a-data-processing (0.0.1), ab-data-processing (0.0.1) +643 more potentially affected by CVE-2026-59936 via pypdf (>=3.1.0, <=6.13.3)

pypdf PYPI version =3.1.0, =0.1.1, =0.9.1, =0.0.2, =0.0.1, =0.1.0, =0.1.4, =0.1.0a0.dev0, =0.2.0a0, =0.0.1, =0.1.0 and more Source cves: CVE-2026-59936 Source advisory: MEND:CVE-2026-59936...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +644 more potentially affected by CVE-2026-59935 via pypdf (>=3.1.0, <=6.14.1)

pypdf PYPI version =3.1.0, =0.1.1, =0.9.1, =0.0.2, =0.0.1, =0.1.0, =0.1.4, =0.1.0a0.dev0, =0.2.0a0, =0.0.1, =0.1.0 and more Source cves: CVE-2026-59935 Source advisory: MEND:CVE-2026-59935...

0xpwn (0.1.1), a2a-acl (0.0.14) +773 more potentially affected by CVE-2026-59819 via litellm (>=0.1.400, <=1.83.9)

litellm PYPI version =0.1.400, =0.3.5, =0.7.3, =1.0.1, =1.0.2, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.2.1.10062025 - agent-memory-server 0.15.0 - agent-opt 0.0.1 and more Source cves: CVE-2026-59819 Source advisory: MEND:CVE-2026-59819...

adapter-client (>=1.0.4, <=3.1.0), cafex (1.0.0) +43 more potentially affected by CVE-2026-58501 via zeep (>=4.0.0, <=4.3.2)

zeep PYPI version =4.0.0, =1.0.4, =0.2.0, =0.0.0, =0.1.0, =1.0.1, =2.0.0.dev1, =1.3.1, =4.3.11, =5.0.16 - djangoiransms 1.0.0 and more Source cves: CVE-2026-58501 Source advisory: MEND:CVE-2026-58501...

aegis-stack (>=0.8.0, <=0.15.1), aegis-stack-crawl4ai (0.1.0) +10 more potentially affected by CVE-2026-53951 via copier (>=9.6.0, <=9.14.3)

copier PYPI version =9.6.0, =0.8.0, =2.7.0, =1.6.0b0, =0.1.58, =4.12.2rc1, =4.12.2rc1, =5.0.0b2, =4.12.2rc1, =4.12.2rc1, =2.9.1, =2.51.0 Source cves: CVE-2026-53951 Source advisory: SNYK:PYTHON-COPIER-17895074...

@3kles/3kles-socketio (>=2.1.5, <=2.4.1), @5minds/processcube_engine (>=16.0.0-alpha.2, <=18.0.0-renovate-fc9b99-lz9hhvt1) +253 more potentially affected by CVE-2026-59724 via engine.io (>=6.5.1, <=6.6.6)

engine.io NPM version =6.5.1, =2.1.5, =16.0.0-alpha.2, =2.17.13, =1.16.10, =3.0.4, =2.0.28, =1.1.5-13, =0.1.0, =0.1.0, =0.1.0, =1.2.0, =12.0.1, =17.0.0 and more Source cves: CVE-2026-59724 Source advisory: SNYK:JS-ENGINEIO-17900560...

@adobe/helix-docx2md (1.9.29), @adobe/helix-importer (>=3.4.141, <=3.4.143) +33 more potentially affected by CVE-2026-59868 +1 more via js-yaml (>=5.0.0, <=5.1.0)

js-yaml NPM version =5.0.0, =3.4.141, =2.2.62, =1.0.8, =0.2.12, =0.2.12, =0.2.12, =0.2.13, =0.2.12, =0.2.16, =0.2.14, =0.2.12, =0.2.17 and more Source cves: CVE-2026-59868, CVE-2026-59869 Source advisory: SNYK:JS-JSYAML-17900092...

02.aula (1.0.0), 0xrtest (1.0.0) +10444 more potentially affected by CVE-2026-59869 via js-yaml (>=4.0.0, <=4.2.0)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.14.0 and more Source cves: CVE-2026-59869 Source advisory: SNYK:JS-JSYAML-17900054...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21421 more potentially affected by CVE-2026-59869 via js-yaml (>=3.0.0, <=3.14.2)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-59869 Source advisory: SNYK:JS-JSYAML-17900054...

org.webjars.npm:coveralls-next (4.2.2) potentially affected by CVE-2026-59869 via org.webjars.npm:js-yaml (4.1.0)

org.webjars.npm:js-yaml MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:js-yaml and may be impacted: - org.webjars.npm:coveralls-next 4.2.2 Source cves: CVE-2026-59869 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-1790005...

@0xwork/connect (>=0.1.8, <=0.1.9), @actagent/fs-safe (0.3.0) +818 more potentially affected by CVE-2026-59875 via tar (>=7.0.0, <=7.5.16)

tar NPM version =7.0.0, =0.1.8, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.5.2-zh, =0.1.1, =0.1.1, =0.59.0, =2.17.11, =1.9.5, =1.0.2, =8.8.3, =8.11.4 and more Source cves: CVE-2026-59875 Source advisory: SNYK:JS-TAR-17909225...

@agentbadge/mcp (0.1.9), @agentbadge/passport (>=0.1.8, <=0.2.1) +100 more potentially affected by CVE-2026-59876 via protobufjs (>=8.2.0, <=8.6.4)

protobufjs NPM version =8.2.0, =0.1.8, =0.1.1, =0.1.1, =1.16.0, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.1.0, =0.1.1 and more Source cves: CVE-2026-59876 Source advisory: SNYK:JS-PROTOBUFJS-17900554...

@0xwork/connect (>=0.1.8, <=0.1.9), @actagent/fs-safe (0.3.0) +827 more potentially affected by CVE-2026-59873 via tar (>=7.0.0, <=7.5.18)

tar NPM version =7.0.0, =0.1.8, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.5.2-zh, =0.1.1, =0.1.1, =0.59.0, =2.17.11, =1.9.5, =1.0.2, =8.8.3, =8.11.4 and more Source cves: CVE-2026-59873 Source advisory: SNYK:JS-TAR-17909152...

@adobe/aem-cli (>=16.21.1, <=16.21.2), @adobe/helix-docx2md (>=1.9.29, <=1.9.30) +49 more potentially affected by CVE-2026-59870 via js-yaml (>=5.0.0, <=5.2.0)

js-yaml NPM version =5.0.0, =16.21.1, =1.9.29, =3.4.141, =7.1.20, =2.2.62, =1.5.3, =1.0.8, =0.0.0-next-20260630092247, =0.0.0-next-20260630092247, =0.0.0-next-20260630092247, =0.0.0-next-20260824173136 and more Source cves: CVE-2026-59870 Source advisory: SNYK:JS-JSYAML-17900063...

@briefhq/cli (>=0.1.6, <=0.1.31-beta.0), @cobuild/review-gpt (>=0.5.10, <=0.5.154) +5 more potentially affected by CVE-2026-59702 via repomix (>=1.1.0, <=1.16.0)

repomix NPM version =1.1.0, =0.1.6, =0.5.10, =0.1.0-next.1, =1.0.0, =0.1.0, =0.63.0, =0.63.3 Source cves: CVE-2026-59702 Source advisory: SNYK:JS-REPOMIX-17905314...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1114 more potentially affected by CVE-2026-59877 via protobufjs (>=8.0.0, <=8.6.5)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.6.0, =0.8.0 and more Source cves: CVE-2026-59877 Source advisory: SNYK:JS-PROTOBUFJS-17900550...

@acedatacloud/nexior (>=3.26.0, <=3.142.0), @aliceo2/bookkeeping (>=1.9.1, <=1.15.0) +702 more potentially affected by CVE-2026-59877 via protobufjs (>=7.5.0, <=7.6.4)

protobufjs NPM version =7.5.0, =3.26.0, =1.9.1, =2.1.7-alpha-2, =0.1.0, =1.0.0-canary.15, =0.0.2, =0.0.1, =0.0.0-experimental-02e44603-20260603, =0.0.0-experimental-02e44603-20260603, =0.0.0-experimental-02e44603-20260603, =0.3.0, =0.0.1-alpha.1, =0.1.0, =1.0.1 and more Source cves: CVE-2026-5987...

@0xwork/connect (>=0.1.8, <=0.1.9), @actagent/fs-safe (0.3.0) +822 more potentially affected by CVE-2026-59871 via tar (>=7.0.0, <=7.5.17)

tar NPM version =7.0.0, =0.1.8, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.5.2-zh, =0.1.1, =0.1.1, =0.59.0, =2.17.11, =1.9.5, =1.0.2, =8.8.3, =8.11.4 and more Source cves: CVE-2026-59871 Source advisory: SNYK:JS-TAR-17909104...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +726 more potentially affected by CVE-2026-59895 via hono (>=4.0.0, <=4.12.26)

hono NPM version =4.0.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.4 and more Source cves: CVE-2026-59895 Source advisory: SNYK:JS-HONO-17900056...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +715 more potentially affected by CVE-2026-59897 via hono (>=4.3.6, <=4.12.26)

hono NPM version =4.3.6, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.4 and more Source cves: CVE-2026-59897 Source advisory: SNYK:JS-HONO-17900541...