-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +28161 more potentially affected by CVE-2026-13311 via shell-quote (>=1.3.3, <=1.8.4)

shell-quote NPM version =1.3.3, =1.0.1, =1.1.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

02.aula (1.0.0), 0xrtest (1.0.0) +10530 more potentially affected by CVE-2026-59869 via js-yaml (>=4.0.0, <=4.2.0)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 and more Source cves: CVE-2026-59869 Source advisory: OSV:GHSA-52CP-R559-CP3M...

@whalent/agent (0.3.259) potentially affected by unknown CVE via @whalent/agent-core (0.3.259)

@whalent/agent-core NPM version 0.3.259 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.259 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.276) potentially affected by unknown CVE via @whalent/agent-core (0.3.276)

@whalent/agent-core NPM version 0.3.276 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.276 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3502 more potentially affected by CVE-2026-54490 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54490 Source advisory: OSV:GHSA-MP7J-QC5W-4988...

libcrux-aead (>=0.0.4-pre.1, <=0.0.8) potentially affected by unknown CVE via libcrux-aesgcm (>=0.0.4, <=0.0.8-rc.2)

libcrux-aesgcm CARGO version =0.0.4, =0.0.4-pre.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0210...

delay_timer (0.11.6), libp2p-swarm-test (0.1.0) potentially affected by unknown CVE via event-listener (>=5.3.0, <=5.4.1)

event-listener CARGO version =5.3.0, =5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on event-listener and may be impacted: - delaytimer 0.11.6 - libp2p-swarm-test 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0221...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by CVE-2026-53514 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: CVE-2026-53514 Source advisory: OSV:GHSA-FMH4-WCC4-5JM3...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by CVE-2026-53512 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: CVE-2026-53512 Source advisory: OSV:GHSA-PW9M-5JXM-XR6H...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35381 via uu_cut (>=0.0.14, <=0.0.16)

uucut CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35381 Source advisory: OSV:GHSA-PMFC-4WJJ-GMHX...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35363 via uu_rm (>=0.0.14, <=0.0.16)

uurm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35363 Source advisory: OSV:GHSA-89P7-7CQ3-HHR2...

altv (>=15.0.0-dev.0, <=16.1.1), altv_internal_core_resource (>=15.0.0-dev.0, <=16.1.1) +396 more potentially affected by unknown CVE via cxx (>=1.0.1, <=1.0.131)

cxx CARGO version =1.0.1, =15.0.0-dev.0, =15.0.0-dev.0, =15.0.0-dev2, =15.0.0-dev42, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1, =0.26.0 - autocxx-idalib 0.30.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0202...

dicom-transfer-syntax-registry (>=0.8.2, <=0.9.1), dset (>=0.1.0, <=0.1.2) +2 more potentially affected by unknown CVE via jxl-oxide (>=0.4.0, <=0.11.4)

jxl-oxide CARGO version =0.4.0, =0.8.2, =0.1.0, =0.1.1, =0.4.0, =0.5.0-rc0 Source cves: unknown CVE Source advisory: OSV:GHSA-66M8-C62J-H6V5...

@activepieces/piece-json (>=0.1.6, <=0.1.7), @bifravst/muninn-proto (>=5.0.0, <=5.2.0) +109 more potentially affected by CVE-2026-52746 via jsonata (>=2.0.0, <=2.1.0)

jsonata NPM version =2.0.0, =0.1.6, =5.0.0, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =1.0.0, =0.0.2, =1.0.0, =1.0.0, =3.3.0 and more Source cves: CVE-2026-52746 Source advisory: OSV:GHSA-86VW-MFPG-WWV9...

@grackle-ai/cli (>=0.107.2, <=0.132.1), @grackle-ai/plugin-orchestration (>=0.97.0, <=0.132.1) +1 more potentially affected by unknown CVE via @grackle-ai/plugin-core (>=0.97.0, <=0.132.1)

@grackle-ai/plugin-core NPM version =0.97.0, =0.107.2, =0.97.0, =0.107.2, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F9FF-5X35-7GFW...

a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.8.16, <=0.10.15) +2710 more potentially affected by unknown CVE via quick-xml (>=0.1.9, <=0.40.1)

quick-xml CARGO version =0.1.9, =0.1.0, =0.8.16, =0.3.1, =0.44.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0195...

aabb_physics (>=0.1.0, <=0.1.1), aad (>=0.2.1, <=0.9.0) +2097 more potentially affected by unknown CVE via ttf-parser (>=0.1.0, <=0.25.1)

ttf-parser CARGO version =0.1.0, =0.1.0, =0.2.1, =0.1.0, =0.1.0, =0.0.2, =0.1.2, =0.1.1, =0.1.26, =0.1.23, =0.1.9, =0.2.0, =0.0.10, =0.0.18 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0192...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argo-cd, kots, flux-source-controller-fips, argo-workflows-fips, external-dns, chisel, vitess, docker-machine-driver-harvester, flux-source-controller, omnictl-multiarch-fips, zot, coder, grafana, rancher, nerdctl, argo-workflows, trivy-operator, opentofu,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: pulumi-language-java, kargo, cilium-cli, gitlab-runner, witness, go-discover, nuclei, policy-controller, snyk-cli, loki, trivy, ko, tekton-chains, prometheus-operator, flux-notification-controller, terraform-provider-tls, ksops, datadog-agent,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium-cli, trivy-operator, kubernetes-dashboard, kaf, telegraf, flux-image-automation-controller, chisel, cloud-provider-aws, skaffold, zot, opentelemetry-collector, flux-source-controller, kine, falco-no-driver, zarf, k3s, fscrypt, prometheus, rancher, external-dns...