@codeanywhere/theia-plugin-ext (>=1.11.0, <=1.11.4), @devpodio/github-extension (1.0.0) +142 more potentially affected by CVE-2026-60009 via @theia/filesystem (>=1.0.0, <=1.73.1)

@theia/filesystem NPM version =1.0.0, =1.11.0, =0.1.7, =0.0.1-1585667205, =0.8.0-next.6917503, =0.0.1-next.20220331.125641, =0.0.5, =0.1.0-alpha.3ddb00f8, =0.2.0-next.25250370, =0.7.1, =0.9.1 - @pivotal-tools/theia-languageclient 0.0.5-alpha and more Source cves: CVE-2026-60009 Source advisory:...

@ccfly/setup (0.1.16) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.16)

@ccfly/setup-darwin-x64 NPM version 0.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.16 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.7) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.7)

@ccfly/setup-darwin-x64 NPM version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.7 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.9) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.9)

@ccfly/setup-darwin-x64 NPM version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.6) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.6)

@ccfly/setup-darwin-x64 NPM version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.1) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.1)

@ccfly/setup-darwin-x64 NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.15) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.15)

@ccfly/setup-darwin-x64 NPM version 0.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.15 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.14) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.14)

@ccfly/setup-darwin-x64 NPM version 0.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.14 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.8) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.8)

@ccfly/setup-darwin-x64 NPM version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.8 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.3) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.3)

@ccfly/setup-darwin-x64 NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.13) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.13)

@ccfly/setup-darwin-x64 NPM version 0.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.13 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

new-native-tools (>=3.1.43-as2-9980-421-1785848450, <=3.1.43) potentially affected by unknown CVE via new-native-tools-linux-x64-gnu (3.1.43)

new-native-tools-linux-x64-gnu NPM version 3.1.43 is affected by a known vulnerability. The following packages have a transitive dependency on new-native-tools-linux-x64-gnu and may be impacted: - new-native-tools =3.1.43-as2-9980-421-1785848450, =3.1.43 Source cves: unknown CVE Source advisory:...

new-native-tools (>=3.1.42-as2-9980-418-1785845663, <=3.1.42-origin-chrom-468-delete-windows-32-bit-changelog-fix-416-1785842977) potentially affected by unknown CVE via new-native-tools-linux-x64-gnu (3.1.42)

new-native-tools-linux-x64-gnu NPM version 3.1.42 is affected by a known vulnerability. The following packages have a transitive dependency on new-native-tools-linux-x64-gnu and may be impacted: - new-native-tools =3.1.42-as2-9980-418-1785845663,...

tailwind-animate-css-plugin (4.0.3) potentially affected by unknown CVE via postcss-animate-css-vars (2.0.3)

postcss-animate-css-vars NPM version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on postcss-animate-css-vars and may be impacted: - tailwind-animate-css-plugin 4.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12418...

01-dev (1.0.0), 04-musicplayer (1.0.0) +1338 more potentially affected by CVE-2026-71215 via art-template (>=2.0.2, <=4.13.4)

art-template NPM version =2.0.2, =1.0.0, =0.0.1, =1.0.0, =0.0.1-alpha.1, =1.0.2-alpha.3, =1.0.0-alpha.1, =1.0.3-alpha.3, =1.1.4-alpha.1, =1.0.0-alpha.1, =0.1.0-alpha.1, =0.0.1-alpha.1, =0.0.2-alpha.13 and more Source cves: CVE-2026-71215 Source advisory: SNYK:JS-ARTTEMPLATE-18533449...

@ccfly/setup (0.1.7) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.7)

@ccfly/setup-darwin-arm64 NPM version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.7 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.14) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.14)

@ccfly/setup-darwin-arm64 NPM version 0.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.14 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.2) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.2)

@ccfly/setup-darwin-arm64 NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.13) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.13)

@ccfly/setup-darwin-arm64 NPM version 0.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.13 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.10) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.10)

@ccfly/setup-darwin-arm64 NPM version 0.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.10 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.5) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.5)

@ccfly/setup-darwin-arm64 NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.20) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.20)

@ccfly/setup-darwin-arm64 NPM version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.20 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.8) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.8)

@ccfly/setup-darwin-arm64 NPM version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.8 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

@ccfly/setup (0.1.9) potentially affected by unknown CVE via @ccfly/setup-darwin-arm64 (0.1.9)

@ccfly/setup-darwin-arm64 NPM version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-arm64 and may be impacted: - @ccfly/setup 0.1.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12084...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70593 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70593 Source advisory: SNYK:JS-GHOST-18601956...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70593 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70593 Source advisory: OSV:GHSA-CJC9-Q5GF-327P...

sign-alex (1.0.1) potentially affected by CVE-2026-70592 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-70592 Source advisory: OSV:GHSA-CJ62-HVV2-2Q5H...

sign-alex (1.0.1) potentially affected by CVE-2026-70592 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-70592 Source advisory: SNYK:JS-GHOST-18612530...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70591 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70591 Source advisory: SNYK:JS-GHOST-18610058...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70591 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70591 Source advisory: OSV:GHSA-GCVV-72Q8-9V76...

@24hr/content-next (>=1.0.0, <=3.0.18), @24hr/natswrapper (>=1.0.0, <=1.0.20) +339 more potentially affected by CVE-2026-69240 via sequelize (>=6.0.0-beta.4, <=6.37.3)

sequelize NPM version =6.0.0-beta.4, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =15.0.0, =1.0.0, =1.0.43, =0.13.0, =5.0.0-alpha.3, =13.0.7-feature-244b53-kvkvw2nk, =1.0.63, =1.0.2, =1.1.3 and more Source cves: CVE-2026-69240 Source advisory: SNYK:JS-SEQUELIZE-18517006...

@24hr/content-next (>=1.0.0, <=3.0.18), @24hr/natswrapper (>=1.0.0, <=1.0.20) +339 more potentially affected by CVE-2026-69240 via sequelize (>=6.0.0-beta.4, <=6.37.3)

sequelize NPM version =6.0.0-beta.4, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =15.0.0, =1.0.0, =1.0.43, =0.13.0, =5.0.0-alpha.3, =13.0.7-feature-244b53-kvkvw2nk, =1.0.63, =1.0.2, =1.1.3 and more Source cves: CVE-2026-69240 Source advisory: OSV:GHSA-V8FG-2RW7-Q452...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +731 more potentially affected by CVE-2026-69207 via hono (>=4.0.0, <=4.12.33)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.30.7 and more Source cves: CVE-2026-69207 Source advisory: SNYK:JS-HONO-18517010...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +731 more potentially affected by CVE-2026-69207 via hono (>=4.0.0, <=4.12.33)

hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.17.0, =0.2.0, =0.4.0, =0.30.7 and more Source cves: CVE-2026-69207 Source advisory: OSV:GHSA-8J4G-W8FX-2239...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @activepieces/piece-apify (0.2.1) +128 more potentially affected by CVE-2026-69192 via ip-address (>=10.0.1, <=10.2.0)

ip-address NPM version =10.0.1, =0.3.1, =0.0.2, =9.9.0-ruixiang.1, =1.1.0-dev-0d04f54.1, =1.78.0-rc.0, =3.3.0, =0.2.0-beta.4, =0.3.0-beta.1, =1.0.35, =1.0.31, =7.0.0-canary.2, =7.5.9 and more Source cves: CVE-2026-69192 Source advisory: SNYK:JS-IPADDRESS-18516623...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @activepieces/piece-apify (0.2.1) +128 more potentially affected by CVE-2026-69192 via ip-address (>=10.0.1, <=10.2.0)

ip-address NPM version =10.0.1, =0.3.1, =0.0.2, =9.9.0-ruixiang.1, =1.1.0-dev-0d04f54.1, =1.78.0-rc.0, =3.3.0, =0.2.0-beta.4, =0.3.0-beta.1, =1.0.35, =1.0.31, =7.0.0-canary.2, =7.5.9 and more Source cves: CVE-2026-69192 Source advisory: OSV:GHSA-MWP4-54F8-5FHR...

@aikidosec/broker-client (>=1.0.47, <=1.0.49), @kirick/ip (0.2.1) +4 more potentially affected by CVE-2026-69198 via ip-address (>=10.1.1, <=10.2.0)

ip-address NPM version =10.1.1, =1.0.47, =0.6.0, =2.0.0, =0.1.3, =7.6.5-beta.0, =8.0.3 Source cves: CVE-2026-69198 Source advisory: SNYK:JS-IPADDRESS-18516625...

@aikidosec/broker-client (>=1.0.47, <=1.0.49), @kirick/ip (0.2.1) +4 more potentially affected by CVE-2026-69198 via ip-address (>=10.1.1, <=10.2.0)

ip-address NPM version =10.1.1, =1.0.47, =0.6.0, =2.0.0, =0.1.3, =7.6.5-beta.0, =8.0.3 Source cves: CVE-2026-69198 Source advisory: OSV:GHSA-4XRF-JV44-H6HH...

@aikidosec/broker-client (>=1.0.47, <=1.0.49), @kirick/ip (0.2.1) +4 more potentially affected by CVE-2026-54272 via ip-address (>=10.1.1, <=10.2.0)

ip-address NPM version =10.1.1, =1.0.47, =0.6.0, =2.0.0, =0.1.3, =7.6.5-beta.0, =8.0.3 Source cves: CVE-2026-54272 Source advisory: OSV:GHSA-22JQ-VG5J-6VGG...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +915 more potentially affected by CVE-2026-15157 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-15157 Source advisory: OSV:GHSA-M8RV-5G2X-5CG5...

@0x0.bug/pi-coding-agent (1.0.0), @0xwork/connect (>=0.1.0, <=0.1.9) +1141 more potentially affected by CVE-2026-15157 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =2026.6.2, =2026.6.5 and more Source cves: CVE-2026-15157 Source...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2167 more potentially affected by CVE-2026-15157 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =1.10.0-release and more Source cves: CVE-2026-15157 Source advisory: OSV:GHSA-M8RV-5G2X-5CG5...

@0x0.bug/pi-coding-agent (1.0.0), @0xwork/connect (>=0.1.0, <=0.1.9) +1141 more potentially affected by CVE-2026-14643 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =2026.6.2, =2026.6.5 and more Source cves: CVE-2026-14643 Source...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +915 more potentially affected by CVE-2026-14643 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-14643 Source advisory: OSV:GHSA-JR45-8VMC-QM54...

@0x0.bug/pi-coding-agent (1.0.0), @0xwork/connect (>=0.1.0, <=0.1.9) +1141 more potentially affected by CVE-2026-16729 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =2026.6.2, =2026.6.5 and more Source cves: CVE-2026-16729 Source...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2167 more potentially affected by CVE-2026-16729 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =1.10.0-release and more Source cves: CVE-2026-16729 Source advisory: OSV:GHSA-V3R7-H72X-CJCM...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +915 more potentially affected by CVE-2026-16729 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-16729 Source advisory: OSV:GHSA-V3R7-H72X-CJCM...

@0x0.bug/pi-coding-agent (1.0.0), @0xwork/connect (>=0.1.0, <=0.1.9) +1141 more potentially affected by CVE-2026-16728 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =2026.6.2, =2026.6.5 and more Source cves: CVE-2026-16728 Source...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +915 more potentially affected by CVE-2026-16728 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-16728 Source advisory: OSV:GHSA-8XCM-R25X-G524...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2167 more potentially affected by CVE-2026-16728 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =2.7.0, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =1.10.0-release and more Source cves: CVE-2026-16728 Source advisory: OSV:GHSA-8XCM-R25X-G524...