@cafeai/cafe-code (0.0.28), @echomem/mcp (>=1.4.2, <=1.4.34) +11 more potentially affected by CVE-2026-102673 via electron (>=41.0.3, <=41.10.3)

electron NPM version =41.0.3, =1.4.2, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.2.2, =1.3.5 Source cves: CVE-2026-102673 Source advisory: SNYK:JS-ELECTRON-20335498...

@cafeai/cafe-code (0.0.28), @echomem/mcp (>=1.4.2, <=1.4.34) +11 more potentially affected by CVE-2026-102673 via electron (>=41.0.3, <=41.10.3)

electron NPM version =41.0.3, =1.4.2, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.2.2, =1.3.5 Source cves: CVE-2026-102673 Source advisory: OSV:GHSA-HQ2X-R82H-9WJ4...

@cafeai/cafe-code (0.0.28), @dualityinstitute/blink (>=0.0.1, <=0.0.14) +12 more potentially affected by CVE-2026-102674 via electron (>=41.0.3, <=41.10.5)

electron NPM version =41.0.3, =0.0.1, =1.4.2, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.2.2, =1.3.5 Source cves: CVE-2026-102674 Source advisory: OSV:GHSA-GR2M-V5GQ-V685...

@0x-copilot/cli (>=0.2.1, <=0.3.0), @ascua/electron (>=0.19.0, <=0.26.0) +30 more potentially affected by CVE-2026-102674 via electron (>=43.0.0, <=43.4.0)

electron NPM version =43.0.0, =0.2.1, =0.19.0, =0.1.0, =9.10.29-beta.1, =9.10.29-beta.1, =6.7.0, =0.4.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.208, =1.3.9 and more Source cves: CVE-2026-102674 Source advisory: OSV:GHSA-GR2M-V5GQ-V685...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +13 more potentially affected by CVE-2026-102674 via electron (>=42.0.0, <=42.7.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102674 Source advisory: SNYK:JS-ELECTRON-20335494...

@cafeai/cafe-code (0.0.28), @dualityinstitute/blink (>=0.0.1, <=0.0.14) +12 more potentially affected by CVE-2026-102675 via electron (>=41.0.3, <=41.10.5)

electron NPM version =41.0.3, =0.0.1, =1.4.2, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.2.2, =1.3.5 Source cves: CVE-2026-102675 Source advisory: OSV:GHSA-J84W-JFHQ-VHVJ...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +13 more potentially affected by CVE-2026-102675 via electron (>=42.0.0, <=42.7.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102675 Source advisory: OSV:GHSA-J84W-JFHQ-VHVJ...

@0x-copilot/cli (>=0.2.1, <=0.3.0), @ascua/electron (>=0.19.0, <=0.26.0) +30 more potentially affected by CVE-2026-102675 via electron (>=43.0.0, <=43.4.0)

electron NPM version =43.0.0, =0.2.1, =0.19.0, =0.1.0, =9.10.29-beta.1, =9.10.29-beta.1, =6.7.0, =0.4.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.208, =1.3.9 and more Source cves: CVE-2026-102675 Source advisory: OSV:GHSA-J84W-JFHQ-VHVJ...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +13 more potentially affected by CVE-2026-102676 via electron (>=42.0.0, <=42.7.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102676 Source advisory: OSV:GHSA-9QH4-3JW8-366W...

@cafeai/cafe-code (0.0.28), @dualityinstitute/blink (>=0.0.1, <=0.0.14) +12 more potentially affected by CVE-2026-102676 via electron (>=41.0.3, <=41.10.5)

electron NPM version =41.0.3, =0.0.1, =1.4.2, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.2.2, =1.3.5 Source cves: CVE-2026-102676 Source advisory: SNYK:JS-ELECTRON-20335447...

03-gs-ee-6 (0.3.5), @adhd/workspace-codegen-nx (>=0.1.3, <=0.1.4) +3218 more potentially affected by CVE-2026-102278 via brace-expansion (>=4.0.0, <=5.0.9)

brace-expansion NPM version =4.0.0, =0.1.3, =0.0.1-alpha.5, =0.0.4, =0.1.0, =1.1.7, =1.1.8 - @angranit/fantom-virma 0.1.0 - @angranit/first-step-to-get-tea 0.1.0 - @angranit/hapeipons 1.1.2 - @angranit/nearly-vm 0.1.0 - @angranit/newme-project 0.1.0 - @angranit/npmjs-for-tea-project 0.1.0 and mor...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +28 more potentially affected by CVE-2026-102276 via brace-expansion (>=1.1.0, <=1.1.16)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.3, =0.1.0 and more Source cves: CVE-2026-102276 Source advisory: SNYK:JS-BRACEEXPANSION-20244952...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +10413 more potentially affected by CVE-2026-100701 via nodemailer (>=5.0.0, <=10.0.1)

nodemailer NPM version =5.0.0, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 and more Source cves: CVE-2026-100701 Source advisory: OSV:GHSA-6VJ9-MWQ6-2F5V...

@142vip/egg-grpc-client (>=0.0.1-alpha.3, <=0.0.1-alpha.4), @142vip/egg-grpc-server (>=0.0.1-alpha.3, <=0.0.1-alpha.5) +248 more potentially affected by CVE-2026-101916 via @grpc/grpc-js (>=1.14.0, <=1.14.4)

@grpc/grpc-js NPM version =1.14.0, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.2, =0.26.4, =3.2.4, =1.13.0, =2.0.2, =0.1.0-alpha.0, =0.1.0, =2.1.0, =2.2.2, =2.0.0, =0.0.4, =0.0.28 and more Source cves: CVE-2026-101916 Source advisory: SNYK:JS-GRPCGRPCJS-20251010...

@aikidosec/broker-client (1.0.51), @app4you/n8n-nodes-portal-invoices (>=0.3.1, <=0.3.11) +41 more potentially affected by CVE-2026-101910 via ip-address (>=10.2.0, <=10.5.0)

ip-address NPM version =10.2.0, =0.3.1, =1.5.40, =4.2.2, =0.17.1, =2.7.9, =4.0.3, =3.1.58, =2.6.55, =3.7.6, =2.7.130, =3.1.50, =4.0.4, =3.1.59, =3.1.77 and more Source cves: CVE-2026-101910 Source advisory: OSV:GHSA-2VR4-CQ9G-PVRC...

@aikidosec/broker-client (1.0.51), @app4you/n8n-nodes-portal-invoices (>=0.3.1, <=0.3.11) +41 more potentially affected by CVE-2026-101910 via ip-address (>=10.2.0, <=10.5.0)

ip-address NPM version =10.2.0, =0.3.1, =1.5.40, =4.2.2, =0.17.1, =2.7.9, =4.0.3, =3.1.58, =2.6.55, =3.7.6, =2.7.130, =3.1.50, =4.0.4, =3.1.59, =3.1.77 and more Source cves: CVE-2026-101910 Source advisory: SNYK:JS-IPADDRESS-20250985...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +18031 more potentially affected by CVE-2026-101902 via axios (>=1.0.0, <=1.19.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-20251106131028, =1.0.53, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-101902 Source advisory: SNYK:JS-AXIOS-20245050...

-price-checker (>=1.0.0, <=1.0.5), 01_use_npm (1.0.0) +22169 more potentially affected by CVE-2026-101902 via axios (>=0.27.2, <=0.33.0)

axios NPM version =0.27.2, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0-beta.3 - 0g-vector-search 0.1.0 - 0g-vibekit 0.1.0 and more Source cves: CVE-2026-101902 Source advisory: SNYK:JS-AXIOS-20245050...

0xtrails (>=0.0.0-20251106131028, <=0.18.6), 123pancli (1.0.0) +4512 more potentially affected by CVE-2026-101905 via axios (>=1.15.2, <=1.19.0)

axios NPM version =1.15.2, =0.0.0-20251106131028, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =0.0.1-alpha.25 and more...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +18031 more potentially affected by CVE-2026-101904 via axios (>=1.0.0, <=1.19.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-20251106131028, =1.0.53, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-101904 Source advisory: SNYK:JS-AXIOS-20244996...