10228 matches found
coopihc-modelchecks (0.1.0), iperturb (0.2.0) potentially affected by CVE-2026-31048 via pyro (3.16.0)
pyro PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyro and may be impacted: - coopihc-modelchecks 0.1.0 - iperturb 0.2.0 Source cves: CVE-2026-31048 Source advisory: SNYK:PYTHON-PYRO-16428622...
3extensions (1.0.1), @51jbs/incremental-coverage-plugin (1.0.5) +607 more potentially affected by CVE-2022-25860 +1 more via simple-git (>=3.0.3, <=3.31.1)
simple-git NPM version =3.0.3, =1.0.1, =1.0.1, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =23.0.0, =35.0.0, =1.4.0, =0.1.5-alpha.0, =1.0.2, =8.7.2, =39.0.2, =39.0.3 and more Source cves: CVE-2022-25860, CVE-2026-28291 Source advisory: SNYK:JS-SIMPLEGIT-16032290...
3extensions (1.0.1), @51jbs/incremental-coverage-plugin (1.0.5) +607 more potentially affected by CVE-2026-28291 via simple-git (>=3.0.3, <=3.31.1)
simple-git NPM version =3.0.3, =1.0.1, =1.0.1, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =23.0.0, =35.0.0, =1.4.0, =0.1.5-alpha.0, =1.0.2, =8.7.2, =39.0.2, =39.0.3 and more Source cves: CVE-2026-28291 Source advisory: OSV:GHSA-JCXM-M3JX-F287...
liteyukibot-v7-runtime-astrbot (>=0.1.0a1, <=0.1.0a7) potentially affected by CVE-2026-6119 via astrbot (>=4.27.2, <=4.27.5)
astrbot PYPI version =4.27.2, =0.1.0a1, =0.1.0a7 Source cves: CVE-2026-6119 Source advisory: SNYK:PYTHON-ASTRBOT-16427727...
liteyukibot-v7-runtime-astrbot (>=0.1.0a1, <=0.1.0a7) potentially affected by CVE-2026-6118 via astrbot (>=4.27.2, <=4.27.5)
astrbot PYPI version =4.27.2, =0.1.0a1, =0.1.0a7 Source cves: CVE-2026-6118 Source advisory: SNYK:PYTHON-ASTRBOT-16427898...
@algotech-ce/business (>=5.1.138, <=6.0.28), @braingrid/tools (1.1.0) +8 more potentially affected by unknown CVE via mathjs (>=15.0.0, <=15.1.1)
mathjs NPM version =15.0.0, =5.1.138, =1.0.0, =0.5.7, =0.0.0-alpha.0, =0.0.2, =0.0.6 Source cves: unknown CVE Source advisory: SNYK:JS-MATHJS-15989794...
@20syldev/api (>=2.6.0, <=2.8.0), @aalis/plugin-tool-math (>=0.1.0, <=0.9.1) +507 more potentially affected by CVE-2026-41139 via mathjs (>=13.1.0, <=15.1.1)
mathjs NPM version =13.1.0, =2.6.0, =0.1.0, =1.3.0, =2.0.0, =0.2.6, =0.3.0, =7.0.0, =7.0.0, =0.1.14, =0.13.1, =5.0.95, =1.0.0, =1.3.0-alpha.0 - @antsoo-lib/components 0.0.1 - @antsoo-lib/hooks 0.0.1 and more Source cves: CVE-2026-41139 Source advisory: OSV:GHSA-JVFF-X2QM-6286...
@syora/core (>=0.1.0-alpha.1, <=1.0.0-alpha.2), @unhead/angular (>=3.0.0-beta.1, <=3.0.0) +5 more potentially affected by unknown CVE via unhead (3.0.0-rc.4)
unhead NPM version 3.0.0-rc.4 is affected by a known vulnerability. The following packages have a transitive dependency on unhead and may be impacted: - @syora/core =0.1.0-alpha.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0 Source cves: unknow...
@syora/core (>=0.1.0-alpha.1, <=1.0.0-alpha.2), @unhead/angular (>=3.0.0-beta.1, <=3.0.0) +5 more potentially affected by unknown CVE via unhead (3.0.0-rc.4)
unhead NPM version 3.0.0-rc.4 is affected by a known vulnerability. The following packages have a transitive dependency on unhead and may be impacted: - @syora/core =0.1.0-alpha.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0 Source cves: unknow...
companies.sh (>=2026.324.0-canary.0, <=2026.325.0-canary.3) potentially affected by CVE-2026-41679 via paperclipai (2026.324.0-canary.7)
paperclipai NPM version 2026.324.0-canary.7 is affected by a known vulnerability. The following packages have a transitive dependency on paperclipai and may be impacted: - companies.sh =2026.324.0-canary.0, =2026.325.0-canary.3 Source cves: CVE-2026-41679 Source advisory: OSV:GHSA-68QG-G8MG-6PR7...
companies.sh (>=2026.324.0-canary.0, <=2026.325.0-canary.3), corporateai (2026.328.0-canary.0) +2 more potentially affected by CVE-2026-41679 via @paperclipai/server (>=2026.3.17-canary.3, <=2026.409.0-canary.4)
@paperclipai/server NPM version =2026.3.17-canary.3, =2026.324.0-canary.0, =2026.3.17-canary.3, =2026.409.0-canary.4 Source cves: CVE-2026-41679 Source advisory: OSV:GHSA-68QG-G8MG-6PR7...
0xgasless-mcp (>=1.0.3, <=1.0.5), 4d-vector-search (>=1.0.0, <=1.0.1) +3208 more potentially affected by CVE-2026-40190 via langsmith (>=0.0.5, <=0.5.4)
langsmith NPM version =0.0.5, =1.0.3, =1.0.0, =1.11.0, =0.0.5, =0.0.1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.6, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2026-40190 Source advisory: SNYK:JS-LANGSMITH-15969264...
@0xchain/empty (>=0.0.1, <=1.1.0-beta.4), @0xchain/expandable-text (>=0.0.1, <=1.1.0-beta.18) +16 more potentially affected by CVE-2026-40299 via next-intl (>=4.0.2, <=4.9.0)
next-intl NPM version =4.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =3.8.0, =1.28.0, =2.11.31, =0.0.3, =0.0.28 and more Source cves: CVE-2026-40299 Source advisory: SNYK:JS-NEXTINTL-15995498...
@0xchain/empty (>=0.0.1, <=1.1.0-beta.4), @0xchain/expandable-text (>=0.0.1, <=1.1.0-beta.18) +16 more potentially affected by CVE-2026-40299 via next-intl (>=4.0.2, <=4.9.0)
next-intl NPM version =4.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =3.8.0, =1.28.0, =2.11.31, =0.0.3, =0.0.28 and more Source cves: CVE-2026-40299 Source advisory: OSV:GHSA-8F24-V5VV-GM5J...
@activeboxes/piece-sftp (0.2.6), @activepieces/piece-apify (0.2.1) +24 more potentially affected by CVE-2026-39983 via basic-ftp (>=5.0.2, <=5.1.0)
basic-ftp NPM version =5.0.2, =0.2.6, =1.0.0, =1.0.0, =2.0.18, =1.9.2, =1.2.0, =4.6.0-blowfish, =1.0.3, =1.0.4, =0.1.1, =0.2.0 and more Source cves: CVE-2026-39983 Source advisory: SNYK:JS-BASICFTP-15989098...
@activeboxes/piece-sftp (0.2.6), @activepieces/piece-apify (0.2.1) +24 more potentially affected by unknown CVE via basic-ftp (>=5.0.2, <=5.1.0)
basic-ftp NPM version =5.0.2, =0.2.6, =1.0.0, =1.0.0, =2.0.18, =1.9.2, =1.2.0, =4.6.0-blowfish, =1.0.3, =1.0.4, =0.1.1, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6V7Q-WJVX-W8WG...
0xgasless-mcp (>=1.0.3, <=1.0.5), 4d-vector-search (>=1.0.0, <=1.0.1) +3208 more potentially affected by CVE-2026-40190 via langsmith (>=0.0.5, <=0.5.4)
langsmith NPM version =0.0.5, =1.0.3, =1.0.0, =1.11.0, =0.0.5, =0.0.1, =1.0.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.6, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2026-40190 Source advisory: OSV:GHSA-FW9Q-39R9-C252...
-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +14732 more potentially affected by CVE-2026-40175 via axios (>=1.0.0, <=1.14.0)
axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-40175 Source advisory: SNYK:JS-AXIOS-15969258...
-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +14732 more potentially affected by CVE-2026-40175 via axios (>=1.0.0, <=1.14.0)
axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-40175 Source advisory: OSV:GHSA-FVCV-3M26-PCQX...
@saltcorn/admin-models (>=1.0.0-beta.0, <=1.4.3), @saltcorn/base-plugin (>=1.0.0-beta.0, <=1.4.3) +5 more potentially affected by unknown CVE via @saltcorn/data (>=1.0.0, <=1.4.3)
@saltcorn/data NPM version =1.0.0, =1.0.0-beta.0, =1.0.0-beta.0, =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.0, =1.0.0-beta.0, =1.0.0-beta.1, =1.4.3 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNDATA-15991555...