@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai_kit/workflow-world (>=0.1.0, <=0.2.0) +115 more potentially affected by unknown CVE via devalue (>=5.0.0, <=5.9.2)

devalue NPM version =5.0.0, =0.0.1, =0.1.0, =7.0.0, =7.0.0, =0.3.0, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7, =0.1.1, =4.3.15, =0.2.0, =3.8.7, =4.0.10 and more Source cves: unknown CVE Source advisory: SNYK:JS-DEVALUE-20416738...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai_kit/workflow-world (>=0.1.0, <=0.2.0) +115 more potentially affected by unknown CVE via devalue (>=5.0.0, <=5.9.2)

devalue NPM version =5.0.0, =0.0.1, =0.1.0, =7.0.0, =7.0.0, =0.3.0, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7, =0.1.1, =4.3.15, =0.2.0, =3.8.7, =4.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4Q55-J62X-FR9H...

@angular-architects/build-angular (16.2.0-next.2), @angular-builders/custom-esbuild (>=17.1.0-beta.0, <=19.1.0) +170 more potentially affected by CVE-2026-102992 via piscina (>=4.0.0, <=4.9.3)

piscina NPM version =4.0.0, =17.1.0-beta.0, =16.0.0-beta.0, =18.2.6-RC-1, =16.0.0, =16.2.0-next.0, =18.0.0-next.3, =2.2.7-bb.6, =2.1.5, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.17-dev.39 and more Source cves: CVE-2026-102992 Source advisory: OSV:GHSA-67C8-PQHQ-4RMX...

@a11d/lit-monaco-editor (>=0.0.1, <=0.1.2), @accelbyte/sdk-legal (6.3.7) +588 more potentially affected by CVE-2026-75838 via dompurify (>=3.4.13, <=3.4.15)

dompurify NPM version =3.4.13, =0.0.1, =6.4.45, =0.13.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.0.0-canary.3862684, =1.0.0-beta.20250128110837, =5.2.0-next.125, =5.2.0-next.132 and more Source cves: CVE-2026-75838 Source advisory: SNYK:JS-DOMPURIFY-20361471...

@142vip/egg-grpc-client (>=0.0.1-alpha.3, <=0.0.1-alpha.4), @142vip/egg-grpc-server (>=0.0.1-alpha.3, <=0.0.1-alpha.5) +248 more potentially affected by CVE-2026-101915 via @grpc/grpc-js (>=1.14.0, <=1.14.4)

@grpc/grpc-js NPM version =1.14.0, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.2, =0.26.4, =3.2.4, =1.13.0, =2.0.2, =0.1.0-alpha.0, =0.1.0, =2.1.0, =2.2.2, =2.0.0, =0.0.4, =0.0.28 and more Source cves: CVE-2026-101915 Source advisory: OSV:GHSA-F596-WHHP-79R4...

0xtrails (>=0.0.0-20251106131028, <=0.18.6), 123pancli (1.0.0) +4512 more potentially affected by CVE-2026-101905 via axios (>=1.15.2, <=1.19.0)

axios NPM version =1.15.2, =0.0.0-20251106131028, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =0.0.1-alpha.25 and more...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +18031 more potentially affected by CVE-2026-101902 via axios (>=1.0.0, <=1.19.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-20251106131028, =1.0.53, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-101902 Source advisory: OSV:GHSA-9FR6-4GFG-395G...

0xpay-cc-sdk (>=0.0.8, <=0.1.0), 0xtrails (>=0.0.0-20251106131028, <=0.18.6) +7656 more potentially affected by CVE-2026-101898 via axios (>=1.13.0, <=1.19.0)

axios NPM version =1.13.0, =0.0.8, =0.0.0-20251106131028, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.2.6 and more Source cves: CVE-2026-101898 Source advisory:...

0xpay-cc-sdk (>=0.0.8, <=0.1.0), 0xtrails (>=0.0.0-20251106131028, <=0.18.6) +7656 more potentially affected by CVE-2026-101901 via axios (>=1.13.0, <=1.19.0)

axios NPM version =1.13.0, =0.0.8, =0.0.0-20251106131028, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.0.0-develop-20260120180031, =8.13.1-beta.0, =6.13.1-beta-bump-deps.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.2.0, =0.2.6 and more Source cves: CVE-2026-101901 Source advisory:...

@queenanya/invite (>=1.0.0, <=5.0.0), @queenanya/modules (>=5.0.1-0, <=6.1.0) potentially affected by unknown CVE via @queenanya/baileys (9.10.1)

@queenanya/baileys NPM version 9.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @queenanya/baileys and may be impacted: - @queenanya/invite =1.0.0, =5.0.1-0, =6.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-QUEENANYABAILEYS-20336218...

@renztyz/baileys (1.0.0) potentially affected by unknown CVE via @sakataoffc/baileys (9.0.0)

@sakataoffc/baileys NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sakataoffc/baileys and may be impacted: - @renztyz/baileys 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-SAKATAOFFCBAILEYS-20336188...

@datastream/validate (>=0.0.4, <=0.0.38), @dearmrzhang/customs-mcp-server (>=0.1.2, <=1.1.0) +15 more potentially affected by CVE-2026-86472 via fast-uri (>=2.1.0, <=2.3.0)

fast-uri NPM version =2.1.0, =0.0.4, =0.1.2, =0.0.1, =0.0.1, =3.1.0-rc.0, =0.2.0, =0.2.0, =0.2.0, =0.0.1, =0.0.0, =1.0.0, =3.0.0, =1.7.0, =1.8.0 and more Source cves: CVE-2026-86472 Source advisory: OSV:GHSA-HRR3-GC8F-F4QJ...

@1amsheldon/mail-mcp (>=1.5.0, <=2.0.1), @27works/posto (>=1.0.0, <=2.0.2) +894 more potentially affected by CVE-2026-100699 via nodemailer (>=9.1.0, <=10.0.8)

nodemailer NPM version =9.1.0, =1.5.0, =1.0.0, =1.6.3, =0.3.64, =0.1.0, =1.0.2, =0.1.0, =0.2.2, =2.0.2, =2.0.0, =0.2.2-rc.0, =1.0.5, =1.0.6 and more Source cves: CVE-2026-100699 Source advisory: OSV:GHSA-G57G-F23G-4646...

ag-toolkit (0.7.0), one-way-git-sync (6.0.49) +1 more potentially affected by CVE-2026-102829 via @simple-git/argv-parser (2.0.0)

@simple-git/argv-parser NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @simple-git/argv-parser and may be impacted: - ag-toolkit 0.7.0 - one-way-git-sync 6.0.49 - simple-git =4.0.0, =4.0.1 Source cves: CVE-2026-102829 Source advisory...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16431 more potentially affected by CVE-2026-102282 via adm-zip (>=0.1.4, <=0.6.0)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-102282 Source advisory: OSV:GHSA-J5F4-CC29-5X44...

3xhaustpi (>=0.1.3, <=0.2.5), @0x0.bug/pi-coding-agent (>=1.0.0, <=1.0.9) +1566 more potentially affected by CVE-2026-18149 via undici (>=8.0.0, <=8.10.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.0, =0.3.5, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a -...

@01.software/cli (>=0.1.1, <=0.10.3), @01.software/sdk (>=0.1.0-dev.260119.0a66443, <=0.29.0) +1905 more potentially affected by CVE-2026-84890 via undici (>=7.15.0, <=7.29.0)

undici NPM version =7.15.0, =0.1.1, =0.1.0-dev.260119.0a66443, =1.0.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =1.0.0, =1.3.2, =1.7.1 and more Source cves: CVE-2026-84890 Source advisory: OSV:GHSA-3XPG-4RPP-HHHM...

@37chengshan/ompweb (>=0.3.5, <=5.1.9), @abox-dev/cli (>=0.1.0, <=0.2.1) +232 more potentially affected by CVE-2026-85152 via undici (>=8.10.0, <=8.10.1)

undici NPM version =8.10.0, =0.3.5, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.8.9, =1.0.0, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =0.79.0, =0.85.0 and more Source cves: CVE-2026-85152 Source advisory: OSV:GHSA-VP8M-P9JH-Q5PM...

@adatechnology/conversation-module (>=0.2.0, <=0.4.0), @adobe/spacecat-shared-brand-client (>=1.1.31, <=1.1.35) +304 more potentially affected by CVE-2026-92599 via joi (>=18.0.0, <=18.2.5)

joi NPM version =18.0.0, =0.2.0, =1.1.31, =1.0.0, =1.8.6, =2.61.4, =1.4.60, =1.6.11, =1.19.1, =1.11.2, =2.2.1, =1.0.0, =1.12.0, =3.14.0, =3.19.0 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-92599 Source advisory: OSV:GHSA-6H2X-M376-MQJQ...

@0xsequence/web3-onboard-plugin (2.0.5), @0xzoz/tallyho (>=2.0.11, <=2.0.14) +1797 more potentially affected by CVE-2026-92599 via joi (>=17.2.0, <=17.13.6)

joi NPM version =17.2.0, =2.0.11, =0.1.6-alpha.2, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.16.17-beta-0213b250, =1.8.31, =1.1.12, =1.7.1, =1.8.31, =1.0.0, =1.16.34-beta-20241113-102431-65542b84 and more Source cves: CVE-2026-92599 Source advisory: OSV:GHSA-6H2X-M376-MQJQ...