devtools-proxy (>=0.0.2, <=0.0.3) potentially affected by CVE-2026-50269 via aiohttp (1.1.4)

aiohttp PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - devtools-proxy =0.0.2, =0.0.3 Source cves: CVE-2026-50269 Source advisory: OSV:PYSEC-2026-2106...

@aaravpos/appointment-barber-booking (>=1.0.0, <=5.0.0), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.9) +207 more potentially affected by CVE-2026-53663 via react-router (>=7.12.0, <=7.15.0)

react-router NPM version =7.12.0, =1.0.0, =1.0.1, =1.0.0, =0.0.9-alpha-20260107202750-16b04dcbaa92c7fc2bbb580dbc1da723c76a5225, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.5.2, =2026.511.1, =1.0.1-LOG-1857-ui-tooltip-defined-mode.0, =26.11.15 and more Source cves: CVE-2026-53663 Source...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +926 more potentially affected by CVE-2026-54293 via nltk (>=2.0.4, <=3.9.4)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-54293 Source advisory: MEND:CVE-2026-54293...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +1004 more potentially affected by CVE-2026-53540 via python-multipart (>=0.0.5, <=0.0.30)

python-multipart PYPI version =0.0.5, =0.5.3, =0.1.0, =0.2.1, =0.2.0, =0.5.1.dev0, =3.2.0, =1.5.2, =0.1.1, =0.1.4b1, =1.0.0, =1.5.5 - agbenchmark 0.0.10 and more Source cves: CVE-2026-53540 Source advisory: MEND:CVE-2026-53540...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +1004 more potentially affected by CVE-2026-53538 via python-multipart (>=0.0.5, <=0.0.29)

python-multipart PYPI version =0.0.5, =0.5.3, =0.1.0, =0.2.1, =0.2.0, =0.5.1.dev0, =3.2.0, =1.5.2, =0.1.1, =0.1.4b1, =1.0.0, =1.5.5 - agbenchmark 0.0.10 and more Source cves: CVE-2026-53538 Source advisory: MEND:CVE-2026-53538...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +1004 more potentially affected by CVE-2026-53539 via python-multipart (>=0.0.5, <=0.0.29)

python-multipart PYPI version =0.0.5, =0.5.3, =0.1.0, =0.2.1, =0.2.0, =0.5.1.dev0, =3.2.0, =1.5.2, =0.1.1, =0.1.4b1, =1.0.0, =1.5.5 - agbenchmark 0.0.10 and more Source cves: CVE-2026-53539 Source advisory: MEND:CVE-2026-53539...

0x20bf (0.0.1), 2keys (0.5.1) +3565 more potentially affected by CVE-2026-54273 via aiohttp (>=0.6.4, <=3.14.0)

aiohttp PYPI version =0.6.4, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-54273 Source advisory: MEND:CVE-2026-54273...

0x20bf (0.0.1), 2keys (0.5.1) +3565 more potentially affected by CVE-2026-54279 via aiohttp (>=0.6.4, <=3.14.0)

aiohttp PYPI version =0.6.4, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-54279 Source advisory: MEND:CVE-2026-54279...

-temp-electron-manager-somiibo (0.0.200), 0xpass (>=0.0.2, <=0.0.8) +22868 more potentially affected by CVE-2026-54269 via protobufjs (>=2.0.4, <=7.6.2)

protobufjs NPM version =2.0.4, =0.0.2, =0.0.1, =1.0.0, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =2.0.0, =1.0.0-alpha.3, =1.0.0, =0.0.1, =0.0.1, =0.1.5 and more Source cves: CVE-2026-54269 Source advisory: MEND:CVE-2026-54269...

@ablehi/automation-app-build (>=0.1.0, <=0.3.6), @ablehi/automation-app-cli (>=0.1.0, <=0.3.5) +136 more potentially affected by CVE-2026-53571 via vite (>=8.0.0, <=8.0.14)

vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =0.1.0, =1.1.2, =1.2.0, =3.0.1-alpha.0, =0.1.0, =0.1.0, =3.3.0, =11.17.0-depup.0, =11.17.2-depup.0 and more Source cves: CVE-2026-53571 Source advisory: MEND:CVE-2026-53571...

@slidev-react/cli (>=0.4.6, <=0.5.0), @slidev-react/node (>=0.4.6, <=0.5.0) +1 more potentially affected by CVE-2026-53632 via vite-plus (>=0.1.11, <=0.1.19)

vite-plus NPM version =0.1.11, =0.4.6, =0.4.6, =3.15.0-alpha.1776572752298, =3.19.3 Source cves: CVE-2026-53632 Source advisory: MEND:CVE-2026-53632...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +38 more potentially affected by CVE-2026-52725 via @angular/core (>=19.0.0-next.9, <=19.2.20)

@angular/core NPM version =19.0.0-next.9, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.0.5, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.0.0-beta-20260114160010, =0.0.1-canary.0.0, =1.0.0-canary.1 - @ismailadekambi/shared 1.0.0 and more Source cves:...

02.aula (1.0.0), 0xrtest (1.0.0) +10345 more potentially affected by CVE-2026-53550 via js-yaml (>=4.0.0, <=4.1.1)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.14.0 and more Source cves: CVE-2026-53550 Source advisory: MEND:CVE-2026-53550...

@dexwilt/mf-node (2.7.48) potentially affected by unknown CVE via @dexwilt/node-fetch (2.7.3)

@dexwilt/node-fetch NPM version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on @dexwilt/node-fetch and may be impacted: - @dexwilt/mf-node 2.7.48 Source cves: unknown CVE Source advisory: OSV:MAL-2026-11203...

org.apache.nifi:nifi-system-test-suite (1.16.0) potentially affected by CVE-2026-54665 via org.apache.nifi:nifi-jetty (1.16.0)

org.apache.nifi:nifi-jetty MAVEN version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-jetty and may be impacted: - org.apache.nifi:nifi-system-test-suite 1.16.0 Source cves: CVE-2026-54665 Source advisory:...

a2a-acl (0.0.14), a2a-agentspeak (0.0.14) +572 more potentially affected by CVE-2026-12798 via litellm (>=1.0.0, <=1.82.2)

litellm PYPI version =1.0.0, =0.3.5, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.1.0, =0.51.4, =0.4.1, =0.5.3 and more Source cves: CVE-2026-12798 Source advisory: GHSA-C693-X898-5G4H...

a2a-acl (0.0.14), a2a-agentspeak (0.0.14) +572 more potentially affected by CVE-2026-12796 via litellm (>=1.0.0, <=1.82.2)

litellm PYPI version =1.0.0, =0.3.5, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.1.0, =0.51.4, =0.4.1, =0.5.3 and more Source cves: CVE-2026-12796 Source advisory: GHSA-W2MH-QQ9Q-453X...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2026-12797 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2026-12797 Source advisory: OSV:GHSA-P897-VF7J-F5H8...

vimgpt (0.1.2) potentially affected by CVE-2026-12798 via litellm (0.1.618)

litellm PYPI version 0.1.618 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - vimgpt 0.1.2 Source cves: CVE-2026-12798 Source advisory: OSV:GHSA-C693-X898-5G4H...

prompt2model (0.0.9) potentially affected by CVE-2026-12798 via litellm (0.1.583)

litellm PYPI version 0.1.583 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - prompt2model 0.0.9 Source cves: CVE-2026-12798 Source advisory: OSV:GHSA-C693-X898-5G4H...