11057 matches found
@104corp/cdk-aws-codedeploy-on-premises (>=1.0.0, <=1.0.2), @aws-amplify/amplify-category-api (>=1.1.0-GqlExtensibility.1, <=4.2.0-rdsv2preview.0) +97 more potentially affected by unknown CVE via @aws-cdk/aws-codebuild (>=1.75.0, <=1.203.0)
@aws-cdk/aws-codebuild NPM version =1.75.0, =1.0.0, =1.1.0-GqlExtensibility.1, =1.2.0-geo.0, =4.13.3-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =1.1.0-ext1.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.203.0 and more Source cves: unknown CVE Source advisory...
org.webjars.npm:canvas (>=2.5.0, <=2.6.0), org.webjars.npm:color-thief (2.2.5) +12 more potentially affected by unknown CVE via org.webjars.npm:tar (>=0.1.20, <=4.4.19)
org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz 1.0.7 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGWEBJARSNPM-18319501...
@claspo/common (>=5.2.1-theme.13, <=7.5.1), @claspo/components (>=1.1.14, <=1.10.15) +3 more potentially affected by unknown CVE via velocityjs (>=2.0.6, <=2.1.6)
velocityjs NPM version =2.0.6, =5.2.1-theme.13, =1.1.14, =14.5.0-theme.13, =16.5.0-theme.13, =14.4.1-theme.13, =16.5.1-dsp1 Source cves: unknown CVE Source advisory: SNYK:JS-VELOCITYJS-18319515...
@openinc/parse-server-opendash (>=4.0.0, <=4.1.2) potentially affected by CVE-2026-66008 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)
parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.2 Source cves: CVE-2026-66008 Source advisory: SNYK:JS-PARSESERVER-18306804...
@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by CVE-2026-82256 via @sveltejs/kit (>=2.0.0, <=2.65.1)
@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-82256 Source advisory: OSV:GHSA-WQJV-9729-C5Q2...
@acceleratxr/electron-shared (>=1.9.0, <=1.19.0), @adamklein/situp (>=1.0.4, <=1.0.5) +207 more potentially affected by CVE-2026-54673 via builder-util-runtime (>=9.0.0, <=9.6.3)
builder-util-runtime NPM version =9.0.0, =1.9.0, =1.0.4, =26.0.11-2, =6.6.2-2, =0.1.0, =0.0.228, =0.0.1, =1.0.6, =0.0.1-beta.5, =0.0.3, =0.0.24, =0.0.50, =0.39.0, =1.17.0 and more Source cves: CVE-2026-54673 Source advisory: OSV:GHSA-P2F4-R6V6-J797...
0beny1s (1.1.6), 0desgin (0.0.1) +15936 more potentially affected by CVE-2026-53669 via react-router (>=6.0.0, <=7.17.0)
react-router NPM version =6.0.0, =7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-router and may be impacted: - 0beny1s 1.1.6 - 0desgin 0.0.1 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0...
@12-apps/app-shell (>=1.0.0, <=5.7.0), @12-apps/auth (>=1.2.0, <=2.19.0) +284 more potentially affected by CVE-2026-73419 via @auth/core (>=0.0.0-manual.fdbc96ab, <=0.41.2)
@auth/core NPM version =0.0.0-manual.fdbc96ab, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 and more Source cves: CVE-2026-73419 Source advisory:...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322068...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64647 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64645 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64644 Source advisory:...
47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +240 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)
next NPM version =15.5.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: SNYK:JS-NEXT-18231604...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64643 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64643 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64641 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64641 Source advisory:...
n8n (2.32.0) potentially affected by unknown CVE via @n8n/n8n-nodes-langchain (2.32.0)
@n8n/n8n-nodes-langchain NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/n8n-nodes-langchain and may be impacted: - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NN8NNODESLANGCHAIN-18322497...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322079...
abscissa (>=0.4.0, <=0.6.0-pre.1), abscissa_core (>=0.4.0, <=0.6.0-pre.1) +121 more potentially affected by unknown CVE via gumdrop (>=0.1.0, <=0.8.1)
gumdrop CARGO version =0.1.0, =0.4.0, =0.4.0, =0.5.0, =0.1.1, =0.1.0, =0.2.0, =1.0.0, =1.0.6, =1.0.8, =1.0.9, =1.0.9, =1.0.12 - amdguid-glium 1.0.13 - amdguid-glow 1.0.13 - amdguid-wayland 1.0.13 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0214...
@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +119 more potentially affected by CVE-2026-73565 via @hono/node-server (>=2.0.0, <=2.0.9)
@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: CVE-2026-73565 Sourc...
@atlantjs/backend (>=11.0.11, <=11.0.79), @atlantjs/database (>=2.0.0, <=2.1.32) +6 more potentially affected by CVE-2026-73651 via typeorm (1.0.0)
typeorm NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on typeorm and may be impacted: - @atlantjs/backend =11.0.11, =2.0.0, =0.48.60, =1.6.5, =2.1.5, =0.2.0, =1.1.43, =1.1.45 Source cves: CVE-2026-73651 Source advisory:...
1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2515 more potentially affected by CVE-2026-66010 via dompurify (>=3.0.0, <=3.4.11)
dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.0.1, =0.1.0, =0.1.0-alpha.1, =0.1.0, =0.3.9 and more Source cves: CVE-2026-66010 Source advisory: OSV:GHSA-C2J3-45GR-MQC4...
@aamini/config (>=0.0.1, <=0.0.13), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +12 more potentially affected by unknown CVE via @vitest/browser (>=4.0.0, <=4.1.9)
@vitest/browser NPM version =4.0.0, =0.0.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =0.2.1, =0.2.2, =4.0.0-beta.15, =4.0.0-beta.15, =4.0.0-beta.15, =0.5.0-rc.1, =0.1.0, =0.2.0, =0.2.3 Source cves: unknown CVE Source advisory:...
@aamini/config (>=0.0.1, <=0.0.13), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +12 more potentially affected by CVE-2026-73653 via @vitest/browser (>=4.0.0, <=4.1.9)
@vitest/browser NPM version =4.0.0, =0.0.1, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =0.2.1, =0.2.2, =4.0.0-beta.15, =4.0.0-beta.15, =4.0.0-beta.15, =0.5.0-rc.1, =0.1.0, =0.2.0, =0.2.3 Source cves: CVE-2026-73653 Source advisory:...
@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +615 more potentially affected by CVE-2026-13760 via aws-cdk-lib (>=2.0.0, <=2.259.0)
aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: CVE-2026-13760 Source advisory: OSV:GHSA-VCRF-J523-4MRF...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +5 more potentially affected by CVE-2026-13676 via fast-uri (>=3.0.1, <=3.1.2)
fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =1.25.0, =2.2.0, =2.3.1 Source cves: CVE-2026-13676 Source advisory: OSV:GHSA-4C8G-83QW-93J6...
0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +401 more potentially affected by CVE-2026-59896 via hono (>=4.11.8, <=4.12.26)
hono NPM version =4.11.8, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.1.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.4 and more Source cves: CVE-2026-59896 Source advisory: OSV:GHSA-HVRM-45R6-MJFJ...
0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +719 more potentially affected by CVE-2026-59895 via hono (>=4.0.0, <=4.12.26)
hono NPM version =4.0.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.29.19 and more Source cves: CVE-2026-59895 Source advisory: OSV:GHSA-W62V-XXXG-MG59...
@openinc/parse-server-opendash (>=4.0.0, <=4.1.2) potentially affected by CVE-2026-64627 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)
parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.2 Source cves: CVE-2026-64627 Source advisory: SNYK:JS-PARSESERVER-18306801...
astro-simpleanalytics-plugin (0.4.0), lanza-site (>=0.1.0, <=0.1.10) potentially affected by unknown CVE via astro (>=7.0.2, <=7.0.3)
astro NPM version =7.0.2, =0.1.0, =0.1.10 Source cves: unknown CVE Source advisory: SNYK:JS-ASTRO-18085612...
@a1st/aix (>=0.0.3, <=0.6.0), @a1st/aix-core (>=0.2.0, <=0.6.0) +9 more potentially affected by CVE-2026-73424 via @astrojs/vercel (>=10.0.6, <=10.0.8)
@astrojs/vercel NPM version =10.0.6, =0.0.3, =0.2.0, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.3.0 - taskair 0.0.1 Source cves: CVE-2026-73424 Source advisory: OSV:GHSA-X27W-589X-FRM2...
0xtrails (>=0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, <=0.18.3), 123pancli (1.0.0) +6615 more potentially affected by CVE-2026-67315 via axios (>=1.15.0, <=1.17.0)
axios NPM version =1.15.0, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =0.1.0, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =1.0.10, =1.0.10, =0.6.6, =0.6.10, =0.6.9, =0.0.1, =0.0.7 and more Source cves: CVE-2026-67315 Source advisory: OSV:GHSA-F4GW-2P7V-4548...
@a-rt-works/auth0-deploy-cli (3.3.3), @acknow-srl/express-openid (>=1.0.0, <=1.0.1) +541 more potentially affected by CVE-2026-67315 via axios (>=0.31.0, <=0.32.0)
axios NPM version =0.31.0, =1.0.0, =0.0.1, =0.0.2, =1.3.2, =0.2.0, =0.0.2-beta.0, =2.0.14, =0.5.12, =1.0.0, =1.0.1, =32.0.0, =0.2.4, =0.3.0 and more Source cves: CVE-2026-67315 Source advisory: OSV:GHSA-F4GW-2P7V-4548...
@0xwork/connect (>=0.1.0, <=0.1.9), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +910 more potentially affected by CVE-2026-59871 via tar (>=7.0.0, <=7.5.17)
tar NPM version =7.0.0, =0.1.0, =0.1.8-fix.3, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.4.23-zh, =0.1.0, =0.1.1, =0.1.1, =2026.4.4, =0.59.0, =0.64.0 - @aivibeclaw/speech-core 2026.6.10 and more Source cves: CVE-2026-59871 Source advisory: OSV:GHSA-W8WR-V893-VJVP...
02.aula (1.0.0), 0xrtest (1.0.0) +10558 more potentially affected by CVE-2026-59869 via js-yaml (>=4.0.0, <=4.2.0)
js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.14.0 and more Source cves: CVE-2026-59869 Source advisory: OSV:GHSA-52CP-R559-CP3M...
-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +19073 more potentially affected by CVE-2026-67312 via axios (>=1.0.0, <=1.17.0)
axios NPM version =1.0.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.1.2, =1.1.0, =2.0.0 and more Source cves: CVE-2026-67312 Source advisory: SNYK:JS-AXIOS-18060165...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +5 more potentially affected by CVE-2026-16221 via fast-uri (>=3.0.1, <=3.1.2)
fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =1.25.0, =2.2.0, =2.3.1 Source cves: CVE-2026-16221 Source advisory: SNYK:JS-FASTURI-18021349...
django-shopit (>=0.5.0, <=0.5.2), djangoshop-gestpay (0.1.0) +2 more potentially affected by CVE-2026-16212 via django-shop (>=0.12.3, <=1.2.4)
django-shop PYPI version =0.12.3, =0.5.0, =0.1.0, =0.4.2 - djangoshop-wspay 0.1.0 Source cves: CVE-2026-16212 Source advisory: SNYK:PYTHON-DJANGOSHOP-18017929...
linhub (0.1.1), octo-drf (>=3.0.0, <=4.4.1) potentially affected by CVE-2026-16214 via django-jet (1.0.8)
django-jet PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-jet and may be impacted: - linhub 0.1.1 - octo-drf =3.0.0, =4.4.1 Source cves: CVE-2026-16214 Source advisory: SNYK:PYTHON-DJANGOJET-18017928...
@agentspec/claude-plugin (>=0.1.0, <=0.2.0), @agentspec/sidecar (0.1.0) +86 more potentially affected by CVE-2021-21322 +1 more via @fastify/http-proxy (>=9.4.0, <=11.5.0)
@fastify/http-proxy NPM version =9.4.0, =0.1.0, =1.0.19, =2.1.22, =0.1.1, =0.1.0, =0.0.4, =0.0.4, =6.0.0-canary.2685, =0.0.4, =0.0.4, =4.0.0-canary.13864, =4.0.0-canary.13864, =0.0.4, =9.0.0-canary.1784 and more Source cves: CVE-2021-21322, CVE-2026-15631 Source advisory:...
@openclaw/kitchen-sink (>=0.2.8, <=0.2.9), @shadowob/openclaw-shadowob (>=1.1.50, <=1.1.64) +1 more potentially affected by CVE-2026-62202 via openclaw (>=2026.6.1, <=2026.6.6)
openclaw NPM version =2026.6.1, =0.2.8, =1.1.50, =0.0.1-release20260506, =0.0.232-next Source cves: CVE-2026-62202 Source advisory: SNYK:JS-OPENCLAW-18021341...
@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +29 more potentially affected by CVE-2026-62203 via openclaw (>=2026.3.22, <=2026.6.5)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =1.1.50, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =2026.4.3-2 and more Source cves: CVE-2026-62203 Source advisory: SNYK:JS-OPENCLAW-18021340...
@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +29 more potentially affected by CVE-2026-62201 via openclaw (>=2026.3.22, <=2026.6.5)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =1.1.50, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =2026.4.3-2 and more Source cves: CVE-2026-62201 Source advisory: SNYK:JS-OPENCLAW-18021339...
@0xwork/connect (>=0.1.0, <=0.1.7), @chrysb/alphaclaw (>=0.8.3, <=0.9.16) +16 more potentially affected by CVE-2026-62226 via openclaw (>=2026.3.28, <=2026.5.7)
openclaw NPM version =2026.3.28, =0.1.0, =0.8.3, =0.1.0, =2.2.4, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =0.1.0, =0.2.10-beta.0, =0.1.38, =0.0.1, =0.3.0 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-62226 Source advisory: SNYK:JS-OPENCLAW-18017827...
@0xwork/connect (>=0.1.0, <=0.1.8), @chrysb/alphaclaw (>=0.9.10, <=0.9.16) +6 more potentially affected by CVE-2026-62227 via openclaw (>=2026.4.21, <=2026.5.24-beta.2)
openclaw NPM version =2026.4.21, =0.1.0, =0.9.10, =2.2.4, =4.0.0, =0.0.0, =2.1.8, =0.1.38, =0.0.1, =0.3.0 Source cves: CVE-2026-62227 Source advisory: SNYK:JS-OPENCLAW-18017823...
@whalent/agent (0.3.273) potentially affected by unknown CVE via @whalent/agent-core (0.3.273)
@whalent/agent-core NPM version 0.3.273 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.273 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...
@whalent/agent (0.3.238) potentially affected by unknown CVE via @whalent/agent-core (0.3.238)
@whalent/agent-core NPM version 0.3.238 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.238 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...
@whalent/agent (0.3.243) potentially affected by unknown CVE via @whalent/agent-core (0.3.243)
@whalent/agent-core NPM version 0.3.243 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.243 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...
@whalent/agent (0.3.282) potentially affected by unknown CVE via @whalent/agent-core (0.3.282)
@whalent/agent-core NPM version 0.3.282 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.282 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...
@whalent/agent (0.3.268) potentially affected by unknown CVE via @whalent/agent-core (0.3.268)
@whalent/agent-core NPM version 0.3.268 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.268 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...