binaexperts (>=0.4.1, <=0.7.0), booookscore (0.1.3) +9 more potentially affected by CVE-2026-59890 via setuptools (68.2.0)

setuptools PYPI version 68.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - binaexperts =0.4.1, =0.0.136, =1.1.6, =0.3.0, =1.0.0, =0.1.0a8, =0.0.125, =0.0.221 Source cves: CVE-2026-59890 Source advisory:...

@briefhq/cli (>=0.1.6, <=0.1.31-beta.0), @cobuild/review-gpt (>=0.5.10, <=0.5.154) +5 more potentially affected by CVE-2026-59703 via repomix (>=1.1.0, <=1.16.0)

repomix NPM version =1.1.0, =0.1.6, =0.5.10, =0.1.0-next.1, =1.0.0, =0.1.0, =0.63.0, =0.63.3 Source cves: CVE-2026-59703 Source advisory: SNYK:JS-REPOMIX-17905425...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +726 more potentially affected by CVE-2026-59895 via hono (>=4.0.0, <=4.12.26)

hono NPM version =4.0.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.4 and more Source cves: CVE-2026-59895 Source advisory: MEND:CVE-2026-59895...

@0xwork/connect (0.1.8), @chrysb/alphaclaw (>=0.8.7, <=0.9.16) +10 more potentially affected by CVE-2026-59261 via openclaw (>=0.0.1, <=2026.5.27)

openclaw NPM version =0.0.1, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =2.1.8, =0.1.0, =0.1.38, =1.0.0, =3.3.2, =3.3.7 Source cves: CVE-2026-59261 Source advisory: MEND:CVE-2026-59261...

@0xgraph/cli (>=0.0.1, <=0.2.1), @actra-development-oss/redux-persistable (>=2.0.0, <=3.0.0) +655 more potentially affected by CVE-2026-59879 via immutable (>=4.0.0-rc.1, <=4.3.8)

immutable NPM version =4.0.0-rc.1, =0.0.1, =2.0.0, =0.2.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.0.1, =0.11.8-rc.0, =0.1.0, =0.3.3 - @alfresco/adf-testing 6.0.0-A.2-8258 - @alys-chain/graph-alys-cli 0.88.0 and more Source cves: CVE-2026-59879 Source advisory: MEND:CVE-2026-59879...

@adobe/helix-docx2md (1.9.29), @adobe/helix-importer (>=3.4.141, <=3.4.143) +33 more potentially affected by CVE-2026-59868 via js-yaml (>=5.0.0, <=5.1.0)

js-yaml NPM version =5.0.0, =3.4.141, =2.2.62, =1.0.8, =0.2.12, =0.2.12, =0.2.12, =0.2.13, =0.2.12, =0.2.16, =0.2.14, =0.2.12, =0.2.17 and more Source cves: CVE-2026-59868 Source advisory: MEND:CVE-2026-59868...

02.aula (1.0.0), 0xrtest (1.0.0) +10444 more potentially affected by CVE-2026-59869 via js-yaml (>=4.0.0, <=4.2.0)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.14.0 and more Source cves: CVE-2026-59869 Source advisory: MEND:CVE-2026-59869...

async-sender (3.0.0), hagworm (>=5.9.23, <=5.10.15) potentially affected by CVE-2026-53533 via aiosmtplib (3.0.1)

aiosmtplib PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender 3.0.0 - hagworm =5.9.23, =5.10.15 Source cves: CVE-2026-53533 Source advisory: OSV:GHSA-V3Q9-HJ7J-63HQ...

async-sender (>=1.4.0, <=1.4.1), ax (>=0.39.0, <=0.42.0) potentially affected by CVE-2026-53533 via aiosmtplib (1.1.0)

aiosmtplib PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender =1.4.0, =0.39.0, =0.42.0 Source cves: CVE-2026-53533 Source advisory: OSV:GHSA-V3Q9-HJ7J-63HQ...

ratex-layout (0.0.3) potentially affected by CVE-2026-53531 via ratex-parser (0.0.3)

ratex-parser CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ratex-parser and may be impacted: - ratex-layout 0.0.3 Source cves: CVE-2026-53531 Source advisory: OSV:GHSA-4W5H-HX6R-28Q7...

ratex-layout (0.0.3) potentially affected by CVE-2026-53530 via ratex-parser (0.0.3)

ratex-parser CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ratex-parser and may be impacted: - ratex-layout 0.0.3 Source cves: CVE-2026-53530 Source advisory: OSV:GHSA-4HGP-59H5-GVRJ...

cognee-community-hybrid-adapter-falkor (0.2.0), cognee-community-vector-adapter-qdrant (0.2.0) potentially affected by CVE-2026-58473 via cognee (0.5.1)

cognee PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-falkor 0.2.0 - cognee-community-vector-adapter-qdrant 0.2.0 Source cves: CVE-2026-58473 Source advisory:...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +146 more potentially affected by CVE-2026-53518 via better-auth (>=1.0.0-canary.2, <=1.6.10)

better-auth NPM version =1.0.0-canary.2, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.2.5, =1.9.7 and more Source cves: CVE-2026-53518 Source advisory: GHSA-7W99-5WM4-3G79...

@agent-native/core (>=0.26.5, <=0.47.1), @automate.ax/components-core (>=0.1.3, <=0.3.1) +29 more potentially affected by CVE-2026-53517 via @better-auth/memory-adapter (>=1.6.0, <=1.6.10)

@better-auth/memory-adapter NPM version =1.6.0, =0.26.5, =0.1.3, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.11.3, =1.6.0-depup.0, =0.73.0, =0.73.0, =0.79.1 and more Source cves: CVE-2026-53517 Source advisory: SNYK:JS-BETTERAUTHMEMORYADAPTER-17889814...

coreutils (>=0.0.14, <=0.0.16), findutils (>=0.3.0, <=0.4.0) +104 more potentially affected by unknown CVE via uucore (>=0.0.4, <=0.0.17)

uucore CARGO version =0.0.4, =0.0.14, =0.3.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8, =0.0.1, =0.0.8, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.16 and more Source cves: unknown CVE Source advisory: OSV:GHSA-FQF6-GXHH-2XHW...

@absinthe/graphql-playground (>=1.3.1, <=1.3.5), @absinthe/socket (>=0.1.0, <=0.2.0) +51 more potentially affected by CVE-2026-56812 via phoenix (>=1.3.0, <=1.5.12)

phoenix NPM version =1.3.0, =1.3.1, =0.1.0, =0.1.2, =0.1.0, =0.1.2, =1.7.5, =1.7.26, =1.8.1, =1.7.26, =1.5.6, =1.8.1, =1.8.1, =1.7.26, =1.7.26, =1.5.6, =1.5.8 and more Source cves: CVE-2026-56812 Source advisory: SNYK:JS-PHOENIX-17889828...

@edgebrix-sdk/react (>=0.0.58, <=0.0.74), @kimia_software/tellair-wc (0.0.0) +16 more potentially affected by CVE-2026-56812 via phoenix (>=1.6.2, <=1.6.16)

phoenix NPM version =1.6.2, =0.0.58, =0.8.10, =0.1.8, =0.1.5, =0.1.0-rc0, =0.8.1, =0.0.1, =0.0.1, =0.0.0-PR-1--182e1d3, =19.0.0-beta.1, =1.0.23, =0.3.0, =0.1.1, =0.1.6 and more Source cves: CVE-2026-56812 Source advisory: SNYK:JS-PHOENIX-17889828...

@knocklabs/client (>=0.21.6, <=0.22.1), @knocklabs/expo (>=0.5.0, <=0.6.9) +8 more potentially affected by CVE-2026-56812 via phoenix (>=1.8.0, <=1.8.7)

phoenix NPM version =1.8.0, =0.21.6, =0.5.0, =0.11.0, =0.13.0, =0.8.0, =0.0.2, =0.0.1, =0.0.2, =0.0.1, =2.1.8, =2.5.4 Source cves: CVE-2026-56812 Source advisory: SNYK:JS-PHOENIX-17889828...

@abtnode/analytics (>=1.16.13-beta-0086a35d, <=1.17.13-beta-20261019-013222-23d4b329), @abtnode/auth (>=1.3.13, <=1.16.37-beta-20250104-120451-e4049aeb) +146 more potentially affected by CVE-2026-56812 via phoenix (>=1.7.2, <=1.7.21)

phoenix NPM version =1.7.2, =1.16.13-beta-0086a35d, =1.3.13, =1.8.3, =1.16.6-beta-08670107, =1.8.3, =1.16.33-beta-20241105-141729-e4608175, =1.3.2, =1.0.35, =1.16.33-beta-20241105-141729-e4608175, =1.0.2, =1.16.33-beta-20241105-141729-e4608175, =1.16.33-beta-20241105-141729-e4608175, =1.0.0,...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2025-46719 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2025-46719 Source advisory: OSV:GHSA-9F4F-JV96-8766...