cinny vulnerabilities (npm)

1 vulnerability.

• cinny npm Cinny: Access token disclosure via invalidated emoji pack avatar URL in service worker CVE-2026-42553 Fix available 7.1 HighMay 7, 2026