-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +17054 more potentially affected by CVE-2026-67312 via axios (>=1.0.0, <=1.17.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-67312 Source advisory: SNYK:JS-AXIOS-18060165...

@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.15) +23 more potentially affected by CVE-2026-53496 via exifreader (>=4.1.1, <=4.39.1)

exifreader NPM version =4.1.1, =0.0.5, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 - @scopieflows/app-image-helper 0.1.12 and more Source cves: CVE-2026-53496 Source advisory: OSV:GHSA-G77H-45RF-HCX4...

@whalent/agent (0.3.253) potentially affected by unknown CVE via @whalent/agent-core (0.3.253)

@whalent/agent-core NPM version 0.3.253 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.253 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@n8n/agents (0.13.0), @n8n/ai-node-sdk (0.18.0) +17 more potentially affected by CVE-2026-59259 via n8n-workflow (2.28.0)

n8n-workflow NPM version 2.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-workflow and may be impacted: - @n8n/agents 0.13.0 - @n8n/ai-node-sdk 0.18.0 - @n8n/ai-utilities 0.21.0 - @n8n/ai-workflow-builder 1.28.0 - @n8n/api-types 1.28.0 -...

@_immo/return (>=1.0.1, <=1.1.1), @abgov/angular-components (0.6.12) +65 more potentially affected by unknown CVE via true (0.0.4)

true NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on true and may be impacted: - @immo/return =1.0.1, =0.6.12, =0.6.12, =1.1.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2 and more Source cves: unknown CVE Source...

@fedify/botkit (>=0.4.0-dev.177, <=0.4.0-dev.181), @fedify/botkit-sqlite (>=0.4.0-dev.177, <=0.4.0-dev.181) potentially affected by CVE-2026-50131 via @fedify/fedify (1.10.0)

@fedify/fedify NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.4.0-dev.177, =0.4.0-dev.177, =0.4.0-dev.181 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

@0xwork/connect (>=0.1.8, <=0.1.9), @actagent/fs-safe (0.3.0) +822 more potentially affected by CVE-2026-59871 via tar (>=7.0.0, <=7.5.17)

tar NPM version =7.0.0, =0.1.8, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.5.2-zh, =0.1.1, =0.1.1, =0.59.0, =2.17.11, =1.9.5, =1.0.2, =8.8.3, =8.11.4 and more Source cves: CVE-2026-59871 Source advisory: SNYK:JS-TAR-17909104...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +726 more potentially affected by CVE-2026-59895 via hono (>=4.0.0, <=4.12.26)

hono NPM version =4.0.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.4 and more Source cves: CVE-2026-59895 Source advisory: SNYK:JS-HONO-17900056...

@briefhq/cli (>=0.1.6, <=0.1.31-beta.0), @cobuild/review-gpt (>=0.5.10, <=0.5.154) +5 more potentially affected by CVE-2026-59703 via repomix (>=1.1.0, <=1.16.0)

repomix NPM version =1.1.0, =0.1.6, =0.5.10, =0.1.0-next.1, =1.0.0, =0.1.0, =0.63.0, =0.63.3 Source cves: CVE-2026-59703 Source advisory: SNYK:JS-REPOMIX-17905425...

ratex-layout (0.0.3) potentially affected by CVE-2026-53531 via ratex-parser (0.0.3)

ratex-parser CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ratex-parser and may be impacted: - ratex-layout 0.0.3 Source cves: CVE-2026-53531 Source advisory: OSV:GHSA-4W5H-HX6R-28Q7...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35346 via uu_comm (>=0.0.14, <=0.0.16)

uucomm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35346 Source advisory: OSV:GHSA-6GCW-W7CP-94G9...

MiracleLinux 8 : perl-IO-Compress-2.081-2.el8_10 (AXSA:2026-1105:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1105:01 advisory. perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob CVE-2026-48962 Tenable has extracted the preceding descripti...

Linux Distros Unpatched Vulnerability : CVE-2026-8804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-54756 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-54756 Source advisory: SNYK:JS-JODIT-17796054...

@briefhq/cli (>=0.1.6, <=0.1.11), @cobuild/review-gpt (>=0.5.10, <=0.5.96) +3 more potentially affected by CVE-2026-49988 via repomix (>=1.1.0, <=1.14.0)

repomix NPM version =1.1.0, =0.1.6, =0.5.10, =1.0.0, =0.63.0, =0.63.3 Source cves: CVE-2026-49988 Source advisory: OSV:GHSA-HWPP-H97W-2H3J...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +28 more potentially affected by CVE-2026-13149 via brace-expansion (>=1.1.0, <=1.1.13)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.3, =0.1.0 and more Source cves: CVE-2026-13149 Source advisory: SNYK:JS-BRACEEXPANSION-17706650...

@bsklaroff/yaac (>=0.0.1, <=0.0.6), @chude/memory (4.0.0) +14 more potentially affected by CVE-2026-55607 via @anthropic-ai/claude-code (>=2.1.39, <=2.1.154)

@anthropic-ai/claude-code NPM version =2.1.39, =0.0.1, =0.7.5, =0.6.0-beta.3, =1.30.1-broken.0, =0.8.1, =0.8.0, =1.0.33, =1.0.0-dev.1, =2.1.99, =0.0.2, =0.0.4 - feishu-claude-bot 0.1.0 - hkclaw-lite 1.0.1 and more Source cves: CVE-2026-55607 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-17817924...

kmcom-nuxt-layers (>=2.2.0, <=2.2.12) potentially affected by CVE-2026-59194 via pnpm (11.5.3)

pnpm NPM version 11.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pnpm and may be impacted: - kmcom-nuxt-layers =2.2.0, =2.2.12 Source cves: CVE-2026-59194 Source advisory: OSV:GHSA-72R4-9C5J-MJ57...

cookie-parser-es (>=1.0.7, <=1.0.8) potentially affected by unknown CVE via set-cookie-ease (1.1.5)

set-cookie-ease NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on set-cookie-ease and may be impacted: - cookie-parser-es =1.0.7, =1.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6500...

Fedora 44 : perl-Socket (2026-91d6cb99f7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-91d6cb99f7 advisory. 2.041- BUGFIXES - Fix reuse of STRLEN len variable in packipmreqsource Tenable has extracted the preceding description block directly from the Fedora securit...