNYK:JAVA-COMGITHUBULISESBOCCHIO-16873884...
org.webjars.npm:coreui__coreui (4.2.1), org.webjars.npm:css-loader (>=2.1.0, <=6.7.2) +19 more potentially affected by CVE-2026-9358 via org.webjars.npm:postcss-selector-parser (>=4.0.0-rc.1, <=7.1.0)
org.webjars.npm:postcss-selector-parser MAVEN version =4.0.0-rc.1, =2.1.0, =3.1.0, =7.0.1, =4.0.2, =2.0.6, =2.1.0, =4.1.2, =6.2.0 and more Source cves: CVE-2026-9358 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16873883...
@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-47138 via parse-server (>=9.6.0-alpha.37, <=9.8.0)
parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-47138 Source advisory: OSV:GHSA-38M6-82C8-4XFM...
0xkobold (>=0.3.0, <=0.8.0), 4591-libs (>=0.0.1, <=0.2.0) +6072 more potentially affected by CVE-2026-8723 via qs (>=6.11.1, <=6.15.1)
qs NPM version =6.11.1, =0.3.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.0.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.2 - @142vip/data-source 0.0.1-alpha.1 and more Source cves: CVE-2026-8723 Source advisory:...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +28148 more potentially affected by CVE-2026-9277 via shell-quote (>=1.3.3, <=1.8.3)
shell-quote NPM version =1.3.3, =1.0.1, =1.1.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...
org.webjars.npm:github-com-wavesoft-local-echo (0.2.0), org.webjars.npm:launch-editor (>=2.2.1, <=2.14.1) +2 more potentially affected by CVE-2026-9277 via org.webjars.npm:shell-quote (1.10.0)
org.webjars.npm:shell-quote MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:shell-quote and may be impacted: - org.webjars.npm:github-com-wavesoft-local-echo 0.2.0 - org.webjars.npm:launch-editor =2.2.1, =2.14.1 -...
@airalogy/airalogy-engine (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-46703 via @boxlite-ai/boxlite (0.8.2)
@boxlite-ai/boxlite NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @boxlite-ai/boxlite and may be impacted: - @airalogy/airalogy-engine =0.0.1, =0.0.5 Source cves: CVE-2026-46703 Source advisory: OSV:GHSA-F396-4RP4-7V2J...
@airalogy/airalogy-engine (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-46695 via @boxlite-ai/boxlite (0.8.2)
@boxlite-ai/boxlite NPM version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @boxlite-ai/boxlite and may be impacted: - @airalogy/airalogy-engine =0.0.1, =0.0.5 Source cves: CVE-2026-46695 Source advisory: OSV:GHSA-G6WW-W5J2-R7X3...
@microsoft/applicationinsights-analytics-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03), @microsoft/applicationinsights-channel-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03) +11 more potentially affected by CVE-2026-46681 via @nevware21/ts-utils (>=0.3.5, <=0.7.3)
@nevware21/ts-utils NPM version =0.3.5, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =1.0.0, =1.1.2...
@microsoft/applicationinsights-analytics-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03), @microsoft/applicationinsights-channel-js (>=3.0.0-beta.2208-16, <=3.0.0-beta.2302-03) +11 more potentially affected by CVE-2026-46681 via @nevware21/ts-utils (>=0.3.5, <=0.7.3)
@nevware21/ts-utils NPM version =0.3.5, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =3.0.0, =3.0.0-beta.2208-16, =3.0.0-beta.2208-16, =1.0.0, =1.1.2...
@bitsocial/ai-moderation-challenge (>=0.1.0, <=0.1.1), @bitsocial/bitsocial-cli (>=0.19.44, <=0.19.72) +6 more potentially affected by CVE-2026-46679 via @libp2p/gossipsub (>=15.0.0-049bfa0fa, <=15.0.22-5692f3f16)
@libp2p/gossipsub NPM version =15.0.0-049bfa0fa, =0.1.0, =0.19.44, =0.1.0, =0.1.0, =0.1.0, =6.0.0-049bfa0fa, =9.0.0-049bfa0fa, =0.0.17, =0.0.47 Source cves: CVE-2026-46679 Source advisory: SNYK:JS-LIBP2PGOSSIPSUB-16798774...
@bitsocial/ai-moderation-challenge (>=0.1.0, <=0.1.1), @bitsocial/bitsocial-cli (>=0.19.44, <=0.19.72) +6 more potentially affected by CVE-2026-46679 via @libp2p/gossipsub (>=15.0.0-049bfa0fa, <=15.0.22-5692f3f16)
@libp2p/gossipsub NPM version =15.0.0-049bfa0fa, =0.1.0, =0.19.44, =0.1.0, =0.1.0, =0.1.0, =6.0.0-049bfa0fa, =9.0.0-049bfa0fa, =0.0.17, =0.0.47 Source cves: CVE-2026-46679 Source advisory: OSV:GHSA-4F8R-922H-2VGV...
360shitu (0.1.0), 4icloud-engine (1.0.1) +10921 more potentially affected by CVE-2026-46625 via js-cookie (>=2.1.0, <=3.0.5)
js-cookie NPM version =2.1.0, =1.0.6, =0.1.0, =0.37.2, =0.37.2, =0.0.1, =1.0.0, =1.0.0-alpha, =1.0.0-alpha, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-46625 Source advisory: SNYK:JS-JSCOOKIE-17816999...