360solutions-bc-mcp (>=0.5.3, <=0.5.7), adversarial-workflow (>=0.4.0, <=0.9.8) +558 more potentially affected by CVE-2026-97688 via urllib3 (>=2.6.2, <=2.7.0)

urllib3 PYPI version =2.6.2, =0.5.3, =0.4.0, =0.1.0, =0.5.0rc4, =0.1.0, =0.20.3, =0.0.2, =1.3.0, =0.1.0, =0.5.0, =1.1.0, =2.22.0 and more Source cves: CVE-2026-97688 Source advisory: SNYK:PYTHON-URLLIB3-20302845...

@aicolab/room-service (>=2.0.2, <=2.1.0), @anchrd/intel (>=0.59.0, <=0.125.0) +35 more potentially affected by CVE-2026-102521 via lib0 (>=1.0.0-rc.1, <=1.0.0-rc.32)

lib0 NPM version =1.0.0-rc.1, =2.0.2, =0.59.0, =0.1.0, =0.52.0, =0.0.1-beta.1, =0.52.0, =0.54.0, =0.52.0, =0.54.0, =0.52.0, =0.52.0, =0.52.0, =0.52.0, =0.52.0, =0.52.0, =0.55.0 and more Source cves: CVE-2026-102521 Source advisory: MEND:CVE-2026-102521...

@appsoftwareltd/etherpk-mcp (>=0.8.1, <=0.14.0), @bytestream-tv/coop (0.1.0) +61 more potentially affected by CVE-2026-102521 via lib0 (>=0.0.6, <=0.2.117)

lib0 NPM version =0.0.6, =0.8.1, =3.0.0-alpha.1826142686, =3.2.7-alpha.6226622763, =3.0.0-alpha.1826142686, =3.2.7-alpha.6226622763, =3.0.0-alpha.1826142686, =3.0.0-alpha.1826142686, =3.0.0-alpha.1826142686, =3.0.0-alpha.1826142686, =3.0.0-alpha.1826142686, =3.2.7-alpha.6226622763,...

@appsoftwareltd/etherpk-mcp (>=0.8.1, <=0.14.0), @bytestream-tv/coop (0.1.0) +62 more potentially affected by CVE-2026-102360 via lib0 (>=0.0.4, <=0.2.117)

lib0 NPM version =0.0.4, =0.8.1, =3.0.0-alpha.1826142686, =3.2.7-alpha.6226622763, =3.0.0-alpha.1826142686, =3.2.7-alpha.6226622763, =3.0.0-alpha.1826142686, =3.0.0-alpha.1826142686, =3.0.0-alpha.1826142686, =3.0.0-alpha.1826142686, =3.0.0-alpha.1826142686, =3.2.7-alpha.6226622763,...

airflow-oracle-snowflake-plugin (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-81930 via apache-airflow-providers-snowflake (3.3.0)

apache-airflow-providers-snowflake PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-snowflake and may be impacted: - airflow-oracle-snowflake-plugin =0.1.0, =0.1.2 Source cves: CVE-2026-81930 Source advisory:...

ROOT-APP-NPM-GHSA-GV7W-RQVM-QJHR GHSA-gv7w-rqvm-qjhr in esbuild - Patched by Root

Root has patched GHSA-gv7w-rqvm-qjhr in the esbuild package for Root:npm. Multiple fixed versions available...

@3ngram/server (>=1.2.6, <=1.8.4), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +596 more potentially affected by unknown CVE via hono (>=4.12.4, <=4.13.10)

hono NPM version =4.12.4, =1.2.6, =0.1.0, =0.3.1, =0.4.3, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.148, =0.0.138, =0.0.0-pr-306-20260707164534, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.70 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0113...

03-gs-ee-6 (0.3.5), @adhd/workspace-codegen-nx (>=0.1.3, <=0.1.5) +3133 more potentially affected by CVE-2026-102278 via brace-expansion (>=4.0.0, <=5.0.9)

brace-expansion NPM version =4.0.0, =0.1.3, =0.0.1-alpha.5, =0.0.4, =1.1.7, =1.1.8 - @angranit/fantom-virma 0.1.0 - @angranit/first-step-to-get-tea 0.1.0 - @angranit/hapeipons 1.1.2 - @angranit/nearly-vm 0.1.0 - @angranit/newme-project 0.1.0 - @angranit/npmjs-for-tea-project 0.1.0 and more Source...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +28 more potentially affected by CVE-2026-102276 via brace-expansion (>=1.1.0, <=1.1.16)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.3, =0.1.0 and more Source cves: CVE-2026-102276 Source advisory: SNYK:JS-BRACEEXPANSION-20244952...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +10353 more potentially affected by unknown CVE via nodemailer (>=5.0.0, <=10.0.1)

nodemailer NPM version =5.0.0, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 and more Source cves: unknown CVE Source advisory: GHSA-6VJ9-MWQ6-2F5V...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +10353 more potentially affected by CVE-2026-100701 via nodemailer (>=5.0.0, <=10.0.1)

nodemailer NPM version =5.0.0, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 and more Source cves: CVE-2026-100701 Source advisory: OSV:GHSA-6VJ9-MWQ6-2F5V...

@aliceo2/bookkeeping (>=1.19.0, <=1.20.0), @beyondnet/evolith-cli (>=1.2.0, <=1.3.2) +67 more potentially affected by CVE-2026-88932 via multer (>=2.2.0, <=2.3.0)

multer NPM version =2.2.0, =1.19.0, =1.2.0, =1.2.0, =2026.7.0, =5.7.5, =11.1.29-depup.0, =0.1.0, =0.1.0, =11.0.62, =1.2.34, =12.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.1 and more Source cves: CVE-2026-88932 Source advisory: GHSA-3PPH-FPJX-JG34...

@142vip/egg-grpc-client (>=0.0.1-alpha.3, <=0.0.1-alpha.4), @142vip/egg-grpc-server (>=0.0.1-alpha.3, <=0.0.1-alpha.5) +244 more potentially affected by CVE-2026-101916 via @grpc/grpc-js (>=1.14.0, <=1.14.4)

@grpc/grpc-js NPM version =1.14.0, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.2, =0.26.4, =3.2.4, =1.13.0, =2.0.2, =0.1.0-alpha.0, =0.1.0, =2.1.0, =2.2.2, =2.0.0, =0.0.4, =0.0.35 and more Source cves: CVE-2026-101916 Source advisory: SNYK:JS-GRPCGRPCJS-20251010...

aad-fastapi-dl37 (>=1.0.0, <=1.0.2), agentstack-cli (>=0.4.0rc1, <=0.7.1) +302 more potentially affected by CVE-2026-96760 via authlib (>=1.0.0b2, <=1.8.0)

authlib PYPI version =1.0.0b2, =1.0.0, =0.4.0rc1, =0.1.0, =2.0.0, =2.0.0, =0.1.0, =0.5.0, =1.3.0a20250904, =1.2.0a20250730, =1.2.0a20250730, =0.0.0, =0.9.5, =1.7.0, =0.0.1, =0.1.0 and more Source cves: CVE-2026-96760 Source advisory: SNYK:PYTHON-AUTHLIB-20257410...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.7) +1689 more potentially affected by CVE-2026-102267 via pyjwt (>=2.0.0a2, <=2.13.0)

pyjwt PYPI version =2.0.0a2, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =1.8.26, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =1.2.0, =1.2.1 - adminui 1.5.2 and more Source cves: CVE-2026-102267 Source advisory: SNYK:PYTHON-PYJWT-20250951...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (>=1.5.40, <=1.5.43) +32 more potentially affected by CVE-2026-84292 via fast-uri (>=3.0.1, <=3.1.6)

fast-uri NPM version =3.0.1, =0.3.1, =1.5.40, =1.6.0, =1.4.2, =1.2.0, =0.17.1, =5.4.3, =0.2.0-alpha.5, =0.1.0, =0.1.27 and more Source cves: CVE-2026-84292 Source advisory: GHSA-QW65-CVWX-89V3...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.7) +1591 more potentially affected by CVE-2026-102275 via pyjwt (>=2.1.0, <=2.14.0)

pyjwt PYPI version =2.1.0, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =1.8.26, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =1.2.0, =1.5.2, =1.5.6 and more Source cves: CVE-2026-102275 Source advisory: OSV:PYSEC-2026-4183...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +29 more potentially affected by CVE-2026-102278 via brace-expansion (>=0.0.0, <=1.1.16)

brace-expansion NPM version =0.0.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.0, =2.0.0 - beelinejs-todo-mvc 0.1.1 - byte-common 1.0.0 - candlelabssdk 1.0.0 - capacitor-firebase-authentication 1.0.0 and more Source cves: CVE-2026-102278 Source advisory:...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +29 more potentially affected by CVE-2026-102277 via brace-expansion (>=0.0.0, <=1.1.16)

brace-expansion NPM version =0.0.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.0, =2.0.0 - beelinejs-todo-mvc 0.1.1 - byte-common 1.0.0 - candlelabssdk 1.0.0 - capacitor-firebase-authentication 1.0.0 and more Source cves: CVE-2026-102277 Source advisory:...

03-gs-ee-6 (0.3.5), @adhd/workspace-codegen-nx (>=0.1.3, <=0.1.5) +3133 more potentially affected by CVE-2026-102277 via brace-expansion (>=4.0.0, <=5.0.9)

brace-expansion NPM version =4.0.0, =0.1.3, =0.0.1-alpha.5, =0.0.4, =1.1.7, =1.1.8 - @angranit/fantom-virma 0.1.0 - @angranit/first-step-to-get-tea 0.1.0 - @angranit/hapeipons 1.1.2 - @angranit/nearly-vm 0.1.0 - @angranit/newme-project 0.1.0 - @angranit/npmjs-for-tea-project 0.1.0 and more Source...