0beny1s (1.1.6), 0desgin (0.0.1) +15927 more potentially affected by CVE-2026-53669 via react-router (>=6.0.0, <=7.17.0)

react-router NPM version =6.0.0, =7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-router and may be impacted: - 0beny1s 1.1.6 - 0desgin 0.0.1 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0...

@accounter/client (>=0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, <=0.0.10-alpha-20260124220016-4e2b62f7c68c0c6fd69aea71f714b37188ddd976), @boxyhq/react-ui (3.5.2) +63 more potentially affected by CVE-2026-53668 via react-router (>=7.9.6, <=7.12.0-pre.0)

react-router NPM version =7.9.6, =0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, =1.0.1-MON-198407-add-selinux-sudo-check.0, =3.4.9, =0.1.9, =1.21.9, =1.21.9, =0.3.1, =1.5.0, =0.4.0, =0.0.5, =0.0.7 and more Source cves: CVE-2026-53668 Source advisory: OSV:GHSA-JJMJ-JMHJ-QWJ2...

0beny1s (1.1.6), 0scar_classa (1.0.1) +13711 more potentially affected by CVE-2026-53668 via react-router-dom (>=6.30.2, <=6.30.4)

react-router-dom NPM version =6.30.2, =6.30.4 is affected by a known vulnerability. The following packages have a transitive dependency on react-router-dom and may be impacted: - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 -...

@aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.5), @aaravpos/appointment-booking-plugin (>=1.0.1, <=7.0.6) +262 more potentially affected by CVE-2026-53667 via react-router (>=7.11.0, <=7.17.0)

react-router NPM version =7.11.0, =1.0.0, =1.0.1, =0.0.9-alpha-20251217170854-13a5505369f22d85f29bcbbbe455c23672e2aca3, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source...

0beny1s (1.1.6), 0desgin (0.0.1) +15121 more potentially affected by CVE-2026-53666 via react-router (>=6.4.0, <=7.17.0)

react-router NPM version =6.4.0, =7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-router and may be impacted: - 0beny1s 1.1.6 - 0desgin 0.0.1 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0...

@activepieces/piece-google-gemini (0.1.6), @activepieces/piece-google-vertexai (0.1.2) +8 more potentially affected by CVE-2026-14257 via brace-expansion (>=2.0.0, <=2.0.2)

brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver 1.1.2 - nx-cargo 1.0.0-alpha.2 Source cves: CVE-2026-14257 Source advisory: SNYK:JS-BRACEEXPANSION-18313044...

03-gs-ee-6 (0.3.5), @albgen/capacitor-escpos-plugin (>=0.0.4, <=1.0.1) +2933 more potentially affected by CVE-2026-14257 via brace-expansion (>=3.0.0, <=5.0.7)

brace-expansion NPM version =3.0.0, =0.0.4, =1.1.7, =1.1.8 - @angranit/fantom-virma 0.1.0 - @angranit/first-step-to-get-tea 0.1.0 - @angranit/hapeipons 1.1.2 - @angranit/nearly-vm 0.1.0 - @angranit/newme-project 0.1.0 - @angranit/npmjs-for-tea-project 0.1.0 - @angranit/phantompirs 0.1.0 -...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +28 more potentially affected by CVE-2026-14257 via brace-expansion (>=1.1.0, <=1.1.13)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.3, =0.1.0 and more Source cves: CVE-2026-14257 Source advisory: SNYK:JS-BRACEEXPANSION-18313044...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2116 more potentially affected by CVE-2026-65911 via dompurify (>=3.0.0, <=3.3.3)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: CVE-2026-65911 Source advisory: SNYK:JS-DOMPURIFY-18307175...

@12-apps/auth (>=1.2.0, <=1.20.0), @aangeles/jefeui (>=1.10.0, <=1.11.6) +279 more potentially affected by unknown CVE via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.2.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =1.2.0, =2.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-AUTHCORE-18306960...

@12-apps/auth (>=1.2.0, <=1.20.0), @aangeles/jefeui (>=1.10.0, <=1.11.6) +279 more potentially affected by CVE-2026-73418 via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.2.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =1.2.0, =2.0.0 and more Source cves: CVE-2026-73418 Source advisory: OSV:GHSA-XMF8-CVQR-RFGJ...

@12-apps/auth (>=1.2.0, <=1.20.0), @aangeles/jefeui (>=1.10.0, <=1.11.6) +279 more potentially affected by CVE-2026-73420 via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.2.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =1.2.0, =2.0.0 and more Source cves: CVE-2026-73420 Source advisory: OSV:GHSA-7RQJ-J65F-68WH...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64648 Source advisory:...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +926 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64644 Source advisory:...

@n8n/backend-test-utils (1.30.0), @n8n/db (1.30.0) +3 more potentially affected by CVE-2026-65594 via @n8n/client-oauth2 (1.12.0)

@n8n/client-oauth2 NPM version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/client-oauth2 and may be impacted: - @n8n/backend-test-utils 1.30.0 - @n8n/db 1.30.0 - @n8n/scheduler 0.2.0 - @n8n/task-runner 2.30.0 - n8n-core 2.30.0 Source...

@n8n/backend-test-utils (1.32.0), @n8n/db (1.32.0) +3 more potentially affected by unknown CVE via n8n-core (2.32.0)

n8n-core NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-core and may be impacted: - @n8n/backend-test-utils 1.32.0 - @n8n/db 1.32.0 - @n8n/n8n-nodes-langchain 2.32.0 - @n8n/task-runner 2.32.0 - n8n 2.32.0 Source cves: unknown CV...

soprano-tts (0.0.2) potentially affected by CVE-2026-63764 via lmdeploy (0.15.0)

lmdeploy PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on lmdeploy and may be impacted: - soprano-tts 0.0.2 Source cves: CVE-2026-63764 Source advisory: SNYK:PYTHON-LMDEPLOY-18304216...

@142vip/midway (>=0.1.6-alpha.9, <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1, <=0.0.1-alpha.13) +2895 more potentially affected by CVE-2026-73651 via typeorm (>=0.0.2-alpha.43, <=0.3.30)

typeorm NPM version =0.0.2-alpha.43, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood 0.10.1 and more Source cves: CVE-2026-73651 Source advisory: OSV:GHSA-2RP8-MM9Q-FP49...

@atlantjs/backend (>=11.0.11, <=11.0.70), @atlantjs/database (>=2.0.0, <=2.1.24) +7 more potentially affected by unknown CVE via typeorm (1.0.0)

typeorm NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on typeorm and may be impacted: - @atlantjs/backend =11.0.11, =2.0.0, =0.48.60, =0.1.0, =1.6.5, =2.1.5, =0.2.0, =1.1.43, =1.1.45 Source cves: unknown CVE Source advisory:...

@343dev/optimizt (>=12.0.0, <=13.0.0), @brickflow/cli (>=0.0.8, <=0.0.27) +64 more potentially affected by CVE-2026-73650 via svgo (>=4.0.0, <=4.0.1)

svgo NPM version =4.0.0, =12.0.0, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =6.13.0, =0.0.1769658265953, =0.1.0-dev.00e4942, =1.1.0, =1.1.0, =1.1.0, =0.1.0, =1.0.44, =1.0.62 and more Source cves: CVE-2026-73650 Source advisory: OSV:GHSA-2P49-HGCM-8545...

5ug-cli (>=1.0.72, <=1.4.0), @343dev/optimizt (6.0.0) +86 more potentially affected by unknown CVE via svgo (>=2.0.0, <=2.8.0)

svgo NPM version =2.0.0, =1.0.72, =1.1.2, =2.0.0-fix-trigger-remove-colors-config-e26731597751d1581014163b7e73df159cf80be3.1, =0.0.2-0, =4.55.0, =2.12.3-canary.621.14971.0, =2.1.0-beta-1, =2.1.0-beta-1, =2.1.8, =5.0.0, =0.0.1, =2.7.4, =3.59.1--canary.1316.b3452bb.0, =4.0.0--canary.2146.fe4f461.0...

-react-file-list-components (1.1.1), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +45469 more potentially affected by CVE-2026-73650 via svgo (>=1.0.0, <=2.8.0)

svgo NPM version =1.0.0, =1.0.1, =0.1.0, =0.1.0, =0.1.6 - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 - 0scarclassf 1.0.1 - 0scarclassg 1.0.1 - 0scarclassh 1.0.1 - 0scarclassi 1.0.1 and more Source cves: CVE-2026-73650 Source...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +248 more potentially affected by CVE-2026-73650 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-73650 Source advisory: OSV:GHSA-2P49-HGCM-8545...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +248 more potentially affected by unknown CVE via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVGO-18170231...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +615 more potentially affected by CVE-2026-13760 via aws-cdk-lib (>=2.0.0, <=2.259.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: CVE-2026-13760 Source advisory: OSV:GHSA-VCRF-J523-4MRF...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +5 more potentially affected by CVE-2026-13676 via fast-uri (>=3.0.1, <=3.1.2)

fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =1.25.0, =2.2.0, =2.3.1 Source cves: CVE-2026-13676 Source advisory: OSV:GHSA-4C8G-83QW-93J6...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +304 more potentially affected by unknown CVE via @hono/node-server (>=1.0.2, <=1.19.14)

@hono/node-server NPM version =1.0.2, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.3.1, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.27, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.66, =1.0.25-beta.0, =1.0.44 and more Source cves: unknown CVE Source advisory: OSV:GHSA-FRVP-7C67-39W9...

@openinc/parse-server-opendash (>=4.0.0, <=4.1.1) potentially affected by CVE-2026-64627 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.1 Source cves: CVE-2026-64627 Source advisory: SNYK:JS-PARSESERVER-18306801...

marked-sanitizer (0.0.0) potentially affected by unknown CVE via ammonia (3.1.4)

ammonia CARGO version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on ammonia and may be impacted: - marked-sanitizer 0.0.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0213...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-17048 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-17048 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18751973...

astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by CVE-2026-59729 via astro (>=7.0.2, <=7.0.3)

astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: CVE-2026-59729 Source advisory: SNYK:JS-ASTRO-18085589...

0xtrails (>=0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, <=0.17.1), 123pancli (1.0.0) +6591 more potentially affected by CVE-2026-67315 via axios (>=1.15.0, <=1.17.0)

axios NPM version =1.15.0, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =0.1.0, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =1.0.10, =1.0.10, =0.6.6, =0.6.10, =0.6.9, =0.6.15 - @0xdeepak/wallets 0.0.2 and more Source cves: CVE-2026-67315 Source advisory: OSV:GHSA-F4GW-2P7V-4548...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1114 more potentially affected by CVE-2026-59877 via protobufjs (>=8.0.0, <=8.6.5)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-59877 Source advisory: OSV:GHSA-J3F2-48V5-CCWW...

@0xwork/connect (>=0.1.0, <=0.1.9), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +899 more potentially affected by CVE-2026-59871 via tar (>=7.0.0, <=7.5.17)

tar NPM version =7.0.0, =0.1.0, =0.1.8-fix.3, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.4.23-zh, =0.1.0, =0.1.1, =0.1.1, =2026.4.4, =0.59.0, =0.64.0 - @aivibeclaw/speech-core 2026.6.10 and more Source cves: CVE-2026-59871 Source advisory: OSV:GHSA-W8WR-V893-VJVP...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21413 more potentially affected by CVE-2026-59869 via js-yaml (>=3.0.0, <=3.14.2)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-59869 Source advisory: OSV:GHSA-52CP-R559-CP3M...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @a1st/aix (>=0.0.3, <=0.5.1) +739 more potentially affected by CVE-2026-73422 via astro (>=2.9.0, <=7.0.6)

astro NPM version =2.9.0, =0.0.1, =0.0.3, =0.2.0, =1.1.0, =1.0.0, =1.3.0, =0.9.0, =0.1.6, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =1.0.7 - @arya-technologies/astro-template 0.0.1 and more Source cves: CVE-2026-73422 Source advisory: OSV:GHSA-4G3V-8H47-V7G6...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +19036 more potentially affected by CVE-2026-67313 via axios (>=1.0.0, <=1.17.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.53, =0.1.0, =1.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.1.2, =1.1.0, =2.0.0 and more Source cves: CVE-2026-67313 Source advisory: OSV:GHSA-42H9-826W-CGV3...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +5 more potentially affected by CVE-2026-16221 via fast-uri (>=3.0.1, <=3.1.2)

fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =1.25.0, =2.2.0, =2.3.1 Source cves: CVE-2026-16221 Source advisory: SNYK:JS-FASTURI-18021349...

linhub (0.1.1), octo-drf (>=3.0.0, <=4.4.1) potentially affected by CVE-2026-16214 via django-jet (1.0.8)

django-jet PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-jet and may be impacted: - linhub 0.1.1 - octo-drf =3.0.0, =4.4.1 Source cves: CVE-2026-16214 Source advisory: SNYK:PYTHON-DJANGOJET-18017928...

@cedarjs/api-server (>=1.0.0-canary.12281, <=9.0.0-canary.1784), @cedarjs/cli (>=1.0.0-canary.12281, <=9.0.0-canary.1784) +40 more potentially affected by CVE-2026-16117 via @fastify/http-proxy (>=11.1.2, <=11.5.0)

@fastify/http-proxy NPM version =11.1.2, =1.0.0-canary.12281, =1.0.0-canary.12281, =6.0.0-canary.2685, =1.0.0-canary.12281, =1.0.0-canary.12281, =4.0.0-canary.13864, =4.0.0-canary.13864, =1.0.0-canary.12281, =3.0.0-alpha-1, =0.0.4, =0.3.0, =0.1.0, =1.0.1, =1.0.14 and more Source cves:...

@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.15) +24 more potentially affected by CVE-2026-53496 via exifreader (>=4.1.1, <=4.39.1)

exifreader NPM version =4.1.1, =0.0.5, =0.1.0, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 and more Source cves: CVE-2026-53496 Source advisory: SNYK:JS-EXIFREADER-18016336...

@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.15) +24 more potentially affected by CVE-2026-53496 via exifreader (>=4.1.1, <=4.39.1)

exifreader NPM version =4.1.1, =0.0.5, =0.1.0, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 and more Source cves: CVE-2026-53496 Source advisory: OSV:GHSA-G77H-45RF-HCX4...

@0xwork/connect (0.1.8), @openclaw/kitchen-sink (0.2.6) potentially affected by CVE-2026-62217 via openclaw (>=2026.5.20, <=2026.5.24-beta.2)

openclaw NPM version =2026.5.20, =2026.5.24-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @0xwork/connect 0.1.8 - @openclaw/kitchen-sink 0.2.6 Source cves: CVE-2026-62217 Source advisory: SNYK:JS-OPENCLAW-180178...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62220 via openclaw (>=2026.3.22, <=2026.5.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62220 Source advisory: SNYK:JS-OPENCLAW-18017834...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62218 via openclaw (>=2026.3.22, <=2026.5.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62218 Source advisory: SNYK:JS-OPENCLAW-18017833...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62229 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62229 Source advisory: SNYK:JS-OPENCLAW-18017826...

@alphasense/sdk-cli (>=0.0.4, <=1.0.4), @bsmnt/sdk-gen (2.0.5) +1 more potentially affected by CVE-2026-63397 via @genql/cli (>=6.0.0, <=6.3.3)

@genql/cli NPM version =6.0.0, =0.0.4, =0.0.2, =3.1.10 Source cves: CVE-2026-63397 Source advisory: OSV:GHSA-W757-XVVV-VGFW...

@whalent/agent (0.3.265) potentially affected by unknown CVE via @whalent/agent-core (0.3.265)

@whalent/agent-core NPM version 0.3.265 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.265 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.230) potentially affected by unknown CVE via @whalent/agent-core (0.3.230)

@whalent/agent-core NPM version 0.3.230 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.230 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...