nautobot-app-intent-networking (>=2.0.9 <=2.0.11), nautobot-bgp-models (>=3.0.0a1 <=3.0.0a2) +13 more potentially affected by CVE-2026-44794 via nautobot (>=3.0.0rc2 <=3.1.1)

nautobot PYPI version =3.0.0rc2, =2.0.9, =3.0.0a1, =3.0.0rc1, =4.0.0a1, =3.0.0a1, =4.0.0a1, =4.0.0a2 - nautobot-ssot =4.0.0a1 - nautobot-welcome-wizard =3.0.0a1 Source cves: CVE-2026-44794 Source advisory: SNYK:PYTHON-NAUTOBOT-16691222...

nautobot-app-intent-networking (>=2.0.9 <=2.0.11), nautobot-bgp-models (>=3.0.0a1 <=3.0.0a2) +13 more potentially affected by CVE-2026-44794 via nautobot (>=3.0.0rc2 <=3.1.1)

nautobot PYPI version =3.0.0rc2, =2.0.9, =3.0.0a1, =3.0.0rc1, =4.0.0a1, =3.0.0a1, =4.0.0a1, =4.0.0a2 - nautobot-ssot =4.0.0a1 - nautobot-welcome-wizard =3.0.0a1 Source cves: CVE-2026-44794 Source advisory: OSV:GHSA-WPXJ-44W3-2J6X...

0xgasless-mcp (>=1.0.3 <=1.0.5), 4d-vector-search (>=1.0.0 <=1.0.1) +3065 more potentially affected by CVE-2026-45134 via langsmith (>=0.0.32 <=0.5.4)

langsmith NPM version =0.0.32, =1.0.3, =1.0.0, =1.11.0, =0.0.5, =0.0.1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.6, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-45134 Source advisory: SNYK:JS-LANGSMITH-16658749...

a-data-processing (=0.0.1), a-mailx (=0.1.0) +1116 more potentially affected by CVE-2026-45134 via langchain (>=0.0.100 <=0.3.3)

langchain PYPI version =0.0.100, =0.1.0, =0.1.3, =4.8.2, =0.1.3, =0.1.0, =0.1.0, =3.2.0, =2.1.7, =2.1.8 - agent-builder =0.0.1 and more Source cves: CVE-2026-45134 Source advisory: SNYK:PYTHON-LANGCHAIN-16658746...

0xgasless-mcp (>=1.0.3 <=1.0.5), 4d-vector-search (>=1.0.0 <=1.0.1) +3065 more potentially affected by CVE-2026-45134 via langsmith (>=0.0.32 <=0.5.4)

langsmith NPM version =0.0.32, =1.0.3, =1.0.0, =1.11.0, =0.0.5, =0.0.1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.6, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-45134 Source advisory: OSV:GHSA-3644-Q5CJ-C5C7...

a-data-processing (=0.0.1), a-mailx (=0.1.0) +1490 more potentially affected by CVE-2026-45134 via langsmith (>=0.0.10 <=0.7.38)

langsmith PYPI version =0.0.10, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =0.1.0, =0.1.1, =2.1.7, =2.1.8 - agent-builder =0.0.1 and more Source cves: CVE-2026-45134 Source advisory: OSV:GHSA-3644-Q5CJ-C5C7...

agent-nexus-cli (>=0.1.0 <=0.1.31), agentiva (>=0.1.0 <=0.1.5) +42 more potentially affected by CVE-2026-45134 via langchain-classic (>=1.0.0 <=1.0.5)

langchain-classic PYPI version =1.0.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =3.0.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2, =0.4.0, =0.7.0 - hspylib-askai =1.2.19 and more Source cves: CVE-2026-45134 Source advisory: SNYK:PYTHON-LANGCHAINCLASSIC-16658750...

@abtnode/core (>=1.0.15 <=1.1.9), @agentuity/evals (>=0.0.104 <=2.0.26) +718 more potentially affected by CVE-2026-44724 via systeminformation (>=4.1.5 <=5.31.5)

systeminformation NPM version =4.1.5, =1.0.15, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.1.1, =0.1.1, =4.1.0, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =3.0.0-next.12, =1.0.0, =2.0.0 and more Source cves: CVE-2026-44724 Source advisory: OSV:GHSA-HVX9-HWR7-WJJ...

@1771technologies/oneplay (>=0.0.1 <=0.0.6), @akalymon/web (=0.1.0) +629 more potentially affected by CVE-2026-45028 via astro (>=0.20.12 <=6.0.4)

astro NPM version =0.20.12, =0.0.1, =0.1.6, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.0.1, =0.2.0, =0.3.0 and more Source cves: CVE-2026-45028 Source advisory: OSV:GHSA-XR5H-PHRJ-8VXV...

@stnd/build (=0.18.70), saku-doc (>=0.0.1 <=0.0.4) +1 more potentially affected by CVE-2026-45028 via astro (>=6.0.0-beta.1 <=6.0.4)

astro NPM version =6.0.0-beta.1, =0.0.1, =0.0.4 - stnd =0.18.70 Source cves: CVE-2026-45028 Source advisory: SNYK:JS-ASTRO-16643260...

aad-fastapi (>=1.0.0 <=1.1.2), aad-fastapi-dl37 (>=1.0.0 <=1.0.3) +234 more potentially affected by CVE-2026-44681 via authlib (>=0.10.0 <=1.6.11)

authlib PYPI version =0.10.0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =1.0.2, =1.2.0a20250730, =1.1.0, =1.2.0a20250730, =0.1.0, =0.1.0a1, =1.2.0, =1.2.0a20250730, =1.2.0a20250730, =1.2.0a20250730, =1.2.0, =1.2.1 and more Source cves: CVE-2026-44681 Source advisory: OSV:GHSA-R95X-QFJJ-FJJ2...

actscene-ocr (>=0.1.3 <=0.1.5), agent-zero (>=0.1.0 <=0.1.2) +76 more potentially affected by CVE-2026-44660 via ujson (>=5.0.0 <=5.12.0)

ujson PYPI version =5.0.0, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0a2, =2.2.0, =6.2.0.dev68, =0.1.0, =0.0.23, =0.1.0, =2.0.12, =0.0.59, =0.1.0, =8.124.0, =8.125.0 and more Source cves: CVE-2026-44660 Source advisory: SNYK:PYTHON-UJSON-16643463...

MAL-2026-3684 Malicious code in @gusmano/reext (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 498a21b60dcdfe236ea0b1683e1ec64aa091643b6ad562c3845757eed79660d8 The npm preinstall lifecycle script dist/scripts/preinstall.js, wired via package.json "preinstall": "node./dist/scripts/preinstall.js" reads the...

@n8n/ai-workflow-builder (>=1.10.0 <=1.20.1), @n8n/backend-common (>=1.19.0 <=1.20.1) +8 more potentially affected by CVE-2026-44792 via @n8n/api-types (>=1.0.0-rc.0 <=1.20.0)

@n8n/api-types NPM version =1.0.0-rc.0, =1.10.0, =1.19.0, =1.0.0, =1.3.0, =1.0.0, =1.19.0, =1.0.0, =2.0.0, =2.19.0, =2.19.0, =2.20.2 Source cves: CVE-2026-44792 Source advisory: SNYK:JS-N8NAPITYPES-16726403...

a-mailx (=0.1.0), aaaai (>=0.1.3 <=0.3.0) +1028 more potentially affected by CVE-2024-3651 +1 more via idna (>=3.10.0 <=3.14.0)

idna PYPI version =3.10.0, =0.1.3, =4.8.2, =0.1.3, =0.1.0, =0.3.4, =0.4.0, =0.0.6, =0.1.0, =0.1.31, =0.1.0, =0.4.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2024-3651, CVE-2026-45409 Source advisory: SNYK:PYTHON-IDNA-16769942...

com.azure.resourcemanager:azure-resourcemanager (>=2.52.0 <=2.60.0), com.azure.resourcemanager:azure-resourcemanager-appservice (>=2.52.0 <=2.55.0) +20 more potentially affected by CVE-2026-33117 via com.azure:azure-security-keyvault-keys (>=4.10.0 <=4.10.5)

com.azure:azure-security-keyvault-keys MAVEN version =4.10.0, =2.52.0, =2.52.0, =2.52.0, =5.23.0, =5.23.0, =5.23.0, =5.23.0, =5.23.0, =3.2.0, =239.v0e088b133a77, =0.17.0, =0.17.0, =5.13.0, =1.2.0, =4.19.0, =4.20.0 and more Source cves: CVE-2026-33117htt...

com.azure.resourcemanager:azure-resourcemanager (>=2.52.0 <=2.60.0), com.azure.resourcemanager:azure-resourcemanager-appservice (>=2.52.0 <=2.55.0) +20 more potentially affected by CVE-2026-33117 via com.azure:azure-security-keyvault-keys (>=4.10.0 <=4.10.5)

com.azure:azure-security-keyvault-keys MAVEN version =4.10.0, =2.52.0, =2.52.0, =2.52.0, =5.23.0, =5.23.0, =5.23.0, =5.23.0, =5.23.0, =3.2.0, =239.v0e088b133a77, =0.17.0, =0.17.0, =5.13.0, =1.2.0, =4.19.0, =4.20.0 and more Source cves: CVE-2026-33117htt...

aait (>=1.0.4 <=1.0.5), adess (=1.0.0) +245 more potentially affected by CVE-2026-31235 via imgaug (>=0.2.5 <=0.4.0)

imgaug PYPI version =0.2.5, =1.0.4, =0.1.0, =0.10.0, =0.0.3.20, =0.1.0, =1.3.0, =0.5.0, =0.2.3, =0.3.2, =0.7.0.dev134, =0.1.4, =0.1.5 - arcoocr =1.0.1 - atlalign =0.6.2 - audio-snippets =0.0.1 and more Source cves: CVE-2026-31235 Source advisory: OSV:GHSA-G82G-J283-HJ97...

actbench (=0.0.1a5), agenticos (>=0.0.1 <=0.0.3.155020) +46 more potentially affected by CVE-2026-31245 via mem0ai (>=0.0.20 <=0.1.93)

mem0ai PYPI version =0.0.20, =0.0.1, =1.1.0, =1.1.0, =0.1.41, =1.0.4, =0.61.0, =0.13.0, =0.1.108, =0.1.117, =0.1.120a1, =0.1.120, =0.1.3, =0.1.0, =0.2.1 and more Source cves: CVE-2026-31245 Source advisory: OSV:GHSA-CGX8-QGVR-F7VF...

actbench (=0.0.1a5), agenticos (>=0.0.1 <=0.0.3.155020) +46 more potentially affected by CVE-2026-31240 via mem0ai (>=0.0.20 <=0.1.93)

mem0ai PYPI version =0.0.20, =0.0.1, =1.1.0, =1.1.0, =0.1.41, =1.0.4, =0.61.0, =0.13.0, =0.1.108, =0.1.117, =0.1.120a1, =0.1.120, =0.1.3, =0.1.0, =0.2.1 and more Source cves: CVE-2026-31240 Source advisory: OSV:GHSA-JFV9-68M5-GJJR...