africanwhisper (>=0.2.8 <=0.9.0), agentx-tools (>=0.2.0 <=0.7.1) +204 more potentially affected by unknown CVE via yt-dlp (>=2021.9.2 <=2026.6.10.235405.dev0)

yt-dlp PYPI version =2021.9.2, =0.2.8, =0.2.0, =2023.3.3, =0.1.0, =0.3.0, =0.1.0, =1.1.5, =0.0.4, =0.1.7, =1.0.0, =0.9.0, =0.1.0, =1.4.0, =1.6.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-YTDLP-17353929...

africanwhisper (>=0.2.8 <=0.9.0), agentx-tools (>=0.2.0 <=0.7.1) +204 more potentially affected by unknown CVE via yt-dlp (>=2021.9.2 <=2026.6.10.235405.dev0)

yt-dlp PYPI version =2021.9.2, =0.2.8, =0.2.0, =2023.3.3, =0.1.0, =0.3.0, =0.1.0, =1.1.5, =0.0.4, =0.1.7, =1.0.0, =0.9.0, =0.1.0, =1.4.0, =1.6.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-69QJ-PVH9-C5WG...

nova-scheduler-filters (=0.1.0) potentially affected by CVE-2026-46448 via nova (=33.0.1)

nova PYPI version =33.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on nova and may be impacted: - nova-scheduler-filters =0.1.0 Source cves: CVE-2026-46448 Source advisory: OSV:GHSA-MFG3-P6M3-GJGR...

@0xwork/connect (>=0.1.0 <=0.1.8), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53848 via openclaw (>=2026.3.22 <=2026.5.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53848 Source advisory: SNYK:JS-OPENCLAW-17393760...

dashbox (>=0.1.0.post20260519 <=0.1.7.post202606100752), deeplabcut-live-gui (=2.0.0rc1) +34 more potentially affected by CVE-2026-50574 via yt-dlp (>=2026.1.29 <=2026.6.10.235405.dev0)

yt-dlp PYPI version =2026.1.29, =0.1.0.post20260519, =1.0.0, =3.4.3, =2.0.1, =0.1.1, =1.1.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0a1, =1.0.0, =0.0.0, =0.1.3 and more Source cves: CVE-2026-50574 Source advisory: SNYK:PYTHON-YTDLP-17353925...

africanwhisper (>=0.2.8 <=0.9.0), agentx-tools (>=0.2.0 <=0.7.1) +204 more potentially affected by CVE-2026-50574 via yt-dlp (>=2021.9.2 <=2026.6.10.235405.dev0)

yt-dlp PYPI version =2021.9.2, =0.2.8, =0.2.0, =2023.3.3, =0.1.0, =0.3.0, =0.1.0, =1.1.5, =0.0.4, =0.1.7, =1.0.0, =0.9.0, =0.1.0, =1.4.0, =1.6.0 and more Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-53755 via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-53755 Source advisory: OSV:GHSA-6QHC-X826-342C...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-53755 via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-53755 Source advisory: SNYK:PYTHON-CRAWL4AI-17661142...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-56258 via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-56258 Source advisory: SNYK:PYTHON-CRAWL4AI-17661141...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-56258 via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-56258 Source advisory: OSV:GHSA-7CX2-G3H9-382P...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by unknown CVE via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F989-C77F-R2CQ...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by unknown CVE via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-CRAWL4AI-17661137...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-53754 via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-53754 Source advisory: OSV:GHSA-4QQR-VV2Q-CMR5...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-53754 via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-53754 Source advisory: SNYK:PYTHON-CRAWL4AI-17661140...

africanwhisper (>=0.2.8 <=0.9.0), agentx-tools (>=0.2.0 <=0.7.1) +204 more potentially affected by CVE-2024-38519 +1 more via yt-dlp (>=2021.9.2 <=2026.6.10.235405.dev0)

yt-dlp PYPI version =2021.9.2, =0.2.8, =0.2.0, =2023.3.3, =0.1.0, =0.3.0, =0.1.0, =1.1.5, =0.0.4, =0.1.7, =1.0.0, =0.9.0, =0.1.0, =1.4.0, =1.6.0 and more Source cves: CVE-2024-38519, CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

dashbox (>=0.1.0.post20260519 <=0.1.7.post202606100752), deeplabcut-live-gui (=2.0.0rc1) +34 more potentially affected by CVE-2024-38519 +1 more via yt-dlp (>=2026.1.29 <=2026.6.10.235405.dev0)

yt-dlp PYPI version =2026.1.29, =0.1.0.post20260519, =1.0.0, =3.4.3, =2.0.1, =0.1.1, =1.1.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0a1, =1.0.0, =0.0.0, =0.1.3 and more Source cves: CVE-2024-38519, CVE-2026-50023 Source advisory: SNYK:PYTHON-YTDLP-17353911...

amusing-app (>=0.2.0 <=0.4.2), arbi-tr-frontend (>=0.1.0 <=0.1.1) +149 more potentially affected by CVE-2026-50019 via yt-dlp (>=2023.9.24 <=2026.6.10.235405.dev0)

yt-dlp PYPI version =2023.9.24, =0.2.0, =0.1.0, =1.1.5, =0.1.7, =1.0.0, =1.0.0, =0.1.0, =2024.3.25, =1.1.1, =0.0.2, =0.1.0.post20260519, =0.1.16, =0.4.3, =0.4.4 and more Source cves: CVE-2026-50019 Source advisory: SNYK:PYTHON-YTDLP-17353908...

amusing-app (>=0.2.0 <=0.4.2), arbi-tr-frontend (>=0.1.0 <=0.1.1) +149 more potentially affected by CVE-2026-50019 via yt-dlp (>=2023.9.24 <=2026.6.10.235405.dev0)

yt-dlp PYPI version =2023.9.24, =0.2.0, =0.1.0, =1.1.5, =0.1.7, =1.0.0, =1.0.0, =0.1.0, =2024.3.25, =1.1.1, =0.0.2, =0.1.0.post20260519, =0.1.16, =0.4.3, =0.4.4 and more Source cves: CVE-2026-50019 Source advisory: OSV:GHSA-F7J3-774F-RFHJ...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-56262 +3 more via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-56262, CVE-2026-56263, CVE-2026-56265, CVE-2026-56266 Source advisory: SNYK:PYTHON-CRAWL4AI-17661138...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-56262 +3 more via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-56262, CVE-2026-56263, CVE-2026-56265, CVE-2026-56266 Source advisory: OSV:GHSA-365W-HQF6-VXFG...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-53753 via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-53753 Source advisory: OSV:GHSA-QXJP-W3PJ-48M7...

ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +21 more potentially affected by CVE-2026-53753 via crawl4ai (>=0.3.5 <=0.8.5)

crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.2.0, =0.1.0, =0.0.38, =0.5.0, =0.1.0, =0.1.6 and more Source cves: CVE-2026-53753 Source advisory: SNYK:PYTHON-CRAWL4AI-17661139...

datapipe-util (=1.0.0), log-auditor (>=1.0.0 <=1.0.1) potentially affected by unknown CVE via binproto (=1.0.6)

binproto NPM version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on binproto and may be impacted: - datapipe-util =1.0.0 - log-auditor =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-5924...

agent-nexus-cli (>=0.1.0 <=0.1.31), agentiva (>=0.1.0 <=0.1.5) +4 more potentially affected by CVE-2026-48775 via langgraph-checkpoint (>=4.0.0 <=4.1.0)

langgraph-checkpoint PYPI version =4.0.0, =0.1.0, =0.1.0, =0.1.0, =4.1.2, =0.1.5, =0.1.2, =0.1.3 Source cves: CVE-2026-48775 Source advisory: SNYK:PYTHON-LANGGRAPHCHECKPOINT-17356491...

deno_cli (>=0.18.0-preview4 <=0.23.0), deno_cli_snapshots (>=0.0.3 <=0.19.0) +2 more potentially affected by CVE-2026-49402 via deno (>=0.15.0 <=0.6.0)

deno CARGO version =0.15.0, =0.18.0-preview4, =0.0.3, =0.0.1, =0.23.0 Source cves: CVE-2026-49402 Source advisory: OSV:GHSA-7XH3-MHG9-JCW8...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-54311 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-54311 Source advisory: OSV:GHSA-9C38-2MCM-Q7F7...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-54306 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-54306 Source advisory: OSV:GHSA-2VFF-HJ5X-8GQ7...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-54301 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-54301 Source advisory: OSV:GHSA-V733-MWR6-FGCM...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-54308 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-54308 Source advisory: OSV:GHSA-JVC7-762P-3743...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by unknown CVE via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-HV7X-3X78-GX53...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-54313 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-54313 Source advisory: OSV:GHSA-JPQ7-226W-6CXX...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-54310 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-54310 Source advisory: OSV:GHSA-C37G-W77Q-M4VP...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-49465 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-49465 Source advisory: OSV:GHSA-5XP3-2W67-427V...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-49444 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-49444 Source advisory: OSV:GHSA-9PQ8-M8GP-4P53...

langflow-nightly (=1.8.0.dev24) potentially affected by CVE-2026-42867 via langflow-base (=0.7.2)

langflow-base PYPI version =0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on langflow-base and may be impacted: - langflow-nightly =1.8.0.dev24 Source cves: CVE-2026-42867 Source advisory: SNYK:PYTHON-LANGFLOWBASE-17400156...

ado-vllm-performance (>=1.2.2 <=1.3.3), agentclinic (=0.1.0) +41 more potentially affected by CVE-2026-41523 via vllm (>=0.10.0 <=0.21.0)

vllm PYPI version =0.10.0, =1.2.2, =0.0.0, =2.3.5, =0.2.0, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.0, =0.3.9, =0.5.2, =0.1.0, =0.1.5, =0.2.0 - gfmrag =2.0.0 and more Source cves: CVE-2026-41523 Source advisory: SNYK:PYTHON-VLLM-17353931...

ado-vllm-performance (>=1.2.2 <=1.3.3), agentclinic (=0.1.0) +41 more potentially affected by CVE-2026-41523 via vllm (>=0.10.0 <=0.21.0)

vllm PYPI version =0.10.0, =1.2.2, =0.0.0, =2.3.5, =0.2.0, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.0, =0.3.9, =0.5.2, =0.1.0, =0.1.5, =0.2.0 - gfmrag =2.0.0 and more Source cves: CVE-2026-41523 Source advisory: OSV:GHSA-Q8GQ-377P-JQ3R...

langflow-nightly (=1.8.0.dev24) potentially affected by CVE-2026-33760 via langflow-base (=0.7.2)

langflow-base PYPI version =0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on langflow-base and may be impacted: - langflow-nightly =1.8.0.dev24 Source cves: CVE-2026-33760 Source advisory: SNYK:PYTHON-LANGFLOWBASE-17400135...

a-mailx (=0.1.0), a2a-proxy-server (=0.1.3) +857 more potentially affected by unknown CVE via langchain-anthropic (>=0.1.11 <=1.4.5)

langchain-anthropic PYPI version =0.1.11, =0.1.0, =0.1.0b0, =0.1.0, =0.1.0, =0.2.0, =0.0.1, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.2, =0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GR75-JV2W-4656...

3m (>=0.1.0 <=0.1.3), 4sgm (=2.0.0) +4153 more potentially affected by unknown CVE via langchain (>=0.0.100 <=1.3.7)

langchain PYPI version =0.0.100, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0b1, =0.1.0, =0.1.0, =0.1.0b0, =1.0.99 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GR75-JV2W-4656...

3m (>=0.1.0 <=0.1.3), 4sgm (=2.0.0) +2831 more potentially affected by CVE-2026-55443 via langchain (>=1.0.0 <=1.3.7)

langchain PYPI version =1.0.0, =0.1.0, =0.1.0, =0.1.0b1, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.4 and more Source cves: CVE-2026-55443 Source advisory: SNYK:PYTHON-LANGCHAIN-17356217...

a2a-proxy-server (=0.1.3), academic-research-mentor (>=0.1.0 <=0.2.0) +676 more potentially affected by CVE-2026-55443 via langchain-anthropic (>=1.0.0 <=1.4.5)

langchain-anthropic PYPI version =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.2.0, =0.1.0, =0.6.5 and more Source cves: CVE-2026-55443 Source advisory: SNYK:PYTHON-LANGCHAINANTHROPIC-17356216...

@1771technologies/oneplay (>=0.0.1 <=0.0.6), @a1st/aix (>=0.0.3 <=0.5.1) +641 more potentially affected by CVE-2026-54298 via astro (>=0.20.12 <=6.4.4)

astro NPM version =0.20.12, =0.0.1, =0.0.3, =0.2.0, =0.1.6, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.0.1, =0.2.0 and more Source cves: CVE-2026-54298 Source advisory: OSV:GHSA-JRPJ-WCV7-9FH9...

@a1st/aix (>=0.0.3 <=0.5.1), @a1st/aix-core (>=0.2.0 <=0.5.1) +19 more potentially affected by CVE-2026-54298 via astro (>=6.0.0-beta.1 <=6.4.4)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-54298 Source advisory: SNYK:JS-ASTRO-17356187...

@1771technologies/oneplay (>=0.0.1 <=0.0.6), @a1st/aix (>=0.0.3 <=0.5.1) +641 more potentially affected by CVE-2026-54299 via astro (>=0.20.12 <=6.4.4)

astro NPM version =0.20.12, =0.0.1, =0.0.3, =0.2.0, =0.1.6, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.0.1, =0.2.0 and more Source cves: CVE-2026-54299 Source advisory: OSV:GHSA-2PVR-WF23-7PC7...

@a1st/aix (>=0.0.3 <=0.5.1), @a1st/aix-core (>=0.2.0 <=0.5.1) +19 more potentially affected by CVE-2026-54299 via astro (>=6.0.0-beta.1 <=6.4.4)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-54299 Source advisory: SNYK:JS-ASTRO-17356189...

@ayco/cozy (>=0.1.3 <=0.2.3), @devtoti/archui-lib (>=1.0.9 <=1.1.0) +12 more potentially affected by CVE-2026-54300 via @astrojs/netlify (>=2.6.0 <=6.6.5)

@astrojs/netlify NPM version =2.6.0, =0.1.3, =1.0.9, =2.4.0, =0.5.1, =0.3.0, =1.0.0, =1.3.1, =2.0.0, =0.1.0, =3.3.1 - www-v2 =0.0.1 Source cves: CVE-2026-54300 Source advisory: OSV:GHSA-529G-XQ4F-CW38...

01os (>=0.0.1 <=0.0.14), 3m (>=0.1.0 <=0.1.3) +6751 more potentially affected by CVE-2026-54293 via nltk (>=2.0.4 <=3.9.4)

nltk PYPI version =2.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.0, =0.10.11, =0.3.7, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.0, =1.0.4, =1.1.0 and more Source cves: CVE-2026-54293 Source advisory: SNYK:PYTHON-NLTK-17356385...

01os (>=0.0.1 <=0.0.14), 3m (>=0.1.0 <=0.1.3) +6751 more potentially affected by CVE-2026-54293 via nltk (>=2.0.4 <=3.9.4)

nltk PYPI version =2.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.0, =0.10.11, =0.3.7, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.0, =1.0.4, =1.1.0 and more Source cves: CVE-2026-54293 Source advisory: OSV:GHSA-P4GQ-832X-FM9V...

@3onedata/alsatian (>=0.1.8-fix.3 <=0.1.8-fix.5), @adhisang/minecraft-modding-mcp (=1.0.0) +332 more potentially affected by CVE-2026-54288 via hono (>=4.0.0 <=4.12.23)

hono NPM version =4.0.0, =0.1.8-fix.3, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =2026.4.4, =1.0.2, =1.0.0, =0.0.1, =0.2.0, =1.7.2, =1.7.1, =0.2.1, =0.2.3 and more Source cves: CVE-2026-54288 Source advisory: SNYK:JS-HONO-17356388...