@slicedearth/whoisleuth-cli 2.3.0 → 2.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (264) hide show
  1. package/NOTICE +6 -0
  2. package/README.md +19 -15
  3. package/bin/whoisleuth.mjs +8 -1
  4. package/cli/archive-content-digest.mjs +14 -0
  5. package/cli/archive-inspect.mjs +20 -53
  6. package/cli/arguments.mjs +68 -6
  7. package/cli/artifact-validation/case-response.mjs +47 -41
  8. package/cli/artifact-validation/investigation-capsule.mjs +52 -31
  9. package/cli/artifact-validation/lookup-evidence.mjs +12 -6
  10. package/cli/artifact-validation/signed-review.mjs +83 -61
  11. package/cli/artifact-validation/structure-primitives.mjs +1 -105
  12. package/cli/artifact-verify.mjs +90 -24
  13. package/cli/assurance-command-runner.mjs +39 -4
  14. package/cli/bagit-folder.mjs +57 -0
  15. package/cli/bagit-review.mjs +23 -0
  16. package/cli/bounded-json.mjs +1 -1
  17. package/cli/bulk-command-runner.mjs +2 -0
  18. package/cli/bulk-output.mjs +29 -3
  19. package/cli/case-command.mjs +195 -0
  20. package/cli/case-pack.mjs +39 -31
  21. package/cli/command-argument-grammar.mjs +4 -0
  22. package/cli/command-reference.mjs +145 -75
  23. package/cli/completion.mjs +298 -79
  24. package/cli/config-profile.mjs +7 -5
  25. package/cli/ct-event-intake.mjs +12 -12
  26. package/cli/discover.mjs +4 -3
  27. package/cli/discovery-observation-snapshot.mjs +44 -16
  28. package/cli/discovery-scan-command-runner.mjs +2 -0
  29. package/cli/discovery-scan.mjs +7 -4
  30. package/cli/discovery-workflow.mjs +1 -1
  31. package/cli/domain-control-monitor.mjs +50 -20
  32. package/cli/domain-control-observations.mjs +149 -102
  33. package/cli/errors.mjs +33 -1
  34. package/cli/evidence-command-runner.mjs +16 -5
  35. package/cli/evidence-signing.mjs +2 -2
  36. package/cli/external-observation-mapping.mjs +7 -8
  37. package/cli/formatters/terminal-lookup.mjs +18 -46
  38. package/cli/formatters/terminal-shared.mjs +5 -3
  39. package/cli/formatters/terminal-technology.mjs +114 -0
  40. package/cli/inline-command-families.mjs +1 -0
  41. package/cli/interactive-launcher.mjs +2 -160
  42. package/cli/interchange-report.mjs +4 -8
  43. package/cli/investigation-artifacts.mjs +176 -0
  44. package/cli/investigation-checkpoint.mjs +10 -0
  45. package/cli/investigation-folder.mjs +114 -0
  46. package/cli/investigation-manifest.mjs +1 -112
  47. package/cli/investigation-package-review.mjs +103 -0
  48. package/cli/investigation-plan.mjs +32 -19
  49. package/cli/investigation-run.mjs +188 -33
  50. package/cli/local-document-checkpoint.mjs +170 -0
  51. package/cli/lookup-browser.mjs +5 -12
  52. package/cli/lookup-command-runner.mjs +17 -6
  53. package/cli/lookup-diff.mjs +37 -3
  54. package/cli/lookup-plan.mjs +11 -5
  55. package/cli/lookup-reconcile.mjs +10 -8
  56. package/cli/mail-review.mjs +66 -14
  57. package/cli/manual.mjs +1 -0
  58. package/cli/network-command-runner.mjs +2 -0
  59. package/cli/output-file.mjs +31 -5
  60. package/cli/registry-doctor.mjs +3 -1
  61. package/cli/registry-support.mjs +1 -1
  62. package/cli/retained-artifact-diff.mjs +2 -2
  63. package/cli/review-command-runner.mjs +45 -0
  64. package/cli/runner.mjs +55 -6
  65. package/cli/sharing-review.mjs +21 -34
  66. package/cli/signer-trust.mjs +104 -0
  67. package/cli/source-reliability.mjs +74 -83
  68. package/cli/terminal-input.mjs +168 -0
  69. package/cli/workflow-command-runner.mjs +68 -13
  70. package/docs/cli-reference.md +76 -30
  71. package/docs/cli.md +289 -25
  72. package/lib/abort.mjs +4 -1
  73. package/lib/availability.mjs +161 -112
  74. package/lib/bounded-file.mjs +3 -1
  75. package/lib/bounded-html-document.mjs +125 -0
  76. package/lib/bounded-json.mjs +43 -3
  77. package/lib/browser-library-profile.mjs +42 -51
  78. package/lib/browser-library-worker.mjs +112 -0
  79. package/lib/client-behavior-profile.mjs +3 -3
  80. package/lib/ct-search.mjs +11 -4
  81. package/lib/dns-delegation-health.mjs +24 -14
  82. package/lib/dns-inheritance-review.mjs +217 -0
  83. package/lib/dns-intelligence.mjs +36 -23
  84. package/lib/dns-mx.mjs +1 -1
  85. package/lib/dnssec-evidence-validation.mjs +11 -3
  86. package/lib/domain-change-packet.mjs +7 -2
  87. package/lib/domain-change-review.mjs +14 -8
  88. package/lib/domain-control-flight-recorder.mjs +219 -118
  89. package/lib/domain-control-manifest.mjs +117 -57
  90. package/lib/domain-posture-analysis.mjs +20 -7
  91. package/lib/domain-posture-parsers.mjs +88 -6
  92. package/lib/domain-posture.mjs +113 -26
  93. package/lib/evidence-export-privacy.mjs +561 -0
  94. package/lib/evidence-export.mjs +11 -592
  95. package/lib/evidence-report.mjs +3 -1
  96. package/lib/favicon.mjs +117 -41
  97. package/lib/generated/cisa-kev-catalog.mjs +12 -4
  98. package/lib/generated/registrar-standing-catalogue.mjs +7 -7
  99. package/lib/generated/retire-browser-catalog.mjs +2335 -940
  100. package/lib/hostname.mjs +2 -38
  101. package/lib/html-signals.mjs +82 -85
  102. package/lib/http-evidence-bounds.mjs +2 -1
  103. package/lib/http-intelligence.mjs +39 -26
  104. package/lib/lookup-cache.mjs +34 -11
  105. package/lib/lookup-child-profile-contract.mjs +24 -15
  106. package/lib/lookup-diagnostics.mjs +24 -1
  107. package/lib/lookup-progress.mjs +30 -13
  108. package/lib/lookup-response-contract.mjs +1048 -0
  109. package/lib/lookup-response.mjs +7 -10
  110. package/lib/lookup-source-progress.mjs +17 -14
  111. package/lib/lookup.mjs +48 -27
  112. package/lib/observed-network-context.mjs +43 -27
  113. package/lib/outbound-request-bounds.mjs +4 -1
  114. package/lib/page-fingerprints.mjs +69 -133
  115. package/lib/page-role-profile.mjs +12 -8
  116. package/lib/perceptual-hash.mjs +43 -14
  117. package/lib/rdap-bootstrap.mjs +72 -22
  118. package/lib/rdap-client.mjs +15 -7
  119. package/lib/rdap-normalization.mjs +33 -18
  120. package/lib/rdap-search-workbench.mjs +1 -1
  121. package/lib/rdap-transport.mjs +47 -20
  122. package/lib/rdap-types.mjs +2 -1
  123. package/lib/rdap.mjs +18 -3
  124. package/lib/registrable-domain.mjs +21 -1
  125. package/lib/registrar-standing-contract.mjs +1 -0
  126. package/lib/registry-capabilities.mjs +5 -1
  127. package/lib/registry-capability-catalogue.mjs +2 -1
  128. package/lib/registry-dates.mjs +2 -190
  129. package/lib/registry-insights.mjs +56 -18
  130. package/lib/response-policy.mjs +86 -48
  131. package/lib/risk-calibration-summary.mjs +17 -3
  132. package/lib/rpki-evidence.mjs +8 -5
  133. package/lib/safe-fetch.mjs +54 -47
  134. package/lib/security-txt.mjs +10 -7
  135. package/lib/service-binding-dns.mjs +8 -0
  136. package/lib/smtp-transport-review.mjs +27 -15
  137. package/lib/sslbl-certificates.generated.mjs +136 -135
  138. package/lib/static-html-analysis.mjs +117 -146
  139. package/lib/structured-data-identity.mjs +1 -0
  140. package/lib/technology-markup.mjs +100 -0
  141. package/lib/threat-intelligence-manifests.mjs +11 -139
  142. package/lib/threat-intelligence-runtime.mjs +24 -52
  143. package/lib/threat-intelligence-targets.mjs +6 -34
  144. package/lib/threat-intelligence-types.mjs +39 -0
  145. package/lib/typosquat-generator.mjs +19 -15
  146. package/lib/urlhaus-intelligence.mjs +8 -3
  147. package/lib/urlscan-intelligence.mjs +1 -1
  148. package/lib/website-security-posture.mjs +30 -6
  149. package/lib/website-technology.mjs +111 -71
  150. package/lib/whois-authority.mjs +14 -2
  151. package/lib/whois-chain.mjs +9 -2
  152. package/lib/whois-common-formats.mjs +5 -5
  153. package/lib/whois-contracts.mjs +2 -1
  154. package/lib/whois-dialects.mjs +2 -2
  155. package/lib/whois-parser-support.mjs +8 -1
  156. package/lib/whois-transport.mjs +23 -7
  157. package/package.json +2 -1
  158. package/packages/cases/case-attachment-model.mjs +83 -0
  159. package/packages/cases/case-evidence-model.mjs +156 -62
  160. package/packages/cases/case-export-input.mjs +53 -0
  161. package/packages/cases/case-migration-model.mjs +59 -25
  162. package/packages/cases/case-model.mjs +1 -0
  163. package/packages/cases/case-recheck-model.mjs +91 -0
  164. package/packages/cases/case-record-core.mjs +3 -2
  165. package/packages/cases/case-record-operations.mjs +89 -27
  166. package/packages/cases/case-record-projection.mjs +23 -20
  167. package/packages/cases/case-report.mjs +63 -52
  168. package/packages/cases/case-response-actions.mjs +654 -0
  169. package/packages/cases/case-response-model.mjs +41 -1129
  170. package/packages/cases/case-response-outcomes.mjs +317 -0
  171. package/packages/cases/case-response-packet-render.mjs +153 -0
  172. package/packages/cases/case-response-packet-types.mjs +1 -0
  173. package/packages/cases/case-response-packet-vocabulary.mjs +48 -0
  174. package/packages/cases/case-response-packet.mjs +38 -587
  175. package/packages/cases/case-response-records.mjs +94 -0
  176. package/packages/cases/case-response-review-inputs.mjs +371 -0
  177. package/packages/cases/case-response-values.mjs +85 -0
  178. package/packages/cases/case-review-package.mjs +45 -0
  179. package/packages/cases/case-selection.mjs +46 -0
  180. package/packages/cases/case-storage-model.mjs +25 -0
  181. package/packages/cases/response-route-freshness.mjs +16 -0
  182. package/packages/comparison/capture-context.mjs +61 -0
  183. package/packages/comparison/comparison-ledger-bulk.mjs +4 -1
  184. package/packages/comparison/page-similarity.mjs +2 -1
  185. package/packages/comparison/relationship-evidence.mjs +85 -8
  186. package/packages/comparison/relationship-provenance.mjs +93 -0
  187. package/packages/contracts/analyst-interchange.mjs +216 -0
  188. package/packages/contracts/analyst-review-state-contract.mjs +11 -0
  189. package/packages/contracts/analyst-review-state.mjs +5 -4
  190. package/packages/contracts/case-portability.mjs +279 -116
  191. package/packages/contracts/case-views-contract.mjs +12 -0
  192. package/packages/contracts/case-views.mjs +26 -0
  193. package/packages/contracts/cli-command-semantics.mjs +1 -0
  194. package/packages/contracts/cli-lookup.mjs +0 -1
  195. package/packages/contracts/domain-control-flight-recorder.mjs +80 -42
  196. package/packages/contracts/domain-control-manifest.mjs +127 -73
  197. package/packages/contracts/domain-control-monitor.mjs +48 -45
  198. package/packages/contracts/domain-control-review.mjs +179 -121
  199. package/packages/contracts/domain-name.mjs +21 -0
  200. package/packages/contracts/external-observation-interchange.mjs +2 -1
  201. package/packages/contracts/extracted-domain-lifecycle.mjs +11 -32
  202. package/packages/contracts/http-url.mjs +2 -0
  203. package/packages/contracts/investigation-package-limits.mjs +24 -0
  204. package/packages/contracts/investigation-portability.mjs +56 -27
  205. package/packages/contracts/investigation-run.mjs +16 -0
  206. package/packages/contracts/ip-address.mjs +34 -0
  207. package/packages/contracts/lookup-evidence.mjs +35 -0
  208. package/packages/contracts/offline-comparison.mjs +1 -2
  209. package/packages/contracts/page-fingerprints.mjs +15 -0
  210. package/packages/contracts/risk-calibration.mjs +0 -1
  211. package/packages/contracts/schema-compatibility.mjs +1 -1
  212. package/packages/contracts/schema-lifecycle.mjs +83 -153
  213. package/packages/contracts/selected-file-limits.mjs +6 -0
  214. package/packages/contracts/vulnerability-identifiers.mjs +5 -0
  215. package/packages/contracts/web-capture.mjs +10 -0
  216. package/packages/contracts/workspace-portability.mjs +160 -225
  217. package/packages/evidence/artifact-integrity.mjs +8 -2
  218. package/packages/evidence/artifact-structure.mjs +105 -0
  219. package/packages/evidence/decision-fact.mjs +4 -1
  220. package/packages/evidence/domain-control-runtime.mjs +155 -27
  221. package/packages/evidence/domain-posture-context.mjs +79 -0
  222. package/packages/evidence/image-regions.mjs +56 -0
  223. package/packages/evidence/latest-observations.mjs +28 -0
  224. package/packages/evidence/lookup-target.mjs +104 -0
  225. package/packages/evidence/observation.mjs +16 -1
  226. package/packages/evidence/passphrase-encryption.mjs +44 -0
  227. package/packages/evidence/record-identity.mjs +72 -0
  228. package/packages/evidence/registry-dates.mjs +190 -0
  229. package/packages/evidence/retained-file.mjs +69 -0
  230. package/packages/evidence/review-age.mjs +14 -0
  231. package/packages/interchange/bagit.mjs +342 -0
  232. package/packages/interchange/bounded-zip-extraction.mjs +278 -0
  233. package/packages/interchange/crc32.mjs +17 -0
  234. package/packages/interchange/external-findings-import.mjs +89 -49
  235. package/packages/interchange/web-capture-import.mjs +382 -0
  236. package/packages/investigation/bulk-mail-exposure.mjs +2 -1
  237. package/packages/investigation/investigation-bagit.mjs +14 -0
  238. package/packages/investigation/investigation-capsule.mjs +33 -5
  239. package/packages/investigation/investigation-manifest.mjs +200 -0
  240. package/packages/investigation/investigation-package-crypto.mjs +98 -0
  241. package/packages/investigation/investigation-package.mjs +200 -0
  242. package/packages/investigation/lookup-asset-graph-inputs.mjs +38 -0
  243. package/packages/investigation/lookup-asset-graph.mjs +161 -141
  244. package/packages/investigation/lookup-claim-readiness.mjs +18 -0
  245. package/packages/investigation/lookup-investigation-brief.mjs +3 -3
  246. package/packages/investigation/lookup-task-guidance.mjs +58 -0
  247. package/packages/monitoring/analyst-review-state.mjs +38 -90
  248. package/packages/workspace/brand-profile-model.mjs +158 -20
  249. package/packages/workspace/bulk-columns.mjs +17 -0
  250. package/packages/workspace/bulk-review-model.mjs +11 -5
  251. package/packages/workspace/bulk-session-model.mjs +95 -20
  252. package/packages/workspace/bulk-sort.mjs +1 -0
  253. package/packages/workspace/case-views.mjs +102 -0
  254. package/packages/workspace/hostile-input.mjs +29 -8
  255. package/packages/workspace/investigation-template-model.mjs +19 -4
  256. package/packages/workspace/page-baseline.mjs +18 -15
  257. package/packages/workspace/relationship-observation-model.mjs +41 -26
  258. package/packages/workspace/watchlist-history.mjs +2 -2
  259. package/packages/workspace/watchlist-store.mjs +8 -2
  260. package/packages/workspace/website-snapshot-model.mjs +70 -30
  261. package/packages/workspace/workspace-archive-crypto.mjs +41 -61
  262. package/packages/workspace/workspace-archive.mjs +85 -21
  263. package/third-party-notices.txt +29 -2
  264. package/packages/investigation/bulk-review-export.mjs +0 -63
package/lib/generated/retire-browser-catalog.mjs CHANGED
@@ -2,9 +2,9 @@
2
2
  // browser-library catalogue. Apache-2.0 licensed source; do not edit by hand.
3
3
  const RETIRE_BROWSER_CATALOG = Object.freeze({
4
4
  catalogVersion: "retire.js-5.4.3",
5
- sourceRevision: "56ea22d889656f4fbfe47b7df58d410a06ea59b7",
6
- sourceSha256: "afc0e9596a7ace01e81eab25aa26b622817461610199b03a173097a69f7526cc",
7
- sourceUrl: "https://github.com/RetireJS/retire.js/blob/56ea22d889656f4fbfe47b7df58d410a06ea59b7/repository/jsrepository.json",
5
+ sourceRevision: "db79fa77c86e24d91c9ce1934ad9f2a640242774",
6
+ sourceSha256: "574f68690a6f5031ac7602936196a3f4531407bc79fafec0f49278241fda857a",
7
+ sourceUrl: "https://github.com/RetireJS/retire.js/blob/db79fa77c86e24d91c9ce1934ad9f2a640242774/repository/jsrepository.json",
8
8
  components: {
9
9
  "jquery": {
10
10
  "extractors": {
@@ -993,6 +993,48 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
993
993
  "githubID": "GHSA-V626-R774-J7F8"
994
994
  }
995
995
  },
996
+ {
997
+ "below": "5.10.10",
998
+ "severity": "high",
999
+ "atOrAbove": "0",
1000
+ "cwe": [
1001
+ "CWE-79"
1002
+ ],
1003
+ "identifiers": {
1004
+ "CVE": [
1005
+ "CVE-2026-47759"
1006
+ ],
1007
+ "githubID": "GHSA-Q742-QVGC-GC2F"
1008
+ }
1009
+ },
1010
+ {
1011
+ "below": "5.10.10",
1012
+ "severity": "high",
1013
+ "atOrAbove": "0",
1014
+ "cwe": [
1015
+ "CWE-79"
1016
+ ],
1017
+ "identifiers": {
1018
+ "CVE": [
1019
+ "CVE-2026-47762"
1020
+ ],
1021
+ "githubID": "GHSA-V98H-VMPC-FPQV"
1022
+ }
1023
+ },
1024
+ {
1025
+ "below": "5.10.10",
1026
+ "severity": "high",
1027
+ "atOrAbove": "0",
1028
+ "cwe": [
1029
+ "CWE-79"
1030
+ ],
1031
+ "identifiers": {
1032
+ "CVE": [
1033
+ "CVE-2026-47761"
1034
+ ],
1035
+ "githubID": "GHSA-VG35-5WQ7-3X7W"
1036
+ }
1037
+ },
996
1038
  {
997
1039
  "below": "5.11.0",
998
1040
  "severity": "medium",
@@ -1133,6 +1175,20 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
1133
1175
  "githubID": "GHSA-5359-PVF2-PW78"
1134
1176
  }
1135
1177
  },
1178
+ {
1179
+ "below": "7.1.0",
1180
+ "severity": "high",
1181
+ "atOrAbove": "6.8.0",
1182
+ "cwe": [
1183
+ "CWE-79"
1184
+ ],
1185
+ "identifiers": {
1186
+ "CVE": [
1187
+ "CVE-2026-47760"
1188
+ ],
1189
+ "githubID": "GHSA-MH5M-5HW4-5C69"
1190
+ }
1191
+ },
1136
1192
  {
1137
1193
  "below": "7.2.0",
1138
1194
  "severity": "medium",
@@ -1160,6 +1216,90 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
1160
1216
  ],
1161
1217
  "githubID": "GHSA-W9JX-4G6G-RP7X"
1162
1218
  }
1219
+ },
1220
+ {
1221
+ "below": "7.9.3",
1222
+ "severity": "high",
1223
+ "atOrAbove": "6.0.0",
1224
+ "cwe": [
1225
+ "CWE-79"
1226
+ ],
1227
+ "identifiers": {
1228
+ "CVE": [
1229
+ "CVE-2026-47759"
1230
+ ],
1231
+ "githubID": "GHSA-Q742-QVGC-GC2F"
1232
+ }
1233
+ },
1234
+ {
1235
+ "below": "7.9.3",
1236
+ "severity": "high",
1237
+ "atOrAbove": "6.0.0",
1238
+ "cwe": [
1239
+ "CWE-79"
1240
+ ],
1241
+ "identifiers": {
1242
+ "CVE": [
1243
+ "CVE-2026-47762"
1244
+ ],
1245
+ "githubID": "GHSA-V98H-VMPC-FPQV"
1246
+ }
1247
+ },
1248
+ {
1249
+ "below": "7.9.3",
1250
+ "severity": "high",
1251
+ "atOrAbove": "6.0.0",
1252
+ "cwe": [
1253
+ "CWE-79"
1254
+ ],
1255
+ "identifiers": {
1256
+ "CVE": [
1257
+ "CVE-2026-47761"
1258
+ ],
1259
+ "githubID": "GHSA-VG35-5WQ7-3X7W"
1260
+ }
1261
+ },
1262
+ {
1263
+ "below": "8.5.1",
1264
+ "severity": "high",
1265
+ "atOrAbove": "8.0.0",
1266
+ "cwe": [
1267
+ "CWE-79"
1268
+ ],
1269
+ "identifiers": {
1270
+ "CVE": [
1271
+ "CVE-2026-47759"
1272
+ ],
1273
+ "githubID": "GHSA-Q742-QVGC-GC2F"
1274
+ }
1275
+ },
1276
+ {
1277
+ "below": "8.5.1",
1278
+ "severity": "high",
1279
+ "atOrAbove": "8.0.0",
1280
+ "cwe": [
1281
+ "CWE-79"
1282
+ ],
1283
+ "identifiers": {
1284
+ "CVE": [
1285
+ "CVE-2026-47762"
1286
+ ],
1287
+ "githubID": "GHSA-V98H-VMPC-FPQV"
1288
+ }
1289
+ },
1290
+ {
1291
+ "below": "8.5.1",
1292
+ "severity": "high",
1293
+ "atOrAbove": "8.0.0",
1294
+ "cwe": [
1295
+ "CWE-79"
1296
+ ],
1297
+ "identifiers": {
1298
+ "CVE": [
1299
+ "CVE-2026-47761"
1300
+ ],
1301
+ "githubID": "GHSA-VG35-5WQ7-3X7W"
1302
+ }
1163
1303
  }
1164
1304
  ]
1165
1305
  },
@@ -2174,6 +2314,21 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
2174
2314
  "githubID": "GHSA-MQM9-C95H-X2P6"
2175
2315
  }
2176
2316
  },
2317
+ {
2318
+ "below": "1.8.4",
2319
+ "severity": "high",
2320
+ "atOrAbove": "1.2.0-rc.3",
2321
+ "cwe": [
2322
+ "CWE-79",
2323
+ "CWE-791"
2324
+ ],
2325
+ "identifiers": {
2326
+ "CVE": [
2327
+ "CVE-2026-11998"
2328
+ ],
2329
+ "githubID": "GHSA-7X27-G8RG-X87W"
2330
+ }
2331
+ },
2177
2332
  {
2178
2333
  "below": "1.8.4",
2179
2334
  "severity": "high",
@@ -3121,6 +3276,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
3121
3276
  "CWE-1321"
3122
3277
  ],
3123
3278
  "identifiers": {
3279
+ "CVE": [
3280
+ "CVE-2026-65913"
3281
+ ],
3124
3282
  "githubID": "GHSA-CJ63-JHHR-WCXV"
3125
3283
  }
3126
3284
  },
@@ -3132,6 +3290,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
3132
3290
  "CWE-183"
3133
3291
  ],
3134
3292
  "identifiers": {
3293
+ "CVE": [
3294
+ "CVE-2026-65912"
3295
+ ],
3135
3296
  "githubID": "GHSA-CJMM-F4JC-QW8R"
3136
3297
  }
3137
3298
  },
@@ -3143,6 +3304,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
3143
3304
  "CWE-79"
3144
3305
  ],
3145
3306
  "identifiers": {
3307
+ "CVE": [
3308
+ "CVE-2026-65914"
3309
+ ],
3146
3310
  "githubID": "GHSA-H8R8-WCCR-V5F2"
3147
3311
  }
3148
3312
  },
@@ -3168,6 +3332,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
3168
3332
  "CWE-783"
3169
3333
  ],
3170
3334
  "identifiers": {
3335
+ "CVE": [
3336
+ "CVE-2026-65903"
3337
+ ],
3171
3338
  "githubID": "GHSA-39Q2-94RC-95CP"
3172
3339
  }
3173
3340
  },
@@ -3215,6 +3382,169 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
3215
3382
  ],
3216
3383
  "githubID": "GHSA-V9JR-RG53-9PGP"
3217
3384
  }
3385
+ },
3386
+ {
3387
+ "below": "3.4.5",
3388
+ "severity": "high",
3389
+ "atOrAbove": "3.4.4",
3390
+ "cwe": [
3391
+ "CWE-79"
3392
+ ],
3393
+ "identifiers": {
3394
+ "CVE": [
3395
+ "CVE-2026-47423"
3396
+ ],
3397
+ "githubID": "GHSA-87XG-PXX2-7HVX"
3398
+ }
3399
+ },
3400
+ {
3401
+ "below": "3.4.6",
3402
+ "severity": "medium",
3403
+ "atOrAbove": "0",
3404
+ "cwe": [
3405
+ "CWE-79",
3406
+ "CWE-501",
3407
+ "CWE-693"
3408
+ ],
3409
+ "identifiers": {
3410
+ "CVE": [
3411
+ "CVE-2026-49458"
3412
+ ],
3413
+ "githubID": "GHSA-HPCV-96WG-7VJ8"
3414
+ }
3415
+ },
3416
+ {
3417
+ "below": "3.4.6",
3418
+ "severity": "medium",
3419
+ "atOrAbove": "0",
3420
+ "cwe": [
3421
+ "CWE-79",
3422
+ "CWE-693",
3423
+ "CWE-1321"
3424
+ ],
3425
+ "identifiers": {
3426
+ "CVE": [
3427
+ "CVE-2026-49459"
3428
+ ],
3429
+ "githubID": "GHSA-R47G-FVHR-H676"
3430
+ }
3431
+ },
3432
+ {
3433
+ "below": "3.4.7",
3434
+ "severity": "medium",
3435
+ "atOrAbove": "0",
3436
+ "cwe": [
3437
+ "CWE-501",
3438
+ "CWE-693"
3439
+ ],
3440
+ "identifiers": {
3441
+ "CVE": [
3442
+ "CVE-2026-65902"
3443
+ ],
3444
+ "githubID": "GHSA-76MC-F452-CXCM"
3445
+ }
3446
+ },
3447
+ {
3448
+ "below": "3.4.7",
3449
+ "severity": "medium",
3450
+ "atOrAbove": "0",
3451
+ "cwe": [
3452
+ "CWE-79"
3453
+ ],
3454
+ "identifiers": {
3455
+ "CVE": [
3456
+ "CVE-2026-49978"
3457
+ ],
3458
+ "githubID": "GHSA-RP9W-3FW7-7CWQ"
3459
+ }
3460
+ },
3461
+ {
3462
+ "below": "3.4.7",
3463
+ "severity": "low",
3464
+ "atOrAbove": "0",
3465
+ "cwe": [
3466
+ "CWE-79"
3467
+ ],
3468
+ "identifiers": {
3469
+ "CVE": [
3470
+ "CVE-2026-65901"
3471
+ ],
3472
+ "githubID": "GHSA-X4VX-RJVF-J5P4"
3473
+ }
3474
+ },
3475
+ {
3476
+ "below": "3.4.8",
3477
+ "severity": "low",
3478
+ "atOrAbove": "3.0.0",
3479
+ "cwe": [
3480
+ "CWE-79"
3481
+ ],
3482
+ "identifiers": {
3483
+ "CVE": [
3484
+ "CVE-2026-65900"
3485
+ ],
3486
+ "githubID": "GHSA-GVMJ-G25R-R7WR"
3487
+ }
3488
+ },
3489
+ {
3490
+ "below": "3.4.9",
3491
+ "severity": "low",
3492
+ "atOrAbove": "0",
3493
+ "cwe": [
3494
+ "CWE-693"
3495
+ ],
3496
+ "identifiers": {
3497
+ "CVE": [
3498
+ "CVE-2026-65899"
3499
+ ],
3500
+ "githubID": "GHSA-VXR8-FQ34-VVX9"
3501
+ }
3502
+ },
3503
+ {
3504
+ "below": "3.4.11",
3505
+ "severity": "medium",
3506
+ "atOrAbove": "0",
3507
+ "cwe": [
3508
+ "CWE-471",
3509
+ "CWE-665",
3510
+ "CWE-79"
3511
+ ],
3512
+ "identifiers": {
3513
+ "CVE": [
3514
+ "CVE-2026-65898"
3515
+ ],
3516
+ "githubID": "GHSA-CMWH-PVXP-8882"
3517
+ }
3518
+ },
3519
+ {
3520
+ "below": "3.4.12",
3521
+ "severity": "low",
3522
+ "atOrAbove": "0",
3523
+ "cwe": [
3524
+ "CWE-184",
3525
+ "CWE-693",
3526
+ "CWE-79"
3527
+ ],
3528
+ "identifiers": {
3529
+ "CVE": [
3530
+ "CVE-2026-66010"
3531
+ ],
3532
+ "githubID": "GHSA-C2J3-45GR-MQC4"
3533
+ }
3534
+ },
3535
+ {
3536
+ "below": "3.4.13",
3537
+ "severity": "medium",
3538
+ "atOrAbove": "0",
3539
+ "cwe": [
3540
+ "CWE-79"
3541
+ ],
3542
+ "identifiers": {
3543
+ "CVE": [
3544
+ "CVE-2026-75838"
3545
+ ],
3546
+ "githubID": "GHSA-55Q2-FJHQ-7XH7"
3547
+ }
3218
3548
  }
3219
3549
  ]
3220
3550
  },
@@ -3469,11 +3799,7 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
3469
3799
  "cwe": [
3470
3800
  "CWE-79"
3471
3801
  ],
3472
- "identifiers": {
3473
- "CVE": [
3474
- "CVE-2007-01-09"
3475
- ]
3476
- }
3802
+ "omittedCveIdentifiers": 1
3477
3803
  },
3478
3804
  {
3479
3805
  "below": "2.0.11",
@@ -4636,8 +4962,23 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
4636
4962
  },
4637
4963
  {
4638
4964
  "below": "0.31.1",
4639
- "severity": "medium",
4640
- "atOrAbove": "0",
4965
+ "severity": "high",
4966
+ "atOrAbove": "0.19.0",
4967
+ "cwe": [
4968
+ "CWE-94",
4969
+ "CWE-1321"
4970
+ ],
4971
+ "identifiers": {
4972
+ "CVE": [
4973
+ "CVE-2026-44495"
4974
+ ],
4975
+ "githubID": "GHSA-3G43-6GMG-66JW"
4976
+ }
4977
+ },
4978
+ {
4979
+ "below": "0.31.1",
4980
+ "severity": "medium",
4981
+ "atOrAbove": "0",
4641
4982
  "cwe": [
4642
4983
  "CWE-770"
4643
4984
  ],
@@ -4780,6 +5121,180 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
4780
5121
  "githubID": "GHSA-XX6V-RP6X-Q39C"
4781
5122
  }
4782
5123
  },
5124
+ {
5125
+ "below": "0.32.0",
5126
+ "severity": "medium",
5127
+ "atOrAbove": "0",
5128
+ "cwe": [
5129
+ "CWE-1321"
5130
+ ],
5131
+ "identifiers": {
5132
+ "CVE": [
5133
+ "CVE-2026-44490"
5134
+ ],
5135
+ "githubID": "GHSA-898C-Q2CR-XWHG"
5136
+ }
5137
+ },
5138
+ {
5139
+ "below": "0.32.0",
5140
+ "severity": "high",
5141
+ "atOrAbove": "0",
5142
+ "cwe": [
5143
+ "CWE-400",
5144
+ "CWE-1333"
5145
+ ],
5146
+ "identifiers": {
5147
+ "CVE": [
5148
+ "CVE-2026-44496"
5149
+ ],
5150
+ "githubID": "GHSA-HFXV-24RG-XRQF"
5151
+ }
5152
+ },
5153
+ {
5154
+ "below": "0.32.0",
5155
+ "severity": "high",
5156
+ "atOrAbove": "0",
5157
+ "cwe": [
5158
+ "CWE-200"
5159
+ ],
5160
+ "identifiers": {
5161
+ "CVE": [
5162
+ "CVE-2026-44486"
5163
+ ],
5164
+ "githubID": "GHSA-J5F8-GRM9-P9FC"
5165
+ }
5166
+ },
5167
+ {
5168
+ "below": "0.32.0",
5169
+ "severity": "high",
5170
+ "atOrAbove": "0",
5171
+ "cwe": [
5172
+ "CWE-201"
5173
+ ],
5174
+ "identifiers": {
5175
+ "CVE": [
5176
+ "CVE-2026-44487"
5177
+ ],
5178
+ "githubID": "GHSA-P92Q-9VQR-4J8V"
5179
+ }
5180
+ },
5181
+ {
5182
+ "below": "0.32.0",
5183
+ "severity": "high",
5184
+ "atOrAbove": "0",
5185
+ "cwe": [
5186
+ "CWE-289",
5187
+ "CWE-918"
5188
+ ],
5189
+ "identifiers": {
5190
+ "CVE": [
5191
+ "CVE-2026-44492"
5192
+ ],
5193
+ "githubID": "GHSA-PJWM-PJ3P-43MV"
5194
+ }
5195
+ },
5196
+ {
5197
+ "below": "0.33.0",
5198
+ "severity": "medium",
5199
+ "atOrAbove": "0.8.0",
5200
+ "cwe": [
5201
+ "CWE-1321"
5202
+ ],
5203
+ "identifiers": {
5204
+ "CVE": [
5205
+ "CVE-2026-67319"
5206
+ ],
5207
+ "githubID": "GHSA-7Q8Q-RJ6J-MHJQ"
5208
+ }
5209
+ },
5210
+ {
5211
+ "below": "0.33.0",
5212
+ "severity": "medium",
5213
+ "atOrAbove": "0.28.0",
5214
+ "cwe": [
5215
+ "CWE-400",
5216
+ "CWE-674"
5217
+ ],
5218
+ "identifiers": {
5219
+ "CVE": [
5220
+ "CVE-2026-67313"
5221
+ ],
5222
+ "githubID": "GHSA-42H9-826W-CGV3"
5223
+ }
5224
+ },
5225
+ {
5226
+ "below": "0.33.0",
5227
+ "severity": "medium",
5228
+ "atOrAbove": "0.28.0",
5229
+ "cwe": [
5230
+ "CWE-400",
5231
+ "CWE-770"
5232
+ ],
5233
+ "identifiers": {
5234
+ "CVE": [
5235
+ "CVE-2026-67312"
5236
+ ],
5237
+ "githubID": "GHSA-PMV8-RQ9R-6J72"
5238
+ }
5239
+ },
5240
+ {
5241
+ "below": "0.33.0",
5242
+ "severity": "medium",
5243
+ "atOrAbove": "0.31.0",
5244
+ "cwe": [
5245
+ "CWE-183",
5246
+ "CWE-918"
5247
+ ],
5248
+ "identifiers": {
5249
+ "CVE": [
5250
+ "CVE-2026-67315"
5251
+ ],
5252
+ "githubID": "GHSA-F4GW-2P7V-4548"
5253
+ }
5254
+ },
5255
+ {
5256
+ "below": "0.33.0",
5257
+ "severity": "high",
5258
+ "atOrAbove": "0.31.1",
5259
+ "cwe": [
5260
+ "CWE-1321",
5261
+ "CWE-200"
5262
+ ],
5263
+ "identifiers": {
5264
+ "CVE": [
5265
+ "CVE-2026-67320"
5266
+ ],
5267
+ "githubID": "GHSA-GCFJ-64VW-6MP9"
5268
+ }
5269
+ },
5270
+ {
5271
+ "below": "0.33.0",
5272
+ "severity": "medium",
5273
+ "atOrAbove": "0.31.1",
5274
+ "cwe": [
5275
+ "CWE-674"
5276
+ ],
5277
+ "identifiers": {
5278
+ "CVE": [
5279
+ "CVE-2026-67321"
5280
+ ],
5281
+ "githubID": "GHSA-HCPX-6FM6-WX23"
5282
+ }
5283
+ },
5284
+ {
5285
+ "below": "0.33.0",
5286
+ "severity": "medium",
5287
+ "atOrAbove": "0",
5288
+ "cwe": [
5289
+ "CWE-1321"
5290
+ ],
5291
+ "identifiers": {
5292
+ "CVE": [
5293
+ "CVE-2026-67316"
5294
+ ],
5295
+ "githubID": "GHSA-MMX7-HFXF-JPPX"
5296
+ }
5297
+ },
4783
5298
  {
4784
5299
  "below": "1.6.0",
4785
5300
  "severity": "medium",
@@ -5063,6 +5578,21 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5063
5578
  "githubID": "GHSA-XX6V-RP6X-Q39C"
5064
5579
  }
5065
5580
  },
5581
+ {
5582
+ "below": "1.15.2",
5583
+ "severity": "high",
5584
+ "atOrAbove": "1.0.0",
5585
+ "cwe": [
5586
+ "CWE-94",
5587
+ "CWE-1321"
5588
+ ],
5589
+ "identifiers": {
5590
+ "CVE": [
5591
+ "CVE-2026-44495"
5592
+ ],
5593
+ "githubID": "GHSA-3G43-6GMG-66JW"
5594
+ }
5595
+ },
5066
5596
  {
5067
5597
  "below": "1.15.2",
5068
5598
  "severity": "medium",
@@ -5091,546 +5621,1371 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5091
5621
  ],
5092
5622
  "githubID": "GHSA-Q8QP-CVCW-X6JJ"
5093
5623
  }
5094
- }
5095
- ]
5096
- },
5097
- "markdown-it": {
5098
- "extractors": {
5099
- "uri": [
5100
- "/markdown-it[/@]([0-9][0-9.a-z_\\-]+)/?.*\\.js"
5101
- ],
5102
- "filename": [
5103
- "markdown-it-([0-9][0-9.a-z_\\-]+)(\\.min)?\\.js"
5104
- ],
5105
- "filecontent": [
5106
- "/\\*! markdown-it(?:-ins)? ([0-9][0-9.a-z_\\-]+)"
5107
- ]
5108
- },
5109
- "vulnerabilities": [
5624
+ },
5110
5625
  {
5111
- "below": "3.0.0",
5626
+ "below": "1.16.0",
5112
5627
  "severity": "high",
5628
+ "atOrAbove": "1.0.0",
5113
5629
  "cwe": [
5114
- "CWE-1333"
5630
+ "CWE-441",
5631
+ "CWE-1321"
5115
5632
  ],
5116
5633
  "identifiers": {
5117
5634
  "CVE": [
5118
- "CVE-2015-10005"
5635
+ "CVE-2026-44494"
5119
5636
  ],
5120
- "githubID": "GHSA-J5P7-JF4Q-742Q"
5637
+ "githubID": "GHSA-35JP-WW65-95WH"
5121
5638
  }
5122
5639
  },
5123
5640
  {
5124
- "below": "4.1.0",
5641
+ "below": "1.16.0",
5125
5642
  "severity": "medium",
5643
+ "atOrAbove": "1.0.0",
5126
5644
  "cwe": [
5127
- "CWE-79"
5645
+ "CWE-1321"
5128
5646
  ],
5129
5647
  "identifiers": {
5130
5648
  "CVE": [
5131
- "CVE-2015-3295"
5132
- ]
5649
+ "CVE-2026-44490"
5650
+ ],
5651
+ "githubID": "GHSA-898C-Q2CR-XWHG"
5133
5652
  }
5134
5653
  },
5135
5654
  {
5136
- "below": "4.3.1",
5137
- "severity": "medium",
5138
- "atOrAbove": "4.0.0",
5139
- "cwe": [
5140
- "CWE-79"
5141
- ]
5142
- },
5143
- {
5144
- "below": "10.0.0",
5145
- "severity": "medium",
5655
+ "below": "1.16.0",
5656
+ "severity": "high",
5657
+ "atOrAbove": "1.0.0",
5146
5658
  "cwe": [
5659
+ "CWE-400",
5147
5660
  "CWE-1333"
5148
- ]
5149
- },
5150
- {
5151
- "below": "12.3.2",
5152
- "severity": "medium",
5153
- "cwe": [
5154
- "CWE-1333",
5155
- "CWE-400"
5156
5661
  ],
5157
5662
  "identifiers": {
5158
5663
  "CVE": [
5159
- "CVE-2022-21670"
5664
+ "CVE-2026-44496"
5160
5665
  ],
5161
- "githubID": "GHSA-6VFC-QV3F-VR6C"
5666
+ "githubID": "GHSA-HFXV-24RG-XRQF"
5162
5667
  }
5163
5668
  },
5164
5669
  {
5165
- "below": "13.0.2",
5166
- "severity": "medium",
5167
- "cwe": [
5168
- "CWE-400"
5169
- ]
5170
- },
5171
- {
5172
- "below": "14.1.1",
5173
- "severity": "medium",
5174
- "atOrAbove": "13.0.0",
5670
+ "below": "1.16.0",
5671
+ "severity": "high",
5672
+ "atOrAbove": "1.0.0",
5175
5673
  "cwe": [
5176
- "CWE-1333"
5674
+ "CWE-200"
5177
5675
  ],
5178
5676
  "identifiers": {
5179
5677
  "CVE": [
5180
- "CVE-2026-2327"
5678
+ "CVE-2026-44486"
5181
5679
  ],
5182
- "githubID": "GHSA-38C4-R59V-3VQW"
5680
+ "githubID": "GHSA-J5F8-GRM9-P9FC"
5183
5681
  }
5184
- }
5185
- ]
5186
- },
5187
- "jszip": {
5188
- "extractors": {
5189
- "uri": [
5190
- "/jszip[/@]([0-9][0-9.a-z_\\-]+)/.*\\.js"
5191
- ],
5192
- "filename": [
5193
- "jszip-([0-9][0-9.a-z_\\-]+)(\\.min)?\\.js"
5194
- ],
5195
- "filecontent": [
5196
- "/\\*![\\s]+JSZip v([0-9][0-9.a-z_\\-]+) "
5197
- ]
5198
- },
5199
- "vulnerabilities": [
5682
+ },
5200
5683
  {
5201
- "below": "2.7.0",
5202
- "severity": "medium",
5684
+ "below": "1.16.0",
5685
+ "severity": "high",
5686
+ "atOrAbove": "1.0.0",
5203
5687
  "cwe": [
5204
- "CWE-1321"
5688
+ "CWE-201"
5205
5689
  ],
5206
5690
  "identifiers": {
5207
5691
  "CVE": [
5208
- "CVE-2021-23413"
5692
+ "CVE-2026-44487"
5209
5693
  ],
5210
- "githubID": "GHSA-JG8V-48H5-WGXG"
5694
+ "githubID": "GHSA-P92Q-9VQR-4J8V"
5211
5695
  }
5212
5696
  },
5213
5697
  {
5214
- "below": "3.7.0",
5215
- "severity": "medium",
5216
- "atOrAbove": "3.0.0",
5698
+ "below": "1.16.0",
5699
+ "severity": "high",
5700
+ "atOrAbove": "1.7.0",
5217
5701
  "cwe": [
5218
- "CWE-1321"
5702
+ "CWE-770"
5219
5703
  ],
5220
5704
  "identifiers": {
5221
5705
  "CVE": [
5222
- "CVE-2021-23413"
5706
+ "CVE-2026-44488"
5223
5707
  ],
5224
- "githubID": "GHSA-JG8V-48H5-WGXG"
5708
+ "githubID": "GHSA-777C-7FJR-54VF"
5225
5709
  }
5226
5710
  },
5227
5711
  {
5228
- "below": "3.8.0",
5229
- "severity": "medium",
5712
+ "below": "1.16.0",
5713
+ "severity": "high",
5714
+ "atOrAbove": "1.15.0",
5230
5715
  "cwe": [
5231
- "CWE-22"
5716
+ "CWE-289",
5717
+ "CWE-918"
5232
5718
  ],
5233
5719
  "identifiers": {
5234
5720
  "CVE": [
5235
- "CVE-2022-48285"
5721
+ "CVE-2026-44492"
5236
5722
  ],
5237
- "githubID": "GHSA-36FH-84J7-CV5H"
5723
+ "githubID": "GHSA-PJWM-PJ3P-43MV"
5238
5724
  }
5239
- }
5240
- ]
5241
- },
5242
- "AlaSQL": {
5243
- "extractors": {
5244
- "uri": [
5245
- "/alasql[/@]([0-9][0-9.a-z_\\-]+)/.*\\.js"
5246
- ],
5247
- "filename": [
5248
- "alasql-([0-9][0-9.a-z_\\-]+)(\\.min)?\\.js"
5249
- ],
5250
- "filecontent": [
5251
- "/\\*!?[ \n]*AlaSQL v([0-9][0-9.a-z_\\-]+)"
5252
- ]
5253
- },
5254
- "vulnerabilities": [
5255
- {
5256
- "below": "0.7.0",
5257
- "severity": "high",
5258
- "cwe": [
5259
- "CWE-94"
5260
- ]
5261
- }
5262
- ]
5263
- },
5264
- "jquery.datatables": {
5265
- "extractors": {
5266
- "uri": [
5267
- "/([0-9][0-9.a-z_\\-]+)/(js/)?(jquery.)?dataTables(.min)?.js"
5268
- ],
5269
- "filename": [
5270
- "jquery.dataTables-([0-9][0-9.a-z_\\-]+)(\\.min)?\\.js"
5271
- ],
5272
- "filecontent": [
5273
- "http://www.datatables.net\n +DataTables ([0-9][0-9.a-z_\\-]+)",
5274
- "/\\*! DataTables ([0-9][0-9.a-z_\\-]+)",
5275
- ".\\.version=\"([0-9][0-9.a-z_\\-]+)\";[\\s]*.\\.settings=\\[\\];[\\s]*.\\.models=\\{[\\s]*\\};[\\s]*.\\.models.oSearch"
5276
- ]
5277
- },
5278
- "vulnerabilities": [
5725
+ },
5279
5726
  {
5280
- "below": "1.10.10",
5281
- "severity": "high",
5727
+ "below": "1.16.0",
5728
+ "severity": "low",
5729
+ "atOrAbove": "1.15.2",
5282
5730
  "cwe": [
5283
- "CWE-79"
5731
+ "CWE-113",
5732
+ "CWE-1321"
5284
5733
  ],
5285
5734
  "identifiers": {
5286
5735
  "CVE": [
5287
- "CVE-2015-6584"
5288
- ]
5736
+ "CVE-2026-44489"
5737
+ ],
5738
+ "githubID": "GHSA-654M-C8P4-X5FP"
5289
5739
  }
5290
5740
  },
5291
5741
  {
5292
- "below": "1.10.22",
5293
- "severity": "high",
5742
+ "below": "1.18.0",
5743
+ "severity": "medium",
5744
+ "atOrAbove": "1.0.0",
5294
5745
  "cwe": [
5295
- "CWE-1321"
5746
+ "CWE-400",
5747
+ "CWE-674"
5296
5748
  ],
5297
5749
  "identifiers": {
5298
5750
  "CVE": [
5299
- "CVE-2020-28458"
5751
+ "CVE-2026-67313"
5300
5752
  ],
5301
- "githubID": "GHSA-M7J4-FHG6-XF5V"
5753
+ "githubID": "GHSA-42H9-826W-CGV3"
5302
5754
  }
5303
5755
  },
5304
5756
  {
5305
- "below": "1.10.22",
5757
+ "below": "1.18.0",
5306
5758
  "severity": "medium",
5759
+ "atOrAbove": "1.0.0",
5307
5760
  "cwe": [
5308
5761
  "CWE-1321"
5309
- ]
5310
- },
5311
- {
5312
- "below": "1.10.23",
5313
- "severity": "high",
5314
- "cwe": [
5315
- "CWE-1321"
5316
- ]
5317
- },
5318
- {
5319
- "below": "1.11.3",
5320
- "severity": "low",
5321
- "cwe": [
5322
- "CWE-79"
5323
- ]
5324
- },
5325
- {
5326
- "below": "1.11.3",
5327
- "severity": "medium",
5328
- "cwe": [
5329
- "CWE-79"
5330
5762
  ],
5331
5763
  "identifiers": {
5332
5764
  "CVE": [
5333
- "CVE-2021-23445"
5765
+ "CVE-2026-67319"
5334
5766
  ],
5335
- "githubID": "GHSA-H73Q-5WMJ-Q8PJ"
5767
+ "githubID": "GHSA-7Q8Q-RJ6J-MHJQ"
5336
5768
  }
5337
- }
5338
- ]
5339
- },
5340
- "nextjs": {
5341
- "extractors": {
5342
- "filecontent": [
5343
- "version=\"([0-9][0-9.a-z_\\-]+)\".{1,1500}document\\.getElementById\\(\"__NEXT_DATA__\"\\)\\.textContent",
5344
- "document\\.getElementById\\(\"__NEXT_DATA__\"\\)\\.textContent\\);window\\.__NEXT_DATA__=.;.\\.version=\"([0-9][0-9.a-z_\\-]+)\"",
5345
- "=\"([0-9][0-9.a-z_\\-]+)\"[\\s\\S]{10,100}Component[\\s\\S]{1,10}componentDidCatch[\\s\\S]{10,30}componentDidMount"
5346
- ]
5347
- },
5348
- "vulnerabilities": [
5769
+ },
5349
5770
  {
5350
- "below": "2.4.1",
5351
- "severity": "high",
5771
+ "below": "1.18.0",
5772
+ "severity": "medium",
5352
5773
  "atOrAbove": "1.0.0",
5353
5774
  "cwe": [
5354
- "CWE-22"
5775
+ "CWE-1321"
5355
5776
  ],
5356
5777
  "identifiers": {
5357
5778
  "CVE": [
5358
- "CVE-2017-16877"
5779
+ "CVE-2026-67316"
5359
5780
  ],
5360
- "githubID": "GHSA-3F5C-4QXJ-VMPF"
5781
+ "githubID": "GHSA-MMX7-HFXF-JPPX"
5361
5782
  }
5362
5783
  },
5363
5784
  {
5364
- "below": "4.2.3",
5365
- "severity": "high",
5785
+ "below": "1.18.0",
5786
+ "severity": "medium",
5366
5787
  "atOrAbove": "1.0.0",
5367
5788
  "cwe": [
5368
- "CWE-22"
5789
+ "CWE-400",
5790
+ "CWE-770"
5369
5791
  ],
5370
5792
  "identifiers": {
5371
5793
  "CVE": [
5372
- "CVE-2018-6184"
5794
+ "CVE-2026-67312"
5373
5795
  ],
5374
- "githubID": "GHSA-M34X-WGRH-G897"
5796
+ "githubID": "GHSA-PMV8-RQ9R-6J72"
5375
5797
  }
5376
5798
  },
5377
5799
  {
5378
- "below": "5.1.0",
5379
- "severity": "high",
5380
- "atOrAbove": "0.9.9",
5800
+ "below": "1.18.0",
5801
+ "severity": "medium",
5802
+ "atOrAbove": "1.7.0",
5381
5803
  "cwe": [
5382
- "CWE-20"
5804
+ "CWE-770"
5383
5805
  ],
5384
5806
  "identifiers": {
5385
- "githubID": "GHSA-5VJ8-3V2H-H38V"
5807
+ "CVE": [
5808
+ "CVE-2026-67317"
5809
+ ],
5810
+ "githubID": "GHSA-JQH4-M9W3-8HP9"
5386
5811
  }
5387
5812
  },
5388
5813
  {
5389
- "below": "7.0.2",
5814
+ "below": "1.18.0",
5390
5815
  "severity": "medium",
5391
- "atOrAbove": "7.0.0",
5816
+ "atOrAbove": "1.13.0",
5392
5817
  "cwe": [
5393
- "CWE-79"
5818
+ "CWE-400"
5394
5819
  ],
5395
5820
  "identifiers": {
5396
5821
  "CVE": [
5397
- "CVE-2018-18282"
5822
+ "CVE-2026-67318"
5398
5823
  ],
5399
- "githubID": "GHSA-QW96-MM2G-C8M7"
5824
+ "githubID": "GHSA-MWF2-3PR3-8698"
5400
5825
  }
5401
5826
  },
5402
5827
  {
5403
- "below": "9.3.2",
5828
+ "below": "1.18.0",
5404
5829
  "severity": "medium",
5405
- "atOrAbove": "0.9.9",
5830
+ "atOrAbove": "1.15.0",
5406
5831
  "cwe": [
5407
- "CWE-23"
5832
+ "CWE-183",
5833
+ "CWE-918"
5408
5834
  ],
5409
5835
  "identifiers": {
5410
5836
  "CVE": [
5411
- "CVE-2020-5284"
5837
+ "CVE-2026-67315"
5412
5838
  ],
5413
- "githubID": "GHSA-FQ77-7P7R-83RJ"
5839
+ "githubID": "GHSA-F4GW-2P7V-4548"
5414
5840
  }
5415
5841
  },
5416
5842
  {
5417
- "below": "9.5.4",
5843
+ "below": "1.18.0",
5418
5844
  "severity": "medium",
5419
- "atOrAbove": "9.5.0",
5845
+ "atOrAbove": "1.15.1",
5420
5846
  "cwe": [
5421
- "CWE-601"
5847
+ "CWE-674"
5422
5848
  ],
5423
5849
  "identifiers": {
5424
5850
  "CVE": [
5425
- "CVE-2020-15242"
5851
+ "CVE-2026-67321"
5426
5852
  ],
5427
- "githubID": "GHSA-X56P-C8CG-Q435"
5853
+ "githubID": "GHSA-HCPX-6FM6-WX23"
5428
5854
  }
5429
5855
  },
5430
5856
  {
5431
- "below": "11.1.0",
5432
- "severity": "medium",
5433
- "atOrAbove": "0.9.9",
5857
+ "below": "1.18.0",
5858
+ "severity": "high",
5859
+ "atOrAbove": "1.15.2",
5434
5860
  "cwe": [
5435
- "CWE-601"
5861
+ "CWE-1321",
5862
+ "CWE-200"
5436
5863
  ],
5437
5864
  "identifiers": {
5438
5865
  "CVE": [
5439
- "CVE-2021-37699"
5866
+ "CVE-2026-67320"
5440
5867
  ],
5441
- "githubID": "GHSA-VXF5-WXWP-M7G9"
5868
+ "githubID": "GHSA-GCFJ-64VW-6MP9"
5442
5869
  }
5443
5870
  },
5444
5871
  {
5445
- "below": "11.1.1",
5446
- "severity": "high",
5447
- "atOrAbove": "10.0.0",
5872
+ "below": "1.18.0",
5873
+ "severity": "medium",
5874
+ "atOrAbove": "1.15.2",
5448
5875
  "cwe": [
5449
- "CWE-79"
5876
+ "CWE-1321"
5450
5877
  ],
5451
5878
  "identifiers": {
5452
5879
  "CVE": [
5453
- "CVE-2021-39178"
5880
+ "CVE-2026-67314"
5454
5881
  ],
5455
- "githubID": "GHSA-9GR3-7897-PP7M"
5882
+ "githubID": "GHSA-XJ6Q-8X83-JV6G"
5456
5883
  }
5457
- },
5884
+ }
5885
+ ]
5886
+ },
5887
+ "markdown-it": {
5888
+ "extractors": {
5889
+ "uri": [
5890
+ "/markdown-it[/@]([0-9][0-9.a-z_\\-]+)/?.*\\.js"
5891
+ ],
5892
+ "filename": [
5893
+ "markdown-it-([0-9][0-9.a-z_\\-]+)(\\.min)?\\.js"
5894
+ ],
5895
+ "filecontent": [
5896
+ "/\\*! markdown-it(?:-ins)? ([0-9][0-9.a-z_\\-]+)"
5897
+ ]
5898
+ },
5899
+ "vulnerabilities": [
5458
5900
  {
5459
- "below": "11.1.3",
5901
+ "below": "3.0.0",
5460
5902
  "severity": "high",
5461
- "atOrAbove": "0.9.9",
5462
5903
  "cwe": [
5463
- "CWE-20"
5904
+ "CWE-1333"
5464
5905
  ],
5465
5906
  "identifiers": {
5466
5907
  "CVE": [
5467
- "CVE-2021-43803"
5908
+ "CVE-2015-10005"
5468
5909
  ],
5469
- "githubID": "GHSA-25MP-G6FV-MQXX"
5910
+ "githubID": "GHSA-J5P7-JF4Q-742Q"
5470
5911
  }
5471
5912
  },
5472
5913
  {
5473
- "below": "12.0.5",
5474
- "severity": "high",
5475
- "atOrAbove": "12.0.0",
5914
+ "below": "4.1.0",
5915
+ "severity": "medium",
5476
5916
  "cwe": [
5477
- "CWE-20"
5917
+ "CWE-79"
5478
5918
  ],
5479
5919
  "identifiers": {
5480
5920
  "CVE": [
5481
- "CVE-2021-43803"
5482
- ],
5483
- "githubID": "GHSA-25MP-G6FV-MQXX"
5921
+ "CVE-2015-3295"
5922
+ ]
5484
5923
  }
5485
5924
  },
5486
5925
  {
5487
- "below": "12.0.9",
5926
+ "below": "4.3.1",
5488
5927
  "severity": "medium",
5489
- "atOrAbove": "12.0.0",
5928
+ "atOrAbove": "4.0.0",
5490
5929
  "cwe": [
5491
- "CWE-20",
5930
+ "CWE-79"
5931
+ ]
5932
+ },
5933
+ {
5934
+ "below": "10.0.0",
5935
+ "severity": "medium",
5936
+ "cwe": [
5937
+ "CWE-1333"
5938
+ ]
5939
+ },
5940
+ {
5941
+ "below": "12.3.2",
5942
+ "severity": "medium",
5943
+ "cwe": [
5944
+ "CWE-1333",
5492
5945
  "CWE-400"
5493
5946
  ],
5494
5947
  "identifiers": {
5495
5948
  "CVE": [
5496
- "CVE-2022-21721"
5949
+ "CVE-2022-21670"
5497
5950
  ],
5498
- "githubID": "GHSA-WR66-VRWM-5G5X"
5951
+ "githubID": "GHSA-6VFC-QV3F-VR6C"
5499
5952
  }
5500
5953
  },
5501
5954
  {
5502
- "below": "12.1.0",
5955
+ "below": "13.0.2",
5503
5956
  "severity": "medium",
5504
- "atOrAbove": "10.0.0",
5505
5957
  "cwe": [
5506
- "CWE-451"
5958
+ "CWE-400"
5959
+ ]
5960
+ },
5961
+ {
5962
+ "below": "14.1.1",
5963
+ "severity": "medium",
5964
+ "atOrAbove": "13.0.0",
5965
+ "cwe": [
5966
+ "CWE-1333"
5507
5967
  ],
5508
5968
  "identifiers": {
5509
5969
  "CVE": [
5510
- "CVE-2022-23646"
5970
+ "CVE-2026-2327"
5511
5971
  ],
5512
- "githubID": "GHSA-FMVM-X8MV-47MJ"
5972
+ "githubID": "GHSA-38C4-R59V-3VQW"
5513
5973
  }
5514
5974
  },
5515
5975
  {
5516
- "below": "12.2.4",
5976
+ "below": "14.2.0",
5517
5977
  "severity": "medium",
5518
- "atOrAbove": "12.2.3",
5978
+ "atOrAbove": "0",
5979
+ "cwe": [
5980
+ "CWE-400",
5981
+ "CWE-407"
5982
+ ],
5983
+ "identifiers": {
5984
+ "CVE": [
5985
+ "CVE-2026-48988"
5986
+ ],
5987
+ "githubID": "GHSA-6V5V-WF23-FMFQ"
5988
+ }
5989
+ }
5990
+ ]
5991
+ },
5992
+ "jszip": {
5993
+ "extractors": {
5994
+ "uri": [
5995
+ "/jszip[/@]([0-9][0-9.a-z_\\-]+)/.*\\.js"
5996
+ ],
5997
+ "filename": [
5998
+ "jszip-([0-9][0-9.a-z_\\-]+)(\\.min)?\\.js"
5999
+ ],
6000
+ "filecontent": [
6001
+ "/\\*![\\s]+JSZip v([0-9][0-9.a-z_\\-]+) "
6002
+ ]
6003
+ },
6004
+ "vulnerabilities": [
6005
+ {
6006
+ "below": "2.7.0",
6007
+ "severity": "medium",
6008
+ "cwe": [
6009
+ "CWE-1321"
6010
+ ],
6011
+ "identifiers": {
6012
+ "CVE": [
6013
+ "CVE-2021-23413"
6014
+ ],
6015
+ "githubID": "GHSA-JG8V-48H5-WGXG"
6016
+ }
6017
+ },
6018
+ {
6019
+ "below": "3.7.0",
6020
+ "severity": "medium",
6021
+ "atOrAbove": "3.0.0",
6022
+ "cwe": [
6023
+ "CWE-1321"
6024
+ ],
6025
+ "identifiers": {
6026
+ "CVE": [
6027
+ "CVE-2021-23413"
6028
+ ],
6029
+ "githubID": "GHSA-JG8V-48H5-WGXG"
6030
+ }
6031
+ },
6032
+ {
6033
+ "below": "3.8.0",
6034
+ "severity": "medium",
6035
+ "cwe": [
6036
+ "CWE-22"
6037
+ ],
6038
+ "identifiers": {
6039
+ "CVE": [
6040
+ "CVE-2022-48285"
6041
+ ],
6042
+ "githubID": "GHSA-36FH-84J7-CV5H"
6043
+ }
6044
+ }
6045
+ ]
6046
+ },
6047
+ "AlaSQL": {
6048
+ "extractors": {
6049
+ "uri": [
6050
+ "/alasql[/@]([0-9][0-9.a-z_\\-]+)/.*\\.js"
6051
+ ],
6052
+ "filename": [
6053
+ "alasql-([0-9][0-9.a-z_\\-]+)(\\.min)?\\.js"
6054
+ ],
6055
+ "filecontent": [
6056
+ "/\\*!?[ \n]*AlaSQL v([0-9][0-9.a-z_\\-]+)"
6057
+ ]
6058
+ },
6059
+ "vulnerabilities": [
6060
+ {
6061
+ "below": "0.7.0",
6062
+ "severity": "high",
6063
+ "cwe": [
6064
+ "CWE-94"
6065
+ ]
6066
+ }
6067
+ ]
6068
+ },
6069
+ "jquery.datatables": {
6070
+ "extractors": {
6071
+ "uri": [
6072
+ "/([0-9][0-9.a-z_\\-]+)/(js/)?(jquery.)?dataTables(.min)?.js"
6073
+ ],
6074
+ "filename": [
6075
+ "jquery.dataTables-([0-9][0-9.a-z_\\-]+)(\\.min)?\\.js"
6076
+ ],
6077
+ "filecontent": [
6078
+ "http://www.datatables.net\n +DataTables ([0-9][0-9.a-z_\\-]+)",
6079
+ "/\\*! DataTables ([0-9][0-9.a-z_\\-]+)",
6080
+ ".\\.version=\"([0-9][0-9.a-z_\\-]+)\";[\\s]*.\\.settings=\\[\\];[\\s]*.\\.models=\\{[\\s]*\\};[\\s]*.\\.models.oSearch"
6081
+ ]
6082
+ },
6083
+ "vulnerabilities": [
6084
+ {
6085
+ "below": "1.10.10",
6086
+ "severity": "high",
6087
+ "cwe": [
6088
+ "CWE-79"
6089
+ ],
6090
+ "identifiers": {
6091
+ "CVE": [
6092
+ "CVE-2015-6584"
6093
+ ]
6094
+ }
6095
+ },
6096
+ {
6097
+ "below": "1.10.22",
6098
+ "severity": "high",
6099
+ "cwe": [
6100
+ "CWE-1321"
6101
+ ],
6102
+ "identifiers": {
6103
+ "CVE": [
6104
+ "CVE-2020-28458"
6105
+ ],
6106
+ "githubID": "GHSA-M7J4-FHG6-XF5V"
6107
+ }
6108
+ },
6109
+ {
6110
+ "below": "1.10.22",
6111
+ "severity": "medium",
6112
+ "cwe": [
6113
+ "CWE-1321"
6114
+ ]
6115
+ },
6116
+ {
6117
+ "below": "1.10.23",
6118
+ "severity": "high",
6119
+ "cwe": [
6120
+ "CWE-1321"
6121
+ ]
6122
+ },
6123
+ {
6124
+ "below": "1.11.3",
6125
+ "severity": "low",
6126
+ "cwe": [
6127
+ "CWE-79"
6128
+ ]
6129
+ },
6130
+ {
6131
+ "below": "1.11.3",
6132
+ "severity": "medium",
6133
+ "cwe": [
6134
+ "CWE-79"
6135
+ ],
6136
+ "identifiers": {
6137
+ "CVE": [
6138
+ "CVE-2021-23445"
6139
+ ],
6140
+ "githubID": "GHSA-H73Q-5WMJ-Q8PJ"
6141
+ }
6142
+ }
6143
+ ]
6144
+ },
6145
+ "nextjs": {
6146
+ "extractors": {
6147
+ "filecontent": [
6148
+ "version=\"([0-9][0-9.a-z_\\-]+)\".{1,1500}document\\.getElementById\\(\"__NEXT_DATA__\"\\)\\.textContent",
6149
+ "document\\.getElementById\\(\"__NEXT_DATA__\"\\)\\.textContent\\);window\\.__NEXT_DATA__=.;.\\.version=\"([0-9][0-9.a-z_\\-]+)\"",
6150
+ "=\"([0-9][0-9.a-z_\\-]+)\"[\\s\\S]{10,100}Component[\\s\\S]{1,10}componentDidCatch[\\s\\S]{10,30}componentDidMount"
6151
+ ]
6152
+ },
6153
+ "vulnerabilities": [
6154
+ {
6155
+ "below": "2.4.1",
6156
+ "severity": "high",
6157
+ "atOrAbove": "1.0.0",
6158
+ "cwe": [
6159
+ "CWE-22"
6160
+ ],
6161
+ "identifiers": {
6162
+ "CVE": [
6163
+ "CVE-2017-16877"
6164
+ ],
6165
+ "githubID": "GHSA-3F5C-4QXJ-VMPF"
6166
+ }
6167
+ },
6168
+ {
6169
+ "below": "4.2.3",
6170
+ "severity": "high",
6171
+ "atOrAbove": "1.0.0",
6172
+ "cwe": [
6173
+ "CWE-22"
6174
+ ],
6175
+ "identifiers": {
6176
+ "CVE": [
6177
+ "CVE-2018-6184"
6178
+ ],
6179
+ "githubID": "GHSA-M34X-WGRH-G897"
6180
+ }
6181
+ },
6182
+ {
6183
+ "below": "5.1.0",
6184
+ "severity": "high",
6185
+ "atOrAbove": "0.9.9",
6186
+ "cwe": [
6187
+ "CWE-20"
6188
+ ],
6189
+ "identifiers": {
6190
+ "githubID": "GHSA-5VJ8-3V2H-H38V"
6191
+ }
6192
+ },
6193
+ {
6194
+ "below": "7.0.2",
6195
+ "severity": "medium",
6196
+ "atOrAbove": "7.0.0",
6197
+ "cwe": [
6198
+ "CWE-79"
6199
+ ],
6200
+ "identifiers": {
6201
+ "CVE": [
6202
+ "CVE-2018-18282"
6203
+ ],
6204
+ "githubID": "GHSA-QW96-MM2G-C8M7"
6205
+ }
6206
+ },
6207
+ {
6208
+ "below": "9.3.2",
6209
+ "severity": "medium",
6210
+ "atOrAbove": "0.9.9",
6211
+ "cwe": [
6212
+ "CWE-23"
6213
+ ],
6214
+ "identifiers": {
6215
+ "CVE": [
6216
+ "CVE-2020-5284"
6217
+ ],
6218
+ "githubID": "GHSA-FQ77-7P7R-83RJ"
6219
+ }
6220
+ },
6221
+ {
6222
+ "below": "9.5.4",
6223
+ "severity": "medium",
6224
+ "atOrAbove": "9.5.0",
6225
+ "cwe": [
6226
+ "CWE-601"
6227
+ ],
6228
+ "identifiers": {
6229
+ "CVE": [
6230
+ "CVE-2020-15242"
6231
+ ],
6232
+ "githubID": "GHSA-X56P-C8CG-Q435"
6233
+ }
6234
+ },
6235
+ {
6236
+ "below": "11.1.0",
6237
+ "severity": "medium",
6238
+ "atOrAbove": "0.9.9",
6239
+ "cwe": [
6240
+ "CWE-601"
6241
+ ],
6242
+ "identifiers": {
6243
+ "CVE": [
6244
+ "CVE-2021-37699"
6245
+ ],
6246
+ "githubID": "GHSA-VXF5-WXWP-M7G9"
6247
+ }
6248
+ },
6249
+ {
6250
+ "below": "11.1.1",
6251
+ "severity": "high",
6252
+ "atOrAbove": "10.0.0",
6253
+ "cwe": [
6254
+ "CWE-79"
6255
+ ],
6256
+ "identifiers": {
6257
+ "CVE": [
6258
+ "CVE-2021-39178"
6259
+ ],
6260
+ "githubID": "GHSA-9GR3-7897-PP7M"
6261
+ }
6262
+ },
6263
+ {
6264
+ "below": "11.1.3",
6265
+ "severity": "high",
6266
+ "atOrAbove": "0.9.9",
6267
+ "cwe": [
6268
+ "CWE-20"
6269
+ ],
6270
+ "identifiers": {
6271
+ "CVE": [
6272
+ "CVE-2021-43803"
6273
+ ],
6274
+ "githubID": "GHSA-25MP-G6FV-MQXX"
6275
+ }
6276
+ },
6277
+ {
6278
+ "below": "12.0.5",
6279
+ "severity": "high",
6280
+ "atOrAbove": "12.0.0",
6281
+ "cwe": [
6282
+ "CWE-20"
6283
+ ],
6284
+ "identifiers": {
6285
+ "CVE": [
6286
+ "CVE-2021-43803"
6287
+ ],
6288
+ "githubID": "GHSA-25MP-G6FV-MQXX"
6289
+ }
6290
+ },
6291
+ {
6292
+ "below": "12.0.9",
6293
+ "severity": "medium",
6294
+ "atOrAbove": "12.0.0",
6295
+ "cwe": [
6296
+ "CWE-20",
6297
+ "CWE-400"
6298
+ ],
6299
+ "identifiers": {
6300
+ "CVE": [
6301
+ "CVE-2022-21721"
6302
+ ],
6303
+ "githubID": "GHSA-WR66-VRWM-5G5X"
6304
+ }
6305
+ },
6306
+ {
6307
+ "below": "12.1.0",
6308
+ "severity": "medium",
6309
+ "atOrAbove": "10.0.0",
6310
+ "cwe": [
6311
+ "CWE-451"
6312
+ ],
6313
+ "identifiers": {
6314
+ "CVE": [
6315
+ "CVE-2022-23646"
6316
+ ],
6317
+ "githubID": "GHSA-FMVM-X8MV-47MJ"
6318
+ }
6319
+ },
6320
+ {
6321
+ "below": "12.2.4",
6322
+ "severity": "medium",
6323
+ "atOrAbove": "12.2.3",
5519
6324
  "cwe": [
5520
6325
  "CWE-248",
5521
6326
  "CWE-754"
5522
6327
  ],
5523
6328
  "identifiers": {
5524
6329
  "CVE": [
5525
- "CVE-2022-36046"
6330
+ "CVE-2022-36046"
6331
+ ],
6332
+ "githubID": "GHSA-WFF4-FPWG-QQV3"
6333
+ }
6334
+ },
6335
+ {
6336
+ "below": "12.3.5",
6337
+ "severity": "high",
6338
+ "atOrAbove": "12.0.0",
6339
+ "cwe": [
6340
+ "CWE-285",
6341
+ "CWE-863"
6342
+ ],
6343
+ "identifiers": {
6344
+ "CVE": [
6345
+ "CVE-2025-29927"
6346
+ ],
6347
+ "githubID": "GHSA-F82V-JWR5-MFFW"
6348
+ }
6349
+ },
6350
+ {
6351
+ "below": "12.3.6",
6352
+ "severity": "low",
6353
+ "atOrAbove": "12.3.5",
6354
+ "cwe": [
6355
+ "CWE-200"
6356
+ ],
6357
+ "identifiers": {
6358
+ "CVE": [
6359
+ "CVE-2025-30218"
6360
+ ],
6361
+ "githubID": "GHSA-223J-4RM8-MRMF"
6362
+ }
6363
+ },
6364
+ {
6365
+ "below": "13.4.20-canary.13",
6366
+ "severity": "low",
6367
+ "atOrAbove": "0.9.9",
6368
+ "cwe": [
6369
+ "CWE-525"
6370
+ ],
6371
+ "identifiers": {
6372
+ "CVE": [
6373
+ "CVE-2023-46298"
6374
+ ],
6375
+ "githubID": "GHSA-C59H-R6P8-Q9WC"
6376
+ }
6377
+ },
6378
+ {
6379
+ "below": "13.5.0",
6380
+ "severity": "high",
6381
+ "atOrAbove": "13.3.1",
6382
+ "cwe": [
6383
+ "CWE-400"
6384
+ ],
6385
+ "identifiers": {
6386
+ "CVE": [
6387
+ "CVE-2024-39693"
6388
+ ],
6389
+ "githubID": "GHSA-FQ54-2J52-JC42"
6390
+ }
6391
+ },
6392
+ {
6393
+ "below": "13.5.1",
6394
+ "severity": "high",
6395
+ "atOrAbove": "13.4.0",
6396
+ "cwe": [
6397
+ "CWE-444"
6398
+ ],
6399
+ "identifiers": {
6400
+ "CVE": [
6401
+ "CVE-2024-34350"
6402
+ ],
6403
+ "githubID": "GHSA-77R5-GW3J-2MPF"
6404
+ }
6405
+ },
6406
+ {
6407
+ "below": "13.5.7",
6408
+ "severity": "high",
6409
+ "atOrAbove": "13.5.1",
6410
+ "cwe": [
6411
+ "CWE-349",
6412
+ "CWE-639"
6413
+ ],
6414
+ "identifiers": {
6415
+ "CVE": [
6416
+ "CVE-2024-46982"
6417
+ ],
6418
+ "githubID": "GHSA-GP8F-8M3G-QVJ9"
6419
+ }
6420
+ },
6421
+ {
6422
+ "below": "13.5.8",
6423
+ "severity": "medium",
6424
+ "atOrAbove": "13.0.0",
6425
+ "cwe": [
6426
+ "CWE-770"
6427
+ ],
6428
+ "identifiers": {
6429
+ "CVE": [
6430
+ "CVE-2024-56332"
6431
+ ],
6432
+ "githubID": "GHSA-7M27-7GHC-44W9"
6433
+ }
6434
+ },
6435
+ {
6436
+ "below": "13.5.9",
6437
+ "severity": "high",
6438
+ "atOrAbove": "13.0.0",
6439
+ "cwe": [
6440
+ "CWE-285",
6441
+ "CWE-863"
6442
+ ],
6443
+ "identifiers": {
6444
+ "CVE": [
6445
+ "CVE-2025-29927"
6446
+ ],
6447
+ "githubID": "GHSA-F82V-JWR5-MFFW"
6448
+ }
6449
+ },
6450
+ {
6451
+ "below": "13.5.10",
6452
+ "severity": "low",
6453
+ "atOrAbove": "13.5.9",
6454
+ "cwe": [
6455
+ "CWE-200"
6456
+ ],
6457
+ "identifiers": {
6458
+ "CVE": [
6459
+ "CVE-2025-30218"
6460
+ ],
6461
+ "githubID": "GHSA-223J-4RM8-MRMF"
6462
+ }
6463
+ },
6464
+ {
6465
+ "below": "14.1.1",
6466
+ "severity": "high",
6467
+ "atOrAbove": "13.4.0",
6468
+ "cwe": [
6469
+ "CWE-918"
6470
+ ],
6471
+ "identifiers": {
6472
+ "CVE": [
6473
+ "CVE-2024-34351"
6474
+ ],
6475
+ "githubID": "GHSA-FR5H-RQP8-MJ6G"
6476
+ }
6477
+ },
6478
+ {
6479
+ "below": "14.2.7",
6480
+ "severity": "medium",
6481
+ "atOrAbove": "10.0.0",
6482
+ "cwe": [
6483
+ "CWE-674"
6484
+ ],
6485
+ "identifiers": {
6486
+ "CVE": [
6487
+ "CVE-2024-47831"
6488
+ ],
6489
+ "githubID": "GHSA-G77X-44XX-532M"
6490
+ }
6491
+ },
6492
+ {
6493
+ "below": "14.2.10",
6494
+ "severity": "high",
6495
+ "atOrAbove": "14.0.0",
6496
+ "cwe": [
6497
+ "CWE-349",
6498
+ "CWE-639"
6499
+ ],
6500
+ "identifiers": {
6501
+ "CVE": [
6502
+ "CVE-2024-46982"
6503
+ ],
6504
+ "githubID": "GHSA-GP8F-8M3G-QVJ9"
6505
+ }
6506
+ },
6507
+ {
6508
+ "below": "14.2.15",
6509
+ "severity": "high",
6510
+ "atOrAbove": "9.5.5",
6511
+ "cwe": [
6512
+ "CWE-285",
6513
+ "CWE-863"
6514
+ ],
6515
+ "identifiers": {
6516
+ "CVE": [
6517
+ "CVE-2024-51479"
6518
+ ],
6519
+ "githubID": "GHSA-7GFC-8CQ8-JH5F"
6520
+ }
6521
+ },
6522
+ {
6523
+ "below": "14.2.21",
6524
+ "severity": "medium",
6525
+ "atOrAbove": "14.0.0",
6526
+ "cwe": [
6527
+ "CWE-770"
6528
+ ],
6529
+ "identifiers": {
6530
+ "CVE": [
6531
+ "CVE-2024-56332"
6532
+ ],
6533
+ "githubID": "GHSA-7M27-7GHC-44W9"
6534
+ }
6535
+ },
6536
+ {
6537
+ "below": "14.2.24",
6538
+ "severity": "low",
6539
+ "atOrAbove": "0.9.9",
6540
+ "cwe": [
6541
+ "CWE-362"
6542
+ ],
6543
+ "identifiers": {
6544
+ "CVE": [
6545
+ "CVE-2025-32421"
6546
+ ],
6547
+ "githubID": "GHSA-QPJV-V59X-3QC4"
6548
+ }
6549
+ },
6550
+ {
6551
+ "below": "14.2.25",
6552
+ "severity": "high",
6553
+ "atOrAbove": "14.0.0",
6554
+ "cwe": [
6555
+ "CWE-285",
6556
+ "CWE-863"
6557
+ ],
6558
+ "identifiers": {
6559
+ "CVE": [
6560
+ "CVE-2025-29927"
6561
+ ],
6562
+ "githubID": "GHSA-F82V-JWR5-MFFW"
6563
+ }
6564
+ },
6565
+ {
6566
+ "below": "14.2.26",
6567
+ "severity": "low",
6568
+ "atOrAbove": "14.2.25",
6569
+ "cwe": [
6570
+ "CWE-200"
6571
+ ],
6572
+ "identifiers": {
6573
+ "CVE": [
6574
+ "CVE-2025-30218"
6575
+ ],
6576
+ "githubID": "GHSA-223J-4RM8-MRMF"
6577
+ }
6578
+ },
6579
+ {
6580
+ "below": "14.2.30",
6581
+ "severity": "low",
6582
+ "atOrAbove": "13.0",
6583
+ "cwe": [
6584
+ "CWE-1385"
6585
+ ],
6586
+ "identifiers": {
6587
+ "CVE": [
6588
+ "CVE-2025-48068"
6589
+ ],
6590
+ "githubID": "GHSA-3H52-269P-CP9R"
6591
+ }
6592
+ },
6593
+ {
6594
+ "below": "14.2.31",
6595
+ "severity": "medium",
6596
+ "atOrAbove": "0.9.9",
6597
+ "cwe": [
6598
+ "CWE-524"
6599
+ ],
6600
+ "identifiers": {
6601
+ "CVE": [
6602
+ "CVE-2025-57752"
6603
+ ],
6604
+ "githubID": "GHSA-G5QG-72QW-GW5V"
6605
+ }
6606
+ },
6607
+ {
6608
+ "below": "14.2.31",
6609
+ "severity": "medium",
6610
+ "atOrAbove": "0.9.9",
6611
+ "cwe": [
6612
+ "CWE-20"
6613
+ ],
6614
+ "identifiers": {
6615
+ "CVE": [
6616
+ "CVE-2025-55173"
6617
+ ],
6618
+ "githubID": "GHSA-XV57-4MR9-WG8V"
6619
+ }
6620
+ },
6621
+ {
6622
+ "below": "14.2.32",
6623
+ "severity": "medium",
6624
+ "atOrAbove": "0.9.9",
6625
+ "cwe": [
6626
+ "CWE-918"
6627
+ ],
6628
+ "identifiers": {
6629
+ "CVE": [
6630
+ "CVE-2025-57822"
6631
+ ],
6632
+ "githubID": "GHSA-4342-X723-CH2F"
6633
+ }
6634
+ },
6635
+ {
6636
+ "below": "14.2.34",
6637
+ "severity": "high",
6638
+ "atOrAbove": "13.3.0",
6639
+ "cwe": [
6640
+ "CWE-1395",
6641
+ "CWE-400",
6642
+ "CWE-502"
6643
+ ],
6644
+ "identifiers": {
6645
+ "githubID": "GHSA-MWV6-3258-Q52C"
6646
+ }
6647
+ },
6648
+ {
6649
+ "below": "14.2.35",
6650
+ "severity": "high",
6651
+ "atOrAbove": "13.3.1-canary.0",
6652
+ "cwe": [
6653
+ "CWE-1395",
6654
+ "CWE-400",
6655
+ "CWE-502"
6656
+ ],
6657
+ "identifiers": {
6658
+ "githubID": "GHSA-5J59-XGG2-R9C4"
6659
+ }
6660
+ },
6661
+ {
6662
+ "below": "15.0.0-canary.206",
6663
+ "severity": "medium",
6664
+ "atOrAbove": "15.0.0-canary.0",
6665
+ "cwe": [
6666
+ "CWE-400",
6667
+ "CWE-409",
6668
+ "CWE-770"
6669
+ ],
6670
+ "identifiers": {
6671
+ "CVE": [
6672
+ "CVE-2025-59472"
5526
6673
  ],
5527
- "githubID": "GHSA-WFF4-FPWG-QQV3"
6674
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
5528
6675
  }
5529
6676
  },
5530
6677
  {
5531
- "below": "12.3.5",
6678
+ "below": "15.0.1-canary.4",
6679
+ "severity": "medium",
6680
+ "atOrAbove": "15.0.1-canary.0",
6681
+ "cwe": [
6682
+ "CWE-400",
6683
+ "CWE-409",
6684
+ "CWE-770"
6685
+ ],
6686
+ "identifiers": {
6687
+ "CVE": [
6688
+ "CVE-2025-59472"
6689
+ ],
6690
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
6691
+ }
6692
+ },
6693
+ {
6694
+ "below": "15.0.2-canary.12",
6695
+ "severity": "medium",
6696
+ "atOrAbove": "15.0.2-canary.0",
6697
+ "cwe": [
6698
+ "CWE-400",
6699
+ "CWE-409",
6700
+ "CWE-770"
6701
+ ],
6702
+ "identifiers": {
6703
+ "CVE": [
6704
+ "CVE-2025-59472"
6705
+ ],
6706
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
6707
+ }
6708
+ },
6709
+ {
6710
+ "below": "15.0.3-canary.10",
6711
+ "severity": "medium",
6712
+ "atOrAbove": "15.0.3-canary.0",
6713
+ "cwe": [
6714
+ "CWE-400",
6715
+ "CWE-409",
6716
+ "CWE-770"
6717
+ ],
6718
+ "identifiers": {
6719
+ "CVE": [
6720
+ "CVE-2025-59472"
6721
+ ],
6722
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
6723
+ }
6724
+ },
6725
+ {
6726
+ "below": "15.0.4-canary.53",
6727
+ "severity": "medium",
6728
+ "atOrAbove": "15.0.4-canary.0",
6729
+ "cwe": [
6730
+ "CWE-400",
6731
+ "CWE-409",
6732
+ "CWE-770"
6733
+ ],
6734
+ "identifiers": {
6735
+ "CVE": [
6736
+ "CVE-2025-59472"
6737
+ ],
6738
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
6739
+ }
6740
+ },
6741
+ {
6742
+ "below": "15.0.5",
6743
+ "severity": "critical",
6744
+ "atOrAbove": "14.3.0-canary.77",
6745
+ "cwe": [
6746
+ "CWE-502"
6747
+ ],
6748
+ "identifiers": {
6749
+ "githubID": "GHSA-9QR9-H5GF-34MP"
6750
+ }
6751
+ },
6752
+ {
6753
+ "below": "15.0.6",
5532
6754
  "severity": "high",
5533
- "atOrAbove": "12.0.0",
6755
+ "atOrAbove": "15.0.0-canary.0",
5534
6756
  "cwe": [
5535
- "CWE-285",
5536
- "CWE-863"
6757
+ "CWE-1395",
6758
+ "CWE-400",
6759
+ "CWE-502"
6760
+ ],
6761
+ "identifiers": {
6762
+ "githubID": "GHSA-MWV6-3258-Q52C"
6763
+ }
6764
+ },
6765
+ {
6766
+ "below": "15.0.6",
6767
+ "severity": "medium",
6768
+ "atOrAbove": "15.0.0-canary.0",
6769
+ "cwe": [
6770
+ "CWE-1395",
6771
+ "CWE-497",
6772
+ "CWE-502"
6773
+ ],
6774
+ "identifiers": {
6775
+ "githubID": "GHSA-W37M-7FHW-FMV9"
6776
+ }
6777
+ },
6778
+ {
6779
+ "below": "15.0.7",
6780
+ "severity": "high",
6781
+ "atOrAbove": "15.0.6",
6782
+ "cwe": [
6783
+ "CWE-1395",
6784
+ "CWE-400",
6785
+ "CWE-502"
6786
+ ],
6787
+ "identifiers": {
6788
+ "githubID": "GHSA-5J59-XGG2-R9C4"
6789
+ }
6790
+ },
6791
+ {
6792
+ "below": "15.0.8",
6793
+ "severity": "high",
6794
+ "atOrAbove": "13.0.0",
6795
+ "cwe": [
6796
+ "CWE-400",
6797
+ "CWE-502"
6798
+ ],
6799
+ "identifiers": {
6800
+ "githubID": "GHSA-H25M-26QC-WCJF"
6801
+ }
6802
+ },
6803
+ {
6804
+ "below": "15.1.1-canary.28",
6805
+ "severity": "medium",
6806
+ "atOrAbove": "15.1.1-canary.0",
6807
+ "cwe": [
6808
+ "CWE-400",
6809
+ "CWE-409",
6810
+ "CWE-770"
5537
6811
  ],
5538
6812
  "identifiers": {
5539
6813
  "CVE": [
5540
- "CVE-2025-29927"
6814
+ "CVE-2025-59472"
5541
6815
  ],
5542
- "githubID": "GHSA-F82V-JWR5-MFFW"
6816
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
6817
+ }
6818
+ },
6819
+ {
6820
+ "below": "15.1.2",
6821
+ "severity": "medium",
6822
+ "atOrAbove": "15.0.0",
6823
+ "cwe": [
6824
+ "CWE-770"
6825
+ ],
6826
+ "identifiers": {
6827
+ "CVE": [
6828
+ "CVE-2024-56332"
6829
+ ],
6830
+ "githubID": "GHSA-7M27-7GHC-44W9"
6831
+ }
6832
+ },
6833
+ {
6834
+ "below": "15.1.6",
6835
+ "severity": "low",
6836
+ "atOrAbove": "15.0.0",
6837
+ "cwe": [
6838
+ "CWE-362"
6839
+ ],
6840
+ "identifiers": {
6841
+ "CVE": [
6842
+ "CVE-2025-32421"
6843
+ ],
6844
+ "githubID": "GHSA-QPJV-V59X-3QC4"
6845
+ }
6846
+ },
6847
+ {
6848
+ "below": "15.1.8",
6849
+ "severity": "high",
6850
+ "atOrAbove": "15.0.4-canary.51",
6851
+ "cwe": [
6852
+ "CWE-444"
6853
+ ],
6854
+ "identifiers": {
6855
+ "CVE": [
6856
+ "CVE-2025-49826"
6857
+ ],
6858
+ "githubID": "GHSA-67RR-84XM-4C7R"
6859
+ }
6860
+ },
6861
+ {
6862
+ "below": "15.1.9",
6863
+ "severity": "critical",
6864
+ "atOrAbove": "15.1.0-canary.0",
6865
+ "cwe": [
6866
+ "CWE-502"
6867
+ ],
6868
+ "identifiers": {
6869
+ "githubID": "GHSA-9QR9-H5GF-34MP"
6870
+ }
6871
+ },
6872
+ {
6873
+ "below": "15.1.10",
6874
+ "severity": "high",
6875
+ "atOrAbove": "15.1.1-canary.0",
6876
+ "cwe": [
6877
+ "CWE-1395",
6878
+ "CWE-400",
6879
+ "CWE-502"
6880
+ ],
6881
+ "identifiers": {
6882
+ "githubID": "GHSA-MWV6-3258-Q52C"
6883
+ }
6884
+ },
6885
+ {
6886
+ "below": "15.1.10",
6887
+ "severity": "medium",
6888
+ "atOrAbove": "15.1.1-canary.0",
6889
+ "cwe": [
6890
+ "CWE-1395",
6891
+ "CWE-497",
6892
+ "CWE-502"
6893
+ ],
6894
+ "identifiers": {
6895
+ "githubID": "GHSA-W37M-7FHW-FMV9"
5543
6896
  }
5544
6897
  },
5545
6898
  {
5546
- "below": "12.3.6",
5547
- "severity": "low",
5548
- "atOrAbove": "12.3.5",
6899
+ "below": "15.1.11",
6900
+ "severity": "high",
6901
+ "atOrAbove": "15.1.10",
5549
6902
  "cwe": [
5550
- "CWE-200"
6903
+ "CWE-1395",
6904
+ "CWE-400",
6905
+ "CWE-502"
5551
6906
  ],
5552
6907
  "identifiers": {
5553
- "CVE": [
5554
- "CVE-2025-30218"
5555
- ],
5556
- "githubID": "GHSA-223J-4RM8-MRMF"
6908
+ "githubID": "GHSA-5J59-XGG2-R9C4"
5557
6909
  }
5558
6910
  },
5559
6911
  {
5560
- "below": "13.4.20-canary.13",
5561
- "severity": "low",
5562
- "atOrAbove": "0.9.9",
6912
+ "below": "15.1.12",
6913
+ "severity": "high",
6914
+ "atOrAbove": "15.1.1-canary.0",
5563
6915
  "cwe": [
5564
- "CWE-525"
6916
+ "CWE-400",
6917
+ "CWE-502"
5565
6918
  ],
5566
6919
  "identifiers": {
5567
- "CVE": [
5568
- "CVE-2023-46298"
5569
- ],
5570
- "githubID": "GHSA-C59H-R6P8-Q9WC"
6920
+ "githubID": "GHSA-H25M-26QC-WCJF"
5571
6921
  }
5572
6922
  },
5573
6923
  {
5574
- "below": "13.5.0",
5575
- "severity": "high",
5576
- "atOrAbove": "13.3.1",
6924
+ "below": "15.2.0-canary.78",
6925
+ "severity": "medium",
6926
+ "atOrAbove": "15.2.0-canary.0",
5577
6927
  "cwe": [
5578
- "CWE-400"
6928
+ "CWE-400",
6929
+ "CWE-409",
6930
+ "CWE-770"
5579
6931
  ],
5580
6932
  "identifiers": {
5581
6933
  "CVE": [
5582
- "CVE-2024-39693"
6934
+ "CVE-2025-59472"
5583
6935
  ],
5584
- "githubID": "GHSA-FQ54-2J52-JC42"
6936
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
5585
6937
  }
5586
6938
  },
5587
6939
  {
5588
- "below": "13.5.1",
5589
- "severity": "high",
5590
- "atOrAbove": "13.4.0",
6940
+ "below": "15.2.1-canary.7",
6941
+ "severity": "medium",
6942
+ "atOrAbove": "15.2.1-canary.0",
5591
6943
  "cwe": [
5592
- "CWE-444"
6944
+ "CWE-400",
6945
+ "CWE-409",
6946
+ "CWE-770"
5593
6947
  ],
5594
6948
  "identifiers": {
5595
6949
  "CVE": [
5596
- "CVE-2024-34350"
6950
+ "CVE-2025-59472"
5597
6951
  ],
5598
- "githubID": "GHSA-77R5-GW3J-2MPF"
6952
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
5599
6953
  }
5600
6954
  },
5601
6955
  {
5602
- "below": "13.5.7",
5603
- "severity": "high",
5604
- "atOrAbove": "13.5.1",
6956
+ "below": "15.2.2",
6957
+ "severity": "low",
6958
+ "atOrAbove": "15.0.0",
5605
6959
  "cwe": [
5606
- "CWE-349",
5607
- "CWE-639"
6960
+ "CWE-1385"
5608
6961
  ],
5609
6962
  "identifiers": {
5610
6963
  "CVE": [
5611
- "CVE-2024-46982"
6964
+ "CVE-2025-48068"
5612
6965
  ],
5613
- "githubID": "GHSA-GP8F-8M3G-QVJ9"
6966
+ "githubID": "GHSA-3H52-269P-CP9R"
5614
6967
  }
5615
6968
  },
5616
6969
  {
5617
- "below": "13.5.8",
6970
+ "below": "15.2.2-canary.8",
5618
6971
  "severity": "medium",
5619
- "atOrAbove": "13.0.0",
6972
+ "atOrAbove": "15.2.2-canary.0",
5620
6973
  "cwe": [
6974
+ "CWE-400",
6975
+ "CWE-409",
5621
6976
  "CWE-770"
5622
6977
  ],
5623
6978
  "identifiers": {
5624
6979
  "CVE": [
5625
- "CVE-2024-56332"
6980
+ "CVE-2025-59472"
5626
6981
  ],
5627
- "githubID": "GHSA-7M27-7GHC-44W9"
6982
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
5628
6983
  }
5629
6984
  },
5630
6985
  {
5631
- "below": "13.5.9",
6986
+ "below": "15.2.3",
5632
6987
  "severity": "high",
5633
- "atOrAbove": "13.0.0",
6988
+ "atOrAbove": "15.0.0",
5634
6989
  "cwe": [
5635
6990
  "CWE-285",
5636
6991
  "CWE-863"
@@ -5643,9 +6998,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5643
6998
  }
5644
6999
  },
5645
7000
  {
5646
- "below": "13.5.10",
7001
+ "below": "15.2.4",
5647
7002
  "severity": "low",
5648
- "atOrAbove": "13.5.9",
7003
+ "atOrAbove": "15.2.3",
5649
7004
  "cwe": [
5650
7005
  "CWE-200"
5651
7006
  ],
@@ -5657,206 +7012,179 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5657
7012
  }
5658
7013
  },
5659
7014
  {
5660
- "below": "14.1.1",
5661
- "severity": "high",
5662
- "atOrAbove": "13.4.0",
5663
- "cwe": [
5664
- "CWE-918"
5665
- ],
5666
- "identifiers": {
5667
- "CVE": [
5668
- "CVE-2024-34351"
5669
- ],
5670
- "githubID": "GHSA-FR5H-RQP8-MJ6G"
5671
- }
5672
- },
5673
- {
5674
- "below": "14.2.7",
5675
- "severity": "medium",
5676
- "atOrAbove": "10.0.0",
7015
+ "below": "15.2.6",
7016
+ "severity": "critical",
7017
+ "atOrAbove": "15.2.0-canary.0",
5677
7018
  "cwe": [
5678
- "CWE-674"
7019
+ "CWE-502"
5679
7020
  ],
5680
7021
  "identifiers": {
5681
- "CVE": [
5682
- "CVE-2024-47831"
5683
- ],
5684
- "githubID": "GHSA-G77X-44XX-532M"
7022
+ "githubID": "GHSA-9QR9-H5GF-34MP"
5685
7023
  }
5686
7024
  },
5687
7025
  {
5688
- "below": "14.2.10",
7026
+ "below": "15.2.7",
5689
7027
  "severity": "high",
5690
- "atOrAbove": "14.0.0",
7028
+ "atOrAbove": "15.2.0-canary.0",
5691
7029
  "cwe": [
5692
- "CWE-349",
5693
- "CWE-639"
7030
+ "CWE-1395",
7031
+ "CWE-400",
7032
+ "CWE-502"
5694
7033
  ],
5695
7034
  "identifiers": {
5696
- "CVE": [
5697
- "CVE-2024-46982"
5698
- ],
5699
- "githubID": "GHSA-GP8F-8M3G-QVJ9"
7035
+ "githubID": "GHSA-MWV6-3258-Q52C"
5700
7036
  }
5701
7037
  },
5702
7038
  {
5703
- "below": "14.2.15",
5704
- "severity": "high",
5705
- "atOrAbove": "9.5.5",
7039
+ "below": "15.2.7",
7040
+ "severity": "medium",
7041
+ "atOrAbove": "15.2.0-canary.0",
5706
7042
  "cwe": [
5707
- "CWE-285",
5708
- "CWE-863"
7043
+ "CWE-1395",
7044
+ "CWE-497",
7045
+ "CWE-502"
5709
7046
  ],
5710
7047
  "identifiers": {
5711
- "CVE": [
5712
- "CVE-2024-51479"
5713
- ],
5714
- "githubID": "GHSA-7GFC-8CQ8-JH5F"
7048
+ "githubID": "GHSA-W37M-7FHW-FMV9"
5715
7049
  }
5716
7050
  },
5717
7051
  {
5718
- "below": "14.2.21",
5719
- "severity": "medium",
5720
- "atOrAbove": "14.0.0",
7052
+ "below": "15.2.8",
7053
+ "severity": "high",
7054
+ "atOrAbove": "15.2.7",
5721
7055
  "cwe": [
5722
- "CWE-770"
7056
+ "CWE-1395",
7057
+ "CWE-400",
7058
+ "CWE-502"
5723
7059
  ],
5724
7060
  "identifiers": {
5725
- "CVE": [
5726
- "CVE-2024-56332"
5727
- ],
5728
- "githubID": "GHSA-7M27-7GHC-44W9"
7061
+ "githubID": "GHSA-5J59-XGG2-R9C4"
5729
7062
  }
5730
7063
  },
5731
7064
  {
5732
- "below": "14.2.24",
5733
- "severity": "low",
5734
- "atOrAbove": "0.9.9",
7065
+ "below": "15.2.9",
7066
+ "severity": "high",
7067
+ "atOrAbove": "15.2.0-canary.0",
5735
7068
  "cwe": [
5736
- "CWE-362"
7069
+ "CWE-400",
7070
+ "CWE-502"
5737
7071
  ],
5738
7072
  "identifiers": {
5739
- "CVE": [
5740
- "CVE-2025-32421"
5741
- ],
5742
- "githubID": "GHSA-QPJV-V59X-3QC4"
7073
+ "githubID": "GHSA-H25M-26QC-WCJF"
5743
7074
  }
5744
7075
  },
5745
7076
  {
5746
- "below": "14.2.25",
5747
- "severity": "high",
5748
- "atOrAbove": "14.0.0",
7077
+ "below": "15.3.0-canary.47",
7078
+ "severity": "medium",
7079
+ "atOrAbove": "15.3.0-canary.0",
5749
7080
  "cwe": [
5750
- "CWE-285",
5751
- "CWE-863"
7081
+ "CWE-400",
7082
+ "CWE-409",
7083
+ "CWE-770"
5752
7084
  ],
5753
7085
  "identifiers": {
5754
7086
  "CVE": [
5755
- "CVE-2025-29927"
7087
+ "CVE-2025-59472"
5756
7088
  ],
5757
- "githubID": "GHSA-F82V-JWR5-MFFW"
7089
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
5758
7090
  }
5759
7091
  },
5760
7092
  {
5761
- "below": "14.2.26",
5762
- "severity": "low",
5763
- "atOrAbove": "14.2.25",
7093
+ "below": "15.3.1-canary.16",
7094
+ "severity": "medium",
7095
+ "atOrAbove": "15.3.1-canary.0",
5764
7096
  "cwe": [
5765
- "CWE-200"
7097
+ "CWE-400",
7098
+ "CWE-409",
7099
+ "CWE-770"
5766
7100
  ],
5767
7101
  "identifiers": {
5768
7102
  "CVE": [
5769
- "CVE-2025-30218"
7103
+ "CVE-2025-59472"
5770
7104
  ],
5771
- "githubID": "GHSA-223J-4RM8-MRMF"
7105
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
5772
7106
  }
5773
7107
  },
5774
7108
  {
5775
- "below": "14.2.30",
7109
+ "below": "15.3.3",
5776
7110
  "severity": "low",
5777
- "atOrAbove": "13.0",
7111
+ "atOrAbove": "15.3.0",
5778
7112
  "cwe": [
5779
- "CWE-1385"
7113
+ "CWE-444"
5780
7114
  ],
5781
7115
  "identifiers": {
5782
7116
  "CVE": [
5783
- "CVE-2025-48068"
7117
+ "CVE-2025-49005"
5784
7118
  ],
5785
- "githubID": "GHSA-3H52-269P-CP9R"
7119
+ "githubID": "GHSA-R2FC-CCR8-96C4"
5786
7120
  }
5787
7121
  },
5788
7122
  {
5789
- "below": "14.2.31",
5790
- "severity": "medium",
5791
- "atOrAbove": "0.9.9",
7123
+ "below": "15.3.6",
7124
+ "severity": "critical",
7125
+ "atOrAbove": "15.3.0-canary.0",
5792
7126
  "cwe": [
5793
- "CWE-524"
7127
+ "CWE-502"
5794
7128
  ],
5795
7129
  "identifiers": {
5796
- "CVE": [
5797
- "CVE-2025-57752"
5798
- ],
5799
- "githubID": "GHSA-G5QG-72QW-GW5V"
7130
+ "githubID": "GHSA-9QR9-H5GF-34MP"
5800
7131
  }
5801
7132
  },
5802
7133
  {
5803
- "below": "14.2.31",
5804
- "severity": "medium",
5805
- "atOrAbove": "0.9.9",
7134
+ "below": "15.3.7",
7135
+ "severity": "high",
7136
+ "atOrAbove": "15.3.0-canary.0",
5806
7137
  "cwe": [
5807
- "CWE-20"
7138
+ "CWE-1395",
7139
+ "CWE-400",
7140
+ "CWE-502"
5808
7141
  ],
5809
7142
  "identifiers": {
5810
- "CVE": [
5811
- "CVE-2025-55173"
5812
- ],
5813
- "githubID": "GHSA-XV57-4MR9-WG8V"
7143
+ "githubID": "GHSA-MWV6-3258-Q52C"
5814
7144
  }
5815
7145
  },
5816
7146
  {
5817
- "below": "14.2.32",
7147
+ "below": "15.3.7",
5818
7148
  "severity": "medium",
5819
- "atOrAbove": "0.9.9",
7149
+ "atOrAbove": "15.3.0-canary.0",
5820
7150
  "cwe": [
5821
- "CWE-918"
5822
- ],
5823
- "identifiers": {
5824
- "CVE": [
5825
- "CVE-2025-57822"
5826
- ],
5827
- "githubID": "GHSA-4342-X723-CH2F"
7151
+ "CWE-1395",
7152
+ "CWE-497",
7153
+ "CWE-502"
7154
+ ],
7155
+ "identifiers": {
7156
+ "githubID": "GHSA-W37M-7FHW-FMV9"
5828
7157
  }
5829
7158
  },
5830
7159
  {
5831
- "below": "14.2.34",
7160
+ "below": "15.3.8",
5832
7161
  "severity": "high",
5833
- "atOrAbove": "13.3.0",
7162
+ "atOrAbove": "15.3.7",
5834
7163
  "cwe": [
5835
7164
  "CWE-1395",
5836
7165
  "CWE-400",
5837
7166
  "CWE-502"
5838
7167
  ],
5839
7168
  "identifiers": {
5840
- "githubID": "GHSA-MWV6-3258-Q52C"
7169
+ "githubID": "GHSA-5J59-XGG2-R9C4"
5841
7170
  }
5842
7171
  },
5843
7172
  {
5844
- "below": "14.2.35",
7173
+ "below": "15.3.9",
5845
7174
  "severity": "high",
5846
- "atOrAbove": "13.3.1-canary.0",
7175
+ "atOrAbove": "15.3.0-canary.0",
5847
7176
  "cwe": [
5848
- "CWE-1395",
5849
7177
  "CWE-400",
5850
7178
  "CWE-502"
5851
7179
  ],
5852
7180
  "identifiers": {
5853
- "githubID": "GHSA-5J59-XGG2-R9C4"
7181
+ "githubID": "GHSA-H25M-26QC-WCJF"
5854
7182
  }
5855
7183
  },
5856
7184
  {
5857
- "below": "15.0.0-canary.206",
7185
+ "below": "15.4.0-canary.131",
5858
7186
  "severity": "medium",
5859
- "atOrAbove": "15.0.0-canary.0",
7187
+ "atOrAbove": "15.4.0-canary.0",
5860
7188
  "cwe": [
5861
7189
  "CWE-400",
5862
7190
  "CWE-409",
@@ -5870,9 +7198,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5870
7198
  }
5871
7199
  },
5872
7200
  {
5873
- "below": "15.0.1-canary.4",
7201
+ "below": "15.4.2-canary.57",
5874
7202
  "severity": "medium",
5875
- "atOrAbove": "15.0.1-canary.0",
7203
+ "atOrAbove": "15.4.2-canary.0",
5876
7204
  "cwe": [
5877
7205
  "CWE-400",
5878
7206
  "CWE-409",
@@ -5886,57 +7214,51 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5886
7214
  }
5887
7215
  },
5888
7216
  {
5889
- "below": "15.0.2-canary.12",
7217
+ "below": "15.4.5",
5890
7218
  "severity": "medium",
5891
- "atOrAbove": "15.0.2-canary.0",
7219
+ "atOrAbove": "15.0.0",
5892
7220
  "cwe": [
5893
- "CWE-400",
5894
- "CWE-409",
5895
- "CWE-770"
7221
+ "CWE-524"
5896
7222
  ],
5897
7223
  "identifiers": {
5898
7224
  "CVE": [
5899
- "CVE-2025-59472"
7225
+ "CVE-2025-57752"
5900
7226
  ],
5901
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
7227
+ "githubID": "GHSA-G5QG-72QW-GW5V"
5902
7228
  }
5903
7229
  },
5904
7230
  {
5905
- "below": "15.0.3-canary.10",
7231
+ "below": "15.4.5",
5906
7232
  "severity": "medium",
5907
- "atOrAbove": "15.0.3-canary.0",
7233
+ "atOrAbove": "15.0.0",
5908
7234
  "cwe": [
5909
- "CWE-400",
5910
- "CWE-409",
5911
- "CWE-770"
7235
+ "CWE-20"
5912
7236
  ],
5913
7237
  "identifiers": {
5914
7238
  "CVE": [
5915
- "CVE-2025-59472"
7239
+ "CVE-2025-55173"
5916
7240
  ],
5917
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
7241
+ "githubID": "GHSA-XV57-4MR9-WG8V"
5918
7242
  }
5919
7243
  },
5920
7244
  {
5921
- "below": "15.0.4-canary.53",
7245
+ "below": "15.4.7",
5922
7246
  "severity": "medium",
5923
- "atOrAbove": "15.0.4-canary.0",
7247
+ "atOrAbove": "15.0.0-canary.0",
5924
7248
  "cwe": [
5925
- "CWE-400",
5926
- "CWE-409",
5927
- "CWE-770"
7249
+ "CWE-918"
5928
7250
  ],
5929
7251
  "identifiers": {
5930
7252
  "CVE": [
5931
- "CVE-2025-59472"
7253
+ "CVE-2025-57822"
5932
7254
  ],
5933
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
7255
+ "githubID": "GHSA-4342-X723-CH2F"
5934
7256
  }
5935
7257
  },
5936
7258
  {
5937
- "below": "15.0.5",
7259
+ "below": "15.4.8",
5938
7260
  "severity": "critical",
5939
- "atOrAbove": "14.3.0-canary.77",
7261
+ "atOrAbove": "15.4.0-canary.0",
5940
7262
  "cwe": [
5941
7263
  "CWE-502"
5942
7264
  ],
@@ -5945,9 +7267,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5945
7267
  }
5946
7268
  },
5947
7269
  {
5948
- "below": "15.0.6",
7270
+ "below": "15.4.9",
5949
7271
  "severity": "high",
5950
- "atOrAbove": "15.0.0-canary.0",
7272
+ "atOrAbove": "15.4.0-canary.0",
5951
7273
  "cwe": [
5952
7274
  "CWE-1395",
5953
7275
  "CWE-400",
@@ -5958,9 +7280,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5958
7280
  }
5959
7281
  },
5960
7282
  {
5961
- "below": "15.0.6",
7283
+ "below": "15.4.9",
5962
7284
  "severity": "medium",
5963
- "atOrAbove": "15.0.0-canary.0",
7285
+ "atOrAbove": "15.4.0-canary.0",
5964
7286
  "cwe": [
5965
7287
  "CWE-1395",
5966
7288
  "CWE-497",
@@ -5971,9 +7293,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5971
7293
  }
5972
7294
  },
5973
7295
  {
5974
- "below": "15.0.7",
7296
+ "below": "15.4.10",
5975
7297
  "severity": "high",
5976
- "atOrAbove": "15.0.6",
7298
+ "atOrAbove": "15.4.9",
5977
7299
  "cwe": [
5978
7300
  "CWE-1395",
5979
7301
  "CWE-400",
@@ -5984,9 +7306,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5984
7306
  }
5985
7307
  },
5986
7308
  {
5987
- "below": "15.0.8",
7309
+ "below": "15.4.11",
5988
7310
  "severity": "high",
5989
- "atOrAbove": "13.0.0",
7311
+ "atOrAbove": "15.4.0-canary.0",
5990
7312
  "cwe": [
5991
7313
  "CWE-400",
5992
7314
  "CWE-502"
@@ -5996,9 +7318,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
5996
7318
  }
5997
7319
  },
5998
7320
  {
5999
- "below": "15.1.1-canary.28",
7321
+ "below": "15.5.1-canary.40",
6000
7322
  "severity": "medium",
6001
- "atOrAbove": "15.1.1-canary.0",
7323
+ "atOrAbove": "15.5.1-canary.0",
6002
7324
  "cwe": [
6003
7325
  "CWE-400",
6004
7326
  "CWE-409",
@@ -6012,51 +7334,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6012
7334
  }
6013
7335
  },
6014
7336
  {
6015
- "below": "15.1.2",
6016
- "severity": "medium",
6017
- "atOrAbove": "15.0.0",
6018
- "cwe": [
6019
- "CWE-770"
6020
- ],
6021
- "identifiers": {
6022
- "CVE": [
6023
- "CVE-2024-56332"
6024
- ],
6025
- "githubID": "GHSA-7M27-7GHC-44W9"
6026
- }
6027
- },
6028
- {
6029
- "below": "15.1.6",
6030
- "severity": "low",
6031
- "atOrAbove": "15.0.0",
6032
- "cwe": [
6033
- "CWE-362"
6034
- ],
6035
- "identifiers": {
6036
- "CVE": [
6037
- "CVE-2025-32421"
6038
- ],
6039
- "githubID": "GHSA-QPJV-V59X-3QC4"
6040
- }
6041
- },
6042
- {
6043
- "below": "15.1.8",
6044
- "severity": "high",
6045
- "atOrAbove": "15.0.4-canary.51",
6046
- "cwe": [
6047
- "CWE-444"
6048
- ],
6049
- "identifiers": {
6050
- "CVE": [
6051
- "CVE-2025-49826"
6052
- ],
6053
- "githubID": "GHSA-67RR-84XM-4C7R"
6054
- }
6055
- },
6056
- {
6057
- "below": "15.1.9",
7337
+ "below": "15.5.7",
6058
7338
  "severity": "critical",
6059
- "atOrAbove": "15.1.0-canary.0",
7339
+ "atOrAbove": "15.5.0-canary.0",
6060
7340
  "cwe": [
6061
7341
  "CWE-502"
6062
7342
  ],
@@ -6065,9 +7345,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6065
7345
  }
6066
7346
  },
6067
7347
  {
6068
- "below": "15.1.10",
7348
+ "below": "15.5.8",
6069
7349
  "severity": "high",
6070
- "atOrAbove": "15.1.1-canary.0",
7350
+ "atOrAbove": "15.5.1-canary.0",
6071
7351
  "cwe": [
6072
7352
  "CWE-1395",
6073
7353
  "CWE-400",
@@ -6078,9 +7358,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6078
7358
  }
6079
7359
  },
6080
7360
  {
6081
- "below": "15.1.10",
7361
+ "below": "15.5.8",
6082
7362
  "severity": "medium",
6083
- "atOrAbove": "15.1.1-canary.0",
7363
+ "atOrAbove": "15.5.1-canary.0",
6084
7364
  "cwe": [
6085
7365
  "CWE-1395",
6086
7366
  "CWE-497",
@@ -6091,9 +7371,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6091
7371
  }
6092
7372
  },
6093
7373
  {
6094
- "below": "15.1.11",
7374
+ "below": "15.5.9",
6095
7375
  "severity": "high",
6096
- "atOrAbove": "15.1.10",
7376
+ "atOrAbove": "15.5.8",
6097
7377
  "cwe": [
6098
7378
  "CWE-1395",
6099
7379
  "CWE-400",
@@ -6104,9 +7384,24 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6104
7384
  }
6105
7385
  },
6106
7386
  {
6107
- "below": "15.1.12",
7387
+ "below": "15.5.10",
7388
+ "severity": "medium",
7389
+ "atOrAbove": "10.0.0",
7390
+ "cwe": [
7391
+ "CWE-400",
7392
+ "CWE-770"
7393
+ ],
7394
+ "identifiers": {
7395
+ "CVE": [
7396
+ "CVE-2025-59471"
7397
+ ],
7398
+ "githubID": "GHSA-9G9P-9GW9-JX7F"
7399
+ }
7400
+ },
7401
+ {
7402
+ "below": "15.5.10",
6108
7403
  "severity": "high",
6109
- "atOrAbove": "15.1.1-canary.0",
7404
+ "atOrAbove": "15.5.1-canary.0",
6110
7405
  "cwe": [
6111
7406
  "CWE-400",
6112
7407
  "CWE-502"
@@ -6116,355 +7411,339 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6116
7411
  }
6117
7412
  },
6118
7413
  {
6119
- "below": "15.2.0-canary.78",
7414
+ "below": "15.5.13",
6120
7415
  "severity": "medium",
6121
- "atOrAbove": "15.2.0-canary.0",
7416
+ "atOrAbove": "9.5.0",
6122
7417
  "cwe": [
6123
- "CWE-400",
6124
- "CWE-409",
6125
- "CWE-770"
7418
+ "CWE-444"
6126
7419
  ],
6127
7420
  "identifiers": {
6128
7421
  "CVE": [
6129
- "CVE-2025-59472"
7422
+ "CVE-2026-29057"
6130
7423
  ],
6131
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
7424
+ "githubID": "GHSA-GGV3-7P47-PFV8"
6132
7425
  }
6133
7426
  },
6134
7427
  {
6135
- "below": "15.2.1-canary.7",
7428
+ "below": "15.5.14",
6136
7429
  "severity": "medium",
6137
- "atOrAbove": "15.2.1-canary.0",
7430
+ "atOrAbove": "10.0.0",
6138
7431
  "cwe": [
6139
- "CWE-400",
6140
- "CWE-409",
6141
- "CWE-770"
7432
+ "CWE-400"
6142
7433
  ],
6143
7434
  "identifiers": {
6144
7435
  "CVE": [
6145
- "CVE-2025-59472"
7436
+ "CVE-2026-27980"
6146
7437
  ],
6147
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
7438
+ "githubID": "GHSA-3X4C-7XQ6-9PQ8"
6148
7439
  }
6149
7440
  },
6150
7441
  {
6151
- "below": "15.2.2",
6152
- "severity": "low",
6153
- "atOrAbove": "15.0.0",
7442
+ "below": "15.5.15",
7443
+ "severity": "high",
7444
+ "atOrAbove": "13.0.0",
6154
7445
  "cwe": [
6155
- "CWE-1385"
7446
+ "CWE-770"
6156
7447
  ],
6157
7448
  "identifiers": {
6158
- "CVE": [
6159
- "CVE-2025-48068"
6160
- ],
6161
- "githubID": "GHSA-3H52-269P-CP9R"
7449
+ "githubID": "GHSA-Q4GF-8MX6-V5V3"
6162
7450
  }
6163
7451
  },
6164
7452
  {
6165
- "below": "15.2.2-canary.8",
7453
+ "below": "15.5.16",
6166
7454
  "severity": "medium",
6167
- "atOrAbove": "15.2.2-canary.0",
7455
+ "atOrAbove": "10.0.0",
6168
7456
  "cwe": [
6169
- "CWE-400",
6170
- "CWE-409",
6171
7457
  "CWE-770"
6172
7458
  ],
6173
7459
  "identifiers": {
6174
7460
  "CVE": [
6175
- "CVE-2025-59472"
7461
+ "CVE-2026-44577"
6176
7462
  ],
6177
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
7463
+ "githubID": "GHSA-H64F-5H5J-JQJH"
6178
7464
  }
6179
7465
  },
6180
7466
  {
6181
- "below": "15.2.3",
7467
+ "below": "15.5.16",
6182
7468
  "severity": "high",
6183
- "atOrAbove": "15.0.0",
7469
+ "atOrAbove": "12.2.0",
6184
7470
  "cwe": [
6185
- "CWE-285",
6186
7471
  "CWE-863"
6187
7472
  ],
6188
7473
  "identifiers": {
6189
7474
  "CVE": [
6190
- "CVE-2025-29927"
7475
+ "CVE-2026-44573"
6191
7476
  ],
6192
- "githubID": "GHSA-F82V-JWR5-MFFW"
7477
+ "githubID": "GHSA-36QX-FR4F-26G5"
6193
7478
  }
6194
7479
  },
6195
7480
  {
6196
- "below": "15.2.4",
7481
+ "below": "15.5.16",
6197
7482
  "severity": "low",
6198
- "atOrAbove": "15.2.3",
7483
+ "atOrAbove": "12.2.0",
6199
7484
  "cwe": [
6200
- "CWE-200"
7485
+ "CWE-349"
6201
7486
  ],
6202
7487
  "identifiers": {
6203
7488
  "CVE": [
6204
- "CVE-2025-30218"
7489
+ "CVE-2026-44572"
6205
7490
  ],
6206
- "githubID": "GHSA-223J-4RM8-MRMF"
6207
- }
6208
- },
6209
- {
6210
- "below": "15.2.6",
6211
- "severity": "critical",
6212
- "atOrAbove": "15.2.0-canary.0",
6213
- "cwe": [
6214
- "CWE-502"
6215
- ],
6216
- "identifiers": {
6217
- "githubID": "GHSA-9QR9-H5GF-34MP"
7491
+ "githubID": "GHSA-3G8H-86W9-WVMQ"
6218
7492
  }
6219
7493
  },
6220
7494
  {
6221
- "below": "15.2.7",
7495
+ "below": "15.5.16",
6222
7496
  "severity": "high",
6223
- "atOrAbove": "15.2.0-canary.0",
7497
+ "atOrAbove": "13.0.0",
6224
7498
  "cwe": [
6225
- "CWE-1395",
6226
- "CWE-400",
6227
- "CWE-502"
7499
+ "CWE-770"
6228
7500
  ],
6229
7501
  "identifiers": {
6230
- "githubID": "GHSA-MWV6-3258-Q52C"
7502
+ "githubID": "GHSA-8H8Q-6873-Q5FJ"
6231
7503
  }
6232
7504
  },
6233
7505
  {
6234
- "below": "15.2.7",
7506
+ "below": "15.5.16",
6235
7507
  "severity": "medium",
6236
- "atOrAbove": "15.2.0-canary.0",
7508
+ "atOrAbove": "13.0.0",
6237
7509
  "cwe": [
6238
- "CWE-1395",
6239
- "CWE-497",
6240
- "CWE-502"
7510
+ "CWE-79"
6241
7511
  ],
6242
7512
  "identifiers": {
6243
- "githubID": "GHSA-W37M-7FHW-FMV9"
7513
+ "CVE": [
7514
+ "CVE-2026-44580"
7515
+ ],
7516
+ "githubID": "GHSA-GX5P-JG67-6X7H"
6244
7517
  }
6245
7518
  },
6246
7519
  {
6247
- "below": "15.2.8",
6248
- "severity": "high",
6249
- "atOrAbove": "15.2.7",
7520
+ "below": "15.5.16",
7521
+ "severity": "medium",
7522
+ "atOrAbove": "13.4.0",
6250
7523
  "cwe": [
6251
- "CWE-1395",
6252
- "CWE-400",
6253
- "CWE-502"
7524
+ "CWE-79"
6254
7525
  ],
6255
7526
  "identifiers": {
6256
- "githubID": "GHSA-5J59-XGG2-R9C4"
7527
+ "CVE": [
7528
+ "CVE-2026-44581"
7529
+ ],
7530
+ "githubID": "GHSA-FFHC-5MCF-PF4Q"
6257
7531
  }
6258
7532
  },
6259
7533
  {
6260
- "below": "15.2.9",
6261
- "severity": "high",
6262
- "atOrAbove": "15.2.0-canary.0",
7534
+ "below": "15.5.16",
7535
+ "severity": "low",
7536
+ "atOrAbove": "13.4.6",
6263
7537
  "cwe": [
6264
- "CWE-400",
6265
- "CWE-502"
7538
+ "CWE-328"
6266
7539
  ],
6267
7540
  "identifiers": {
6268
- "githubID": "GHSA-H25M-26QC-WCJF"
7541
+ "CVE": [
7542
+ "CVE-2026-44582"
7543
+ ],
7544
+ "githubID": "GHSA-VFV6-92FF-J949"
6269
7545
  }
6270
7546
  },
6271
7547
  {
6272
- "below": "15.3.0-canary.47",
6273
- "severity": "medium",
6274
- "atOrAbove": "15.3.0-canary.0",
7548
+ "below": "15.5.16",
7549
+ "severity": "high",
7550
+ "atOrAbove": "13.4.13",
6275
7551
  "cwe": [
6276
- "CWE-400",
6277
- "CWE-409",
6278
- "CWE-770"
7552
+ "CWE-918"
6279
7553
  ],
6280
7554
  "identifiers": {
6281
7555
  "CVE": [
6282
- "CVE-2025-59472"
7556
+ "CVE-2026-44578"
6283
7557
  ],
6284
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
7558
+ "githubID": "GHSA-C4J6-FC7J-M34R"
6285
7559
  }
6286
7560
  },
6287
7561
  {
6288
- "below": "15.3.1-canary.16",
7562
+ "below": "15.5.16",
6289
7563
  "severity": "medium",
6290
- "atOrAbove": "15.3.1-canary.0",
7564
+ "atOrAbove": "14.2.0",
6291
7565
  "cwe": [
6292
- "CWE-400",
6293
- "CWE-409",
6294
- "CWE-770"
7566
+ "CWE-436"
6295
7567
  ],
6296
7568
  "identifiers": {
6297
7569
  "CVE": [
6298
- "CVE-2025-59472"
7570
+ "CVE-2026-44576"
6299
7571
  ],
6300
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
7572
+ "githubID": "GHSA-WFC6-R584-VFW7"
6301
7573
  }
6302
7574
  },
6303
7575
  {
6304
- "below": "15.3.3",
6305
- "severity": "low",
6306
- "atOrAbove": "15.3.0",
7576
+ "below": "15.5.16",
7577
+ "severity": "high",
7578
+ "atOrAbove": "15.0.0",
6307
7579
  "cwe": [
6308
- "CWE-444"
7580
+ "CWE-770"
6309
7581
  ],
6310
7582
  "identifiers": {
6311
7583
  "CVE": [
6312
- "CVE-2025-49005"
7584
+ "CVE-2026-44579"
6313
7585
  ],
6314
- "githubID": "GHSA-R2FC-CCR8-96C4"
7586
+ "githubID": "GHSA-MG66-MRH9-M8JX"
6315
7587
  }
6316
7588
  },
6317
7589
  {
6318
- "below": "15.3.6",
6319
- "severity": "critical",
6320
- "atOrAbove": "15.3.0-canary.0",
7590
+ "below": "15.5.16",
7591
+ "severity": "high",
7592
+ "atOrAbove": "15.2.0",
6321
7593
  "cwe": [
6322
- "CWE-502"
7594
+ "CWE-288"
6323
7595
  ],
6324
7596
  "identifiers": {
6325
- "githubID": "GHSA-9QR9-H5GF-34MP"
7597
+ "CVE": [
7598
+ "CVE-2026-44575"
7599
+ ],
7600
+ "githubID": "GHSA-267C-6GRR-H53F"
6326
7601
  }
6327
7602
  },
6328
7603
  {
6329
- "below": "15.3.7",
7604
+ "below": "15.5.16",
6330
7605
  "severity": "high",
6331
- "atOrAbove": "15.3.0-canary.0",
7606
+ "atOrAbove": "15.4.0",
6332
7607
  "cwe": [
6333
- "CWE-1395",
6334
- "CWE-400",
6335
- "CWE-502"
7608
+ "CWE-288"
6336
7609
  ],
6337
7610
  "identifiers": {
6338
- "githubID": "GHSA-MWV6-3258-Q52C"
7611
+ "CVE": [
7612
+ "CVE-2026-44574"
7613
+ ],
7614
+ "githubID": "GHSA-492V-C6PP-MQQV"
6339
7615
  }
6340
7616
  },
6341
7617
  {
6342
- "below": "15.3.7",
6343
- "severity": "medium",
6344
- "atOrAbove": "15.3.0-canary.0",
7618
+ "below": "15.5.18",
7619
+ "severity": "high",
7620
+ "atOrAbove": "15.2.0",
6345
7621
  "cwe": [
6346
- "CWE-1395",
6347
- "CWE-497",
6348
- "CWE-502"
7622
+ "CWE-288"
6349
7623
  ],
6350
7624
  "identifiers": {
6351
- "githubID": "GHSA-W37M-7FHW-FMV9"
7625
+ "CVE": [
7626
+ "CVE-2026-45109"
7627
+ ],
7628
+ "githubID": "GHSA-26HH-7CQF-HHC6"
6352
7629
  }
6353
7630
  },
6354
7631
  {
6355
- "below": "15.3.8",
7632
+ "below": "15.5.21",
6356
7633
  "severity": "high",
6357
- "atOrAbove": "15.3.7",
7634
+ "atOrAbove": "12.0.0",
6358
7635
  "cwe": [
6359
- "CWE-1395",
6360
- "CWE-400",
6361
- "CWE-502"
7636
+ "CWE-918"
6362
7637
  ],
6363
7638
  "identifiers": {
6364
- "githubID": "GHSA-5J59-XGG2-R9C4"
7639
+ "CVE": [
7640
+ "CVE-2026-64645"
7641
+ ],
7642
+ "githubID": "GHSA-P9J2-GV94-2WF4"
6365
7643
  }
6366
7644
  },
6367
7645
  {
6368
- "below": "15.3.9",
6369
- "severity": "high",
6370
- "atOrAbove": "15.3.0-canary.0",
7646
+ "below": "15.5.21",
7647
+ "severity": "medium",
7648
+ "atOrAbove": "13.0.0",
6371
7649
  "cwe": [
6372
- "CWE-400",
6373
- "CWE-502"
7650
+ "CWE-116"
6374
7651
  ],
6375
7652
  "identifiers": {
6376
- "githubID": "GHSA-H25M-26QC-WCJF"
7653
+ "CVE": [
7654
+ "CVE-2026-64647"
7655
+ ],
7656
+ "githubID": "GHSA-4633-3J49-MH5Q"
6377
7657
  }
6378
7658
  },
6379
7659
  {
6380
- "below": "15.4.0-canary.131",
7660
+ "below": "15.5.21",
6381
7661
  "severity": "medium",
6382
- "atOrAbove": "15.4.0-canary.0",
7662
+ "atOrAbove": "13.0.0",
6383
7663
  "cwe": [
6384
- "CWE-400",
6385
- "CWE-409",
6386
7664
  "CWE-770"
6387
7665
  ],
6388
7666
  "identifiers": {
6389
7667
  "CVE": [
6390
- "CVE-2025-59472"
7668
+ "CVE-2026-64646"
6391
7669
  ],
6392
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
7670
+ "githubID": "GHSA-4C39-4CCG-62R3"
6393
7671
  }
6394
7672
  },
6395
7673
  {
6396
- "below": "15.4.2-canary.57",
7674
+ "below": "15.5.21",
6397
7675
  "severity": "medium",
6398
- "atOrAbove": "15.4.2-canary.0",
7676
+ "atOrAbove": "13.0.0",
6399
7677
  "cwe": [
6400
- "CWE-400",
6401
- "CWE-409",
6402
- "CWE-770"
7678
+ "CWE-524"
6403
7679
  ],
6404
7680
  "identifiers": {
6405
7681
  "CVE": [
6406
- "CVE-2025-59472"
7682
+ "CVE-2026-64648"
6407
7683
  ],
6408
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
7684
+ "githubID": "GHSA-68G3-V927-F742"
6409
7685
  }
6410
7686
  },
6411
7687
  {
6412
- "below": "15.4.5",
7688
+ "below": "15.5.21",
6413
7689
  "severity": "medium",
6414
- "atOrAbove": "15.0.0",
7690
+ "atOrAbove": "13.0.0",
6415
7691
  "cwe": [
6416
- "CWE-524"
7692
+ "CWE-201"
6417
7693
  ],
6418
7694
  "identifiers": {
6419
7695
  "CVE": [
6420
- "CVE-2025-57752"
7696
+ "CVE-2026-64643"
6421
7697
  ],
6422
- "githubID": "GHSA-G5QG-72QW-GW5V"
7698
+ "githubID": "GHSA-955P-X3MX-JCVP"
6423
7699
  }
6424
7700
  },
6425
7701
  {
6426
- "below": "15.4.5",
6427
- "severity": "medium",
6428
- "atOrAbove": "15.0.0",
7702
+ "below": "15.5.21",
7703
+ "severity": "high",
7704
+ "atOrAbove": "13.0.0",
6429
7705
  "cwe": [
6430
- "CWE-20"
7706
+ "CWE-834"
6431
7707
  ],
6432
7708
  "identifiers": {
6433
7709
  "CVE": [
6434
- "CVE-2025-55173"
7710
+ "CVE-2026-64641"
6435
7711
  ],
6436
- "githubID": "GHSA-XV57-4MR9-WG8V"
7712
+ "githubID": "GHSA-M99W-X7HQ-7VFJ"
6437
7713
  }
6438
7714
  },
6439
7715
  {
6440
- "below": "15.4.7",
6441
- "severity": "medium",
6442
- "atOrAbove": "15.0.0-canary.0",
7716
+ "below": "15.5.21",
7717
+ "severity": "high",
7718
+ "atOrAbove": "14.1.1",
6443
7719
  "cwe": [
6444
7720
  "CWE-918"
6445
7721
  ],
6446
7722
  "identifiers": {
6447
7723
  "CVE": [
6448
- "CVE-2025-57822"
7724
+ "CVE-2026-64649"
6449
7725
  ],
6450
- "githubID": "GHSA-4342-X723-CH2F"
7726
+ "githubID": "GHSA-89XV-2M56-2M9X"
6451
7727
  }
6452
7728
  },
6453
7729
  {
6454
- "below": "15.4.8",
6455
- "severity": "critical",
6456
- "atOrAbove": "15.4.0-canary.0",
7730
+ "below": "15.5.21",
7731
+ "severity": "medium",
7732
+ "atOrAbove": "15.5.0",
6457
7733
  "cwe": [
6458
- "CWE-502"
7734
+ "CWE-407"
6459
7735
  ],
6460
7736
  "identifiers": {
6461
- "githubID": "GHSA-9QR9-H5GF-34MP"
7737
+ "CVE": [
7738
+ "CVE-2026-64644"
7739
+ ],
7740
+ "githubID": "GHSA-Q8WF-6R8G-63CH"
6462
7741
  }
6463
7742
  },
6464
7743
  {
6465
- "below": "15.4.9",
7744
+ "below": "15.6.0-canary.59",
6466
7745
  "severity": "high",
6467
- "atOrAbove": "15.4.0-canary.0",
7746
+ "atOrAbove": "15.6.0-canary.0",
6468
7747
  "cwe": [
6469
7748
  "CWE-1395",
6470
7749
  "CWE-400",
@@ -6475,9 +7754,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6475
7754
  }
6476
7755
  },
6477
7756
  {
6478
- "below": "15.4.9",
7757
+ "below": "15.6.0-canary.59",
6479
7758
  "severity": "medium",
6480
- "atOrAbove": "15.4.0-canary.0",
7759
+ "atOrAbove": "15.6.0-canary.0",
6481
7760
  "cwe": [
6482
7761
  "CWE-1395",
6483
7762
  "CWE-497",
@@ -6488,9 +7767,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6488
7767
  }
6489
7768
  },
6490
7769
  {
6491
- "below": "15.4.10",
7770
+ "below": "15.6.0-canary.60",
6492
7771
  "severity": "high",
6493
- "atOrAbove": "15.4.9",
7772
+ "atOrAbove": "15.6.0-canary.59",
6494
7773
  "cwe": [
6495
7774
  "CWE-1395",
6496
7775
  "CWE-400",
@@ -6501,21 +7780,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6501
7780
  }
6502
7781
  },
6503
7782
  {
6504
- "below": "15.4.11",
6505
- "severity": "high",
6506
- "atOrAbove": "15.4.0-canary.0",
6507
- "cwe": [
6508
- "CWE-400",
6509
- "CWE-502"
6510
- ],
6511
- "identifiers": {
6512
- "githubID": "GHSA-H25M-26QC-WCJF"
6513
- }
6514
- },
6515
- {
6516
- "below": "15.5.1-canary.40",
7783
+ "below": "15.6.0-canary.61",
6517
7784
  "severity": "medium",
6518
- "atOrAbove": "15.5.1-canary.0",
7785
+ "atOrAbove": "15.6.0-canary.0",
6519
7786
  "cwe": [
6520
7787
  "CWE-400",
6521
7788
  "CWE-409",
@@ -6529,9 +7796,21 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6529
7796
  }
6530
7797
  },
6531
7798
  {
6532
- "below": "15.5.7",
7799
+ "below": "15.6.0-canary.61",
7800
+ "severity": "high",
7801
+ "atOrAbove": "15.6.0-canary.0",
7802
+ "cwe": [
7803
+ "CWE-400",
7804
+ "CWE-502"
7805
+ ],
7806
+ "identifiers": {
7807
+ "githubID": "GHSA-H25M-26QC-WCJF"
7808
+ }
7809
+ },
7810
+ {
7811
+ "below": "16.0.7",
6533
7812
  "severity": "critical",
6534
- "atOrAbove": "15.5.0-canary.0",
7813
+ "atOrAbove": "16.0.0-canary.0",
6535
7814
  "cwe": [
6536
7815
  "CWE-502"
6537
7816
  ],
@@ -6540,9 +7819,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6540
7819
  }
6541
7820
  },
6542
7821
  {
6543
- "below": "15.5.8",
7822
+ "below": "16.0.9",
6544
7823
  "severity": "high",
6545
- "atOrAbove": "15.5.1-canary.0",
7824
+ "atOrAbove": "16.0.0-beta.0",
6546
7825
  "cwe": [
6547
7826
  "CWE-1395",
6548
7827
  "CWE-400",
@@ -6553,9 +7832,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6553
7832
  }
6554
7833
  },
6555
7834
  {
6556
- "below": "15.5.8",
7835
+ "below": "16.0.9",
6557
7836
  "severity": "medium",
6558
- "atOrAbove": "15.5.1-canary.0",
7837
+ "atOrAbove": "16.0.0-beta.0",
6559
7838
  "cwe": [
6560
7839
  "CWE-1395",
6561
7840
  "CWE-497",
@@ -6566,9 +7845,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6566
7845
  }
6567
7846
  },
6568
7847
  {
6569
- "below": "15.5.9",
7848
+ "below": "16.0.10",
6570
7849
  "severity": "high",
6571
- "atOrAbove": "15.5.8",
7850
+ "atOrAbove": "16.0.9",
6572
7851
  "cwe": [
6573
7852
  "CWE-1395",
6574
7853
  "CWE-400",
@@ -6579,24 +7858,9 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6579
7858
  }
6580
7859
  },
6581
7860
  {
6582
- "below": "15.5.10",
6583
- "severity": "medium",
6584
- "atOrAbove": "10.0.0",
6585
- "cwe": [
6586
- "CWE-400",
6587
- "CWE-770"
6588
- ],
6589
- "identifiers": {
6590
- "CVE": [
6591
- "CVE-2025-59471"
6592
- ],
6593
- "githubID": "GHSA-9G9P-9GW9-JX7F"
6594
- }
6595
- },
6596
- {
6597
- "below": "15.5.10",
7861
+ "below": "16.0.11",
6598
7862
  "severity": "high",
6599
- "atOrAbove": "15.5.1-canary.0",
7863
+ "atOrAbove": "16.0.0-beta.0",
6600
7864
  "cwe": [
6601
7865
  "CWE-400",
6602
7866
  "CWE-502"
@@ -6606,185 +7870,172 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6606
7870
  }
6607
7871
  },
6608
7872
  {
6609
- "below": "15.5.13",
6610
- "severity": "medium",
6611
- "atOrAbove": "9.5.0",
7873
+ "below": "16.1.0-canary.17",
7874
+ "severity": "high",
7875
+ "atOrAbove": "16.1.0-canary.0",
6612
7876
  "cwe": [
6613
- "CWE-444"
7877
+ "CWE-1395",
7878
+ "CWE-400",
7879
+ "CWE-502"
6614
7880
  ],
6615
7881
  "identifiers": {
6616
- "CVE": [
6617
- "CVE-2026-29057"
6618
- ],
6619
- "githubID": "GHSA-GGV3-7P47-PFV8"
7882
+ "githubID": "GHSA-MWV6-3258-Q52C"
6620
7883
  }
6621
7884
  },
6622
7885
  {
6623
- "below": "15.5.14",
7886
+ "below": "16.1.0-canary.17",
6624
7887
  "severity": "medium",
6625
- "atOrAbove": "10.0.0",
7888
+ "atOrAbove": "16.1.0-canary.0",
6626
7889
  "cwe": [
6627
- "CWE-400"
7890
+ "CWE-1395",
7891
+ "CWE-497",
7892
+ "CWE-502"
6628
7893
  ],
6629
7894
  "identifiers": {
6630
- "CVE": [
6631
- "CVE-2026-27980"
6632
- ],
6633
- "githubID": "GHSA-3X4C-7XQ6-9PQ8"
7895
+ "githubID": "GHSA-W37M-7FHW-FMV9"
6634
7896
  }
6635
7897
  },
6636
7898
  {
6637
- "below": "15.5.15",
7899
+ "below": "16.1.0-canary.19",
6638
7900
  "severity": "high",
6639
- "atOrAbove": "13.0.0",
7901
+ "atOrAbove": "16.1.0-canary.17",
6640
7902
  "cwe": [
6641
- "CWE-770"
7903
+ "CWE-1395",
7904
+ "CWE-400",
7905
+ "CWE-502"
6642
7906
  ],
6643
7907
  "identifiers": {
6644
- "githubID": "GHSA-Q4GF-8MX6-V5V3"
7908
+ "githubID": "GHSA-5J59-XGG2-R9C4"
6645
7909
  }
6646
7910
  },
6647
7911
  {
6648
- "below": "15.5.16",
7912
+ "below": "16.1.5",
6649
7913
  "severity": "medium",
6650
- "atOrAbove": "10.0.0",
7914
+ "atOrAbove": "15.6.0-canary.0",
6651
7915
  "cwe": [
7916
+ "CWE-400",
6652
7917
  "CWE-770"
6653
7918
  ],
6654
7919
  "identifiers": {
6655
7920
  "CVE": [
6656
- "CVE-2026-44577"
6657
- ],
6658
- "githubID": "GHSA-H64F-5H5J-JQJH"
6659
- }
6660
- },
6661
- {
6662
- "below": "15.5.16",
6663
- "severity": "high",
6664
- "atOrAbove": "12.2.0",
6665
- "cwe": [
6666
- "CWE-863"
6667
- ],
6668
- "identifiers": {
6669
- "CVE": [
6670
- "CVE-2026-44573"
7921
+ "CVE-2025-59471"
6671
7922
  ],
6672
- "githubID": "GHSA-36QX-FR4F-26G5"
7923
+ "githubID": "GHSA-9G9P-9GW9-JX7F"
6673
7924
  }
6674
7925
  },
6675
7926
  {
6676
- "below": "15.5.16",
6677
- "severity": "low",
6678
- "atOrAbove": "12.2.0",
7927
+ "below": "16.1.5",
7928
+ "severity": "medium",
7929
+ "atOrAbove": "16.0.0-beta.0",
6679
7930
  "cwe": [
6680
- "CWE-349"
7931
+ "CWE-400",
7932
+ "CWE-409",
7933
+ "CWE-770"
6681
7934
  ],
6682
7935
  "identifiers": {
6683
7936
  "CVE": [
6684
- "CVE-2026-44572"
7937
+ "CVE-2025-59472"
6685
7938
  ],
6686
- "githubID": "GHSA-3G8H-86W9-WVMQ"
7939
+ "githubID": "GHSA-5F7Q-JPQC-WP7H"
6687
7940
  }
6688
7941
  },
6689
7942
  {
6690
- "below": "15.5.16",
7943
+ "below": "16.1.5",
6691
7944
  "severity": "high",
6692
- "atOrAbove": "13.0.0",
7945
+ "atOrAbove": "16.1.0-canary.0",
6693
7946
  "cwe": [
6694
- "CWE-770"
7947
+ "CWE-400",
7948
+ "CWE-502"
6695
7949
  ],
6696
7950
  "identifiers": {
6697
- "githubID": "GHSA-8H8Q-6873-Q5FJ"
7951
+ "githubID": "GHSA-H25M-26QC-WCJF"
6698
7952
  }
6699
7953
  },
6700
7954
  {
6701
- "below": "15.5.16",
7955
+ "below": "16.1.7",
6702
7956
  "severity": "medium",
6703
- "atOrAbove": "13.0.0",
7957
+ "atOrAbove": "16.0.0-beta.0",
6704
7958
  "cwe": [
6705
- "CWE-79"
7959
+ "CWE-400"
6706
7960
  ],
6707
7961
  "identifiers": {
6708
7962
  "CVE": [
6709
- "CVE-2026-44580"
7963
+ "CVE-2026-27980"
6710
7964
  ],
6711
- "githubID": "GHSA-GX5P-JG67-6X7H"
7965
+ "githubID": "GHSA-3X4C-7XQ6-9PQ8"
6712
7966
  }
6713
7967
  },
6714
7968
  {
6715
- "below": "15.5.16",
7969
+ "below": "16.1.7",
6716
7970
  "severity": "medium",
6717
- "atOrAbove": "13.4.0",
7971
+ "atOrAbove": "16.0.0-beta.0",
6718
7972
  "cwe": [
6719
- "CWE-79"
7973
+ "CWE-444"
6720
7974
  ],
6721
7975
  "identifiers": {
6722
7976
  "CVE": [
6723
- "CVE-2026-44581"
7977
+ "CVE-2026-29057"
6724
7978
  ],
6725
- "githubID": "GHSA-FFHC-5MCF-PF4Q"
7979
+ "githubID": "GHSA-GGV3-7P47-PFV8"
6726
7980
  }
6727
7981
  },
6728
7982
  {
6729
- "below": "15.5.16",
6730
- "severity": "low",
6731
- "atOrAbove": "13.4.6",
7983
+ "below": "16.1.7",
7984
+ "severity": "medium",
7985
+ "atOrAbove": "16.0.1",
6732
7986
  "cwe": [
6733
- "CWE-328"
7987
+ "CWE-770"
6734
7988
  ],
6735
7989
  "identifiers": {
6736
7990
  "CVE": [
6737
- "CVE-2026-44582"
7991
+ "CVE-2026-27979"
6738
7992
  ],
6739
- "githubID": "GHSA-VFV6-92FF-J949"
7993
+ "githubID": "GHSA-H27X-G6W4-24GQ"
6740
7994
  }
6741
7995
  },
6742
7996
  {
6743
- "below": "15.5.16",
6744
- "severity": "high",
6745
- "atOrAbove": "13.4.13",
7997
+ "below": "16.1.7",
7998
+ "severity": "low",
7999
+ "atOrAbove": "16.0.1",
6746
8000
  "cwe": [
6747
- "CWE-918"
8001
+ "CWE-1385"
6748
8002
  ],
6749
8003
  "identifiers": {
6750
8004
  "CVE": [
6751
- "CVE-2026-44578"
8005
+ "CVE-2026-27977"
6752
8006
  ],
6753
- "githubID": "GHSA-C4J6-FC7J-M34R"
8007
+ "githubID": "GHSA-JCC7-9WPM-MJ36"
6754
8008
  }
6755
8009
  },
6756
8010
  {
6757
- "below": "15.5.16",
8011
+ "below": "16.1.7",
6758
8012
  "severity": "medium",
6759
- "atOrAbove": "14.2.0",
8013
+ "atOrAbove": "16.0.1",
6760
8014
  "cwe": [
6761
- "CWE-436"
8015
+ "CWE-352"
6762
8016
  ],
6763
8017
  "identifiers": {
6764
8018
  "CVE": [
6765
- "CVE-2026-44576"
8019
+ "CVE-2026-27978"
6766
8020
  ],
6767
- "githubID": "GHSA-WFC6-R584-VFW7"
8021
+ "githubID": "GHSA-MQ59-M269-XVCX"
6768
8022
  }
6769
8023
  },
6770
8024
  {
6771
- "below": "15.5.16",
8025
+ "below": "16.2.3",
6772
8026
  "severity": "high",
6773
- "atOrAbove": "15.0.0",
8027
+ "atOrAbove": "16.0.0-beta.0",
6774
8028
  "cwe": [
6775
8029
  "CWE-770"
6776
8030
  ],
6777
8031
  "identifiers": {
6778
- "CVE": [
6779
- "CVE-2026-44579"
6780
- ],
6781
- "githubID": "GHSA-MG66-MRH9-M8JX"
8032
+ "githubID": "GHSA-Q4GF-8MX6-V5V3"
6782
8033
  }
6783
8034
  },
6784
8035
  {
6785
- "below": "15.5.16",
8036
+ "below": "16.2.5",
6786
8037
  "severity": "high",
6787
- "atOrAbove": "15.2.0",
8038
+ "atOrAbove": "16.0.0",
6788
8039
  "cwe": [
6789
8040
  "CWE-288"
6790
8041
  ],
@@ -6796,312 +8047,294 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
6796
8047
  }
6797
8048
  },
6798
8049
  {
6799
- "below": "15.5.16",
8050
+ "below": "16.2.5",
6800
8051
  "severity": "high",
6801
- "atOrAbove": "15.4.0",
8052
+ "atOrAbove": "16.0.0",
6802
8053
  "cwe": [
6803
- "CWE-288"
8054
+ "CWE-863"
6804
8055
  ],
6805
8056
  "identifiers": {
6806
8057
  "CVE": [
6807
- "CVE-2026-44574"
8058
+ "CVE-2026-44573"
6808
8059
  ],
6809
- "githubID": "GHSA-492V-C6PP-MQQV"
8060
+ "githubID": "GHSA-36QX-FR4F-26G5"
6810
8061
  }
6811
8062
  },
6812
8063
  {
6813
- "below": "15.5.18",
6814
- "severity": "high",
6815
- "atOrAbove": "15.2.0",
8064
+ "below": "16.2.5",
8065
+ "severity": "low",
8066
+ "atOrAbove": "16.0.0",
6816
8067
  "cwe": [
6817
- "CWE-288"
8068
+ "CWE-349"
6818
8069
  ],
6819
8070
  "identifiers": {
6820
8071
  "CVE": [
6821
- "CVE-2026-45109"
8072
+ "CVE-2026-44572"
6822
8073
  ],
6823
- "githubID": "GHSA-26HH-7CQF-HHC6"
8074
+ "githubID": "GHSA-3G8H-86W9-WVMQ"
6824
8075
  }
6825
8076
  },
6826
8077
  {
6827
- "below": "15.6.0-canary.59",
8078
+ "below": "16.2.5",
6828
8079
  "severity": "high",
6829
- "atOrAbove": "15.6.0-canary.0",
8080
+ "atOrAbove": "16.0.0",
6830
8081
  "cwe": [
6831
- "CWE-1395",
6832
- "CWE-400",
6833
- "CWE-502"
8082
+ "CWE-288"
6834
8083
  ],
6835
8084
  "identifiers": {
6836
- "githubID": "GHSA-MWV6-3258-Q52C"
8085
+ "CVE": [
8086
+ "CVE-2026-44574"
8087
+ ],
8088
+ "githubID": "GHSA-492V-C6PP-MQQV"
6837
8089
  }
6838
8090
  },
6839
8091
  {
6840
- "below": "15.6.0-canary.59",
6841
- "severity": "medium",
6842
- "atOrAbove": "15.6.0-canary.0",
8092
+ "below": "16.2.5",
8093
+ "severity": "high",
8094
+ "atOrAbove": "16.0.0",
6843
8095
  "cwe": [
6844
- "CWE-1395",
6845
- "CWE-497",
6846
- "CWE-502"
8096
+ "CWE-770"
6847
8097
  ],
6848
8098
  "identifiers": {
6849
- "githubID": "GHSA-W37M-7FHW-FMV9"
8099
+ "githubID": "GHSA-8H8Q-6873-Q5FJ"
6850
8100
  }
6851
8101
  },
6852
8102
  {
6853
- "below": "15.6.0-canary.60",
8103
+ "below": "16.2.5",
6854
8104
  "severity": "high",
6855
- "atOrAbove": "15.6.0-canary.59",
8105
+ "atOrAbove": "16.0.0",
6856
8106
  "cwe": [
6857
- "CWE-1395",
6858
- "CWE-400",
6859
- "CWE-502"
8107
+ "CWE-918"
6860
8108
  ],
6861
8109
  "identifiers": {
6862
- "githubID": "GHSA-5J59-XGG2-R9C4"
8110
+ "CVE": [
8111
+ "CVE-2026-44578"
8112
+ ],
8113
+ "githubID": "GHSA-C4J6-FC7J-M34R"
6863
8114
  }
6864
8115
  },
6865
8116
  {
6866
- "below": "15.6.0-canary.61",
8117
+ "below": "16.2.5",
6867
8118
  "severity": "medium",
6868
- "atOrAbove": "15.6.0-canary.0",
8119
+ "atOrAbove": "16.0.0",
6869
8120
  "cwe": [
6870
- "CWE-400",
6871
- "CWE-409",
6872
- "CWE-770"
8121
+ "CWE-79"
6873
8122
  ],
6874
8123
  "identifiers": {
6875
8124
  "CVE": [
6876
- "CVE-2025-59472"
8125
+ "CVE-2026-44581"
6877
8126
  ],
6878
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
6879
- }
6880
- },
6881
- {
6882
- "below": "15.6.0-canary.61",
6883
- "severity": "high",
6884
- "atOrAbove": "15.6.0-canary.0",
6885
- "cwe": [
6886
- "CWE-400",
6887
- "CWE-502"
6888
- ],
6889
- "identifiers": {
6890
- "githubID": "GHSA-H25M-26QC-WCJF"
6891
- }
6892
- },
6893
- {
6894
- "below": "16.0.7",
6895
- "severity": "critical",
6896
- "atOrAbove": "16.0.0-canary.0",
6897
- "cwe": [
6898
- "CWE-502"
6899
- ],
6900
- "identifiers": {
6901
- "githubID": "GHSA-9QR9-H5GF-34MP"
8127
+ "githubID": "GHSA-FFHC-5MCF-PF4Q"
6902
8128
  }
6903
8129
  },
6904
8130
  {
6905
- "below": "16.0.9",
6906
- "severity": "high",
6907
- "atOrAbove": "16.0.0-beta.0",
8131
+ "below": "16.2.5",
8132
+ "severity": "medium",
8133
+ "atOrAbove": "16.0.0",
6908
8134
  "cwe": [
6909
- "CWE-1395",
6910
- "CWE-400",
6911
- "CWE-502"
8135
+ "CWE-79"
6912
8136
  ],
6913
8137
  "identifiers": {
6914
- "githubID": "GHSA-MWV6-3258-Q52C"
8138
+ "CVE": [
8139
+ "CVE-2026-44580"
8140
+ ],
8141
+ "githubID": "GHSA-GX5P-JG67-6X7H"
6915
8142
  }
6916
8143
  },
6917
8144
  {
6918
- "below": "16.0.9",
8145
+ "below": "16.2.5",
6919
8146
  "severity": "medium",
6920
- "atOrAbove": "16.0.0-beta.0",
8147
+ "atOrAbove": "16.0.0",
6921
8148
  "cwe": [
6922
- "CWE-1395",
6923
- "CWE-497",
6924
- "CWE-502"
8149
+ "CWE-770"
6925
8150
  ],
6926
8151
  "identifiers": {
6927
- "githubID": "GHSA-W37M-7FHW-FMV9"
8152
+ "CVE": [
8153
+ "CVE-2026-44577"
8154
+ ],
8155
+ "githubID": "GHSA-H64F-5H5J-JQJH"
6928
8156
  }
6929
8157
  },
6930
8158
  {
6931
- "below": "16.0.10",
8159
+ "below": "16.2.5",
6932
8160
  "severity": "high",
6933
- "atOrAbove": "16.0.9",
8161
+ "atOrAbove": "16.0.0",
6934
8162
  "cwe": [
6935
- "CWE-1395",
6936
- "CWE-400",
6937
- "CWE-502"
8163
+ "CWE-770"
6938
8164
  ],
6939
8165
  "identifiers": {
6940
- "githubID": "GHSA-5J59-XGG2-R9C4"
8166
+ "CVE": [
8167
+ "CVE-2026-44579"
8168
+ ],
8169
+ "githubID": "GHSA-MG66-MRH9-M8JX"
6941
8170
  }
6942
8171
  },
6943
8172
  {
6944
- "below": "16.0.11",
6945
- "severity": "high",
6946
- "atOrAbove": "16.0.0-beta.0",
8173
+ "below": "16.2.5",
8174
+ "severity": "low",
8175
+ "atOrAbove": "16.0.0",
6947
8176
  "cwe": [
6948
- "CWE-400",
6949
- "CWE-502"
8177
+ "CWE-328"
6950
8178
  ],
6951
8179
  "identifiers": {
6952
- "githubID": "GHSA-H25M-26QC-WCJF"
8180
+ "CVE": [
8181
+ "CVE-2026-44582"
8182
+ ],
8183
+ "githubID": "GHSA-VFV6-92FF-J949"
6953
8184
  }
6954
8185
  },
6955
8186
  {
6956
- "below": "16.1.0-canary.17",
6957
- "severity": "high",
6958
- "atOrAbove": "16.1.0-canary.0",
8187
+ "below": "16.2.5",
8188
+ "severity": "medium",
8189
+ "atOrAbove": "16.0.0",
6959
8190
  "cwe": [
6960
- "CWE-1395",
6961
- "CWE-400",
6962
- "CWE-502"
8191
+ "CWE-436"
6963
8192
  ],
6964
8193
  "identifiers": {
6965
- "githubID": "GHSA-MWV6-3258-Q52C"
8194
+ "CVE": [
8195
+ "CVE-2026-44576"
8196
+ ],
8197
+ "githubID": "GHSA-WFC6-R584-VFW7"
6966
8198
  }
6967
8199
  },
6968
8200
  {
6969
- "below": "16.1.0-canary.17",
6970
- "severity": "medium",
6971
- "atOrAbove": "16.1.0-canary.0",
8201
+ "below": "16.2.6",
8202
+ "severity": "high",
8203
+ "atOrAbove": "16.0.0",
6972
8204
  "cwe": [
6973
- "CWE-1395",
6974
- "CWE-497",
6975
- "CWE-502"
8205
+ "CWE-288"
6976
8206
  ],
6977
8207
  "identifiers": {
6978
- "githubID": "GHSA-W37M-7FHW-FMV9"
8208
+ "CVE": [
8209
+ "CVE-2026-45109"
8210
+ ],
8211
+ "githubID": "GHSA-26HH-7CQF-HHC6"
6979
8212
  }
6980
8213
  },
6981
8214
  {
6982
- "below": "16.1.0-canary.19",
6983
- "severity": "high",
6984
- "atOrAbove": "16.1.0-canary.17",
8215
+ "below": "16.2.11",
8216
+ "severity": "medium",
8217
+ "atOrAbove": "16.0.0",
6985
8218
  "cwe": [
6986
- "CWE-1395",
6987
- "CWE-400",
6988
- "CWE-502"
8219
+ "CWE-116"
6989
8220
  ],
6990
8221
  "identifiers": {
6991
- "githubID": "GHSA-5J59-XGG2-R9C4"
8222
+ "CVE": [
8223
+ "CVE-2026-64647"
8224
+ ],
8225
+ "githubID": "GHSA-4633-3J49-MH5Q"
6992
8226
  }
6993
8227
  },
6994
8228
  {
6995
- "below": "16.1.5",
8229
+ "below": "16.2.11",
6996
8230
  "severity": "medium",
6997
- "atOrAbove": "15.6.0-canary.0",
8231
+ "atOrAbove": "16.0.0",
6998
8232
  "cwe": [
6999
- "CWE-400",
7000
8233
  "CWE-770"
7001
8234
  ],
7002
8235
  "identifiers": {
7003
8236
  "CVE": [
7004
- "CVE-2025-59471"
8237
+ "CVE-2026-64646"
7005
8238
  ],
7006
- "githubID": "GHSA-9G9P-9GW9-JX7F"
8239
+ "githubID": "GHSA-4C39-4CCG-62R3"
7007
8240
  }
7008
8241
  },
7009
8242
  {
7010
- "below": "16.1.5",
8243
+ "below": "16.2.11",
7011
8244
  "severity": "medium",
7012
- "atOrAbove": "16.0.0-beta.0",
8245
+ "atOrAbove": "16.0.0",
7013
8246
  "cwe": [
7014
- "CWE-400",
7015
- "CWE-409",
7016
- "CWE-770"
8247
+ "CWE-524"
7017
8248
  ],
7018
8249
  "identifiers": {
7019
8250
  "CVE": [
7020
- "CVE-2025-59472"
8251
+ "CVE-2026-64648"
7021
8252
  ],
7022
- "githubID": "GHSA-5F7Q-JPQC-WP7H"
8253
+ "githubID": "GHSA-68G3-V927-F742"
7023
8254
  }
7024
8255
  },
7025
8256
  {
7026
- "below": "16.1.5",
8257
+ "below": "16.2.11",
7027
8258
  "severity": "high",
7028
- "atOrAbove": "16.1.0-canary.0",
8259
+ "atOrAbove": "16.0.0",
7029
8260
  "cwe": [
7030
- "CWE-400",
7031
- "CWE-502"
8261
+ "CWE-285"
7032
8262
  ],
7033
8263
  "identifiers": {
7034
- "githubID": "GHSA-H25M-26QC-WCJF"
8264
+ "CVE": [
8265
+ "CVE-2026-64642"
8266
+ ],
8267
+ "githubID": "GHSA-6GPP-XCG3-4W24"
7035
8268
  }
7036
8269
  },
7037
8270
  {
7038
- "below": "16.1.7",
7039
- "severity": "medium",
7040
- "atOrAbove": "16.0.0-beta.0",
8271
+ "below": "16.2.11",
8272
+ "severity": "high",
8273
+ "atOrAbove": "16.0.0",
7041
8274
  "cwe": [
7042
- "CWE-400"
8275
+ "CWE-918"
7043
8276
  ],
7044
8277
  "identifiers": {
7045
8278
  "CVE": [
7046
- "CVE-2026-27980"
8279
+ "CVE-2026-64649"
7047
8280
  ],
7048
- "githubID": "GHSA-3X4C-7XQ6-9PQ8"
8281
+ "githubID": "GHSA-89XV-2M56-2M9X"
7049
8282
  }
7050
8283
  },
7051
8284
  {
7052
- "below": "16.1.7",
8285
+ "below": "16.2.11",
7053
8286
  "severity": "medium",
7054
- "atOrAbove": "16.0.0-beta.0",
8287
+ "atOrAbove": "16.0.0",
7055
8288
  "cwe": [
7056
- "CWE-444"
8289
+ "CWE-201"
7057
8290
  ],
7058
8291
  "identifiers": {
7059
8292
  "CVE": [
7060
- "CVE-2026-29057"
8293
+ "CVE-2026-64643"
7061
8294
  ],
7062
- "githubID": "GHSA-GGV3-7P47-PFV8"
8295
+ "githubID": "GHSA-955P-X3MX-JCVP"
7063
8296
  }
7064
8297
  },
7065
8298
  {
7066
- "below": "16.1.7",
7067
- "severity": "medium",
7068
- "atOrAbove": "16.0.1",
8299
+ "below": "16.2.11",
8300
+ "severity": "high",
8301
+ "atOrAbove": "16.0.0",
7069
8302
  "cwe": [
7070
- "CWE-770"
8303
+ "CWE-834"
7071
8304
  ],
7072
8305
  "identifiers": {
7073
8306
  "CVE": [
7074
- "CVE-2026-27979"
8307
+ "CVE-2026-64641"
7075
8308
  ],
7076
- "githubID": "GHSA-H27X-G6W4-24GQ"
8309
+ "githubID": "GHSA-M99W-X7HQ-7VFJ"
7077
8310
  }
7078
8311
  },
7079
8312
  {
7080
- "below": "16.1.7",
7081
- "severity": "low",
7082
- "atOrAbove": "16.0.1",
8313
+ "below": "16.2.11",
8314
+ "severity": "high",
8315
+ "atOrAbove": "16.0.0",
7083
8316
  "cwe": [
7084
- "CWE-1385"
8317
+ "CWE-918"
7085
8318
  ],
7086
8319
  "identifiers": {
7087
8320
  "CVE": [
7088
- "CVE-2026-27977"
8321
+ "CVE-2026-64645"
7089
8322
  ],
7090
- "githubID": "GHSA-JCC7-9WPM-MJ36"
8323
+ "githubID": "GHSA-P9J2-GV94-2WF4"
7091
8324
  }
7092
8325
  },
7093
8326
  {
7094
- "below": "16.1.7",
8327
+ "below": "16.2.11",
7095
8328
  "severity": "medium",
7096
- "atOrAbove": "16.0.1",
8329
+ "atOrAbove": "16.0.0",
7097
8330
  "cwe": [
7098
- "CWE-352"
8331
+ "CWE-407"
7099
8332
  ],
7100
8333
  "identifiers": {
7101
8334
  "CVE": [
7102
- "CVE-2026-27978"
8335
+ "CVE-2026-64644"
7103
8336
  ],
7104
- "githubID": "GHSA-MQ59-M269-XVCX"
8337
+ "githubID": "GHSA-Q8WF-6R8G-63CH"
7105
8338
  }
7106
8339
  }
7107
8340
  ]
@@ -7489,7 +8722,8 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
7489
8722
  ],
7490
8723
  "identifiers": {
7491
8724
  "CVE": [
7492
- "CVE-2021-23337"
8725
+ "CVE-2021-23337",
8726
+ "CVE-2026-4800"
7493
8727
  ],
7494
8728
  "githubID": "GHSA-35JH-R3H4-6JHM"
7495
8729
  }
@@ -7518,7 +8752,8 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
7518
8752
  ],
7519
8753
  "identifiers": {
7520
8754
  "CVE": [
7521
- "CVE-2025-13465"
8755
+ "CVE-2025-13465",
8756
+ "CVE-2026-2950"
7522
8757
  ],
7523
8758
  "githubID": "GHSA-XXJR-MMJV-4GPG"
7524
8759
  }
@@ -7532,6 +8767,7 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
7532
8767
  ],
7533
8768
  "identifiers": {
7534
8769
  "CVE": [
8770
+ "CVE-2025-13465",
7535
8771
  "CVE-2026-2950"
7536
8772
  ],
7537
8773
  "githubID": "GHSA-F23M-R3PF-42RH"
@@ -7546,6 +8782,7 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
7546
8782
  ],
7547
8783
  "identifiers": {
7548
8784
  "CVE": [
8785
+ "CVE-2021-23337",
7549
8786
  "CVE-2026-4800"
7550
8787
  ],
7551
8788
  "githubID": "GHSA-R5FR-RJXR-66JC"
@@ -7631,7 +8868,7 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
7631
8868
  "severity": "high",
7632
8869
  "atOrAbove": "0.7.29",
7633
8870
  "cwe": [
7634
- "CWE-829",
8871
+ "CWE-506",
7635
8872
  "CWE-912"
7636
8873
  ],
7637
8874
  "identifiers": {
@@ -7661,7 +8898,7 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
7661
8898
  "severity": "high",
7662
8899
  "atOrAbove": "0.8.0",
7663
8900
  "cwe": [
7664
- "CWE-829",
8901
+ "CWE-506",
7665
8902
  "CWE-912"
7666
8903
  ],
7667
8904
  "identifiers": {
@@ -7676,7 +8913,7 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
7676
8913
  "severity": "high",
7677
8914
  "atOrAbove": "1.0.0",
7678
8915
  "cwe": [
7679
- "CWE-829",
8916
+ "CWE-506",
7680
8917
  "CWE-912"
7681
8918
  ],
7682
8919
  "identifiers": {
@@ -7700,6 +8937,21 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
7700
8937
  ],
7701
8938
  "githubID": "GHSA-FHG7-M89Q-25R3"
7702
8939
  }
8940
+ },
8941
+ {
8942
+ "below": "2.0.10",
8943
+ "severity": "medium",
8944
+ "atOrAbove": "2.0.1",
8945
+ "cwe": [
8946
+ "CWE-1333",
8947
+ "CWE-400"
8948
+ ],
8949
+ "identifiers": {
8950
+ "CVE": [
8951
+ "CVE-2026-48125"
8952
+ ],
8953
+ "githubID": "GHSA-9H5V-PFQQ-X599"
8954
+ }
7703
8955
  }
7704
8956
  ]
7705
8957
  },
@@ -7804,6 +9056,20 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
7804
9056
  ],
7805
9057
  "githubID": "GHSA-WGRM-67XF-HHPQ"
7806
9058
  }
9059
+ },
9060
+ {
9061
+ "below": "6.2.108",
9062
+ "severity": "high",
9063
+ "atOrAbove": "5.6.83",
9064
+ "cwe": [
9065
+ "CWE-79"
9066
+ ],
9067
+ "identifiers": {
9068
+ "CVE": [
9069
+ "CVE-2026-16633"
9070
+ ],
9071
+ "githubID": "GHSA-HQ66-CQWQ-W95J"
9072
+ }
7807
9073
  }
7808
9074
  ]
7809
9075
  },
@@ -8129,7 +9395,22 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
8129
9395
  ".\\.throttle=[a-zA-Z_]+,.\\.time=[a-zA-Z_]+,.\\.util=[a-zA-Z_]+,.\\.vector=[a-zA-Z_]+,.\\.version=['\"]([0-9][0-9.a-z_\\-]+)['\"],.\\.zrender"
8130
9396
  ]
8131
9397
  },
8132
- "vulnerabilities": []
9398
+ "vulnerabilities": [
9399
+ {
9400
+ "below": "6.1.0",
9401
+ "severity": "medium",
9402
+ "atOrAbove": "0",
9403
+ "cwe": [
9404
+ "CWE-79"
9405
+ ],
9406
+ "identifiers": {
9407
+ "CVE": [
9408
+ "CVE-2026-45249"
9409
+ ],
9410
+ "githubID": "GHSA-FGMJ-FM8M-JVVX"
9411
+ }
9412
+ }
9413
+ ]
8133
9414
  },
8134
9415
  "zrender": {
8135
9416
  "extractors": {
@@ -8590,6 +9871,49 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
8590
9871
  "githubID": "GHSA-JGGG-4JG4-V7C6"
8591
9872
  }
8592
9873
  },
9874
+ {
9875
+ "below": "7.6.1",
9876
+ "severity": "high",
9877
+ "atOrAbove": "0",
9878
+ "cwe": [
9879
+ "CWE-674"
9880
+ ],
9881
+ "identifiers": {
9882
+ "CVE": [
9883
+ "CVE-2026-48712"
9884
+ ],
9885
+ "githubID": "GHSA-WCPC-WJ8M-HJX6"
9886
+ }
9887
+ },
9888
+ {
9889
+ "below": "7.6.3",
9890
+ "severity": "medium",
9891
+ "atOrAbove": "0",
9892
+ "cwe": [
9893
+ "CWE-674",
9894
+ "CWE-754"
9895
+ ],
9896
+ "identifiers": {
9897
+ "CVE": [
9898
+ "CVE-2026-54269"
9899
+ ],
9900
+ "githubID": "GHSA-F38Q-MGVJ-VPH7"
9901
+ }
9902
+ },
9903
+ {
9904
+ "below": "7.6.5",
9905
+ "severity": "medium",
9906
+ "atOrAbove": "7.5.0",
9907
+ "cwe": [
9908
+ "CWE-835"
9909
+ ],
9910
+ "identifiers": {
9911
+ "CVE": [
9912
+ "CVE-2026-59877"
9913
+ ],
9914
+ "githubID": "GHSA-J3F2-48V5-CCWW"
9915
+ }
9916
+ },
8593
9917
  {
8594
9918
  "below": "8.0.1",
8595
9919
  "severity": "critical",
@@ -8716,6 +10040,77 @@ const RETIRE_BROWSER_CATALOG = Object.freeze({
8716
10040
  ],
8717
10041
  "githubID": "GHSA-JGGG-4JG4-V7C6"
8718
10042
  }
10043
+ },
10044
+ {
10045
+ "below": "8.4.1",
10046
+ "severity": "high",
10047
+ "atOrAbove": "8.0.0",
10048
+ "cwe": [
10049
+ "CWE-674"
10050
+ ],
10051
+ "identifiers": {
10052
+ "CVE": [
10053
+ "CVE-2026-48712"
10054
+ ],
10055
+ "githubID": "GHSA-WCPC-WJ8M-HJX6"
10056
+ }
10057
+ },
10058
+ {
10059
+ "below": "8.5.0",
10060
+ "severity": "medium",
10061
+ "atOrAbove": "8.2.0",
10062
+ "cwe": [
10063
+ "CWE-770"
10064
+ ],
10065
+ "identifiers": {
10066
+ "CVE": [
10067
+ "CVE-2026-54270"
10068
+ ],
10069
+ "githubID": "GHSA-94RC-8X27-4472"
10070
+ }
10071
+ },
10072
+ {
10073
+ "below": "8.6.0",
10074
+ "severity": "medium",
10075
+ "atOrAbove": "8.0.0",
10076
+ "cwe": [
10077
+ "CWE-674",
10078
+ "CWE-754"
10079
+ ],
10080
+ "identifiers": {
10081
+ "CVE": [
10082
+ "CVE-2026-54269"
10083
+ ],
10084
+ "githubID": "GHSA-F38Q-MGVJ-VPH7"
10085
+ }
10086
+ },
10087
+ {
10088
+ "below": "8.6.5",
10089
+ "severity": "medium",
10090
+ "atOrAbove": "8.2.0",
10091
+ "cwe": [
10092
+ "CWE-1321"
10093
+ ],
10094
+ "identifiers": {
10095
+ "CVE": [
10096
+ "CVE-2026-59876"
10097
+ ],
10098
+ "githubID": "GHSA-JFJ6-75FJ-8934"
10099
+ }
10100
+ },
10101
+ {
10102
+ "below": "8.6.6",
10103
+ "severity": "medium",
10104
+ "atOrAbove": "8.0.0",
10105
+ "cwe": [
10106
+ "CWE-835"
10107
+ ],
10108
+ "identifiers": {
10109
+ "CVE": [
10110
+ "CVE-2026-59877"
10111
+ ],
10112
+ "githubID": "GHSA-J3F2-48V5-CCWW"
10113
+ }
8719
10114
  }
8720
10115
  ]
8721
10116
  }