@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-33665 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-33665 Source advisory: OSV:GHSA-C545-X2RH-82FC...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-33663 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-33663 Source advisory: OSV:GHSA-M63J-689W-3J35...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-33660 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-33660 Source advisory: OSV:GHSA-58QR-RCGV-642V...

@actinc/eslint-config (>=4.10.0 <=4.16.0), @alexgorbatchev/dotfiles (>=0.0.1 <=1.0.1) +298 more potentially affected by unknown CVE via smol-toml (>=1.1.2 <=1.6.0)

smol-toml NPM version =1.1.2, =4.10.0, =0.0.1, =2.8.0, =0.1.0-alpha.0, =0.2.2, =0.32.3, =0.2.2, =1.0.0, =0.1.3, =1.0.30, =0.2.0, =0.0.4, =0.0.4, =0.0.4, =9.0.0-canary.1784 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V3RJ-XJV7-4JMQ...

@actinc/eslint-config (>=4.10.0 <=4.16.0), @alexgorbatchev/dotfiles (>=0.0.1 <=1.0.1) +298 more potentially affected by unknown CVE via smol-toml (>=1.1.2 <=1.6.0)

smol-toml NPM version =1.1.2, =4.10.0, =0.0.1, =2.8.0, =0.1.0-alpha.0, =0.2.2, =0.32.3, =0.2.2, =1.0.0, =0.1.3, =1.0.30, =0.2.0, =0.0.4, =0.0.4, =0.0.4, =9.0.0-canary.1784 and more Source cves: unknown CVE Source advisory: SNYK:JS-SMOLTOML-15768230...

care.better.pf4j:pf4j-kotlin-symbol-processing (>=2.1.0-1.0.2 <=2.3.10-1.0.4), cn.sliew:carp-dist (>=0.0.1 <=0.0.34) +563 more potentially affected by CVE-2025-70952 via org.pf4j:pf4j (>=3.0.1 <=3.14.0)

org.pf4j:pf4j MAVEN version =3.0.1, =2.1.0-1.0.2, =0.0.1, =0.0.42, =0.0.63, =0.0.64, =0.0.66, =0.0.63, =0.0.49, =0.0.61, =0.0.61, =0.0.13, =0.0.1, =0.0.33, =0.0.33, =0.0.33, =0.0.34 and more Source cves: CVE-2025-70952 Source advisory: SNYK:JAVA-ORGPF4J-15766713...

@0dotxyz/p0-ts-sdk (>=2.1.1 <=2.2.0-alpha.4), @1stg/app-config (>=4.0.0 <=9.0.1) +2372 more potentially affected by CVE-2026-33532 via yaml (>=2.0.0 <=2.8.2)

yaml NPM version =2.0.0, =2.1.1, =4.0.0, =4.2.0, =6.0.0, =0.0.3, =1.0.0, =7.0.0, =0.1.0-alpha.1, =0.24.1-20230627140514, =0.25.1-20250326172337, =0.24.1-20230627140514, =3.25.5, =3.10.2-20230627150207, =3.14.1-20230608124329, =3.32.1 and more Source cves: CVE-2026-33532 Source advisory:...

@0xgraph/cli (>=0.0.1 <=0.2.1), @7speck/logger (>=1.0.2 <=1.0.3) +801 more potentially affected by CVE-2026-33532 via yaml (>=1.0.0 <=1.10.2)

yaml NPM version =1.0.0, =0.0.1, =1.0.2, =1.0.1, =0.0.1, =0.0.0-nightly-20240619-f62ef04, =1.8.29, =1.0.0, =10.1.0, =8.0.4, =7.4.0, =1.0.0, =0.0.10, =4.1.16, =1.0.3, =0.6.6, =0.12.8 and more Source cves: CVE-2026-33532 Source advisory: OSV:GHSA-48C2-RRV3-QJMP...

@0dotxyz/p0-ts-sdk (>=2.1.1 <=2.2.0-alpha.4), @1stg/app-config (>=4.0.0 <=9.0.1) +2372 more potentially affected by CVE-2026-33532 via yaml (>=2.0.0 <=2.8.2)

yaml NPM version =2.0.0, =2.1.1, =4.0.0, =4.2.0, =6.0.0, =0.0.3, =1.0.0, =7.0.0, =0.1.0-alpha.1, =0.24.1-20230627140514, =0.25.1-20250326172337, =0.24.1-20230627140514, =3.25.5, =3.10.2-20230627150207, =3.14.1-20230608124329, =3.32.1 and more Source cves: CVE-2026-33532 Source advisory:...

@0xgraph/cli (>=0.0.1 <=0.2.1), @7speck/logger (>=1.0.2 <=1.0.3) +801 more potentially affected by CVE-2026-33532 via yaml (>=1.0.0 <=1.10.2)

yaml NPM version =1.0.0, =0.0.1, =1.0.2, =1.0.1, =0.0.1, =0.0.0-nightly-20240619-f62ef04, =1.8.29, =1.0.0, =10.1.0, =8.0.4, =7.4.0, =1.0.0, =0.0.10, =4.1.16, =1.0.3, =0.6.6, =0.12.8 and more Source cves: CVE-2026-33532 Source advisory: SNYK:JS-YAML-15765520...

01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +2049 more potentially affected by CVE-2026-33699 via pypdf (>=6.0.0 <=6.9.1)

pypdf PYPI version =6.0.0, =0.0.5, =0.1.0, =0.0.1, =0.4.1, =0.3.6, =0.2.5, =0.0.2, =0.2.0, =1.2.27, =0.1.0, =0.6.0, =1.2.32, =1.0.1, =0.2.5, =0.2.10 and more Source cves: CVE-2026-33699 Source advisory: SNYK:PYTHON-PYPDF-15766701...

01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +2569 more potentially affected by CVE-2026-33699 via pypdf (>=3.10.0 <=6.9.1)

pypdf PYPI version =3.10.0, =0.0.5, =0.1.0, =0.0.1, =0.4.1, =0.3.6, =0.2.5, =0.0.2, =0.2.0, =1.2.27, =0.1.0, =0.6.0, =1.2.32, =2.0.2 and more Source cves: CVE-2026-33699 Source advisory: OSV:GHSA-87MJ-5GGW-8QC3...

@brainbase-ai/action-read (=0.0.1), @brainbase-ai/actions (>=3.2.105 <=3.2.107) +71 more potentially affected by CVE-2026-26831 via textract (>=1.1.1 <=2.5.0)

textract NPM version =1.1.1, =3.2.105, =0.0.0, =0.0.0, =0.0.0, =0.0.15, =0.0.0, =0.0.0, =0.1.0, =1.0.0, =1.0.0, =0.1.1, =0.7.0, =0.17.0 and more Source cves: CVE-2026-26831 Source advisory: SNYK:JS-TEXTRACT-15874118...

@aaquib/whatsasenanpm (=1.3.5), @alexandersen01/sharepoint-mcp-server-better (=0.3.23) +86 more potentially affected by CVE-2026-26832 via node-tesseract-ocr (>=0.1.0 <=2.2.1)

node-tesseract-ocr NPM version =0.1.0, =1.0.10, =0.0.1, =2.3.50, =2.0.0, =0.0.1, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-26832 Source advisory: SNYK:JS-NODETESSERACTOCR-15874141...

@seafile/seafile-sdoc-editor (>=3.0.0 <=3.0.177) potentially affected by CVE-2026-30587 via @seafile/sdoc-editor (=3.0.177)

@seafile/sdoc-editor NPM version =3.0.177 is affected by a known vulnerability. The following packages have a transitive dependency on @seafile/sdoc-editor and may be impacted: - @seafile/seafile-sdoc-editor =3.0.0, =3.0.177 Source cves: CVE-2026-30587 Source advisory:...

@seafile/seafile-sdoc-editor (>=3.0.0 <=3.0.177) potentially affected by CVE-2026-30587 via @seafile/sdoc-editor (=3.0.177)

@seafile/sdoc-editor NPM version =3.0.177 is affected by a known vulnerability. The following packages have a transitive dependency on @seafile/sdoc-editor and may be impacted: - @seafile/seafile-sdoc-editor =3.0.0, =3.0.177 Source cves: CVE-2026-30587 Source advisory: OSV:GHSA-RQJ3-X344-QVXC...

@seafile/sdoc-editor (=0.2.13), @seafile/seafile-sdoc-editor (>=2.0.43-test-0.0.4 <=2.0.45-test-0.0.4) +1 more potentially affected by CVE-2026-30587 via @seafile/sdoc-editor (>=0.2.12 <=2.0.128-test-0.0.2)

@seafile/sdoc-editor NPM version =0.2.12, =2.0.43-test-0.0.4, =6.0.19, =6.0.33 Source cves: CVE-2026-30587 Source advisory: OSV:GHSA-RQJ3-X344-QVXC...

aero.albers.osmbse:mdzip-process-sources-maven-plugin (=0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (=0.0.1) +24031 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=1.0.4 <=3.6.0)

org.codehaus.plexus:plexus-utils MAVEN version =1.0.4, =0.1, =0.1.0, =0.0.1, =0.0.6, =0.1.10, =0.1.3, =0.0.1, =0.0.1, =0.2.0, =0.1.3, =0.1.3, =0.1.5 - ai.pipestream:pipestream-engine =0.0.6 - ai.pipestream:pipestream-engine-kafka-sidecar =0.0.2 and more Source cves: CVE-2025-67030 Source advisory...

at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1 <=9.1.3.2), au.com.acegi:xml-format-maven-plugin (>=4.0.1 <=4.1.0) +2006 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=4.0.0 <=4.0.2)

org.codehaus.plexus:plexus-utils MAVEN version =4.0.0, =9.1.1, =4.0.1, =0.0.1, =0.0.9, =0.4.0, =0.0.0, =1.9.2, =1.0.0-M5, =1.0.0-M6, =1.0.0-M1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =1.0.0-M10 and more Source cves: CVE-2025-67030 Source advisory: OSV:GHSA-6FMV-XXPF-W3CW...

@brainbase-ai/action-read (=0.0.1), @brainbase-ai/actions (>=3.2.105 <=3.2.107) +71 more potentially affected by CVE-2026-26831 via textract (>=1.1.1 <=2.5.0)

textract NPM version =1.1.1, =3.2.105, =0.0.0, =0.0.0, =0.0.0, =0.0.15, =0.0.0, =0.0.0, =0.1.0, =1.0.0, =1.0.0, =0.1.1, =0.7.0, =0.17.0 and more Source cves: CVE-2026-26831 Source advisory: OSV:GHSA-9PCJ-M5RR-P28G...

allbot (>=0.1.1 <=0.1.70), multi-rest (>=1.3.0-1 <=1.4.5) potentially affected by CVE-2026-26833 via thumbler (=1.1.2)

thumbler NPM version =1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on thumbler and may be impacted: - allbot =0.1.1, =1.3.0-1, =1.4.5 Source cves: CVE-2026-26833 Source advisory: OSV:GHSA-MVHF-547C-H55R...

@aaquib/whatsasenanpm (=1.3.5), @alexandersen01/sharepoint-mcp-server-better (=0.3.23) +86 more potentially affected by CVE-2026-26832 via node-tesseract-ocr (>=0.1.0 <=2.2.1)

node-tesseract-ocr NPM version =0.1.0, =1.0.10, =0.0.1, =2.3.50, =2.0.0, =0.0.1, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-26832 Source advisory: OSV:GHSA-8J44-735H-W4W2...

@11ty/eleventy (=3.0.0-alpha.16), @agiflowai/aicode-toolkit (>=0.6.0 <=1.0.24) +60 more potentially affected by CVE-2026-33287 via liquidjs (>=10.10.0 <=10.24.0)

liquidjs NPM version =10.10.0, =0.6.0, =0.1.0, =0.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0, =3.11.0, =3.11.0, =1.1.0, =15.0.0, =34.0.0 - @fahami/directus-pkce =1.0.0 and more Source cves: CVE-2026-33287 Source advisory: OSV:GHSA-6Q5M-63H6-5X4V...

@11ty/eleventy (=3.0.0-alpha.16), @agiflowai/aicode-toolkit (>=0.6.0 <=1.0.24) +60 more potentially affected by CVE-2026-33285 via liquidjs (>=10.10.0 <=10.24.0)

liquidjs NPM version =10.10.0, =0.6.0, =0.1.0, =0.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0, =3.11.0, =3.11.0, =1.1.0, =15.0.0, =34.0.0 - @fahami/directus-pkce =1.0.0 and more Source cves: CVE-2026-33285 Source advisory: OSV:GHSA-9R5M-9576-7F6X...

@grackle-ai/cli (>=0.0.2 <=0.138.1) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2 <=0.70.5)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.138.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840331...

@grackle-ai/cli (>=0.0.2 <=0.138.1) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2 <=0.70.4)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.138.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840037...

@grackle-ai/cli (>=0.0.2 <=0.138.1) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2 <=0.70.4)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.138.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840038...

@grackle-ai/cli (>=0.0.2 <=0.138.1) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2 <=0.70.2)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.138.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840352...

@grackle-ai/cli (>=0.0.2 <=0.138.1) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2 <=0.70.0)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.138.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840033...

modoboa-automua (=1.0.0), modoboa-contacts (>=0.8.0 <=0.9.3) +1 more potentially affected by CVE-2026-27602 via modoboa (>=1.17.0 <=2.3.6)

modoboa PYPI version =1.17.0, =0.8.0, =1.4.0, =1.6.3 Source cves: CVE-2026-27602 Source advisory: OSV:GHSA-WWV8-CQPR-VX3M...

modoboa-contacts (>=0.8.0 <=0.9.3), modoboa-radicale (>=1.4.0 <=1.6.3) potentially affected by CVE-2026-27602 via modoboa (=2.3.6)

modoboa PYPI version =2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-contacts =0.8.0, =1.4.0, =1.6.3 Source cves: CVE-2026-27602 Source advisory: SNYK:PYTHON-MODOBOA-15766702...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-27496 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-27496 Source advisory: OSV:GHSA-XVH5-5QG4-X9QP...

0lever-utils (>=0.0.2 <=0.0.7), 128autograder (>=5.0.1 <=6.0.0rc4) +14749 more potentially affected by CVE-2026-25645 via requests (>=0.13.7 <=2.32.5)

requests PYPI version =0.13.7, =0.0.2, =5.0.1, =0.3.0, =0.0.1a0, =0.1.1001, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-mailx =0.1.0 - a16z =0.0.1 and more Source cves: CVE-2026-25645 Source advisory: OSV:GHSA-GC5V-M9X4-R6X2...

0lever-utils (>=0.0.2 <=0.0.7), 128autograder (>=5.0.1 <=6.0.0rc4) +14743 more potentially affected by CVE-2026-25645 via requests (>=2.0.0 <=2.32.5)

requests PYPI version =2.0.0, =0.0.2, =5.0.1, =0.3.0, =0.0.1a0, =0.1.1001, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-mailx =0.1.0 - a16z =0.0.1 and more Source cves: CVE-2026-25645 Source advisory: SNYK:PYTHON-REQUESTS-15763443...

@edropin/canvas (>=1.1.0 <=2.0.0), @launchtray/hatch-test-pdf (>=0.11.2 <=0.23.0-alpha.17) +15 more potentially affected by CVE-2026-26830 via pdf-image (>=1.1.0 <=2.0.0)

pdf-image NPM version =1.1.0, =1.1.0, =0.11.2, =0.2.0, =0.0.2, =0.13.0-beta.1, =0.0.2, =0.0.12, =0.19.5, =0.0.2, =0.1.1, =0.3.0, =0.1.1, =1.0.0, =1.0.0, =1.0.5 and more Source cves: CVE-2026-26830 Source advisory: OSV:GHSA-Q5MH-72XG-628W...

@aokyra/baileys (=2.0.6), @arceos/baileys (>=10.0.0 <=10.0.4) +76 more potentially affected by unknown CVE via @shennmine/libsignal-node (=0.0.1-security)

@shennmine/libsignal-node NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @shennmine/libsignal-node and may be impacted: - @aokyra/baileys =2.0.6 - @arceos/baileys =10.0.0, =0.1.1, =2.0.3, =1.0.0, =1.0.0, =1.0.3, =1.0.6,...

@aokyra/baileys (=2.0.6), @arceos/baileys (>=10.0.0 <=10.0.4) +76 more potentially affected by unknown CVE via @shennmine/libsignal-node (=0.0.1-security)

@shennmine/libsignal-node NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @shennmine/libsignal-node and may be impacted: - @aokyra/baileys =2.0.6 - @arceos/baileys =10.0.0, =0.1.1, =2.0.3, =1.0.0, =1.0.0, =1.0.3, =1.0.6,...

aero.albers.osmbse:mdzip-process-sources-maven-plugin (=0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (=0.0.1) +17566 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=3.0 <=3.6.0)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1, =0.1.0, =0.0.1, =0.0.6, =0.1.10, =0.1.3, =0.0.1, =0.0.1, =0.2.0, =0.1.3, =0.1.3, =0.1.5 - ai.pipestream:pipestream-engine =0.0.6 - ai.pipestream:pipestream-engine-kafka-sidecar =0.0.2 and more Source cves: CVE-2025-67030 Source advisory:...

at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1 <=9.1.3.2), au.com.acegi:xml-format-maven-plugin (>=4.0.1 <=4.1.0) +2006 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=4.0.0 <=4.0.2)

org.codehaus.plexus:plexus-utils MAVEN version =4.0.0, =9.1.1, =4.0.1, =0.0.1, =0.0.9, =0.4.0, =0.0.0, =1.9.2, =1.0.0-M5, =1.0.0-M6, =1.0.0-M1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =1.0.0-M10 and more Source cves: CVE-2025-67030 Source advisory: SNYK:JAVA-ORGCODEHAUSPLEXUS-15766699...

@amqp-contract/asyncapi (>=0.2.0 <=0.21.0), @c15t/backend (>=1.8.5 <=1.8.6) +14 more potentially affected by CVE-2026-33331 via @orpc/openapi (>=1.0.0-beta.1 <=1.13.8)

@orpc/openapi NPM version =1.0.0-beta.1, =0.2.0, =1.8.5, =1.8.5, =1.8.5, =1.8.5, =1.8.5, =1.8.5, =0.1.1, =0.1.0, =1.0.0-beta.2, =1.10.0, =1.10.0, =1.0.0-beta.2, =1.0.0-beta.1, =1.8.5, =1.8.6 and more Source cves: CVE-2026-33331 Source advisory: SNYK:JS-ORPCOPENAPI-15763393...

cosmos-predict2 (>=1.0.6 <=1.0.9), entity-model (>=1.0.0 <=1.0.9) +19 more potentially affected by CVE-2025-33248 via megatron-core (>=0.10.0 <=0.15.2)

megatron-core PYPI version =0.10.0, =1.0.6, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2025-33248 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871032...

cosmos-predict2 (>=1.0.6 <=1.0.9), entity-model (>=1.0.0 <=1.0.9) +19 more potentially affected by CVE-2025-33247 via megatron-core (>=0.10.0 <=0.15.2)

megatron-core PYPI version =0.10.0, =1.0.6, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2025-33247 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871031...

cosmos-predict2 (>=1.0.6 <=1.0.9), entity-model (>=1.0.0 <=1.0.9) +19 more potentially affected by CVE-2026-24151 via megatron-core (>=0.10.0 <=0.15.2)

megatron-core PYPI version =0.10.0, =1.0.6, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2026-24151 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871034...

cosmos-predict2 (>=1.0.6 <=1.0.9), entity-model (>=1.0.0 <=1.0.9) +19 more potentially affected by CVE-2026-24150 via megatron-core (>=0.10.0 <=0.15.2)

megatron-core PYPI version =0.10.0, =1.0.6, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2026-24150 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871033...

cosmos-predict2 (>=1.0.6 <=1.0.9), entity-model (>=1.0.0 <=1.0.9) +19 more potentially affected by CVE-2026-24152 via megatron-core (>=0.10.0 <=0.15.2)

megatron-core PYPI version =0.10.0, =1.0.6, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2026-24152 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871035...

entity-model (>=1.0.0 <=1.0.9), fast-whisper-diarizer (>=0.1.2 <=0.1.32) +29 more potentially affected by CVE-2026-24157 via nemo-toolkit (>=1.23.0 <=2.6.1)

nemo-toolkit PYPI version =1.23.0, =1.0.0, =0.1.2, =0.2.7, =5.1.6, =1.0.0, =0.0.1, =0.0.1, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.2.3a1 and more Source cves: CVE-2026-24157 Source advisory: OSV:GHSA-M4JW-WGMF-889X...

entity-model (>=1.0.0 <=1.0.9), fast-whisper-diarizer (>=0.1.2 <=0.1.32) +29 more potentially affected by CVE-2026-24159 via nemo-toolkit (>=1.23.0 <=2.6.1)

nemo-toolkit PYPI version =1.23.0, =1.0.0, =0.1.2, =0.2.7, =5.1.6, =1.0.0, =0.0.1, =0.0.1, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.2.3a1 and more Source cves: CVE-2026-24159 Source advisory: OSV:GHSA-V7V2-M736-CF3C...

entity-model (>=1.0.0 <=1.0.9), fast-whisper-diarizer (>=0.1.2 <=0.1.32) +24 more potentially affected by CVE-2026-24157 via nemo-toolkit (>=2.0.0rc0 <=2.6.1)

nemo-toolkit PYPI version =2.0.0rc0, =1.0.0, =0.1.2, =0.2.7, =5.1.6, =1.0.0, =0.0.1, =0.0.1, =0.1.1, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =5.0.7 and more Source cves: CVE-2026-24157 Source advisory: SNYK:PYTHON-NEMOTOOLKIT-15912166...

entity-model (>=1.0.0 <=1.0.9), fast-whisper-diarizer (>=0.1.2 <=0.1.32) +24 more potentially affected by CVE-2026-24159 via nemo-toolkit (>=2.0.0rc0 <=2.6.1)

nemo-toolkit PYPI version =2.0.0rc0, =1.0.0, =0.1.2, =0.2.7, =5.1.6, =1.0.0, =0.0.1, =0.0.1, =0.1.1, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =5.0.7 and more Source cves: CVE-2026-24159 Source advisory: SNYK:PYTHON-NEMOTOOLKIT-15912093...

@stnd/build (=0.18.70), stnd (=0.18.70) potentially affected by CVE-2026-29772 via astro (=6.0.0-beta.1)

astro NPM version =6.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on astro and may be impacted: - @stnd/build =0.18.70 - stnd =0.18.70 Source cves: CVE-2026-29772 Source advisory: SNYK:JS-ASTRO-15763371...