dbgate-serve (>=7.1.3-alpha.3, <=7.1.8), dbmodel (>=7.1.3-alpha.3, <=7.1.8) potentially affected by CVE-2026-47669 via dbgate-api (>=7.1.3-alpha.3, <=7.1.8-alpha.7)

dbgate-api NPM version =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.8 Source cves: CVE-2026-47669 Source advisory: SNYK:JS-DBGATEAPI-17817001...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0172...

aibrix-kvcache (>=0.1.0, <=0.1.0.post2), lmcache (>=0.3.0, <=0.3.5) +1 more potentially affected by CVE-2026-11312 via infinistore (0.2.35)

infinistore PYPI version 0.2.35 is affected by a known vulnerability. The following packages have a transitive dependency on infinistore and may be impacted: - aibrix-kvcache =0.1.0, =0.3.0, =0.3.5 - lmcache-test-test 1.0.5 Source cves: CVE-2026-11312 Source advisory:...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +645 more potentially affected by CVE-2026-47676 via hono (>=4.0.0, <=4.12.19)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-47676 Source advisory: OSV:GHSA-2GCR-MFCQ-WCC3...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +645 more potentially affected by CVE-2026-47674 via hono (>=4.0.0, <=4.12.19)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-47674 Source advisory: OSV:GHSA-XRHX-7G5J-RCJ5...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +645 more potentially affected by CVE-2026-47675 via hono (>=4.0.0, <=4.12.19)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-47675 Source advisory: OSV:GHSA-3HRH-PFW6-9M5X...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +645 more potentially affected by CVE-2026-47673 via hono (>=4.0.0, <=4.12.19)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-47673 Source advisory: OSV:GHSA-F577-QRJJ-4474...

external-log-connector (>=0.1.1, <=0.1.2), lmc-external-log-backend (0.1.0) +2 more potentially affected by CVE-2026-10813 via lmcache (0.5.4)

lmcache PYPI version 0.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on lmcache and may be impacted: - external-log-connector =0.1.1, =0.6.1rc1, =0.6.2.3 Source cves: CVE-2026-10813 Source advisory: SNYK:PYTHON-LMCACHE-17675615...

adala (>=0.0.3, <=0.0.4), agent-actors (0.1.0) +42 more potentially affected by CVE-2026-10812 via gptcache (>=0.1.29.1, <=0.1.44)

gptcache PYPI version =0.1.29.1, =0.0.3, =0.0.5, =0.1.3, =0.28.9rc1, =0.13.0, =0.3.1, =0.1.48, =0.1.120a1, =0.1.120, =0.0.2, =0.5.17.post1, =0.6.0a2 and more Source cves: CVE-2026-10812 Source advisory: SNYK:PYTHON-GPTCACHE-17751096...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.11-alpha-20260404002702-9340365def1af08a5cdbbf734a87d1d4839bdaff) +287 more potentially affected by CVE-2026-34077 via react-router (>=7.0.0, <=7.13.2-pre.0)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.1-MON-198407-add-selinux-sudo-check.0, =0.0.1, =1.0.3, =0.1.0, =0.3.3 and more Source cves: CVE-2026-34077 Source advisory: OSV:GHSA-RXV8-25V2-QMQ8...

@agent-native/core (>=0.26.5, <=0.47.1), @automate.ax/components-core (>=0.1.3, <=0.3.1) +32 more potentially affected by CVE-2026-45337 via better-auth (>=1.6.0, <=1.6.10)

better-auth NPM version =1.6.0, =0.26.5, =0.1.3, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.11.3, =0.73.0, =0.73.0, =0.73.1, =0.80.6 and more Source cves: CVE-2026-45337 Source advisory: SNYK:JS-BETTERAUTH-17173857...

a2 (>=0.1.0, <=0.3.17), abadpour (>=6.13.1, <=7.24.1) +979 more potentially affected by CVE-2026-10803 via mlflow (>=0.8.2, <=3.16.0)

mlflow PYPI version =0.8.2, =0.1.0, =6.13.1, =9.273.1, =1.1.0, =0.1.0, =0.1.0, =0.4.4, =0.3.0, =0.0.5, =1.0.0, =0.1.0, =1.1.1 - ai-helpers-pytorch-utils 0.1.0a1 - aidevelopementtoolkit 0.2.0 and more Source cves: CVE-2026-10803 Source advisory: SNYK:PYTHON-MLFLOW-17173043...

a2 (>=0.4.9, <=0.8.3), abadpour (>=6.13.1, <=7.24.1) +947 more potentially affected by CVE-2026-10803 via mlflow-skinny (>=1.19.0, <=3.16.0)

mlflow-skinny PYPI version =1.19.0, =0.4.9, =6.13.1, =9.273.1, =1.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.4, =0.3.0, =0.1.0, =1.0.0, =0.1.0, =1.1.1 - ai-helpers-pytorch-utils 0.1.0a1 and more Source cves: CVE-2026-10803 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-17173042...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16256 more potentially affected by CVE-2026-44496 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44496 Source advisory: OSV:GHSA-HFXV-24RG-XRQF...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16256 more potentially affected by CVE-2026-44496 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44496 Source advisory: SNYK:JS-AXIOS-17172532...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +11621 more potentially affected by CVE-2026-44488 via axios (>=1.7.0, <=1.15.2)

axios NPM version =1.7.0, =0.0.8, =1.0.54, =0.1.0, =1.0.0, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.0.0, =1.0.0, =1.1.40, =1.1.65 and more Source cves: CVE-2026-44488 Source advisory: SNYK:JS-AXIOS-17172751...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +11621 more potentially affected by CVE-2026-44488 via axios (>=1.7.0, <=1.15.2)

axios NPM version =1.7.0, =0.0.8, =1.0.54, =0.1.0, =1.0.0, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.0.0, =1.0.0, =1.1.40, =1.1.65 and more Source cves: CVE-2026-44488 Source advisory: OSV:GHSA-777C-7FJR-54VF...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16256 more potentially affected by CVE-2026-44487 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44487 Source advisory: SNYK:JS-AXIOS-17172930...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16256 more potentially affected by CVE-2026-44487 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44487 Source advisory: OSV:GHSA-P92Q-9VQR-4J8V...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16256 more potentially affected by CVE-2026-44486 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44486 Source advisory: OSV:GHSA-J5F8-GRM9-P9FC...