-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +11646 more potentially affected by CVE-2026-44488 via axios (>=1.7.0, <=1.15.2)

axios NPM version =1.7.0, =0.0.8, =1.0.54, =0.1.0, =1.0.0, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.0.0, =1.0.0, =1.1.40, =1.1.65 and more Source cves: CVE-2026-44488 Source advisory: OSV:GHSA-777C-7FJR-54VF...

crypt_guard (0.1.4), dgsp (>=0.1.0, <=0.1.2) +8 more potentially affected by unknown CVE via pqcrypto-sphincsplus (>=0.1.0, <=0.7.2)

pqcrypto-sphincsplus CARGO version =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.4.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0160...

qgate-sln-mlrun (>=0.1.0, <=0.2.8) potentially affected by CVE-2026-10766 via mlrun (>=1.5.2, <=1.6.4)

mlrun PYPI version =1.5.2, =0.1.0, =0.2.8 Source cves: CVE-2026-10766 Source advisory: SNYK:PYTHON-MLRUN-17157375...

20231122-npm (1.0.0), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +6011 more potentially affected by CVE-2026-5078 via morgan (>=1.2.0, <=1.10.1)

morgan NPM version =1.2.0, =1.0.2, =1.0.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.0, =1.15.10 and more Source cves: CVE-2026-5078 Source advisory: SNYK:JS-MORGAN-17135841...

@accounter/client (>=0.0.6-alpha-20250716191627-847a4f732a66f2443e3141d5ef77222a6579ded3, <=0.0.11-alpha-20260328161521-814e4fc7c5b0b6b919590e293c0fac45b7c2513d), @boxyhq/react-ui (>=3.5.2, <=3.5.3) +154 more potentially affected by CVE-2026-33245 via react-router (>=7.7.0, <=7.13.1-pre.0)

react-router NPM version =7.7.0, =0.0.6-alpha-20250716191627-847a4f732a66f2443e3141d5ef77222a6579ded3, =3.5.2, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =3.3.7, =3.0.0-alpha.2, =3.2.0-beta.0, =0.1.9, =0.0.1, =1.21.9, =1.21.9, =0.3.1, =0.5.1 - @depup/react-router-dom 7.13.1-depup...

@astralis-os/vitest (2.4.1), @aws/nx-plugin (>=0.79.1, <=0.84.2) +77 more potentially affected by CVE-2026-47429 via vitest (>=4.0.0-beta.7, <=4.0.18)

vitest NPM version =4.0.0-beta.7, =0.79.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =4.0.0-alpha.31, =2.1.0, =1.2.3-preview-a960555.0, =7.2.0, =11.0.33, =21.0.0-alpha.33, =23.0.0-alpha.1 - @forgeax/engine 0.1.7 and more Source cves: CVE-2026-47429...

assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +7 more potentially affected by CVE-2026-46702 via russh (>=0.34.0, <=0.43.0)

russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - sshrpc 0.1.0 - tunnels 0.1.0 Source cves: CVE-2026-46702 Source advisory: OSV:GHSA-WWX6-X28X-8259...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-47248 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-47248 Source advisory: SNYK:JS-PARSESERVER-17111546...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-32905 via openclaw (>=2026.3.22, <=2026.5.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-32905 Source advisory: SNYK:JS-OPENCLAW-17111730...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-35673 via openclaw (>=2026.3.22, <=2026.4.26)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-35673 Source advisory: SNYK:JS-OPENCLAW-17139460...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-32906 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-32906 Source advisory: SNYK:JS-OPENCLAW-17099288...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +16 more potentially affected by CVE-2026-47200 via @nuxt/nitro-server (>=4.2.0, <=4.4.5)

@nuxt/nitro-server NPM version =4.2.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.2.2-depup.0, =10.0.2-rc.5, =1.1.11, =1.0.8, =0.4.5, =3.0.0-dev.27, =4.2.0, =0.5.0, =1.0.1, =0.4.0, =0.1.13, =0.2.2 and more Source cves: CVE-2026-47200 Source advisory: OSV:GHSA-HG3F-28RG-4JXJ...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16283 more potentially affected by CVE-2026-44494 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44494 Source advisory: OSV:GHSA-35JP-WW65-95WH...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16283 more potentially affected by CVE-2026-44492 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44492 Source advisory: SNYK:JS-AXIOS-17111062...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +644 more potentially affected by CVE-2026-47674 via hono (>=4.0.0, <=4.12.19)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-47674 Source advisory: SNYK:JS-HONO-17055760...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +644 more potentially affected by CVE-2026-47675 via hono (>=4.0.0, <=4.12.19)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-47675 Source advisory: SNYK:JS-HONO-17055753...

@agiflowai/aicode-toolkit (>=0.6.0, <=1.1.0), @agiflowai/one-mcp (0.4.0) +103 more potentially affected by CVE-2026-45617 via liquidjs (>=10.15.0, <=10.25.7)

liquidjs NPM version =10.15.0, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =1.0.1-beta.0, =1.6.3, =1.6.6 and more Source cves: CVE-2026-45617 Source advisory: SNYK:JS-LIQUIDJS-16960001...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44646 via liquidjs (>=10.2.0, <=10.25.7)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44646 Source advisory: SNYK:JS-LIQUIDJS-1688788...

@fedify/amqp (0.2.0-dev.12), @fedify/botkit (>=0.3.0-dev.125, <=0.4.0-dev.175) +3 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=1.5.0, <=1.9.2)

@fedify/fedify NPM version =1.5.0, =0.3.0-dev.125, =0.4.0-dev.167, =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...

2dev (0.1.3), @actualwave/traceability-matrices (1.0.7) +51 more potentially affected by CVE-2026-9495 via @koa/router (14.0.0)

@koa/router NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @koa/router and may be impacted: - 2dev 0.1.3 - @actualwave/traceability-matrices 1.0.7 - @bbc/sofie-server-core-integration...