@activeboxes/piece-gmail (0.8.1), @activeboxes/piece-imap (0.2.10) +97 more potentially affected by CVE-2026-59887 via linkify-it (>=5.0.0, <=5.0.1)

linkify-it NPM version =5.0.0, =0.6.0, =0.2.6, =0.0.1, =2026.7.1, =1.0.0, =1.0.6 - @autohive/cell-gmail 0.8.1 and more Source cves: CVE-2026-59887 Source advisory: SNYK:JS-LINKIFYIT-17901217...

@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +19 more potentially affected by CVE-2026-59731 via astro (>=6.0.0-beta.1, <=6.4.6)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =0.22.0, =1.4.1, =0.19.0, =0.19.0, =1.10.0, =1.12.1 - astro-crush 1.0.0 and more Source cves: CVE-2026-59731 Source advisory: SNYK:JS-ASTRO-17901336...

ai-shell (>=0.1.0, <=1.0.4), airut (>=0.25.5, <=0.27.0) +141 more potentially affected by CVE-2026-59928 via mistune (>=3.0.0rc5, <=3.2.1)

mistune PYPI version =3.0.0rc5, =0.1.0, =0.25.5, =0.9.5, =3.0.0rc3, =3.2.1b1, =1.0.1, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.2, =1.0.0.1, =0.0.1, =0.1.10, =0.1.20 and more Source cves: CVE-2026-59928 Source advisory: SNYK:PYTHON-MISTUNE-17895066...

@0xwork/connect (>=0.1.8, <=0.1.9), @actagent/fs-safe (0.3.0) +822 more potentially affected by CVE-2026-59874 via tar (>=7.0.0, <=7.5.17)

tar NPM version =7.0.0, =0.1.8, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.5.2-zh, =0.1.1, =0.1.1, =0.59.0, =2.17.11, =1.9.5, =1.0.2, =8.8.3, =8.11.4 and more Source cves: CVE-2026-59874 Source advisory: SNYK:JS-TAR-17909068...

@0xwork/connect (0.1.8), @chrysb/alphaclaw (>=0.8.7, <=0.9.16) +9 more potentially affected by CVE-2026-59261 via openclaw (>=2026.4.5, <=2026.5.27)

openclaw NPM version =2026.4.5, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =2.1.8, =0.1.0, =0.1.38, =1.0.0, =1.3.1 Source cves: CVE-2026-59261 Source advisory: SNYK:JS-OPENCLAW-17905620...

0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +2037 more potentially affected by CVE-2026-59725 via engine.io (>=4.1.1, <=6.6.6)

engine.io NPM version =4.1.1, =1.0.49, =1.0.0, =0.0.28, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =1.2.1, =15.0.0, =1.0.1, =1.0.2 - @aaronconway7/create-gatsby-app 1.0.0 - @accio-cms/gatsby-starter-accio 0.0.1 and more Source cves: CVE-2026-59725 Source advisory: SNYK:JS-ENGINEIO-17900543...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +406 more potentially affected by CVE-2026-59896 via hono (>=4.11.8, <=4.12.26)

hono NPM version =4.11.8, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: CVE-2026-59896 Source advisory: SNYK:JS-HONO-17900542...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +643 more potentially affected by CVE-2026-59938 via pypdf (>=3.1.0, <=6.13.3)

pypdf PYPI version =3.1.0, =0.1.1, =0.9.1, =0.0.2, =0.0.1, =0.1.0, =0.1.4, =0.1.0a0.dev0, =0.2.0a0, =0.0.1, =0.1.0 and more Source cves: CVE-2026-59938 Source advisory: MEND:CVE-2026-59938...

arvados-cwl-runner (>=2.6.0rc3, <=2.7.4), db-classifier (0.0.2) +18 more potentially affected by CVE-2026-59926 via mistune (2.0.5)

mistune PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - arvados-cwl-runner =2.6.0rc3, =2.0.5, =4.1.0, =0.8.4, =2.1.1, =1.0.0, =2.2.0, =0.0.1, =2.4.1rc3, =8.3.20221209165047, =8.5.20240102191335 - sitefa...

nlm-ingestor (>=0.1.1, <=0.1.5), nvidia-modulus-sym (>=1.0.0, <=1.7.0) +1 more potentially affected by CVE-2026-59925 via mistune (2.0.3)

mistune PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - nlm-ingestor =0.1.1, =1.0.0, =1.7.0 - stattic 1.0.0 Source cves: CVE-2026-59925 Source advisory: OSV:PYSEC-2026-2213...

animalia (>=0.0.27, <=0.0.28), appyratus (>=3.0.3, <=3.0.4) +32 more potentially affected by CVE-2026-59925 via mistune (2.0.0rc1)

mistune PYPI version 2.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - animalia =0.0.27, =3.0.3, =0.1.0, =0.11.0, =0.20.7, =0.0.5, =0.0.13, =1.0.18, =0.0.1, =0.1.3 - datapackage-pipelines-spss 0.0.2a0 - embryo 3.0....

pyne-xmas-elves (>=0.4.0, <=0.7.1), tagy (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-59922 via mistune (0.8.1)

mistune PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - pyne-xmas-elves =0.4.0, =0.2.0, =0.3.0 Source cves: CVE-2026-59922 Source advisory: OSV:PYSEC-2026-2210...

microbiome-toolbox (>=0.0.8, <=0.0.11), predictnow-client (>=0.0.1, <=0.0.9) potentially affected by CVE-2026-59890 via setuptools (50.3.0)

setuptools PYPI version 50.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - microbiome-toolbox =0.0.8, =0.0.1, =0.0.9 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

aiogram-inline-paginations (>=0.1.0, <=0.1.9), an-website (22.8.11) +24 more potentially affected by CVE-2026-59890 via setuptools (63.4.3)

setuptools PYPI version 63.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aiogram-inline-paginations =0.1.0, =0.1.0, =0.0.107, =1.1.18, =1.1.2, =0.1.1, =0.3.8, =0.0.14, =2.6.0, =1.0.2, =1.0.3 and more Source cves:...

file-reader-utility (>=0.3.0, <=0.5.0) potentially affected by CVE-2026-59890 via setuptools (60.1.0)

setuptools PYPI version 60.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - file-reader-utility =0.3.0, =0.5.0 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

stapy (>=0.2.6, <=0.3.0) potentially affected by CVE-2026-59890 via setuptools (59.3.0)

setuptools PYPI version 59.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - stapy =0.2.6, =0.3.0 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

an-website (22.6.11), vgs-api-client (>=0.0.1.dev202206171951, <=0.0.45) potentially affected by CVE-2026-59890 via setuptools (62.3.3)

setuptools PYPI version 62.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website 22.6.11 - vgs-api-client =0.0.1.dev202206171951, =0.0.45 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

catapult-api (0.6.3), cumulusci (>=3.44.0.dev1, <=3.44.0) potentially affected by CVE-2026-59890 via setuptools (58.0.3)

setuptools PYPI version 58.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - catapult-api 0.6.3 - cumulusci =3.44.0.dev1, =3.44.0 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

aidoc (>=0.1.0, <=0.1.5), astrohack (>=0.0.1, <=0.1.6) +115 more potentially affected by CVE-2026-59890 via setuptools (65.6.3)

setuptools PYPI version 65.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aidoc =0.1.0, =0.0.1, =0.96.0, =0.209.0, =1.1.31, =0.0.1a0, =0.1.1, =5.1.0, =0.1.4, =0.7.0, =0.1.0a1, =0.1.0, =0.2.4 - certifikadas8 0.1.1...

ai-enterprise-agent (>=0.0.2, <=0.0.9), aruba-dero (>=1.0.0, <=1.0.7) +59 more potentially affected by CVE-2026-59890 via setuptools (69.2.0)

setuptools PYPI version 69.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ai-enterprise-agent =0.0.2, =1.0.0, =1.15.7, =1.16.10, =0.0.190, =0.1.41, =0.1.36, =1.5.1, =3.1.0, =0.1.2, =0.1.0, =0.0.1, =0.0.2 and more...