vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-27484 via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-27484 Source advisory: OSV:GHSA-WH94-P5M6-MR7J...

@activepieces/piece-amazon-s3 (>=0.5.4 <=0.5.9), @activepieces/piece-amazon-ses (>=0.0.1 <=0.1.3) +1093 more potentially affected by CVE-2026-25896 via fast-xml-parser (>=5.0.1 <=5.3.4)

fast-xml-parser NPM version =5.0.1, =0.5.4, =0.0.1, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.7.16, =2.33.6, =1.4.37, =1.6.11, =1.7.1 and more Source cves: CVE-2026-25896 Source advisory: OSV:GHSA-M7JM-9GC2-MPF2...

5-ifc-check-cli (=1.0.0), 7ghost (>=4.11.2 <=4.11.46) +3882 more potentially affected by CVE-2026-25896 via fast-xml-parser (>=4.1.3 <=4.5.3)

fast-xml-parser NPM version =4.1.3, =4.11.2, =0.1.1, =0.0.2, =1.0.1, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2026-25896 Source advisory: OSV:GHSA-M7JM-9GC2-MPF2...

5-ifc-check-cli (=1.0.0), 7ghost (>=4.11.2 <=4.11.46) +3882 more potentially affected by CVE-2026-25896 via fast-xml-parser (>=4.1.3 <=4.5.3)

fast-xml-parser NPM version =4.1.3, =4.11.2, =0.1.1, =0.0.2, =1.0.1, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2026-25896 Source advisory: SNYK:JS-FASTXMLPARSER-15324289...

com.netflix.ndbench:ndbench-cli (>=0.3.12 <=0.7.4), com.netflix.ndbench:ndbench-geode-plugins (>=0.3.5 <=0.7.4) +35 more potentially affected by CVE-2026-2818 via org.springframework.data:spring-data-geode (>=1.0.0.INCUBATING-RELEASE <=2.7.5)

org.springframework.data:spring-data-geode MAVEN version =1.0.0.INCUBATING-RELEASE, =0.3.12, =0.3.5, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =3.0.0, =3.2.1...

003-gas-convert (=1.0.1), 0x-hunter-core (>=1.0.0 <=1.0.1-5) +15126 more potentially affected by CVE-2026-2739 via bn.js (>=0.10.1 <=4.12.0)

bn.js NPM version =0.10.1, =1.0.0, =0.0.3, =0.0.3, =0.0.11, =1.1.0, =0.0.2, =0.9.9, =0.10.33 - 108-gas-convert =1.0.0 - 2.typescript-init =1.0.0 - 260f-check-balance =1.0.0 - 260f-gas-convert =1.0.0 and more Source cves: CVE-2026-2739 Source advisory: OSV:GHSA-378V-28HJ-76WF...

vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-32060 via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-32060 Source advisory: OSV:GHSA-R5FQ-947M-XM57...

a2grunnerp (>=0.1.0 <=0.1.8), a4t-sale-discount (=5.0.2) +2919 more potentially affected by CVE-2026-27199 via werkzeug (>=0.10.1 <=3.1.5)

werkzeug PYPI version =0.10.1, =0.1.0, =1.0.2, =1.0.5, =0.10.3, =1.8.8, =0.3.1, =0.8.44.4, =4.2.0, =1.0.0, =0.4.0, =0.5.0 and more Source cves: CVE-2026-27199 Source advisory: OSV:GHSA-29VQ-49WR-VM6X...

@vevedh/bke-dsi-cacem (>=2.0.4 <=4.0.1), @xrengine/analytics (>=0.5.0 <=0.5.8) +2 more potentially affected by CVE-2026-27192 via @feathersjs/authentication-oauth (>=5.0.0-pre.10 <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27192 Source advisory: SNYK:JS-FEATHERSJSAUTHENTICATIONOAUTH-15325871...

@vevedh/bke-dsi-cacem (>=2.0.4 <=4.0.1), @xrengine/analytics (>=0.5.0 <=0.5.8) +2 more potentially affected by CVE-2026-27191 via @feathersjs/authentication-oauth (>=5.0.0-pre.10 <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27191 Source advisory: SNYK:JS-FEATHERSJSAUTHENTICATIONOAUTH-15325872...

nexus-corr-discovery (=0.0.1.post2) potentially affected by CVE-2026-27194 via dtale (=3.12.0)

dtale PYPI version =3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on dtale and may be impacted: - nexus-corr-discovery =0.0.1.post2 Source cves: CVE-2026-27194 Source advisory: SNYK:PYTHON-DTALE-15324282...

@abyedev/hono-dotenv (=1.0.0), @affectively/relay (>=5.0.0 <=6.0.1) +393 more potentially affected by unknown CVE via hono (>=0.5.10 <=4.11.1)

hono NPM version =0.5.10, =5.0.0, =0.1.1, =0.0.1, =0.0.2-a, =0.1.22, =1.1.1, =0.0.1, =1.7.2, =1.7.1, =0.2.1, =0.6.1, =0.5.2, =0.5.4 - @babylen/legion =0.1.7 - @barelyhuman/prev =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GQ3J-XVXP-8HRF...

vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-28394 via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-28394 Source advisory: OSV:GHSA-P536-VVPP-9MC8...

@armco/armory-react-components (>=0.0.23 <=0.0.43), @armco/svg-canvas (>=0.1.2 <=0.1.3) +10 more potentially affected by CVE-2026-25940 via jspdf (>=4.0.0 <=4.1.0)

jspdf NPM version =4.0.0, =0.0.23, =0.1.2, =1.0.8, =1.4.0, =0.5.129, =0.112.0-79, =0.111.0-7, =0.111.0-7, =0.111.0-7, =4.4.0, =4.4.1 - svgedit =7.4.1 Source cves: CVE-2026-25940 Source advisory: SNYK:JS-JSPDF-15322684...

360shitu (=0.1.0), @0soft/zero-material-ui (>=0.0.1 <=0.0.25) +2560 more potentially affected by CVE-2026-25940 via jspdf (>=1.0.272 <=4.1.0)

jspdf NPM version =1.0.272, =0.0.1, =1.0.0, =1.0.162, =1.0.0, =1.10.7, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.0.6-alpha-20250721082600-ce7ebb6451f30eea451674d42a9ab1b32b0d5c66, =1.0.0, =1.1.3 and more Source cves: CVE-2026-25940 Source advisory: OSV:GHSA-P5XG-68WR-HM3M...

com.netflix.ndbench:ndbench-cli (>=0.3.12 <=0.7.4), com.netflix.ndbench:ndbench-geode-plugins (>=0.3.5 <=0.7.4) +35 more potentially affected by CVE-2026-2817 via org.springframework.data:spring-data-geode (>=1.0.0.INCUBATING-RELEASE <=2.7.5)

org.springframework.data:spring-data-geode MAVEN version =1.0.0.INCUBATING-RELEASE, =0.3.12, =0.3.5, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =2.0.0.RELEASE, =3.0.0, =3.2.1...

@osdlabel/react (=0.0.1), @osdlabel/solid (=0.0.1) +1 more potentially affected by CVE-2026-27013 via fabric (=7.1.0)

fabric NPM version =7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fabric and may be impacted: - @osdlabel/react =0.0.1 - @osdlabel/solid =0.0.1 - osdlabel =0.0.1 Source cves: CVE-2026-27013 Source advisory: SNYK:JS-FABRIC-15317311...

vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-27009 via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-27009 Source advisory: OSV:GHSA-37GC-85XM-2WW6...

vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-27008 via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-27008 Source advisory: OSV:GHSA-H7F7-89MM-PQH6...

vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-27007 via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-27007 Source advisory: OSV:GHSA-XXVH-5HWJ-42PP...