@brrinta/uikit (>=0.1.1, <=0.1.8), @dan8oren/mcp-apple-notes (>=1.0.0, <=1.0.2) +12 more potentially affected by CVE-2026-41680 via marked (>=18.0.0, <=18.0.1)

marked NPM version =18.0.0, =0.1.1, =1.0.0, =1.44.0, =2.27.1, =0.2.14, =0.0.4, =2.13.0, =3.0.0-beta.2, =1.0.0-alpha.1, =1.0.0-alpha.4, =2.5.0, =2.6.0 Source cves: CVE-2026-41680 Source advisory: OSV:GHSA-6V9C-7CG6-27Q7...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +21 more potentially affected by CVE-2026-44996 via openclaw (>=2026.3.22, <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-44996 Source advisory: OSV:GHSA-GFG9-5357-HV4C...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +21 more potentially affected by CVE-2026-44996 via openclaw (>=2026.3.22, <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-44996 Source advisory: SNYK:JS-OPENCLAW-16322612...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +21 more potentially affected by CVE-2026-44991 via openclaw (>=2026.3.22, <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-44991 Source advisory: OSV:GHSA-C28G-VH7M-FM7V...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +21 more potentially affected by CVE-2026-44991 via openclaw (>=2026.3.22, <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-44991 Source advisory: SNYK:JS-OPENCLAW-16322615...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41383 via openclaw (>=2026.3.22, <=2026.4.1)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41383 Source advisory: SNYK:JS-OPENCLAW-16322613...

@n8n/backend-test-utils (1.18.0) potentially affected by CVE-2026-42227 via @n8n/db (1.18.0)

@n8n/db NPM version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/db and may be impacted: - @n8n/backend-test-utils 1.18.0 Source cves: CVE-2026-42227 Source advisory: SNYK:JS-N8NDB-16351626...

@n8n/backend-test-utils (>=1.0.0-rc.0, <=1.17.1) potentially affected by CVE-2026-42227 via @n8n/db (>=1.0.0, <=1.17.1)

@n8n/db NPM version =1.0.0, =1.0.0-rc.0, =1.17.1 Source cves: CVE-2026-42227 Source advisory: SNYK:JS-N8NDB-16351626...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +25 more potentially affected by CVE-2026-42236 via n8n (>=0.81.0, <=2.37.9)

n8n NPM version =0.81.0, =0.1.13, =2.35.2, =0.216.1, =2.34.0, =23.1.4, =0.0.1, =0.1.0, =0.1.0, =0.18.0, =0.25.0 and more Source cves: CVE-2026-42236 Source advisory: SNYK:JS-N8N-16353605...

aana (>=0.2.1, <=0.2.2.2), admet-ai (>=2.0.0, <=2.0.1) +1081 more potentially affected by CVE-2026-44484 via lightning (>=1.8.6, <=2.6.5)

lightning PYPI version =1.8.6, =0.2.1, =2.0.0, =1.3.0, =0.2.0, =0.1.0, =1.0.1, =0.1.0, =2025.4.0, =0.0.0, =0.1.11, =1.8.15, =1.8.17, =0.1.1, =0.3.0 and more Source cves: CVE-2026-44484 Source advisory: SNYK:PYTHON-LIGHTNING-16323121...

@514labs/aurora-mcp (>=0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, <=0.0.64), @514labs/sloan-mcp (0.0.65) +540 more potentially affected by CVE-2026-41636 via thrift (>=0.6.0-1, <=0.22.0)

thrift NPM version =0.6.0-1, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.6, =0.9.0, =0.0.1, =0.1.0, =1.0.0-beta.1, =1.0.0-beta.6, =1.0.1, =1.1.0, =0.24.0-no-protobuf-patch.1, =0.18.8, =0.24.0 and more Source cves: CVE-2026-41636 Source advisory: OSV:GHSA-R67J-R569-JRWP...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +209 more potentially affected by CVE-2026-7141 via vllm (>=0.1.3, <=0.28.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =0.2.0, =0.3.0 and more Source cves: CVE-2026-7141 Source advisory: SNYK:PYTHON-VLLM-16316415...

parley-core (>=0.2.0, <=0.6.1), pqc-combo (0.1.0) +2 more potentially affected by unknown CVE via libcrux-ml-dsa (>=0.0.4, <=0.0.8)

libcrux-ml-dsa CARGO version =0.0.4, =0.2.0, =0.6.1 - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0126...

@akoskm/create-mcp-server-stdio (>=0.0.5, <=0.0.14), @bazel/create (8.0.2) +43 more potentially affected by CVE-2026-11572 via degit (>=2.1.3, <=2.8.5)

degit NPM version =2.1.3, =0.0.5, =3.0.3, =1.1.0-alpha.0, =1.4.0, =1.0.1, =2.0.5, =1.0.0, =1.5.0, =0.1.0, =17.7.1-alpha.173, =17.7.1-alpha.176, =0.1.1, =1.2.7, =1.3.6 and more Source cves: CVE-2026-11572 Source advisory: SNYK:JS-DEGIT-17116207...

dbtr (>=0.3.0, <=0.3.6), dbtr-lt (0.3.5) +1 more potentially affected by unknown CVE via elementary-data (>=0.15.1, <=0.25.1)

elementary-data PYPI version =0.15.1, =0.3.0, =0.1.2, =0.1.4 Source cves: unknown CVE Source advisory: SNYK:PYTHON-ELEMENTARYDATA-16316110...

ai.ylyue:yue-library-data-log (j17.3.3.1), ai.ylyue:yue-library-data-mybatis (j17.3.3.1) +245 more potentially affected by CVE-2026-7045 via com.baomidou:dynamic-datasource-spring-boot-common (>=4.0.0, <=4.5.0)

com.baomidou:dynamic-datasource-spring-boot-common MAVEN version =4.0.0, =1.1.9, =1.1.9, =2024.1.1.0, =2023.5.1.0, =2022.5.0.0, =2022.4.1.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3.2-jdk21 - cn.osclass:osclass4-module-rdb 1.0.0 - cn.starlight-software:sherly-mybatis 2.0.6 and more Source cves:...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +21 more potentially affected by CVE-2026-45001 via openclaw (>=2026.3.22, <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-45001 Source advisory: OSV:GHSA-7JM2-G593-4QRC...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +21 more potentially affected by CVE-2026-45001 via openclaw (>=2026.3.22, <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-45001 Source advisory: SNYK:JS-OPENCLAW-16298040...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +21 more potentially affected by CVE-2026-44998 via openclaw (>=2026.3.22, <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-44998 Source advisory: SNYK:JS-OPENCLAW-16298052...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +21 more potentially affected by CVE-2026-44998 via openclaw (>=2026.3.22, <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-44998 Source advisory: OSV:GHSA-QRP5-GFW2-GXV4...