@ainsleydev/payload-helper (>=0.0.1, <=0.0.2), @bsct/payload (1.0.0) +89 more potentially affected by CVE-2026-41683 via i18next-http-middleware (>=3.0.2, <=3.9.2)

i18next-http-middleware NPM version =3.0.2, =0.0.1, =1.0.1, =0.0.1, =0.0.1, =0.0.1, =8.0.0-alpha1, =3.0.0-rc.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.3 and more Source cves: CVE-2026-41683 Source advisory: OSV:GHSA-C3H8-G69V-PJRG...

org.webjars.npm:adal-node (0.1.28), org.webjars.npm:canvg (>=1.5.2, <=1.5.3) +14 more potentially affected by CVE-2026-41673 via org.webjars.npm:xmldom (>=0.1.31, <=0.6.0)

org.webjars.npm:xmldom MAVEN version =0.1.31, =1.5.2, =0.7.2, =0.14.0, =0.11.0, =7.14.0, =2.7.0, =2.9.2 and more Source cves: CVE-2026-41673 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16134531...

@adobe/helix-importer-jcr-packaging (>=2.0.2, <=2.0.16), @aidin36/xmp (>=0.1.0, <=0.2.2) +49 more potentially affected by CVE-2026-41673 via @xmldom/xmldom (>=0.9.0, <=0.9.9)

@xmldom/xmldom NPM version =0.9.0, =2.0.2, =0.1.0, =5.5.3, =1.0.22, =1.35.0, =1.5.1-beta.1723, =0.1.0, =2.1.2, =2.6.1, =2.98.0, =2.0.0, =2.2.0, =2.108.11 and more Source cves: CVE-2026-41673 Source advisory: SNYK:JS-XMLDOMXMLDOM-16134530...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11363 more potentially affected by CVE-2026-41673 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.0.9 and more Source cves: CVE-2026-41673 Source advisory: OSV:GHSA-2V35-W6HQ-6MFW...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +12674 more potentially affected by CVE-2026-41673 via xmldom (>=0.1.2, <=0.6.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.2, =1.0.3, =1.0.23, =1.0.1, =1.3.1 and more Source cves: CVE-2026-41673 Source advisory: SNYK:JS-XMLDOM-16134529...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4307 more potentially affected by CVE-2026-41673 via @xmldom/xmldom (>=0.7.0, <=0.8.12)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =2.1.0-renovate-fdebc6-mhg3djx8 - @abcd19/st-grid 3.1.0 - @abdullahceylan/expo-cli 0.2.6 and more Source cves: CVE-2026-41673 Source advisory: OSV:GHSA-2V35-W6HQ-6MFW...

@adobe/helix-importer-jcr-packaging (>=2.0.2, <=2.0.16), @aidin36/xmp (>=0.1.0, <=0.2.2) +49 more potentially affected by CVE-2026-41673 via @xmldom/xmldom (>=0.9.0, <=0.9.9)

@xmldom/xmldom NPM version =0.9.0, =2.0.2, =0.1.0, =5.5.3, =1.0.22, =1.35.0, =1.5.1-beta.1723, =0.1.0, =2.1.2, =2.6.1, =2.98.0, =2.0.0, =2.2.0, =2.108.11 and more Source cves: CVE-2026-41673 Source advisory: OSV:GHSA-2V35-W6HQ-6MFW...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4307 more potentially affected by CVE-2026-41673 via @xmldom/xmldom (>=0.7.0, <=0.8.12)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =2.1.0-renovate-fdebc6-mhg3djx8 - @abcd19/st-grid 3.1.0 - @abdullahceylan/expo-cli 0.2.6 and more Source cves: CVE-2026-41673 Source advisory: SNYK:JS-XMLDOMXMLDOM-16134530...

org.webjars.npm:adal-node (0.1.28), org.webjars.npm:canvg (>=1.5.2, <=1.5.3) +14 more potentially affected by CVE-2026-41674 via org.webjars.npm:xmldom (>=0.1.31, <=0.6.0)

org.webjars.npm:xmldom MAVEN version =0.1.31, =1.5.2, =0.7.2, =0.14.0, =0.11.0, =7.14.0, =2.7.0, =2.9.2 and more Source cves: CVE-2026-41674 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16134550...

@adobe/helix-importer-jcr-packaging (>=2.0.2, <=2.0.16), @aidin36/xmp (>=0.1.0, <=0.2.2) +49 more potentially affected by CVE-2026-41674 via @xmldom/xmldom (>=0.9.0, <=0.9.9)

@xmldom/xmldom NPM version =0.9.0, =2.0.2, =0.1.0, =5.5.3, =1.0.22, =1.35.0, =1.5.1-beta.1723, =0.1.0, =2.1.2, =2.6.1, =2.98.0, =2.0.0, =2.2.0, =2.108.11 and more Source cves: CVE-2026-41674 Source advisory: SNYK:JS-XMLDOMXMLDOM-16134549...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11363 more potentially affected by CVE-2026-41674 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.0.9 and more Source cves: CVE-2026-41674 Source advisory: OSV:GHSA-F6WW-3GGP-FR8H...

@adobe/helix-importer-jcr-packaging (>=2.0.2, <=2.0.16), @aidin36/xmp (>=0.1.0, <=0.2.2) +49 more potentially affected by CVE-2026-41674 via @xmldom/xmldom (>=0.9.0, <=0.9.9)

@xmldom/xmldom NPM version =0.9.0, =2.0.2, =0.1.0, =5.5.3, =1.0.22, =1.35.0, =1.5.1-beta.1723, =0.1.0, =2.1.2, =2.6.1, =2.98.0, =2.0.0, =2.2.0, =2.108.11 and more Source cves: CVE-2026-41674 Source advisory: OSV:GHSA-F6WW-3GGP-FR8H...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4307 more potentially affected by CVE-2026-41674 via @xmldom/xmldom (>=0.7.0, <=0.8.12)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =2.1.0-renovate-fdebc6-mhg3djx8 - @abcd19/st-grid 3.1.0 - @abdullahceylan/expo-cli 0.2.6 and more Source cves: CVE-2026-41674 Source advisory: SNYK:JS-XMLDOMXMLDOM-16134549...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +12674 more potentially affected by CVE-2026-41674 via xmldom (>=0.1.2, <=0.6.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.2, =1.0.3, =1.0.23, =1.0.1, =1.3.1 and more Source cves: CVE-2026-41674 Source advisory: SNYK:JS-XMLDOM-16134548...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4307 more potentially affected by CVE-2026-41674 via @xmldom/xmldom (>=0.7.0, <=0.8.12)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =2.1.0-renovate-fdebc6-mhg3djx8 - @abcd19/st-grid 3.1.0 - @abdullahceylan/expo-cli 0.2.6 and more Source cves: CVE-2026-41674 Source advisory: OSV:GHSA-F6WW-3GGP-FR8H...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +12674 more potentially affected by CVE-2026-41675 via xmldom (>=0.1.2, <=0.6.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.2, =1.0.3, =1.0.23, =1.0.1, =1.3.1 and more Source cves: CVE-2026-41675 Source advisory: SNYK:JS-XMLDOM-16134551...

@adobe/helix-importer-jcr-packaging (>=2.0.2, <=2.0.16), @aidin36/xmp (>=0.1.0, <=0.2.2) +49 more potentially affected by CVE-2026-41675 via @xmldom/xmldom (>=0.9.0, <=0.9.9)

@xmldom/xmldom NPM version =0.9.0, =2.0.2, =0.1.0, =5.5.3, =1.0.22, =1.35.0, =1.5.1-beta.1723, =0.1.0, =2.1.2, =2.6.1, =2.98.0, =2.0.0, =2.2.0, =2.108.11 and more Source cves: CVE-2026-41675 Source advisory: OSV:GHSA-X6WF-F3PX-WCQX...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4307 more potentially affected by CVE-2026-41675 via @xmldom/xmldom (>=0.7.0, <=0.8.12)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =2.1.0-renovate-fdebc6-mhg3djx8 - @abcd19/st-grid 3.1.0 - @abdullahceylan/expo-cli 0.2.6 and more Source cves: CVE-2026-41675 Source advisory: SNYK:JS-XMLDOMXMLDOM-16134552...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4307 more potentially affected by CVE-2026-41675 via @xmldom/xmldom (>=0.7.0, <=0.8.12)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =2.1.0-renovate-fdebc6-mhg3djx8 - @abcd19/st-grid 3.1.0 - @abdullahceylan/expo-cli 0.2.6 and more Source cves: CVE-2026-41675 Source advisory: OSV:GHSA-X6WF-F3PX-WCQX...

@adobe/helix-importer-jcr-packaging (>=2.0.2, <=2.0.16), @aidin36/xmp (>=0.1.0, <=0.2.2) +49 more potentially affected by CVE-2026-41675 via @xmldom/xmldom (>=0.9.0, <=0.9.9)

@xmldom/xmldom NPM version =0.9.0, =2.0.2, =0.1.0, =5.5.3, =1.0.22, =1.35.0, =1.5.1-beta.1723, =0.1.0, =2.1.2, =2.6.1, =2.98.0, =2.0.0, =2.2.0, =2.108.11 and more Source cves: CVE-2026-41675 Source advisory: SNYK:JS-XMLDOMXMLDOM-16134552...

org.webjars.npm:adal-node (0.1.28), org.webjars.npm:canvg (>=1.5.2, <=1.5.3) +14 more potentially affected by CVE-2026-41675 via org.webjars.npm:xmldom (>=0.1.31, <=0.6.0)

org.webjars.npm:xmldom MAVEN version =0.1.31, =1.5.2, =0.7.2, =0.14.0, =0.11.0, =7.14.0, =2.7.0, =2.9.2 and more Source cves: CVE-2026-41675 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16134553...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11363 more potentially affected by CVE-2026-41675 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.0.9 and more Source cves: CVE-2026-41675 Source advisory: OSV:GHSA-X6WF-F3PX-WCQX...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4307 more potentially affected by CVE-2026-41672 via @xmldom/xmldom (>=0.7.0, <=0.8.12)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =2.1.0-renovate-fdebc6-mhg3djx8 - @abcd19/st-grid 3.1.0 - @abdullahceylan/expo-cli 0.2.6 and more Source cves: CVE-2026-41672 Source advisory: OSV:GHSA-J759-J44W-7FR8...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11363 more potentially affected by CVE-2026-41672 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.0.9 and more Source cves: CVE-2026-41672 Source advisory: OSV:GHSA-J759-J44W-7FR8...

@adobe/helix-importer-jcr-packaging (>=2.0.2, <=2.0.16), @aidin36/xmp (>=0.1.0, <=0.2.2) +49 more potentially affected by CVE-2026-41672 via @xmldom/xmldom (>=0.9.0, <=0.9.9)

@xmldom/xmldom NPM version =0.9.0, =2.0.2, =0.1.0, =5.5.3, =1.0.22, =1.35.0, =1.5.1-beta.1723, =0.1.0, =2.1.2, =2.6.1, =2.98.0, =2.0.0, =2.2.0, =2.108.11 and more Source cves: CVE-2026-41672 Source advisory: OSV:GHSA-J759-J44W-7FR8...

@nocobase/actions (>=2.0.0-alpha.2, <=2.0.38), @nocobase/auth (>=2.0.0-alpha.2, <=2.0.38) +4 more potentially affected by CVE-2026-41640 via @nocobase/database (>=2.0.0, <=2.0.38)

@nocobase/database NPM version =2.0.0, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.38 Source cves: CVE-2026-41640 Source advisory: OSV:GHSA-4948-F92Q-F432...

@nocobase/actions (>=2.0.0-alpha.2, <=2.0.38), @nocobase/auth (>=2.0.0-alpha.2, <=2.0.38) +4 more potentially affected by CVE-2026-41640 via @nocobase/database (>=2.0.0, <=2.0.38)

@nocobase/database NPM version =2.0.0, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.38 Source cves: CVE-2026-41640 Source advisory: SNYK:JS-NOCOBASEDATABASE-16421470...

@activepieces/piece-amazon-s3 (>=0.5.4, <=0.6.4), @activepieces/piece-amazon-ses (>=0.0.1, <=0.1.4) +1215 more potentially affected by CVE-2026-41650 via fast-xml-parser (>=5.0.1, <=5.6.0)

fast-xml-parser NPM version =5.0.1, =0.5.4, =0.0.1, =0.2.0, =0.1.3, =0.5.3, =0.2.1, =0.0.4, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.5.0 and more Source cves: CVE-2026-41650 Source advisory: OSV:GHSA-GH4J-GQV2-49F6...

@marko/compiler (5.0.0-next.0), @marko/translator-default (5.0.0-next.0) +1 more potentially affected by CVE-2026-41591 via marko (>=5.0.0-next.0, <=5.20.9)

marko NPM version =5.0.0-next.0, =1.1.4, =1.2.1 Source cves: CVE-2026-41591 Source advisory: SNYK:JS-MARKO-16421453...

@marko/compiler (5.0.0-next.0), @marko/translator-default (5.0.0-next.0) +1 more potentially affected by CVE-2026-41591 via marko (>=5.0.0-next.0, <=5.20.9)

marko NPM version =5.0.0-next.0, =1.1.4, =1.2.1 Source cves: CVE-2026-41591 Source advisory: OSV:GHSA-X9FJ-57FH-C8WQ...

nimiq-block-production (0.1.0), nimiq-client (0.1.0) +6 more potentially affected by CVE-2026-34066 via nimiq-blockchain (0.1.0)

nimiq-blockchain CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-blockchain and may be impacted: - nimiq-block-production 0.1.0 - nimiq-client 0.1.0 - nimiq-consensus 0.1.0 - nimiq-lib 0.1.0 - nimiq-mempool 0.1.0 -...

nimiq-account (0.1.0), nimiq-accounts (0.1.0) +14 more potentially affected by CVE-2026-34068 via nimiq-transaction (0.1.0)

nimiq-transaction CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-transaction and may be impacted: - nimiq-account 0.1.0 - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 -...

nimiq-account (0.1.0), nimiq-accounts (0.1.0) +14 more potentially affected by CVE-2026-34067 via nimiq-transaction (0.1.0)

nimiq-transaction CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-transaction and may be impacted: - nimiq-account 0.1.0 - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 -...

nimiq-account (0.1.0), nimiq-accounts (0.1.0) +15 more potentially affected by CVE-2026-34065 via nimiq-primitives (0.1.0)

nimiq-primitives CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-primitives and may be impacted: - nimiq-account 0.1.0 - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 -...

nimiq-accounts (0.1.0), nimiq-block (0.1.0) +13 more potentially affected by CVE-2026-34064 via nimiq-account (0.1.0)

nimiq-account CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-account and may be impacted: - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 - nimiq-client 0.1.0 - nimiq-consens...

nimiq-accounts (0.1.0), nimiq-block-production (0.1.0) +11 more potentially affected by CVE-2026-33471 via nimiq-block (0.1.0)

nimiq-block CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-block and may be impacted: - nimiq-accounts 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 - nimiq-client 0.1.0 - nimiq-consensus 0.1.0 - nimiq-databas...

@diia-inhouse/i18n (>=2.8.2, <=2.8.14), @genie23/electron-base (>=0.0.4-alpha, <=0.0.225) +54 more potentially affected by CVE-2026-41693 via i18next-fs-backend (>=2.0.0, <=2.6.3)

i18next-fs-backend NPM version =2.0.0, =2.8.2, =0.0.4-alpha, =3.0.0-rc.0, =7.1.2, =2.4.2, =1.1.8, =1.1.8, =2.4.2, =2.4.2, =2.6.9, =2.4.2, =2.4.2, =2.4.2, =2.4.2, =2.5.5 and more Source cves: CVE-2026-41693 Source advisory: SNYK:JS-I18NEXTFSBACKEND-16415529...

@diia-inhouse/i18n (>=2.8.2, <=2.8.14), @genie23/electron-base (>=0.0.4-alpha, <=0.0.225) +54 more potentially affected by CVE-2026-41693 via i18next-fs-backend (>=2.0.0, <=2.6.3)

i18next-fs-backend NPM version =2.0.0, =2.8.2, =0.0.4-alpha, =3.0.0-rc.0, =7.1.2, =2.4.2, =1.1.8, =1.1.8, =2.4.2, =2.4.2, =2.6.9, =2.4.2, =2.4.2, =2.4.2, =2.4.2, =2.5.5 and more Source cves: CVE-2026-41693 Source advisory: OSV:GHSA-8847-338W-5HCJ...

locizify (>=7.0.0, <=9.0.9), locizify-ssg (>=1.1.12, <=2.0.6) potentially affected by CVE-2026-41692 via i18nextify (>=4.0.0, <=4.0.7)

i18nextify NPM version =4.0.0, =7.0.0, =1.1.12, =2.0.6 Source cves: CVE-2026-41692 Source advisory: OSV:GHSA-6457-MXPQ-4FQQ...

@armenak/aa (1.0.1), @armenak/ui-kit (>=1.0.0, <=1.0.5) +74 more potentially affected by CVE-2026-41691 via i18next-http-backend (>=3.0.1, <=3.0.4)

i18next-http-backend NPM version =3.0.1, =1.0.0, =1.0.2, =3.12.2-pre.4023170009, =3.2.9-pre.4023170009, =3.2.9-pre.4023170009, =10.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =3.42.3, =3.8.2, =3.7.3, =3.7.11 - @eternal-baguette/sample-component 0.0.3 and more Source cves: CVE-2026-41691 Source advisory:...

@armenak/aa (1.0.1), @armenak/ui-kit (>=1.0.0, <=1.0.5) +74 more potentially affected by CVE-2026-41691 via i18next-http-backend (>=3.0.1, <=3.0.4)

i18next-http-backend NPM version =3.0.1, =1.0.0, =1.0.2, =3.12.2-pre.4023170009, =3.2.9-pre.4023170009, =3.2.9-pre.4023170009, =10.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =3.42.3, =3.8.2, =3.7.3, =3.7.11 - @eternal-baguette/sample-component 0.0.3 and more Source cves: CVE-2026-41691 Source advisory:...

@ainsleydev/payload-helper (>=0.0.1, <=0.0.2), @bsct/payload (1.0.0) +89 more potentially affected by CVE-2026-41690 via i18next-http-middleware (>=3.0.2, <=3.9.2)

i18next-http-middleware NPM version =3.0.2, =0.0.1, =1.0.1, =0.0.1, =0.0.1, =0.0.1, =8.0.0-alpha1, =3.0.0-rc.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.3 and more Source cves: CVE-2026-41690 Source advisory: SNYK:JS-I18NEXTHTTPMIDDLEWARE-16415526...

@ainsleydev/payload-helper (>=0.0.1, <=0.0.2), @bsct/payload (1.0.0) +89 more potentially affected by CVE-2026-41690 via i18next-http-middleware (>=3.0.2, <=3.9.2)

i18next-http-middleware NPM version =3.0.2, =0.0.1, =1.0.1, =0.0.1, =0.0.1, =0.0.1, =8.0.0-alpha1, =3.0.0-rc.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.3 and more Source cves: CVE-2026-41690 Source advisory: OSV:GHSA-5FGG-JCPF-8JJW...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2124 more potentially affected by CVE-2026-41240 via dompurify (>=3.0.0, <=3.3.3)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: CVE-2026-41240 Source advisory: OSV:GHSA-H7MW-GPVR-XQ4M...

011xwztpjn (1.0.0), 02y9dg4qm3 (1.0.0) +11501 more potentially affected by CVE-2026-41239 via dompurify (>=1.0.10, <=3.3.3)

dompurify NPM version =1.0.10, =3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on dompurify and may be impacted: - 011xwztpjn 1.0.0 - 02y9dg4qm3 1.0.0 - 04tw75kmd9 1.0.0 - 0650teqqly 1.0.0 - 097oi25ils 1.0.0 - 0a0fpniotn 1.0.0 - 0c7j76u46q 1.0.0 -...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2123 more potentially affected by CVE-2026-41238 via dompurify (>=3.0.1, <=3.3.3)

dompurify NPM version =3.0.1, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: CVE-2026-41238 Source advisory: OSV:GHSA-V9JR-RG53-9PGP...

qapp-cuda-quantum (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-24189 via cuda-quantum (0.8.0)

cuda-quantum PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on cuda-quantum and may be impacted: - qapp-cuda-quantum =0.0.1, =0.0.2 Source cves: CVE-2026-24189 Source advisory: SNYK:PYTHON-CUDAQUANTUM-16636603...

instructlab-sdg (>=0.0.1rc1, <=0.0.1) potentially affected by CVE-2026-6859 via instructlab (0.17.2)

instructlab PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on instructlab and may be impacted: - instructlab-sdg =0.0.1rc1, =0.0.1 Source cves: CVE-2026-6859 Source advisory: SNYK:PYTHON-INSTRUCTLAB-16323407...

acceptxmr (>=0.1.0, <=0.13.0), activitypub_federation (>=0.1.0, <=0.2.0) +614 more potentially affected by CVE-2026-73051 via actix-http (>=3.0.0, <=3.9.0)

actix-http CARGO version =3.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0-beta.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =0.6.0-beta.1, =0.2.0, =0.1.0, =2.0.0-beta.1, =3.0.0 and more Source cves: CVE-2026-73051 Source advisory: OSV:GHSA-XHJ4-VRGC-HR34...

@saltcorn/cli (>=1.0.0-beta.1, <=1.4.3), @saltcorn/mobile-builder (>=1.0.0-beta.1, <=1.4.3) potentially affected by unknown CVE via @saltcorn/server (>=1.0.0, <=1.4.3)

@saltcorn/server NPM version =1.0.0, =1.0.0-beta.1, =1.0.0-beta.1, =1.4.3 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNSERVER-16318352...