0xble (>=14.0.0, <=21.9.1), 100xchat (>=1.1.5, <=1.3.5) +4293 more potentially affected by CVE-2026-8657 via jsondiffpatch (>=0.0.11, <=0.7.3)

jsondiffpatch NPM version =0.0.11, =14.0.0, =1.1.5, =1.0.0, =1.0.0, =1.0.4, =0.10.6, =0.1.6, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.1, =0.1.0-alpha.1, =0.1.0, =1.1.0, =0.3.1, =1.2.4 and more Source cves: CVE-2026-8657 Source advisory: SNYK:JS-JSONDIFFPATCH-16322990...

3extensions (1.0.1), @51jbs/incremental-coverage-plugin (1.0.5) +639 more potentially affected by CVE-2026-6951 via simple-git (>=3.0.3, <=3.35.2)

simple-git NPM version =3.0.3, =1.0.1, =1.0.1, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =23.0.0, =35.0.0, =1.4.0, =0.26.4, =0.1.5-alpha.0, =1.0.2, =0.0.0-aj-beta.221, =0.0.0-aj-beta.227 and more Source cves: CVE-2026-6951 Source advisory: OSV:GHSA-HFFM-XVC3-VPRC...

act-workflow (>=4.8.2, <=4.8.399), agent-builder (0.0.1) +21 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.0)

langchain-text-splitters PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - act-workflow =4.8.2, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.0.4, =0.0.3, =0.1.0, =0.1.0, =0.1.12 and more...

aiagentgraph (>=0.0.1, <=0.0.4a1), aicat-annotator (0.0.1) +41 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.7)

langchain-openai PYPI version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - aiagentgraph =0.0.1, =0.8.29, =0.1.0, =1.0.0, =0.0.5, =0.5.0, =0.5.0, =0.5.0, =0.1.1, =2.0.0, =2.0.5 and more Source cves:...

a2a-client-handler (0.1.0), aa-rag (>=0.1.0, <=0.4.3) +944 more potentially affected by CVE-2026-41488 via langchain-openai (>=0.0.2, <=1.1.12)

langchain-openai PYPI version =0.0.2, =0.1.0, =0.1.0, =0.1.0b0, =0.0.1, =4.8.2, =0.0.1a1, =0.1.3, =1.0.0rc1, =3.2.0, =0.1.0, =0.1.1, =0.0.1a0, =2.1.7, =2.1.13 and more Source cves: CVE-2026-41488 Source advisory: MEND:CVE-2026-41488...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @alkemio/excalidraw (>=0.17.1-alkemio-5, <=0.19.0-alkemio-1) +101 more potentially affected by unknown CVE via @excalidraw/mermaid-to-excalidraw (>=0.3.0, <=1.1.2)

@excalidraw/mermaid-to-excalidraw NPM version =0.3.0, =0.18.0-beta.0, =0.17.1-alkemio-5, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.5.0-1848650, =0.17.1, =18.0.3, =0.18.0-patch.1, =0.17.1-08b13f9, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-39H7-PWV7-RC3X...

@13w/local-rag (2.0.0), @apekshik/grok-cli-apek (>=0.1.5, <=0.1.6) +32 more potentially affected by unknown CVE via @google/gemini-cli (>=0.1.17, <=0.39.0-nightly.20260411.0957f7d3e)

@google/gemini-cli NPM version =0.1.17, =0.1.5, =0.1.0, =1.0.0, =0.0.17, =0.6.4, =0.0.1, =1.3.0, =0.1.4, =0.1.10, =1.0.0, =2.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-GOOGLEGEMINICLI-16301693...

@13w/local-rag (2.0.0), @apekshik/grok-cli-apek (>=0.1.5, <=0.1.6) +32 more potentially affected by CVE-2026-12537 via @google/gemini-cli (>=0.1.17, <=0.39.0-nightly.20260411.0957f7d3e)

@google/gemini-cli NPM version =0.1.17, =0.1.5, =0.1.0, =1.0.0, =0.0.17, =0.6.4, =0.0.1, =1.3.0, =0.1.4, =0.1.10, =1.0.0, =2.0.0 and more Source cves: CVE-2026-12537 Source advisory: OSV:GHSA-WPQR-6V78-JR5G...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +15837 more potentially affected by CVE-2026-42041 via axios (>=1.0.0, <=1.15.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42041 Source advisory: SNYK:JS-AXIOS-16299925...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +15837 more potentially affected by CVE-2026-42042 via axios (>=1.0.0, <=1.15.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42042 Source advisory: SNYK:JS-AXIOS-16299478...

com.alilitech:boot-plus-log (>=2.1.0, <=4.0.0), com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0) +8 more potentially affected by CVE-2026-42042 via org.webjars.npm:axios (>=1.1.3, <=1.7.2)

org.webjars.npm:axios MAVEN version =1.1.3, =2.1.0, =2.0.0, =1.0.3, =1.0.0, =2.1.1, =1.0.0, =1.0.0, =2.1.3, =2.0.0, =1.0.2, =1.0.9 Source cves: CVE-2026-42042 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16299479...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +15837 more potentially affected by CVE-2026-42040 via axios (>=1.0.0, <=1.15.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42040 Source advisory: SNYK:JS-AXIOS-16298055...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +15837 more potentially affected by CVE-2026-42033 via axios (>=1.0.0, <=1.15.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42033 Source advisory: SNYK:JS-AXIOS-16299904...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +15837 more potentially affected by CVE-2026-42034 via axios (>=1.0.0, <=1.15.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42034 Source advisory: SNYK:JS-AXIOS-16298130...

@bynder/bynder-js-sdk (2.5.3), @craftgate/craftgate (1.0.66) +3 more potentially affected by CVE-2025-62718 +1 more via axios (0.31.0)

axios NPM version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on axios and may be impacted: - @bynder/bynder-js-sdk 2.5.3 - @craftgate/craftgate 1.0.66 - @extrahorizon/exh-cli =1.13.2-dev-197-674338d, =8.10.0-dev-161-c1dd6ca, =8.10.0 -...

@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @aayshian/n8n-aisensy-ay19 (0.0.1) +2923 more potentially affected by CVE-2025-62718 +1 more via axios (1.15.0)

axios NPM version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on axios and may be impacted: - @0xlimao/n8n-nodes-ethereum =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =2.11.0, =2.60.2, =0.0.0-rc-20260511021900, =4.2.2 - @accelbyte/sdk 4.3.1 -...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +15888 more potentially affected by CVE-2026-42044 via axios (>=1.0.0, <=1.15.1)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42044 Source advisory: SNYK:JS-AXIOS-16299921...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +15837 more potentially affected by CVE-2026-42035 via axios (>=1.0.0, <=1.15.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42035 Source advisory: SNYK:JS-AXIOS-16298058...

com.alilitech:boot-plus-log (>=2.1.0, <=4.0.0), com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0) +8 more potentially affected by CVE-2026-42036 via org.webjars.npm:axios (>=1.1.3, <=1.7.2)

org.webjars.npm:axios MAVEN version =1.1.3, =2.1.0, =2.0.0, =1.0.3, =1.0.0, =2.1.1, =1.0.0, =1.0.0, =2.1.3, =2.0.0, =1.0.2, =1.0.9 Source cves: CVE-2026-42036 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16298165...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +15837 more potentially affected by CVE-2026-42036 via axios (>=1.0.0, <=1.15.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42036 Source advisory: SNYK:JS-AXIOS-16298162...