10909 matches found
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +18 more potentially affected by unknown CVE via openclaw (>=2026.3.22, <=2026.4.5)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =4.2.0 - openclaw-chatclaw 0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-OPENCLAW-15989071...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +18 more potentially affected by CVE-2026-42422 via openclaw (>=2026.3.22, <=2026.4.5)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =4.2.0 - openclaw-chatclaw 0.1.0 and more Source cves: CVE-2026-42422 Source advisory: SNYK:JS-OPENCLAW-15989079...
@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.13.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.13.1) +1 more potentially affected by CVE-2026-35040 via fast-jwt (>=6.0.0, <=6.0.1)
fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.13.1 Source cves: CVE-2026-35040 Source advisory: SNYK:JS-FASTJWT-15965926...
@frontmcp/adapters (>=0.5.0, <=1.0.3), frontmcp (0.5.0) potentially affected by CVE-2026-39885 via mcp-from-openapi (>=2.0.0, <=2.1.2)
mcp-from-openapi NPM version =2.0.0, =0.5.0, =1.0.3 - frontmcp 0.5.0 Source cves: CVE-2026-39885 Source advisory: OSV:GHSA-V6PH-XCQ9-QXXJ...
@bitblit/ratchet-aws-node-only (>=6.1.196-alpha, <=6.1.200-alpha), @bitblit/ratchet-epsilon-common (>=6.1.196-alpha, <=6.1.200-alpha) +70 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.4)
nodemailer NPM version =8.0.0, =6.1.196-alpha, =6.1.196-alpha, =6.1.196-alpha, =0.0.1, =3.35.0, =4.0.0-canary.13686, =4.0.0-canary.13686, =20.6.0, =5.0.10, =0.0.1-beta.0, =0.2.0-alpha.1, =0.19.1, =6.0.0-beta.9, =11.14.0, =11.22.1 and more Source cves: unknown CVE Source advisory:...
@bitblit/ratchet-aws-node-only (>=6.1.196-alpha, <=6.1.200-alpha), @bitblit/ratchet-epsilon-common (>=6.1.196-alpha, <=6.1.200-alpha) +70 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.4)
nodemailer NPM version =8.0.0, =6.1.196-alpha, =6.1.196-alpha, =6.1.196-alpha, =0.0.1, =3.35.0, =4.0.0-canary.13686, =4.0.0-canary.13686, =20.6.0, =5.0.10, =0.0.1-beta.0, =0.2.0-alpha.1, =0.19.1, =6.0.0-beta.9, =11.14.0, =11.22.1 and more Source cves: unknown CVE Source advisory:...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +151 more potentially affected by CVE-2026-39412 via liquidjs (>=10.2.0, <=10.25.2)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0-beta.1 and more Source cves: CVE-2026-39412 Source advisory: SNYK:JS-LIQUIDJS-15930991...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +508 more potentially affected by CVE-2026-39410 via hono (>=4.0.0, <=4.12.10)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =2026.4.4, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.70 and more Source cves: CVE-2026-39410 Source advisory: OSV:GHSA-R5RP-J6WH-RVV4...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +508 more potentially affected by CVE-2026-39409 via hono (>=4.0.0, <=4.12.10)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =2026.4.4, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.70 and more Source cves: CVE-2026-39409 Source advisory: OSV:GHSA-XPCF-PG52-R92G...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +508 more potentially affected by CVE-2026-56762 via hono (>=4.0.0, <=4.12.10)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =2026.4.4, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.70 and more Source cves: CVE-2026-56762 Source advisory: OSV:GHSA-26PP-8WGV-HJVM...
0xble (>=21.4.1, <=22.1.2), 5e-srd-tools (>=0.0.4, <=0.0.34) +2482 more potentially affected by CVE-2026-39356 via drizzle-orm (>=0.9.19, <=0.45.1)
drizzle-orm NPM version =0.9.19, =21.4.1, =0.0.4, =0.0.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =1.0.10, =0.22.5, =0.45.5 and more Source cves: CVE-2026-39356 Source advisory: OSV:GHSA-GPJ5-G38J-94V9...
0xble (>=21.4.1, <=22.1.2), @10xsai/ts-serverless (>=0.1.0, <=0.1.1) +1745 more potentially affected by CVE-2026-39356 via drizzle-orm (>=0.37.0, <=0.45.1)
drizzle-orm NPM version =0.37.0, =21.4.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =1.0.10, =0.22.5, =0.1.0, =1.16.47-beta-20250723-114212-8da08071, =1.17.8-beta-20260115-130425-5c8d9a61 and more Source cves: CVE-2026-39356 Source advisory:...
lytx (>=0.3.0, <=0.3.15) potentially affected by CVE-2026-39371 via rwsdk (1.0.0-beta.49)
rwsdk NPM version 1.0.0-beta.49 is affected by a known vulnerability. The following packages have a transitive dependency on rwsdk and may be impacted: - lytx =0.3.0, =0.3.15 Source cves: CVE-2026-39371 Source advisory: SNYK:JS-RWSDK-15995504...
@openinc/parse-server-opendash (>=4.0.0, <=4.0.11) potentially affected by CVE-2026-39321 via parse-server (>=9.6.0-alpha.37, <=9.7.0)
parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.11 Source cves: CVE-2026-39321 Source advisory: OSV:GHSA-MMPQ-5HCV-HF2V...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by unknown CVE via openclaw (>=2026.3.22, <=2026.4.1)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: unknown CVE Source advisory: SNYK:JS-OPENCLAW-15928885...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41392 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41392 Source advisory: OSV:GHSA-WPC6-37G7-8Q4W...
antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24175 via nvidia-pytriton (0.7.0)
nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24175 Source advisory:...
antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24146 via nvidia-pytriton (0.7.0)
nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2026-24146 Source advisory:...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by CVE-2026-41359 via openclaw (>=2026.3.22, <=2026.3.24-beta.2)
openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-41359 Source advisory: OSV:GHSA-767M-XRHC-FXM7...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41297 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41297 Source advisory: SNYK:JS-OPENCLAW-15929056...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41408 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41408 Source advisory: SNYK:JS-OPENCLAW-15929063...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41408 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41408 Source advisory: OSV:GHSA-4G5X-2JFC-XM98...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34765 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34765 Source advisory: SNYK:JS-ELECTRON-15923931...
@ablehi/automation-app-build (>=0.1.0, <=0.1.22), @ablehi/automation-app-cli (>=0.1.0, <=0.1.22) +144 more potentially affected by CVE-2026-39363 via vite (>=8.0.0, <=8.0.3)
vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =3.0.1-alpha.0, =3.3.0, =11.17.0-depup.0, =35.0.0, =17.1.0, =4.0.0, =9.6.10, =0.1.0, =0.1.0, =0.0.0-experimental-04f2240-20260306-7fcde375, =0.0.0-experimental-fd6d426-20260301-87c73ec5 and more Source cves: CVE-2026-39363 Source advisory:...
@ablehi/automation-app-build (>=0.1.0, <=0.1.22), @ablehi/automation-app-cli (>=0.1.0, <=0.1.22) +144 more potentially affected by CVE-2026-39363 via vite (>=8.0.0, <=8.0.3)
vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =3.0.1-alpha.0, =3.3.0, =11.17.0-depup.0, =35.0.0, =17.1.0, =4.0.0, =9.6.10, =0.1.0, =0.1.0, =0.0.0-experimental-04f2240-20260306-7fcde375, =0.0.0-experimental-fd6d426-20260301-87c73ec5 and more Source cves: CVE-2026-39363 Source advisory:...
org.webjars.npm:vitepress (1.0.0-draft.8) potentially affected by CVE-2026-39363 via org.webjars.npm:vite (3.0.0-beta.9)
org.webjars.npm:vite MAVEN version 3.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vite and may be impacted: - org.webjars.npm:vitepress 1.0.0-draft.8 Source cves: CVE-2026-39363 Source advisory:...
fagoon-upgrade (>=2.0.0, <=2.1.7), gpt-researcher-mcp (>=0.1.0, <=0.1.5) +2 more potentially affected by CVE-2026-5633 via gpt-researcher (>=0.14.4, <=0.16.0)
gpt-researcher PYPI version =0.14.4, =2.0.0, =0.1.0, =2.1.6, =2.1.8 Source cves: CVE-2026-5633 Source advisory: SNYK:PYTHON-GPTRESEARCHER-15917485...
@0t4u-org/eslint-config (>=0.6.0, <=0.6.2), @142vip/vue (>=0.1.6-alpha.11, <=0.1.6-alpha.18) +481 more potentially affected by CVE-2026-35209 via defu (>=6.0.0, <=6.1.4)
defu NPM version =6.0.0, =0.6.0, =0.1.6-alpha.11, =0.0.1, =0.0.3, =1.0.0, =0.1.22, =0.1.23, =0.1.25 and more Source cves: CVE-2026-35209 Source advisory: SNYK:JS-DEFU-15914644...
org.webjars.npm:listhen (1.0.1), org.webjars.npm:radix-vue (1.9.17) +5 more potentially affected by CVE-2026-35209 via org.webjars.npm:defu (6.1.4)
org.webjars.npm:defu MAVEN version 6.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:defu and may be impacted: - org.webjars.npm:listhen 1.0.1 - org.webjars.npm:radix-vue 1.9.17 - org.webjars.npm:rc9 =2.0.0, =0.52.1, =0.52.3 Source...
@altipla/directus-sdk-utils (0.7.2), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.6) +5 more potentially affected by unknown CVE via directus (>=11.0.0, <=11.16.1)
directus NPM version =11.0.0, =1.6.3, =20.0.0-rc.0, =34.0.1 - @fahami/directus-pkce 1.0.0 - abcprotocol 0.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-DIRECTUS-15907599...
@altipla/directus-sdk-utils (0.7.2), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.6) +5 more potentially affected by CVE-2026-39943 via directus (>=11.0.0, <=11.16.1)
directus NPM version =11.0.0, =1.6.3, =20.0.0-rc.0, =34.0.1 - @fahami/directus-pkce 1.0.0 - abcprotocol 0.0.1 Source cves: CVE-2026-39943 Source advisory: SNYK:JS-DIRECTUS-15907612...
@altipla/directus-sdk-utils (0.7.2), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.6) +4 more potentially affected by CVE-2026-35409 via directus (>=11.0.0, <=11.15.4)
directus NPM version =11.0.0, =1.6.3, =20.0.0-rc.0, =33.3.1 - @fahami/directus-pkce 1.0.0 - abcprotocol 0.0.1 Source cves: CVE-2026-35409 Source advisory: OSV:GHSA-WV3H-5FX7-966H...
@altipla/directus-sdk-utils (0.7.2), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.6) +5 more potentially affected by CVE-2026-35408 via directus (>=11.0.0, <=11.16.1)
directus NPM version =11.0.0, =1.6.3, =20.0.0-rc.0, =34.0.1 - @fahami/directus-pkce 1.0.0 - abcprotocol 0.0.1 Source cves: CVE-2026-35408 Source advisory: SNYK:JS-DIRECTUS-15907600...
@budibase/backend-core (>=3.0.0, <=3.2.26), @budibase/bbui (>=3.0.0, <=3.2.26) +6 more potentially affected by CVE-2026-35216 via @budibase/shared-core (>=3.0.0, <=3.2.26)
@budibase/shared-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-35216 Source advisory: SNYK:JS-BUDIBASESHAREDCORE-15917499...
@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.13.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.13.1) +1 more potentially affected by CVE-2026-35042 via fast-jwt (>=6.0.0, <=6.0.1)
fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.13.1 Source cves: CVE-2026-35042 Source advisory: OSV:GHSA-HM7R-C7QW-GHP6...
@budibase/backend-core (>=3.0.0, <=3.2.26), @budibase/bbui (>=3.0.0, <=3.2.26) +7 more potentially affected by CVE-2026-25044 via @budibase/types (>=3.0.0, <=3.2.26)
@budibase/types NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-25044 Source advisory: SNYK:JS-BUDIBASETYPES-15917502...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34764 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34764 Source advisory: SNYK:JS-ELECTRON-15907847...
@afidos/nestjs-event-notifications (>=2.2.1, <=2.2.2), @mieweb/wikigdrive (>=2.15.0, <=2.17.1) +3 more potentially affected by CVE-2026-34208 via @nyariv/sandboxjs (>=0.5.3, <=0.8.25)
@nyariv/sandboxjs NPM version =0.5.3, =2.2.1, =2.15.0, =0.2.0, =11.0.0, =12.0.1 Source cves: CVE-2026-34208 Source advisory: OSV:GHSA-2GG9-6P7W-6CPJ...
1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2050 more potentially affected by CVE-2026-65912 via dompurify (>=3.0.0, <=3.3.1)
dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: CVE-2026-65912 Source advisory: OSV:GHSA-CJMM-F4JC-QW8R...
1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2050 more potentially affected by unknown CVE via dompurify (>=3.0.0, <=3.3.1)
dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: unknown CVE Source advisory: SNYK:JS-DOMPURIFY-15874905...
1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2050 more potentially affected by CVE-2026-65913 via dompurify (>=3.0.0, <=3.3.1)
dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: CVE-2026-65913 Source advisory: OSV:GHSA-CJ63-JHHR-WCXV...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41300 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41300 Source advisory: SNYK:JS-OPENCLAW-15893799...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41338 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41338 Source advisory: SNYK:JS-OPENCLAW-15893696...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41334 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41334 Source advisory: OSV:GHSA-W85G-3H6X-4XH2...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by unknown CVE via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: unknown CVE Source advisory: SNYK:JS-OPENCLAW-15894806...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41397 via openclaw (>=2026.3.22, <=2026.3.28)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41397 Source advisory: OSV:GHSA-CWF8-44X6-32C2...
@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34779 via electron (>=39.0.0, <=39.2.7)
electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34775 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34775 Source advisory: OSV:GHSA-XWR5-M59H-VWQR...
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34773 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34773 Source advisory: SNYK:JS-ELECTRON-15876714...
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34773 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34773 Source advisory: OSV:GHSA-MWMH-MQ4G-G6GR...