1990 matches found
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +158 more potentially affected by CVE-2026-41311 via liquidjs (>=10.2.0, <=10.25.6)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.8.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =3.20.0 and more Source cves: CVE-2026-41311 Source advisory: OSV:GHSA-4RC3-7J7W-M548...
aesti (>=0.1.0, <=0.3.0), atarashii_imap (0.3.0) +445 more potentially affected by CVE-2026-41898 via openssl (>=0.9.24, <=0.10.68)
openssl CARGO version =0.9.24, =0.1.0, =0.1.0, =0.5.0, =0.2.0, =0.0.0, =0.2.0, =0.0.1, =0.15.0, =0.3.1, =0.0.1, =0.4.0 and more Source cves: CVE-2026-41898 Source advisory: OSV:GHSA-HPPC-G8H3-XHP3...
@0xpolygonid/js-sdk (>=1.32.1, <=1.34.0), @142vip/common (>=0.0.1-alpha.9, <=0.0.1-alpha.15) +2881 more potentially affected by CVE-2026-41907 +1 more via uuid (>=11.0.0, <=11.1.0)
uuid NPM version =11.0.0, =1.32.1, =0.0.1-alpha.9, =0.0.3-alpha.1, =0.1.6-alpha.9, =0.0.1-alpha.0, =1.0.0-alpha.20, =2.16.1, =1.0.0-alpha.34, =0.1.0-alpha.1, =1.0.0, =0.24.1-20230627140514, =0.25.1-20250326172337, =0.24.1-20230627140514, =0.24.1-20231019080841 and more Source cves: CVE-2026-41907...
nimiq-account (0.1.0), nimiq-accounts (0.1.0) +15 more potentially affected by CVE-2026-34065 via nimiq-primitives (0.1.0)
nimiq-primitives CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-primitives and may be impacted: - nimiq-account 0.1.0 - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 -...
@diia-inhouse/i18n (>=2.8.2, <=2.8.14), @genie23/electron-base (>=0.0.4-alpha, <=0.0.225) +56 more potentially affected by CVE-2026-41693 via i18next-fs-backend (>=2.0.0, <=2.6.3)
i18next-fs-backend NPM version =2.0.0, =2.8.2, =0.0.4-alpha, =3.0.0-rc.0, =7.1.2, =2.4.2, =1.1.8, =1.1.8, =2.4.2, =2.4.2, =2.6.9, =2.4.2, =2.4.2, =2.4.2, =2.4.2, =2.5.5 and more Source cves: CVE-2026-41693 Source advisory: SNYK:JS-I18NEXTFSBACKEND-16415529...
acceptxmr (>=0.1.0, <=0.13.0), activitypub_federation (>=0.1.0, <=0.2.0) +621 more potentially affected by CVE-2026-73051 via actix-http (>=3.0.0, <=3.9.0)
actix-http CARGO version =3.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0-beta.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =0.6.0-beta.1, =0.2.0, =0.1.0, =2.0.0-beta.1, =3.0.0 and more Source cves: CVE-2026-73051 Source advisory: OSV:GHSA-XHJ4-VRGC-HR34...
@acampkin/mcc (>=2.1.0, <=2.5.0), @kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.6.0) +24 more potentially affected by CVE-2026-39861 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.63)
@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =2.0.0 - ch-go 1.0.3 and more Source cves: CVE-2026-39861 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-16191021...
False Security Confidence in Benign LLM Code Generation
Prior work has demonstrated that functionally correct yet vulnerable outputs arise systematically in threat-oriented settings, where adversarial or implicit channels are used to induce security failures in code agents and automated patching workflows. This note introduces a complementary but...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +18 more potentially affected by CVE-2026-43569 via openclaw (>=2026.3.22, <=2026.4.5)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =4.2.0 - openclaw-chatclaw 0.1.0 and more Source cves: CVE-2026-43569 Source advisory: OSV:GHSA-939R-RJ45-G2RJ...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0) +18 more potentially affected by CVE-2026-43581 via openclaw (>=2026.3.22, <=2026.4.9)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =4.2.0 - openclaw-chatclaw 0.1.0 and more Source cves: CVE-2026-43581 Source advisory: OSV:GHSA-525J-HQQ2-66R4...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +21 more potentially affected by CVE-2026-43527 via openclaw (>=2026.3.22, <=2026.4.12)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-43527 Source advisory: OSV:GHSA-53VX-PMQW-863C...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +19 more potentially affected by CVE-2026-43526 via openclaw (>=2026.3.22, <=2026.4.11)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =2.0.1, =4.2.0 and more Source cves: CVE-2026-43526 Source advisory: OSV:GHSA-2767-2Q9V-9326...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0) +18 more potentially affected by CVE-2026-43534 via openclaw (>=2026.3.22, <=2026.4.9)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =4.2.0 - openclaw-chatclaw 0.1.0 and more Source cves: CVE-2026-43534 Source advisory: OSV:GHSA-7G8C-CFR3-VQQR...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +19 more potentially affected by CVE-2026-42435 via openclaw (>=2026.3.22, <=2026.4.11)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =2.0.1, =4.2.0 and more Source cves: CVE-2026-42435 Source advisory: OSV:GHSA-J6C7-3H5X-99G9...
2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4314 more potentially affected by CVE-2026-41672 via @xmldom/xmldom (>=0.7.0, <=0.8.12)
@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.0.1, =0.0.2 - @abcd19/st-grid 3.1.0 and more Source cves: CVE-2026-41672 Source advisory: SNYK:JS-XMLDOMXMLDOM-16133132...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0) +18 more potentially affected by CVE-2026-43575 via openclaw (>=2026.3.22, <=2026.4.9)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =4.2.0 - openclaw-chatclaw 0.1.0 and more Source cves: CVE-2026-43575 Source advisory: SNYK:JS-OPENCLAW-16109692...
@20syldev/api (>=2.6.0, <=2.8.0), @aalis/plugin-tool-math (>=0.1.0, <=0.11.1) +514 more potentially affected by CVE-2026-40897 via mathjs (>=13.1.1, <=15.1.1)
mathjs NPM version =13.1.1, =2.6.0, =0.1.0, =1.3.0, =2.0.0, =0.2.6, =0.3.0, =7.0.0, =7.0.0, =0.1.14, =0.13.1, =5.0.95, =1.0.0, =1.3.0-alpha.0 - @antsoo-lib/components 0.0.1 - @antsoo-lib/hooks 0.0.1 and more Source cves: CVE-2026-40897 Source advisory: SNYK:JS-MATHJS-16097976...
@20syldev/api (>=2.6.0, <=2.8.0), @aalis/plugin-tool-math (>=0.1.0, <=0.11.1) +514 more potentially affected by CVE-2026-40897 via mathjs (>=13.1.1, <=15.1.1)
mathjs NPM version =13.1.1, =2.6.0, =0.1.0, =1.3.0, =2.0.0, =0.2.6, =0.3.0, =7.0.0, =7.0.0, =0.1.14, =0.13.1, =5.0.95, =1.0.0, =1.3.0-alpha.0 - @antsoo-lib/components 0.0.1 - @antsoo-lib/hooks 0.0.1 and more Source cves: CVE-2026-40897 Source advisory: OSV:GHSA-29QV-4J9F-FJW5...
3id-test-helper (>=1.0.0, <=1.0.4), @00ssh/erdnest (>=0.2.19, <=0.2.23) +3599 more potentially affected by CVE-2026-41242 via protobufjs (>=6.8.0, <=6.11.4)
protobufjs NPM version =6.8.0, =1.0.0, =0.2.19, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =2.1.0, =0.0.8-alpha.0, =0.1.0, =0.1.8-fix.3, =0.0.2, =0.0.1, =0.0.14 - @account-coddle/pokerfire 0.0.1 and more Source cves: CVE-2026-41242 Source advisory: SNYK:JS-PROTOBUFJS-16094665...
0xgasless-mcp (>=1.0.3, <=1.0.5), 4d-vector-search (>=1.0.0, <=1.0.1) +3213 more potentially affected by CVE-2026-41182 via langsmith (>=0.0.5, <=0.5.4)
langsmith NPM version =0.0.5, =1.0.3, =1.0.0, =1.11.0, =0.0.5, =0.0.1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.6, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2026-41182 Source advisory: SNYK:JS-LANGSMITH-16082039...