ai.looktech.ltrpc.schema:app-server (>=1.0.2 <=2.5.0), ai.looktech.ltrpc.schema:bt-app (=1.0.1) +488 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (>=1.0.0 <=6.2.0)

com.squareup.wire:wire-runtime MAVEN version =1.0.0, =1.0.2, =1.0.2, =0.0.1, =0.0.2, =0.1.1, =0.2.7, =0.2.7, =0.2.7, =0.1.1, =0.2.7, =0.7.21, =0.7.21, =0.7.21, =0.7.24 and more Source cves: CVE-2026-45799 Source advisory: OSV:GHSA-7XPR-HC2W-34M9...

@abtnode/core (>=1.0.15 <=1.1.9), @agentuity/evals (>=0.0.104 <=2.0.17) +721 more potentially affected by CVE-2026-44724 via systeminformation (>=4.1.5 <=5.31.5)

systeminformation NPM version =4.1.5, =1.0.15, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.1.1, =0.1.1, =4.1.0, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =3.0.0-next.12, =1.0.0, =2.0.0 and more Source cves: CVE-2026-44724 Source advisory: OSV:GHSA-HVX9-HWR7-WJJ...

a2rl (>=1.0.0 <=1.2.0), aana (>=0.2.1 <=0.2.2.2) +1698 more potentially affected by CVE-2026-44484 via pytorch-lightning (>=2.0.0 <=2.6.1)

pytorch-lightning PYPI version =2.0.0, =1.0.0, =0.2.1, =1.1.0, =0.0.0, =2.1.1, =0.1.0, =2.0.0, =1.3.0, =0.1.0, =0.8.1, =0.1.0, =0.4.1, =0.4.7 and more Source cves: CVE-2026-44484 Source advisory: OSV:GHSA-W37P-236H-PFX3...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-42230 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-42230 Source advisory: OSV:GHSA-F6X8-65Q6-J9M9...

@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (>=0.8.3 <=0.9.5) +16 more potentially affected by CVE-2026-42436 via openclaw (>=0.0.1 <=2026.4.12)

openclaw NPM version =0.0.1, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =2.0.1, =0.0.7, =0.0.8 and more Source cves: CVE-2026-42436 Source advisory: OSV:GHSA-C4QM-58HJ-J6PJ...

a-data-processing (=0.0.1), ab-data-processing (=0.0.1) +645 more potentially affected by CVE-2026-41314 via pypdf (>=3.10.0 <=6.10.1)

pypdf PYPI version =3.10.0, =0.1.1, =0.8.1, =0.9.1, =0.2.0, =0.0.2, =0.0.1, =0.0.1, =0.2.0, =0.1.4, =0.1.0a0.dev0, =1.1.3 and more Source cves: CVE-2026-41314 Source advisory: OSV:GHSA-X284-J5P8-9C5P...

composio-praisonai (>=0.3.24 <=0.7.20), praisonai (>=0.0.34 <=4.6.37) +9 more potentially affected by unknown CVE via praisonaiagents (=1.6.37)

praisonaiagents PYPI version =1.6.37 is affected by a known vulnerability. The following packages have a transitive dependency on praisonaiagents and may be impacted: - composio-praisonai =0.3.24, =0.0.34, =0.1.1, =0.1.0, =0.1.0, =0.0.2, =0.1.5, =0.0.1, =0.1.1 - praisonaibench-python =0.1.0 -...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +22 more potentially affected by CVE-2026-42430 via openclaw (>=0.0.1 <=2026.4.5)

openclaw NPM version =0.0.1, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-42430 Source advisory: OSV:GHSA-W8G9-X8GX-CRMM...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @abyedev/hono-dotenv (=1.0.0) +492 more potentially affected by CVE-2026-39409 via hono (>=0.5.10 <=4.12.10)

hono NPM version =0.5.10, =0.1.8-fix.3, =5.0.0, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =2026.4.4, =1.0.2, =0.1.1, =0.0.1, =0.0.2-a, =0.1.22, =1.1.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-39409 Source advisory: OSV:GHSA-XPCF-PG52-R92G...

@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (=0.8.3-beta.1) +11 more potentially affected by CVE-2026-35623 via openclaw (>=0.0.1 <=2026.3.24)

openclaw NPM version =0.0.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =3.3.2, =3.3.7 Source cves: CVE-2026-35623 Source advisory: OSV:GHSA-XQ8G-HGH6-87HV...

@2digits/tlo-mcp (>=0.1.0 <=0.1.10), @6qat/tcp-connection (>=0.2.6 <=0.2.9) +874 more potentially affected by CVE-2026-32887 via effect (>=2.0.0-next.10 <=3.1.6)

effect NPM version =2.0.0-next.10, =0.1.0, =0.2.6, =1.0.0, =0.1.0-alpha.1, =0.0.1, =0.1.0-alpha.1, =0.0.1, =0.0.5, =0.0.1, =0.1.0, =0.2.1, =0.4.2 - @arvkonstantin/framework-provider-local-pg =3.4.3 - @awstin/effect-zero-v3 =0.1.0 and more Source cves: CVE-2026-32887 Source advisory:...

0agent (>=1.0.1 <=1.1.5), 0dot (=0.6.0) +53310 more potentially affected by CVE-2026-29085 via hono (>=0.5.10 <=4.12.3)

hono NPM version =0.5.10, =1.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.6, =0.1.0, =1.0.0, =0.3.2, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-29085 Source advisory: OSV:GHSA-P6XX-57QC-3WXR...

@01.software/sdk (>=0.0.1-251008.90016 <=0.1.4), @adenta/cms (>=0.0.6 <=1.1.1-0) +81 more potentially affected by CVE-2026-27567 via payload (>=0.12.3 <=3.75.0-internal.8e0f8ba)

payload NPM version =0.12.3, =0.0.1-251008.90016, =0.0.6, =0.0.1, =1.0.1-beta.0, =1.0.1, =0.1.2, =0.1.1, =1.0.0, =1.0.6, =1.0.0, =0.1.0, =0.1.8 and more Source cves: CVE-2026-27567 Source advisory: OSV:GHSA-HHFX-5X8J-F5F6...

@vltpkg/cli-sdk (>=0.0.0-7 <=1.0.0-rc.1), @vltpkg/config (>=0.0.0-19 <=1.0.0-rc.1) +9 more potentially affected by CVE-2026-24909 via @vltpkg/tar (>=0.0.0-0.1730239248325 <=1.0.0-rc.1)

@vltpkg/tar NPM version =0.0.0-0.1730239248325, =0.0.0-7, =0.0.0-19, =0.0.0-0.1730239248325, =0.0.0-7, =0.0.0-0.1730239248325, =0.0.0-0.1730239248325, =0.0.0-4, =0.0.0-7, =0.0.0-10, =0.0.0-26, =0.0.1, =1.2.0 Source cves: CVE-2026-24909 Source advisory: OSV:GHSA-GF2C-JWCJ-X929...

@authsome/adapter-clerk (>=0.1.1 <=0.1.12), @billyjacoby/clerk-react-native (>=1.0.0 <=1.0.4) +51 more potentially affected by CVE-2025-63700 via @clerk/clerk-js (>=1.35.1 <=5.85.0)

@clerk/clerk-js NPM version =1.35.1, =0.1.1, =1.0.0, =1.0.16, =1.0.1, =0.2.0, =0.0.1, =2.19.0, =0.1.0, =0.24.2-dev-clerk, =0.24.2-dev-clerk, =0.24.3-dev-ensure-cloud-token-6, =0.0.0, =0.0.5, =0.0.21 and more Source cves: CVE-2025-63700 Source advisory: OSV:GHSA-3MM3-WFPV-Q85G...

forc (>=0.1.3 <=0.33.0), forc-client (>=0.20.1 <=0.33.0) +30 more potentially affected by unknown CVE via fuel-vm (>=0.11.1 <=0.4.1)

fuel-vm CARGO version =0.11.1, =0.1.3, =0.20.1, =0.14.0, =0.14.0, =0.1.8, =0.14.0, =0.14.0, =0.30.1, =0.14.0, =0.9.1, =0.9.1, =0.9.1, =0.11.2, =0.1.2, =0.9.1, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2PGJ-5CV2-6XXW...

@diningcity/capacitor-qr-scanner (>=0.0.7 <=0.0.8), @mojitonft/hooks (=1.0.1-alpha.4) +93 more potentially affected by CVE-2025-26278 via dref (=0.0.6)

dref NPM version =0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on dref and may be impacted: - @diningcity/capacitor-qr-scanner =0.0.7, =1.7.0, =0.0.1, =11.1.1, =3.3.3, =0.0.0-beta, =0.0.2, =1.0.2, =0.0.40, =0.0.2, =0.0.1, =0.0.1, =0.1.0, =0.1.19...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0 <=1.1.0), ai.stainless:grails-tika (=0.1.0) +2893 more potentially affected by CVE-2025-48795 via org.apache.cxf:cxf-core (>=3.0.0-milestone1 <=3.5.10)

org.apache.cxf:cxf-core MAVEN version =3.0.0-milestone1, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.1.0.RELEASE - cloud.testload:jmeter-clickhouse-listener =2.00 and more Source cves: CVE-2025-48795 Source...

br.eti.clairton:ds-test (>=1.0.1 <=1.2.1), br.unb.erlangms:ems_java (=1.0.8.8) +394 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron (>=1.17.0.Final <=2.2.7.Final)

org.wildfly.security:wildfly-elytron MAVEN version =1.17.0.Final, =1.0.1, =1.6.10, =1.6.10, =2020.10.30-4240, =2020.10.30-4240, =6.2.0, =0.1.0, =1.0.1, =6.3.0, =0.2.10-wildfly15, =0.2.10-wildfly15, =0.2, =0.3...

chameli (>=0.1.12 <=0.1.13), clotho (=0.1.0) +17 more potentially affected by CVE-2025-23217 via mitmproxy (>=0.17.0 <=11.0.2)

mitmproxy PYPI version =0.17.0, =0.1.12, =0.1.0, =4.0.0, =0.34.0, =0.11.0, =2.0.0b0, =1.0.0, =0.9.0, =1.0.0, =1.1.0, =1.0.0, =1.1.0 and more Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...