@agenticmail/api (>=0.6.0, <=0.7.21), @agenticmail/cli (>=0.6.0, <=0.8.36) potentially affected by CVE-2026-57495 via @agenticmail/claudecode (0.1.17)

@agenticmail/claudecode NPM version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on @agenticmail/claudecode and may be impacted: - @agenticmail/api =0.6.0, =0.6.0, =0.8.36 Source cves: CVE-2026-57495 Source advisory: OSV:GHSA-FQ4X-789W-JG5H...

@agenticmail/api (>=0.6.0, <=0.7.21), @agenticmail/claudecode (>=0.1.0, <=0.1.17) +1 more potentially affected by CVE-2026-50287 via @agenticmail/mcp (>=0.6.2, <=0.7.9)

@agenticmail/mcp NPM version =0.6.2, =0.6.0, =0.1.0, =0.6.0, =0.8.36 Source cves: CVE-2026-50287 Source advisory: SNYK:JS-AGENTICMAILMCP-17751067...