@graphql-mesh/plugin-rate-limit (>=0.2.23-alpha-20230403140649-57714f1dd, <=1.0.0), @graphql-mesh/plugin-snapshot (>=0.1.24-alpha-20230403140649-57714f1dd, <=1.0.0) +13 more potentially affected by CVE-2026-27903 via minimatch (>=8.0.2, <=8.0.4)

minimatch NPM version =8.0.2, =0.2.23-alpha-20230403140649-57714f1dd, =0.1.24-alpha-20230403140649-57714f1dd, =0.15.24-alpha-20230403140649-57714f1dd, =2.0.0-beta.0, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =1.6.0-alpha.9, =1.4.1, =1.4.4 Source cves: CVE-2026-27903...

@0x590fab/sdcor2 (>=4.2.1, <=4.4.0), @cenk1cenk2/renovate-config (>=2.2.33, <=2.3.94) +22 more potentially affected by CVE-2026-27903 via minimatch (>=6.0.0, <=6.2.0)

minimatch NPM version =6.0.0, =4.2.1, =2.2.33, =0.2.6-alpha-20230114225627-66f5d9eac, =0.1.7-alpha-20230114225627-66f5d9eac, =0.15.7-alpha-20230114225627-66f5d9eac, =0.1.0, =3.108.8--canary.1.4727068200.0, =0.0.0, =1.12.0, =1.0.0-beta.13, =0.36.6-0, =0.36.6-0, =0.39.3-0 - editorconfig 1.0.2 and...

02strich-markdown (>=1.0.0, <=1.0.2), @0xintuition/slang-cli (>=0.0.1-b, <=0.0.8) +1944 more potentially affected by CVE-2026-27903 via minimatch (>=4.1.1, <=4.2.4)

minimatch NPM version =4.1.1, =1.0.0, =0.0.1-b, =0.5.2, =5.0.2, =2.2.0, =1.1.4, =1.3.1, =1.0.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =1.1.8, =1.0.0, =1.5.0 and more Source cves: CVE-2026-27903 Source advisory:...

@0zd0/nx-oxfmt (>=0.0.1, <=0.1.1), @10xly/eslint-config (>=1.0.0, <=1.0.8) +1203 more potentially affected by CVE-2026-27904 via minimatch (>=10.0.0, <=10.2.2)

minimatch NPM version =10.0.0, =0.0.1, =1.0.0, =6.0.0-test.1, =10.0.0, =10.0.0, =8.0.1, =13.0.0, =5.1.3, =0.2.0, =0.9.2, =0.5.1-alpha.0, =4.10.0, =4.16.0 and more Source cves: CVE-2026-27904 Source advisory: SNYK:JS-MINIMATCH-15353387...

@graphql-mesh/plugin-rate-limit (>=0.2.23-alpha-20230403140649-57714f1dd, <=1.0.0), @graphql-mesh/plugin-snapshot (>=0.1.24-alpha-20230403140649-57714f1dd, <=1.0.0) +13 more potentially affected by CVE-2026-27904 via minimatch (>=8.0.2, <=8.0.4)

minimatch NPM version =8.0.2, =0.2.23-alpha-20230403140649-57714f1dd, =0.1.24-alpha-20230403140649-57714f1dd, =0.15.24-alpha-20230403140649-57714f1dd, =2.0.0-beta.0, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =0.42.1, =1.6.0-alpha.9, =1.4.1, =1.4.4 Source cves: CVE-2026-27904...

10up-toolkit (>=6.0.0-next.0, <=7.0.0-next.1), @0ti.me/ts-test-deps (0.2.0) +6561 more potentially affected by CVE-2026-27904 via minimatch (>=9.0.0, <=9.0.6)

minimatch NPM version =9.0.0, =6.0.0-next.0, =1.1.0-pre.1, =1.4.0, =9.1.0, =1.17.3-testing-284.48.0, =1.0.0, =1.1.6, =0.0.0-alpha.1011313d2aaf, =1.1.3, =1.0.6, =1.0.25 and more Source cves: CVE-2026-27904 Source advisory: SNYK:JS-MINIMATCH-15353387...

@lapidist/design-lint (>=6.1.0, <=7.0.1), @markuplint/svelte-parser (>=5.0.0-alpha.0, <=5.0.0-alpha.2) +2 more potentially affected by CVE-2026-27902 via svelte (>=5.53.0, <=5.53.3)

svelte NPM version =5.53.0, =6.1.0, =5.0.0-alpha.0, =5.0.0-alpha.2 - @networkpro/web 1.26.10 - dumbo-svelte 0.3.1 Source cves: CVE-2026-27902 Source advisory: SNYK:JS-SVELTE-15353447...

@dxos/storybook-utils (>=0.8.4-main.9735255, <=0.11.1), @payfit/unity-components (>=2.1.4, <=2.9.6) +8 more potentially affected by CVE-2026-27148 via storybook (>=10.0.0, <=10.2.9)

storybook NPM version =10.0.0, =0.8.4-main.9735255, =2.1.4, =10.0.0-beta.0, =10.0.0-beta.0, =12.0.7, =12.0.5, =1.2.0, =10.0.0-beta.0, =10.0.0-beta.0, =10.2.9 - storybook-renku 0.0.2 Source cves: CVE-2026-27148 Source advisory: SNYK:JS-STORYBOOK-15353401...

@asherng/storybook (>=0.0.18, <=0.1.14), @bluefin-exchange/starship-v2 (>=1.1.1, <=1.1.16) +32 more potentially affected by CVE-2026-27148 via storybook (>=7.0.6, <=7.6.20)

storybook NPM version =7.0.6, =0.0.18, =1.1.1, =0.0.1, =0.0.4, =1.2.108, =3.50.0-next.2, =9.0.0-next.4, =1.0.967, =0.0.1, =1.0.0-beta.1, =1.2.2, =0.0.1, =0.0.1, =7.6.4-next.32, =6.0.0-canary.234, =6.0.0-canary.318 and more Source cves: CVE-2026-27148 Source advisory: SNYK:JS-STORYBOOK-15353401...

@asherng/storybook (>=1.0.6, <=1.0.15), @asng/storybook (>=0.0.0-AddSnapshotPipeline-20240326102812, <=0.0.10) +31 more potentially affected by CVE-2026-27148 via storybook (>=8.0.2, <=8.6.16)

storybook NPM version =8.0.2, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =1.5.1-canary.0, =0.4.2, =0.1.3, =1.0.0-canary.12734, =0.11.1-aa792aa-20250325153437, =0.12.1-aa792aa-20250325153437, =0.0.1-10adad4-20260325085110, =1.0.12, =3.32.0-rc.2, =9.0.0-next.47, =7.33.6-qa-airteam-7.35.1.0,...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @cedarjs/cli-storybook-vite (>=1.0.0-canary.12742, <=1.0.0-canary.12784) +15 more potentially affected by CVE-2026-27148 via storybook (>=9.0.0, <=9.1.18)

storybook NPM version =9.0.0, =0.0.1, =1.0.0-canary.12742, =2.0.0-beta.3, =0.0.2-alpha.0, =1.0.0, =1.1.0, =0.1.80, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.2, =9.0.0-alpha.0, =1.2.1, =0.0.75-beta.11, =1.2.7-beta.2 and more Source cves: CVE-2026-27148 Source advisory: SNYK:JS-STORYBOOK-1535340...

@cognigy/cognigy-cli (>=1.9.7, <=2.2.7), @forestadmin/agent (>=1.71.0, <=1.72.9) +29 more potentially affected by CVE-2026-27795 via @langchain/community (>=1.0.0, <=1.1.16)

@langchain/community NPM version =1.0.0, =1.9.7, =1.71.0, =1.1.0, =1.12.76, =0.0.1, =0.1.0, =0.2.0, =0.20.0, =0.21.0, =0.0.16, =1.4.13, =1.0.1, =1.0.24, =1.0.26 and more Source cves: CVE-2026-27795 Source advisory: OSV:GHSA-MPHV-75CG-56WG...

@cognigy/cognigy-cli (>=1.9.7, <=2.2.7), @forestadmin/agent (>=1.71.0, <=1.72.9) +29 more potentially affected by CVE-2026-27795 via @langchain/community (>=1.0.0, <=1.1.16)

@langchain/community NPM version =1.0.0, =1.9.7, =1.71.0, =1.1.0, =1.12.76, =0.0.1, =0.1.0, =0.2.0, =0.20.0, =0.21.0, =0.0.16, =1.4.13, =1.0.1, =1.0.24, =1.0.26 and more Source cves: CVE-2026-27795 Source advisory: SNYK:JS-LANGCHAINCOMMUNITY-15354988...

@angular-devkit/build-angular (>=19.0.0-next.0, <=19.2.20), @eui/deps-base (>=19.0.0-next.1, <=19.3.14) +11 more potentially affected by CVE-2026-27739 via @angular/build (>=19.0.0, <=19.2.20)

@angular/build NPM version =19.0.0, =19.0.0-next.0, =19.0.0-next.1, =19.0.0-next.1, =20.6.2-beta.0, =20.6.2-beta.0, =20.6.2-beta.0, =20.6.2-beta.0, =20.6.2-beta.0, =20.6.2-beta.0, =19.0.0, =19.0.1 - @ws-test-realm/admin-kit 0.5.0-ng19 - @ws-test-realm/devkit 0.7.0-ng19 - ng-deploy-oss 19.0.0 Sour...

@nestjs/ng-universal (>=7.1.0, <=7.1.1) potentially affected by CVE-2026-27739 via @nguniversal/express-engine (16.0.0)

@nguniversal/express-engine NPM version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @nguniversal/express-engine and may be impacted: - @nestjs/ng-universal =7.1.0, =7.1.1 Source cves: CVE-2026-27739 Source advisory: OSV:GHSA-X288-3778-4HHX...

@abp/ng.schematics (>=9.3.0-rc.3, <=10.0.3), @ama-styling/style-dictionary (>=13.0.0-next.10, <=14.0.0-next.2) +14 more potentially affected by CVE-2026-27739 via @schematics/angular (>=20.0.0, <=20.3.16)

@schematics/angular NPM version =20.0.0, =9.3.0-rc.3, =13.0.0-next.10, =20.0.0-next.0, =20.0.0-next.0, =20.0.0-next.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.0.0-next.1, =13.0.0-next.10, =13.0.0-next.10, =0.0.1-alpha.564, =1.0.8, =1.0.9 -...

@angular-devkit/build-angular (>=21.0.0-next.0, <=21.1.4), @eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1) +3 more potentially affected by CVE-2026-27739 via @angular/build (>=21.0.0, <=21.1.4)

@angular/build NPM version =21.0.0, =21.0.0-next.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =21.0.0-next.1, =21.2.0 - ng-deploy-oss 21.0.0 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-ANGULARBUILD-15357312...

@eui/deps-base-light-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32), @eui/deps-base-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32) +1 more potentially affected by CVE-2026-27739 via @angular-devkit/build-angular (>=20.0.0, <=20.1.0)

@angular-devkit/build-angular NPM version =20.0.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 - ng-deploy-oss 20.0.0 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-ANGULARDEVKITBUILDANGULAR-15357315...

create-momentum-app (>=0.1.2, <=0.5.0) potentially affected by CVE-2026-27739 via @angular/ssr (21.1.2)

@angular/ssr NPM version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/ssr and may be impacted: - create-momentum-app =0.1.2, =0.5.0 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-ANGULARSSR-15357314...

@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8), @manniwatch/client-desktop (>=0.30.0, <=0.30.1) +3 more potentially affected by CVE-2026-27739 via @angular/ssr (>=19.0.5, <=19.2.19)

@angular/ssr NPM version =19.0.5, =1.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2026-27739 Source advisory: OSV:GHSA-X288-3778-4HHX...

@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8), @manniwatch/client-desktop (>=0.30.0, <=0.30.1) +3 more potentially affected by CVE-2026-27739 via @angular/ssr (>=19.0.5, <=19.2.19)

@angular/ssr NPM version =19.0.5, =1.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-ANGULARSSR-15357314...

@abp/ng.schematics (>=9.1.0-rc.1, <=9.3.0-rc.2), @analink/source (1.1.0) +13 more potentially affected by CVE-2026-27739 via @schematics/angular (>=19.0.0, <=19.2.20)

@schematics/angular NPM version =19.0.0, =9.1.0-rc.1, =4.0.0, =19.0.0-next.0, =19.0.0-next.0, =19.0.0-next.0, =3.0.0-rc.3, =19.0.0-next.1, =19.0.0-next.1, =19.0.1430-rc.0, =12.0.0-next.11, =1.0.0-alpha.12, =1.0.0-alpha.14 Source cves: CVE-2026-27739 Source advisory:...

@eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1), @eui/deps-base-light (>=21.0.0-alpha.10, <=23.0.0-alpha.1) +1 more potentially affected by CVE-2026-27739 via @angular-devkit/build-angular (>=21.0.0, <=21.1.0)

@angular-devkit/build-angular NPM version =21.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =23.0.0-alpha.1 - ng-deploy-oss 21.0.0 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-ANGULARDEVKITBUILDANGULAR-15357315...

@nestjs/ng-universal (>=7.1.0, <=7.1.1), @nguniversal/builders (>=16.0.0-next.0, <=16.1.3) +1 more potentially affected by CVE-2026-27739 via @nguniversal/common (>=16.0.0, <=16.1.3)

@nguniversal/common NPM version =16.0.0, =7.1.0, =16.0.0-next.0, =16.0.0-next.0, =16.1.3 Source cves: CVE-2026-27739 Source advisory: OSV:GHSA-X288-3778-4HHX...

create-momentum-app (>=0.1.2, <=0.5.0) potentially affected by CVE-2026-27739 via @angular/ssr (21.1.2)

@angular/ssr NPM version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/ssr and may be impacted: - create-momentum-app =0.1.2, =0.5.0 Source cves: CVE-2026-27739 Source advisory: OSV:GHSA-X288-3778-4HHX...

@eui/deps-base (>=19.0.0-next.1, <=19.3.14), @eui/deps-base-light (>=19.0.0-next.1, <=19.3.14) +4 more potentially affected by CVE-2026-27739 via @angular-devkit/build-angular (>=19.0.0, <=19.2.19)

@angular-devkit/build-angular NPM version =19.0.0, =19.0.0-next.1, =19.0.0-next.1, =19.0.0, =19.0.1 - @ws-test-realm/admin-kit 0.5.0-ng19 - @ws-test-realm/devkit 0.7.0-ng19 - ng-deploy-oss 19.0.0 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-ANGULARDEVKITBUILDANGULAR-15357315...

@abp/ng.schematics (>=10.1.0-rc.1, <=10.2.1), @ama-sdk/create (>=14.0.0-next.13, <=14.1.0-prerelease.6) +8 more potentially affected by CVE-2026-27739 via @schematics/angular (>=21.0.0, <=21.1.4)

@schematics/angular NPM version =21.0.0, =10.1.0-rc.1, =14.0.0-next.13, =14.0.0-next.13, =21.0.0-next.0, =21.0.0-next.0, =21.0.0-next.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =0.0.131, =14.0.0-next.13, =14.1.0-prerelease.6 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-SCHEMATICSANGULAR-15357...

@angular-devkit/build-angular (>=20.0.0-next.0, <=20.3.16), @eui/deps-base-light-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32) +6 more potentially affected by CVE-2026-27739 via @angular/build (>=20.0.0, <=20.3.16)

@angular/build NPM version =20.0.0, =20.0.0-next.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.1.0, =0.0.0-pr-32415-1daf78a, =0.0.0-pr-32415-1daf78a, =0.1.3, =0.1.31 - ng-deploy-oss 20.0.0 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-ANGULARBUILD-15357312...

create-momentum-app (>=0.1.2, <=0.5.0) potentially affected by CVE-2026-27738 via @angular/ssr (21.1.2)

@angular/ssr NPM version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/ssr and may be impacted: - create-momentum-app =0.1.2, =0.5.0 Source cves: CVE-2026-27738 Source advisory: SNYK:JS-ANGULARSSR-15357598...

@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8), @manniwatch/client-desktop (>=0.30.0, <=0.30.1) +3 more potentially affected by CVE-2026-27738 via @angular/ssr (>=19.0.5, <=19.2.19)

@angular/ssr NPM version =19.0.5, =1.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2026-27738 Source advisory: SNYK:JS-ANGULARSSR-15357598...

@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8), @manniwatch/client-desktop (>=0.30.0, <=0.30.1) +3 more potentially affected by CVE-2026-27738 +1 more via @angular/ssr (>=19.0.5, <=19.2.19)

@angular/ssr NPM version =19.0.5, =1.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2026-27738, CVE-2026-33397 Source advisory: OSV:GHSA-XH43-G2FQ-WJRJ...

create-momentum-app (>=0.1.2, <=0.5.0) potentially affected by CVE-2026-27738 +1 more via @angular/ssr (21.1.2)

@angular/ssr NPM version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/ssr and may be impacted: - create-momentum-app =0.1.2, =0.5.0 Source cves: CVE-2026-27738, CVE-2026-33397 Source advisory: OSV:GHSA-XH43-G2FQ-WJRJ...

1k-tasks (>=4.0.0, <=4.2.2), @adobe/helix-deploy (>=9.3.8, <=9.6.1) +406 more potentially affected by CVE-2026-27606 via rollup (>=4.0.2, <=4.58.0)

rollup NPM version =4.0.2, =4.0.0, =9.3.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.3.0, =2.17.15, =1.0.4, =1.9.12, =2.0.4, =2.0.4, =2.0.4, =2.0.5 and more Source cves: CVE-2026-27606 Source advisory: OSV:GHSA-MW96-CPMX-2VGC...

10-javascriptlib (1.0.0), 1k-tasks (>=3.1.0, <=3.6.1) +449 more potentially affected by CVE-2026-27606 via rollup (>=3.0.0, <=3.29.5)

rollup NPM version =3.0.0, =3.1.0, =9.0.19, =0.0.2, =4.0.0-alpha.2, =0.6.0, =12.0.0, =0.0.3, =1.6.3, =3.2.0, =0.1.0, =0.0.4, =3.0.1-canary.8, =3.0.1-canary.12 and more Source cves: CVE-2026-27606 Source advisory: OSV:GHSA-MW96-CPMX-2VGC...

0.2-ui (0.0.1), 1k-tasks (>=2.3.0, <=3.0.2) +2394 more potentially affected by CVE-2026-27606 via rollup (>=2.0.0, <=2.79.2)

rollup NPM version =2.0.0, =2.3.0, =1.0.17, =1.0.0-canary.1, =0.0.74, =0.0.14, =1.0.0, =0.0.10, =0.0.3, =1.0.1, =1.0.12, =1.0.0, =0.0.4, =0.0.5 and more Source cves: CVE-2026-27606 Source advisory: OSV:GHSA-MW96-CPMX-2VGC...

@activeboxes/piece-sftp (0.2.6), @activepieces/piece-apify (0.2.1) +24 more potentially affected by CVE-2026-27699 via basic-ftp (>=5.0.2, <=5.1.0)

basic-ftp NPM version =5.0.2, =0.2.6, =1.0.0, =1.0.0, =2.0.18, =1.9.2, =1.2.0, =4.6.0-blowfish, =1.0.3, =1.0.4, =0.1.1, =0.2.0 and more Source cves: CVE-2026-27699 Source advisory: OSV:GHSA-5RQ4-664W-9X2C...

@chocolatey-software/astro (>=2.0.0, <=2.5.0), choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2026-27729 via @astrojs/node (>=9.2.2, <=9.5.2)

@astrojs/node NPM version =9.2.2, =2.0.0, =0.3.1, =0.4.0 Source cves: CVE-2026-27729 Source advisory: OSV:GHSA-JM64-8M5Q-4QH8...

@n8n/ai-node-sdk (0.2.0), @n8n/ai-utilities (0.4.0) +17 more potentially affected by CVE-2025-68613 +1 more via n8n-workflow (2.10.0)

n8n-workflow NPM version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-workflow and may be impacted: - @n8n/ai-node-sdk 0.2.0 - @n8n/ai-utilities 0.4.0 - @n8n/ai-workflow-builder 1.10.0 - @n8n/api-types 1.10.0 - @n8n/backend-common 1.10.0 ...

@kyuda/n8n-nodes-databricks (>=2.0.0, <=2.0.6), @kyuda/n8n-nodes-databricks-simplified (1.0.0) +20 more potentially affected by CVE-2025-68613 +1 more via n8n-workflow (>=2.0.0, <=2.9.0)

n8n-workflow NPM version =2.0.0, =2.0.0, =0.2.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.1.0, =1.0.0-rc.0, =1.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.9.0 and more Source cves: CVE-2025-68613, CVE-2026-27577 Source advisory: SNYK:JS-N8NWORKFLOW-15357609...

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1) +79 more potentially affected by CVE-2025-68613 +1 more via n8n-workflow (>=1.0.0, <=1.120.8)

n8n-workflow NPM version =1.0.0, =0.2.0, =0.1.5, =0.0.17, =1.0.2, =1.0.1, =0.2.0, =0.19.0, =0.33.0, =0.4.0, =0.11.0, =0.33.0, =1.1.0, =1.1.0, =1.26.8 and more Source cves: CVE-2025-68613, CVE-2026-27577 Source advisory: SNYK:JS-N8NWORKFLOW-15357609...

@n8n/backend-test-utils (>=1.0.0-rc.0, <=1.1.1), @n8n/db (>=1.0.0-rc.0, <=1.1.1) +3 more potentially affected by CVE-2026-27498 via n8n-core (>=2.0.0, <=2.1.1)

n8n-core NPM version =2.0.0, =1.0.0-rc.0, =1.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =0.1.0, =0.11.0 Source cves: CVE-2026-27498 Source advisory: SNYK:JS-N8NCORE-15357608...

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +38 more potentially affected by CVE-2026-27498 via n8n-core (>=1.0.0, <=1.122.3)

n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.26.0, =0.34.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =1.0.1, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =1.4.1 and more Source cves: CVE-2026-27498 Source advisory: SNYK:JS-N8NCORE-15357608...

@klardaten/n8n-nodes-datevconnect (>=1.0.1, <=1.0.2), @n8n/ai-workflow-builder (>=0.2.0, <=0.33.2) +20 more potentially affected by CVE-2026-27498 via @n8n/config (>=1.15.0, <=1.65.1)

@n8n/config NPM version =1.15.0, =1.0.1, =0.2.0, =0.33.0, =0.26.0, =0.34.0, =1.3.0, =0.23.8, =1.51.0, =1.65.0, =1.65.0, =1.0.1, =0.3.3, =0.1.3, =0.2.0, =0.2.0, =4.1.23 and more Source cves: CVE-2026-27498 Source advisory: SNYK:JS-N8NCONFIG-15357607...

@n8n/ai-workflow-builder (>=1.0.0-rc.0, <=1.1.1), @n8n/backend-common (>=1.0.0-rc.0, <=1.1.1) +6 more potentially affected by CVE-2026-27498 via @n8n/config (>=2.0.0, <=2.0.1)

@n8n/config NPM version =2.0.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =0.1.0, =0.11.0 Source cves: CVE-2026-27498 Source advisory: SNYK:JS-N8NCONFIG-15357607...

parse-hipaa-dashboard (>=1.5.0, <=2.0.5) potentially affected by CVE-2026-27610 via parse-dashboard (>=7.3.0, <=8.5.0)

parse-dashboard NPM version =7.3.0, =1.5.0, =2.0.5 Source cves: CVE-2026-27610 Source advisory: OSV:GHSA-JHP4-JVQ3-W5XR...

parse-hipaa-dashboard (>=1.5.0, <=2.0.5) potentially affected by CVE-2026-27610 via parse-dashboard (>=7.3.0, <=8.5.0)

parse-dashboard NPM version =7.3.0, =1.5.0, =2.0.5 Source cves: CVE-2026-27610 Source advisory: SNYK:JS-PARSEDASHBOARD-15366639...

parse-hipaa-dashboard (>=1.5.0, <=2.0.5) potentially affected by CVE-2026-27609 via parse-dashboard (>=7.3.0, <=8.5.0)

parse-dashboard NPM version =7.3.0, =1.5.0, =2.0.5 Source cves: CVE-2026-27609 Source advisory: SNYK:JS-PARSEDASHBOARD-15366640...

parse-hipaa-dashboard (>=1.5.0, <=2.0.5) potentially affected by CVE-2026-27609 via parse-dashboard (>=7.3.0, <=8.5.0)

parse-dashboard NPM version =7.3.0, =1.5.0, =2.0.5 Source cves: CVE-2026-27609 Source advisory: OSV:GHSA-3534-XP88-25RC...

parse-hipaa-dashboard (>=1.5.0, <=2.0.5) potentially affected by CVE-2026-27608 via parse-dashboard (>=7.3.0, <=8.5.0)

parse-dashboard NPM version =7.3.0, =1.5.0, =2.0.5 Source cves: CVE-2026-27608 Source advisory: OSV:GHSA-CVWJ-6C9H-JG6V...

parse-hipaa-dashboard (>=1.5.0, <=2.0.5) potentially affected by CVE-2026-27608 via parse-dashboard (>=7.3.0, <=8.5.0)

parse-dashboard NPM version =7.3.0, =1.5.0, =2.0.5 Source cves: CVE-2026-27608 Source advisory: SNYK:JS-PARSEDASHBOARD-15366642...