6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1086 more potentially affected by CVE-2026-83613 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83613 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499072...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1086 more potentially affected by CVE-2026-83615 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83615 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499069...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4328 more potentially affected by CVE-2026-83611 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.0.1, =0.0.2 - @abcd19/st-grid 3.1.0 and more Source cves: CVE-2026-83611 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498557...

@142vip/egg (>=0.0.1-alpha.5, <=0.0.1-alpha.6), @142vip/egg-grpc-client (0.0.1-alpha.4) +489 more potentially affected by unknown CVE via mysql2 (>=3.0.0, <=3.21.1)

mysql2 NPM version =3.0.0, =0.0.1-alpha.5, =0.0.1-alpha.4, =0.0.1-alpha.1, =4.2.3, =15.0.0, =0.2.0, =1.0.0, =0.0.27, =1.0.43, =0.3.1, =0.4.22 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3F6P-5WW8-9RCR...

@yane88/workbuddy (1.0.1) potentially affected by unknown CVE via @yane88/workbuddy-03 (1.0.1)

@yane88/workbuddy-03 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @yane88/workbuddy-03 and may be impacted: - @yane88/workbuddy 1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-15667...

@yane88/idea-2026.2 (1.0.0) potentially affected by unknown CVE via @yane88/idea-2026.2-02 (1.0.0)

@yane88/idea-2026.2-02 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @yane88/idea-2026.2-02 and may be impacted: - @yane88/idea-2026.2 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-YANE88IDEA2026202-19477012...

@yane88/listary (>=1.0.0, <=1.0.1) potentially affected by unknown CVE via @yane88/listary-01 (>=1.0.0, <=1.0.1)

@yane88/listary-01 NPM version =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-YANE88LISTARY01-19477010...

@yane88/idea-2026.2 (1.0.0) potentially affected by unknown CVE via @yane88/idea-2026.2-02 (1.0.0)

@yane88/idea-2026.2-02 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @yane88/idea-2026.2-02 and may be impacted: - @yane88/idea-2026.2 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-15652...

@pnpm/building.commands (>=1100.0.0, <=1100.1.8), @pnpm/deps.compliance.commands (>=1100.0.0, <=1101.5.1) +10 more potentially affected by CVE-2026-82393 via @pnpm/installing.deps-resolver (>=1100.0.0, <=1100.2.6)

@pnpm/installing.deps-resolver NPM version =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =0.0.1, =0.0.21 Source cves: CVE-2026-82393 Source advisory: SNYK:JS-PNPMINSTALLINGDEPSRESOLVER-19477039...

@pnpm/building.commands (>=1100.0.0, <=1100.1.7), @pnpm/deps.compliance.commands (>=1100.0.0, <=1101.5.0) +10 more potentially affected by CVE-2026-82392 via @pnpm/deps.graph-builder (>=1100.0.0, <=1100.0.18)

@pnpm/deps.graph-builder NPM version =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =0.0.1, =0.0.21 Source cves: CVE-2026-82392 Source advisory: SNYK:JS-PNPMDEPSGRAPHBUILDER-19477021...

@142vip/egg (>=0.0.1-alpha.5, <=0.0.1-alpha.6), @142vip/egg-grpc-client (0.0.1-alpha.4) +506 more potentially affected by unknown CVE via mysql2 (>=3.0.0, <=3.23.0)

mysql2 NPM version =3.0.0, =0.0.1-alpha.5, =0.0.1-alpha.4, =0.0.1-alpha.1, =4.2.3, =15.0.0, =0.2.0, =1.0.0, =0.0.27, =1.0.43, =0.3.1, =0.4.22 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-MYSQL2-19512510...

@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.155) +62 more potentially affected by CVE-2026-55854 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55854 via mariadb (>=3.3.0, <=3.3.2)

mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-55854 Source advisory: OSV:GHSA-42R5-VHPQ-M858...

@aliceo2/infologger (>=1.16.0, <=1.18.0) potentially affected by CVE-2026-55854 via mariadb (3.5.2)

mariadb NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on mariadb and may be impacted: - @aliceo2/infologger =1.16.0, =1.18.0 Source cves: CVE-2026-55854 Source advisory: OSV:GHSA-42R5-VHPQ-M858...

@aliceo2/infologger (>=1.16.0, <=1.18.0) potentially affected by CVE-2026-55215 via mariadb (3.5.2)

mariadb NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on mariadb and may be impacted: - @aliceo2/infologger =1.16.0, =1.18.0 Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...

@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.155) +62 more potentially affected by CVE-2026-55215 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

@adobe/aem-site-template-builder (>=0.1.7, <=2.0.2), @ns3/nx-serverless (>=3.2.2, <=4.1.0) +4 more potentially affected by CVE-2026-80427 via bestzip (>=2.1.6, <=2.2.1)

bestzip NPM version =2.1.6, =0.1.7, =3.2.2, =0.3.0, =1.0.7-6, =1.0.2-1, =1.0.0, =1.0.2 Source cves: CVE-2026-80427 Source advisory: SNYK:JS-BESTZIP-19276666...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +1028 more potentially affected by CVE-2026-75604 via next (>=16.0.0, <=16.3.2)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-75604 Source advisory:...

@arxen/sso (0.2.0), @inkeep/agents-api (>=0.0.0-dev-20260121145510, <=0.80.6) +18 more potentially affected by CVE-2026-80192 via @better-auth/sso (>=1.4.10, <=1.6.26)

@better-auth/sso NPM version =1.4.10, =0.0.0-dev-20260121145510, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260106221934, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260203033642...

@nohost/server (>=0.0.1-beta2, <=0.3.6) potentially affected by CVE-2026-55629 via whistle (>=2.3.7, <=2.9.85-beta)

whistle NPM version =2.3.7, =0.0.1-beta2, =0.3.6 Source cves: CVE-2026-55629 Source advisory: OSV:GHSA-3VFR-4GWF-QXFP...

@142vip/egg (>=0.0.1-alpha.1, <=0.0.1-alpha.6), @142vip/egg-axios (>=0.0.1-alpha.1, <=0.0.1-alpha.2) +1610 more potentially affected by CVE-2026-55553 via urllib (>=3.1.2, <=4.9.0)

urllib NPM version =3.1.2, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.2, =0.0.1-alpha.2, =2.6.4, =1.7.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.0.15, =1.2.17 and more Source cves: CVE-2026-55553 Source advisory: OSV:GHSA-HQ3H-G68C-HP78...

@adobe/probot-serverless-openwhisk (>=4.0.24, <=4.0.55), @csnext/cs-layer-server (>=0.0.101-beta.22, <=0.0.132-beta.207) +248 more potentially affected by CVE-2026-16231 via hbs (>=2.1.0, <=4.2.1)

hbs NPM version =2.1.0, =4.0.24, =0.0.101-beta.22, =0.7.0, =0.7.0, =0.7.0, =1.0.0, =0.19.0, =2.0.1, =0.1.5, =1.0.36, =0.9.0, =0.0.1-alpha.0, =0.1.2, =0.1.2, =0.3.2 and more Source cves: CVE-2026-16231 Source advisory: SNYK:JS-HBS-19256914...

8004skill (>=1.1.0, <=2.0.0), @a3stack/identity (0.2.0) +224 more potentially affected by CVE-2026-77384 via @libp2p/circuit-relay-v2 (>=2.1.5, <=4.2.0)

@libp2p/circuit-relay-v2 NPM version =2.1.5, =1.1.0, =1.0.4, =1.0.0, =1.0.0, =1.0.1, =0.1.0-alpha.1, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.1, =0.0.12 - @blockless/browser-node 0.1.1 - @bluzelle/sdk 1.0.25 and more Source cves: CVE-2026-77384 Source advisory: SNYK:JS-LIBP2PCIRCUITRELAYV2-19256805...

abraham3k (>=1.3.8, <=1.5.3), accutuning-helpers (>=1.0.32, <=1.0.33) +75 more potentially affected by CVE-2026-76843 via flair (>=0.4.5, <=0.15.1)

flair PYPI version =0.4.5, =1.3.8, =1.0.32, =0.0.1, =0.1.0, =0.0.6, =0.1.20, =0.1.0, =0.1.0, =0.0.1.1, =0.2.4, =0.1.1, =0.0.1rc2, =0.0.1rc3488056308109 and more Source cves: CVE-2026-76843 Source advisory: SNYK:PYTHON-FLAIR-19256938...

@diviops/mcp-server (1.5.40), @donadiosolutions/lcm (>=1.4.2, <=1.4.3) +17 more potentially affected by CVE-2026-75931 via fast-uri (>=3.1.4, <=3.1.5)

fast-uri NPM version =3.1.4, =1.4.2, =1.2.0, =1.4.18, =0.2.0-alpha.5, =0.1.0, =0.1.6, =0.16.2-cloud-1, =0.1.5, =0.1.3, =3.38.11, =0.1.0, =0.1.0, =0.1.12, =0.1.14 and more Source cves: CVE-2026-75931 Source advisory: SNYK:JS-FASTURI-19256867...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (1.5.40) +24 more potentially affected by CVE-2026-75975 via fast-uri (>=3.0.1, <=3.1.5)

fast-uri NPM version =3.0.1, =0.3.1, =1.4.2, =1.2.0, =1.4.18, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.0, =0.1.6, =0.16.2-cloud-1, =1.25.0, =1.28.1 and more Source cves: CVE-2026-75975 Source advisory: SNYK:JS-FASTURI-19256871...

@godmode-team/godmode (1.6.1), @growthub/cli (>=0.3.1, <=0.3.44) +10 more potentially affected by CVE-2026-77087 via @paperclipai/server (>=0.2.7, <=2026.831.0-canary.0)

@paperclipai/server NPM version =0.2.7, =0.3.1, =0.1.45, =2026.324.0-canary.0, =0.0.2, =0.2.2, =0.6.5, =0.6.6 - solounicornclub 0.3.1 - stacy-cli 0.3.1 - superceo 0.3.2 - twinforgecli 0.3.2 Source cves: CVE-2026-77087 Source advisory: SNYK:JS-PAPERCLIPAISERVER-19233837...

@nocobase/devtools (>=2.0.0-alpha.2, <=2.1.0-beta.44), @nocobase/test (>=2.0.0-alpha.2, <=2.1.0-beta.44) potentially affected by unknown CVE via @nocobase/server (>=2.0.0, <=2.1.0-beta.44)

@nocobase/server NPM version =2.0.0, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.1.0-beta.44 Source cves: unknown CVE Source advisory: OSV:GHSA-GHVF-QF6H-G8X5...

a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.0.16, <=0.10.15) +13712 more potentially affected by unknown CVE via h2 (>=0.1.26, <=0.3.27)

h2 CARGO version =0.1.26, =0.1.0, =0.0.16, =0.2.0, =0.1.0, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0-beta.4, =0.2.0-beta.7 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0258...

3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1217 more potentially affected by CVE-2026-13697 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.0, =1.28.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-13697 Source...

budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18319711...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22324 more potentially affected by CVE-2026-35590 via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: CVE-2026-35590 Source advisory: SNYK:JS-SHARP-18184416...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22324 more potentially affected by CVE-2026-35591 via sharp (>=0.4.2, <=0.34.5)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: CVE-2026-35591 Source advisory: SNYK:JS-SHARP-18184418...

@chocolatey-software/astro (>=2.0.0, <=2.8.0), @kunyan/astro-blog (>=0.1.3, <=0.1.4) +19 more potentially affected by CVE-2026-59728 via @astrojs/rss (>=2.4.0, <=4.0.18)

@astrojs/rss NPM version =2.4.0, =2.0.0, =0.1.3, =0.0.1, =0.1.0, =0.0.9, =0.1.0, =0.2.0, =0.0.1, =1.0.29, =0.1.0, =0.2.0 and more Source cves: CVE-2026-59728 Source advisory: SNYK:JS-ASTROJSRSS-18085631...

@chocolatey-software/astro (>=2.0.0, <=2.8.0), @kunyan/astro-blog (>=0.1.3, <=0.1.4) +19 more potentially affected by CVE-2026-59728 via @astrojs/rss (>=2.4.0, <=4.0.18)

@astrojs/rss NPM version =2.4.0, =2.0.0, =0.1.3, =0.0.1, =0.1.0, =0.0.9, =0.1.0, =0.2.0, =0.0.1, =1.0.29, =0.1.0, =0.2.0 and more Source cves: CVE-2026-59728 Source advisory: OSV:GHSA-8J5Q-MFJ2-5Q9Q...

@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +28 more potentially affected by CVE-2026-62215 via openclaw (>=2026.3.22, <=2026.6.1)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62215 Source advisory: SNYK:JS-OPENCLAW-18021332...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62222 via openclaw (>=2026.3.22, <=2026.5.20)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62222 Source advisory: SNYK:JS-OPENCLAW-18017835...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62224 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62224 Source advisory: SNYK:JS-OPENCLAW-18017831...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @agentuity/evals (>=0.0.104, <=2.0.30) +426 more potentially affected by CVE-2026-50289 via systeminformation (>=5.0.6, <=5.31.6)

systeminformation NPM version =5.0.6, =1.17.6-next.0, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.1.1, =0.1.1, =4.1.0-rc.4, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =4.260426.2, =1.0.10, =1.0.84 and more Source cves: CVE-2026-50289 Source advisory:...

@n8n/backend-test-utils (1.28.0), @n8n/db (1.28.0) +1 more potentially affected by CVE-2026-59259 via n8n-core (2.28.0)

n8n-core NPM version 2.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-core and may be impacted: - @n8n/backend-test-utils 1.28.0 - @n8n/db 1.28.0 - @n8n/task-runner 2.28.0 Source cves: CVE-2026-59259 Source advisory: SNYK:JS-N8NCORE-18017737...

@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @aayshian/n8n-aisensy-ay19 (0.0.1) +111 more potentially affected by CVE-2026-59209 via n8n-core (>=2.0.0, <=2.27.2)

n8n-core NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.3.6, =0.1.0, =1.0.0, =0.1.4, =1.1.3, =1.1.6 and more Source cves: CVE-2026-59209 Source advisory: SNYK:JS-N8NCORE-17954281...

@n8n/backend-test-utils (1.28.0), @n8n/db (1.28.0) +1 more potentially affected by CVE-2026-59209 via n8n-core (2.28.0)

n8n-core NPM version 2.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-core and may be impacted: - @n8n/backend-test-utils 1.28.0 - @n8n/db 1.28.0 - @n8n/task-runner 2.28.0 Source cves: CVE-2026-59209 Source advisory: SNYK:JS-N8NCORE-17954281...

ez-pyload (>=1.0.0, <=1.0.4) potentially affected by CVE-2026-48987 via pyload-ng (0.5.0b3.dev101)

pyload-ng PYPI version 0.5.0b3.dev101 is affected by a known vulnerability. The following packages have a transitive dependency on pyload-ng and may be impacted: - ez-pyload =1.0.0, =1.0.4 Source cves: CVE-2026-48987 Source advisory: SNYK:PYTHON-PYLOADNG-17911017...

ez-pyload (>=1.0.0, <=1.0.4) potentially affected by CVE-2026-48737 via pyload-ng (0.5.0b3.dev101)

pyload-ng PYPI version 0.5.0b3.dev101 is affected by a known vulnerability. The following packages have a transitive dependency on pyload-ng and may be impacted: - ez-pyload =1.0.0, =1.0.4 Source cves: CVE-2026-48737 Source advisory: SNYK:PYTHON-PYLOADNG-17911022...

@abstraxn/signer-react (>=2.0.2, <=3.3.3), @account-kit/react (>=4.53.1-alpha.0, <=4.88.5) +690 more potentially affected by CVE-2026-59877 via protobufjs (>=7.5.0, <=7.6.4)

protobufjs NPM version =7.5.0, =2.0.2, =4.53.1-alpha.0, =4.15.0, =3.26.0, =0.1.0, =1.9.1, =2.1.7-alpha-2, =0.1.0, =1.0.0-canary.15, =0.0.2, =0.0.1, =0.0.0-experimental-02e44603-20260603, =0.0.0-experimental-02e44603-20260603, =1.1.0 and more Source cves: CVE-2026-59877 Source advisory:...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1151 more potentially affected by CVE-2026-59877 via protobufjs (>=8.0.0, <=8.6.5)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.8.0 and more Source cves: CVE-2026-59877 Source advisory: SNYK:JS-PROTOBUFJS-17900550...

@0xgraph/cli (>=0.0.1, <=0.2.1), @actra-development-oss/redux-persistable (>=2.0.0, <=3.0.0) +653 more potentially affected by CVE-2026-59879 via immutable (>=4.0.0, <=4.3.8)

immutable NPM version =4.0.0, =0.0.1, =2.0.0, =0.2.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.0.1, =0.11.8-rc.0, =0.1.0, =0.3.3 - @alfresco/adf-testing 6.0.0-A.2-8258 - @alys-chain/graph-alys-cli 0.88.0 and more Source cves: CVE-2026-59879 Source advisory: SNYK:JS-IMMUTABLE-17900573...

llama-index-llms-openllm (>=0.0.1, <=0.4.0) potentially affected by CVE-2026-15035 via openllm (>=0.4.44, <=0.6.30)

openllm PYPI version =0.4.44, =0.0.1, =0.4.0 Source cves: CVE-2026-15035 Source advisory: SNYK:PYTHON-OPENLLM-17895040...

@anchrd/gate-api (>=0.1.1, <=0.26.0), @inkeep/agents-api (>=0.0.0-dev-20260121145510, <=0.80.6) +20 more potentially affected by unknown CVE via @better-auth/oauth-provider (>=1.5.5, <=1.6.25)

@better-auth/oauth-provider NPM version =1.5.5, =0.1.1, =0.0.0-dev-20260121145510, =0.0.0-chat-to-edit-20251119071712, =0.0.0-dev-20260410224321, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712, =0.0.0-chat-to-edit-20251119071712,...

@knocklabs/client (>=0.21.6, <=0.22.1), @knocklabs/expo (>=0.5.0, <=0.8.1) +8 more potentially affected by CVE-2026-56812 via phoenix (>=1.8.0, <=1.8.7)

phoenix NPM version =1.8.0, =0.21.6, =0.5.0, =0.1.0, =0.1.1, =0.1.1, =0.0.2, =0.0.1, =0.0.2, =0.0.1, =2.1.8, =2.5.4 Source cves: CVE-2026-56812 Source advisory: OSV:EEF-CVE-2026-56812...