@inkeep/agents-cli (>=0.73.0, <=0.80.7), @inkeep/agents-core (>=0.73.1, <=0.80.7) +4 more potentially affected by CVE-2026-53517 via @better-auth/oauth-provider (1.6.9)

@better-auth/oauth-provider NPM version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-cli =0.73.0, =0.73.1, =0.73.0, =0.73.1, =0.73.1, =0.73.1, =0.80.7 Source cves: CVE-2026-5351...

@inkeep/agents-cli (>=0.73.0, <=0.80.7), @inkeep/agents-core (>=0.73.1, <=0.80.7) +4 more potentially affected by CVE-2026-53518 via @better-auth/oauth-provider (1.6.9)

@better-auth/oauth-provider NPM version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-cli =0.73.0, =0.73.1, =0.73.0, =0.73.1, =0.73.1, =0.73.1, =0.80.7 Source cves: CVE-2026-5351...

@inkeep/agents-cli (>=0.73.0, <=0.80.7), @inkeep/agents-core (>=0.73.1, <=0.80.7) +4 more potentially affected by CVE-2026-53518 via @better-auth/oauth-provider (1.6.9)

@better-auth/oauth-provider NPM version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-cli =0.73.0, =0.73.1, =0.73.0, =0.73.1, =0.73.1, =0.73.1, =0.80.7 Source cves: CVE-2026-5351...

@inkeep/agents-cli (>=0.73.0, <=0.80.7), @inkeep/agents-core (>=0.73.1, <=0.80.7) +4 more potentially affected by CVE-2026-53518 via @better-auth/oauth-provider (1.6.9)

@better-auth/oauth-provider NPM version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-cli =0.73.0, =0.73.1, =0.73.0, =0.73.1, =0.73.1, =0.73.1, =0.80.7 Source cves: CVE-2026-5351...

@inkeep/agents-cli (>=0.73.0, <=0.80.7), @inkeep/agents-core (>=0.73.1, <=0.80.7) +4 more potentially affected by CVE-2026-53517 via @better-auth/oauth-provider (1.6.9)

@better-auth/oauth-provider NPM version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-cli =0.73.0, =0.73.1, =0.73.0, =0.73.1, =0.73.1, =0.73.1, =0.80.7 Source cves: CVE-2026-5351...

@inkeep/agents-cli (>=0.73.0, <=0.80.7), @inkeep/agents-core (>=0.73.1, <=0.80.7) +4 more potentially affected by CVE-2026-53517 via @better-auth/oauth-provider (1.6.9)

@better-auth/oauth-provider NPM version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-cli =0.73.0, =0.73.1, =0.73.0, =0.73.1, =0.73.1, =0.73.1, =0.80.7 Source cves: CVE-2026-5351...

CVE-2026-8321

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

CVE-2026-8321

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

CVE-2026-8321

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

CVE-2026-8321 inkeep agents runAuth Middleware runAuth.ts createDevContext authentication bypass

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

CVE-2026-8321

CVE-2026-8321 affects inkeep agents 0.58.14. The vulnerability lies in the function createDevContext of agents-api/src/middleware/runAuth.ts within the runAuth Middleware, where a manipulation can lead to authentication bypass via an alternate channel. This can be exploited remotely, and public e...

CVE-2026-8321 inkeep agents runAuth Middleware runAuth.ts createDevContext authentication bypass

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

CVE-2026-8321

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

CVE-2026-8321: Authentication Bypass Using an Alternate Path or Channel

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

Inkeep Agents Authorization Issue Vulnerability

Inkeep Agents is an open-source tool developed by Inkeep, designed for building AI agents that support visual drag-and-drop operations and TypeScript SDKs. Version 0.58.14 of Inkeep Agents contains a vulnerability related to authorization. This vulnerability originates from the createDevContext...

PT-2026-39756

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

@inkeep/agents-cli (>=0.0.0-chat-to-edit-20251119071712, <=0.72.2), @inkeep/agents-core (>=0.0.0-dev-20260410224321, <=0.73.0) +7 more potentially affected by CVE-2026-41427 via @better-auth/oauth-provider (1.5.5)

@better-auth/oauth-provider NPM version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-cli =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260410224321,...

@inkeep/agents-cli (>=0.0.0-chat-to-edit-20251119071712, <=0.72.2), @inkeep/agents-core (>=0.0.0-dev-20260410224321, <=0.73.0) +7 more potentially affected by CVE-2026-41427 via @better-auth/oauth-provider (1.5.5)

@better-auth/oauth-provider NPM version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-cli =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260410224321,...

@inkeep/agents-cli (>=0.0.0-chat-to-edit-20251119071712, <=0.72.2), @inkeep/agents-core (>=0.0.0-dev-20260410224321, <=0.73.0) +7 more potentially affected by CVE-2026-41427 via @better-auth/oauth-provider (1.5.5)

@better-auth/oauth-provider NPM version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on @better-auth/oauth-provider and may be impacted: - @inkeep/agents-cli =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260410224321,...

@deno/sandbox (>=0.0.9, <=0.6.0), @ekairos/story (>=1.21.56-beta.0, <=1.21.83-beta.0) +40 more potentially affected by CVE-2026-22775 via devalue (>=5.1.1, <=5.6.0)

devalue NPM version =5.1.1, =0.0.9, =1.21.56-beta.0, =2.3.97, =1.1.53, =2.0.0, =1.2.263, =3.1.3, =0.0.1, =0.1.0, =0.1.0, =0.36.0, =0.1.0, =0.34.0, =0.34.0, =0.34.0, =0.41.1 and more Source cves: CVE-2026-22775 Source advisory: SNYK:JS-DEVALUE-14982189...