@0xwork/connect (>=0.1.0, <=0.1.9), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +922 more potentially affected by CVE-2026-59874 via tar (>=7.0.0, <=7.5.17)

tar NPM version =7.0.0, =0.1.0, =0.1.8-fix.3, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.4.23-zh, =0.1.0, =0.1.1, =0.1.1, =2026.4.4, =0.59.0, =0.64.0 - @aivibeclaw/speech-core 2026.6.10 and more Source cves: CVE-2026-59874 Source advisory: SNYK:JS-TAR-17909068...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +28 more potentially affected by CVE-2026-59261 via openclaw (>=2026.3.22, <=2026.5.27)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-59261 Source advisory: SNYK:JS-OPENCLAW-17905620...

0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +2038 more potentially affected by CVE-2026-59725 via engine.io (>=4.1.1, <=6.6.6)

engine.io NPM version =4.1.1, =1.0.49, =1.0.0, =0.0.28, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =1.2.1, =15.0.0, =1.0.1, =1.0.2 - @aaronconway7/create-gatsby-app 1.0.0 - @accio-cms/gatsby-starter-accio 0.0.1 and more Source cves: CVE-2026-59725 Source advisory: SNYK:JS-ENGINEIO-17900543...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @activepieces/piece-ai (>=0.3.1, <=0.3.4) +445 more potentially affected by CVE-2026-59896 via hono (>=4.11.8, <=4.12.26)

hono NPM version =4.11.8, =0.1.8-fix.3, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.1.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.4 and more Source cves: CVE-2026-59896 Source advisory: SNYK:JS-HONO-17900542...

llama-index-llms-openllm (>=0.0.1, <=0.4.0) potentially affected by CVE-2026-15035 via openllm (>=0.4.44, <=0.6.30)

openllm PYPI version =0.4.44, =0.0.1, =0.4.0 Source cves: CVE-2026-15035 Source advisory: SNYK:PYTHON-OPENLLM-17895040...

@briefhq/cli (>=0.1.6, <=0.1.22), @cobuild/review-gpt (>=0.5.10, <=0.5.151) +5 more potentially affected by CVE-2026-59703 via repomix (>=1.1.0, <=1.16.0)

repomix NPM version =1.1.0, =0.1.6, =0.5.10, =0.1.0-next.1, =1.0.0, =0.1.0, =0.63.0, =0.63.3 Source cves: CVE-2026-59703 Source advisory: SNYK:JS-REPOMIX-17905425...

blyss-rs (0.2.0), lunarbase-pmm-math (>=0.1.0, <=0.2.6) +10 more potentially affected by unknown CVE via ruint (>=1.8.0, <=1.17.2)

ruint CARGO version =1.8.0, =0.1.0, =22.0.2, =22.2.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0220...

ratex-layout (0.0.3) potentially affected by CVE-2026-53531 via ratex-parser (0.0.3)

ratex-parser CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ratex-parser and may be impacted: - ratex-layout 0.0.3 Source cves: CVE-2026-53531 Source advisory: OSV:GHSA-4W5H-HX6R-28Q7...

ratex-layout (0.0.3) potentially affected by CVE-2026-53530 via ratex-parser (0.0.3)

ratex-parser CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ratex-parser and may be impacted: - ratex-layout 0.0.3 Source cves: CVE-2026-53530 Source advisory: OSV:GHSA-4HGP-59H5-GVRJ...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +194 more potentially affected by CVE-2026-67334 via better-auth (>=0.4.9, <=1.6.10)

better-auth NPM version =0.4.9, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.0.1, =1.3.27, =1.3.27, =1.3.37 and more Source cves: CVE-2026-67334 Source advisory: OSV:GHSA-2VG6-77G8-24MP...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +194 more potentially affected by unknown CVE via better-auth (>=0.4.9, <=1.6.10)

better-auth NPM version =0.4.9, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.0.1, =1.3.27, =1.3.27, =1.3.37 and more Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTH-17889825...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +192 more potentially affected by CVE-2026-53518 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.37 and more Source cves: CVE-2026-53518 Source advisory: SNYK:JS-BETTERAUTH-17889820...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +192 more potentially affected by CVE-2026-53518 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.37 and more Source cves: CVE-2026-53518 Source advisory: OSV:GHSA-7W99-5WM4-3G79...

@inkeep/agents-core (>=0.0.0-dev-20260106221934, <=0.41.0), @inkeep/ai-sdk-provider (>=0.0.0-dev-20260106221934, <=0.41.0) +10 more potentially affected by CVE-2026-53513 via @better-auth/sso (>=1.3.28, <=1.6.9)

@better-auth/sso NPM version =1.3.28, =0.0.0-dev-20260106221934, =0.0.0-dev-20260106221934, =0.0.0-dev-20260106221934, =7.5.0-canary.1, =7.5.0-canary.1, =1.0.0, =0.1.0, =0.1.0, =1.3.0, =3.1.2, =0.8.13, =0.9.0 Source cves: CVE-2026-53513 Source advisory: SNYK:JS-BETTERAUTHSSO-17889831...

@inkeep/agents-core (>=0.0.0-dev-20260106221934, <=0.41.0), @inkeep/ai-sdk-provider (>=0.0.0-dev-20260106221934, <=0.41.0) +10 more potentially affected by CVE-2026-53513 via @better-auth/sso (>=1.3.28, <=1.6.9)

@better-auth/sso NPM version =1.3.28, =0.0.0-dev-20260106221934, =0.0.0-dev-20260106221934, =0.0.0-dev-20260106221934, =7.5.0-canary.1, =7.5.0-canary.1, =1.0.0, =0.1.0, =0.1.0, =1.3.0, =3.1.2, =0.8.13, =0.9.0 Source cves: CVE-2026-53513 Source advisory: OSV:GHSA-5RR4-8452-HF4V...

@agent-native/core (>=0.26.5, <=0.47.1), @automate.ax/components-core (>=0.1.3, <=0.3.1) +28 more potentially affected by CVE-2026-53517 via @better-auth/memory-adapter (>=1.6.0, <=1.6.10)

@better-auth/memory-adapter NPM version =1.6.0, =0.26.5, =0.1.3, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.11.3, =1.6.0-depup.0, =8.7.0-canary.0, =8.7.0-canary.0, =8.9.4 and more Source cves: CVE-2026-53517 Source advisory: SNYK:JS-BETTERAUTHMEMORYADAPTER-17889814...

@agentcorporation/server (>=0.3.3, <=0.3.13), @agentuity/auth (>=1.0.35, <=3.0.0-alpha.6) +124 more potentially affected by CVE-2026-53517 via better-auth (>=1.4.8-beta.4, <=1.5.7-beta.1)

better-auth NPM version =1.4.8-beta.4, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.0.7, =1.4.21, =1.7.0, =2026.512.0-canary.0, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2026-53517 Source advisory: OSV:GHSA-392P-2Q2V-4372...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +192 more potentially affected by CVE-2026-67336 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.37 and more Source cves: CVE-2026-67336 Source advisory: OSV:GHSA-9H47-PQCX-HJR4...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +192 more potentially affected by unknown CVE via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.37 and more Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTH-17889826...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +210 more potentially affected by CVE-2026-67333 via better-auth (>=1.0.0, <=1.6.12)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.37 and more Source cves: CVE-2026-67333 Source advisory: OSV:GHSA-86J7-9J95-VPQJ...