@altipla/directus-sdk-utils (0.7.2), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.6) +5 more potentially affected by unknown CVE via directus (>=11.0.0, <=11.16.1)

directus NPM version =11.0.0, =1.6.3, =20.0.0-rc.0, =34.0.1 - @fahami/directus-pkce 1.0.0 - abcprotocol 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-6Q22-G298-GRJH...

scalyc (>=0.0.2, <=0.0.5) potentially affected by unknown CVE via scaly (>=0.0.2, <=0.0.5)

scaly CARGO version =0.0.2, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-2C6H-4899-WJXR...

@alstar/studio (0.0.0-beta.20), @better-auth/cli (>=1.0.0-canary.2, <=1.4.6-beta.2) +73 more potentially affected by unknown CVE via better-auth (>=1.0.0, <=1.4.8-beta.4)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.26, =1.3.27, =0.18.0, =0.5.2, =1.0.2, =1.0.2, =1.0.2, =2.0.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTH-15876756...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by unknown CVE via openclaw (>=2026.3.22, <=2026.3.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: unknown CVE Source advisory: SNYK:JS-OPENCLAW-15893697...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by unknown CVE via openclaw (>=2026.3.22, <=2026.3.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: unknown CVE Source advisory: SNYK:JS-OPENCLAW-15894780...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by unknown CVE via openclaw (>=2026.3.22, <=2026.3.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: unknown CVE Source advisory: SNYK:JS-OPENCLAW-15900388...

@bernierllc/neverhub (>=1.0.0, <=1.1.0), @cdagaton/excalidraw-mcp (>=0.3.2, <=0.3.3) +16 more potentially affected by CVE-2026-25536 via mcp-handler (>=1.0.1, <=1.0.7)

mcp-handler NPM version =1.0.1, =1.0.0, =0.3.2, =0.1.0, =0.0.0-experimental-20250910140832, =1.0.0, =0.0.27, =3.0.0, =3.0.1 and more Source cves: CVE-2026-25536 Source advisory: OSV:GHSA-W2FM-25VW-VH7F...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by unknown CVE via openclaw (>=2026.3.22, <=2026.3.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: unknown CVE Source advisory: SNYK:JS-OPENCLAW-15865625...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by unknown CVE via openclaw (>=2026.3.22, <=2026.3.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: unknown CVE Source advisory: SNYK:JS-OPENCLAW-15865013...

@agentholdings/agent-passport (0.1.0), @flomesh/ztm-chat (>=2026.3.25, <=2026.3.26) +9 more potentially affected by unknown CVE via openclaw (>=2026.3.22, <=2026.3.23-2)

openclaw NPM version =2026.3.22, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: unknown CVE Source advisory: SNYK:JS-OPENCLAW-15857122...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.8, <=2.1.15)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-TRIX-15813061...

@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @lucid-agents/mpp (1.0.0) +9 more potentially affected by unknown CVE via mppx (>=0.1.1, <=0.4.7)

mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.0.0-pr-153-20260307193247, =0.1.0, =0.1.1, =0.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-MPPX-15857153...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2050 more potentially affected by unknown CVE via dompurify (>=3.0.0, <=3.3.1)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: unknown CVE Source advisory: SNYK:JS-DOMPURIFY-15810938...

@n8n/backend-test-utils (>=1.10.0, <=1.10.1), @n8n/db (>=1.10.0, <=1.10.2) +2 more potentially affected by unknown CVE via n8n-core (>=2.10.0, <=2.10.1)

n8n-core NPM version =2.10.0, =1.10.0, =1.10.0, =2.10.0, =2.10.1 - n8n-runner 0.0.4 Source cves: unknown CVE Source advisory: SNYK:JS-N8NCORE-15825749...

@apollo/server-integration-testsuite (>=5.0.0-rc.0, <=5.4.0), @commitspark/graphql-api (>=1.0.0-beta.3, <=1.0.0-beta.6) +24 more potentially affected by unknown CVE via @apollo/server (>=5.0.0, <=5.4.0)

@apollo/server NPM version =5.0.0, =5.0.0-rc.0, =1.0.0-beta.3, =1.217.0, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.22.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q82-XGWF-VJ6H...

@10life/strapi-plugin-advanced-cache-manager (>=1.0.1, <=1.0.6), @a11ywatch/a11ywatch (>=0.0.1, <=0.3.82) +52 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.12.1)

apollo-server-core NPM version =3.0.0-html.2, =1.0.1, =0.0.1, =0.1.1, =4.9.2, =1.0.1, =1.1.22, =1.1.19, =1.0.0, =1.1.0, =1.0.0, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q82-XGWF-VJ6H...

libcrux-aead (>=0.0.4-pre.1, <=0.0.6) potentially affected by unknown CVE via libcrux-poly1305 (0.0.4)

libcrux-poly1305 CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-poly1305 and may be impacted: - libcrux-aead =0.0.4-pre.1, =0.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-PV9V-5J35-XWCR...

pqc-combo (0.1.0), pqc-fips (0.0.3) +1 more potentially affected by unknown CVE via libcrux-ml-dsa (0.0.4)

libcrux-ml-dsa CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-ml-dsa and may be impacted: - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-XRF2-5R3P-5WGJ...

@actinc/eslint-config (>=4.10.0, <=4.16.0), @alexgorbatchev/dotfiles (>=0.0.1, <=1.0.4) +331 more potentially affected by unknown CVE via smol-toml (>=1.1.2, <=1.6.0)

smol-toml NPM version =1.1.2, =4.10.0, =0.0.1, =2.8.0, =0.1.0-alpha.0, =0.1.3, =0.1.3, =0.1.3, =0.2.2, =0.32.3, =0.2.2, =1.0.0, =1.0.4, =0.1.3, =1.0.30, =1.0.32 - @cadcamfun/nikcli 1.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-SMOLTOML-15768230...

@grackle-ai/cli (>=0.0.2, <=0.70.5) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.5)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.5 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840331...