@akemona-org/strapi-connector-mongoose (>=3.18.2, <=3.19.3), @albertoielpo/kk-cli (>=1.1.0, <=1.1.2) +30 more potentially affected by unknown CVE via mongoose (>=9.0.0, <=9.7.1)

mongoose NPM version =9.0.0, =3.18.2, =1.1.0, =1.0.0, =12.3.0, =11.0.36, =8.2.3, =0.2.29, =0.0.1, =11.7.0, =4.0.0, =2.0.0, =2.0.0, =0.4.1, =0.1.24, =0.7.0, =0.11.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-MONGOOSE-18319533...

@0xfutbol/id (>=2.0.0, <=2.0.200), @2060.io/credo-ts-didcomm-media-sharing (>=0.0.5, <=0.1.0) +823 more potentially affected by CVE-2026-59952 via valibot (>=1.0.0, <=1.4.1)

valibot NPM version =1.0.0, =2.0.0, =0.0.5, =0.0.4, =0.0.8, =0.0.12, =0.0.5, =4.3.136-beta.1, =0.10.1, =0.10.1, =0.10.1, =0.10.1, =0.4.0, =0.0.27, =0.1.0, =0.6.0, =0.6.6 and more Source cves: CVE-2026-59952 Source advisory: SNYK:JS-VALIBOT-18313048...

31g-form-parser (1.0.107), @aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.6) +445 more potentially affected by CVE-2026-55685 via react-router (>=7.0.0, <=7.17.0)

react-router NPM version =7.0.0, =1.0.0, =1.0.1, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source cves: CVE-2026-55685 Source advisory:...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +176 more potentially affected by CVE-2026-55575 via liquidjs (>=10.2.0, <=10.27.0)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.4.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-55575 Source advisory:...

@0xmike/web-kit (>=0.0.6, <=0.1.1), @acmekit/acmekit (>=2.13.1, <=2.13.94) +284 more potentially affected by CVE-2026-53668 via react-router-dom (>=6.30.2, <=6.30.4)

react-router-dom NPM version =6.30.2, =0.0.6, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =1.4.0, =0.0.1, =1.2.0, =0.1.0, =0.0.6, =2.0.1, =4.1.0 - @automattic/data-stores 3.2.2 - @automattic/domain-search 1.1.0 - @automattic/jetpack-ai-calypso 2.1.0 and more Source cves: CVE-2026-53668 Source advisory:...

@aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.6), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.2) +265 more potentially affected by CVE-2026-53667 via react-router (>=7.11.0, <=7.17.0)

react-router NPM version =7.11.0, =1.0.0, =1.0.1, =0.0.9-alpha-20251217170854-13a5505369f22d85f29bcbbbe455c23672e2aca3, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source...

@activepieces/piece-google-gemini (0.1.6), @activepieces/piece-google-vertexai (0.1.2) +8 more potentially affected by CVE-2026-14257 via brace-expansion (>=2.0.0, <=2.0.2)

brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver 1.1.2 - nx-cargo 1.0.0-alpha.2 Source cves: CVE-2026-14257 Source advisory: SNYK:JS-BRACEEXPANSION-18313044...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2158 more potentially affected by CVE-2026-65904 via dompurify (>=3.0.0, <=3.4.3)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: CVE-2026-65904 Source advisory: SNYK:JS-DOMPURIFY-18307177...

@12-apps/app-shell (>=1.0.0, <=5.7.0), @12-apps/auth (>=1.2.0, <=2.19.0) +282 more potentially affected by CVE-2026-73418 via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 and more Source cves: CVE-2026-73418 Source advisory: OSV:GHSA-XMF8-CVQR-RFGJ...

@12-apps/app-shell (>=1.0.0, <=5.7.0), @12-apps/auth (>=1.2.0, <=2.19.0) +282 more potentially affected by unknown CVE via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-AUTHCORE-18306877...

@12-apps/app-shell (>=1.0.0, <=5.7.0), @12-apps/auth (>=1.2.0, <=2.19.0) +282 more potentially affected by CVE-2026-73420 via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 and more Source cves: CVE-2026-73420 Source advisory: OSV:GHSA-7RQJ-J65F-68WH...

@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +51 more potentially affected by unknown CVE via next-auth (>=4.10.3, <=4.24.13)

next-auth NPM version =4.10.3, =1.9.0, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =0.0.0-experimental-20251015143743, =0.0.0-experimental-20231123101256, =4.4.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-NEXTAUTH-18306876...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64648 Source advisory:...

@n8n/backend-test-utils (1.32.0), @n8n/db (1.32.0) +3 more potentially affected by unknown CVE via n8n-core (2.32.0)

n8n-core NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-core and may be impacted: - @n8n/backend-test-utils 1.32.0 - @n8n/db 1.32.0 - @n8n/n8n-nodes-langchain 2.32.0 - @n8n/task-runner 2.32.0 - n8n 2.32.0 Source cves: unknown CV...

@n8n/agents (0.17.0), @n8n/ai-node-sdk (0.22.0) +25 more potentially affected by unknown CVE via n8n-workflow (2.32.0)

n8n-workflow NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-workflow and may be impacted: - @n8n/agents 0.17.0 - @n8n/ai-node-sdk 0.22.0 - @n8n/ai-utilities 0.25.0 - @n8n/ai-workflow-builder 1.32.0 - @n8n/api-types 1.32.0 -...

abel (>=0.1.0, <=0.1.1), abel-core (>=0.1.0, <=0.1.1) +161 more potentially affected by unknown CVE via smallstr (>=0.1.0, <=0.3.1)

smallstr CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.1, =0.1.0, =0.1.20, =2.1.0, =0.4.0-beta.1, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0215...

-react-file-list-components (1.1.1), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +45467 more potentially affected by CVE-2026-73650 via svgo (>=1.0.0, <=2.8.0)

svgo NPM version =1.0.0, =1.0.1, =0.1.0, =0.1.0, =0.1.6 - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 - 0scarclassf 1.0.1 - 0scarclassg 1.0.1 - 0scarclassh 1.0.1 - 0scarclassi 1.0.1 and more Source cves: CVE-2026-73650 Source...

@343dev/optimizt (>=12.0.0, <=13.0.0), @brickflow/cli (>=0.0.8, <=0.0.27) +63 more potentially affected by CVE-2026-73650 via svgo (>=4.0.0, <=4.0.1)

svgo NPM version =4.0.0, =12.0.0, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =6.13.0, =0.0.1769658265953, =0.1.0-dev.00e4942, =1.1.0, =1.1.0, =1.1.0, =0.1.0, =1.0.44, =1.0.62 and more Source cves: CVE-2026-73650 Source advisory: OSV:GHSA-2P49-HGCM-8545...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +247 more potentially affected by CVE-2026-73650 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-73650 Source advisory: OSV:GHSA-2P49-HGCM-8545...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2515 more potentially affected by CVE-2026-66010 via dompurify (>=3.0.0, <=3.4.11)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.0.1, =0.1.0, =0.1.0-alpha.1, =0.1.0, =0.3.9 and more Source cves: CVE-2026-66010 Source advisory: SNYK:JS-DOMPURIFY-18170233...

@activeboxes/piece-gmail (0.8.1), @activeboxes/piece-imap (0.2.10) +93 more potentially affected by CVE-2026-59887 via linkify-it (>=5.0.0, <=5.0.1)

linkify-it NPM version =5.0.0, =0.6.0, =0.2.6, =0.0.1, =2026.7.1, =1.0.0, =4.1.90, =4.1.99, =4.1.106 and more Source cves: CVE-2026-59887 Source advisory: OSV:GHSA-V245-V573-V5VM...

@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +104 more potentially affected by unknown CVE via @hono/node-server (>=2.0.0, <=2.0.4)

@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: unknown CVE Source...

@apphosting/astro-adapter (0.0.1), @ayco/cozy (>=0.2.5, <=0.3.1) +69 more potentially affected by CVE-2026-59730 via @astrojs/node (>=8.1.0, <=10.1.4)

@astrojs/node NPM version =8.1.0, =0.2.5, =1.0.2, =1.0.0, =2.0.0, =0.1.3, =2.2.1, =2.2.1, =2.2.1, =1.0.0, =2.35.0, =0.7.0, =0.1.2, =0.3.2 and more Source cves: CVE-2026-59730 Source advisory: OSV:GHSA-R557-WFFQ-WVRC...

0xpay-cc-sdk (>=0.0.8, <=0.1.0), 0xtrails (>=0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, <=0.18.3) +8825 more potentially affected by CVE-2026-67318 via axios (>=1.13.0, <=1.17.0)

axios NPM version =1.13.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =0.1.0, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =1.0.10, =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-67318 Source advisory: SNYK:JS-AXIOS-18060804...

0xtrails (>=0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, <=0.18.3), 123pancli (1.0.0) +6615 more potentially affected by CVE-2026-67315 via axios (>=1.15.0, <=1.17.0)

axios NPM version =1.15.0, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =0.1.0, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =1.0.10, =1.0.10, =0.6.6, =0.6.10, =0.6.9, =0.0.1, =0.0.7 and more Source cves: CVE-2026-67315 Source advisory: SNYK:JS-AXIOS-18065357...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1151 more potentially affected by CVE-2026-59877 via protobufjs (>=8.0.0, <=8.6.5)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-59877 Source advisory: OSV:GHSA-J3F2-48V5-CCWW...

@abstraxn/signer-react (>=2.0.2, <=3.3.3), @account-kit/react (>=4.53.1-alpha.0, <=4.88.5) +690 more potentially affected by CVE-2026-59877 via protobufjs (>=7.5.0, <=7.6.4)

protobufjs NPM version =7.5.0, =2.0.2, =4.53.1-alpha.0, =4.15.0, =3.26.0, =0.1.0, =1.9.1, =2.1.7-alpha-2, =0.1.0, =1.0.0-canary.15, =0.0.2, =0.0.1, =0.0.0-experimental-02e44603-20260603, =0.0.0-experimental-02e44603-20260603, =1.1.0 and more Source cves: CVE-2026-59877 Source advisory:...

@adobe/helix-docx2md (1.9.29), @adobe/helix-importer (>=3.4.141, <=3.4.143) +33 more potentially affected by CVE-2026-59868 via js-yaml (>=5.0.0, <=5.1.0)

js-yaml NPM version =5.0.0, =3.4.141, =2.2.62, =1.0.8, =0.2.12, =0.2.12, =0.2.12, =0.2.13, =0.2.12, =0.2.16, =0.2.14, =0.2.12, =0.2.17 and more Source cves: CVE-2026-59868 Source advisory: OSV:GHSA-G796-FGMG-93MV...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @a1st/aix (>=0.0.3, <=0.6.0) +749 more potentially affected by CVE-2026-73422 via astro (>=2.9.0, <=7.0.6)

astro NPM version =2.9.0, =0.0.1, =0.0.3, =0.2.0, =1.1.0, =1.0.0, =1.3.0, =0.9.0, =0.1.6, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =1.0.7 - @arya-technologies/astro-template 0.0.1 and more Source cves: CVE-2026-73422 Source advisory: OSV:GHSA-4G3V-8H47-V7G6...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +28 more potentially affected by CVE-2026-13149 via brace-expansion (>=1.1.0, <=1.1.13)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.3, =0.1.0 and more Source cves: CVE-2026-13149 Source advisory: OSV:GHSA-3JXR-9VMJ-R5CP...

linhub (0.1.1), octo-drf (>=3.0.0, <=4.4.1) potentially affected by CVE-2026-16216 via django-jet (1.0.8)

django-jet PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-jet and may be impacted: - linhub 0.1.1 - octo-drf =3.0.0, =4.4.1 Source cves: CVE-2026-16216 Source advisory: SNYK:PYTHON-DJANGOJET-18017927...

@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.15) +24 more potentially affected by CVE-2026-53496 via exifreader (>=4.1.1, <=4.39.1)

exifreader NPM version =4.1.1, =0.0.5, =0.1.0, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 and more Source cves: CVE-2026-53496 Source advisory: SNYK:JS-EXIFREADER-18016336...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62229 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62229 Source advisory: SNYK:JS-OPENCLAW-18017826...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2026-38158 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.1 Source cves: CVE-2026-38158 Source advisory: SNYK:JAVA-COMBSTEKUREPORT-18748794...

@alphasense/sdk-cli (>=0.0.4, <=1.0.4), @bsmnt/sdk-gen (2.0.5) +1 more potentially affected by CVE-2026-63397 via @genql/cli (>=6.0.0, <=6.3.3)

@genql/cli NPM version =6.0.0, =0.0.4, =0.0.2, =3.1.10 Source cves: CVE-2026-63397 Source advisory: OSV:GHSA-W757-XVVV-VGFW...

@whalent/agent (0.3.252) potentially affected by unknown CVE via @whalent/agent-core (0.3.252)

@whalent/agent-core NPM version 0.3.252 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.252 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.263) potentially affected by unknown CVE via @whalent/agent-core (0.3.263)

@whalent/agent-core NPM version 0.3.263 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.263 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.240) potentially affected by unknown CVE via @whalent/agent-core (0.3.240)

@whalent/agent-core NPM version 0.3.240 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.240 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.294) potentially affected by unknown CVE via @whalent/agent-core (0.3.294)

@whalent/agent-core NPM version 0.3.294 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.294 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.254) potentially affected by unknown CVE via @whalent/agent-core (0.3.254)

@whalent/agent-core NPM version 0.3.254 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.254 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.289) potentially affected by unknown CVE via @whalent/agent-core (0.3.289)

@whalent/agent-core NPM version 0.3.289 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.289 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.250) potentially affected by unknown CVE via @whalent/agent-core (0.3.250)

@whalent/agent-core NPM version 0.3.250 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.250 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.291) potentially affected by unknown CVE via @whalent/agent-core (0.3.291)

@whalent/agent-core NPM version 0.3.291 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.291 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.235) potentially affected by unknown CVE via @whalent/agent-core (0.3.235)

@whalent/agent-core NPM version 0.3.235 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.235 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@inkeep/agents-api (>=0.0.0-dev-20260121145510, <=0.80.6), @inkeep/agents-cli (>=0.0.0-chat-to-edit-20251119071712, <=0.80.6) +17 more potentially affected by CVE-2026-53515 via @better-auth/sso (>=1.3.28, <=1.6.9)

@better-auth/sso NPM version =1.3.28, =0.0.0-dev-20260121145510, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260106221934, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260203033642...

a2rl (>=1.0.0, <=1.2.0), aana (>=0.2.1, <=0.2.2.2) +2032 more potentially affected by CVE-2026-58659 via pytorch-lightning (>=0.5.3.2, <=2.6.5)

pytorch-lightning PYPI version =0.5.3.2, =1.0.0, =0.2.1, =1.1.0, =0.0.0, =1.0.1, =2.1.1, =0.1.0, =2.0.0, =1.3.0, =0.1.0, =0.8.1, =0.1.0, =1.0.1, =1.4.0 and more Source cves: CVE-2026-58659 Source advisory: SNYK:PYTHON-PYTORCHLIGHTNING-18016331...

@_immo/return (>=1.0.1, <=1.1.1), @abgov/angular-components (0.6.12) +66 more potentially affected by unknown CVE via true (>=0.0.3, <=0.0.4)

true NPM version =0.0.3, =1.0.1, =0.6.12, =0.6.12, =1.1.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-TRUE-17976742...

@blumintinc/eslint-plugin-blumint (>=1.3.0, <=1.20.195), @eeacms/volto-cca-policy (>=0.1.17, <=0.2.22) +35 more potentially affected by CVE-2026-15699 via compromise (>=14.0.0, <=14.15.1)

compromise NPM version =14.0.0, =1.3.0, =0.1.17, =1.1.236, =0.1.1, =1.0.12, =4.0.2, =0.1.16, =0.1.14, =0.1.3, =0.1.29, =3.0.1, =0.1.0, =3.0.3, =0.1.4, =2.0.0-alpha.1, =2.2.0 and more Source cves: CVE-2026-15699 Source advisory: SNYK:JS-COMPROMISE-17972425...

agora (>=0.0.3, <=0.1.2), ai-usvg (0.47.0) +277 more potentially affected by unknown CVE via rustybuzz (>=0.1.1, <=0.20.1)

rustybuzz CARGO version =0.1.1, =0.0.3, =0.1.0, =0.0.2, =0.0.2, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0206...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +202 more potentially affected by CVE-2026-67334 via better-auth (>=0.4.9, <=1.6.10)

better-auth NPM version =0.4.9, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.0.1, =1.5.0-beta.13 and more Source cves: CVE-2026-67334 Source advisory: OSV:GHSA-2VG6-77G8-24MP...