@fangoling/ai-terminal-assistant (0.1.0), @theia/ai-anthropic (>=1.57.0-next.37, <=1.70.2) +28 more potentially affected by CVE-2026-44688 via @theia/ai-core (>=1.46.0-next.241, <=1.70.2)

@theia/ai-core NPM version =1.46.0-next.241, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.46.0-next.241, =1.67.0-next.56, =1.68.0-next.79, =1.64.0, =0.0.1, =1.60.0, =1.46.0-next.241, =1.46.0-next.241, =1.59.0-next.62, =1.70.2 - @theia/ai-ide-agents 1.57.0-next.136 and more...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.70.2), @theia/ai-claude-code (>=1.65.0, <=1.70.2) +8 more potentially affected by CVE-2026-22551 via @theia/ai-chat (>=1.46.0-next.241, <=1.70.2)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-22551 Source advisory: SNYK:JS-THEIAAICHAT-17391864...

@theia/ai-claude-code (>=1.65.0, <=1.70.2), @theia/ai-codex (>=1.67.0-next.56, <=1.70.2) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0, <=1.70.2)

@theia/ai-chat-ui NPM version =1.57.0, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.70.2 Source cves: CVE-2026-44688 Source advisory: OSV:GHSA-3JWW-HXQJ-WFQ2...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.70.2), @theia/ai-claude-code (>=1.65.0, <=1.70.2) +8 more potentially affected by CVE-2026-44688 via @theia/ai-chat (>=1.46.0-next.241, <=1.70.2)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-44688 Source advisory: SNYK:JS-THEIAAICHAT-17391852...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.70.2), @theia/ai-claude-code (>=1.65.0, <=1.70.2) +8 more potentially affected by CVE-2026-22551 via @theia/ai-chat (>=1.46.0-next.241, <=1.70.2)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-22551 Source advisory: OSV:GHSA-QWJM-9C66-W4Q4...

@agenticmail/api (>=0.2.26, <=0.7.21), @agenticmail/claudecode (>=0.1.0, <=0.1.17) +5 more potentially affected by CVE-2026-57495 via @agenticmail/core (>=0.2.26, <=0.7.6)

@agenticmail/core NPM version =0.2.26, =0.2.26, =0.1.0, =0.5.57, =0.2.1, =0.5.40, =0.5.40, =0.3.0, =0.5.56 Source cves: CVE-2026-57495 Source advisory: OSV:GHSA-FQ4X-789W-JG5H...

alass-util (0.3.0), cervo (>=0.1.0, <=0.5.1) +25 more potentially affected by CVE-2026-55093 via tract-nnef (>=0.10.10, <=0.20.7)

tract-nnef CARGO version =0.10.10, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =1.2.0, =0.4.0, =0.2.0, =0.10.0, =0.19.0-alpha.8, =0.11.0, =0.12.5 and more Source cves: CVE-2026-55093 Source advisory: OSV:GHSA-X5MV-8WGW-29HG...

@0xwork/connect (>=0.1.0, <=0.1.9), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +501 more potentially affected by CVE-2026-9697 via undici (>=8.0.0, <=8.4.1)

undici NPM version =8.0.0, =0.1.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =2026.6.2, =1.0.0, =0.6.10, =0.3.1, =2026.4.23-zh, =0.2.0, =0.9.7 and more Source cves:...

@3ngram/server (0.7.0), @compeso/node-red-contrib-imap-email (1.0.0) +9 more potentially affected by unknown CVE via nodemailer (9.0.0)

nodemailer NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nodemailer and may be impacted: - @3ngram/server 0.7.0 - @compeso/node-red-contrib-imap-email 1.0.0 - @datasynx/agentic-crm =1.49.2, =0.25.3, =2.71.0, =2.72.0 - imapflow 1.4.1...

tamilai (0.0.2) potentially affected by CVE-2026-57133 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57133 Source advisory: OSV:GHSA-5JV7-2MJM-H6QJ...

tamilai (0.0.2) potentially affected by CVE-2026-57133 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57133 Source advisory: SNYK:JS-PRAISONAI-17660570...

tamilai (0.0.2) potentially affected by CVE-2026-57137 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57137 Source advisory: SNYK:JS-PRAISONAI-17660577...

tamilai (0.0.2) potentially affected by CVE-2026-57139 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57139 Source advisory: OSV:GHSA-J4F3-55X4-R6Q2...

tamilai (0.0.2) potentially affected by CVE-2026-57139 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57139 Source advisory: SNYK:JS-PRAISONAI-17660578...

tamilai (0.0.2) potentially affected by CVE-2026-57136 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57136 Source advisory: OSV:GHSA-VJV9-7M7J-H833...

tamilai (0.0.2) potentially affected by CVE-2026-57138 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57138 Source advisory: OSV:GHSA-VMMJ-PFW7-FJWP...

tamilai (0.0.2) potentially affected by CVE-2026-57135 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57135 Source advisory: OSV:GHSA-GQMF-56H7-RRPF...

tamilai (0.0.2) potentially affected by CVE-2026-57135 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57135 Source advisory: SNYK:JS-PRAISONAI-17660573...

@tinacms/app (>=0.0.0-00aadfd-20260223215804, <=2.5.5), @tinacms/cli (>=0.0.0-00aadfd-20260223215804, <=2.5.0) +5 more potentially affected by CVE-2026-55661 via @tinacms/mdx (>=2.0.0, <=2.1.6)

@tinacms/mdx NPM version =2.0.0, =0.0.0-00aadfd-20260223215804, =0.0.0-00aadfd-20260223215804, =0.0.0-00aadfd-20260223215804, =0.0.0-00aadfd-20260223215804, =0.0.0-00aadfd-20260223215804, =0.0.0-00aadfd-20260223215804, =0.0.0-00aadfd-20260223215804, =3.9.2 Source cves: CVE-2026-55661 Source...

cyezoi (>=0.0.4, <=0.0.8) potentially affected by CVE-2026-55617 via hydrooj (4.19.1)

hydrooj NPM version 4.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on hydrooj and may be impacted: - cyezoi =0.0.4, =0.0.8 Source cves: CVE-2026-55617 Source advisory: OSV:GHSA-94JP-7776-QJ6Q...

cyezoi (>=0.0.4, <=0.0.8) potentially affected by CVE-2026-55617 via hydrooj (4.19.1)

hydrooj NPM version 4.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on hydrooj and may be impacted: - cyezoi =0.0.4, =0.0.8 Source cves: CVE-2026-55617 Source advisory: SNYK:JS-HYDROOJ-17816664...

@adyen/adyen-salesforce-pwa (>=2.0.0, <=3.0.4), @angular-builders/custom-esbuild (>=18.0.0-beta.3, <=19.1.0) +135 more potentially affected by CVE-2026-55603 via http-proxy-middleware (>=3.0.5, <=3.0.6)

http-proxy-middleware NPM version =3.0.5, =2.0.0, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.2.19, =1.0.2, =0.9.1-next.19, =0.9.1-next.19, =0.9.1-next.19, =0.0.4, =3.0.0-alpha-1, =21.2.2-depup.0, =24.3.0-depup.0, =24.11.1-depup.1 and more Source cves: CVE-2026-55603 Source advisor...

@angular-devkit/build-angular (22.1.0-next.0), @oslokommune/auth-bff (>=2.0.1, <=2.2.1) +1 more potentially affected by CVE-2026-55603 via http-proxy-middleware (>=4.0.0, <=4.1.0)

http-proxy-middleware NPM version =4.0.0, =2.0.1, =8.6.0, =8.8.3 Source cves: CVE-2026-55603 Source advisory: OSV:GHSA-GCQ2-9PQ2-CXQM...

@adyen/adyen-salesforce-pwa (>=2.0.0, <=3.0.4), @amazeelabs/publisher (>=2.4.28, <=3.2.6) +207 more potentially affected by CVE-2026-55602 via http-proxy-middleware (>=3.0.0, <=3.0.5)

http-proxy-middleware NPM version =3.0.0, =2.0.0, =2.4.28, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.3, =1.0.0, =0.9.1-next.19, =0.9.1-next.19, =0.9.1-next.19, =0.0.4, =3.0.0-alpha-1, =21.2.2-depup.0, =21.2.7-depup.0 and more Source cves: CVE-2026-55602 Source advisory:...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +31074 more potentially affected by CVE-2026-55602 via http-proxy-middleware (>=0.16.0, <=2.0.9)

http-proxy-middleware NPM version =0.16.0, =1.0.1, =1.1.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +31074 more potentially affected by CVE-2026-55602 via http-proxy-middleware (>=0.16.0, <=2.0.9)

http-proxy-middleware NPM version =0.16.0, =1.0.1, =1.1.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

@5minds/processcube_engine (>=19.0.0-beta.11, <=20.0.0-renovate-fd1892-me5sbqz0), @angular-devkit/build-angular (>=20.0.0-rc.0, <=22.1.0-next.0) +57 more potentially affected by CVE-2026-55388 via piscina (>=5.0.0, <=5.1.4)

piscina NPM version =5.0.0, =19.0.0-beta.11, =20.0.0-rc.0, =20.0.0-rc.0, =1.0.0, =21.2.2-depup.0, =21.2.2-depup.0, =1.0.0, =5.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =0.1.0, =0.1.26, =4.0.0-beta.1, =4.2.1 and more Source cves:...

@angular-architects/build-angular (16.2.0-next.2), @angular-builders/custom-esbuild (>=17.1.0-beta.0, <=19.1.0) +165 more potentially affected by CVE-2026-55388 via piscina (>=4.0.0, <=4.9.2)

piscina NPM version =4.0.0, =17.1.0-beta.0, =16.0.0-beta.0, =18.2.6-RC-1, =16.0.0, =16.2.0-next.0, =18.0.0-next.3, =2.2.7-bb.6, =2.1.5, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.17-dev.20 and more Source cves: CVE-2026-55388 Source advisory: SNYK:JS-PISCINA-17817071...

@angular-architects/build-angular (16.2.0-next.2), @angular-builders/custom-esbuild (>=17.1.0-beta.0, <=19.1.0) +165 more potentially affected by CVE-2026-55388 via piscina (>=4.0.0, <=4.9.2)

piscina NPM version =4.0.0, =17.1.0-beta.0, =16.0.0-beta.0, =18.2.6-RC-1, =16.0.0, =16.2.0-next.0, =18.0.0-next.3, =2.2.7-bb.6, =2.1.5, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.17-dev.20 and more Source cves: CVE-2026-55388 Source advisory: OSV:GHSA-X9G3-XRWR-CWFG...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-55886 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-55886 Source advisory: SNYK:JS-JODIT-17375134...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53843 via openclaw (>=2026.3.22, <=2026.5.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53843 Source advisory: OSV:GHSA-Q99W-VH6V-Q3V7...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53864 via openclaw (>=2026.3.22, <=2026.5.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53864 Source advisory: SNYK:JS-OPENCLAW-17394027...

jest-test-plugin-utils (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via vite-common-utils (1.0.5)

vite-common-utils NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on vite-common-utils and may be impacted: - jest-test-plugin-utils =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6088...

a2grunnerp (>=0.1.0, <=0.1.8), agentfoundry (>=1.3.9, <=1.5.76) +214 more potentially affected by CVE-2025-26240 via pdfkit (>=0.6.0, <=1.0.0)

pdfkit PYPI version =0.6.0, =0.1.0, =1.3.9, =1.2.0, =0.1.35, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.5.3, =0.5.5, =0.1.17, =0.1.0, =0.7.2 and more Source cves: CVE-2025-26240 Source advisory: SNYK:PYTHON-PDFKIT-17391903...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2103 more potentially affected by CVE-2026-11525 via undici (>=6.0.0, <=6.26.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =0.5.21-beta.0, =0.5.43 and more Source cves: CVE-2026-11525 Source advisory: SNYK:JS-UNDICI-17372758...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +714 more potentially affected by CVE-2026-11525 via undici (>=7.0.0, <=7.27.2)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.33, =0.1.8, =0.0.1, =1.0.0, =0.1.7, =21.0.0-rc.2, =21.0.0-rc.2, =21.2.17 and more Source cves: CVE-2026-11525 Source advisory: SNYK:JS-UNDICI-17372758...

@0xwork/connect (>=0.1.0, <=0.1.9), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +501 more potentially affected by CVE-2026-12151 via undici (>=8.0.0, <=8.4.1)

undici NPM version =8.0.0, =0.1.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =2026.6.2, =1.0.0, =0.6.10, =0.3.1, =2026.4.23-zh, =0.2.0, =0.9.7 and more Source cves:...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2099 more potentially affected by CVE-2026-12151 via undici (>=6.0.0, <=6.25.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.3.7-canary.36.1, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =0.5.21-beta.0, =0.5.43 and more Source cves: CVE-2026-12151 Source advisory: SNYK:JS-UNDICI-17372754...

@0xwork/connect (>=0.1.0, <=0.1.9), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +501 more potentially affected by CVE-2026-6733 via undici (>=8.0.0, <=8.4.1)

undici NPM version =8.0.0, =0.1.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =2026.6.2, =1.0.0, =0.6.10, =0.3.1, =2026.4.23-zh, =0.2.0, =0.9.7 and more Source cves:...

org.webjars.npm:actions__core (>=1.10.0, <=1.11.1), org.webjars.npm:actions__http-client (>=2.2.1, <=2.2.3) +14 more potentially affected by CVE-2026-6733 via org.webjars.npm:undici (>=4.12.2, <=5.29.0)

org.webjars.npm:undici MAVEN version =4.12.2, =1.10.0, =2.2.1, =0.1.16, =0.1.28 - org.webjars.npm:elasticelasticsearch 8.6.0 - org.webjars.npm:elastictransport 8.3.1 - org.webjars.npm:firebase 10.13.0 - org.webjars.npm:firebaseauth 1.7.7 - org.webjars.npm:firebaseauth-compat 0.5.12 -...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +714 more potentially affected by CVE-2026-9678 via undici (>=7.0.0, <=7.27.2)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.33, =0.1.8, =0.0.1, =1.0.0, =0.1.7, =21.0.0-rc.2, =21.0.0-rc.2, =21.2.17 and more Source cves: CVE-2026-9678 Source advisory: SNYK:JS-UNDICI-17372697...

@0xwork/connect (>=0.1.0, <=0.1.9), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +501 more potentially affected by CVE-2026-9678 via undici (>=8.0.0, <=8.4.1)

undici NPM version =8.0.0, =0.1.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =2026.6.2, =1.0.0, =0.6.10, =0.3.1, =2026.4.23-zh, =0.2.0, =0.9.7 and more Source cves:...

@aegis-scan/core (>=0.18.1, <=0.19.0), @aegis-scan/reporters (>=0.18.4, <=0.19.0) +376 more potentially affected by CVE-2026-6734 via undici (>=7.24.0, <=7.27.2)

undici NPM version =7.24.0, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.8, =0.1.7, =21.2.4, =21.2.4, =0.1.0, =0.18.0, =0.1.0, =0.4.0, =0.1.0, =0.0.1, =0.1.2 and more Source cves: CVE-2026-6734 Source advisory: SNYK:JS-UNDICI-17372667...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +714 more potentially affected by CVE-2026-9679 via undici (>=7.0.0, <=7.27.2)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.33, =0.1.8, =0.0.1, =1.0.0, =0.1.7, =21.0.0-rc.2, =21.0.0-rc.2, =21.2.17 and more Source cves: CVE-2026-9679 Source advisory: SNYK:JS-UNDICI-17372658...

@aegis-scan/core (>=0.18.1, <=0.19.0), @aegis-scan/reporters (>=0.18.4, <=0.19.0) +376 more potentially affected by CVE-2026-9697 via undici (>=7.24.0, <=7.27.2)

undici NPM version =7.24.0, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.8, =0.1.7, =21.2.4, =21.2.4, =0.1.0, =0.18.0, =0.1.0, =0.4.0, =0.1.0, =0.0.1, =0.1.2 and more Source cves: CVE-2026-9697 Source advisory: SNYK:JS-UNDICI-17372609...

02url-querystring-http (>=1.0.1, <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5, <=1.0.6) +12637 more potentially affected by CVE-2026-5079 via multer (>=1.0.3, <=2.1.1)

multer NPM version =1.0.3, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.3 - 6e-alpha-backend-admin 1.0.0 and more Source cves: CVE-2026-5079 Source advisory: OSV:GHSA-72GW-MP4G-V24J...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +1553 more potentially affected by CVE-2026-5038 via multer (>=2.0.0, <=2.1.1)

multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.0-alpha.119, =1.2.1-dev.3, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.0.10, =0.6.2 and more Source cves: CVE-2026-5038 Source advisory: OSV:GHSA-3P4H-7M6X-2HCM...

1shot (>=0.0.3, <=0.0.9), @4via6/relay (>=1.0.0, <=1.1.3) +251 more potentially affected by CVE-2026-54316 via @anthropic-ai/claude-code (>=0.2.126, <=2.1.154)

@anthropic-ai/claude-code NPM version =0.2.126, =0.0.3, =1.0.0, =2.1.0, =0.1.18, =1.0.0, =0.4.0, =1.0.0, =0.2.3, =0.0.1, =0.0.1, =0.0.55, =0.0.69 and more Source cves: CVE-2026-54316 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-17391874...

1shot (>=0.0.3, <=0.0.9), @4via6/relay (>=1.0.0, <=1.1.3) +251 more potentially affected by CVE-2026-54316 via @anthropic-ai/claude-code (>=0.2.126, <=2.1.154)

@anthropic-ai/claude-code NPM version =0.2.126, =0.0.3, =1.0.0, =2.1.0, =0.1.18, =1.0.0, =0.4.0, =1.0.0, =0.2.3, =0.0.1, =0.0.1, =0.0.55, =0.0.69 and more Source cves: CVE-2026-54316 Source advisory: OSV:GHSA-FG94-H982-F3MM...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +228 more potentially affected by CVE-2026-54233 via vllm (>=0.1.3, <=0.26.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.7, =0.0.1b1, =0.1.15, =0.2.4, =1.0.0, =1.0.14 and more Source cves: CVE-2026-54233 Source advisory: SNYK:PYTHON-VLLM-17372794...