@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-29792 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-29792 Source advisory: SNYK:JS-FEATHERSJSAUTHENTICATIONOAUTH-15470092...

3extensions (1.0.1), @51jbs/incremental-coverage-plugin (1.0.5) +483 more potentially affected by CVE-2026-28292 via simple-git (>=3.15.0, <=3.32.2)

simple-git NPM version =3.15.0, =1.0.1, =1.0.1, =0.0.0-aj-beta.7, =23.0.0, =35.0.0, =1.4.0, =0.1.5-alpha.0, =1.0.2, =8.7.2, =39.0.2, =0.0.1, =0.0.8 and more Source cves: CVE-2026-28292 Source advisory: OSV:GHSA-R275-FR43-PM7Q...

org.webjars.npm:g-status (2.0.2), org.webjars.npm:graphql-toolkit__git-loader (0.7.5) potentially affected by CVE-2022-25912 +1 more via org.webjars.npm:simple-git (>=1.129.0, <=1.132.0)

org.webjars.npm:simple-git MAVEN version =1.129.0, =1.132.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:simple-git and may be impacted: - org.webjars.npm:g-status 2.0.2 - org.webjars.npm:graphql-toolkitgit-loader 0.7.5 Source cves:...

3extensions (1.0.1), @51jbs/incremental-coverage-plugin (1.0.5) +483 more potentially affected by CVE-2022-25912 +1 more via simple-git (>=3.15.0, <=3.32.2)

simple-git NPM version =3.15.0, =1.0.1, =1.0.1, =0.0.0-aj-beta.7, =23.0.0, =35.0.0, =1.4.0, =0.1.5-alpha.0, =1.0.2, =8.7.2, =39.0.2, =0.0.1, =0.0.8 and more Source cves: CVE-2022-25912, CVE-2026-28292 Source advisory: SNYK:JS-SIMPLEGIT-15457646...

studiocms (>=0.1.0-beta.26, <=0.1.0) potentially affected by CVE-2026-30944 via @withstudiocms/auth-kit (0.1.0-beta.6)

@withstudiocms/auth-kit NPM version 0.1.0-beta.6 is affected by a known vulnerability. The following packages have a transitive dependency on @withstudiocms/auth-kit and may be impacted: - studiocms =0.1.0-beta.26, =0.1.0 Source cves: CVE-2026-30944 Source advisory:...

@studiocms/migrator (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-30944 via studiocms (>=0.2.0, <=0.3.0)

studiocms NPM version =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2026-30944 Source advisory: OSV:GHSA-667W-MMH7-MRR4...

@studiocms/migrator (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-30944 via studiocms (>=0.2.0, <=0.3.0)

studiocms NPM version =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2026-30944 Source advisory: SNYK:JS-STUDIOCMS-15518582...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469597...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: OSV:GHSA-CW6X-MW64-Q6PV...

@oneuptime/cli (>=10.0.15, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.15, <=10.0.20)

@oneuptime/common NPM version =10.0.15, =10.0.15, =10.0.20 Source cves: CVE-2026-30957 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469296...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30957 Source advisory: OSV:GHSA-JW8Q-GJVG-8W4Q...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30956 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30956 Source advisory: OSV:GHSA-R5V6-2599-9G3M...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30956 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30956 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469212...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +127 more potentially affected by CVE-2026-30952 via liquidjs (>=10.2.0, <=10.24.0)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0, =1.0.10 and more Source cves: CVE-2026-30952 Source advisory: SNYK:JS-LIQUIDJS-15443434...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +127 more potentially affected by CVE-2026-30952 via liquidjs (>=10.2.0, <=10.24.0)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0, =1.0.10 and more Source cves: CVE-2026-30952 Source advisory: OSV:GHSA-WMFP-5Q7X-987X...

@powersync/cli-core (>=0.0.0-dev-20260305082615, <=0.9.2), @powersync/cli-plugin-config-edit (>=0.0.0-dev-20260305082615, <=0.9.2) +20 more potentially affected by CVE-2026-30870 via @powersync/service-sync-rules (>=0.0.0-dev-20240918082156, <=0.32.0)

@powersync/service-sync-rules NPM version =0.0.0-dev-20240918082156, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20250827072023, =0.0.0-dev-20260114113449, =0.0.0-dev-20250827072023, =0.0.0-dev.57b1a567,...

@oneuptime/cli (>=10.0.5, <=10.0.18) potentially affected by CVE-2026-30920 via @oneuptime/common (>=10.0.5, <=10.0.18)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.18 Source cves: CVE-2026-30920 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15518692...

@oneuptime/cli (>=10.0.5, <=10.0.18) potentially affected by CVE-2026-30920 via @oneuptime/common (>=10.0.5, <=10.0.18)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.18 Source cves: CVE-2026-30920 Source advisory: OSV:GHSA-656W-6F6C-M9R6...

actix-remote (0.1.0), agnostic (>=0.2.5, <=0.2.6) +272 more potentially affected by CVE-2026-31812 via quinn-proto (>=0.5.2, <=0.11.9)

quinn-proto CARGO version =0.5.2, =0.2.5, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.5.0, =2.0.0, =0.2.3, =0.2.11 and more Source cves: CVE-2026-31812 Source advisory: OSV:RUSTSEC-2026-0037...

3extensions (1.0.1), @51jbs/incremental-coverage-plugin (1.0.5) +641 more potentially affected by CVE-2022-25912 +1 more via simple-git (>=3.0.3, <=3.35.2)

simple-git NPM version =3.0.3, =1.0.1, =1.0.1, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =23.0.0, =35.0.0, =1.4.0, =0.1.5-alpha.0, =1.0.2, =0.0.0-aj-beta.221, =8.7.2, =8.11.4 and more Source cves: CVE-2022-25912, CVE-2026-6951 Source advisory: SNYK:JS-SIMPLEGIT-15456078...

org.webjars.npm:g-status (2.0.2), org.webjars.npm:graphql-toolkit__git-loader (0.7.5) potentially affected by CVE-2022-25912 +1 more via org.webjars.npm:simple-git (>=1.129.0, <=1.132.0)

org.webjars.npm:simple-git MAVEN version =1.129.0, =1.132.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:simple-git and may be impacted: - org.webjars.npm:g-status 2.0.2 - org.webjars.npm:graphql-toolkitgit-loader 0.7.5 Source cves:...

@oneuptime/cli (>=10.0.5, <=10.0.19) potentially affected by CVE-2026-30921 via @oneuptime/common (>=10.0.5, <=10.0.19)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.19 Source cves: CVE-2026-30921 Source advisory: OSV:GHSA-4J36-39GM-8VQ8...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30921 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30921 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15444918...

@aimo.network/svm (>=1.0.0, <=1.8.0), @andesmountain/x402-request (>=1.0.0, <=1.0.3) +9 more potentially affected by unknown CVE via @x402/svm (>=2.0.0, <=2.5.0)

@x402/svm NPM version =2.0.0, =1.0.0, =1.0.0, =0.1.0, =4.0.0, =0.12.7, =0.2.0, =0.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-QR2G-P6Q7-W82M...

@aimo.network/svm (>=1.0.0, <=1.8.0), @andesmountain/x402-request (>=1.0.0, <=1.0.3) +9 more potentially affected by unknown CVE via @x402/svm (>=2.0.0, <=2.5.0)

@x402/svm NPM version =2.0.0, =1.0.0, =1.0.0, =0.1.0, =4.0.0, =0.12.7, =0.2.0, =0.2.3 Source cves: unknown CVE Source advisory: SNYK:JS-X402SVM-15440550...

@snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1), @snyk/snyk-hex-plugin (>=2.0.0, <=2.2.2) +4 more potentially affected by CVE-2026-30916 via shescape (>=2.1.0, <=2.1.6)

shescape NPM version =2.1.0, =2.6.0, =2.0.0, =8.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-30916 Source advisory: SNYK:JS-SHESCAPE-15440479...

@oneuptime/cli (>=10.0.5, <=10.0.17) potentially affected by CVE-2026-30887 via @oneuptime/common (>=10.0.5, <=10.0.17)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.17 Source cves: CVE-2026-30887 Source advisory: OSV:GHSA-H343-GG57-2Q67...

@oneuptime/cli (>=10.0.5, <=10.0.17) potentially affected by CVE-2026-30887 via @oneuptime/common (>=10.0.5, <=10.0.17)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.17 Source cves: CVE-2026-30887 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15440733...

@powersync/cli-core (>=0.0.0-dev-20260305082615, <=0.9.2), @powersync/cli-plugin-config-edit (>=0.0.0-dev-20260305082615, <=0.9.2) +12 more potentially affected by CVE-2026-30870 via @powersync/service-core (1.20.0)

@powersync/service-core NPM version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on @powersync/service-core and may be impacted: - @powersync/cli-core =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615,...

@powersync/cli-core (>=0.0.0-dev-20260305082615, <=0.9.2), @powersync/cli-plugin-config-edit (>=0.0.0-dev-20260305082615, <=0.9.2) +19 more potentially affected by CVE-2026-30870 via @powersync/service-sync-rules (0.32.0)

@powersync/service-sync-rules NPM version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on @powersync/service-sync-rules and may be impacted: - @powersync/cli-core =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615,...

web3.db-fileconnector (>=1.4.0, <=1.8.6) potentially affected by CVE-2026-30241 via mercurius (16.1.0)

mercurius NPM version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mercurius and may be impacted: - web3.db-fileconnector =1.4.0, =1.8.6 Source cves: CVE-2026-30241 Source advisory: SNYK:JS-MERCURIUS-15435881...

web3.db-fileconnector (>=1.4.0, <=1.8.6) potentially affected by CVE-2026-30241 via mercurius (16.1.0)

mercurius NPM version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mercurius and may be impacted: - web3.db-fileconnector =1.4.0, =1.8.6 Source cves: CVE-2026-30241 Source advisory: OSV:GHSA-M4H2-MJFM-MP55...

@ekairos/dataset (>=1.21.32-beta.0, <=1.22.22-beta.development.0), @ekairos/events (>=1.22.4-beta.development.0, <=1.22.34-beta.development.0) +10 more potentially affected by unknown CVE via workflow (>=4.0.1-beta.0, <=4.1.0-beta.63)

workflow NPM version =4.0.1-beta.0, =1.21.32-beta.0, =1.22.4-beta.development.0, =1.21.32-beta.0, =1.21.53-beta.0, =1.21.88-beta.0, =0.0.0-dev-20260121145510, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =4.0.1-beta.0, =1.21.32-beta.0, =0.3.0, =0.7.7 Source cve...

@ekairos/dataset (>=1.21.32-beta.0, <=1.22.22-beta.development.0), @ekairos/events (>=1.22.4-beta.development.0, <=1.22.34-beta.development.0) +26 more potentially affected by unknown CVE via @workflow/core (>=4.0.1-beta.0, <=4.1.0-beta.63)

@workflow/core NPM version =4.0.1-beta.0, =1.21.32-beta.0, =1.22.4-beta.development.0, =1.21.32-beta.0, =1.21.53-beta.0, =1.21.88-beta.0, =0.0.0-dev-20260121145510, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =4.0.0-beta.2, =4.0.1-beta.4, =4.0.1-beta.0,...

@ekairos/dataset (>=1.21.32-beta.0, <=1.22.22-beta.development.0), @ekairos/events (>=1.22.4-beta.development.0, <=1.22.34-beta.development.0) +26 more potentially affected by unknown CVE via @workflow/core (>=4.0.1-beta.0, <=4.1.0-beta.63)

@workflow/core NPM version =4.0.1-beta.0, =1.21.32-beta.0, =1.22.4-beta.development.0, =1.21.32-beta.0, =1.21.53-beta.0, =1.21.88-beta.0, =0.0.0-dev-20260121145510, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =4.0.0-beta.2, =4.0.1-beta.4, =4.0.1-beta.0,...

@agent-infra/browser-context (>=0.1.2, <=0.2.2), @agent-infra/mcp-server-browser (>=1.2.15, <=1.2.29) +22 more potentially affected by CVE-2026-30830 via defuddle (>=0.3.8, <=0.8.0)

defuddle NPM version =0.3.8, =0.1.2, =1.2.15, =26.7.0, =0.0.1, =1.0.4, =1.4.0, =0.1.0, =0.1.0, =0.12.0, =0.12.0, =0.3.0, =0.7.1 - @vibe-reader/cli 0.1.0 and more Source cves: CVE-2026-30830 Source advisory: SNYK:JS-DEFUDDLE-15441037...

@agent-infra/browser-context (>=0.1.2, <=0.2.2), @agent-infra/mcp-server-browser (>=1.2.15, <=1.2.29) +22 more potentially affected by CVE-2026-30830 via defuddle (>=0.3.8, <=0.8.0)

defuddle NPM version =0.3.8, =0.1.2, =1.2.15, =26.7.0, =0.0.1, =1.0.4, =1.4.0, =0.1.0, =0.1.0, =0.12.0, =0.12.0, =0.3.0, =0.7.1 - @vibe-reader/cli 0.1.0 and more Source cves: CVE-2026-30830 Source advisory: OSV:GHSA-5MQ8-78GM-PJMQ...

@chrisleekr/mcp-server-playground (>=1.1.0-dev-1d08adb.1, <=1.1.0-dev-ff904e8.1) potentially affected by CVE-2026-30827 via express-rate-limit (8.0.1)

express-rate-limit NPM version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-rate-limit and may be impacted: - @chrisleekr/mcp-server-playground =1.1.0-dev-1d08adb.1, =1.1.0-dev-ff904e8.1 Source cves: CVE-2026-30827 Source advisory:...

@chrisleekr/mcp-server-playground (>=1.1.0-dev-1d08adb.1, <=1.1.0-dev-ff904e8.1) potentially affected by CVE-2026-30827 via express-rate-limit (8.0.1)

express-rate-limit NPM version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-rate-limit and may be impacted: - @chrisleekr/mcp-server-playground =1.1.0-dev-1d08adb.1, =1.1.0-dev-ff904e8.1 Source cves: CVE-2026-30827 Source advisory:...

@chrisleekr/mcp-server-playground (>=1.1.0-dev-0d04f54.1, <=1.1.2), @intlayer/backend (>=7.0.9-canary.2, <=7.5.9) +29 more potentially affected by CVE-2026-30827 via express-rate-limit (8.2.1)

express-rate-limit NPM version 8.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-rate-limit and may be impacted: - @chrisleekr/mcp-server-playground =1.1.0-dev-0d04f54.1, =7.0.9-canary.2, =1.597.450, =4.0.0, =3.1.0, =0.0.1-canary.1, =0.42.0...

@igea/oac_backend (>=1.0.35, <=1.0.115), @igea/oac_frontend (>=1.0.31, <=1.0.118) +11 more potentially affected by CVE-2026-30827 via express-rate-limit (8.1.0)

express-rate-limit NPM version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on express-rate-limit and may be impacted: - @igea/oacbackend =1.0.35, =1.0.31, =7.0.0-canary.2, =2.0.0-test.19, =0.29.0, =0.16.0, =0.42.0, =0.27.0, =0.42.0, =0.70.0,...

@igea/oac_backend (>=1.0.35, <=1.0.115), @igea/oac_frontend (>=1.0.31, <=1.0.118) +11 more potentially affected by CVE-2026-30827 via express-rate-limit (8.1.0)

express-rate-limit NPM version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on express-rate-limit and may be impacted: - @igea/oacbackend =1.0.35, =1.0.31, =7.0.0-canary.2, =2.0.0-test.19, =0.29.0, =0.16.0, =0.42.0, =0.27.0, =0.42.0, =0.70.0,...

@chrisleekr/mcp-server-playground (>=1.1.0-dev-0d04f54.1, <=1.1.2), @intlayer/backend (>=7.0.9-canary.2, <=7.5.9) +29 more potentially affected by CVE-2026-30827 via express-rate-limit (8.2.1)

express-rate-limit NPM version 8.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-rate-limit and may be impacted: - @chrisleekr/mcp-server-playground =1.1.0-dev-0d04f54.1, =7.0.9-canary.2, =1.597.450, =4.0.0, =3.1.0, =0.0.1-canary.1, =0.42.0...

@george.talusan/node-red-contrib-copilot (>=0.0.5, <=1.0.5), @github/copilot-sdk (>=0.1.9, <=0.1.31-unstable.0) +19 more potentially affected by CVE-2026-29783 via @github/copilot (>=0.0.375, <=0.0.421)

@github/copilot NPM version =0.0.375, =0.0.5, =0.1.9, =1.1.0, =0.0.0, =0.13.0, =0.0.1, =1.2.3, =0.6.0, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.15 - devdoctor-js 0.1.0 and more Source cves: CVE-2026-29783 Source advisory: OSV:GHSA-G8R9-G2V8-JV6F...

@george.talusan/node-red-contrib-copilot (>=0.0.5, <=1.0.5), @github/copilot-sdk (>=0.1.9, <=0.1.31-unstable.0) +19 more potentially affected by CVE-2026-29783 via @github/copilot (>=0.0.375, <=0.0.421)

@github/copilot NPM version =0.0.375, =0.0.5, =0.1.9, =1.1.0, =0.0.0, =0.13.0, =0.0.1, =1.2.3, =0.6.0, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.15 - devdoctor-js 0.1.0 and more Source cves: CVE-2026-29783 Source advisory: SNYK:JS-GITHUBCOPILOT-15468228...

ifood2-github-io (9.9.9) potentially affected by unknown CVE via ifood-github-io (9.9.9)

ifood-github-io NPM version 9.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ifood-github-io and may be impacted: - ifood2-github-io 9.9.9 Source cves: unknown CVE Source advisory: SNYK:JS-IFOODGITHUBIO-16300296...

@amedia/brick-mcp (>=0.0.0-vSNAPSHOT-20260217144000, <=1.0.0), @area15/ticket-component (0.1.0) +108 more potentially affected by CVE-2026-3419 via fastify (>=5.7.2, <=5.7.4)

fastify NPM version =5.7.2, =0.0.0-vSNAPSHOT-20260217144000, =0.5.2, =0.5.2, =0.5.2, =0.5.2, =0.2.11, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.11.6, =5.1.19, =2.21.2, =2.21.2, =2.21.3 and more Source cves: CVE-2026-3419 Source advisory: OSV:GHSA-573F-X89G-HQP9...

@amedia/brick-mcp (>=0.0.0-vSNAPSHOT-20260217144000, <=1.0.0), @area15/ticket-component (0.1.0) +108 more potentially affected by CVE-2026-3419 via fastify (>=5.7.2, <=5.7.4)

fastify NPM version =5.7.2, =0.0.0-vSNAPSHOT-20260217144000, =0.5.2, =0.5.2, =0.5.2, =0.5.2, =0.2.11, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.4.2-next.143, =2.11.6, =5.1.19, =2.21.2, =2.21.2, =2.21.3 and more Source cves: CVE-2026-3419 Source advisory: SNYK:JS-FASTIFY-15428269...

@fonoster/rox (>=0.0.4, <=0.3.7) potentially affected by CVE-2024-43035 via @fonoster/voice (>=0.2.44, <=0.3.31)

@fonoster/voice NPM version =0.2.44, =0.0.4, =0.3.7 Source cves: CVE-2024-43035 Source advisory: SNYK:JS-FONOSTERVOICE-15444910...

bws-web-server (>=0.1.0, <=0.1.1), pingora (>=0.1.0, <=0.6.0) +3 more potentially affected by CVE-2026-2836 via pingora-cache (>=0.1.1, <=0.6.0)

pingora-cache CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.6.0 - revoke-gateway 0.3.0 - static-files-module 0.1.0 Source cves: CVE-2026-2836 Source advisory: OSV:GHSA-F93W-PCJ3-RGGC...