@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +444 more potentially affected by CVE-2026-1525 via undici (>=7.0.0, <=7.22.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.26.4, =0.0.33, =0.0.1, =1.0.0, =21.0.0-rc.2, =21.0.0-rc.2, =0.5.0, =1.0.1-dev.120, =0.1.0, =0.1.2 and more Source cves: CVE-2026-1525 Source advisory: OSV:GHSA-2MJP-6Q6P-2QXM...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2039 more potentially affected by CVE-2026-1525 via undici (>=6.0.0, <=6.23.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2026-1525 Source advisory: GHSA-2MJP-6Q6P-2QXM...

blake-streams (0.1.0), cs_mwc-libp2p (0.35.3) +41 more potentially affected by CVE-2026-32314 via yamux (>=0.1.9, <=0.10.2)

yamux CARGO version =0.1.9, =0.20.0, =2.0.0-alpha.3, =0.4.0, =0.2.0, =0.20.0, =0.36.0, =0.16.0, =0.1.0, =0.1.1, =0.15.0, =0.19.1 and more Source cves: CVE-2026-32314 Source advisory: OSV:GHSA-VXX9-2994-Q338...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +84 more potentially affected by CVE-2026-105782 via scrapy (>=1.4.0, <=2.14.1)

scrapy PYPI version =1.4.0, =0.4.0, =0.1.1, =0.1.2, =0.0.3, =1.1.9, =2.8.3, =0.0.1.dev1, =1.0.6, =1.2.1.20160901, =0.2.0, =0.0.1, =0.0.5, =0.0.2, =0.0.5 and more Source cves: CVE-2026-105782 Source advisory: GHSA-CWXJ-RR6W-M6W7...

@alfresco/adf-testing (6.0.0-A.2-8258), @algolia/coquille (>=0.0.2, <=0.0.13) +362 more potentially affected by CVE-2026-32141 via flatted (>=3.0.1, <=3.3.4)

flatted NPM version =3.0.1, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =0.0.10, =0.0.11, =0.0.4, =1.0.0, =1.0.0, =0.0.20, =0.0.19, =1.2.2, =1.5.8 and more Source cves: CVE-2026-32141 Source advisory: OSV:GHSA-25H7-PFQ9-P65F...

@afidos/nestjs-event-notifications (>=2.2.1, <=2.2.2), @mieweb/wikigdrive (>=2.15.0, <=2.17.1) +3 more potentially affected by CVE-2026-26954 via @nyariv/sandboxjs (>=0.5.3, <=0.8.25)

@nyariv/sandboxjs NPM version =0.5.3, =2.2.1, =2.15.0, =0.2.0, =11.0.0, =12.0.1 Source cves: CVE-2026-26954 Source advisory: SNYK:JS-NYARIVSANDBOXJS-15518695...

@afidos/nestjs-event-notifications (>=2.2.1, <=2.2.2), @mieweb/wikigdrive (>=2.15.0, <=2.17.1) +3 more potentially affected by CVE-2026-26954 via @nyariv/sandboxjs (>=0.5.3, <=0.8.25)

@nyariv/sandboxjs NPM version =0.5.3, =2.2.1, =2.15.0, =0.2.0, =11.0.0, =12.0.1 Source cves: CVE-2026-26954 Source advisory: OSV:GHSA-6R9F-759J-HJGV...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2039 more potentially affected by CVE-2026-1526 via undici (>=6.0.0, <=6.23.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2026-1526 Source advisory: SNYK:JS-UNDICI-15518068...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +445 more potentially affected by CVE-2026-1526 via undici (>=7.0.0-alpha.3, <=7.22.0)

undici NPM version =7.0.0-alpha.3, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.26.4, =0.0.33, =0.0.1, =1.0.0, =21.0.0-rc.2, =21.0.0-rc.2, =0.5.0, =1.0.1-dev.120, =0.1.0, =0.1.2 and more Source cves: CVE-2026-1526 Source advisory: SNYK:JS-UNDICI-15518068...

org.webjars.npm:actions__core (>=1.10.0, <=1.11.1), org.webjars.npm:actions__http-client (>=2.2.1, <=2.2.3) +14 more potentially affected by CVE-2026-2229 via org.webjars.npm:undici (>=4.12.2, <=5.29.0)

org.webjars.npm:undici MAVEN version =4.12.2, =1.10.0, =2.2.1, =0.1.16, =0.1.28 - org.webjars.npm:elasticelasticsearch 8.6.0 - org.webjars.npm:elastictransport 8.3.1 - org.webjars.npm:firebase 10.13.0 - org.webjars.npm:firebaseauth 1.7.7 - org.webjars.npm:firebaseauth-compat 0.5.12 -...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2039 more potentially affected by CVE-2026-2229 via undici (>=6.0.0, <=6.23.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2026-2229 Source advisory: SNYK:JS-UNDICI-15518070...

10xscale-agentflow-cli (0.1.5), a-beta-scalekit (>=2.3.0, <=4.0.2) +1510 more potentially affected by CVE-2026-32597 via pyjwt (>=2.0.0a2, <=2.11.0)

pyjwt PYPI version =2.0.0a2, =2.3.0, =0.1.0, =1.0.0, =1.8.8, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =1.2.0, =1.5.2, =1.5.6 and more Source cves: CVE-2026-32597 Source advisory: SNYK:PYTHON-PYJWT-15518059...

@alfresco/adf-testing (6.0.0-A.2-8258), @algolia/coquille (>=0.0.2, <=0.0.13) +362 more potentially affected by CVE-2026-32141 via flatted (>=3.0.1, <=3.3.4)

flatted NPM version =3.0.1, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =0.0.10, =0.0.11, =0.0.4, =1.0.0, =1.0.0, =0.0.20, =0.0.19, =1.2.2, =1.5.8 and more Source cves: CVE-2026-32141 Source advisory: SNYK:JS-FLATTED-15518041...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2039 more potentially affected by CVE-2026-1528 via undici (>=6.0.0, <=6.23.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2026-1528 Source advisory: SNYK:JS-UNDICI-15518064...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2039 more potentially affected by CVE-2026-1527 via undici (>=6.0.0, <=6.23.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2026-1527 Source advisory: SNYK:JS-UNDICI-15518072...

org.webjars.npm:actions__core (>=1.10.0, <=1.11.1), org.webjars.npm:actions__http-client (>=2.2.1, <=2.2.3) +14 more potentially affected by CVE-2026-1527 via org.webjars.npm:undici (>=4.12.2, <=5.29.0)

org.webjars.npm:undici MAVEN version =4.12.2, =1.10.0, =2.2.1, =0.1.16, =0.1.28 - org.webjars.npm:elasticelasticsearch 8.6.0 - org.webjars.npm:elastictransport 8.3.1 - org.webjars.npm:firebase 10.13.0 - org.webjars.npm:firebaseauth 1.7.7 - org.webjars.npm:firebaseauth-compat 0.5.12 -...

ai-economist (>=1.2.3, <=1.7.1), aries-cloudcontroller (>=0.2.4, <=0.3.1) +2 more potentially affected by CVE-2026-32274 via black (21.5.0b1)

black PYPI version 21.5.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - ai-economist =1.2.3, =0.2.4, =0.1.0, =2.1.2 - motherstarter 2021.5.11 Source cves: CVE-2026-32274 Source advisory: OSV:PYSEC-2026-2121...

anovos (>=1.0.0, <=1.0.1), c7n-mailer (0.6.18) +14 more potentially affected by CVE-2026-32274 via black (22.8.0)

black PYPI version 22.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - anovos =1.0.0, =1.15.15, =0.1.1, =2.34.0, =0.0.4, =0.0.3, =2.3.0, =0.0.1, =0.0.10 and more Source cves: CVE-2026-32274 Source advisory:...

ansible-content-parser (1.0.3), automatic-spike-detection (>=1.0.0b0, <=1.2.4) +39 more potentially affected by CVE-2026-32274 via black (23.7.0)

black PYPI version 23.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - ansible-content-parser 1.0.3 - automatic-spike-detection =1.0.0b0, =1.0.2, =6.0.0, =0.0.1, =0.0.8, =0.0.1, =0.1.0, =0.0.1rc7, =0.4.0, =3.0.0a10,...

aiosoma (>=1.1.20, <=1.1.23), bblib (>=0.1.1, <=3.1.0) +9 more potentially affected by CVE-2026-32274 via black (24.1.1)

black PYPI version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aiosoma =1.1.20, =0.1.1, =1.0.0, =0.1.13, =0.0.1, =1.20.0, =2.105.0, =0.0.1, =0.0.3 - spellcheckmate 0.1.0 Source cves: CVE-2026-32274 Source advisor...