LIVE OSV LOCKFILE SCAN
Commit: bfec2754b8bc4a6451cfd21cb128545ab138b795
UTC: 2026-11-12T07:47:54.892245+00:00
Source: pnpm-lock.yaml packages sections
API: https://api.osv.dev/v1/querybatch
Severity: OSV database_specific HIGH / CRITICAL; withdrawn excluded
Package versions queried: 2199
HIGH / CRITICAL findings: 2

path-to-regexp@6.1.0 | HIGH | GHSA-9wv6-86v2-598j
Fixed releases: 0.1.10, 1.9.0, 3.3.0, 6.3.0, 8.0.0
path-to-regexp outputs backtracking regular expressions

zod@3.25.76 | HIGH | GHSA-mrhx-c7xc-m3w5
Fixed releases: 4.6.6
Zod can exhaust memory while validating oversized constrained collections

