@0xwork/connect (0.1.8), @chrysb/alphaclaw (>=0.8.7, <=0.9.16) +9 more potentially affected by CVE-2026-53864 via openclaw (>=0.0.1, <=2026.5.24-beta.2)

openclaw NPM version =0.0.1, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =2.1.8, =0.1.0, =0.1.38, =3.3.2, =3.3.7 Source cves: CVE-2026-53864 Source advisory: MEND:CVE-2026-53864...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +3 more potentially affected by CVE-2026-53854 via openclaw (>=0.0.1, <=2026.4.12)

openclaw NPM version =0.0.1, =0.8.7, =0.1.0, =3.3.2, =3.3.7 Source cves: CVE-2026-53854 Source advisory: MEND:CVE-2026-53854...

@chrysb/alphaclaw (>=0.8.7, <=0.9.14), @openclaw/kitchen-sink (0.2.5) +4 more potentially affected by CVE-2026-53845 via openclaw (>=0.0.1, <=2026.5.2)

openclaw NPM version =0.0.1, =0.8.7, =0.1.0, =3.3.2, =3.3.7 Source cves: CVE-2026-53845 Source advisory: MEND:CVE-2026-53845...

@chrysb/alphaclaw (>=0.8.7, <=0.9.16), @ericmmj/openclaw-weixin (>=2.2.4, <=2.2.5) +8 more potentially affected by CVE-2026-53840 via openclaw (>=0.0.1, <=2026.5.7)

openclaw NPM version =0.0.1, =0.8.7, =2.2.4, =4.0.0, =2.1.8, =0.1.0, =0.1.38, =3.3.2, =3.3.7 Source cves: CVE-2026-53840 Source advisory: MEND:CVE-2026-53840...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +126 more potentially affected by CVE-2026-41523 via vllm (>=0.1.3, <=0.21.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =0.0.38 and more Source cves: CVE-2026-41523 Source advisory: OSV:GHSA-Q8GQ-377P-JQ3R...

20190403-utils (1.0.0), 433bf (0.0.1) +7954 more potentially affected by CVE-2026-42089 via yeoman-environment (>=2.9.5, <=6.0.0)

yeoman-environment NPM version =2.9.5, =0.0.0, =0.1.0, =1.0.1-alpha.0, =2.0.0-beta.2, =1.18.0, =4.2.0, =6.0.0, =1.0.0, =1.0.0, =0.0.0, =0.2.46, =0.24.0 and more Source cves: CVE-2026-42089 Source advisory: MEND:CVE-2026-42089...

llm4data (>=0.0.1, <=0.0.6), openplugin (>=0.0.14, <=0.0.27) +1 more potentially affected by CVE-2026-55443 via langchain (0.0.178)

langchain PYPI version 0.0.178 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - llm4data =0.0.1, =0.0.14, =0.0.27 - permutate 0.0.10 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

baboons (0.1.0), kuroco-py (0.0.2) potentially affected by CVE-2026-55443 via langchain (0.0.323)

langchain PYPI version 0.0.323 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - baboons 0.1.0 - kuroco-py 0.0.2 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

langchain-visualizer (0.0.7), vcr-langchain (0.0.9) potentially affected by CVE-2026-55443 via langchain (0.0.76)

langchain PYPI version 0.0.76 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - langchain-visualizer 0.0.7 - vcr-langchain 0.0.9 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

qabot (>=0.2.5, <=0.2.6) potentially affected by CVE-2026-55443 via langchain (0.0.104)

langchain PYPI version 0.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - qabot =0.2.5, =0.2.6 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

ag-ui-langgraph (>=0.0.14, <=0.0.29), agent-builder (>=0.0.2, <=0.1.7) +136 more potentially affected by CVE-2026-55443 via langchain (>=1.0.0rc2, <=1.3.7)

langchain PYPI version =1.0.0rc2, =0.0.14, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.9.211, =0.1.0, =0.2.1, =0.2.0, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =3.9.3 and more Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

atom-llm (0.1.0), coauthor (0.0.10) +7 more potentially affected by CVE-2026-55443 via langchain (0.3.13)

langchain PYPI version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - atom-llm 0.1.0 - coauthor 0.0.10 - docksec =2026.2.23, =0.1.0, =0.1.2, =0.1.0, =1.0.0, =2.0.4 - zigent 0.0.2 Source cves: CVE-2026-55443 Sour...

admin-api-lib (>=3.2.0, <=3.4.0), agent-api-server (>=2.1.7, <=2.1.13) +14 more potentially affected by CVE-2026-55443 via langchain (0.3.28)

langchain PYPI version 0.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - admin-api-lib =3.2.0, =2.1.7, =0.1.80, =0.1.0, =1.0.2, =3.2.0, =0.1.24, =0.3.0, =1.0.0, =3.2.0, =3.2.0, =0.1.0, =0.1.1 and more Source cves:...

ai-review-assistant (>=0.1.0, <=0.4.0), archive-retriever (0.1.0) +28 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.1.23)

langchain-anthropic PYPI version 0.1.23 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - ai-review-assistant =0.1.0, =0.7.0, =0.0.5, =0.0.1, =0.0.1, =0.0.1.19, =0.0.2, =0.0.52, =0.3.0, =3.0.0, =4.5.4 and more...

bugbug (>=0.0.594, <=0.0.595), testrigor-codecake-cli (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.20)

langchain-anthropic PYPI version 0.3.20 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - bugbug =0.0.594, =0.1.0, =0.1.2 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

actuator-ai (>=0.1.0, <=0.1.1), agentiacap (>=0.1.31, <=0.1.37) +13 more potentially affected by CVE-2026-55443 via langchain (0.3.20)

langchain PYPI version 0.3.20 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - actuator-ai =0.1.0, =0.1.31, =0.0.6, =1.1.0, =1.0.0, =1.0.9, =1.0.0, =0.1.15, =1.1.2, =1.0.0, =1.0.0, =1.4.0 - synforge 0.1.0 - tools3 0.1.1...

code-qa (>=0.1.0, <=0.3.1) potentially affected by CVE-2026-55443 via langchain (0.0.187)

langchain PYPI version 0.0.187 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - code-qa =0.1.0, =0.3.1 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +18 more potentially affected by CVE-2026-54298 via astro (>=6.0.0-beta.1, <=6.4.4)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =1.4.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-54298 Source advisory: SNYK:JS-ASTRO-17356187...

@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +18 more potentially affected by CVE-2026-54298 via astro (>=6.0.0-beta.1, <=6.4.4)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =1.4.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-54298 Source advisory: OSV:GHSA-JRPJ-WCV7-9FH9...

@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +18 more potentially affected by CVE-2026-54299 via astro (>=6.0.0-beta.1, <=6.4.4)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =1.4.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-54299 Source advisory: OSV:GHSA-2PVR-WF23-7PC7...