-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +845 more potentially affected by CVE-2026-45109 via next (>=15.2.0, <=15.5.16)

next NPM version =15.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-45109 Source advisory: OSV:GHSA-26HH-7CQF-HHC6...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44580 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44580 Source advisory:...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44576 Source advisory:...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44575 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44575 Source advisory:...

Spring Office Hours Podcast: S5E15 - Upgrading Spring and OSS Security

Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun tackle two challenges every Spring developer faces: keeping applications up to date and staying ahead of security vulnerabilities in open source dependencies. They explore how AI...

@2kk/miniprogram-ci (>=0.0.2, <=0.0.8), @agilejs/cli (1.0.0) +335 more potentially affected by CVE-2026-44728 via @babel/plugin-transform-modules-systemjs (>=7.12.1, <=7.29.0)

@babel/plugin-transform-modules-systemjs NPM version =7.12.1, =0.0.2, =1.0.0, =7.21.4-esm.2, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.74, =1.0.0, =1.1.5 and more Source cves: CVE-2026-44728 Source advisory: OSV:GHSA-FV7C-FP4J-7GWP...

@aws-amplify/graphql-api-construct (1.21.2), @vivliostyle/cli (>=10.4.0, <=10.5.0) potentially affected by CVE-2026-44665 via fast-xml-builder (>=1.1.1, <=1.1.4)

fast-xml-builder NPM version =1.1.1, =10.4.0, =10.5.0 Source cves: CVE-2026-44665 Source advisory: OSV:GHSA-5WM8-GMM8-39J9...

annatar (>=0.4.3, <=0.5.8), ansi2png-rs (>=0.1.0, <=0.1.1) +63 more potentially affected by unknown CVE via imageproc (>=0.6.1, <=0.22.0)

imageproc CARGO version =0.6.1, =0.4.3, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W5P8-4JCX-2J6R...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @activepieces/piece-ai (>=0.3.1, <=0.3.4) +606 more potentially affected by CVE-2026-44455 via hono (>=4.0.0, <=4.12.15)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: CVE-2026-44455 Source advisory: OSV:GHSA-69XW-7HCM-H432...

@augu/fastify-nitro (>=1.0.0, <=1.2.0), @bicou/countries-server (>=1.5.0, <=1.6.7) +26 more potentially affected by CVE-2026-44373 via nitropack (>=2.1.0, <=2.13.1)

nitropack NPM version =2.1.0, =1.0.0, =1.5.0, =0.4.4, =0.6.1, =1.0.0, =1.0.0, =5.0.0-rc.212, =5.0.0-rc.212, =3.0.0, =4.0.0-alpha.1, =4.0.0-29145487.7beaa672, =7.40.3, =0.0.0-beta.0, =1.15.3, =1.31.24 and more Source cves: CVE-2026-44373 Source advisory: SNYK:JS-NITROPACK-16757953...

8base-js-sdk (>=0.1.0, <=0.1.6), 8base-react-sdk (>=0.37.2, <=2.6.6) +437 more potentially affected by CVE-2026-42280 via auth0-js (>=8.11.3, <=9.32.0)

auth0-js NPM version =8.11.3, =0.1.0, =0.37.2, =0.37.2, =1.0.1, =0.0.5, =0.0.0, =0.1.0, =0.37.2, =0.37.2, =0.37.2, =0.37.2, =0.37.2, =0.0.1, =0.4.1, =0.4.1, =3.1.0-beta.0 and more Source cves: CVE-2026-42280 Source advisory: SNYK:JS-AUTH0JS-16438973...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, snyk-cli, gitaly, kaniko, dagger, kyverno, pulumi, trivy-operator, grype, cerbos, kubevela, trufflehog, argo-cd, k9s, osv-scanner, src-fingerprint, external-secrets-operator, kubescape, argo-workflows, guac, apko, pulumi-kubernetes-operator,...

123ts-backend-setup-prod (1.0.0), 4casterschemas (>=1.0.0, <=1.0.1) +191 more potentially affected by CVE-2026-42334 via mongoose (>=8.0.0, <=8.21.1)

mongoose NPM version =8.0.0, =1.0.0, =2.1.5, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =3.13.0, =1.1.9, =1.5.31 and more Source cves: CVE-2026-42334 Source advisory: OSV:GHSA-WPG9-53FQ-2R8H...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.10) +22 more potentially affected by CVE-2026-45004 via openclaw (>=2026.3.22, <=2026.4.22)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.0.1, =0.3.0 and more Source cves: CVE-2026-45004 Source advisory: OSV:GHSA-R39H-4C2P-3JXP...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.10) +22 more potentially affected by CVE-2026-45004 via openclaw (>=2026.3.22, <=2026.4.22)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.0.1, =0.3.0 and more Source cves: CVE-2026-45004 Source advisory: SNYK:JS-OPENCLAW-16424092...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.10) +22 more potentially affected by CVE-2026-45005 via openclaw (>=2026.3.22, <=2026.4.22)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.0.1, =0.3.0 and more Source cves: CVE-2026-45005 Source advisory: OSV:GHSA-Q8FF-7FFM-M3R9...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +18 more potentially affected by CVE-2026-43570 via openclaw (>=2026.3.22, <=2026.4.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =4.2.0 - openclaw-chatclaw 0.1.0 and more Source cves: CVE-2026-43570 Source advisory: SNYK:JS-OPENCLAW-16420272...

@514labs/aurora-mcp (>=0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, <=0.0.64), @514labs/sloan-mcp (0.0.65) +543 more potentially affected by CVE-2026-43870 via thrift (>=0.6.0-1, <=0.22.0)

thrift NPM version =0.6.0-1, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.6, =0.9.0, =0.0.1, =0.1.0, =1.0.0-beta.1, =1.0.0-beta.6, =1.0.1, =1.1.0, =0.24.0-no-protobuf-patch.1, =0.18.8, =0.24.0 and more Source cves: CVE-2026-43870 Source advisory: SNYK:JS-THRIFT-16431741...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +15275 more potentially affected by CVE-2026-42034 via axios (>=1.0.0, <=1.15.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42034 Source advisory: OSV:GHSA-5C9X-8GCM-MPGX...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +15325 more potentially affected by CVE-2026-42264 via axios (>=1.0.0, <=1.15.1)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42264 Source advisory: OSV:GHSA-Q8QP-CVCW-X6JJ...