@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62225 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62225 Source advisory: SNYK:JS-OPENCLAW-18017837...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62222 via openclaw (>=2026.3.22, <=2026.5.20)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62222 Source advisory: SNYK:JS-OPENCLAW-18017835...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62223 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62223 Source advisory: SNYK:JS-OPENCLAW-18017828...

@0xwork/connect (>=0.1.0, <=0.1.7), @chrysb/alphaclaw (>=0.8.3, <=0.9.16) +16 more potentially affected by CVE-2026-62226 via openclaw (>=2026.3.28, <=2026.5.7)

openclaw NPM version =2026.3.28, =0.1.0, =0.8.3, =0.1.0, =2.2.4, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =0.1.0, =0.2.10-beta.0, =0.1.38, =0.0.1, =0.3.0 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-62226 Source advisory: SNYK:JS-OPENCLAW-18017827...

@0xwork/connect (>=0.1.0, <=0.1.8), @chrysb/alphaclaw (>=0.9.10, <=0.9.16) +6 more potentially affected by CVE-2026-62227 via openclaw (>=2026.4.21, <=2026.5.24-beta.2)

openclaw NPM version =2026.4.21, =0.1.0, =0.9.10, =2.2.4, =4.0.0, =0.0.0, =2.1.8, =0.1.38, =0.0.1, =0.3.0 Source cves: CVE-2026-62227 Source advisory: SNYK:JS-OPENCLAW-18017823...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2026-38158 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.0 Source cves: CVE-2026-38158 Source advisory: SNYK:JAVA-COMBSTEKUREPORT-18748794...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GGXF-9F6J-W742...

@whalent/agent (0.3.263) potentially affected by unknown CVE via @whalent/agent-core (0.3.263)

@whalent/agent-core NPM version 0.3.263 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.263 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.289) potentially affected by unknown CVE via @whalent/agent-core (0.3.289)

@whalent/agent-core NPM version 0.3.289 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.289 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.294) potentially affected by unknown CVE via @whalent/agent-core (0.3.294)

@whalent/agent-core NPM version 0.3.294 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.294 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.273) potentially affected by unknown CVE via @whalent/agent-core (0.3.273)

@whalent/agent-core NPM version 0.3.273 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.273 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.252) potentially affected by unknown CVE via @whalent/agent-core (0.3.252)

@whalent/agent-core NPM version 0.3.252 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.252 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.254) potentially affected by unknown CVE via @whalent/agent-core (0.3.254)

@whalent/agent-core NPM version 0.3.254 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.254 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.238) potentially affected by unknown CVE via @whalent/agent-core (0.3.238)

@whalent/agent-core NPM version 0.3.238 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.238 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.232) potentially affected by unknown CVE via @whalent/agent-core (0.3.232)

@whalent/agent-core NPM version 0.3.232 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.232 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.234) potentially affected by unknown CVE via @whalent/agent-core (0.3.234)

@whalent/agent-core NPM version 0.3.234 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.234 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.250) potentially affected by unknown CVE via @whalent/agent-core (0.3.250)

@whalent/agent-core NPM version 0.3.250 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.250 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.244) potentially affected by unknown CVE via @whalent/agent-core (0.3.244)

@whalent/agent-core NPM version 0.3.244 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.244 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.243) potentially affected by unknown CVE via @whalent/agent-core (0.3.243)

@whalent/agent-core NPM version 0.3.243 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.243 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.247) potentially affected by unknown CVE via @whalent/agent-core (0.3.247)

@whalent/agent-core NPM version 0.3.247 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.247 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.288) potentially affected by unknown CVE via @whalent/agent-core (0.3.288)

@whalent/agent-core NPM version 0.3.288 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.288 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.268) potentially affected by unknown CVE via @whalent/agent-core (0.3.268)

@whalent/agent-core NPM version 0.3.268 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.268 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.264) potentially affected by unknown CVE via @whalent/agent-core (0.3.264)

@whalent/agent-core NPM version 0.3.264 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.264 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.282) potentially affected by unknown CVE via @whalent/agent-core (0.3.282)

@whalent/agent-core NPM version 0.3.282 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.282 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.298) potentially affected by unknown CVE via @whalent/agent-core (0.3.298)

@whalent/agent-core NPM version 0.3.298 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.298 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.271) potentially affected by unknown CVE via @whalent/agent-core (0.3.271)

@whalent/agent-core NPM version 0.3.271 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.271 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.241) potentially affected by unknown CVE via @whalent/agent-core (0.3.241)

@whalent/agent-core NPM version 0.3.241 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.241 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.235) potentially affected by unknown CVE via @whalent/agent-core (0.3.235)

@whalent/agent-core NPM version 0.3.235 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.235 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.239) potentially affected by unknown CVE via @whalent/agent-core (0.3.239)

@whalent/agent-core NPM version 0.3.239 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.239 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.266) potentially affected by unknown CVE via @whalent/agent-core (0.3.266)

@whalent/agent-core NPM version 0.3.266 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.266 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-16103 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-16103 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752081...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @agentuity/evals (>=0.0.104, <=2.0.30) +401 more potentially affected by CVE-2026-50289 via systeminformation (>=5.0.6, <=5.31.6)

systeminformation NPM version =5.0.6, =1.17.6-next.0, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.1.1, =0.1.1, =4.1.0-rc.4, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =4.260426.2, =1.0.10, =1.0.84 and more Source cves: CVE-2026-50289 Source advisory:...

@budibase/backend-core (>=2.15.0, <=3.39.22), @budibase/cli (>=2.0.0, <=3.2.26) +10 more potentially affected by CVE-2026-50272 via dd-trace (>=5.0.0, <=5.98.0)

dd-trace NPM version =5.0.0, =2.15.0, =2.0.0, =2.15.0, =0.0.0, =2.0.0, =1.4.0, =1.11.0, =0.1.0-build.1.2600806, =0.37.19, =0.37.5, =0.39.0 Source cves: CVE-2026-50272 Source advisory: OSV:GHSA-WXQQ-GCQ8-C443...

actix-prost (>=0.1.0, <=0.3.2), adns-server (>=0.1.0, <=0.3.0) +753 more potentially affected by unknown CVE via serde_with (>=3.8.1, <=3.14.1)

serdewith CARGO version =3.8.1, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.0.1, =0.1.1, =0.1.1, =0.1.5, =0.1.0, =0.1.0, =0.10.1 - attest-prove 0.0.1 - attest-types 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7GCF-G7XR-8HXJ...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3506 more potentially affected by CVE-2026-54490 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54490 Source advisory: SNYK:JS-WEBSOCKETDRIVER-17987674...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3506 more potentially affected by CVE-2026-54490 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54490 Source advisory: OSV:GHSA-MP7J-QC5W-4988...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3506 more potentially affected by CVE-2026-54466 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54466 Source advisory: OSV:GHSA-XV26-6W52-CPH6...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3506 more potentially affected by CVE-2026-54466 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54466 Source advisory: SNYK:JS-WEBSOCKETDRIVER-17987994...

@inkeep/agents-api (>=0.0.0-dev-20260121145510, <=0.80.6), @inkeep/agents-cli (>=0.0.0-chat-to-edit-20251119071712, <=0.80.6) +17 more potentially affected by CVE-2026-53515 via @better-auth/sso (>=1.3.28, <=1.6.9)

@better-auth/sso NPM version =1.3.28, =0.0.0-dev-20260121145510, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260106221934, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260203033642...

a2rl (>=1.0.0, <=1.2.0), aana (>=0.2.1, <=0.2.2.2) +2010 more potentially affected by CVE-2026-58659 via pytorch-lightning (>=0.5.3.2, <=2.6.5)

pytorch-lightning PYPI version =0.5.3.2, =1.0.0, =0.2.1, =1.1.0, =0.0.0, =1.0.1, =2.1.1, =0.1.0, =2.0.0, =1.3.0, =0.1.0, =0.8.1, =0.1.0, =1.0.1, =1.3.2 and more Source cves: CVE-2026-58659 Source advisory: SNYK:PYTHON-PYTORCHLIGHTNING-18016331...

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +38 more potentially affected by CVE-2026-59259 via n8n-core (>=1.0.0, <=1.122.34)

n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.26.0, =0.34.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =1.0.1, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =1.4.1 and more Source cves: CVE-2026-59259 Source advisory: SNYK:JS-N8NCORE-18017737...

@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @a700/n8n-nodes-agent700 (>=1.0.5, <=1.0.7) +2126 more potentially affected by CVE-2026-59259 via n8n-workflow (>=2.0.0, <=2.27.1)

n8n-workflow NPM version =2.0.0, =1.0.0, =1.0.5, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.2.2, =0.3.6, =0.1.0, =1.0.0, =1.3.1 and more Source cves: CVE-2026-59259 Source advisory: SNYK:JS-N8NWORKFLOW-18017739...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-16104 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-16104 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18751620...

libcrux-aead (>=0.0.4-pre.1, <=0.0.8) potentially affected by unknown CVE via libcrux-aesgcm (>=0.0.4, <=0.0.8-rc.2)

libcrux-aesgcm CARGO version =0.0.4, =0.0.4-pre.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0210...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-16106 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-16106 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752075...

@_immo/return (>=1.0.1, <=1.1.1), @abgov/angular-components (0.6.12) +54 more potentially affected by unknown CVE via true (>=0.0.3, <=0.0.4)

true NPM version =0.0.3, =1.0.1, =0.6.12, =0.6.12, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-TRUE-17976742...

@_immo/return (>=1.0.1, <=1.1.1), @abgov/angular-components (0.6.12) +53 more potentially affected by unknown CVE via true (0.0.4)

true NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on true and may be impacted: - @immo/return =1.0.1, =0.6.12, =0.6.12, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2 and more Source cves: unknown CVE...

@sigstore/cli (>=0.7.0, <=0.9.1) potentially affected by CVE-2026-59891 via @sigstore/oci (>=0.2.0, <=0.6.1)

@sigstore/oci NPM version =0.2.0, =0.7.0, =0.9.1 Source cves: CVE-2026-59891 Source advisory: SNYK:JS-SIGSTOREOCI-17972390...

@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +1 more potentially affected by CVE-2026-50131 via @fedify/fedify (>=2.0.0, <=2.0.18)

@fedify/fedify NPM version =2.0.0, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0-dev.1757, =2.0.18 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

@fedify/botkit (>=0.4.0-dev.177, <=0.4.0-dev.181), @fedify/botkit-sqlite (>=0.4.0-dev.177, <=0.4.0-dev.181) potentially affected by CVE-2026-50131 via @fedify/fedify (1.10.0)

@fedify/fedify NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.4.0-dev.177, =0.4.0-dev.177, =0.4.0-dev.181 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...