@b4uti4gd/tslash (>=1.0.0, <=1.0.1), @bitsnbobs/starch (>=1.4.0, <=2.1.0) +94 more potentially affected by unknown CVE via @chenglou/pretext (>=0.0.1, <=0.0.4)

@chenglou/pretext NPM version =0.0.1, =1.0.0, =1.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5478-66C3-RHXR...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41354 via openclaw (>=2026.3.22, <=2026.4.1)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41354 Source advisory: OSV:GHSA-RXMX-G7HR-8MX4...

@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +1 more potentially affected by CVE-2026-34148 via @fedify/fedify (>=2.0.0, <=2.0.7)

@fedify/fedify NPM version =2.0.0, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0-dev.1757, =2.0.7 Source cves: CVE-2026-34148 Source advisory: OSV:GHSA-GM9M-GWC4-HWGP...

fuel-p2p (>=0.4.0, <=0.5.0), libp2p (>=0.40.0-rc.1, <=0.42.2) +1 more potentially affected by CVE-2026-35457 via libp2p-rendezvous (>=0.1.0, <=0.3.0)

libp2p-rendezvous CARGO version =0.1.0, =0.4.0, =0.40.0-rc.1, =0.20.0, =0.21.0 Source cves: CVE-2026-35457 Source advisory: OSV:GHSA-V5HW-CV9C-RPG7...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2050 more potentially affected by unknown CVE via dompurify (>=3.0.0, <=3.3.1)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: unknown CVE Source advisory: SNYK:JS-DOMPURIFY-15874903...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41403 via openclaw (>=2026.3.22, <=2026.3.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41403 Source advisory: SNYK:JS-OPENCLAW-15896354...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41340 via openclaw (>=2026.3.22, <=2026.3.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41340 Source advisory: OSV:GHSA-F693-58PC-2GFR...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41381 via openclaw (>=2026.3.22, <=2026.3.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41381 Source advisory: OSV:GHSA-CQGW-44WG-44RF...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34780 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34779 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by CVE-2026-41361 via openclaw (>=2026.3.22, <=2026.3.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-41361 Source advisory: SNYK:JS-OPENCLAW-15865306...

@dargmuesli/nuxt-vio (>=20.6.0, <=21.0.0-beta.11), @darraghor/nest-backend-libs (>=5.0.10, <=5.0.11) +51 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.3)

nodemailer NPM version =8.0.0, =20.6.0, =5.0.10, =0.0.1-beta.0, =0.2.0-alpha.1, =6.0.0-beta.9, =11.14.0, =5.8.38, =2.9.4-beta.9766, =0.1.10, =1.11.4, =2.1.8, =0.0.0-experimental.09a2220201377abea1f719e6f8d201b10ae3f7af, =2.0.0, =3.2.11, =20260208.152.42, =20260327.0.55 and more Source cves: unkno...

@actinc/eslint-config (>=4.10.0, <=4.16.0), @alexgorbatchev/dotfiles (>=0.0.1, <=1.0.4) +331 more potentially affected by unknown CVE via smol-toml (>=1.1.2, <=1.6.0)

smol-toml NPM version =1.1.2, =4.10.0, =0.0.1, =2.8.0, =0.1.0-alpha.0, =0.1.3, =0.1.3, =0.1.3, =0.2.2, =0.32.3, =0.2.2, =1.0.0, =1.0.4, =0.1.3, =1.0.30, =1.0.32 - @cadcamfun/nikcli 1.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V3RJ-XJV7-4JMQ...

@grackle-ai/cli (>=0.0.2, <=0.70.5) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.5)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.5 Source cves: unknown CVE Source advisory: OSV:GHSA-8G29-8XWR-QMHR...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +522 more potentially affected by CVE-2026-27979 via next (>=16.0.1, <=16.1.6)

next NPM version =16.0.1, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-27979 Source advisory:...

CVE-2026-23654

Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network...

CVE-2026-23654

Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network...

@ekairos/dataset (>=1.21.32-beta.0, <=1.22.22-beta.development.0), @ekairos/events (>=1.22.4-beta.development.0, <=1.22.34-beta.development.0) +26 more potentially affected by unknown CVE via @workflow/core (>=4.0.1-beta.0, <=4.1.0-beta.63)

@workflow/core NPM version =4.0.1-beta.0, =1.21.32-beta.0, =1.22.4-beta.development.0, =1.21.32-beta.0, =1.21.53-beta.0, =1.21.88-beta.0, =0.0.0-dev-20260121145510, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =4.0.0-beta.2, =4.0.1-beta.4, =4.0.1-beta.0,...

@agent-infra/browser-context (>=0.1.2, <=0.2.2), @agent-infra/mcp-server-browser (>=1.2.15, <=1.2.29) +22 more potentially affected by CVE-2026-30830 via defuddle (>=0.3.8, <=0.8.0)

defuddle NPM version =0.3.8, =0.1.2, =1.2.15, =26.7.0, =0.0.1, =1.0.4, =1.4.0, =0.1.0, =0.1.0, =0.12.0, =0.12.0, =0.3.0, =0.7.1 - @vibe-reader/cli 0.1.0 and more Source cves: CVE-2026-30830 Source advisory: OSV:GHSA-5MQ8-78GM-PJMQ...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +1486 more potentially affected by CVE-2026-28343 via ckeditor5 (>=29.2.0, <=47.5.0-alpha.8)

ckeditor5 NPM version =29.2.0, =0.0.1, =0.0.3, =0.0.1, =3.0.8, =0.0.1, =29.2.0, =2.0.0, =30.0.0, =0.7.0, =1.0.0, =0.0.3, =0.0.6, =1.3.0, =1.5.3 and more Source cves: CVE-2026-28343 Source advisory: OSV:GHSA-JRQM-VMQC-GM93...