aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +209 more potentially affected by CVE-2026-54235 via vllm (>=0.1.3, <=0.28.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =0.2.0, =0.3.0 and more Source cves: CVE-2026-54235 Source advisory: SNYK:PYTHON-VLLM-17372795...

@liqi0816/chrome-devtools-mcp-rebrowser (>=1.0.0, <=1.0.3), @mallocfeng/chromedev (>=0.1.0, <=0.1.8) +10 more potentially affected by CVE-2026-53765 via chrome-devtools-mcp (>=0.20.3, <=0.25.0)

chrome-devtools-mcp NPM version =0.20.3, =1.0.0, =0.1.0, =0.2.8, =0.2.7, =2.0.0, =0.1.5, =1.0.5, =1.0.0, =1.0.1, =1.0.9 Source cves: CVE-2026-53765 Source advisory: OSV:GHSA-3PVJ-JV98-QHJQ...

@liqi0816/chrome-devtools-mcp-rebrowser (>=1.0.0, <=1.0.3), @mallocfeng/chromedev (>=0.1.0, <=0.1.8) +10 more potentially affected by CVE-2026-53765 via chrome-devtools-mcp (>=0.20.3, <=0.25.0)

chrome-devtools-mcp NPM version =0.20.3, =1.0.0, =0.1.0, =0.2.8, =0.2.7, =2.0.0, =0.1.5, =1.0.5, =1.0.0, =1.0.1, =1.0.9 Source cves: CVE-2026-53765 Source advisory: SNYK:JS-CHROMEDEVTOOLSMCP-17391448...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +295 more potentially affected by CVE-2026-54325 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.1)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +295 more potentially affected by CVE-2026-54325 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.1)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

0xkobold (>=0.0.1, <=0.8.0), @0xwork/connect (>=0.1.0, <=0.1.7) +551 more potentially affected by CVE-2026-54328 via @mariozechner/pi-coding-agent (>=0.50.1, <=0.73.1)

@mariozechner/pi-coding-agent NPM version =0.50.1, =0.0.1, =0.1.0, =1.0.0-alpha, =0.0.183-staging.22859086, =5.0.0, =0.1.6-staging.22859086, =0.1.1-staging.04cc300a, =4.0.153, =0.1.1-staging.04cc300a, =0.1.0, =0.1.1-staging.29187771, =0.1.1-staging.0dc03363, =0.0.2-staging.29187771, =0.1.0,...

0xkobold (>=0.0.1, <=0.8.0), @0xwork/connect (>=0.1.0, <=0.1.7) +551 more potentially affected by CVE-2026-54328 via @mariozechner/pi-coding-agent (>=0.50.1, <=0.73.1)

@mariozechner/pi-coding-agent NPM version =0.50.1, =0.0.1, =0.1.0, =1.0.0-alpha, =0.0.183-staging.22859086, =5.0.0, =0.1.6-staging.22859086, =0.1.1-staging.04cc300a, =4.0.153, =0.1.1-staging.04cc300a, =0.1.0, =0.1.1-staging.29187771, =0.1.1-staging.0dc03363, =0.0.2-staging.29187771, =0.1.0,...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +261 more potentially affected by CVE-2026-54328 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +261 more potentially affected by CVE-2026-54328 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

0xkobold (>=0.0.1, <=0.8.0), @0xwork/connect (>=0.1.0, <=0.1.7) +560 more potentially affected by CVE-2026-54327 via @mariozechner/pi-coding-agent (>=0.28.0, <=0.73.1)

@mariozechner/pi-coding-agent NPM version =0.28.0, =0.0.1, =0.1.0, =1.0.0-alpha, =0.1.8-fix.3, =0.0.183-staging.22859086, =5.0.0, =0.1.6-staging.22859086, =0.1.1-staging.04cc300a, =4.0.153, =0.1.1-staging.04cc300a, =0.1.0, =0.1.1-staging.29187771, =0.1.1-staging.0dc03363, =0.0.2-staging.29187771,...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +261 more potentially affected by CVE-2026-54327 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.016f0b0e8119, <=5.0.1-staging.ffad3b46492e) +261 more potentially affected by CVE-2026-54326 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.078c111a306a, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.016f0b0e8119, =5.0.1-staging.3abdf9534c25, =0.6.4, =0.3.1, =0.4.7, =2026.5.12-zh,...

0xkobold (>=0.0.1, <=0.8.0), @0xwork/connect (>=0.1.0, <=0.1.7) +560 more potentially affected by CVE-2026-54326 via @mariozechner/pi-coding-agent (>=0.27.9, <=0.73.1)

@mariozechner/pi-coding-agent NPM version =0.27.9, =0.0.1, =0.1.0, =1.0.0-alpha, =0.1.8-fix.3, =0.0.183-staging.22859086, =5.0.0, =0.1.6-staging.22859086, =0.1.1-staging.04cc300a, =4.0.153, =0.1.1-staging.04cc300a, =0.1.0, =0.1.1-staging.29187771, =0.1.1-staging.0dc03363, =0.0.2-staging.29187771,...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +20 more potentially affected by CVE-2026-56317 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-56317 Source advisory: OSV:GHSA-M3Q2-P4FW-W38M...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +20 more potentially affected by CVE-2026-56317 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-56317 Source advisory: SNYK:JS-NUXT-17353899...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +88 more potentially affected by CVE-2026-56317 via nuxt (>=3.0.0, <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-56317 Source advisory: OSV:GHSA-M3Q2-P4FW-W38M...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +88 more potentially affected by CVE-2026-56317 via nuxt (>=3.0.0, <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-56317 Source advisory: SNYK:JS-NUXT-17353899...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53848 via openclaw (>=2026.3.22, <=2026.5.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53848 Source advisory: SNYK:JS-OPENCLAW-17393760...

datatran (1.5.0), log-serialize (2.1.1) potentially affected by unknown CVE via proto-bin (2.5.3)

proto-bin NPM version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on proto-bin and may be impacted: - datatran 1.5.0 - log-serialize 2.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-5921...

@a1st/aix (>=0.0.3, <=0.6.0), @a1st/aix-core (>=0.2.0, <=0.6.0) +19 more potentially affected by CVE-2026-54298 via astro (>=6.0.0-beta.1, <=6.4.4)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =1.4.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-54298 Source advisory: SNYK:JS-ASTRO-17356187...