11057 matches found
@cmmn/tools (>=3.0.0-alpha-1, <=3.0.0-alpha-6), mikr0 (0.1.10) potentially affected by CVE-2026-33808 via @fastify/express (>=4.0.1, <=4.0.2)
@fastify/express NPM version =4.0.1, =3.0.0-alpha-1, =3.0.0-alpha-6 - mikr0 0.1.10 Source cves: CVE-2026-33808 Source advisory: OSV:GHSA-6HW5-45GM-FJ88...
@cmmn/tools (>=3.0.0-alpha-1, <=3.0.0-alpha-6), mikr0 (0.1.10) potentially affected by CVE-2026-33807 +1 more via @fastify/express (>=4.0.1, <=4.0.2)
@fastify/express NPM version =4.0.1, =3.0.0-alpha-1, =3.0.0-alpha-6 - mikr0 0.1.10 Source cves: CVE-2026-33807, CVE-2026-6270 Source advisory: OSV:GHSA-HRWM-HGMJ-7P9C...
@cedarjs/api-server (>=1.0.0-canary.12281, <=9.0.0-canary.1784), @cedarjs/cli (>=1.0.0-canary.12281, <=9.0.0-canary.1784) +23 more potentially affected by CVE-2026-33805 via @fastify/http-proxy (>=11.1.2, <=11.4.3)
@fastify/http-proxy NPM version =11.1.2, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =3.0.0-alpha-1, =0.1.0, =1.0.1, =0.0.1, =1.0.0, =1.0.1, =1.4.4, =1.0.50, =0.0.1, =0.1.65 and more Source cves: CVE-2026-33805 Source advisory:...
@slidev-react/cli (>=0.4.6, <=0.4.14), @slidev-react/node (>=0.4.6, <=0.4.14) potentially affected by CVE-2026-41211 via vite-plus (0.1.11)
vite-plus NPM version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on vite-plus and may be impacted: - @slidev-react/cli =0.4.6, =0.4.6, =0.4.14 Source cves: CVE-2026-41211 Source advisory: OSV:GHSA-33R3-4WHC-44C2...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +549 more potentially affected by unknown CVE via hono (>=4.0.0, <=4.12.12)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-HONO-16080667...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +549 more potentially affected by CVE-2026-56761 via hono (>=4.0.0, <=4.12.12)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: CVE-2026-56761 Source advisory: OSV:GHSA-458J-XX4X-4375...
1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2134 more potentially affected by CVE-2026-41240 via dompurify (>=3.0.0, <=3.3.3)
dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: CVE-2026-41240 Source advisory: SNYK:JS-DOMPURIFY-16078387...
1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2134 more potentially affected by CVE-2026-65903 via dompurify (>=3.0.0, <=3.3.3)
dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: CVE-2026-65903 Source advisory: OSV:GHSA-39Q2-94RC-95CP...
@reldens/server-utils (0.48.0), @sap-ux/ui-components (>=2.1.4, <=2.1.10) +11 more potentially affected by CVE-2026-40186 via sanitize-html (2.17.2)
sanitize-html NPM version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - @reldens/server-utils 0.48.0 - @sap-ux/ui-components =2.1.4, =0.6.17, =0.3.16, =0.1.32, =0.0.31, =0.30.19, =1.0.0-alpha.5, =0.19.3,...
@amedia/brick-mcp (>=0.0.0-vBRAND-20260313141110, <=1.0.3), @area15/ticket-component (0.1.0) +230 more potentially affected by CVE-2025-32442 +1 more via fastify (>=5.3.2, <=5.8.4)
fastify NPM version =5.3.2, =0.0.0-vBRAND-20260313141110, =2.0.1, =1.1.1, =0.6.2, =0.1.1, =0.1.1, =0.6.0, =0.1.1, =0.0.35, =0.0.82, =0.0.1, =0.0.6, =0.1.68, =0.1.0, =0.8.2 and more Source cves: CVE-2025-32442, CVE-2026-33806 Source advisory: OSV:GHSA-247C-9743-5963...
dev.dsf:dsf-bpe-server-jetty (>=1.0.0-m1, <=1.9.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-bpe-server (>=1.0.0, <=1.9.0)
dev.dsf:dsf-bpe-server MAVEN version =1.0.0, =1.0.0-m1, =1.9.0 Source cves: CVE-2026-40939 Source advisory: SNYK:JAVA-DEVDSF-16540564...
dev.dsf:dsf-fhir-server-jetty (>=1.0.0-m1, <=1.9.0), dev.dsf:dsf-tools-test-data-generator (>=1.0.0-m1, <=1.9.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (>=1.0.0, <=1.9.0)
dev.dsf:dsf-fhir-server MAVEN version =1.0.0, =1.0.0-m1, =1.0.0-m1, =1.9.0 Source cves: CVE-2026-40939 Source advisory: SNYK:JAVA-DEVDSF-16540567...
dev.dsf:dsf-bpe-server-jetty (>=1.0.0-m1, <=1.9.0), dev.dsf:dsf-fhir-server-jetty (>=1.0.0-m1, <=1.9.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-common-jetty (>=1.0.0, <=1.9.0)
dev.dsf:dsf-common-jetty MAVEN version =1.0.0, =1.0.0-m1, =1.0.0-m1, =1.9.0 Source cves: CVE-2026-40939 Source advisory: SNYK:JAVA-DEVDSF-16540565...
dev.dsf:dsf-bpe-process-api-v1 (>=1.0.0-m1, <=1.9.0), dev.dsf:dsf-bpe-server (>=1.0.0-m1, <=1.9.0) +10 more potentially affected by CVE-2026-40939 via dev.dsf:dsf-common-auth (>=1.0.0, <=1.9.0)
dev.dsf:dsf-common-auth MAVEN version =1.0.0, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.2.0 Source cves: CVE-2026-40939 Source advisory: SNYK:JAVA-DEVDSF-16540566...
@amitojsingh366/keepkey-hardware-controller (0.0.10), @apsiocoin/protobuf-serialization (0.0.1-alpha1) +176 more potentially affected by CVE-2026-5758 via protocol-buffers-schema (>=3.1.0, <=3.6.0)
protocol-buffers-schema NPM version =3.1.0, =2.0.9, =2.0.7, =2.1.2, =0.0.25, =0.0.19, =2.0.12, =2.0.11, =0.3.0, =0.0.12, =6.1.2, =0.18.4, =0.18.4, =1.16.11, =3.0.1 and more Source cves: CVE-2026-5758 Source advisory: OSV:GHSA-J452-XHG8-QG39...
@amitojsingh366/keepkey-hardware-controller (0.0.10), @apsiocoin/protobuf-serialization (0.0.1-alpha1) +176 more potentially affected by CVE-2026-5758 via protocol-buffers-schema (>=3.1.0, <=3.6.0)
protocol-buffers-schema NPM version =3.1.0, =2.0.9, =2.0.7, =2.1.2, =0.0.25, =0.0.19, =2.0.12, =2.0.11, =0.3.0, =0.0.12, =6.1.2, =0.18.4, =0.18.4, =1.16.11, =3.0.1 and more Source cves: CVE-2026-5758 Source advisory: SNYK:JS-PROTOCOLBUFFERSSCHEMA-16420259...
@cmmn/tools (>=3.0.0-alpha-1, <=3.0.0-alpha-6), mikr0 (0.1.10) potentially affected by CVE-2026-33807 via @fastify/express (>=4.0.1, <=4.0.2)
@fastify/express NPM version =4.0.1, =3.0.0-alpha-1, =3.0.0-alpha-6 - mikr0 0.1.10 Source cves: CVE-2026-33807 Source advisory: SNYK:JS-FASTIFYEXPRESS-16068280...
@cmmn/tools (>=3.0.0-alpha-1, <=3.0.0-alpha-6), mikr0 (0.1.10) potentially affected by CVE-2026-33808 via @fastify/express (>=4.0.1, <=4.0.2)
@fastify/express NPM version =4.0.1, =3.0.0-alpha-1, =3.0.0-alpha-6 - mikr0 0.1.10 Source cves: CVE-2026-33808 Source advisory: SNYK:JS-FASTIFYEXPRESS-16068303...
@cedarjs/api-server (>=1.0.0-canary.12281, <=9.0.0-canary.1784), @cedarjs/cli (>=1.0.0-canary.12281, <=9.0.0-canary.1784) +23 more potentially affected by CVE-2026-33805 via @fastify/http-proxy (>=11.1.2, <=11.4.3)
@fastify/http-proxy NPM version =11.1.2, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =3.0.0-alpha-1, =0.1.0, =1.0.1, =0.0.1, =1.0.0, =1.0.1, =1.4.4, =1.0.50, =0.0.1, =0.1.65 and more Source cves: CVE-2026-33805 Source advisory:...
0uth (>=1.0.5, <=1.2.1), @___d/common (>=1.0.3, <=1.0.27) +2551 more potentially affected by CVE-2026-33806 via fastify (>=4.29.0, <=5.8.4)
fastify NPM version =4.29.0, =1.0.5, =1.0.3, =0.0.3, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =3.0.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.2.0 - @agentspec/sidecar 0.1.0 - @agexhq/hub 1.0.0 - @agrume/cli 3.0.0 and more Source cves: CVE-2026-33806 Source advisory: SNYK:JS-FASTIFY-16066793...
instructlab-sdg (>=0.0.1rc1, <=0.0.1) potentially affected by CVE-2026-6855 via instructlab (0.17.2)
instructlab PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on instructlab and may be impacted: - instructlab-sdg =0.0.1rc1, =0.0.1 Source cves: CVE-2026-6855 Source advisory: SNYK:PYTHON-INSTRUCTLAB-16323380...
@quickguidehealth/connector-logto-novu (>=0.1.0, <=0.1.4) potentially affected by unknown CVE via @novu/api (3.11.0)
@novu/api NPM version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on @novu/api and may be impacted: - @quickguidehealth/connector-logto-novu =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-4X48-CGF9-Q33F...
@semic/testing (2.2.11), @vendure/dashboard (>=3.2.2, <=3.4.4) potentially affected by CVE-2026-40887 via @vendure/core (>=3.0.0, <=3.4.4)
@vendure/core NPM version =3.0.0, =3.2.2, =3.4.4 Source cves: CVE-2026-40887 Source advisory: SNYK:JS-VENDURECORE-16068909...
@semic/testing (2.2.11), @vendure/dashboard (>=3.2.2, <=3.4.4) potentially affected by CVE-2026-40887 via @vendure/core (>=3.0.0, <=3.4.4)
@vendure/core NPM version =3.0.0, =3.2.2, =3.4.4 Source cves: CVE-2026-40887 Source advisory: OSV:GHSA-9PP3-53P2-WW9V...
@grupo-loja/vendure-banner-plugin (1.0.0), @grupo-loja/vendure-conect-envios-plugin (>=1.0.0, <=1.0.1) +54 more potentially affected by CVE-2026-40887 via @vendure/core (>=1.9.5, <=2.2.7)
@vendure/core NPM version =1.9.5, =1.0.0, =0.0.1, =1.0.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.2.4 and more Source cves: CVE-2026-40887 Source advisory: OSV:GHSA-9PP3-53P2-WW9V...
@grupo-loja/vendure-banner-plugin (1.0.0), @grupo-loja/vendure-conect-envios-plugin (>=1.0.0, <=1.0.1) +54 more potentially affected by CVE-2026-40887 via @vendure/core (>=1.9.5, <=2.2.7)
@vendure/core NPM version =1.9.5, =1.0.0, =0.0.1, =1.0.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.2.4 and more Source cves: CVE-2026-40887 Source advisory: SNYK:JS-VENDURECORE-16068909...
@toolsdk.ai/registry (1.0.83), easy-mcp-server (>=1.0.117, <=1.0.118) potentially affected by CVE-2026-39884 via mcp-server-kubernetes (>=2.4.3, <=2.9.9)
mcp-server-kubernetes NPM version =2.4.3, =1.0.117, =1.0.118 Source cves: CVE-2026-39884 Source advisory: SNYK:JS-MCPSERVERKUBERNETES-16083991...
2gis-maps (>=0.0.20, <=4.1.0), 2ndlogiccomponents (>=1.1.0, <=1.5.0) +3282 more potentially affected by CVE-2025-69993 via leaflet (>=0.5.1, <=2.0.0-alpha.1)
leaflet NPM version =0.5.1, =0.0.20, =1.1.0, =0.1.0, =0.1.0, =1.0.44, =3.2.28-beta.0, =3.2.29 and more Source cves: CVE-2025-69993 Source advisory: SNYK:JS-LEAFLET-16427276...
de.digitalcollections:iiif-bookshelf-webapp (>=2.6.2, <=3.1.0), de.digitalcollections:iiif-server-demo (>=2.1.3, <=4.0.6) +25 more potentially affected by CVE-2025-69993 via org.webjars.npm:leaflet (>=0.7.7, <=2.0.0-alpha.1)
org.webjars.npm:leaflet MAVEN version =0.7.7, =2.6.2, =2.1.3, =0.9.0, =1.0.3, =2.0.0 - org.webjars.npm:github-com-cliffcloud-leaflet-easybutton 2.3.0 - org.webjars.npm:github-com-colorlibhq-gentelella- 4.0.0-rc.1 - org.webjars.npm:github-com-commenthol-leaflet-rastercoords 1.0.2 -...
@4via6/relay (>=1.0.0, <=1.1.3), @circleci/agents (>=1.0.6, <=2.3.1) +6 more potentially affected by CVE-2025-61260 via @openai/codex (>=0.1.2504211509, <=0.20.0)
@openai/codex NPM version =0.1.2504211509, =1.0.0, =1.0.6, =0.0.1, =0.23.0, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.0.2 Source cves: CVE-2025-61260 Source advisory: SNYK:JS-OPENAICODEX-16111764...
@4via6/relay (>=1.0.0, <=1.1.3), @circleci/agents (>=1.0.6, <=2.3.1) +6 more potentially affected by CVE-2025-61260 via @openai/codex (>=0.1.2504211509, <=0.20.0)
@openai/codex NPM version =0.1.2504211509, =1.0.0, =1.0.6, =0.0.1, =0.23.0, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.0.2 Source cves: CVE-2025-61260 Source advisory: OSV:GHSA-XRXF-JGV3-QMRM...
a11ywatch_cli (>=0.0.26, <=0.7.16), aap (>=0.4.0, <=0.4.1) +3744 more potentially affected by unknown CVE via rustls-webpki (>=0.100.3, <=0.102.8)
rustls-webpki CARGO version =0.100.3, =0.0.26, =0.4.0, =0.1.0, =0.21.0-alpha.1, =0.1.11, =0.12.1, =0.2.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0099...
a11ywatch_cli (>=0.0.26, <=0.7.16), aap (>=0.4.0, <=0.4.1) +3744 more potentially affected by unknown CVE via rustls-webpki (>=0.100.3, <=0.102.8)
rustls-webpki CARGO version =0.100.3, =0.0.26, =0.4.0, =0.1.0, =0.21.0-alpha.1, =0.1.11, =0.12.1, =0.2.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0098...
air-interpreter-cid (>=0.1.0, <=0.4.0), bellscoin (>=0.28.2, <=0.31.0) +47 more potentially affected by unknown CVE via core2 (>=0.3.3, <=0.4.0)
core2 CARGO version =0.3.3, =0.1.0, =0.28.2, =0.7.0, =2.3.0, =0.1.4, =0.3.0, =0.1.2, =2.1.0, =22.9.29 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0105...
com.argusoft:medplat_core (>=0.0.1, <=0.0.25), com.argusoft:medplat_lms (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2026-23907 +1 more via org.apache.pdfbox:pdfbox-examples (2.0.21)
org.apache.pdfbox:pdfbox-examples MAVEN version 2.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pdfbox:pdfbox-examples and may be impacted: - com.argusoft:medplatcore =0.0.1, =0.0.1, =0.0.1, =0.0.11 Source cves: CVE-2026-23907,...
-lidonghui (1.0.0), -test-bitbucket-branch-manager (1.0.1) +60210 more potentially affected by CVE-2026-40895 via follow-redirects (>=1.0.0, <=1.15.11)
follow-redirects NPM version =1.0.0, =1.0.1, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - 03-asenkronsdasdsadavehttprequest 1.0.0 - 04-17 1.0.0 - 04-17zy 1.0.0 - 04-a 1.0.0 and more Source cves: CVE-2026-40895 Source advisory: SNYK:JS-FOLLOWREDIRECTS-16032162...
-lidonghui (1.0.0), -test-bitbucket-branch-manager (1.0.1) +60210 more potentially affected by CVE-2026-40895 via follow-redirects (>=1.0.0, <=1.15.11)
follow-redirects NPM version =1.0.0, =1.0.1, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - 03-asenkronsdasdsadavehttprequest 1.0.0 - 04-17 1.0.0 - 04-17zy 1.0.0 - 04-a 1.0.0 and more Source cves: CVE-2026-40895 Source advisory: OSV:GHSA-R4Q5-VMMM-2653...
dist_corr (>=0.1.0, <=0.1.1), mcproto (>=0.1.0, <=0.1.2) +4 more potentially affected by unknown CVE via rand (0.10.0-rc.8)
rand CARGO version 0.10.0-rc.8 is affected by a known vulnerability. The following packages have a transitive dependency on rand and may be impacted: - distcorr =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.5.7, =0.6.0 - randdistr 0.6.0-rc.0 Source cves: unknown CVE Source advisory: OSV:GHSA-CQ8V-F236-94QC...
a3mo_lib (>=0.1.0, <=0.1.1), abacuz (>=0.1.0, <=0.1.1) +10179 more potentially affected by unknown CVE via rand (>=0.7.0-pre.2, <=0.8.5)
rand CARGO version =0.7.0-pre.2, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.2.0-beta.4, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.44, =0.0.5, =0.0.5, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CQ8V-F236-94QC...
auth_service_dhz (0.1.9), bin-proto (>=0.9.1, <=0.12.6) +9 more potentially affected by unknown CVE via rand (>=0.9.0, <=0.9.2)
rand CARGO version =0.9.0, =0.9.1, =0.1.0, =0.14.0, =0.1.0, =1.3.0, =2.1.0, =0.5.0-alpha.0, =0.8.6, =0.1.2, =0.3.3 Source cves: unknown CVE Source advisory: OSV:GHSA-CQ8V-F236-94QC...
@artur-abliazimov/othentic-cli (1.16.6), @darraghor/nest-backend-libs (>=3.8.8, <=5.0.11) +21 more potentially affected by CVE-2026-40879 via @nestjs/microservices (>=11.0.1, <=11.1.18)
@nestjs/microservices NPM version =11.0.1, =3.8.8, =11.0.36, =1.0.0, =1.0.11, =1.0.23, =1.0.1, =1.0.1, =11.0.0, =0.7.0, =1.0.4, =1.0.36, =1.1.0, =1.0.0, =1.9.1, =1.16.9 and more Source cves: CVE-2026-40879 Source advisory: OSV:GHSA-HPWF-8G29-85QM...
@artur-abliazimov/othentic-cli (1.16.6), @darraghor/nest-backend-libs (>=3.8.8, <=5.0.11) +21 more potentially affected by CVE-2026-40879 via @nestjs/microservices (>=11.0.1, <=11.1.18)
@nestjs/microservices NPM version =11.0.1, =3.8.8, =11.0.36, =1.0.0, =1.0.11, =1.0.23, =1.0.1, =1.0.1, =11.0.0, =0.7.0, =1.0.4, =1.0.36, =1.1.0, =1.0.0, =1.9.1, =1.16.9 and more Source cves: CVE-2026-40879 Source advisory: SNYK:JS-NESTJSMICROSERVICES-16082546...
dbgate-serve (>=7.1.3-alpha.3, <=7.1.4), dbmodel (>=7.1.3-alpha.3, <=7.1.4) potentially affected by CVE-2026-6216 via dbgate-web (>=7.1.3-alpha.3, <=7.1.4-alpha.2)
dbgate-web NPM version =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.4 Source cves: CVE-2026-6216 Source advisory: OSV:GHSA-J8J5-7R4H-VJ2G...
dbgate-serve (>=7.1.3-alpha.3, <=7.1.4), dbmodel (>=7.1.3-alpha.3, <=7.1.4) potentially affected by CVE-2026-6216 via dbgate-web (>=7.1.3-alpha.3, <=7.1.4-alpha.2)
dbgate-web NPM version =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.4 Source cves: CVE-2026-6216 Source advisory: SNYK:JS-DBGATEWEB-16083995...
coopihc-modelchecks (0.1.0), iperturb (0.2.0) potentially affected by CVE-2026-31048 via pyro (3.16.0)
pyro PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyro and may be impacted: - coopihc-modelchecks 0.1.0 - iperturb 0.2.0 Source cves: CVE-2026-31048 Source advisory: SNYK:PYTHON-PYRO-16428622...
3extensions (1.0.1), @51jbs/incremental-coverage-plugin (1.0.5) +606 more potentially affected by CVE-2022-25860 +1 more via simple-git (>=3.0.3, <=3.31.1)
simple-git NPM version =3.0.3, =1.0.1, =1.0.1, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =23.0.0, =35.0.0, =1.4.0, =0.1.5-alpha.0, =1.0.2, =8.7.2, =39.0.2, =39.0.3 and more Source cves: CVE-2022-25860, CVE-2026-28291 Source advisory: SNYK:JS-SIMPLEGIT-16032290...
3extensions (1.0.1), @51jbs/incremental-coverage-plugin (1.0.5) +606 more potentially affected by CVE-2026-28291 via simple-git (>=3.0.3, <=3.31.1)
simple-git NPM version =3.0.3, =1.0.1, =1.0.1, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =23.0.0, =35.0.0, =1.4.0, =0.1.5-alpha.0, =1.0.2, =8.7.2, =39.0.2, =39.0.3 and more Source cves: CVE-2026-28291 Source advisory: OSV:GHSA-JCXM-M3JX-F287...
org.webjars.npm:g-status (2.0.2), org.webjars.npm:graphql-toolkit__git-loader (0.7.5) potentially affected by CVE-2022-25860 +1 more via org.webjars.npm:simple-git (>=1.129.0, <=1.132.0)
org.webjars.npm:simple-git MAVEN version =1.129.0, =1.132.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:simple-git and may be impacted: - org.webjars.npm:g-status 2.0.2 - org.webjars.npm:graphql-toolkitgit-loader 0.7.5 Source cves:...
liteyukibot-v7-runtime-astrbot (>=0.1.0a1, <=0.1.0a7) potentially affected by CVE-2026-6119 via astrbot (>=4.27.2, <=4.27.4)
astrbot PYPI version =4.27.2, =0.1.0a1, =0.1.0a7 Source cves: CVE-2026-6119 Source advisory: SNYK:PYTHON-ASTRBOT-16427727...
liteyukibot-v7-runtime-astrbot (>=0.1.0a1, <=0.1.0a7) potentially affected by CVE-2026-6118 via astrbot (>=4.27.2, <=4.27.4)
astrbot PYPI version =4.27.2, =0.1.0a1, =0.1.0a7 Source cves: CVE-2026-6118 Source advisory: SNYK:PYTHON-ASTRBOT-16427898...