Insecure dependency npm/postcss@8.4.31 (CVE-2026-41305: postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags) (update to 8.5.10)

Insecure dependency npm/ws@8.20.0 (CVE-2026-45736: ws is an open source WebSocket client and server for Node.js. Prior to ...) (update to 8.20.1)

Insecure dependency npm/ws@8.20.0 (CVE-2026-48779: ws is an open source WebSocket client and server for Node.js. All vers ...) (update to 8.21.0)

Insecure dependency npm/protobufjs@6.11.3 (CVE-2026-44288: protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences) (update to 7.5.6)

Insecure dependency npm/protobufjs@6.11.3 (CVE-2026-44289: protobuf.js: Denial of service through unbounded protobuf recursion) (update to 7.5.6)

Insecure dependency npm/protobufjs@6.11.3 (CVE-2026-44290: protobuf.js: Process-wide denial of service through unsafe option paths) (update to 7.5.6)

Insecure dependency npm/protobufjs@6.11.3 (CVE-2026-44291: protobuf.js: Code generation gadget after prototype pollution) (update to 7.5.6)

Insecure dependency npm/protobufjs@6.11.3 (CVE-2026-44292: protobuf.js: Prototype injection in generated message constructors) (update to 7.5.6)

Insecure dependency npm/protobufjs@6.11.3 (CVE-2026-44293: protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors) (update to 7.5.6)

Insecure dependency npm/protobufjs@6.11.3 (CVE-2026-44294: protobuf.js: Denial of service from crafted field names in generated code) (update to 7.5.6)

Insecure dependency npm/protobufjs@6.11.3 (CVE-2026-45740: protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion) (update to 7.5.8)

Insecure dependency npm/protobufjs@6.11.3 (CVE-2026-48712: protobufjs: Denial of service through unbounded Any expansion during JSON conversion) (update to 7.6.1)

Insecure dependency npm/protobufjs@6.11.3 (CVE-2026-54269: protobufjs : Schema-derived names can shadow runtime-significant properties) (update to 7.6.3)

Insecure dependency npm/@protobufjs/utf8@1.1.0 (CVE-2026-44288: protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences) (update to 1.1.1)

Insecure dependency npm/jws@3.2.2 (CVE-2025-65945: node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm) (update to 3.2.3)

Insecure dependency npm/ajv@6.12.6 (CVE-2025-69873: ajv: ReDoS via $data reference) (update to 6.14.0)

Insecure dependency npm/brace-expansion@1.1.11 (CVE-2026-33750: brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern) (update to 1.1.13)

Insecure dependency npm/braces@3.0.2 (CVE-2024-4068: braces: fails to limit the number of characters it can handle) (update to 3.0.3)

Insecure dependency npm/minimatch@3.1.2 (CVE-2026-27903: minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns) (update to 10.2.3)

Insecure dependency npm/minimatch@3.1.2 (CVE-2026-27904: minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions) (update to 10.2.3)