org.apache.camel.karaf:camel-docling (>=4.18.1, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-docling (>=3.29.0, <=3.33.3) +3 more potentially affected by CVE-2026-78163 via org.apache.camel:camel-docling (>=4.15.0, <=4.18.4)

org.apache.camel:camel-docling MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.31.0, =4.15.0, =4.18.4 Source cves: CVE-2026-78163 Source advisory: MEND:CVE-2026-78163...

org.apache.camel.quarkus:camel-quarkus-hazelcast (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-hazelcast-deployment (>=3.35.0, <=3.39.0) +2 more potentially affected by CVE-2026-78162 via org.apache.camel:camel-hazelcast (>=4.19.0, <=4.22.0)

org.apache.camel:camel-hazelcast MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 Source cves: CVE-2026-78162 Source advisory: MEND:CVE-2026-78162...

org.apache.camel.karaf:camel-hazelcast (>=4.18.1, <=4.18.4), org.apache.camel.karaf:camel-hazelcast-test (>=4.18.1, <=4.18.4) +4 more potentially affected by CVE-2026-78162 via org.apache.camel:camel-hazelcast (>=4.15.0, <=4.18.4)

org.apache.camel:camel-hazelcast MAVEN version =4.15.0, =4.18.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.4 Source cves: CVE-2026-78162 Source advisory: MEND:CVE-2026-78162...

@blackbelt-technology/pi-agent-dashboard (>=0.4.0, <=0.8.0), hotmilk (>=0.1.1, <=0.1.19) potentially affected by CVE-2026-112101 via @blackbelt-technology/pi-dashboard-server (>=0.4.6, <=0.8.0)

@blackbelt-technology/pi-dashboard-server NPM version =0.4.6, =0.4.0, =0.1.1, =0.1.19 Source cves: CVE-2026-112101 Source advisory: MEND:CVE-2026-112101...

hotmilk (>=0.1.1, <=0.1.19) potentially affected by CVE-2026-112101 via @blackbelt-technology/pi-agent-dashboard (>=0.5.4, <=0.7.0)

@blackbelt-technology/pi-agent-dashboard NPM version =0.5.4, =0.1.1, =0.1.19 Source cves: CVE-2026-112101 Source advisory: MEND:CVE-2026-112101...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.4) potentially affected by CVE-2026-108771 via org.apache.kylin:kylin-core-common (>=5.0.0-alpha, <=5.0.4)

org.apache.kylin:kylin-core-common MAVEN version =5.0.0-alpha, =5.0.0-alpha, =5.0.4 Source cves: CVE-2026-108771 Source advisory: MEND:CVE-2026-108771...

@appweaver/core (>=1.6.2, <=1.12.2), @eik/service (>=5.1.66, <=5.6.10) +2 more potentially affected by CVE-2026-110024 via @fastify/jwt (>=10.2.1, <=10.2.3)

@fastify/jwt NPM version =10.2.1, =1.6.2, =5.1.66, =0.1.0, =0.2.1, =0.2.2 Source cves: CVE-2026-110024 Source advisory: MEND:CVE-2026-110024...

ai.timefold.solver.enterprise:timefold-solver-enterprise-core (2.8.0-rc-1), ai.timefold.solver.enterprise:timefold-solver-enterprise-jackson (2.8.0-rc-1) +347 more potentially affected by CVE-2026-112046 via org.ow2.asm:asm (9.11)

org.ow2.asm:asm MAVEN version 9.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.ow2.asm:asm and may be impacted: - ai.timefold.solver.enterprise:timefold-solver-enterprise-core 2.8.0-rc-1 -...

omnigent-client (>=0.13.0, <=0.14.0rc1), omnigent-ui-sdk (>=0.13.0, <=0.14.0rc1) potentially affected by CVE-2026-112015 via omnigent (>=0.13.0, <=0.14.0rc1)

omnigent PYPI version =0.13.0, =0.13.0, =0.13.0, =0.14.0rc1 Source cves: CVE-2026-112015 Source advisory: MEND:CVE-2026-112015...

a2a-server (>=0.1.2, <=0.6.1), aef-framework (>=0.1.1, <=0.1.2) +121 more potentially affected by CVE-2026-112006 via opentelemetry-exporter-otlp-proto-http (1.44.0)

opentelemetry-exporter-otlp-proto-http PYPI version 1.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-exporter-otlp-proto-http and may be impacted: - a2a-server =0.1.2, =0.1.1, =0.0.122, =0.105.1, =0.10.0, =0.10.0, =1.8.1, =1.0.0b2,...

@diviops/mcp-server (>=1.5.56, <=1.5.73), @l1nxuan-du/dsh (0.1.6-fork-alpha.2.20260920.1) +52 more potentially affected by CVE-2026-111997 via ip-address (>=10.7.0, <=10.7.3)

ip-address NPM version =10.7.0, =1.5.56, =0.19.6, =4.1.6, =3.1.82, =2.6.58, =3.8.6, =2.7.154, =3.1.54, =4.0.28, =3.1.78, =3.0.127, =3.5.37, =3.5.59 and more Source cves: CVE-2026-111997 Source advisory: MEND:CVE-2026-111997...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 170051277-trab-final-gces (>=0.3.0, <=0.5.0) +11363 more potentially affected by CVE-2026-112902 via pillow (>=2.0.0, <=12.3.0)

pillow PYPI version =2.0.0, =0.0.0, =0.3.0, =0.1.0, =0.2.2, =0.5.0a0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.7 and more Source cves: CVE-2026-112902 Source advisory: MEND:CVE-2026-112902...

ai.covia:covia-claude-code (>=0.9.3, <=0.9.11), ai.covia:covia-discord (>=0.9.4, <=0.9.9) +10584 more potentially affected by CVE-2026-68498 via com.fasterxml.jackson.core:jackson-core (>=2.22.0, <=2.22.1)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.1.0-beta.1, =0.1.1, =1.4.0, =1.4.0, =2.0.0 and more Source cves: CVE-2026-68498 Source advisory: MEND:CVE-2026-68498...

ac.pao:reports-java-engine (1.0.0), ae.alphapay:alphapay-gateway-client (2.0.0) +44386 more potentially affected by CVE-2026-68498 via com.fasterxml.jackson.core:jackson-core (>=2.16.0, <=2.18.9)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.16.0, =1.0.0, =1.0.0, =0.1.0, =0.1.1, =0.1.0-rc4, =0.1.0-rc4, =0.1.3, =0.1.4 and more Source cves: CVE-2026-68498 Source advisory: MEND:CVE-2026-68498...

ai.pipestream.proto-toolchain:ai.pipestream.proto-toolchain.gradle.plugin (>=0.7.24, <=0.7.26), ai.pipestream:quarkus-buf-grpc-generator (>=0.7.24, <=0.7.26) +2254 more potentially affected by CVE-2026-68498 via tools.jackson.core:jackson-core (>=3.2.0, <=3.2.1)

tools.jackson.core:jackson-core MAVEN version =3.2.0, =0.7.24, =0.7.24, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha6 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics-deploym...

ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +12836 more potentially affected by CVE-2026-68498 via tools.jackson.core:jackson-core (>=3.0.0, <=3.1.5)

tools.jackson.core:jackson-core MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.2.0, =0.2.0, =0.2.0, =0.4.4 and more Source cves:...

ac.pao:reports-web (1.0.0), ai.aarvion:aarvion-spring-boot-starter (>=0.1.0, <=0.2.0) +36795 more potentially affected by CVE-2026-68498 via com.fasterxml.jackson.core:jackson-core (>=2.19.0, <=2.21.5)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.19.0, =0.1.0, =1.0.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.6 and more Source cves:...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 170051277-trab-final-gces (>=0.3.0, <=0.5.0) +11360 more potentially affected by CVE-2026-112900 via pillow (>=2.6.1, <=12.3.0)

pillow PYPI version =2.6.1, =0.0.0, =0.3.0, =0.1.0, =0.2.2, =0.5.0a0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.7 and more Source cves: CVE-2026-112900 Source advisory: SNYK:PYTHON-PILLOW-21277713...

lmcache-vllm (>=0.6.1rc1, <=0.6.2.1) potentially affected by CVE-2026-105192 via lmcache (0.4.3)

lmcache PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on lmcache and may be impacted: - lmcache-vllm =0.6.1rc1, =0.6.2.1 Source cves: CVE-2026-105192 Source advisory: GHSA-W5F2-9Q9C-FF4H...

lmcache-vllm (>=0.6.1rc1, <=0.6.2.1) potentially affected by CVE-2026-105192 via lmcache (0.4.3)

lmcache PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on lmcache and may be impacted: - lmcache-vllm =0.6.1rc1, =0.6.2.1 Source cves: CVE-2026-105192 Source advisory: OSV:GHSA-W5F2-9Q9C-FF4H...

acroform (>=0.1.2, <=0.1.3), bookbinder (0.1.0) +96 more potentially affected by unknown CVE via lopdf (>=0.8.0, <=0.41.0)

lopdf CARGO version =0.8.0, =0.1.2, =0.1.0, =0.0.1, =0.3.0, =0.1.10, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.7.3 - ebook-reader 0.1.1 - epub-reader 0.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6FJ4-RCR3-R7RR...

acroform (>=0.1.2, <=0.1.3), bookbinder (0.1.0) +96 more potentially affected by unknown CVE via lopdf (>=0.8.0, <=0.41.0)

lopdf CARGO version =0.8.0, =0.1.2, =0.1.0, =0.0.1, =0.3.0, =0.1.10, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.7.3 - ebook-reader 0.1.1 - epub-reader 0.1.1 and more Source cves: unknown CVE Source advisory: GHSA-6FJ4-RCR3-R7RR...

ai.djl.audio:audio (>=0.18.0, <=0.38.0), ai.djl.spark:spark_2.12 (>=0.22.0, <=0.38.0) +461 more potentially affected by CVE-2026-102834 via org.bytedeco:javacv (>=1.0, <=1.5.13)

org.bytedeco:javacv MAVEN version =1.0, =0.18.0, =0.22.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.3.0 and more Source cves: CVE-2026-102834 Source advisory: GHSA-RXJV-24XQ-76WC...

com.github.sarxos:webcam-capture-driver-javacv (0.3.10), info.kapable:automationscenarioapi (1.0.0) +3 more potentially affected by CVE-2026-102834 via org.bytedeco:javacv (0.8)

org.bytedeco:javacv MAVEN version 0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.bytedeco:javacv and may be impacted: - com.github.sarxos:webcam-capture-driver-javacv 0.3.10 - info.kapable:automationscenarioapi 1.0.0 - org.bytedeco:procamcalib...

org.bytedeco:procamcalib (0.9), org.bytedeco:procamtracker (0.9) potentially affected by CVE-2026-102834 via org.bytedeco:javacv (0.9)

org.bytedeco:javacv MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.bytedeco:javacv and may be impacted: - org.bytedeco:procamcalib 0.9 - org.bytedeco:procamtracker 0.9 Source cves: CVE-2026-102834 Source advisory:...

ai.djl.audio:audio (>=0.18.0, <=0.38.0), ai.djl.spark:spark_2.12 (>=0.22.0, <=0.38.0) +461 more potentially affected by CVE-2026-102834 via org.bytedeco:javacv (>=1.0, <=1.5.13)

org.bytedeco:javacv MAVEN version =1.0, =0.18.0, =0.22.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.3.0 and more Source cves: CVE-2026-102834 Source advisory: OSV:GHSA-RXJV-24XQ-76WC...

org.bytedeco:procamcalib (0.10), org.bytedeco:procamtracker (0.10) potentially affected by CVE-2026-102834 via org.bytedeco:javacv (0.10)

org.bytedeco:javacv MAVEN version 0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.bytedeco:javacv and may be impacted: - org.bytedeco:procamcalib 0.10 - org.bytedeco:procamtracker 0.10 Source cves: CVE-2026-102834 Source advisory:...

org.bytedeco:procamcalib (0.11), org.bytedeco:procamtracker (0.11) potentially affected by CVE-2026-102834 via org.bytedeco:javacv (0.11)

org.bytedeco:javacv MAVEN version 0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.bytedeco:javacv and may be impacted: - org.bytedeco:procamcalib 0.11 - org.bytedeco:procamtracker 0.11 Source cves: CVE-2026-102834 Source advisory:...

ai.djl.audio:audio (>=0.18.0, <=0.38.0), ai.djl.spark:spark_2.12 (>=0.22.0, <=0.38.0) +463 more potentially affected by CVE-2026-102834 via org.bytedeco:javacv (>=0.8, <=1.5.13)

org.bytedeco:javacv MAVEN version =0.8, =0.18.0, =0.22.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.3.0 and more Source cves: CVE-2026-102834 Source advisory: MEND:CVE-2026-102834...

agent-framework-claude (>=1.0.0b260319, <=1.0.0b260521), agent-webkit-server (>=0.1.0, <=0.2.0) +44 more potentially affected by CVE-2026-96620 via claude-agent-sdk (>=0.1.9, <=0.2.120)

claude-agent-sdk PYPI version =0.1.9, =1.0.0b260319, =0.1.0, =0.1.0, =0.1.0, =8.1.0, =0.3.12, =0.3.0, =0.4.0, =0.5.1, =0.1.12, =0.4.3, =0.1.0, =0.1.2 - expluro 0.9.0 - glyph-agents 0.3.0 - gobby 0.3.4 and more Source cves: CVE-2026-96620 Source advisory: OSV:GHSA-H4MW-J7QP-8MWM...

agent-framework-claude (>=1.0.0b260319, <=1.0.0b260521), agent-webkit-server (>=0.1.0, <=0.2.0) +44 more potentially affected by CVE-2026-96620 via claude-agent-sdk (>=0.1.9, <=0.2.120)

claude-agent-sdk PYPI version =0.1.9, =1.0.0b260319, =0.1.0, =0.1.0, =0.1.0, =8.1.0, =0.3.12, =0.3.0, =0.4.0, =0.5.1, =0.1.12, =0.4.3, =0.1.0, =0.1.2 - expluro 0.9.0 - glyph-agents 0.3.0 - gobby 0.3.4 and more Source cves: CVE-2026-96620 Source advisory: GHSA-H4MW-J7QP-8MWM...

agent-framework-claude (>=1.0.0b260319, <=1.0.0b260521), agent-webkit-server (>=0.1.0, <=0.2.0) +42 more potentially affected by CVE-2026-96620 via claude-agent-sdk (>=0.1.20, <=0.2.120)

claude-agent-sdk PYPI version =0.1.20, =1.0.0b260319, =0.1.0, =0.1.0, =0.1.0, =8.1.0, =0.3.12, =0.3.0, =0.4.0, =0.1.12, =0.4.3, =0.1.0, =0.1.2 - expluro 0.9.0 - glyph-agents 0.3.0 - gobby 0.3.4 - home-agent 0.1.1 and more Source cves: CVE-2026-96620 Source advisory: OSV:GHSA-H4MW-J7QP-8MWM...

agent-framework-claude (>=1.0.0b260319, <=1.0.0b260521), agent-webkit-server (>=0.1.0, <=0.2.0) +42 more potentially affected by CVE-2026-96620 via claude-agent-sdk (>=0.1.20, <=0.2.120)

claude-agent-sdk PYPI version =0.1.20, =1.0.0b260319, =0.1.0, =0.1.0, =0.1.0, =8.1.0, =0.3.12, =0.3.0, =0.4.0, =0.1.12, =0.4.3, =0.1.0, =0.1.2 - expluro 0.9.0 - glyph-agents 0.3.0 - gobby 0.3.4 - home-agent 0.1.1 and more Source cves: CVE-2026-96620 Source advisory: GHSA-H4MW-J7QP-8MWM...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0, <=5.0.4) potentially affected by CVE-2026-108743 via org.apache.kylin:kylin-core-common (>=5.0.0, <=5.0.4)

org.apache.kylin:kylin-core-common MAVEN version =5.0.0, =5.0.0, =5.0.4 Source cves: CVE-2026-108743 Source advisory: MEND:CVE-2026-108743...

agent-framework-claude (>=1.0.0b260319, <=1.0.0b260521), agent-webkit-server (>=0.1.0, <=0.2.0) +44 more potentially affected by CVE-2026-96620 via claude-agent-sdk (>=0.1.9, <=0.2.120)

claude-agent-sdk PYPI version =0.1.9, =1.0.0b260319, =0.1.0, =0.1.0, =0.1.0, =8.1.0, =0.3.12, =0.3.0, =0.4.0, =0.5.1, =0.1.12, =0.4.3, =0.1.0, =0.1.2 - expluro 0.9.0 - glyph-agents 0.3.0 - gobby 0.3.4 and more Source cves: CVE-2026-96620 Source advisory: MEND:CVE-2026-96620...

agent-framework-claude (>=1.0.0b260319, <=1.0.0b260521), agent-webkit-server (>=0.1.0, <=0.2.0) +42 more potentially affected by CVE-2026-96620 via claude-agent-sdk (>=0.1.20, <=0.2.120)

claude-agent-sdk PYPI version =0.1.20, =1.0.0b260319, =0.1.0, =0.1.0, =0.1.0, =8.1.0, =0.3.12, =0.3.0, =0.4.0, =0.1.12, =0.4.3, =0.1.0, =0.1.2 - expluro 0.9.0 - glyph-agents 0.3.0 - gobby 0.3.4 - home-agent 0.1.1 and more Source cves: CVE-2026-96620 Source advisory: MEND:CVE-2026-96620...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0, <=5.0.4) potentially affected by CVE-2026-108709 via org.apache.kylin:kylin-core-common (>=5.0.0, <=5.0.4)

org.apache.kylin:kylin-core-common MAVEN version =5.0.0, =5.0.0, =5.0.4 Source cves: CVE-2026-108709 Source advisory: MEND:CVE-2026-108709...

@adobe/helix-onedrive-cli (1.11.441), @adobe/helix-onedrive-support (12.4.13) +2 more potentially affected by CVE-2026-109461 via @azure/msal-node (7.0.1)

@azure/msal-node NPM version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @azure/msal-node and may be impacted: - @adobe/helix-onedrive-cli 1.11.441 - @adobe/helix-onedrive-support 12.4.13 - @mcp-sidekick/msx 1.0.0 - @tsg-ailab/dynamics-crm-mc...

accesskit_atspi_common (>=0.1.1, <=0.9.1), accesskit_unix (>=0.1.0, <=0.12.1) +226 more potentially affected by unknown CVE via zvariant_derive (>=2.2.0, <=5.15.1)

zvariantderive CARGO version =2.2.0, =0.1.1, =0.1.0, =0.8.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.0.0, =0.1.0, =0.3.4 - benchscraper 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0372...

accesskit_atspi_common (>=0.1.1, <=0.9.1), accesskit_unix (>=0.1.0, <=0.12.1) +226 more potentially affected by unknown CVE via zvariant (>=2.1.0, <=5.15.1)

zvariant CARGO version =2.1.0, =0.1.1, =0.1.0, =0.8.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.0.0, =0.1.0, =0.3.4 - benchscraper 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0370...

accesskit_atspi_common (>=0.1.1, <=0.9.1), accesskit_unix (>=0.1.0, <=0.11.1) +193 more potentially affected by unknown CVE via zbus_names (>=1.1.0, <=4.3.5)

zbusnames CARGO version =1.1.0, =0.1.1, =0.1.0, =0.8.0, =0.2.0-alpha, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.0.0, =0.1.0, =0.0.1, =0.1.14 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0371...

2pi-agent (0.3.0), 3xhaustpi (>=0.1.3, <=0.2.10) +2416 more potentially affected by CVE-2026-109383 via undici (>=8.0.0, <=8.12.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.0, =0.3.5, =1.0.0, =0.2.0, =0.0.1, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a and more...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +3089 more potentially affected by CVE-2026-109383 via undici (>=7.0.0, <=7.30.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.4.0, =1.0.0, =0.6.0, =0.1.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =1.2.0, =2.0.0 and more Source cves: CVE-2026-109383 Source advisory: SNYK:JS-UNDICI-21181005...

0utmailauth (1.0.0), 0xble (>=22.0.0, <=23.2.2) +15882 more potentially affected by CVE-2026-109383 via undici (>=4.0.0, <=6.29.0)

undici NPM version =4.0.0, =22.0.0, =0.2.0, =1.0.0, =0.2.0, =0.4.0, =0.1.0, =0.0.1, =1.0.21, =0.6.0, =0.6.2 and more Source cves: CVE-2026-109383 Source advisory: SNYK:JS-UNDICI-21181005...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +3089 more potentially affected by CVE-2026-109829 via undici (>=7.0.0, <=7.30.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.4.0, =1.0.0, =0.6.0, =0.1.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =1.2.0, =2.0.0 and more Source cves: CVE-2026-109829 Source advisory: SNYK:JS-UNDICI-21181009...

2pi-agent (0.3.0), 3xhaustpi (>=0.1.3, <=0.2.10) +2416 more potentially affected by CVE-2026-109829 via undici (>=8.0.0, <=8.12.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.0, =0.3.5, =1.0.0, =0.2.0, =0.0.1, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a and more...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.1.0-dev.260119.0a66443, <=0.3.0) +2919 more potentially affected by CVE-2026-109841 via undici (>=7.15.0, <=7.30.0)

undici NPM version =7.15.0, =0.1.1, =0.1.0-dev.260119.0a66443, =0.4.0, =1.0.0, =0.6.0, =0.1.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =1.2.0, =2.0.0 and more Source cves: CVE-2026-109841 Source advisory: SNYK:JS-UNDICI-21181011...

2pi-agent (0.3.0), 3xhaustpi (>=0.1.3, <=0.2.10) +2416 more potentially affected by CVE-2026-109841 via undici (>=8.0.0, <=8.12.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.0, =0.3.5, =1.0.0, =0.2.0, =0.0.1, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a and more...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +3089 more potentially affected by CVE-2026-87018 via undici (>=7.0.0, <=7.30.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.4.0, =1.0.0, =0.6.0, =0.1.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =1.2.0, =2.0.0 and more Source cves: CVE-2026-87018 Source advisory: SNYK:JS-UNDICI-21181013...

2pi-agent (0.3.0), 3xhaustpi (>=0.1.3, <=0.2.10) +2416 more potentially affected by CVE-2026-87018 via undici (>=8.0.0, <=8.12.1)

undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.0, =0.3.5, =1.0.0, =0.2.0, =0.0.1, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a and more...