Cap-js @cap-js/postgres vulnerabilities

• @cap-js/db-service, cap-js @cap-js/postgres, @cap-js/sqlite +2 more Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service) CVE-2026-46421 Fix available 9.3 CriticalMay 20, 2026