acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), aihandler (>=1.8.15, <=1.19.0) +116 more potentially affected by CVE-2026-9335 via keras (2.12.0)

keras PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - acetone-nnet =0.1.0.dev2, =1.8.15, =1.8.17, =0.1.18, =1.8.14, =1.1.0, =0.2.2.dev0, =1.3.0, =0.10.0, =0.2.0, =1.0.0, =1.0.1 - beyondml 0.1.5 and more...

a62-emotion (>=0.9.2, <=0.10.10), acuitylite (>=6.27.0, <=6.36.0) +312 more potentially affected by CVE-2026-9335 via keras (2.15.0)

keras PYPI version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.9.2, =6.27.0, =0.0.1, =1.1.0, =0.20.0, =0.1.0, =0.9.8, =0.2.0, =0.0.2, =0.43.0 and more Source cves: CVE-2026-9335 Source advisory:...

aggmap (>=1.1.1, <=1.2.1), ai-music-remixer (3.0.0) +112 more potentially affected by CVE-2026-9335 via keras (2.10.0rc1)

keras PYPI version 2.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aggmap =1.1.1, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.1.1, =0.1.9 - automea 0.0.13 - avici 1.0.5 - basic-pitch 0.2.3 and more...

adversarial-attacks-white-black-box (0.1.7), aimlops-sentiment-model (0.0.1) +91 more potentially affected by CVE-2026-9335 via keras (2.13.1)

keras PYPI version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-attacks-white-black-box 0.1.7 - aimlops-sentiment-model 0.0.1 - aisquared =0.3.0, =0.0.14, =0.0.2, =0.1.3, =0.1.6, =0.0.1, =0.0.0, =0.0.4...

123pancli (1.0.0), @142vip/axios (>=0.0.1-alpha.9, <=0.0.1-alpha.11) +2620 more potentially affected by CVE-2026-67321 via axios (>=1.15.1, <=1.17.0)

axios NPM version =1.15.1, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.1.3-rc.0, =0.1.0, =0.1.4 - @abhinav-dev/mcp-platform-kit 1.0.0 - @accelbyte/sdk 4.3.2 - @accelbyte/sdk-achievement 5.3.5 - @accelbyte/sdk-ams 5.3.5 - @accelbyte/sdk-audit 6.0.5 -...

0xpay-cc-sdk (>=0.0.8, <=0.1.0), 123pancli (1.0.0) +6627 more potentially affected by CVE-2026-67318 via axios (>=1.13.0, <=1.17.0)

axios NPM version =1.13.0, =0.0.8, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.1.2-rc.0, =0.1.0, =0.1.4 and more Source cves: CVE-2026-67318 Source advisory: MEND:CVE-2026-67318...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +148 more potentially affected by CVE-2026-67334 via better-auth (>=0.4.9-beta.7, <=1.6.10)

better-auth NPM version =0.4.9-beta.7, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.0.1, =1.2.5, =1.9.7 and more Source cves: CVE-2026-67334 Source advisory: MEND:CVE-2026-67334...

@0xjwlabs/discord-rpc (0.1.0), @0xsquid/react-hooks (>=1.0.0, <=2.0.0) +1562 more potentially affected by CVE-2026-67312 via axios (>=0.28.0, <=0.32.0)

axios NPM version =0.28.0, =1.0.0, =3.0.0-beta.0, =2.10.1, =1.0.0, =1.0.0, =0.1.0, =0.0.1, =0.0.2, =1.3.2, =1.4.13, =13.0.0, =16.5.4 and more Source cves: CVE-2026-67312 Source advisory: MEND:CVE-2026-67312...

aegis-stack (>=0.8.0, <=0.15.1), aegis-stack-crawl4ai (0.1.0) +10 more potentially affected by CVE-2026-62999 via copier (>=9.6.0, <=9.15.2)

copier PYPI version =9.6.0, =0.8.0, =2.7.0, =1.6.0b0, =0.1.58, =4.12.2rc1, =4.12.2rc1, =5.0.0b2, =4.12.2rc1, =4.12.2rc1, =2.9.1, =2.51.0 Source cves: CVE-2026-62999 Source advisory: SNYK:PYTHON-COPIER-18507729...

08cms (1.0.0), 10secondsofcode-custom (1.0.0) +4575 more potentially affected by CVE-2026-53606 via sanitize-html (>=1.18.2, <=2.17.4)

sanitize-html NPM version =1.18.2, =1.0.0, =4.11.0, =1.0.0, =1.0.0, =0.0.1, =0.6.0, =5.0.2, =0.0.1, =0.1.0, =0.1.0, =11.1.0, =1.3.0, =1.3.6 and more Source cves: CVE-2026-53606 Source advisory: GHSA-VCCV-CMXP-4J9H...

08cms (1.0.0), 10secondsofcode-custom (1.0.0) +4575 more potentially affected by CVE-2026-53606 via sanitize-html (>=1.18.2, <=2.17.4)

sanitize-html NPM version =1.18.2, =1.0.0, =4.11.0, =1.0.0, =1.0.0, =0.0.1, =0.6.0, =5.0.2, =0.0.1, =0.1.0, =0.1.0, =11.1.0, =1.3.0, =1.3.6 and more Source cves: CVE-2026-53606 Source advisory: OSV:GHSA-VCCV-CMXP-4J9H...

smartgenai (>=0.1.0.0, <=0.1.0.1) potentially affected by CVE-2026-68770 via sentence-transformers (2.6.0)

sentence-transformers PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - smartgenai =0.1.0.0, =0.1.0.1 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

khoj-assistant (>=0.1.0, <=0.3.0a1676209086), pyconverse (0.1.0) +1 more potentially affected by CVE-2026-68770 via sentence-transformers (2.1.0)

sentence-transformers PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - khoj-assistant =0.1.0, =0.0.3, =0.0.6 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-65841 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-65841 Source advisory: SNYK:JS-JODIT-18507643...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-65841 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-65841 Source advisory: OSV:GHSA-45QG-252V-3F7P...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-58263 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-58263 Source advisory: OSV:GHSA-RXCW-MC6F-6HR3...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-54756 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-54756 Source advisory: OSV:GHSA-5957-5C94-3V7W...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-62324 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-62324 Source advisory: OSV:GHSA-J839-GQQ4-GF9J...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-62324 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-62324 Source advisory: SNYK:JS-JODIT-18507647...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @donadiosolutions/lcm (1.4.2) +10 more potentially affected by CVE-2026-18446 via fast-uri (>=3.0.1, <=3.1.4)

fast-uri NPM version =3.0.1, =0.3.1, =1.2.0, =5.4.3, =0.1.0, =1.0.0, =1.0.0, =1.25.0, =0.1.5, =0.1.0, =2.2.0, =2.3.1 Source cves: CVE-2026-18446 Source advisory: SNYK:JS-FASTURI-18506908...