0xtrails (>=0.0.0-20251106131028, <=0.20.0), 123pancli (1.0.0) +3888 more potentially affected by CVE-2026-101905 via axios (>=1.15.2, <=1.19.0)

axios NPM version =1.15.2, =0.0.0-20251106131028, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.1.3-rc.0, =1.2.3 and mo...

0xtrails (>=0.0.0-20251106131028, <=0.20.0), 123pancli (1.0.0) +5849 more potentially affected by CVE-2026-101899 via axios (>=1.15.0, <=1.19.0)

axios NPM version =1.15.0, =0.0.0-20251106131028, =1.0.0, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =0.0.1-alpha.25 an...

0xtrails (>=0.0.0-20251106131028, <=0.20.0), 123pancli (1.0.0) +5849 more potentially affected by CVE-2026-101899 via axios (>=1.15.0, <=1.19.0)

axios NPM version =1.15.0, =0.0.0-20251106131028, =1.0.0, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =0.0.1-alpha.25 an...

0xtrails (>=0.0.0-20251106131028, <=0.20.0), 1inch-agent-kit (1.0.53) +2855 more potentially affected by CVE-2026-101907 via axios (>=1.17.0, <=1.19.0)

axios NPM version =1.17.0, =0.0.0-20251106131028, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.2.2-rc.0, =1.2.3 -...

0xtrails (>=0.0.0-20251106131028, <=0.20.0), 1inch-agent-kit (1.0.53) +3067 more potentially affected by CVE-2026-101903 via axios (>=1.16.1, <=1.19.0)

axios NPM version =1.16.1, =0.0.0-20251106131028, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.2.2-rc.0, =1.2.3 -...

0xtrails (>=0.0.0-20251106131028, <=0.20.0), 123pancli (1.0.0) +5849 more potentially affected by CVE-2026-101906 via axios (>=1.15.0, <=1.19.0)

axios NPM version =1.15.0, =0.0.0-20251106131028, =1.0.0, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =0.0.1-alpha.25 an...

0xtrails (>=0.0.0-20251106131028, <=0.20.0), 123pancli (1.0.0) +3944 more potentially affected by CVE-2026-101909 via axios (>=1.15.1, <=1.19.0)

axios NPM version =1.15.1, =0.0.0-20251106131028, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.1.3-rc.0, =1.2.3 and mo...

0xtrails (>=0.0.0-20251106131028, <=0.20.0), 123pancli (1.0.0) +3944 more potentially affected by CVE-2026-101909 via axios (>=1.15.1, <=1.19.0)

axios NPM version =1.15.1, =0.0.0-20251106131028, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.1.3-rc.0, =1.2.3 and mo...

0xtrails (>=0.0.0-20251106131028, <=0.20.0), 123pancli (1.0.0) +5849 more potentially affected by CVE-2026-101906 via axios (>=1.15.0, <=1.19.0)

axios NPM version =1.15.0, =0.0.0-20251106131028, =1.0.0, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =0.0.1-alpha.25 an...

Malicious code in 1inch-p2p-sdk (npm)

The package 1inch-p2p-sdk was found to contain malicious code. --- Credit: OpenSSF source...

-fides-amor-et-lux (1.0.0), 0xppl-solana-portfolio (1.0.0) +9357 more potentially affected by CVE-2025-27152 via axios (>=1.0.0, <=1.8.1)

axios NPM version =1.0.0, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =2.1.0, =3.0.0-beta.10, =0.2.1, =0.5.0, =0.6.2 and more Source cves: CVE-2025-27152 Source advisory: MEND:CVE-2025-27152...

1inch partners with Blockaid to enhance Web3 security through the 1inch Shield

Dubai, UAE, 20th June 2024, CyberNewsWire...

sellRewards() might be used to steal collaterals/rewards by malicious guardians or sellers.

Lines of code Vulnerability details Impact Malicious guardians or sellers might steal funds using sellRewards. Proof of Concept sellRewards is used to buy collaterals using rewardsagToken through 1inch router. function sellRewardsuint256 minAmountOut, bytes memory payload external returns uint256...

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +468 more potentially affected by CVE-2023-30541 via @openzeppelin/contracts-upgradeable (>=3.4.0, <=4.8.2)

@openzeppelin/contracts-upgradeable NPM version =3.4.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =0.0.1, =0.0.1, =4.0.0-prerelease-17, =4.3.4 and more Source cves: CVE-2023-30541 Source advisory: OSV:GHSA-MX2Q-35M2-X2RH...