@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54328 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54328 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54327 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

com.github.fmcejudo:quarkus-eureka (>=1.0.0, <=1.1.1), com.github.fmcejudo:quarkus-eureka-deployment (>=1.0.0, <=1.1.1) +78 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-undertow (>=3.0.0.alpha1, <=3.20.6.1)

io.quarkus:quarkus-undertow MAVEN version =3.0.0.alpha1, =1.0.0, =1.0.0, =2.0.0-alpha1, =2.4.1, =2.4.1, =2.0.0-alpha1, =2.4.1, =2.4.1, =2.0.0, =2.0.0, =24.0.0, =24.8.3, =9.2.3, =9.6.3 and more Source cves: CVE-2026-50559 Source advisory: SNYK:JAVA-IOQUARKUS-17375080...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54326 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@agentai2027/openclaw-zh (>=2026.5.2-zh, <=2026.5.7-zh), @cdogclaw/openclaw (2026.4.14) +40 more potentially affected by CVE-2026-54326 via @mariozechner/pi-coding-agent (>=0.27.9, <=0.73.0)

@mariozechner/pi-coding-agent NPM version =0.27.9, =2026.5.2-zh, =0.8.7, =2026.5.5-cmg.1, =2.2.4, =4.0.0, =2026.4.10-8, =0.1.0-next.27, =0.1.91, =0.27.0, =2026.4.5-nightly.202604080005, =1.0.0, =0.2.0, =0.0.0-main.4994268, =2.3.9 and more Source cves: CVE-2026-54326 Source advisory:...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +19 more potentially affected by CVE-2026-56317 via nuxt (>=4.0.3, <=4.4.6)

nuxt NPM version =4.0.3, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =0.5.0-rc.1, =0.6.0-rc.3 and more Source cves: CVE-2026-56317 Source advisory: OSV:GHSA-M3Q2-P4FW-W38M...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +90 more potentially affected by CVE-2026-56317 via nuxt (>=3.0.0, <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-56317 Source advisory: OSV:GHSA-M3Q2-P4FW-W38M...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +90 more potentially affected by CVE-2026-56317 via nuxt (>=3.0.0, <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-56317 Source advisory: SNYK:JS-NUXT-17353899...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +20 more potentially affected by CVE-2026-56317 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-56317 Source advisory: SNYK:JS-NUXT-17353899...

autollm (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-49468 via litellm (0.8.4)

litellm PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autollm =0.0.1, =0.0.3 Source cves: CVE-2026-49468 Source advisory: OSV:GHSA-4XPC-PV4P-PM3W...

copilot-ollama-windows (>=1.0.0, <=1.0.2), dhscan-agent (>=0.1.7, <=0.1.8) +12 more potentially affected by CVE-2026-49468 via litellm-proxy-extras (>=0.1.1, <=0.4.48)

litellm-proxy-extras PYPI version =0.1.1, =1.0.0, =0.1.7, =0.31.0, =1.0.0, =0.2.0, =2.13.3, =0.50.0, =0.5.0, =0.1.0, =0.8.0, =1.1.2, =0.1.10, =0.3.18, =0.3.19 Source cves: CVE-2026-49468 Source advisory: SNYK:PYTHON-LITELLMPROXYEXTRAS-17373070...

autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2026-49468 via litellm (0.1.7713)

litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2026-49468 Sourc...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2026-49468 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2026-49468 Source advisory: OSV:GHSA-4XPC-PV4P-PM3W...

africanwhisper (>=0.2.8, <=0.9.0), aishell (>=2023.3.3, <=2023.4.11) +189 more potentially affected by unknown CVE via yt-dlp (>=2021.9.2, <=2026.3.17)

yt-dlp PYPI version =2021.9.2, =0.2.8, =2023.3.3, =0.1.0, =0.3.0, =0.1.0, =1.1.5, =0.0.4, =0.1.7, =1.0.0, =0.9.0, =1.4.0, =2024.3.25, =1.1.1, =1.3.2 and more Source cves: unknown CVE Source advisory: GHSA-69QJ-PVH9-C5WG...

003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +28815 more potentially affected by CVE-2026-48779 via ws (>=1.1.0, <=5.2.2)

ws NPM version =1.1.0, =1.0.0-3, =0.0.3, =1.1.0, =0.9.9, =1.0.0, =0.0.1, =0.11.3, =0.1.0, =1.0.2, =1.0.7 and more Source cves: CVE-2026-48779 Source advisory: MEND:CVE-2026-48779...

music-tool-kit (>=1.3.22, <=1.3.24) potentially affected by CVE-2026-50574 via yt-dlp (2024.5.26)

yt-dlp PYPI version 2024.5.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.22, =1.3.24 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

basketcase (1.0.1) potentially affected by CVE-2026-50574 via yt-dlp (2021.10.22)

yt-dlp PYPI version 2021.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 1.0.1 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

arbi-tr-frontend (>=0.1.0, <=0.1.1), comiccrawler (>=2024.3.25, <=2024.12.9) +33 more potentially affected by CVE-2026-50574 via yt-dlp (2024.12.23)

yt-dlp PYPI version 2024.12.23 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - arbi-tr-frontend =0.1.0, =2024.3.25, =1.2.1, =0.0.1.2, =0.3.0, =0.1.0, =0.1.0, =0.0.23, =0.1.5, =0.0.11, =0.0.39 - mseep-owl 0.0.2 and more...

pytube-tool (0.1.2) potentially affected by CVE-2026-50574 via yt-dlp (2024.11.18)

yt-dlp PYPI version 2024.11.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - pytube-tool 0.1.2 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...