@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by CVE-2026-53512 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: CVE-2026-53512 Source advisory: SNYK:JS-BETTERAUTH-17889816...

@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +199 more potentially affected by CVE-2026-53512 via better-auth (>=1.0.0, <=1.6.10)

better-auth NPM version =1.0.0, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.0.0-canary.2, =1.5.0-beta.13 and more Source cves: CVE-2026-53512 Source advisory: OSV:GHSA-PW9M-5JXM-XR6H...

coreutils (>=0.0.14, <=0.0.16), findutils (>=0.3.0, <=0.4.0) +104 more potentially affected by unknown CVE via uucore (>=0.0.4, <=0.0.17)

uucore CARGO version =0.0.4, =0.0.14, =0.3.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8, =0.0.1, =0.0.8, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.16 and more Source cves: unknown CVE Source advisory: OSV:GHSA-FQF6-GXHH-2XHW...

@abtnode/analytics (>=1.16.13-beta-0086a35d, <=1.17.13-beta-20260613-094425-b81920c8), @abtnode/auth (>=1.3.13, <=1.17.13-beta-20260613-094425-b81920c8) +212 more potentially affected by CVE-2026-56812 via phoenix (>=1.7.2, <=1.7.21)

phoenix NPM version =1.7.2, =1.16.13-beta-0086a35d, =1.3.13, =1.1.12, =1.6.23, =1.16.6-beta-08670107, =1.0.0, =1.16.33-beta-20241105-141729-e4608175, =1.0.0, =1.0.35, =1.16.33-beta-20241105-141729-e4608175, =1.0.2, =1.16.33-beta-20241105-141729-e4608175, =1.16.33-beta-20241105-141729-e4608175,...

@absinthe/graphql-playground (>=1.3.1, <=1.3.5), @absinthe/socket (>=0.1.0, <=0.2.0) +52 more potentially affected by CVE-2026-56812 via phoenix (>=1.3.0, <=1.5.12)

phoenix NPM version =1.3.0, =1.3.1, =0.1.0, =0.1.2, =0.1.0, =0.1.2, =1.7.5, =1.5.1, =1.7.5, =1.8.1, =1.0.0, =1.5.6, =1.8.1, =1.8.1, =1.7.26, =1.7.26, =1.16.6-beta-eaa4d39d and more Source cves: CVE-2026-56812 Source advisory: SNYK:JS-PHOENIX-17889828...

@knocklabs/client (>=0.21.6, <=0.22.1), @knocklabs/expo (>=0.5.0, <=0.8.1) +8 more potentially affected by CVE-2026-56812 via phoenix (>=1.8.0, <=1.8.7)

phoenix NPM version =1.8.0, =0.21.6, =0.5.0, =0.1.0, =0.1.1, =0.1.1, =0.0.2, =0.0.1, =0.0.2, =0.0.1, =2.1.8, =2.5.4 Source cves: CVE-2026-56812 Source advisory: SNYK:JS-PHOENIX-17889828...

@edgebrix-sdk/react (>=0.0.58, <=0.0.74), @kimia_software/tellair-wc (0.0.0) +16 more potentially affected by CVE-2026-56812 via phoenix (>=1.6.2, <=1.6.16)

phoenix NPM version =1.6.2, =0.0.58, =0.8.10, =0.1.8, =0.1.5, =0.1.0-rc0, =0.8.1, =0.0.1, =0.0.1, =0.0.0-PR-1--182e1d3, =19.0.0-beta.1, =1.0.23, =0.3.0, =0.1.1, =0.1.6 and more Source cves: CVE-2026-56812 Source advisory: SNYK:JS-PHOENIX-17889828...

whs4_ays (>=1.0.0, <=1.0.1) potentially affected by unknown CVE via whs4_npm (0.0.1-security)

whs4npm NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on whs4npm and may be impacted: - whs4ays =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-WHS4NPM-17881408...

@edgebrix-sdk/react (>=0.0.58, <=0.0.74), @kimia_software/tellair-wc (0.0.0) +16 more potentially affected by CVE-2026-56812 via phoenix (>=1.6.2, <=1.6.16)

phoenix NPM version =1.6.2, =0.0.58, =0.8.10, =0.1.8, =0.1.5, =0.1.0-rc0, =0.8.1, =0.0.1, =0.0.1, =0.0.0-PR-1--182e1d3, =19.0.0-beta.1, =1.0.23, =0.3.0, =0.1.1, =0.1.6 and more Source cves: CVE-2026-56812 Source advisory: OSV:EEF-CVE-2026-56812...

@abtnode/analytics (>=1.16.13-beta-0086a35d, <=1.17.13-beta-20260613-094425-b81920c8), @abtnode/auth (>=1.3.13, <=1.17.13-beta-20260613-094425-b81920c8) +212 more potentially affected by CVE-2026-56812 via phoenix (>=1.7.2, <=1.7.21)

phoenix NPM version =1.7.2, =1.16.13-beta-0086a35d, =1.3.13, =1.1.12, =1.6.23, =1.16.6-beta-08670107, =1.0.0, =1.16.33-beta-20241105-141729-e4608175, =1.0.0, =1.0.35, =1.16.33-beta-20241105-141729-e4608175, =1.0.2, =1.16.33-beta-20241105-141729-e4608175, =1.16.33-beta-20241105-141729-e4608175,...

@knocklabs/client (>=0.21.6, <=0.22.1), @knocklabs/expo (>=0.5.0, <=0.8.1) +8 more potentially affected by CVE-2026-56812 via phoenix (>=1.8.0, <=1.8.7)

phoenix NPM version =1.8.0, =0.21.6, =0.5.0, =0.1.0, =0.1.1, =0.1.1, =0.0.2, =0.0.1, =0.0.2, =0.0.1, =2.1.8, =2.5.4 Source cves: CVE-2026-56812 Source advisory: OSV:EEF-CVE-2026-56812...

@absinthe/graphql-playground (>=1.3.1, <=1.3.5), @absinthe/socket (>=0.1.0, <=0.2.0) +52 more potentially affected by CVE-2026-56812 via phoenix (>=1.3.0, <=1.5.12)

phoenix NPM version =1.3.0, =1.3.1, =0.1.0, =0.1.2, =0.1.0, =0.1.2, =1.7.5, =1.5.1, =1.7.5, =1.8.1, =1.0.0, =1.5.6, =1.8.1, =1.8.1, =1.7.26, =1.7.26, =1.16.6-beta-eaa4d39d and more Source cves: CVE-2026-56812 Source advisory: OSV:EEF-CVE-2026-56812...

@sqlite-list/sql-creator (1.0.7) potentially affected by unknown CVE via @sqlite-list/schema-generator (1.0.2)

@sqlite-list/schema-generator NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sqlite-list/schema-generator and may be impacted: - @sqlite-list/sql-creator 1.0.7 Source cves: unknown CVE Source advisory:...

@sqlite-list/sql-creator (1.0.7) potentially affected by unknown CVE via @sqlite-list/schema-generator (1.0.2)

@sqlite-list/schema-generator NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sqlite-list/schema-generator and may be impacted: - @sqlite-list/sql-creator 1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6916...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0), org.webjars.npm:github-com-showdownjs-ng-showdown (1.1.0) +3 more potentially affected by CVE-2026-59710 via org.webjars.npm:showdown (>=1.9.1, <=2.1.0)

org.webjars.npm:showdown MAVEN version =1.9.1, =2.0.0, =1.0.2, =1.0.3 - org.webjars.npm:showdown-prism 0.2.0 Source cves: CVE-2026-59710 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17874451...

20mk-utils (>=1.0.0, <=1.0.3), 2d-spirograph (>=1.0.2, <=1.0.4) +2122 more potentially affected by CVE-2026-59710 via showdown (>=0.0.1, <=2.1.0)

showdown NPM version =0.0.1, =1.0.0, =1.0.2, =2.0.4, =1.0.6, =0.1.4, =0.1.4, =0.1.4, =13.351.0, =13.351.0, =7.10.0, =7.10.0, =0.0.3, =0.5.1 - @adalink/spark-chat 1.0.0 and more Source cves: CVE-2026-59710 Source advisory: SNYK:JS-SHOWDOWN-17874450...

@rocketmakers/prettier-config (>=1.0.1, <=2.1.0), @rocketmakers/stylelint-config (>=1.0.1, <=2.1.0) potentially affected by CVE-2026-59710 via showdown (2.0.1)

showdown NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on showdown and may be impacted: - @rocketmakers/prettier-config =1.0.1, =1.0.1, =2.1.0 Source cves: CVE-2026-59710 Source advisory: OSV:GHSA-22G5-R2X5-97CX...

react-mongoose (>=1.0.0, <=1.0.5) potentially affected by unknown CVE via express-mongo-limit (1.0.4)

express-mongo-limit NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on express-mongo-limit and may be impacted: - react-mongoose =1.0.0, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-7012...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0), org.webjars.npm:github-com-showdownjs-ng-showdown (1.1.0) +3 more potentially affected by CVE-2026-59711 via org.webjars.npm:showdown (>=1.9.1, <=2.1.0)

org.webjars.npm:showdown MAVEN version =1.9.1, =2.0.0, =1.0.2, =1.0.3 - org.webjars.npm:showdown-prism 0.2.0 Source cves: CVE-2026-59711 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17874449...

20mk-utils (>=1.0.0, <=1.0.3), 2d-spirograph (>=1.0.2, <=1.0.4) +2122 more potentially affected by CVE-2026-59711 via showdown (>=0.0.1, <=2.1.0)

showdown NPM version =0.0.1, =1.0.0, =1.0.2, =2.0.4, =1.0.6, =0.1.4, =0.1.4, =0.1.4, =13.351.0, =13.351.0, =7.10.0, =7.10.0, =0.0.3, =0.5.1 - @adalink/spark-chat 1.0.0 and more Source cves: CVE-2026-59711 Source advisory: SNYK:JS-SHOWDOWN-17874448...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35381 via uu_cut (>=0.0.14, <=0.0.16)

uucut CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35381 Source advisory: OSV:GHSA-PMFC-4WJJ-GMHX...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35361 via uu_mknod (>=0.0.14, <=0.0.16)

uumknod CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35361 Source advisory: OSV:GHSA-R9HW-MJ3W-PHCQ...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35341 via uu_mkfifo (>=0.0.14, <=0.0.16)

uumkfifo CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35341 Source advisory: OSV:GHSA-PMF6-RCX4-V53V...

@rocketmakers/prettier-config (>=1.0.1, <=2.1.0), @rocketmakers/stylelint-config (>=1.0.1, <=2.1.0) potentially affected by CVE-2026-59711 via showdown (2.0.1)

showdown NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on showdown and may be impacted: - @rocketmakers/prettier-config =1.0.1, =1.0.1, =2.1.0 Source cves: CVE-2026-59711 Source advisory: OSV:GHSA-CR32-G25G-VXJJ...

ledger-zcash (>=0.3.0, <=0.5.0), zcash-hsmbuilder (>=0.2.0, <=0.3.0) +3 more potentially affected by CVE-2026-54496 via zcash_primitives (0.5.0)

zcashprimitives CARGO version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on zcashprimitives and may be impacted: - ledger-zcash =0.3.0, =0.2.0, =0.3.0 - zcashclientbackend 0.5.0 - zcashclientsqlite 0.3.0 - zcashproofs 0.5.0 Source cves:...

bdy (>=1.18.27-dev, <=1.22.61-stage) potentially affected by CVE-2026-53486 via @xhmikosr/decompress (11.1.1)

@xhmikosr/decompress NPM version 11.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on @xhmikosr/decompress and may be impacted: - bdy =1.18.27-dev, =1.22.61-stage Source cves: CVE-2026-53486 Source advisory: SNYK:JS-XHMIKOSRDECOMPRESS-17874438...

-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +28820 more potentially affected by CVE-2026-53486 via decompress (>=0.1.6, <=4.2.1)

decompress NPM version =0.1.6, =1.0.0, =0.0.1, =0.0.4 - 1095h-cli 1.0.1 - 10secondsofcode-custom 1.0.0 and more Source cves: CVE-2026-53486 Source advisory: SNYK:JS-DECOMPRESS-17874437...

-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +21930 more potentially affected by CVE-2026-53486 via decompress (>=4.0.0, <=4.2.1)

decompress NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =2.2.0-alpha.3 and more Source cves: CVE-2026-53486 Source advisory: OSV:GHSA-MP2F-45PM-3CG9...

bdy (>=1.7.46-dev, <=1.18.26-stage), buddy-tunnel (>=1.3.19-dev, <=1.7.45-dev) potentially affected by CVE-2026-53486 via @xhmikosr/decompress (10.0.1)

@xhmikosr/decompress NPM version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @xhmikosr/decompress and may be impacted: - bdy =1.7.46-dev, =1.3.19-dev, =1.7.45-dev Source cves: CVE-2026-53486 Source advisory: OSV:GHSA-MP2F-45PM-3CG9...

bdy (>=1.18.27-dev, <=1.22.61-stage) potentially affected by CVE-2026-53486 via @xhmikosr/decompress (11.1.1)

@xhmikosr/decompress NPM version 11.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on @xhmikosr/decompress and may be impacted: - bdy =1.18.27-dev, =1.22.61-stage Source cves: CVE-2026-53486 Source advisory: OSV:GHSA-MP2F-45PM-3CG9...

bdy (>=1.7.46-dev, <=1.18.26-stage), buddy-tunnel (>=1.3.19-dev, <=1.7.45-dev) potentially affected by CVE-2026-53486 via @xhmikosr/decompress (10.0.1)

@xhmikosr/decompress NPM version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @xhmikosr/decompress and may be impacted: - bdy =1.7.46-dev, =1.3.19-dev, =1.7.45-dev Source cves: CVE-2026-53486 Source advisory: SNYK:JS-XHMIKOSRDECOMPRESS-178744...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35366 via uu_printenv (>=0.0.14, <=0.0.16)

uuprintenv CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35366 Source advisory: OSV:GHSA-P7H3-7Q52-72W8...

coreutils (>=0.0.14, <=0.0.16), findutils (>=0.3.0, <=0.4.0) +104 more potentially affected by CVE-2026-35362 via uucore (>=0.0.4, <=0.0.17)

uucore CARGO version =0.0.4, =0.0.14, =0.3.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8, =0.0.1, =0.0.8, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2026-35362 Source advisory: OSV:GHSA-W6XC-G9QJ-VP32...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35365 via uu_mv (>=0.0.14, <=0.0.16)

uumv CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35365 Source advisory: OSV:GHSA-H444-6J9X-P8VH...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35358 via uu_cp (>=0.0.14, <=0.0.16)

uucp CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35358 Source advisory: OSV:GHSA-8VRF-R662-2W2V...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35363 via uu_rm (>=0.0.14, <=0.0.16)

uurm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35363 Source advisory: OSV:GHSA-89P7-7CQ3-HHR2...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35347 via uu_comm (>=0.0.14, <=0.0.16)

uucomm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35347 Source advisory: OSV:GHSA-3WFC-MGPM-9RQ6...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35370 via uu_id (>=0.0.14, <=0.0.16)

uuid CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35370 Source advisory: OSV:GHSA-47C7-QRM7-MQW7...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35353 via uu_mkdir (>=0.0.14, <=0.0.16)

uumkdir CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35353 Source advisory: OSV:GHSA-MJ6P-44CH-CQ69...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35349 via uu_rm (>=0.0.14, <=0.0.16)

uurm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35349 Source advisory: OSV:GHSA-7CR3-H577-G38J...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35371 via uu_id (>=0.0.14, <=0.0.16)

uuid CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35371 Source advisory: OSV:GHSA-XV5W-CW7X-72GJ...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35369 via uu_kill (>=0.0.14, <=0.0.16)

uukill CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35369 Source advisory: OSV:GHSA-P6RV-2QPM-FWVG...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35356 via uu_install (>=0.0.14, <=0.0.16)

uuinstall CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35356 Source advisory: OSV:GHSA-GWM6-Q8CH-HCFR...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35343 via uu_cut (>=0.0.14, <=0.0.16)

uucut CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35343 Source advisory: OSV:GHSA-WV33-5PXH-R7J7...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35355 via uu_install (>=0.0.14, <=0.0.16)

uuinstall CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35355 Source advisory: OSV:GHSA-239G-2685-54X3...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35373 via uu_ln (>=0.0.14, <=0.0.16)

uuln CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35373 Source advisory: OSV:GHSA-JCJR-RH8Q-7XQF...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35346 via uu_comm (>=0.0.14, <=0.0.16)

uucomm CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35346 Source advisory: OSV:GHSA-6GCW-W7CP-94G9...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35342 via uu_mktemp (>=0.0.14, <=0.0.16)

uumktemp CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35342 Source advisory: OSV:GHSA-2W8R-9XJ7-69J5...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35339 via uu_chmod (>=0.0.14, <=0.0.16)

uuchmod CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35339 Source advisory: OSV:GHSA-4X34-CHG5-MWJJ...

cookie-parser-ease (1.0.7) potentially affected by unknown CVE via cookie-ease (0.0.1-security)

cookie-ease NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on cookie-ease and may be impacted: - cookie-parser-ease 1.0.7 Source cves: unknown CVE Source advisory: SNYK:JS-COOKIEEASE-17824388...