@3w5h/knowledge_query (1.0.30), @3w5h/utils (>=1.0.0, <=1.0.7) +604 more potentially affected by CVE-2026-23965 via sm-crypto (>=0.0.9, <=0.3.14)

sm-crypto NPM version =0.0.9, =1.0.0, =0.1.0, =4.4.42, =0.0.2, =2.2.6, =2.2.6, =2.2.6, =2.3.10, =2.1.4, =2.2.6, =2.2.6, =2.2.6, =2.1.15, =2.3.9 and more Source cves: CVE-2026-23965 Source advisory: OSV:GHSA-HPWG-XG7M-3P6M...

@ancademy/bespoke-classic-client (>=2.2.6, <=2.7.8-alpha.1), @ancademy/bespoke-classic-robot (>=2.2.6, <=2.7.8-alpha.2) +111 more potentially affected by CVE-2026-23966 via sm-crypto (>=0.0.9, <=0.3.13)

sm-crypto NPM version =0.0.9, =2.2.6, =2.2.6, =2.2.6, =2.3.10, =2.1.4, =2.2.6, =2.2.6, =2.2.6, =2.1.15, =2.7.0, =2.1.15, =2.1.4, =2.7.7, =2.7.0, =2.7.8-alpha.1 and more Source cves: CVE-2026-23966 Source advisory: SNYK:JS-SMCRYPTO-15054679...

@aexol/opencode-tui (>=0.2.5, <=0.2.10), @agent-qofeno/agentx-cli (>=1.20.47, <=1.20.52) +122 more potentially affected by CVE-2026-23736 via seroval (>=1.0.7, <=1.3.2)

seroval NPM version =1.0.7, =0.2.5, =1.20.47, =2.11.0, =1.0.0, =1.0.0, =1.1.54, =1.1.54, =1.0.24, =0.1.0, =0.3.0, =0.3.2 - @entropy-tamer/reynard-config 0.1.2 - @entropy-tamer/reynard-i18n 1.2.0 - @entropy-tamer/reynard-validation 0.2.0 and more Source cves: CVE-2026-23736 Source advisory:...

@aexol/opencode-tui (>=0.2.5, <=0.2.10), @agent-qofeno/agentx-cli (>=1.20.47, <=1.20.52) +122 more potentially affected by CVE-2026-23736 via seroval (>=1.0.7, <=1.3.2)

seroval NPM version =1.0.7, =0.2.5, =1.20.47, =2.11.0, =1.0.0, =1.0.0, =1.1.54, =1.1.54, =1.0.24, =0.1.0, =0.3.0, =0.3.2 - @entropy-tamer/reynard-config 0.1.2 - @entropy-tamer/reynard-i18n 1.2.0 - @entropy-tamer/reynard-validation 0.2.0 and more Source cves: CVE-2026-23736 Source advisory:...

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.31.0-alpha, <=1.58.1-alpha) +14 more potentially affected by CVE-2026-21852 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.64)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.31.0-alpha, =0.0.1-rc.1, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =0.10.2, =0.11.5 and more Source cves: CVE-2026-21852 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-15046268...

@orval/angular (>=8.0.0-rc.0, <=8.0.1), @orval/axios (>=8.0.0-rc.0, <=8.0.1) +9 more potentially affected by CVE-2026-23947 via @orval/core (>=8.0.0, <=8.0.1)

@orval/core NPM version =8.0.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.6, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.1 Source cves: CVE-2026-23947 Source advisory: SNYK:JS-ORVALCORE-15038726...

@bechara/crux (>=6.0.0-alpha.1, <=6.6.2), @cappa/cli (>=0.1.0, <=0.4.3) +11 more potentially affected by CVE-2026-22031 via @fastify/middie (>=9.0.2, <=9.0.3)

@fastify/middie NPM version =9.0.2, =6.0.0-alpha.1, =0.1.0, =0.1.0, =1.0.0-develop-pedago.0, =1.0.11, =0.1.51, =1.0.36, =11.0.0-next.1, =1.3.0, =5.0.0-beta.36, =0.6.1-dev, =1.1.63 Source cves: CVE-2026-22031 Source advisory: SNYK:JS-FASTIFYMIDDIE-15038725...

@adenta/cms (>=0.0.6, <=1.1.1-0), @adobe/helix-deploy (>=11.0.19, <=11.1.15) +309 more potentially affected by CVE-2026-23745 via tar (>=7.0.0, <=7.5.2)

tar NPM version =7.0.0, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =0.1.1, =0.1.1, =2.17.11, =1.9.5, =8.8.3, =0.0.2, =0.0.22 and more Source cves: CVE-2026-23745 Source advisory: SNYK:JS-TAR-15032660...

@accounter/server (>=0.0.0, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @aligent/auth-module (1.0.1) +1 more potentially affected by CVE-2026-23735 via graphql-modules (>=2.3.0, <=2.4.0)

graphql-modules NPM version =2.3.0, =0.0.0, =1.0.7, =1.0.9 Source cves: CVE-2026-23735 Source advisory: OSV:GHSA-53WG-R69P-V3R7...

@alexanderniebuhr/eslint-config (>=1.3.0, <=1.4.0), @alexanderniebuhr/style (>=1.1.0, <=1.3.0) +176 more potentially affected by unknown CVE via svelte (>=3.1.0, <=3.59.1)

svelte NPM version =3.1.0, =1.3.0, =1.1.0, =1.3.0, =1.0.3, =0.0.999-alpha.30, =10.0.0, =7.1.4, =21.0.4, =8.0.4, =2.0.4, =1.0.1, =6.0.4, =12.1.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVELTE-15032658...

0g-serving-broker (0.1.0), 10x-cli (0.0.7) +4441 more potentially affected by CVE-2026-24001 via diff (>=6.0.0, <=8.0.2)

diff NPM version =6.0.0, =0.1.0, =1.0.0, =0.5.0, =1.0.9, =0.0.1, =0.0.1, =0.1.0, =1.0.1, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.1.8 and more Source cves: CVE-2026-24001 Source advisory: OSV:GHSA-73RR-HH4G-FPGX...

@01.software/sdk (>=0.0.1-251008.90016, <=0.1.0-dev.260109.7cf07c9), @adenta/cms (>=0.0.6, <=1.1.1-0) +362 more potentially affected by CVE-2026-22036 via undici (>=7.0.0, <=7.18.0)

undici NPM version =7.0.0, =0.0.1-251008.90016, =0.0.6, =0.0.33, =0.0.1, =1.0.0, =21.0.0-rc.2, =21.0.0-rc.2, =0.5.0, =1.0.1-dev.120, =0.1.0, =12.6.9, =1.6.3, =0.1.6, =0.1.7 and more Source cves: CVE-2026-22036 Source advisory: OSV:GHSA-G9MF-H72J-4RW9...

@01.software/sdk (>=0.0.1-251008.90016, <=0.1.0-dev.260109.7cf07c9), @adenta/cms (>=0.0.6, <=1.1.1-0) +362 more potentially affected by CVE-2026-22036 via undici (>=7.0.0, <=7.18.0)

undici NPM version =7.0.0, =0.0.1-251008.90016, =0.0.6, =0.0.33, =0.0.1, =1.0.0, =21.0.0-rc.2, =21.0.0-rc.2, =0.5.0, =1.0.1-dev.120, =0.1.0, =12.6.9, =1.6.3, =0.1.6, =0.1.7 and more Source cves: CVE-2026-22036 Source advisory: SNYK:JS-UNDICI-14943963...

@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +297 more potentially affected by CVE-2026-22818 via hono (>=4.0.0, <=4.11.3)

hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.0.1, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.7.1, =0.2.1, =0.6.1, =0.5.2, =0.0.3, =1.3.2, =1.3.17 and more Source cves: CVE-2026-22818 Source advisory: OSV:GHSA-3VHC-576X-3QV4...

@cenk1cenk2/renovate-config (>=2.3.95, <=2.3.148), @jamietanna/patch-testing (>=0.1.0, <=0.2.28) +7 more potentially affected by unknown CVE via renovate (>=35.159.7, <=40.21.2)

renovate NPM version =35.159.7, =2.3.95, =0.1.0, =0.7.0, =0.5.0, =0.1.0, =0.2.0, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config 1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-RENOVATE-14927385...

@jamietanna/renovate-graph (>=0.24.0, <=0.30.0), @secustor/backstage-plugin-renovate-backend-module-runtime-direct (>=0.6.5, <=1.0.1) potentially affected by CVE-2026-76229 via renovate (>=39.230.2, <=40.21.2)

renovate NPM version =39.230.2, =0.24.0, =0.6.5, =1.0.1 Source cves: CVE-2026-76229 Source advisory: OSV:GHSA-XV56-3WQ5-9997...

@cenk1cenk2/renovate-config (>=2.0.0, <=2.3.148), @jamietanna/patch-testing (>=0.1.0, <=0.2.28) +8 more potentially affected by unknown CVE via renovate (>=32.241.11, <=42.66.1)

renovate NPM version =32.241.11, =2.0.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.2.0, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config 1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-RENOVATE-14927386...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +58 more potentially affected by CVE-2025-68493 via com.opensymphony:xwork (>=2.0.4, <=2.1.3)

com.opensymphony:xwork MAVEN version =2.0.4, =1.2.1, =4.0.1, =0.9.2, =1.1.5, =1.3.3, =1.3.1, =2.0.5-incubating, =2.0.9, =2.0.11, =2.0.9, =2.0.9, =2.0.9, =2.1.6 - org.apache.struts:struts2-convention-plugin 2.1.6 and more Source cves: CVE-2025-68493 Source advisory: OSV:GHSA-QCFC-HMRC-59X7...

@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +29 more potentially affected by CVE-2026-22030 via @remix-run/server-runtime (>=2.0.0, <=2.17.2)

@remix-run/server-runtime NPM version =2.0.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =2.9.1-dario-6, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.17.2 and more Source cves: CVE-2026-22030 Source advisory:...

@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +7 more potentially affected by CVE-2026-21884 via @remix-run/react (>=2.0.0, <=2.17.2)

@remix-run/react NPM version =2.0.0, =0.1.2, =6.0.6-alpha.23, =0.1.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =3.0.0, =0.4.0, =0.11.29 Source cves: CVE-2026-21884 Source advisory: OSV:GHSA-8V8X-CX79-35W7...