ALSA-2026:36730 Moderate: libsolv security update

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 For more details about the security issues,...

ratex-layout (0.0.3) potentially affected by CVE-2026-53531 via ratex-parser (0.0.3)

ratex-parser CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ratex-parser and may be impacted: - ratex-layout 0.0.3 Source cves: CVE-2026-53531 Source advisory: OSV:GHSA-4W5H-HX6R-28Q7...

ratex-layout (0.0.3) potentially affected by CVE-2026-53530 via ratex-parser (0.0.3)

ratex-parser CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ratex-parser and may be impacted: - ratex-layout 0.0.3 Source cves: CVE-2026-53530 Source advisory: OSV:GHSA-4HGP-59H5-GVRJ...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +201 more potentially affected by unknown CVE via better-auth (>=0.4.9, <=1.6.10)

better-auth NPM version =0.4.9, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.0.1, =1.5.0-beta.13 and more Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTH-17889825...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +201 more potentially affected by CVE-2026-67334 via better-auth (>=0.4.9, <=1.6.10)

better-auth NPM version =0.4.9, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.0.1, =1.5.0-beta.13 and more Source cves: CVE-2026-67334 Source advisory: OSV:GHSA-2VG6-77G8-24MP...

@inkeep/agents-api (>=0.73.0, <=0.80.6), @inkeep/agents-cli (>=0.73.0, <=0.80.6) +5 more potentially affected by CVE-2026-53518 via @better-auth/oauth-provider (1.6.9)

@better-auth/oauth-provider NPM version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-api =0.73.0, =0.73.0, =0.73.1, =0.73.0, =0.73.1, =0.73.1, =0.73.1, =0.80.6 Source cves:...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by CVE-2026-53518 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: CVE-2026-53518 Source advisory: OSV:GHSA-7W99-5WM4-3G79...

@inkeep/agents-api (>=0.73.0, <=0.80.6), @inkeep/agents-cli (>=0.73.0, <=0.80.6) +5 more potentially affected by CVE-2026-53518 via @better-auth/oauth-provider (1.6.9)

@better-auth/oauth-provider NPM version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-api =0.73.0, =0.73.0, =0.73.1, =0.73.0, =0.73.1, =0.73.1, =0.73.1, =0.80.6 Source cves:...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by CVE-2026-53518 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: CVE-2026-53518 Source advisory: SNYK:JS-BETTERAUTH-17889820...

@inkeep/agents-api (>=0.0.0-dev-20260121145510, <=0.80.6), @inkeep/agents-cli (>=0.0.0-chat-to-edit-20251119071712, <=0.80.6) +17 more potentially affected by CVE-2026-53513 via @better-auth/sso (>=1.3.28, <=1.6.9)

@better-auth/sso NPM version =1.3.28, =0.0.0-dev-20260121145510, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260106221934, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260203033642...

@inkeep/agents-api (>=0.73.0, <=0.80.6), @inkeep/agents-cli (>=0.73.0, <=0.80.6) +5 more potentially affected by CVE-2026-53517 via @better-auth/oauth-provider (1.6.9)

@better-auth/oauth-provider NPM version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-api =0.73.0, =0.73.0, =0.73.1, =0.73.0, =0.73.1, =0.73.1, =0.73.1, =0.80.6 Source cves:...

@inkeep/agents-api (>=0.73.0, <=0.80.6), @inkeep/agents-cli (>=0.73.0, <=0.80.6) +5 more potentially affected by CVE-2026-53517 via @better-auth/oauth-provider (1.6.9)

@better-auth/oauth-provider NPM version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-api =0.73.0, =0.73.0, =0.73.1, =0.73.0, =0.73.1, =0.73.1, =0.73.1, =0.80.6 Source cves:...

@agent-native/core (>=0.26.5, <=0.47.1), @automate.ax/components-core (>=0.1.3, <=0.3.1) +34 more potentially affected by CVE-2026-53517 via @better-auth/memory-adapter (>=1.6.0, <=1.6.10)

@better-auth/memory-adapter NPM version =1.6.0, =0.26.5, =0.1.3, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.11.3, =1.6.0-depup.0, =0.73.0, =0.73.0, =0.80.6 and more Source cves: CVE-2026-53517 Source advisory: SNYK:JS-BETTERAUTHMEMORYADAPTER-17889814...

@agentcorporation/server (>=0.3.3, <=0.3.13), @agentuity/auth (>=1.0.35, <=3.0.0-alpha.6) +131 more potentially affected by CVE-2026-53517 via better-auth (>=1.4.8-beta.4, <=1.5.7-beta.1)

better-auth NPM version =1.4.8-beta.4, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.0.7, =1.4.21, =1.7.0, =2026.512.0-canary.0, =2.1.0, =2.1.1 and more Source cves: CVE-2026-53517 Source advisory: OSV:GHSA-392P-2Q2V-4372...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by CVE-2026-67336 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: CVE-2026-67336 Source advisory: OSV:GHSA-9H47-PQCX-HJR4...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by unknown CVE via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTH-17889826...

@access-dlsu/leapify (>=0.260531.1, <=0.260608.1), @agent-native/core (>=0.26.5, <=0.47.1) +218 more potentially affected by unknown CVE via better-auth (>=1.0.0, <=1.6.12)

better-auth NPM version =1.0.0, =0.260531.1, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.1.4 and more Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTH-17889822...

@access-dlsu/leapify (>=0.260531.1, <=0.260608.1), @agent-native/core (>=0.26.5, <=0.47.1) +218 more potentially affected by CVE-2026-67333 via better-auth (>=1.0.0, <=1.6.12)

better-auth NPM version =1.0.0, =0.260531.1, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.1.4 and more Source cves: CVE-2026-67333 Source advisory: OSV:GHSA-86J7-9J95-VPQJ...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by CVE-2026-53516 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: CVE-2026-53516 Source advisory: OSV:GHSA-G38M-R43W-P2Q7...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by CVE-2026-53516 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: CVE-2026-53516 Source advisory: SNYK:JS-BETTERAUTH-17889818...