0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +2970 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-mysql (>=0.15.0, <=0.66.0)

@opentelemetry/instrumentation-mysql NPM version =0.15.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =3.11.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.3.702, =0.0.65, =0.2.0, =0.2.0, =0.2.6 and more Source cves: CVE-2026-104872 Source advisory...

@0zd0/nx-oxfmt (>=0.0.1, <=0.1.1), @1-/fix (>=0.1.4, <=0.1.10) +455 more potentially affected by CVE-2026-104848 via tinypool (>=2.0.0, <=2.1.0)

tinypool NPM version =2.0.0, =0.0.1, =0.1.4, =15.0.0, =1.57.7, =1.3.0, =0.0.0-next.d8e717b, =2.23.0, =0.0.1, =1.0.0, =0.6.0-alpha.26, =0.6.0-alpha.26, =1.1.0, =0.4.0, =1.0.5, =1.0.36 and more Source cves: CVE-2026-104848 Source advisory: OSV:GHSA-5GMW-XHRV-C9V3...

@0zd0/nx-oxfmt (>=0.0.1, <=0.1.1), @1-/fix (>=0.1.4, <=0.1.10) +455 more potentially affected by CVE-2026-104849 via tinypool (>=2.0.0, <=2.1.0)

tinypool NPM version =2.0.0, =0.0.1, =0.1.4, =15.0.0, =1.57.7, =1.3.0, =0.0.0-next.d8e717b, =2.23.0, =0.0.1, =1.0.0, =0.6.0-alpha.26, =0.6.0-alpha.26, =1.1.0, =0.4.0, =1.0.5, =1.0.36 and more Source cves: CVE-2026-104849 Source advisory: GHSA-85C8-PPGW-CCPR...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +470 more potentially affected by CVE-2026-104873 via langgraph-sdk (>=0.1.48, <=0.4.3)

langgraph-sdk PYPI version =0.1.48, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-104873 Source advisory: OSV:GHSA-FVWW-7H3R-VFHP...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +470 more potentially affected by CVE-2026-104873 via langgraph-sdk (>=0.1.48, <=0.4.3)

langgraph-sdk PYPI version =0.1.48, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-104873 Source advisory: GHSA-FVWW-7H3R-VFHP...

authowl (>=0.3.0, <=0.3.12), quicktype (>=26.0.0-pre1, <=26.0.0) +1 more potentially affected by CVE-2026-104183 via stream-json (3.5.0)

stream-json NPM version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on stream-json and may be impacted: - authowl =0.3.0, =26.0.0-pre1, =0.1.0, =0.1.1 Source cves: CVE-2026-104183 Source advisory: GHSA-MJW6-4JJ6-33HC...

authowl (>=0.3.0, <=0.3.12), quicktype (>=26.0.0-pre1, <=26.0.0) +1 more potentially affected by CVE-2026-104183 via stream-json (3.5.0)

stream-json NPM version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on stream-json and may be impacted: - authowl =0.3.0, =26.0.0-pre1, =0.1.0, =0.1.1 Source cves: CVE-2026-104183 Source advisory: OSV:GHSA-MJW6-4JJ6-33HC...

aleph-alpha-inference (1.0.0), caption-flow (>=0.5.0, <=0.5.1) +9 more potentially affected by CVE-2026-105755 via vllm (>=0.19.0, <=0.29.0)

vllm PYPI version =0.19.0, =0.5.0, =0.1.0, =2.5.3, =0.1.1.4, =2.1.2, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-105755 Source advisory: MEND:CVE-2026-105755...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-92959 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-92959 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

aleph-alpha-inference (1.0.0), evoke-vllm (>=0.1.0, <=0.1.1) +7 more potentially affected by CVE-2026-105754 via vllm (>=0.21.0, <=0.29.0)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-105754 Source advisory: MEND:CVE-2026-105754...

@aiconnect/codelets-runner (>=0.1.0, <=0.2.0), @cairncms/api (>=1.0.0-beta.1, <=1.0.0-beta.4) +23 more potentially affected by CVE-2026-92954 via vm2 (>=3.10.0, <=3.11.6)

vm2 NPM version =3.10.0, =0.1.0, =1.0.0-beta.1, =3.0.46, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =1.0.0-beta.1, =2.32.0, =2.32.0, =2.40.2 and more Source cves: CVE-2026-92954 Source advisory: GHSA-GJQ8-XM47-88RC...

ado-vllm-performance (>=1.2.2, <=1.3.3), caption-flow (>=0.1.0, <=0.5.1) +31 more potentially affected by CVE-2026-105753 via vllm (>=0.10.2, <=0.27.1)

vllm PYPI version =0.10.2, =1.2.2, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.0, =0.3.9.post2, =0.5.2, =1.0.0.dev0, =0.1.0, =0.1.1, =2.5.3, =0.0.2, =0.1.0 and more Source cves: CVE-2026-105753 Source advisory: MEND:CVE-2026-105753...

@dataform/cli (>=3.0.57, <=3.0.71), @n8n-plus/n8n-plus (>=2.32.7, <=2.37.9) +18 more potentially affected by CVE-2026-92936 via vm2 (>=3.11.1, <=3.11.6)

vm2 NPM version =3.11.1, =3.0.57, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =2.32.0, =2.32.0, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.74.12 and more Source cves: CVE-2026-92936 Source advisory: GHSA-X6M4-CHR9-CG97...

@dataform/cli (>=3.0.57, <=3.0.71), @n8n-plus/n8n-plus (>=2.32.7, <=2.37.9) +18 more potentially affected by CVE-2026-92936 via vm2 (>=3.11.1, <=3.11.6)

vm2 NPM version =3.11.1, =3.0.57, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =2.32.0, =2.32.0, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.74.12 and more Source cves: CVE-2026-92936 Source advisory: OSV:GHSA-X6M4-CHR9-CG97...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-92946 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-92946 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

ai4rag (>=0.9.0, <=0.10.4), distlk (0.1.0rc1) +3 more potentially affected by CVE-2026-105751 via docling (>=2.107.0, <=2.118.1)

docling PYPI version =2.107.0, =0.9.0, =0.3.0, =0.3.0, =0.3.2 Source cves: CVE-2026-105751 Source advisory: OSV:GHSA-4XHP-XG4W-8PPM...

ai4rag (>=0.9.0, <=0.10.4), distlk (0.1.0rc1) +3 more potentially affected by CVE-2026-105751 via docling (>=2.107.0, <=2.118.1)

docling PYPI version =2.107.0, =0.9.0, =0.3.0, =0.3.0, =0.3.2 Source cves: CVE-2026-105751 Source advisory: GHSA-4XHP-XG4W-8PPM...

ado-vllm-performance (>=1.2.2, <=1.3.3), aleph-alpha-inference (1.0.0) +34 more potentially affected by CVE-2026-105752 via vllm (>=0.10.1, <=0.29.0)

vllm PYPI version =0.10.1, =1.2.2, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.0, =0.3.9.post2, =0.5.2, =1.0.0.dev0, =0.1.0, =0.1.1, =2.5.3, =2.10.1 and more Source cves: CVE-2026-105752 Source advisory: MEND:CVE-2026-105752...