com.braimanm:uitaf (>=3.0.0 <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha <=1.0.1-alpha) +7 more potentially affected by CVE-2026-55847 via io.qameta.allure:allure-generator (>=2.10.0 <=2.38.1)

io.qameta.allure:allure-generator MAVEN version =2.10.0, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-RC1, =2.10.0, =2.38.1 - org.uitaf:uitaf-playwright =1.0.1 Source cves: CVE-2026-55847 Source advisory: OSV:GHSA-GX93-M64W-5M6H...

a2 (>=0.1.0 <=0.3.4), airbyte-cdk (>=0.1.23 <=0.1.104) +146 more potentially affected by unknown CVE via vcrpy (>=1.10.3 <=8.1.1)

vcrpy PYPI version =1.10.3, =0.1.0, =0.1.23, =0.2.0, =0.1.24, =2.1.1, =0.1.7, =3.0.2, =0.2.3, =0.1.0, =0.15.2101.22645, =0.1.15, =0.0.65, =2.10.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...

crawlvox (=0.1.0), data-gatherer (>=0.2.0 <=0.2.2) +11 more potentially affected by unknown CVE via ultimate-sitemap-parser (>=0.5.0 <=1.8.0)

ultimate-sitemap-parser PYPI version =0.5.0, =0.2.0, =0.1.5, =0.1.1, =1.1.5, =0.9.3, =0.0.1, =0.1.1, =0.1.1, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-P5WC-9W9R-M232...

crawlvox (=0.1.0), data-gatherer (>=0.2.0 <=0.2.2) +11 more potentially affected by unknown CVE via ultimate-sitemap-parser (>=0.5.0 <=1.8.0)

ultimate-sitemap-parser PYPI version =0.5.0, =0.2.0, =0.1.5, =0.1.1, =1.1.5, =0.9.3, =0.0.1, =0.1.1, =0.1.1, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-8823-QG2X-PV9F...

@tinacms/app (>=0.0.0-574b548-20260304015858 <=2.5.4), @tinacms/cli (>=0.0.0-1d830a0-20260128234746 <=2.4.4) +1 more potentially affected by CVE-2026-55660 via tinacms (>=3.0.0 <=3.9.1)

tinacms NPM version =3.0.0, =0.0.0-574b548-20260304015858, =0.0.0-1d830a0-20260128234746, =0.1.12, =0.2.13 Source cves: CVE-2026-55660 Source advisory: SNYK:JS-TINACMS-17420390...

@backpackjs/cli (>=1.0.0 <=2.0.0-bundle-perf-test.2), @backpackjs/cms (>=0.0.2 <=4.21.0) +50 more potentially affected by CVE-2026-55660 via tinacms (>=0.0.0-a11f739-20260513041310 <=3.9.1)

tinacms NPM version =0.0.0-a11f739-20260513041310, =1.0.0, =0.0.2, =2.2.0-isolate-nextjs.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.10.0, =0.0.1-beta.1, =0.0.0-20220816134642, =0.0.0-20220903131031, =0.0.4, =0.1.0, =0.0.85, =0.0.89, =0.0.93 and more Source cves: CVE-2026-55660 Source advisory:...

@cloudcommerce/storefront (>=0.10.0 <=0.11.0), @gspenst/next (>=0.1.0 <=0.1.2) +6 more potentially affected by CVE-2026-55660 via @tinacms/app (>=2.0.0 <=2.5.4)

@tinacms/app NPM version =2.0.0, =0.10.0, =0.1.0, =0.1.0, =0.0.0-0c59aa7-20241216063043, =0.0.2, =0.0.3, =0.1.1, =0.1.3 - ramidus =1.2.1 Source cves: CVE-2026-55660 Source advisory: SNYK:JS-TINACMSAPP-17420389...

@cloudcommerce/storefront (>=0.10.0 <=0.11.0), @gspenst/next (>=0.1.0 <=0.1.2) +6 more potentially affected by CVE-2026-55660 via @tinacms/app (>=0.0.0-a11f739-20260513041310 <=2.5.4)

@tinacms/app NPM version =0.0.0-a11f739-20260513041310, =0.10.0, =0.1.0, =0.1.0, =0.0.0-0a2c557-20250220151224, =0.0.2, =0.0.3, =0.1.1, =0.1.3 - ramidus =1.2.1 Source cves: CVE-2026-55660 Source advisory: OSV:GHSA-G5QX-H5F3-MP2F...

@cloudcommerce/storefront (>=0.10.0 <=0.11.0), @gspenst/next (>=0.0.1 <=0.1.2) +6 more potentially affected by CVE-2026-54074 via @tinacms/cli (>=0.60.28 <=1.12.6)

@tinacms/cli NPM version =0.60.28, =0.10.0, =0.0.1, =0.1.0, =0.0.2, =0.0.3, =0.0.1, =0.1.3 - next-tina-github-starter =0.1.0 - ramidus =1.2.1 Source cves: CVE-2026-54074 Source advisory: OSV:GHSA-4936-9HRH-QQPW...

@ajna-inc/npmvc (>=0.1.0 <=0.3.4), @cra-ready/cli (>=0.1.0 <=0.1.1) +3 more potentially affected by CVE-2026-55849 via @cyclonedx/cyclonedx-npm (>=3.1.0 <=4.2.1)

@cyclonedx/cyclonedx-npm NPM version =3.1.0, =0.1.0, =0.1.0, =4.0.0, =1.0.8, =1.1.3 - @raj-dev/guardrail =1.0.0 Source cves: CVE-2026-55849 Source advisory: OSV:GHSA-V75R-VX73-82PJ...

1942pyc (=7.0.1), 3robotics (=0.0.1) +3206 more potentially affected by CVE-2026-54911 via ujson (>=5.0.0 <=5.12.1)

ujson PYPI version =5.0.0, =0.11.0, =0.10.0, =0.10.0, =0.1.0, =0.1.0, =0.10.0, =0.11.0 - a-pandas-ex-intersection-difference =0.1.0 and more Source cves: CVE-2026-54911 Source advisory: SNYK:PYTHON-UJSON-17391481...

1942pyc (=7.0.1), 3robotics (=0.0.1) +3343 more potentially affected by CVE-2026-54911 via ujson (>=2.0.1 <=5.12.1)

ujson PYPI version =2.0.1, =0.11.0, =0.10.0, =0.10.0, =0.1.0, =0.1.0, =0.10.0, =0.11.0 - a-pandas-ex-intersection-difference =0.1.0 and more Source cves: CVE-2026-54911 Source advisory: OSV:GHSA-3J69-69WJ-XQX2...

agent-core-toolkit (>=0.1.0 <=0.1.5), agent-tui (=0.1.0) +34 more potentially affected by CVE-2026-55865 via python-liquid (>=2.0.2 <=2.2.0)

python-liquid PYPI version =2.0.2, =0.1.0, =3.3.0, =0.1.0, =0.1.1, =0.24.13, =0.1.0, =0.0.8, =1.0.0a0, =0.1.0, =0.8.8.1, =6.0.0.11rc0, =0.0.1a1, =0.1.0 and more Source cves: CVE-2026-55865 Source advisory: SNYK:PYTHON-PYTHONLIQUID-17458912...

agent-core-toolkit (>=0.1.0 <=0.1.5), agent-tui (=0.1.0) +40 more potentially affected by CVE-2026-55865 via python-liquid (>=1.10.2 <=2.2.0)

python-liquid PYPI version =1.10.2, =0.1.0, =3.3.0, =1.8.0, =0.1.0, =0.1.1, =0.24.13, =0.1.0, =0.0.8, =1.0.0a0, =0.1.0, =0.8.8.1, =0.8.0, =0.14.4 - katonic =6.2.0 and more Source cves: CVE-2026-55865 Source advisory: OSV:GHSA-VQ2F-VCC9-J8MV...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-55778 via parse-server (>=9.6.0-alpha.37 <=9.9.0)

parse-server NPM version =9.6.0-alpha.37, =3.31.25, =4.0.34 Source cves: CVE-2026-55778 Source advisory: OSV:GHSA-V8X7-R927-CC93...

@kontaa/subgraph (>=1.0.1 <=1.2.3), @kontaa/utils (>=1.2.1 <=1.2.3) +8 more potentially affected by CVE-2026-55778 via parse-server (>=6.5.11 <=8.6.80)

parse-server NPM version =6.5.11, =1.0.1, =1.2.1, =2.4.46, =1.6.0, =1.0.0, =1.0.1, =1.0.3, =1.0.0, =1.0.0, =0.0.1, =0.1.0 Source cves: CVE-2026-55778 Source advisory: SNYK:JS-PARSESERVER-17420047...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-55778 via parse-server (>=9.6.0-alpha.37 <=9.9.0)

parse-server NPM version =9.6.0-alpha.37, =3.31.25, =4.0.34 Source cves: CVE-2026-55778 Source advisory: SNYK:JS-PARSESERVER-17420047...

aij (>=1.1.5 <=1.2.10), ajlab (>=0.1.2 <=0.1.5) +22 more potentially affected by CVE-2026-54528 via jupyterlab-git (>=0.24.0 <=0.53.0)

jupyterlab-git PYPI version =0.24.0, =1.1.5, =0.1.2, =0.3.2, =4.0.0, =1.3.0, =3.14.0, =1.3.0, =1.3.0, =3.0.0rc3, =3.14.0, =4.0.0, =0.1.1, =0.4.0, =0.1.0, =2.1.0, =3.0.2 and more Source cves: CVE-2026-54528 Source advisory: SNYK:PYTHON-JUPYTERLABGIT-17391476...

aij (>=1.1.5 <=1.2.10), ajlab (>=0.1.2 <=0.1.5) +22 more potentially affected by CVE-2026-54528 via jupyterlab-git (>=0.24.0 <=0.53.0)

jupyterlab-git PYPI version =0.24.0, =1.1.5, =0.1.2, =0.3.2, =4.0.0, =1.3.0, =3.14.0, =1.3.0, =1.3.0, =3.0.0rc3, =3.14.0, =4.0.0, =0.1.1, =0.4.0, =0.1.0, =2.1.0, =3.0.2 and more Source cves: CVE-2026-54528 Source advisory: OSV:GHSA-436Q-JWFR-RM2H...

aij (>=1.1.5 <=1.2.10), ajlab (>=0.1.2 <=0.1.5) +22 more potentially affected by CVE-2026-54527 via jupyterlab-git (>=0.39.3 <=0.53.0)

jupyterlab-git PYPI version =0.39.3, =1.1.5, =0.1.2, =0.3.2, =4.0.0, =1.3.0, =3.14.0, =1.3.0, =1.3.0, =3.0.0rc3, =3.14.0, =4.0.0, =0.1.1, =0.4.0, =0.1.0, =3.0.0, =3.0.2 and more Source cves: CVE-2026-54527 Source advisory: OSV:GHSA-F962-V9HR-PFG5...

aij (>=1.1.5 <=1.2.10), ajlab (>=0.1.2 <=0.1.5) +10 more potentially affected by CVE-2026-54527 via jupyterlab-git-core (=0.53.0)

jupyterlab-git-core PYPI version =0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab-git-core and may be impacted: - aij =1.1.5, =0.1.2, =0.3.2, =0.1.1, =0.1.0, =0.53.0, =1.4.16, =0.1.0, =4.6.0, =0.4.2, =0.1.1, =0.4.0 Source cves:...

agentvox (=0.2.0), arabic-translator-tester (=0.1.8) +73 more potentially affected by CVE-2026-54499 via stanza (>=1.0.0 <=1.11.1)

stanza PYPI version =1.0.0, =1.0.1, =1.4.0, =1.10.0, =1.6.0, =0.0.1, =1.0.1, =0.0.1, =0.3.0, =0.1.0, =2.1.7, =0.0.0, =0.0.13 and more Source cves: CVE-2026-54499 Source advisory: SNYK:PYTHON-STANZA-17394039...

agentvox (=0.2.0), arabic-translator-tester (=0.1.8) +73 more potentially affected by CVE-2026-54499 via stanza (>=1.0.0 <=1.11.1)

stanza PYPI version =1.0.0, =1.0.1, =1.4.0, =1.10.0, =1.6.0, =0.0.1, =1.0.1, =0.0.1, =0.3.0, =0.1.0, =2.1.7, =0.0.0, =0.0.13 and more Source cves: CVE-2026-54499 Source advisory: OSV:GHSA-V5JW-96JM-7H2C...

eq3btsmart (=0.0.0), hass-auth-synology (>=0.0.0 <=0.4.28) +6 more potentially affected by CVE-2026-54317 via homeassistant (>=0.83.3 <=2026.5.4)

homeassistant PYPI version =0.83.3, =0.0.0, =2021.4.0, =0.4.11, =1.2.0, =0.3.0, =1.0.15, =1.0.22 Source cves: CVE-2026-54317 Source advisory: OSV:GHSA-X84V-G949-293W...

@bigegg/parse-server-schema-config (>=1.0.5 <=1.0.10), @kontaa/subgraph (>=1.0.1 <=1.2.3) +27 more potentially affected by CVE-2026-53726 via parse-server (>=2.0.8 <=7.5.4)

parse-server NPM version =2.0.8, =1.0.5, =1.0.1, =1.2.1, =2.4.46, =2.4.8, =1.0.0, =1.0.0, =1.0.1, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.29 - parse-cli-server2 =0.0.30 and more Source cves: CVE-2026-53726 Source advisory: OSV:GHSA-WMWX-JR2P-4J4R...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-53726 via parse-server (>=9.6.0-alpha.37 <=9.9.0)

parse-server NPM version =9.6.0-alpha.37, =3.31.25, =4.0.34 Source cves: CVE-2026-53726 Source advisory: OSV:GHSA-WMWX-JR2P-4J4R...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-53725 via parse-server (>=9.8.0 <=9.9.0)

parse-server NPM version =9.8.0, =3.31.25, =4.0.34 Source cves: CVE-2026-53725 Source advisory: OSV:GHSA-75V4-M273-5J49...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-53724 via parse-server (>=9.6.0-alpha.37 <=9.9.0)

parse-server NPM version =9.6.0-alpha.37, =3.31.25, =4.0.34 Source cves: CVE-2026-53724 Source advisory: OSV:GHSA-7WQV-XJF3-X35V...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by CVE-2026-50008 via parse-server (>=9.8.0 <=9.9.0)

parse-server NPM version =9.8.0, =3.31.25, =4.0.34 Source cves: CVE-2026-50008 Source advisory: OSV:GHSA-P84R-H6RX-F2XR...

aac-datasets (>=0.6.0 <=0.7.0), activity-browser (>=3.0.0b853 <=3.0.0b202603222116) +337 more potentially affected by CVE-2026-23879 via py7zr (>=1.0.0 <=1.1.2)

py7zr PYPI version =1.0.0, =0.6.0, =3.0.0b853, =3.0.0b202603222116 - agi-app-global-dag =2026.5.30 - agi-app-multi-dag =2026.6.4 - agi-app-pandas-execution =2026.6.4 - agi-app-polars-execution =2026.6.4 - agi-app-sklearn-pipeline =2026.6.4 - agi-app-tescia-diagnostic =2026.6.5 - agi-page-app-ui...

aac-datasets (>=0.6.0 <=0.7.0), activity-browser (>=3.0.0b853 <=3.0.0b202605072131) +407 more potentially affected by CVE-2026-23879 via py7zr (>=0.10.2 <=1.1.2)

py7zr PYPI version =0.10.2, =0.6.0, =3.0.0b853, =3.0.0b202605072131 - agi-app-global-dag =2026.5.30 - agi-app-multi-dag =2026.6.4 - agi-app-pandas-execution =2026.6.4 - agi-app-polars-execution =2026.6.4 - agi-app-sklearn-pipeline =2026.6.4 - agi-app-tescia-diagnostic =2026.6.5 - agi-page-app-ui...

@142vip/midway (>=0.1.6-alpha.9 <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1 <=0.0.1-alpha.13) +2797 more potentially affected by unknown CVE via typeorm (>=0.1.14 <=0.3.28)

typeorm NPM version =0.1.14, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood =0.10.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-TYPEORM-17391479...

@142vip/midway (>=0.1.6-alpha.9 <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1 <=0.0.1-alpha.13) +2797 more potentially affected by unknown CVE via typeorm (>=0.1.14 <=0.3.28)

typeorm NPM version =0.1.14, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood =0.10.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9GGV-8W38-R7PM...

@jupyterlab/extensionmanager-extension (>=4.0.0 <=4.5.8), @jupyterlab/metapackage (>=4.0.0 <=4.5.8) potentially affected by unknown CVE via @jupyterlab/extensionmanager (=4.5.8)

@jupyterlab/extensionmanager NPM version =4.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on @jupyterlab/extensionmanager and may be impacted: - @jupyterlab/extensionmanager-extension =4.0.0, =4.0.0, =4.5.8 Source cves: unknown CVE Source advisory:...

3-04-2025-ttm (=0.1.0), a-mailx (=0.1.0) +4212 more potentially affected by unknown CVE via jupyterlab (>=0.31.1 <=4.5.8)

jupyterlab PYPI version =0.31.1, =0.1.0, =1.0.3, =0.1.8, =0.1.0, =1.0.0, =0.1.3, =0.1.3, =0.1.4 - aces-apps =1.5.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

@sql-access/nodesql (=1.0.0) potentially affected by unknown CVE via @antoncarlos1/nodelamp (=1.0.1)

@antoncarlos1/nodelamp NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @antoncarlos1/nodelamp and may be impacted: - @sql-access/nodesql =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6209...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by unknown CVE via parse-server (>=9.6.0-alpha.37 <=9.9.0)

parse-server NPM version =9.6.0-alpha.37, =3.31.25, =4.0.34 Source cves: unknown CVE Source advisory: OSV:GHSA-CGXM-VR2F-6FJ8...

@bigegg/parse-server-schema-config (>=1.0.5 <=1.0.10), @kontaa/subgraph (>=1.0.1 <=1.2.3) +30 more potentially affected by unknown CVE via parse-server (>=2.0.8 <=8.6.80)

parse-server NPM version =2.0.8, =1.0.5, =1.0.1, =1.2.1, =2.4.46, =2.4.8, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.29 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CGXM-VR2F-6FJ8...

@openinc/parse-server-opendash (>=3.31.25 <=4.0.34) potentially affected by unknown CVE via parse-server (>=9.6.0-alpha.37 <=9.9.0)

parse-server NPM version =9.6.0-alpha.37, =3.31.25, =4.0.34 Source cves: unknown CVE Source advisory: SNYK:JS-PARSESERVER-17420049...

@openinc/parse-server-opendash (>=3.0.0 <=3.30.0), @servable/parse-server-engine (>=1.6.0 <=1.17.0) +5 more potentially affected by unknown CVE via parse-server (=8.6.80)

parse-server NPM version =8.6.80 is affected by a known vulnerability. The following packages have a transitive dependency on parse-server and may be impacted: - @openinc/parse-server-opendash =3.0.0, =1.6.0, =1.0.0, =1.0.3, =2.0.0, =2.0.0, =0.0.1, =0.1.0 Source cves: unknown CVE Source advisory:...

alass-util (=0.3.0), cervo (>=0.1.0 <=0.5.1) +16 more potentially affected by CVE-2026-55832 via tract-onnx (>=0.10.10 <=0.20.7)

tract-onnx CARGO version =0.10.10, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =1.2.0, =0.4.0, =0.2.0, =0.1.1, =0.19.0, =0.19.0, =0.20.7 - waifu2x =0.0.0 and more Source cves: CVE-2026-55832 Source advisory: OSV:GHSA-H668-6X6G-F8R5...

com.primust:primust-cedar (>=1.0.2 <=1.0.3), io.github.devnico:cedar4s-client_2.13 (>=0.1.0 <=0.1.5) +12 more potentially affected by CVE-2026-55773 via com.cedarpolicy:cedar-java (>=4.3.0 <=4.8.0)

com.cedarpolicy:cedar-java MAVEN version =4.3.0, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.5 Source cves: CVE-2026-55773 Source advisory: OSV:GHSA-QMCH-V2Q9-WG4P...

com.primust:primust-cedar (>=1.0.2 <=1.0.3), io.github.devnico:cedar4s-client_2.13 (>=0.1.0 <=0.1.5) +12 more potentially affected by CVE-2026-55772 via com.cedarpolicy:cedar-java (>=4.3.0 <=4.8.0)

com.cedarpolicy:cedar-java MAVEN version =4.3.0, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.5 Source cves: CVE-2026-55772 Source advisory: OSV:GHSA-93G4-M6XV-CMVR...

0utmailauth (=1.0.0), 0xkobold (>=0.0.1 <=0.8.0) +25979 more potentially affected by CVE-2026-11525 via undici (>=0.3.3 <=6.26.0)

undici NPM version =0.3.3, =0.0.1, =0.2.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =1.0.4 - 5.17task =1.0.0 - 5.18task =1.0.0 and more Source cves: CVE-2026-11525 Source advisory: OSV:GHSA-G8M3-5G58-FQ7M...

@0xwork/connect (>=0.1.0 <=0.1.9), @1001-digital/components.evm (>=1.3.0 <=3.6.11) +1373 more potentially affected by CVE-2026-11525 via undici (>=8.0.0 <=8.4.1)

undici NPM version =8.0.0, =0.1.0, =1.3.0, =0.1.0, =1.2.2, =0.3.0, =0.3.0, =0.3.1, =5.0.1-staging.3edc9d7b8d6f, =5.0.1-staging.3edc9d7b8d6f, =5.1.1-staging.0ad6ac75ae4a, =5.1.1-staging.0ad6ac75ae4a, =5.0.1-staging.4b92bc7a3e3b, =5.0.1-staging.3abdf9534c25, =2026.6.2, =2026.6.5 and more Source cve...

002-globals (=1.0.0), 007putra-my-bot (=1.1.1) +36331 more potentially affected by CVE-2026-11525 via undici (>=7.0.0 <=7.27.2)

undici NPM version =7.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =0.3.96, =0.0.1, =0.0.9 - 2017-1535 =1.0.0 and more Source cves: CVE-2026-11525 Source advisory: OSV:GHSA-G8M3-5G58-FQ7M...

@0xwork/connect (>=0.1.0 <=0.1.9), @1001-digital/components.evm (>=1.3.0 <=3.6.11) +1373 more potentially affected by CVE-2026-12151 via undici (>=8.0.0 <=8.4.1)

undici NPM version =8.0.0, =0.1.0, =1.3.0, =0.1.0, =1.2.2, =0.3.0, =0.3.0, =0.3.1, =5.0.1-staging.3edc9d7b8d6f, =5.0.1-staging.3edc9d7b8d6f, =5.1.1-staging.0ad6ac75ae4a, =5.1.1-staging.0ad6ac75ae4a, =5.0.1-staging.4b92bc7a3e3b, =5.0.1-staging.3abdf9534c25, =2026.6.2, =2026.6.5 and more Source cve...

002-globals (=1.0.0), 007putra-my-bot (=1.1.1) +36331 more potentially affected by CVE-2026-12151 via undici (>=7.0.0 <=7.27.2)

undici NPM version =7.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =0.3.96, =0.0.1, =0.0.9 - 2017-1535 =1.0.0 and more Source cves: CVE-2026-12151 Source advisory: OSV:GHSA-VXPW-J846-P89Q...

0utmailauth (=1.0.0), 0xkobold (>=0.0.1 <=0.8.0) +25979 more potentially affected by CVE-2026-12151 via undici (>=0.3.3 <=6.26.0)

undici NPM version =0.3.3, =0.0.1, =0.2.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =1.0.4 - 5.17task =1.0.0 - 5.18task =1.0.0 and more Source cves: CVE-2026-12151 Source advisory: OSV:GHSA-VXPW-J846-P89Q...

@0xwork/connect (>=0.1.0 <=0.1.9), @1001-digital/components.evm (>=1.3.0 <=3.6.11) +1373 more potentially affected by CVE-2026-9679 via undici (>=8.0.0 <=8.4.1)

undici NPM version =8.0.0, =0.1.0, =1.3.0, =0.1.0, =1.2.2, =0.3.0, =0.3.0, =0.3.1, =5.0.1-staging.3edc9d7b8d6f, =5.0.1-staging.3edc9d7b8d6f, =5.1.1-staging.0ad6ac75ae4a, =5.1.1-staging.0ad6ac75ae4a, =5.0.1-staging.4b92bc7a3e3b, =5.0.1-staging.3abdf9534c25, =2026.6.2, =2026.6.5 and more Source cve...