mjs-eslint (>=7.0.5, <=7.0.7) potentially affected by unknown CVE via ts-eslint-helper (4.0.5)

ts-eslint-helper NPM version 4.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on ts-eslint-helper and may be impacted: - mjs-eslint =7.0.5, =7.0.7 Source cves: unknown CVE Source advisory: SNYK:JS-TSESLINTHELPER-17824365...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35338 via uu_chmod (>=0.0.14, <=0.0.16)

uuchmod CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35338 Source advisory: OSV:GHSA-4C7Q-4928-8445...

average (0.14.2), box-bin (0.3.1) +1 more potentially affected by unknown CVE via crossbeam-epoch (>=0.9.7, <=0.9.18)

crossbeam-epoch CARGO version =0.9.7, =0.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on crossbeam-epoch and may be impacted: - average 0.14.2 - box-bin 0.3.1 - qrcode-generator 4.1.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0204...

-react-file-list-components (1.1.1), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +41045 more potentially affected by CVE-2026-14802 via react-dev-utils (>=0.1.1, <=12.1.0-next.26)

react-dev-utils NPM version =0.1.1, =1.0.1, =0.1.0, =0.1.0, =0.1.6 - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 - 0scarclassf 1.0.1 - 0scarclassg 1.0.1 - 0scarclassh 1.0.1 - 0scarclassi 1.0.1 and more Source cves: CVE-2026-148...

3m (>=0.1.0, <=0.1.3), 3tears-agent-identity (>=0.15.0, <=0.23.8) +4082 more potentially affected by CVE-2026-14742 via langgraph (>=0.0.15, <=1.2.10)

langgraph PYPI version =0.0.15, =0.1.0, =0.15.0, =0.15.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.18.0, =0.1.0, =0.1.6 - a2a-client-handler 0.1.0 - a2a-langgraph 0.1.0 and more Source cves: CVE-2026-14742 Source advisory: SNYK:PYTHON-LANGGRAPH-17817813...

altv (>=15.0.0-dev.0, <=16.1.1), altv_internal_core_resource (>=15.0.0-dev.0, <=16.1.1) +394 more potentially affected by unknown CVE via cxx (>=1.0.1, <=1.0.131)

cxx CARGO version =1.0.1, =15.0.0-dev.0, =15.0.0-dev.0, =15.0.0-dev2, =15.0.0-dev42, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1, =0.26.0 - autocxx-idalib 0.30.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0202...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-14781 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-14781 Source advisory: SNYK:JAVA-ORGKEYCLOAK-17892592...

01os (>=0.0.1, <=0.0.13), 3m (>=0.1.0, <=0.1.3) +6883 more potentially affected by CVE-2026-12252 via nltk (>=2.0.4, <=3.10.2)

nltk PYPI version =2.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.0, =0.10.11, =0.3.7, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.0, =1.0.4, =1.1.0 and more Source cves: CVE-2026-12252 Source advisory: SNYK:PYTHON-NLTK-17821336...

@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +326 more potentially affected by CVE-2026-14631 via webpack-dev-server (>=5.0.0, <=5.2.5)

webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =20.3.1, =20.3.0, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =0.7.7, =1.0.5-beta.4, =1.0.1-beta.1, =1.0.17 and more Source cves: CVE-2026-14631 Source advisory:...

@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +326 more potentially affected by CVE-2026-14620 via webpack-dev-server (>=5.0.0, <=5.2.5)

webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =20.3.1, =20.3.0, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =0.7.7, =1.0.5-beta.4, =1.0.1-beta.1, =1.0.17 and more Source cves: CVE-2026-14620 Source advisory:...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-14613 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-14613 Source advisory: SNYK:JAVA-ORGKEYCLOAK-17892564...

@devpodio/github-extension (1.0.0), @eclipse-glsp-examples/workflow-theia (>=1.0.0-theia1.27.0, <=1.1.0-next.e29c96e.130) +119 more potentially affected by CVE-2026-10055 via @theia/request (>=1.26.0, <=1.72.3)

@theia/request NPM version =1.26.0, =1.0.0-theia1.27.0, =1.0.0, =0.7.1, =1.58.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.57.0-next.37, =1.46.0-next.241, =1.72.3 and more Source cves: CVE-2026-10055 Source advisory: SNYK:JS-THEIAREQUEST-17810719...

@codeanywhere/filesystem (>=1.13.0, <=1.13.2), @codeanywhere/theia-plugin-ext (>=1.11.0, <=1.11.4) +169 more potentially affected by CVE-2026-10054 via @theia/core (>=1.0.0, <=1.72.3)

@theia/core NPM version =1.0.0, =1.13.0, =1.11.0, =0.1.7, =0.0.1-1646139429, =0.0.1-1585667205, =1.0.0-theia1.27.0, =0.8.0-next.6917503, =0.0.1-next.20220331.125641, =0.0.5, =0.1.0-alpha.3ddb00f8, =0.2.0-next.25250370, =0.2.0-next.ffc3e7a2 and more Source cves: CVE-2026-10054 Source advisory:...

@codeanywhere/theia-plugin-ext (>=1.11.0, <=1.11.4), @eclipse-che/theia-terminal (>=0.0.1-1585667205, <=0.0.1-1601469637) +36 more potentially affected by CVE-2026-10054 via @theia/terminal (>=1.1.0-next.a62a6b92, <=1.72.3)

@theia/terminal NPM version =1.1.0-next.a62a6b92, =1.11.0, =0.0.1-1585667205, =0.7.1, =1.58.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.59.0-next.62, =1.46.0-next.241, =1.46.0-next.241, =1.17.2, =1.27.0 and more Source cves: CVE-2026-10054 Source advisory: SNYK:JS-THEIATERMINAL-17810711...

@codeanywhere/filesystem (>=1.13.0, <=1.13.2), @codeanywhere/theia-plugin-ext (>=1.11.0, <=1.11.4) +169 more potentially affected by CVE-2026-10055 via @theia/core (>=1.0.0, <=1.72.3)

@theia/core NPM version =1.0.0, =1.13.0, =1.11.0, =0.1.7, =0.0.1-1646139429, =0.0.1-1585667205, =1.0.0-theia1.27.0, =0.8.0-next.6917503, =0.0.1-next.20220331.125641, =0.0.5, =0.1.0-alpha.3ddb00f8, =0.2.0-next.25250370, =0.2.0-next.ffc3e7a2 and more Source cves: CVE-2026-10055 Source advisory:...

akt (>=0.1.1, <=0.1.2), bigerror (>=0.1.0, <=0.8.2) +55 more potentially affected by unknown CVE via error-stack (>=0.1.1, <=0.7.1)

error-stack CARGO version =0.1.1, =0.1.1, =0.1.0, =0.0.39, =0.6.0, =0.1.0, =0.1.2 - crl5-module-fn 0.1.8 - error-path 0.1.0 - error-stack-derive 0.1.0 - error-stack-macros 0.0.0-reserved - error-stack-macros2 0.0.0-reserved and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0198...

vegas-chat (>=2.10.0, <=2.16.2) potentially affected by CVE-2026-49353 via 9router (0.5.50)

9router NPM version 0.5.50 is affected by a known vulnerability. The following packages have a transitive dependency on 9router and may be impacted: - vegas-chat =2.10.0, =2.16.2 Source cves: CVE-2026-49353 Source advisory: SNYK:JS-9ROUTER-17817940...

dicom-transfer-syntax-registry (>=0.8.2, <=0.9.1), dset (>=0.1.0, <=0.1.2) +10 more potentially affected by CVE-2026-52834 via jxl-grid (>=0.1.1, <=0.5.3)

jxl-grid CARGO version =0.1.1, =0.8.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0-rc0 Source cves: CVE-2026-52834 Source advisory: OSV:GHSA-5PMV-RX8R-WMV5...

dicom-transfer-syntax-registry (>=0.8.2, <=0.9.1), dset (>=0.1.0, <=0.1.2) +2 more potentially affected by unknown CVE via jxl-oxide (>=0.4.0, <=0.11.4)

jxl-oxide CARGO version =0.4.0, =0.8.2, =0.1.0, =0.1.1, =0.4.0, =0.5.0-rc0 Source cves: unknown CVE Source advisory: OSV:GHSA-66M8-C62J-H6V5...

dicom-transfer-syntax-registry (>=0.8.2, <=0.9.1), dset (>=0.1.0, <=0.1.2) +7 more potentially affected by unknown CVE via jxl-modular (>=0.1.0, <=0.10.0)

jxl-modular CARGO version =0.1.0, =0.8.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0-rc0 Source cves: unknown CVE Source advisory: OSV:GHSA-2V8P-FQPX-2Q3W...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-2092 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-2092 Source advisory: OSV:GHSA-794G-X443-36F7...

@falcondev-oss/nuxt-layers-base (>=0.1.0, <=0.25.0), @iqual/nuxt-icms (>=1.6.0-rc.1, <=1.6.0-rc.4) +25 more potentially affected by unknown CVE via @nuxt/ui (>=4.0.0, <=4.8.0)

@nuxt/ui NPM version =4.0.0, =0.1.0, =1.6.0-rc.1, =1.1.6, =0.0.19, =0.5.0, =0.0.7, =0.0.0-test-ld-20260520212549, =0.0.0-test-ld-20260520212549, =0.9.0, =0.0.0-test-ld-20260520212549, =0.0.0-test-ld-20260520212549, =0.4.0, =0.4.0, =1.1.0, =1.0.1, =1.1.4 and more Source cves: unknown CVE Source...

@falcondev-oss/nuxt-layers-base (>=0.1.0, <=0.25.0), @iqual/nuxt-icms (>=1.6.0-rc.1, <=1.6.0-rc.4) +25 more potentially affected by unknown CVE via @nuxt/ui (>=4.0.0, <=4.8.0)

@nuxt/ui NPM version =4.0.0, =0.1.0, =1.6.0-rc.1, =1.1.6, =0.0.19, =0.5.0, =0.0.7, =0.0.0-test-ld-20260520212549, =0.0.0-test-ld-20260520212549, =0.9.0, =0.0.0-test-ld-20260520212549, =0.0.0-test-ld-20260520212549, =0.4.0, =0.4.0, =1.1.0, =1.0.1, =1.1.4 and more Source cves: unknown CVE Source...

@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +160 more potentially affected by CVE-2026-52746 via jsonata (>=2.0.0, <=2.1.0)

jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.7.1-7dd573e-202408290941.0, =0.2.0, =1.26.1 and more Source cves: CVE-2026-52746 Source advisory: SNYK:JS-JSONATA-17810727...

@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +160 more potentially affected by CVE-2026-52746 via jsonata (>=2.0.0, <=2.1.0)

jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.7.1-7dd573e-202408290941.0, =0.2.0, =1.26.1 and more Source cves: CVE-2026-52746 Source advisory: OSV:GHSA-86VW-MFPG-WWV9...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-52746 via jsonata (>=1.0.10, <=1.8.8)

jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-52746 Source advisory: OSV:GHSA-86VW-MFPG-WWV9...

@grackle-ai/cli (>=0.72.3, <=0.132.1), @grackle-ai/core (>=0.75.4, <=0.132.1) +7 more potentially affected by unknown CVE via @grackle-ai/auth (>=0.72.3, <=0.132.1)

@grackle-ai/auth NPM version =0.72.3, =0.72.3, =0.75.4, =0.72.3, =0.96.3, =0.99.0, =0.97.0, =0.98.0, =0.72.3, =0.75.1, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F9FF-5X35-7GFW...

@grackle-ai/cli (>=0.107.2, <=0.132.1), @grackle-ai/plugin-orchestration (>=0.97.0, <=0.132.1) +1 more potentially affected by unknown CVE via @grackle-ai/plugin-core (>=0.97.0, <=0.132.1)

@grackle-ai/plugin-core NPM version =0.97.0, =0.107.2, =0.97.0, =0.107.2, =0.132.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIPLUGINCORE-17817920...

@grackle-ai/cli (>=0.72.3, <=0.132.1), @grackle-ai/core (>=0.75.4, <=0.132.1) +7 more potentially affected by unknown CVE via @grackle-ai/auth (>=0.72.3, <=0.132.1)

@grackle-ai/auth NPM version =0.72.3, =0.72.3, =0.75.4, =0.72.3, =0.96.3, =0.99.0, =0.97.0, =0.98.0, =0.72.3, =0.75.1, =0.132.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIAUTH-17817919...

@grackle-ai/cli (>=0.107.2, <=0.132.1), @grackle-ai/plugin-orchestration (>=0.97.0, <=0.132.1) +1 more potentially affected by unknown CVE via @grackle-ai/plugin-core (>=0.97.0, <=0.132.1)

@grackle-ai/plugin-core NPM version =0.97.0, =0.107.2, =0.97.0, =0.107.2, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F9FF-5X35-7GFW...

@grackle-ai/cli (>=0.19.0, <=0.132.1), @grackle-ai/server (>=0.19.0, <=0.132.1) potentially affected by unknown CVE via @grackle-ai/mcp (>=0.19.0, <=0.132.1)

@grackle-ai/mcp NPM version =0.19.0, =0.19.0, =0.19.0, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F9FF-5X35-7GFW...

@grackle-ai/cli (>=0.19.0, <=0.132.1), @grackle-ai/server (>=0.19.0, <=0.132.1) potentially affected by unknown CVE via @grackle-ai/mcp (>=0.19.0, <=0.132.1)

@grackle-ai/mcp NPM version =0.19.0, =0.19.0, =0.19.0, =0.132.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIMCP-17817921...

@conform-to/react (>=1.8.0, <=1.19.3), @conform-to/valibot (>=1.8.0, <=1.19.3) +4 more potentially affected by CVE-2026-49250 via @conform-to/dom (>=1.8.0, <=1.19.3)

@conform-to/dom NPM version =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.17.1-depup.0, =1.17.1-depup.0, =1.18.0-depup.0 Source cves: CVE-2026-49250 Source advisory: SNYK:JS-CONFORMTODOM-17812748...

@conform-to/react (>=1.8.0, <=1.19.3), @conform-to/valibot (>=1.8.0, <=1.19.3) +4 more potentially affected by CVE-2026-49250 via @conform-to/dom (>=1.8.0, <=1.19.3)

@conform-to/dom NPM version =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.17.1-depup.0, =1.17.1-depup.0, =1.18.0-depup.0 Source cves: CVE-2026-49250 Source advisory: OSV:GHSA-525M-7F82-2MF7...

@grackle-ai/cli (>=0.82.2, <=0.132.2), @grackle-ai/powerline (>=0.82.2, <=0.132.2) +6 more potentially affected by unknown CVE via @grackle-ai/runtime-sdk (>=0.82.2, <=0.132.2)

@grackle-ai/runtime-sdk NPM version =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.132.2 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIRUNTIMESDK-17817938...

@grackle-ai/cli (>=0.37.0, <=0.132.1), @grackle-ai/server (>=0.37.0, <=0.132.1) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.132.1)

@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VV65-F55V-XM6G...

@grackle-ai/cli (>=0.82.2, <=0.132.1), @grackle-ai/powerline (>=0.82.2, <=0.132.1) +6 more potentially affected by unknown CVE via @grackle-ai/runtime-sdk (>=0.82.2, <=0.132.1)

@grackle-ai/runtime-sdk NPM version =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VV65-F55V-XM6G...

@grackle-ai/cli (>=0.37.0, <=0.132.2), @grackle-ai/server (>=0.37.0, <=0.132.2) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.132.2)

@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.132.2 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIPOWERLINE-17817937...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-53828 via openclaw (>=2026.3.22, <=2026.5.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53828 Source advisory: OSV:GHSA-P73F-W79W-JQR5...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53836 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53836 Source advisory: OSV:GHSA-J472-GF56-X589...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-53839 via openclaw (>=2026.3.22, <=2026.5.6)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53839 Source advisory: OSV:GHSA-77Q5-RR5V-X43Q...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-53807 via openclaw (>=2026.3.22, <=2026.5.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53807 Source advisory: OSV:GHSA-W5WW-7CHG-MXCQ...

ctutils (>=0.0.0, <=0.3.2) potentially affected by CVE-2026-50185 via cmov (>=0.4.6, <=0.5.0-pre.0)

cmov CARGO version =0.4.6, =0.0.0, =0.3.2 Source cves: CVE-2026-50185 Source advisory: OSV:GHSA-3RJW-M598-PQ24...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-53811 via openclaw (>=2026.3.22, <=2026.5.6)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53811 Source advisory: OSV:GHSA-7HXM-F538-3XP6...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.11) +22 more potentially affected by CVE-2026-53824 via openclaw (>=2026.3.22, <=2026.4.23)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.0.1, =0.3.0 and more Source cves: CVE-2026-53824 Source advisory: OSV:GHSA-4M3V-Q747-PC6H...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53816 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53816 Source advisory: OSV:GHSA-3C6J-HQ33-3JV4...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53806 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53806 Source advisory: OSV:GHSA-VXX3-6HC9-7CC3...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.11) +22 more potentially affected by CVE-2026-53818 via openclaw (>=2026.3.22, <=2026.4.23)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.0.1, =0.3.0 and more Source cves: CVE-2026-53818 Source advisory: OSV:GHSA-RJ6P-XMXR-QJ4H...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.10) +21 more potentially affected by CVE-2026-53830 via openclaw (>=2026.3.22, <=2026.4.21)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-53830 Source advisory: OSV:GHSA-275C-XPVC-JGFW...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-53835 via openclaw (>=2026.3.22, <=2026.5.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53835 Source advisory: OSV:GHSA-3WQP-PRF6-2M72...