Lucene search
+L
VulnersosvRecent

11668 matches found

vulnersOsv
vulnersOsv
•added 2026/04/16 9:37 p.m.•8 views

@activeboxes/piece-sftp (0.2.6), @activepieces/piece-sftp (>=0.2.6, <=0.4.6) +24 more potentially affected by CVE-2026-41324 via basic-ftp (>=5.0.2, <=5.2.2)

basic-ftp NPM version =5.0.2, =0.2.6, =1.0.0, =1.0.0, =2.0.18, =1.9.2, =1.2.0, =4.6.0-blowfish, =1.0.3, =1.0.4, =0.1.1, =0.2.0 and more Source cves: CVE-2026-41324 Source advisory: OSV:GHSA-RP42-5VXX-QPWR...

7.5CVSS5.3AI score0.00486EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/16 9:30 p.m.•11 views

3m (>=0.1.0, <=0.1.3), a2d-diary (>=0.1.0, <=0.1.5) +1820 more potentially affected by CVE-2026-41314 via pypdf2 (>=1.24.0, <=3.0.1)

pypdf2 PYPI version =1.24.0, =0.1.0, =0.1.0, =1.1.0, =0.1.32, =0.0.0.1, =0.0.1.44, =0.0.1, =0.2.2.716, =0.1.4, =1.0.3, =0.1.3, =0.2.0, =0.4.2 - adame 0.2.2 and more Source cves: CVE-2026-41314 Source advisory: SNYK:PYTHON-PYPDF2-16097900...

6.5CVSS6.7AI score0.00406EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:30 p.m.•10 views

3m (>=0.1.0, <=0.1.3), a2d-diary (>=0.1.0, <=0.1.5) +1820 more potentially affected by CVE-2026-41313 via pypdf2 (>=1.24.0, <=3.0.1)

pypdf2 PYPI version =1.24.0, =0.1.0, =0.1.0, =1.1.0, =0.1.32, =0.0.0.1, =0.0.1.44, =0.0.1, =0.2.2.716, =0.1.4, =1.0.3, =0.1.3, =0.2.0, =0.4.2 - adame 0.2.2 and more Source cves: CVE-2026-41313 Source advisory: SNYK:PYTHON-PYPDF2-16097904...

6.5CVSS6.7AI score0.00384EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:30 p.m.•11 views

3m (>=0.1.0, <=0.1.3), a2d-diary (>=0.1.0, <=0.1.5) +1820 more potentially affected by CVE-2026-41312 via pypdf2 (>=1.24.0, <=3.0.1)

pypdf2 PYPI version =1.24.0, =0.1.0, =0.1.0, =1.1.0, =0.1.32, =0.0.0.1, =0.0.1.44, =0.0.1, =0.2.2.716, =0.1.4, =1.0.3, =0.1.3, =0.2.0, =0.4.2 - adame 0.2.2 and more Source cves: CVE-2026-41312 Source advisory: SNYK:PYTHON-PYPDF2-16097902...

6.5CVSS6.7AI score0.00406EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:28 p.m.•11 views

@bentwnghk/chat (>=1.45.5, <=1.45.6), @clerk/elements (0.0.2-snapshot.vc65ad98) +2 more potentially affected by CVE-2026-41248 via @clerk/nextjs (>=5.0.1-snapshot.vc65ad98, <=5.7.5)

@clerk/nextjs NPM version =5.0.1-snapshot.vc65ad98, =1.45.5, =1.2.8, =1.2.9 - @spike-npm-land/code 0.9.55 Source cves: CVE-2026-41248 Source advisory: OSV:GHSA-VQX2-FGX2-5WQ9...

9.1CVSS5.8AI score0.00529EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:28 p.m.•8 views

@aurora-nexus/aurora-nexus-design-system (0.2.0), @fireproof/core-protocols-dashboard (>=0.24.3-dev-20261224, <=0.24.12) +6 more potentially affected by CVE-2026-41248 via @clerk/shared (>=3.36.0, <=3.45.1)

@clerk/shared NPM version =3.36.0, =0.24.3-dev-20261224, =0.24.3-dev-20261224, =0.24.3-dev-20261224, =0.0.14, =0.18.25-dev, =0.24.3-dev-20261224, =0.18.25-dev, =0.18.28-dev Source cves: CVE-2026-41248 Source advisory: OSV:GHSA-VQX2-FGX2-5WQ9...

9.1CVSS5.8AI score0.00529EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:28 p.m.•13 views

@clerk/agent-toolkit (>=0.2.9-canary.v20251211104600, <=0.3.14-snapshot.v20260414205636), @clerk/astro (>=3.0.0-canary.v20251211104600, <=3.0.14-snapshot.v20260414205636) +43 more potentially affected by CVE-2026-41248 via @clerk/shared (>=4.0.0, <=4.8.0-snapshot.v20260414205636)

@clerk/shared NPM version =4.0.0, =0.2.9-canary.v20251211104600, =3.0.0-canary.v20251211104600, =3.0.0-canary.v20251211104600, =3.0.0-canary.v20251211104600, =3.0.0-snapshot.v20251216175437, =3.0.0-canary.v20251211104600, =0.4.26-snapshot.v20260226165729, =2.0.0-canary.v20251211104600,...

9.1CVSS5.8AI score0.00529EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:28 p.m.•7 views

@bentwnghk/chat (>=1.91.2, <=1.91.6), @lobehub/chat (>=1.49.5, <=1.49.12) +2 more potentially affected by CVE-2026-41248 via @clerk/nextjs (>=6.3.1, <=6.28.1)

@clerk/nextjs NPM version =6.3.1, =1.91.2, =1.49.5, =0.0.2, =0.17.0-alpha.9, =0.17.3-centauri.0 Source cves: CVE-2026-41248 Source advisory: OSV:GHSA-VQX2-FGX2-5WQ9...

9.1CVSS5.8AI score0.00529EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:28 p.m.•9 views

@clerk/agent-toolkit (>=0.2.9-canary.v20251211104600, <=0.3.14-snapshot.v20260414205636), @clerk/astro (>=3.0.0-canary.v20251211104600, <=3.0.14-snapshot.v20260414205636) +43 more potentially affected by CVE-2026-41248 via @clerk/shared (>=4.0.0, <=4.8.0-snapshot.v20260414205636)

@clerk/shared NPM version =4.0.0, =0.2.9-canary.v20251211104600, =3.0.0-canary.v20251211104600, =3.0.0-canary.v20251211104600, =3.0.0-canary.v20251211104600, =3.0.0-snapshot.v20251216175437, =3.0.0-canary.v20251211104600, =0.4.26-snapshot.v20260226165729, =2.0.0-canary.v20251211104600,...

9.1CVSS5.8AI score0.00529EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:28 p.m.•7 views

@bentwnghk/chat (>=1.91.2, <=1.91.6), @lobehub/chat (>=1.49.5, <=1.49.12) +2 more potentially affected by CVE-2026-41248 via @clerk/nextjs (>=6.3.1, <=6.28.1)

@clerk/nextjs NPM version =6.3.1, =1.91.2, =1.49.5, =0.0.2, =0.17.0-alpha.9, =0.17.3-centauri.0 Source cves: CVE-2026-41248 Source advisory: SNYK:JS-CLERKNEXTJS-16098250...

9.1CVSS5.8AI score0.00529EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:28 p.m.•8 views

@bentwnghk/chat (>=1.45.5, <=1.45.6), @clerk/elements (0.0.2-snapshot.vc65ad98) +2 more potentially affected by CVE-2026-41248 via @clerk/nextjs (>=5.0.1-snapshot.vc65ad98, <=5.7.5)

@clerk/nextjs NPM version =5.0.1-snapshot.vc65ad98, =1.45.5, =1.2.8, =1.2.9 - @spike-npm-land/code 0.9.55 Source cves: CVE-2026-41248 Source advisory: SNYK:JS-CLERKNEXTJS-16098250...

9.1CVSS5.8AI score0.00529EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:22 p.m.•8 views

flowise (>=1.6.1, <=2.2.8) potentially affected by unknown CVE via flowise-components (>=1.8.6, <=2.2.8)

flowise-components NPM version =1.8.6, =1.6.1, =2.2.8 Source cves: unknown CVE Source advisory: SNYK:JS-FLOWISECOMPONENTS-16115272...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:19 p.m.•8 views

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0) +18 more potentially affected by CVE-2026-43529 via openclaw (>=2026.3.22, <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =4.2.0 - openclaw-chatclaw 0.1.0 and more Source cves: CVE-2026-43529 Source advisory: SNYK:JS-OPENCLAW-16098254...

2.5CVSS5.4AI score0.00103EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:19 p.m.•10 views

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0) +18 more potentially affected by CVE-2026-43529 via openclaw (>=2026.3.22, <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =4.2.0 - openclaw-chatclaw 0.1.0 and more Source cves: CVE-2026-43529 Source advisory: OSV:GHSA-GJ9Q-8W99-MP8J...

2.5CVSS5.4AI score0.00103EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:17 p.m.•8 views

a11ywatch_cli (>=0.0.26, <=0.7.16), aap (>=0.4.0, <=0.4.1) +3774 more potentially affected by CVE-2026-93601 via rustls-webpki (>=0.101.7, <=0.102.8)

rustls-webpki CARGO version =0.101.7, =0.0.26, =0.4.0, =0.1.0, =0.21.0-alpha.1, =0.1.11, =0.12.1, =0.2.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.2.0 - actix-csrf 0.8.0 and more Source cves: CVE-2026-93601 Source advisory: OSV:GHSA-XGP8-3HG3-C2MH...

2.2CVSS5.7AI score0.00183EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:16 p.m.•11 views

a11ywatch_cli (>=0.0.26, <=0.7.16), aap (>=0.4.0, <=0.4.1) +3774 more potentially affected by CVE-2026-93600 via rustls-webpki (>=0.101.7, <=0.102.8)

rustls-webpki CARGO version =0.101.7, =0.0.26, =0.4.0, =0.1.0, =0.21.0-alpha.1, =0.1.11, =0.12.1, =0.2.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.2.0 - actix-csrf 0.8.0 and more Source cves: CVE-2026-93600 Source advisory: OSV:GHSA-965H-392X-2MH5...

2.2CVSS5.7AI score0.00183EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 9:09 p.m.•10 views

@appwise/oauth2-server (>=0.0.19, <=0.2.2), @dyne/slangroom-chain (>=1.4.0, <=1.16.10) +4 more potentially affected by CVE-2026-41213 via @node-oauth/oauth2-server (>=5.0.0, <=5.2.1)

@node-oauth/oauth2-server NPM version =5.0.0, =0.0.19, =1.4.0, =1.3.0, =1.49.1, =1.0.0, =1.0.0, =1.0.1 Source cves: CVE-2026-41213 Source advisory: OSV:GHSA-JHM7-29PJ-4XVF...

5.9CVSS5.8AI score0.00347EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/16 9:09 p.m.•8 views

@appwise/oauth2-server (>=0.0.19, <=0.2.2), @dyne/slangroom-chain (>=1.4.0, <=1.16.10) +4 more potentially affected by CVE-2026-41213 via @node-oauth/oauth2-server (>=5.0.0, <=5.2.1)

@node-oauth/oauth2-server NPM version =5.0.0, =0.0.19, =1.4.0, =1.3.0, =1.49.1, =1.0.0, =1.0.0, =1.0.1 Source cves: CVE-2026-41213 Source advisory: SNYK:JS-NODEOAUTHOAUTH2SERVER-16420261...

5.9CVSS5.8AI score0.00347EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/16 9:08 p.m.•10 views

@reldens/server-utils (0.48.0), @sap-ux/ui-components (>=2.1.4, <=2.1.10) +11 more potentially affected by CVE-2026-40186 via sanitize-html (2.17.2)

sanitize-html NPM version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - @reldens/server-utils 0.48.0 - @sap-ux/ui-components =2.1.4, =0.6.17, =0.3.16, =0.1.32, =0.0.31, =0.30.19, =1.0.0-alpha.5, =0.19.3,...

6.1CVSS5.3AI score0.0028EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/16 8:44 p.m.•5 views

@aumoai/mcp-data-analyst (>=0.1.0, <=0.2.8), @geobio/code_execution_server (>=0.2.0, <=0.2.1) +35 more potentially affected by CVE-2026-39313 via mcp-framework (>=0.1.27, <=0.2.15)

mcp-framework NPM version =0.1.27, =0.1.0, =0.2.0, =1.0.11, =0.2.0, =0.2.0, =0.0.1, =0.0.4 and more Source cves: CVE-2026-39313 Source advisory: OSV:GHSA-353C-V8X9-V7C3...

8.7CVSS5.3AI score0.00566EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 8:44 p.m.•7 views

@aumoai/mcp-data-analyst (>=0.1.0, <=0.2.8), @geobio/code_execution_server (>=0.2.0, <=0.2.1) +35 more potentially affected by CVE-2026-39313 via mcp-framework (>=0.1.27, <=0.2.15)

mcp-framework NPM version =0.1.27, =0.1.0, =0.2.0, =1.0.11, =0.2.0, =0.2.0, =0.0.1, =0.0.4 and more Source cves: CVE-2026-39313 Source advisory: SNYK:JS-MCPFRAMEWORK-16420257...

8.7CVSS5.3AI score0.00566EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 1:29 p.m.•8 views

@13w/local-rag (>=1.6.0, <=1.7.2), @24letters/devservers (>=0.1.0, <=0.6.0) +778 more potentially affected by CVE-2026-6410 via @fastify/static (>=8.0.0, <=9.1.0)

@fastify/static NPM version =8.0.0, =1.6.0, =0.1.0, =0.1.0, =0.4.0, =0.1.0-rc.1, =0.1.0, =1.1.0, =1.1.0, =0.0.18, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.3 and more Source cves: CVE-2026-6410 Source advisory: SNYK:JS-FASTIFYSTATIC-16098211...

5.3CVSS5.8AI score0.00528EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 1:09 p.m.•8 views

@13w/local-rag (>=1.6.0, <=1.7.2), @24letters/devservers (>=0.1.0, <=0.6.0) +778 more potentially affected by CVE-2026-6414 via @fastify/static (>=8.0.0, <=9.1.0)

@fastify/static NPM version =8.0.0, =1.6.0, =0.1.0, =0.1.0, =0.4.0, =0.1.0-rc.1, =0.1.0, =1.1.0, =1.1.0, =0.0.18, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.3 and more Source cves: CVE-2026-6414 Source advisory: SNYK:JS-FASTIFYSTATIC-16098210...

5.9CVSS5.8AI score0.00448EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/16 1:34 a.m.•9 views

@secustor/backstage-plugin-renovate-backend-module-runtime-direct (4.0.1) potentially affected by unknown CVE via renovate (43.77.2)

renovate NPM version 43.77.2 is affected by a known vulnerability. The following packages have a transitive dependency on renovate and may be impacted: - @secustor/backstage-plugin-renovate-backend-module-runtime-direct 4.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-RENOVATE-16083197...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 1:34 a.m.•11 views

@secustor/backstage-plugin-renovate-backend-module-runtime-direct (4.0.1) potentially affected by CVE-2026-76226 via renovate (43.77.2)

renovate NPM version 43.77.2 is affected by a known vulnerability. The following packages have a transitive dependency on renovate and may be impacted: - @secustor/backstage-plugin-renovate-backend-module-runtime-direct 4.0.1 Source cves: CVE-2026-76226 Source advisory: OSV:GHSA-5VJQ-5JMG-39XQ...

6.8CVSS5.4AI score0.00294EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 1:20 a.m.•8 views

0xgasless-mcp (>=1.0.3, <=1.0.5), 4d-vector-search (>=1.0.0, <=1.0.1) +3213 more potentially affected by CVE-2026-41182 via langsmith (>=0.0.5, <=0.5.4)

langsmith NPM version =0.0.5, =1.0.3, =1.0.0, =1.11.0, =0.0.5, =0.0.1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.6, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2026-41182 Source advisory: OSV:GHSA-RR7J-V2Q5-CHGV...

5.3CVSS5.5AI score0.00358EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 1:20 a.m.•7 views

0xgasless-mcp (>=1.0.3, <=1.0.5), 4d-vector-search (>=1.0.0, <=1.0.1) +3213 more potentially affected by CVE-2026-41182 via langsmith (>=0.0.5, <=0.5.4)

langsmith NPM version =0.0.5, =1.0.3, =1.0.0, =1.11.0, =0.0.5, =0.0.1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.6, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2026-41182 Source advisory: SNYK:JS-LANGSMITH-16082039...

5.3CVSS5.5AI score0.00358EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 1:03 a.m.•7 views

@cmmn/tools (>=3.0.0-alpha-1, <=3.0.0-alpha-6), mikr0 (0.1.10) potentially affected by CVE-2026-33808 via @fastify/express (>=4.0.1, <=4.0.2)

@fastify/express NPM version =4.0.1, =3.0.0-alpha-1, =3.0.0-alpha-6 - mikr0 0.1.10 Source cves: CVE-2026-33808 Source advisory: OSV:GHSA-6HW5-45GM-FJ88...

9.1CVSS8.5AI score0.00551EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/16 1:03 a.m.•5 views

@cmmn/tools (>=3.0.0-alpha-1, <=3.0.0-alpha-6), mikr0 (0.1.10) potentially affected by CVE-2026-33807 +1 more via @fastify/express (>=4.0.1, <=4.0.2)

@fastify/express NPM version =4.0.1, =3.0.0-alpha-1, =3.0.0-alpha-6 - mikr0 0.1.10 Source cves: CVE-2026-33807, CVE-2026-6270 Source advisory: OSV:GHSA-HRWM-HGMJ-7P9C...

9.1CVSS8.4AI score0.00608EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2026/04/16 1:02 a.m.•5 views

@cedarjs/api-server (>=1.0.0-canary.12281, <=9.0.0-canary.1784), @cedarjs/cli (>=1.0.0-canary.12281, <=9.0.0-canary.1784) +23 more potentially affected by CVE-2026-33805 via @fastify/http-proxy (>=11.1.2, <=11.4.3)

@fastify/http-proxy NPM version =11.1.2, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =3.0.0-alpha-1, =0.1.0, =1.0.1, =0.0.1, =1.0.0, =1.0.1, =1.4.4, =1.0.50, =0.0.1, =0.1.65 and more Source cves: CVE-2026-33805 Source advisory:...

9CVSS7.4AI score0.0056EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/16 1:02 a.m.•5 views

@slidev-react/cli (>=0.4.6, <=0.4.14), @slidev-react/node (>=0.4.6, <=0.4.14) potentially affected by CVE-2026-41211 via vite-plus (0.1.11)

vite-plus NPM version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on vite-plus and may be impacted: - @slidev-react/cli =0.4.6, =0.4.6, =0.4.14 Source cves: CVE-2026-41211 Source advisory: OSV:GHSA-33R3-4WHC-44C2...

10CVSS5.8AI score0.00427EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/16 1:02 a.m.•15 views

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @activepieces/piece-ai (>=0.3.1, <=0.3.4) +594 more potentially affected by unknown CVE via hono (>=4.0.0, <=4.12.12)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-HONO-16080667...

5.7AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 1:02 a.m.•7 views

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @activepieces/piece-ai (>=0.3.1, <=0.3.4) +594 more potentially affected by CVE-2026-56761 via hono (>=4.0.0, <=4.12.12)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: CVE-2026-56761 Source advisory: OSV:GHSA-458J-XX4X-4375...

5.3CVSS5.8AI score0.00293EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/16 12:46 a.m.•6 views

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2144 more potentially affected by CVE-2026-65903 via dompurify (>=3.0.0, <=3.3.3)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.3 and more Source cves: CVE-2026-65903 Source advisory: OSV:GHSA-39Q2-94RC-95CP...

6.1CVSS5.8AI score0.00325EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/16 12:46 a.m.•7 views

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2144 more potentially affected by CVE-2026-41240 via dompurify (>=3.0.0, <=3.3.3)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.3 and more Source cves: CVE-2026-41240 Source advisory: SNYK:JS-DOMPURIFY-16078387...

6.1CVSS6.4AI score0.00404EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/15 9:25 p.m.•6 views

@reldens/server-utils (0.48.0), @sap-ux/ui-components (>=2.1.4, <=2.1.10) +11 more potentially affected by CVE-2026-40186 via sanitize-html (2.17.2)

sanitize-html NPM version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - @reldens/server-utils 0.48.0 - @sap-ux/ui-components =2.1.4, =0.6.17, =0.3.16, =0.1.32, =0.0.31, =0.30.19, =1.0.0-alpha.5, =0.19.3,...

6.1CVSS5.3AI score0.0028EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/15 7:24 p.m.•12 views

@amedia/brick-mcp (>=0.0.0-vBRAND-20260313141110, <=1.0.3), @area15/ticket-component (0.1.0) +231 more potentially affected by CVE-2025-32442 +1 more via fastify (>=5.3.2, <=5.8.4)

fastify NPM version =5.3.2, =0.0.0-vBRAND-20260313141110, =2.0.1, =1.1.1, =0.6.2, =0.1.1, =0.1.1, =0.6.0, =0.1.1, =0.0.35, =0.0.82, =0.0.1, =0.0.6, =0.1.68, =0.1.0, =0.8.2 and more Source cves: CVE-2025-32442, CVE-2026-33806 Source advisory: OSV:GHSA-247C-9743-5963...

7.5CVSS7.2AI score0.00717EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/15 7:19 p.m.•10 views

dev.dsf:dsf-fhir-server-jetty (>=1.0.0-m1, <=1.9.0), dev.dsf:dsf-tools-test-data-generator (>=1.0.0-m1, <=1.9.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (>=1.0.0, <=1.9.0)

dev.dsf:dsf-fhir-server MAVEN version =1.0.0, =1.0.0-m1, =1.0.0-m1, =1.9.0 Source cves: CVE-2026-40939 Source advisory: SNYK:JAVA-DEVDSF-16540567...

6.8CVSS5.3AI score0.0022EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/15 7:19 p.m.•11 views

dev.dsf:dsf-bpe-server-jetty (>=1.0.0-m1, <=1.9.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-bpe-server (>=1.0.0, <=1.9.0)

dev.dsf:dsf-bpe-server MAVEN version =1.0.0, =1.0.0-m1, =1.9.0 Source cves: CVE-2026-40939 Source advisory: SNYK:JAVA-DEVDSF-16540564...

6.8CVSS5.3AI score0.0022EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/15 7:19 p.m.•9 views

dev.dsf:dsf-bpe-server-jetty (>=1.0.0-m1, <=1.9.0), dev.dsf:dsf-fhir-server-jetty (>=1.0.0-m1, <=1.9.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-common-jetty (>=1.0.0, <=1.9.0)

dev.dsf:dsf-common-jetty MAVEN version =1.0.0, =1.0.0-m1, =1.0.0-m1, =1.9.0 Source cves: CVE-2026-40939 Source advisory: SNYK:JAVA-DEVDSF-16540565...

6.8CVSS5.3AI score0.0022EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/15 7:19 p.m.•9 views

dev.dsf:dsf-bpe-process-api-v1 (>=1.0.0-m1, <=1.9.0), dev.dsf:dsf-bpe-server (>=1.0.0-m1, <=1.9.0) +10 more potentially affected by CVE-2026-40939 via dev.dsf:dsf-common-auth (>=1.0.0, <=1.9.0)

dev.dsf:dsf-common-auth MAVEN version =1.0.0, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.2.0 Source cves: CVE-2026-40939 Source advisory: SNYK:JAVA-DEVDSF-16540566...

6.8CVSS5.3AI score0.0022EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/15 6:31 p.m.•12 views

@amitojsingh366/keepkey-hardware-controller (0.0.10), @apsiocoin/protobuf-serialization (0.0.1-alpha1) +173 more potentially affected by CVE-2026-5758 via protocol-buffers-schema (>=3.1.0, <=3.6.0)

protocol-buffers-schema NPM version =3.1.0, =2.0.7, =2.1.2, =2.0.12, =2.0.11, =0.3.0, =0.0.12, =6.1.2, =0.18.4, =0.18.4, =1.16.11, =1.4.2, =0.18.6, =0.18.6, =3.0.1 and more Source cves: CVE-2026-5758 Source advisory: OSV:GHSA-J452-XHG8-QG39...

6.5CVSS5.3AI score0.00687EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/15 6:31 p.m.•8 views

@amitojsingh366/keepkey-hardware-controller (0.0.10), @apsiocoin/protobuf-serialization (0.0.1-alpha1) +173 more potentially affected by CVE-2026-5758 via protocol-buffers-schema (>=3.1.0, <=3.6.0)

protocol-buffers-schema NPM version =3.1.0, =2.0.7, =2.1.2, =2.0.12, =2.0.11, =0.3.0, =0.0.12, =6.1.2, =0.18.4, =0.18.4, =1.16.11, =1.4.2, =0.18.6, =0.18.6, =3.0.1 and more Source cves: CVE-2026-5758 Source advisory: SNYK:JS-PROTOCOLBUFFERSSCHEMA-16420259...

6.5CVSS5.3AI score0.00687EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/15 11:15 a.m.•5 views

@cmmn/tools (>=3.0.0-alpha-1, <=3.0.0-alpha-6), mikr0 (0.1.10) potentially affected by CVE-2026-33807 via @fastify/express (>=4.0.1, <=4.0.2)

@fastify/express NPM version =4.0.1, =3.0.0-alpha-1, =3.0.0-alpha-6 - mikr0 0.1.10 Source cves: CVE-2026-33807 Source advisory: SNYK:JS-FASTIFYEXPRESS-16068280...

9.1CVSS8.4AI score0.00534EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/15 11:15 a.m.•7 views

@cmmn/tools (>=3.0.0-alpha-1, <=3.0.0-alpha-6), mikr0 (0.1.10) potentially affected by CVE-2026-33808 via @fastify/express (>=4.0.1, <=4.0.2)

@fastify/express NPM version =4.0.1, =3.0.0-alpha-1, =3.0.0-alpha-6 - mikr0 0.1.10 Source cves: CVE-2026-33808 Source advisory: SNYK:JS-FASTIFYEXPRESS-16068303...

9.1CVSS8.5AI score0.00551EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/15 11:15 a.m.•11 views

@cedarjs/api-server (>=1.0.0-canary.12281, <=9.0.0-canary.1784), @cedarjs/cli (>=1.0.0-canary.12281, <=9.0.0-canary.1784) +23 more potentially affected by CVE-2026-33805 via @fastify/http-proxy (>=11.1.2, <=11.4.3)

@fastify/http-proxy NPM version =11.1.2, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =1.0.0-canary.12281, =3.0.0-alpha-1, =0.1.0, =1.0.1, =0.0.1, =1.0.0, =1.0.1, =1.4.4, =1.0.50, =0.0.1, =0.1.65 and more Source cves: CVE-2026-33805 Source advisory:...

9CVSS7.4AI score0.0056EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/15 2:09 a.m.•7 views

0uth (>=1.0.5, <=1.2.1), @___d/common (>=1.0.3, <=1.0.27) +2573 more potentially affected by CVE-2026-33806 via fastify (>=4.29.0, <=5.8.4)

fastify NPM version =4.29.0, =1.0.5, =1.0.3, =0.0.3, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =3.0.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.2.0 - @agentspec/sidecar 0.1.0 - @agexhq/hub 1.0.0 - @agrume/cli 3.0.0 and more Source cves: CVE-2026-33806 Source advisory: SNYK:JS-FASTIFY-16066793...

7.5CVSS7.2AI score0.00485EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/15 12:00 a.m.•9 views

instructlab-sdg (>=0.0.1rc1, <=0.0.1) potentially affected by CVE-2026-6855 via instructlab (0.17.2)

instructlab PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on instructlab and may be impacted: - instructlab-sdg =0.0.1rc1, =0.0.1 Source cves: CVE-2026-6855 Source advisory: SNYK:PYTHON-INSTRUCTLAB-16323380...

7.1CVSS5.3AI score0.00224EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/14 11:22 p.m.•9 views

@quickguidehealth/connector-logto-novu (>=0.1.0, <=0.1.4) potentially affected by unknown CVE via @novu/api (3.11.0)

@novu/api NPM version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on @novu/api and may be impacted: - @quickguidehealth/connector-logto-novu =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-4X48-CGF9-Q33F...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/04/14 10:38 p.m.•8 views

@semic/testing (2.2.11), @vendure/dashboard (>=3.2.2, <=3.4.4) potentially affected by CVE-2026-40887 via @vendure/core (>=3.0.0, <=3.4.4)

@vendure/core NPM version =3.0.0, =3.2.2, =3.4.4 Source cves: CVE-2026-40887 Source advisory: SNYK:JS-VENDURECORE-16068909...

9.1CVSS5.3AI score0.02202EPSS
SaveExploits1
Total number of security vulnerabilities11668