ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +19 more potentially affected by CVE-2026-56259 via crawl4ai (>=0.3.731, <=0.8.5)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.7.5b6 and more Source cves: CVE-2026-56259 Source advisory: OSV:PYSEC-2026-3448...

tamilai (0.0.2) potentially affected by CVE-2026-61426 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-61426 Source advisory: SNYK:JS-PRAISONAI-17950764...

@openinc/parse-server-opendash (>=4.0.0, <=4.1.2) potentially affected by CVE-2026-61448 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.2 Source cves: CVE-2026-61448 Source advisory: SNYK:JS-PARSESERVER-17950968...

ai-usvg (0.47.0), anyrender_svg (>=0.1.0, <=0.5.0) +262 more potentially affected by unknown CVE via rustybuzz (>=0.1.1, <=0.20.1)

rustybuzz CARGO version =0.1.1, =0.1.0, =0.0.2, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =1.20.0, =1.23.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0206...

ai.philterd:phileas (>=4.0.0, <=4.4.0), ai.philterd:phileas-pheye-onnx (1.0.0) +1736 more potentially affected by CVE-2026-34481 +1 more via org.apache.logging.log4j:log4j-api (2.26.0)

org.apache.logging.log4j:log4j-api MAVEN version 2.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.logging.log4j:log4j-api and may be impacted: - ai.philterd:phileas =4.0.0, =1.0.0.ee-20260711132804, =1.0.0.ee-20260711132804,...

io.kaoto.forage:forage-vectordb-mariadb (>=1.5.0, <=1.6.1) potentially affected by CVE-2026-55405 via dev.langchain4j:langchain4j-mariadb (1.13.0-beta23)

dev.langchain4j:langchain4j-mariadb MAVEN version 1.13.0-beta23 is affected by a known vulnerability. The following packages have a transitive dependency on dev.langchain4j:langchain4j-mariadb and may be impacted: - io.kaoto.forage:forage-vectordb-mariadb =1.5.0, =1.6.1 Source cves: CVE-2026-5540...

@injectivelabs/wallet-base (1.20.21), @injectivelabs/wallet-core (1.20.21) +7 more potentially affected by unknown CVE via @injectivelabs/sdk-ts (1.20.21)

@injectivelabs/sdk-ts NPM version 1.20.21 is affected by a known vulnerability. The following packages have a transitive dependency on @injectivelabs/sdk-ts and may be impacted: - @injectivelabs/wallet-base 1.20.21 - @injectivelabs/wallet-core 1.20.21 - @injectivelabs/wallet-cosmos 1.20.21 -...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16175 more potentially affected by CVE-2026-39244 via adm-zip (>=0.1.4, <=0.5.18)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-39244 Source advisory: GHSA-XCPC-8H2W-3J85...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16175 more potentially affected by CVE-2026-39244 via adm-zip (>=0.1.4, <=0.5.18)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-39244 Source advisory: OSV:GHSA-XCPC-8H2W-3J85...

1password-node (>=3.0.0-rc.0, <=3.0.0), 2020-react (>=1.2.2, <=1.2.6) +9799 more potentially affected by CVE-2026-39244 via adm-zip (>=0.1.4, <=0.5.17)

adm-zip NPM version =0.1.4, =3.0.0-rc.0, =1.2.2, =1.0.0, =1.0.0, =3.4.0, =1.17.6-next.0, =0.0.89, =1.0.9, =0.0.1, =0.0.1, =0.1.2-alpha.0, =0.2.0, =0.1.0, =1.0.1, =1.0.2 and more Source cves: CVE-2026-39244 Source advisory: SNYK:JS-ADMZIP-17954277...

org.webjars.npm:karma-phantomjs2-launcher (0.3.2), org.webjars.npm:phantomjs (>=1.9.17, <=1.9.18) +4 more potentially affected by CVE-2026-39244 via org.webjars.npm:adm-zip (>=0.4.4, <=0.5.9)

org.webjars.npm:adm-zip MAVEN version =0.4.4, =1.9.17, =2.52.0, =2.53.3 Source cves: CVE-2026-39244 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17954278...

@libp2p/daemon (>=6.0.27-160a24585, <=6.0.27-b7c6dc0f2), @libp2p/daemon-server (>=9.0.27-160a24585, <=9.0.27-b7c6dc0f2) potentially affected by CVE-2026-49866 via @libp2p/gossipsub (>=16.0.0-160a24585, <=16.0.0-b7c6dc0f2)

@libp2p/gossipsub NPM version =16.0.0-160a24585, =6.0.27-160a24585, =9.0.27-160a24585, =9.0.27-b7c6dc0f2 Source cves: CVE-2026-49866 Source advisory: GHSA-CWC9-CP4J-MCVV...

20231122-npm (1.0.0), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +5990 more potentially affected by CVE-2026-5078 via morgan (>=1.2.0, <=1.10.1)

morgan NPM version =1.2.0, =1.0.2, =1.0.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.0, =12.1.0, =12.2.2 and more Source cves: CVE-2026-5078 Source advisory: OSV:GHSA-4VJ7-5MJ6-JM8M...

20231122-npm (1.0.0), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +5990 more potentially affected by CVE-2026-5078 via morgan (>=1.2.0, <=1.10.1)

morgan NPM version =1.2.0, =1.0.2, =1.0.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.0, =12.1.0, =12.2.2 and more Source cves: CVE-2026-5078 Source advisory: GHSA-4VJ7-5MJ6-JM8M...

-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +21693 more potentially affected by CVE-2026-39243 via decompress (>=4.0.0, <=4.2.1)

decompress NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =2.2.0-alpha.3 and more Source cves: CVE-2026-39243 Source advisory: OSV:GHSA-JWP9-9V96-94MX...

-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +21693 more potentially affected by CVE-2026-39243 via decompress (>=4.0.0, <=4.2.1)

decompress NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =2.2.0-alpha.3 and more Source cves: CVE-2026-39243 Source advisory: GHSA-JWP9-9V96-94MX...

-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +28574 more potentially affected by CVE-2026-39243 via decompress (>=0.1.6, <=4.2.1)

decompress NPM version =0.1.6, =1.0.0, =0.0.1, =0.0.4 - 1095h-cli 1.0.1 - 10secondsofcode-custom 1.0.0 and more Source cves: CVE-2026-39243 Source advisory: SNYK:JS-DECOMPRESS-17937340...

-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +28574 more potentially affected by CVE-2026-39246 via decompress (>=0.1.6, <=4.2.1)

decompress NPM version =0.1.6, =1.0.0, =0.0.1, =0.0.4 - 1095h-cli 1.0.1 - 10secondsofcode-custom 1.0.0 and more Source cves: CVE-2026-39246 Source advisory: SNYK:JS-DECOMPRESS-17937327...

alphapulldown (>=0.21.2, <=0.30.7), arisu (>=0.1.1, <=0.1.2) +51 more potentially affected by CVE-2026-49851 via mistune (2.1.0)

mistune PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - alphapulldown =0.21.2, =0.1.1, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =4.2.93, =2.0.4, =5.2.0a0, =0.0.1, =3.7.1, =0.8.0, =0.8.5 and more Source cves:...

aiagents4pharma (>=1.15.0, <=1.44.0), pypdftotext (>=0.0.6, <=0.0.9) +3 more potentially affected by CVE-2026-54651 via pypdf (5.2.0)

pypdf PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - aiagents4pharma =1.15.0, =0.0.6, =1.0.1, =1.0.1, =1.0.5 Source cves: CVE-2026-54651 Source advisory: OSV:GHSA-G9XF-7F8Q-9MCJ...