@agent-native/core (>=0.26.5, <=0.157.8), @agent-native/skills (>=0.2.9, <=0.2.558) +225 more potentially affected by CVE-2026-67327 via better-auth (>=1.1.3, <=1.6.21)

better-auth NPM version =1.1.3, =0.26.5, =0.2.9, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.1.4 and more Source cves: CVE-2026-67327 Source advisory: SNYK:JS-BETTERAUTH-18319507...

@agent-native/core (>=0.26.5, <=0.157.8), @agent-native/skills (>=0.2.9, <=0.2.558) +225 more potentially affected by CVE-2026-67327 via better-auth (>=1.1.3, <=1.6.21)

better-auth NPM version =1.1.3, =0.26.5, =0.2.9, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.1.4 and more Source cves: CVE-2026-67327 Source advisory: OSV:GHSA-QQ9H-G4JM-XGF3...

@automate.ax/components-core (>=0.1.3, <=0.3.1), @grease.sh/components-core (0.1.2) +4 more potentially affected by CVE-2026-67329 via @better-auth/stripe (>=1.6.9, <=1.6.11)

@better-auth/stripe NPM version =1.6.9, =0.1.3, =0.1.3, =0.1.0, =0.2.7 - grease.sh 0.1.2 Source cves: CVE-2026-67329 Source advisory: OSV:GHSA-H3RM-78G3-J7CP...

@automate.ax/components-core (>=0.1.3, <=0.3.1), @grease.sh/components-core (0.1.2) +4 more potentially affected by CVE-2026-67329 via @better-auth/stripe (>=1.6.9, <=1.6.11)

@better-auth/stripe NPM version =1.6.9, =0.1.3, =0.1.3, =0.1.0, =0.2.7 - grease.sh 0.1.2 Source cves: CVE-2026-67329 Source advisory: SNYK:JS-BETTERAUTHSTRIPE-18319505...

fashion-clip (>=0.1.1, <=0.1.2), parallel-corpus-mnbvc (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-66007 via datasets (2.10.0)

datasets PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - fashion-clip =0.1.1, =1.0.0, =1.0.8 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

axolotl (>=0.18.0, <=0.20.0), clawperf (>=0.1.0, <=0.6.1) +22 more potentially affected by CVE-2026-66007 via datasets (4.8.4)

datasets PYPI version 4.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - axolotl =0.18.0, =0.1.0, =3.2.0, =0.5.0rc0, =0.1.18, =1.0.0, =2.0.0, =0.3.0, =0.3.0, =0.4.1, =0.1.0, =0.1.1 and more Source cves: CVE-2026-66007...

atomgit (>=1.0.5, <=1.0.9), axolotl (0.13.0.dev0) +6 more potentially affected by CVE-2026-66007 via datasets (4.4.1)

datasets PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - atomgit =1.0.5, =0.1.0, =0.1.0, =0.0.11, =0.9.0, =0.9.0.4 - multimodal-parsers 0.1.6 - shifaa 0.1.0 Source cves: CVE-2026-66007 Source advisory:...

bcembedding (0.0.4), pydparser (1.0.4) potentially affected by CVE-2026-66007 via datasets (2.16.0)

datasets PYPI version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - bcembedding 0.0.4 - pydparser 1.0.4 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

africanwhisper (>=0.2.6, <=0.2.9), algorin-cli (>=0.0.1, <=0.21.0) +35 more potentially affected by CVE-2026-66007 via datasets (2.18.0)

datasets PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - africanwhisper =0.2.6, =0.0.1, =0.2.0, =0.1.4, =1.0.0, =0.1.1, =0.5.4, =0.1.0, =0.0.2, =1.35.2, =0.1.0, =0.1.4 and more Source cves:...

classy-core (>=0.1.0.dev20211019, <=0.2.1), gperc (>=0.6.0, <=0.7.0) +3 more potentially affected by CVE-2026-66007 via datasets (1.12.1)

datasets PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - classy-core =0.1.0.dev20211019, =0.6.0, =0.2.2, =0.1.3, =0.1.8 - paoding 0.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

azureml-evaluate-mlflow (>=0.0.4, <=0.0.15), datati (>=0.0.26, <=0.1.0) +5 more potentially affected by CVE-2026-66007 via datasets (2.11.0)

datasets PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - azureml-evaluate-mlflow =0.0.4, =0.0.26, =0.0.0a0, =0.1.0, =0.2.0 - py-data-modori 0.1.0 - waffle-hub 0.1.9 Source cves: CVE-2026-66007 Source...

biome-text (3.0.0), gradsflow (>=0.0.1b1, <=0.0.3) +6 more potentially affected by CVE-2026-66007 via datasets (1.2.1)

datasets PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - biome-text 3.0.0 - gradsflow =0.0.1b1, =0.1.0, =0.2.13, =0.3.0a1, =0.3.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

actix-remote (0.1.0), agnostic (>=0.2.5, <=0.2.6) +265 more potentially affected by CVE-2026-25800 via quinn-proto (>=0.2.0, <=0.11.9)

quinn-proto CARGO version =0.2.0, =0.2.5, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.5.0, =2.0.0, =0.2.3, =0.2.11 and more Source cves: CVE-2026-25800 Source advisory: OSV:GHSA-4W2J-M93H-CJ5J...

31g-form-parser (1.0.107), @aaravpos/appointment-barber-booking (>=1.0.0, <=5.0.0) +425 more potentially affected by CVE-2026-55685 via react-router (>=7.0.0, <=7.17.0)

react-router NPM version =7.0.0, =1.0.0, =1.0.1, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source cves: CVE-2026-55685 Source advisory: OSV:GHSA-CHX6-HX7R-MCP5...

31g-form-parser (1.0.107), @aaravpos/appointment-barber-booking (>=1.0.0, <=5.0.0) +425 more potentially affected by CVE-2026-55685 via react-router (>=7.0.0, <=7.17.0)

react-router NPM version =7.0.0, =1.0.0, =1.0.1, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source cves: CVE-2026-55685 Source advisory:...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +176 more potentially affected by CVE-2026-55575 via liquidjs (>=10.2.0, <=10.27.0)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.4.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-55575 Source advisory:...

0beny1s (1.1.6), 0desgin (0.0.1) +15566 more potentially affected by CVE-2026-53669 via react-router (>=6.0.0, <=7.17.0)

react-router NPM version =6.0.0, =7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-router and may be impacted: - 0beny1s 1.1.6 - 0desgin 0.0.1 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0...

0beny1s (1.1.6), 0desgin (0.0.1) +15566 more potentially affected by CVE-2026-53669 via react-router (>=6.0.0, <=7.17.0)

react-router NPM version =6.0.0, =7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-router and may be impacted: - 0beny1s 1.1.6 - 0desgin 0.0.1 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0...

@0xmike/web-kit (>=0.0.6, <=0.1.1), @acmekit/acmekit (>=2.13.1, <=2.13.94) +283 more potentially affected by CVE-2026-53668 via react-router-dom (>=6.30.2, <=6.30.4)

react-router-dom NPM version =6.30.2, =0.0.6, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =1.4.0, =0.0.1, =1.2.0, =0.1.0, =0.0.6, =0.0.13 - @automattic/calypso-products 1.3.0 - @automattic/components 4.1.0 - @automattic/domain-search 1.1.0 - @automattic/mini-cart 1.1.0 - @automattic/onboarding 1.1.0 and...

@accounter/client (>=0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, <=0.0.10-alpha-20260124220016-4e2b62f7c68c0c6fd69aea71f714b37188ddd976), @boxyhq/react-ui (3.5.2) +63 more potentially affected by CVE-2026-53668 via react-router (>=7.9.6, <=7.12.0)

react-router NPM version =7.9.6, =0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, =1.0.1-MON-198407-add-selinux-sudo-check.0, =3.4.9, =0.1.9, =1.21.9, =1.21.9, =0.3.1, =1.5.0, =0.4.0, =0.0.5, =0.0.7 and more Source cves: CVE-2026-53668 Source advisory: GHSA-JJMJ-JMHJ-QWJ2...