-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +31042 more potentially affected by CVE-2026-55602 via http-proxy-middleware (>=0.16.0, <=2.0.9)

http-proxy-middleware NPM version =0.16.0, =1.0.1, =1.1.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

@angular-architects/build-angular (16.2.0-next.2), @angular-builders/custom-esbuild (>=17.1.0-beta.0, <=19.1.0) +168 more potentially affected by CVE-2026-55388 via piscina (>=4.0.0, <=4.9.2)

piscina NPM version =4.0.0, =17.1.0-beta.0, =16.0.0-beta.0, =18.2.6-RC-1, =16.0.0, =16.2.0-next.0, =18.0.0-next.3, =2.2.7-bb.6, =2.1.5, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.17-dev.40 and more Source cves: CVE-2026-55388 Source advisory: SNYK:JS-PISCINA-17817071...

@angular-architects/build-angular (16.2.0-next.2), @angular-builders/custom-esbuild (>=17.1.0-beta.0, <=19.1.0) +168 more potentially affected by CVE-2026-55388 via piscina (>=4.0.0, <=4.9.2)

piscina NPM version =4.0.0, =17.1.0-beta.0, =16.0.0-beta.0, =18.2.6-RC-1, =16.0.0, =16.2.0-next.0, =18.0.0-next.3, =2.2.7-bb.6, =2.1.5, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.17-dev.40 and more Source cves: CVE-2026-55388 Source advisory: GHSA-X9G3-XRWR-CWFG...

@angular-architects/build-angular (16.2.0-next.2), @angular-builders/custom-esbuild (>=17.1.0-beta.0, <=19.1.0) +168 more potentially affected by CVE-2026-55388 via piscina (>=4.0.0, <=4.9.2)

piscina NPM version =4.0.0, =17.1.0-beta.0, =16.0.0-beta.0, =18.2.6-RC-1, =16.0.0, =16.2.0-next.0, =18.0.0-next.3, =2.2.7-bb.6, =2.1.5, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.17-dev.40 and more Source cves: CVE-2026-55388 Source advisory: OSV:GHSA-X9G3-XRWR-CWFG...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-55886 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-55886 Source advisory: OSV:GHSA-VPMM-X3FM-QR5C...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-55886 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-55886 Source advisory: SNYK:JS-JODIT-17375134...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +2 more potentially affected by CVE-2026-53863 via openclaw (>=2026.4.5, <=2026.4.12)

openclaw NPM version =2026.4.5, =0.8.7, =0.1.0, =0.1.8 - morpho-vault-manager 0.1.0 - openclaw-morpho-vault-manager 0.2.0 Source cves: CVE-2026-53863 Source advisory: SNYK:JS-OPENCLAW-17394002...

@0xwork/connect (0.1.8), @chrysb/alphaclaw (>=0.8.7, <=0.9.16) +8 more potentially affected by CVE-2026-53843 via openclaw (>=2026.4.5, <=2026.5.24-beta.2)

openclaw NPM version =2026.4.5, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =2.1.8, =0.1.0, =0.1.38, =0.1.39 - morpho-vault-manager 0.1.0 - openclaw-morpho-vault-manager 0.2.0 Source cves: CVE-2026-53843 Source advisory: SNYK:JS-OPENCLAW-17394003...

@0xwork/connect (0.1.8), @chrysb/alphaclaw (>=0.8.7, <=0.9.16) +8 more potentially affected by CVE-2026-53864 via openclaw (>=2026.4.5, <=2026.5.24-beta.2)

openclaw NPM version =2026.4.5, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =2.1.8, =0.1.0, =0.1.38, =0.1.39 - morpho-vault-manager 0.1.0 - openclaw-morpho-vault-manager 0.2.0 Source cves: CVE-2026-53864 Source advisory: OSV:GHSA-CCWH-WWPP-6WG5...

@chrysb/alphaclaw (>=0.8.7, <=0.9.16), @ericmmj/openclaw-weixin (>=2.2.4, <=2.2.5) +7 more potentially affected by CVE-2026-53866 via openclaw (>=2026.4.5, <=2026.5.7)

openclaw NPM version =2026.4.5, =0.8.7, =2.2.4, =4.0.0, =2.1.8, =0.1.0, =0.1.38, =0.1.39 - morpho-vault-manager 0.1.0 - openclaw-morpho-vault-manager 0.2.0 Source cves: CVE-2026-53866 Source advisory: SNYK:JS-OPENCLAW-17394007...

mymol (1.0.0) potentially affected by CVE-2026-48817 via starlette (0.45.2)

starlette PYPI version 0.45.2 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - mymol 1.0.0 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

aiowebthing (>=0.1.0, <=0.1.25), apiera (0.0.11) +41 more potentially affected by CVE-2026-48817 via starlette (0.13.8)

starlette PYPI version 0.13.8 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aiowebthing =0.1.0, =0.0.1, =0.8.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.9.0, =0.1.0, =0.1.3 - gino-starlette 0.1.1 and more Source cve...

agentmesh-orchestrator (>=0.1.0, <=0.1.7), algoflow (0.1.0) +82 more potentially affected by CVE-2026-48817 via starlette (0.32.0.post1)

starlette PYPI version 0.32.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agentmesh-orchestrator =0.1.0, =0.1.2, =0.1.0, =0.1.2, =1.0.200, =1.0.401, =0.1.0, =0.1.115 and more Source cves: CVE-2026-48817 Source...

abuse-whois (0.2.0), ackack (0.1.0) +166 more potentially affected by CVE-2026-48817 via starlette (0.17.1)

starlette PYPI version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - abuse-whois 0.2.0 - ackack 0.1.0 - aiondao =0.1.0, =0.1.0a0, =0.3.0, =0.14.3, =0.1.13, =0.14.0, =0.1.0a5, =0.1.0, =0.1.0, =0.1.1, =0.1.1,...

async-easy-utils (>=0.0.1, <=0.1.3), busylight-for-humans (>=0.4.0, <=0.4.3) +22 more potentially affected by CVE-2026-48817 via starlette (0.13.4)

starlette PYPI version 0.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - async-easy-utils =0.0.1, =0.4.0, =0.1.0, =0.57.0, =2.0.0, =1.0.1, =1.0.0b50, =0.1.0, =0.1.0, =0.1.16, =0.0.1.dev1, =2.0.0a1, =0.1.5, =0.1.7 a...

abuse-whois (0.1.0), adze-modeler (0.0.1) +131 more potentially affected by CVE-2026-48817 via starlette (0.16.0)

starlette PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - abuse-whois 0.1.0 - adze-modeler 0.0.1 - aioauth-fastapi 0.0.1 - anyforce =0.9.0, =0.0.6, =0.0.1, =0.0.6, =1.0.0, =1.0.0, =0.2.0, =1.2.3,...

agent-api-server (>=2.1.7, <=2.2.1), agent-playbook (>=0.1.0, <=0.1.2) +140 more potentially affected by CVE-2026-48817 via starlette (0.49.3)

starlette PYPI version 0.49.3 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agent-api-server =2.1.7, =0.1.0, =0.1.0, =0.5.0b2, =0.2.47, =1.4.0a20251029, =1.4.0a20251029, =1.3.46, =0.1.10, =0.4.0, =0.4.0, =0.1.1rc61,...

aad-fastapi (>=1.0.0, <=1.1.2), aad-fastapi-dl37 (1.0.3) +255 more potentially affected by CVE-2026-48817 via starlette (0.14.2)

starlette PYPI version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aad-fastapi =1.0.0, =0.0.1, =1.0.2, =3.0.0, =3.0.0a1, =0.1.5, =0.1.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-48817...

agenta (>=0.50.5, <=0.64.0), agentstack-cli (>=0.4.0rc1, <=0.4.3) +104 more potentially affected by CVE-2026-48818 via starlette (0.47.3)

starlette PYPI version 0.47.3 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agenta =0.50.5, =0.4.0rc1, =0.0.7, =1.0.0, =1.1.0, =1.0.4, =0.3.4rc4, =6.4.21, =1.0.0, =0.0.6, =1.1.8, =0.12.0, =0.0.10, =0.7.0, =1.7.0 and...

agent-api-server (>=2.1.7, <=2.2.1), agent-playbook (>=0.1.0, <=0.1.2) +140 more potentially affected by CVE-2026-48818 via starlette (0.49.3)

starlette PYPI version 0.49.3 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agent-api-server =2.1.7, =0.1.0, =0.1.0, =0.5.0b2, =0.2.47, =1.4.0a20251029, =1.4.0a20251029, =1.3.46, =0.1.10, =0.4.0, =0.4.0, =0.1.1rc61,...