002-globals (=1.0.0), 007putra-my-bot (=1.1.1) +36331 more potentially affected by CVE-2026-9679 via undici (>=7.0.0 <=7.27.2)

undici NPM version =7.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =0.3.96, =0.0.1, =0.0.9 - 2017-1535 =1.0.0 and more Source cves: CVE-2026-9679 Source advisory: OSV:GHSA-P88M-4JFJ-68FV...

0utmailauth (=1.0.0), 0xkobold (>=0.0.1 <=0.8.0) +25979 more potentially affected by CVE-2026-9679 via undici (>=0.3.3 <=6.26.0)

undici NPM version =0.3.3, =0.0.1, =0.2.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =1.0.4 - 5.17task =1.0.0 - 5.18task =1.0.0 and more Source cves: CVE-2026-9679 Source advisory: OSV:GHSA-P88M-4JFJ-68FV...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentai2027/openclaw-zh (>=2026.4.23-zh <=2026.5.3-zh) +61 more potentially affected by CVE-2026-6734 via undici (>=8.0.0 <=8.1.0)

undici NPM version =8.0.0, =0.1.0, =2026.4.23-zh, =0.8.8, =0.1.0, =1.31.0-preprod-release.134, =0.2.12, =1.1.1, =2026.4.10-8, =2026.4.22, =2026.4.26-beta.1, =1.0.11, =2026.4.27, =2026.5.1-beta.1, =2026.5.4-beta.1 and more Source cves: CVE-2026-6734 Source advisory: OSV:GHSA-HM92-R4W5-C3MJ...

002-globals (=1.0.0), 007putra-my-bot (=1.1.1) +36103 more potentially affected by CVE-2026-6734 via undici (>=7.24.0 <=7.27.2)

undici NPM version =7.24.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =0.3.96, =0.0.1, =0.0.9 - 2017-1535 =1.0.0 and more Source cves: CVE-2026-6734 Source advisory: OSV:GHSA-HM92-R4W5-C3MJ...

@0xwork/connect (>=0.1.0 <=0.1.9), @1001-digital/components.evm (>=1.3.0 <=3.6.11) +1373 more potentially affected by CVE-2026-6733 via undici (>=8.0.0 <=8.4.1)

undici NPM version =8.0.0, =0.1.0, =1.3.0, =0.1.0, =1.2.2, =0.3.0, =0.3.0, =0.3.1, =5.0.1-staging.3edc9d7b8d6f, =5.0.1-staging.3edc9d7b8d6f, =5.1.1-staging.0ad6ac75ae4a, =5.1.1-staging.0ad6ac75ae4a, =5.0.1-staging.4b92bc7a3e3b, =5.0.1-staging.3abdf9534c25, =2026.6.2, =2026.6.5 and more Source cve...

002-globals (=1.0.0), 007putra-my-bot (=1.1.1) +36331 more potentially affected by CVE-2026-6733 via undici (>=7.0.0 <=7.27.2)

undici NPM version =7.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =0.3.96, =0.0.1, =0.0.9 - 2017-1535 =1.0.0 and more Source cves: CVE-2026-6733 Source advisory: OSV:GHSA-35P6-XMWP-9G52...

0utmailauth (=1.0.0), 0xkobold (>=0.0.1 <=0.8.0) +25979 more potentially affected by CVE-2026-6733 via undici (>=0.3.3 <=6.26.0)

undici NPM version =0.3.3, =0.0.1, =0.2.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =1.0.4 - 5.17task =1.0.0 - 5.18task =1.0.0 and more Source cves: CVE-2026-6733 Source advisory: OSV:GHSA-35P6-XMWP-9G52...

com.linecorp.centraldogma:centraldogma-client-java-armeria-xds (>=0.81.0 <=0.83.0) potentially affected by CVE-2026-11752 via com.linecorp.armeria:armeria-xds (>=1.37.0 <=1.39.0)

com.linecorp.armeria:armeria-xds MAVEN version =1.37.0, =0.81.0, =0.83.0 Source cves: CVE-2026-11752 Source advisory: SNYK:JAVA-COMLINECORPARMERIA-17391817...

2broke2wait (=0.1.0), @7i7o/wc-strategy-beta (=0.0.1-beta) +965 more potentially affected by CVE-2026-12644 via ts-deepmerge (>=1.0.5 <=7.0.3)

ts-deepmerge NPM version =1.0.5, =0.2.0, =0.1.22, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.9 and more Source cves: CVE-2026-12644 Source advisory: OSV:GHSA-87MF-GV2C-C62C...

ts-biginteger-lib (=5.0.5) potentially affected by unknown CVE via ts-linter-builders (=1.0.4)

ts-linter-builders NPM version =1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on ts-linter-builders and may be impacted: - ts-biginteger-lib =5.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6195...

clx-cookieparser (=1.5.1) potentially affected by unknown CVE via clx-cookie-signature (=1.2.1)

clx-cookie-signature NPM version =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on clx-cookie-signature and may be impacted: - clx-cookieparser =1.5.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6141...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +22 more potentially affected by CVE-2026-53854 via openclaw (>=2026.3.22 <=2026.4.24)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr =0.0.8 and more Source cves: CVE-2026-53854 Source advisory: SNYK:JS-OPENCLAW-17393851...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +22 more potentially affected by CVE-2026-53852 via openclaw (>=2026.3.22 <=2026.4.24)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr =0.0.8 and more Source cves: CVE-2026-53852 Source advisory: SNYK:JS-OPENCLAW-17393814...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53865 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53865 Source advisory: SNYK:JS-OPENCLAW-17394028...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +24 more potentially affected by CVE-2026-53865 via openclaw (>=0.0.1 <=2026.4.9)

openclaw NPM version =0.0.1, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53865 Source advisory: OSV:GHSA-RX78-29QR-5HQ8...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +24 more potentially affected by CVE-2026-53858 via openclaw (>=0.0.1 <=2026.4.9)

openclaw NPM version =0.0.1, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53858 Source advisory: OSV:GHSA-WC84-J36W-PW4X...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53858 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53858 Source advisory: SNYK:JS-OPENCLAW-17393721...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53849 via openclaw (>=2026.3.22 <=2026.5.6)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53849 Source advisory: SNYK:JS-OPENCLAW-17394014...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +22 more potentially affected by CVE-2026-53850 via openclaw (>=2026.3.22 <=2026.4.24)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr =0.0.8 and more Source cves: CVE-2026-53850 Source advisory: SNYK:JS-OPENCLAW-17394019...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +24 more potentially affected by CVE-2026-53846 via openclaw (>=0.0.1 <=2026.4.26)

openclaw NPM version =0.0.1, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53846 Source advisory: OSV:GHSA-24VR-RPRV-67RF...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53846 via openclaw (>=2026.3.22 <=2026.4.26)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53846 Source advisory: SNYK:JS-OPENCLAW-17393826...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53853 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53853 Source advisory: SNYK:JS-OPENCLAW-17394016...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +24 more potentially affected by CVE-2026-53853 via openclaw (>=0.0.1 <=2026.4.9)

openclaw NPM version =0.0.1, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53853 Source advisory: OSV:GHSA-V2WW-5RH7-2H5V...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53860 via openclaw (>=2026.3.22 <=2026.5.6)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53860 Source advisory: SNYK:JS-OPENCLAW-17393808...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53844 via openclaw (>=2026.3.22 <=2026.4.26)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53844 Source advisory: SNYK:JS-OPENCLAW-17393999...

@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (>=0.8.3 <=0.9.11) +21 more potentially affected by CVE-2026-53856 via openclaw (>=2026.3.22 <=2026.4.23)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.0.1, =0.0.3 and more Source cves: CVE-2026-53856 Source advisory: SNYK:JS-OPENCLAW-17393858...

@chrysb/alphaclaw (=0.9.11) potentially affected by CVE-2026-53856 via openclaw (=2026.4.23)

openclaw NPM version =2026.4.23 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw =0.9.11 Source cves: CVE-2026-53856 Source advisory: OSV:GHSA-RWP6-7W3Q-75FQ...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53857 via openclaw (>=2026.3.22 <=2026.5.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53857 Source advisory: SNYK:JS-OPENCLAW-17393854...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53845 via openclaw (>=2026.3.22 <=2026.5.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53845 Source advisory: SNYK:JS-OPENCLAW-17393997...

@0xwork/connect (>=0.1.0 <=0.1.9), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53847 via openclaw (>=2026.3.22 <=2026.5.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53847 Source advisory: SNYK:JS-OPENCLAW-17394009...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53841 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53841 Source advisory: SNYK:JS-OPENCLAW-17393864...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53851 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53851 Source advisory: SNYK:JS-OPENCLAW-17393816...

@0xwork/connect (>=0.1.0 <=0.1.7), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53862 via openclaw (>=2026.3.22 <=2026.4.9)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53862 Source advisory: SNYK:JS-OPENCLAW-17393799...

@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (>=0.8.3 <=0.9.5) +16 more potentially affected by CVE-2026-53855 via openclaw (>=2026.3.22 <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =2.0.1, =0.0.7, =0.0.11 and more Source cves: CVE-2026-53855 Source advisory: SNYK:JS-OPENCLAW-17394001...

@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (>=0.8.3 <=0.9.5) +17 more potentially affected by CVE-2026-53855 via openclaw (>=0.0.1 <=2026.4.12)

openclaw NPM version =0.0.1, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =2.0.1, =0.0.7, =0.0.11 and more Source cves: CVE-2026-53855 Source advisory: OSV:GHSA-5CJ2-3JR2-5H77...

@0xwork/connect (>=0.1.0 <=0.1.8), @agentholdings/agent-passport (>=0.1.0 <=0.1.5) +23 more potentially affected by CVE-2026-53859 via openclaw (>=2026.3.22 <=2026.5.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 and more Source cves: CVE-2026-53859 Source advisory: SNYK:JS-OPENCLAW-17394000...

@theia/ai-chat-ui (>=1.46.0-next.241 <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0 <=1.71.0-next.72) +8 more potentially affected by CVE-2026-46580 via @theia/ai-chat (>=1.46.0-next.241 <=1.71.0-next.8)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0, =0.0.1, =1.62.0, =1.59.0, =1.57.0, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-46580 Source advisory: SNYK:JS-THEIAAICHAT-17391845...

@fangoling/ai-terminal-assistant (=0.1.0), @theia/ai-anthropic (>=1.57.0 <=1.71.0-next.72) +28 more potentially affected by CVE-2026-46580 via @theia/ai-core (>=1.46.0-next.241 <=1.71.0-next.8)

@theia/ai-core NPM version =1.46.0-next.241, =1.57.0, =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.46.0-next.241, =1.67.0, =1.68.0, =1.64.0, =0.0.1, =1.60.0, =1.46.0-next.241, =1.46.0-next.241, =1.59.0, =1.71.0-next.72 - @theia/ai-ide-agents =1.57.0-next.136 and more Source cves: CVE-2026-4658...

@theia/ai-claude-code (>=1.65.0 <=1.71.0-next.72), @theia/ai-codex (>=1.67.0 <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.112 <=1.71.0-next.8)

@theia/ai-chat-ui NPM version =1.57.0-next.112, =1.65.0, =1.67.0, =1.63.0, =1.62.0, =1.60.0, =1.57.0, =1.68.0, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: OSV:GHSA-M973-PR9R-HP2W...

@codeanywhere/theia-plugin-ext (>=1.11.0 <=1.11.4), @devpodio/github-extension (=1.0.0) +130 more potentially affected by CVE-2026-44691 via @theia/workspace (>=1.0.0 <=1.69.0-next.81)

@theia/workspace NPM version =1.0.0, =1.11.0, =0.1.7, =0.0.1-1585667205, =0.8.0-next.0b7d765, =0.0.1-next.20220331.125641, =0.0.5, =0.1.0-alpha.3ddb00f8, =0.2.0-next.0f062fe5, =0.7.1, =1.58.6, =1.58.9 and more Source cves: CVE-2026-44691 Source advisory: SNYK:JS-THEIAWORKSPACE-17391869...

@codeanywhere/theia-plugin-ext (>=1.11.0 <=1.11.4), @robertjndw/plugin-ext (>=1.58.6 <=1.58.9) +20 more potentially affected by CVE-2026-44691 via @theia/debug (>=1.10.0-next.c79e9d4d <=1.69.0-next.81)

@theia/debug NPM version =1.10.0-next.c79e9d4d, =1.11.0, =1.58.6, =1.64.0, =1.17.2, =1.29.0, =1.1.0-next.0ab735a2, =1.1.0-next.0ab735a2, =1.46.0, =1.1.0-next.0ab735a2, =1.1.0-next.0ab735a2, =1.1.0-next.0ab735a2, =1.59.0, =0.0.17, =0.0.21 and more Source cves: CVE-2026-44691 Source advisory:...

@theia/ai-chat-ui (>=1.46.0-next.241 <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0 <=1.71.0-next.72) +8 more potentially affected by CVE-2026-46580 via @theia/ai-chat (>=1.46.0-next.241 <=1.71.0-next.8)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0, =0.0.1, =1.62.0, =1.59.0, =1.57.0, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-46580 Source advisory: OSV:GHSA-M973-PR9R-HP2W...

@codeanywhere/theia-plugin-ext (>=1.11.0 <=1.11.4), @eclipse-che/theia-factory-extension (>=0.0.1-1536151614 <=0.0.1-1536565198) +28 more potentially affected by CVE-2026-44691 via @theia/task (>=0.10.0-next.a2cdb337 <=1.69.0-next.81)

@theia/task NPM version =0.10.0-next.a2cdb337, =1.11.0, =0.0.1-1536151614, =0.0.1-1583345065, =1.58.6, =1.61.0, =0.3.16, =1.17.2, =0.12.0, =0.12.0, =0.7.0-next.2011dfb2, =0.12.0, =1.29.0, =0.8.0, =0.3.18, =1.69.0-next.81 and more Source cves: CVE-2026-44691 Source advisory: OSV:GHSA-G9JW-92Q7-G7F...

@theia/ai-claude-code (>=1.65.0 <=1.71.0-next.72), @theia/ai-codex (>=1.67.0 <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.112 <=1.71.0-next.8)

@theia/ai-chat-ui NPM version =1.57.0-next.112, =1.65.0, =1.67.0, =1.63.0, =1.62.0, =1.60.0, =1.57.0, =1.68.0, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: SNYK:JS-THEIAAICHATUI-17391844...

@codeanywhere/theia-plugin-ext (>=1.11.0 <=1.11.4), @robertjndw/plugin-ext (>=1.58.6 <=1.58.9) +21 more potentially affected by CVE-2026-44691 via @theia/task (>=1.10.0-next.c79e9d4d <=1.69.0-next.81)

@theia/task NPM version =1.10.0-next.c79e9d4d, =1.11.0, =1.58.6, =1.61.0, =1.17.2, =1.1.0-next.0ab735a2, =1.29.0, =1.1.0-next.0ab735a2, =1.1.0-next.0ab735a2, =1.46.0, =1.1.0-next.0ab735a2, =1.1.0-next.0ab735a2, =1.1.0-next.0ab735a2, =1.59.0, =1.59.1 and more Source cves: CVE-2026-44691 Source...

@codeanywhere/theia-plugin-ext (>=1.11.0 <=1.11.4), @devpodio/github-extension (=1.0.0) +172 more potentially affected by CVE-2026-44691 via @theia/workspace (>=0.10.0-next.a2cdb337 <=1.69.0-next.81)

@theia/workspace NPM version =0.10.0-next.a2cdb337, =1.11.0, =0.1.7, =0.0.1, =0.0.1-1530128588, =0.0.1-1569582204, =0.7.0, =0.0.1-next.20220331.125641, =0.0.5, =0.1.0-alpha.3ddb00f8, =0.1.0, =0.2.0-next.ffc3e7a2 and more Source cves: CVE-2026-44691 Source advisory: OSV:GHSA-G9JW-92Q7-G7FJ...

@fangoling/ai-terminal-assistant (=0.1.0), @theia/ai-anthropic (>=1.57.0 <=1.71.0-next.72) +28 more potentially affected by CVE-2026-46580 via @theia/ai-core (>=1.46.0-next.241 <=1.71.0-next.8)

@theia/ai-core NPM version =1.46.0-next.241, =1.57.0, =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.46.0-next.241, =1.67.0, =1.68.0, =1.64.0, =0.0.1, =1.60.0, =1.46.0-next.241, =1.46.0-next.241, =1.59.0, =1.71.0-next.72 - @theia/ai-ide-agents =1.57.0-next.136 and more Source cves: CVE-2026-4658...

@codeanywhere/theia-plugin-ext (>=1.11.0 <=1.11.4), @jpinkney/plugin (>=0.0.1-1583345065 <=0.0.1-1583345396) +26 more potentially affected by CVE-2026-44691 via @theia/debug (>=0.10.0-next.a2cdb337 <=1.69.0-next.81)

@theia/debug NPM version =0.10.0-next.a2cdb337, =1.11.0, =0.0.1-1583345065, =1.58.6, =1.64.0, =1.17.2, =0.3.14, =0.7.0-next.2011dfb2, =0.3.18, =1.29.0, =0.8.0, =0.3.16, =1.46.0, =0.3.12, =0.13.0, =1.69.0-next.81 and more Source cves: CVE-2026-44691 Source advisory: OSV:GHSA-G9JW-92Q7-G7FJ...

@theia/ai-chat-ui (>=1.46.0-next.241 <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0 <=1.71.0-next.72) +8 more potentially affected by CVE-2026-44688 via @theia/ai-chat (>=1.46.0-next.241 <=1.71.0-next.8)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0, =0.0.1, =1.62.0, =1.59.0, =1.57.0, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-44688 Source advisory: OSV:GHSA-3JWW-HXQJ-WFQ2...

@theia/ai-claude-code (>=1.65.0 <=1.71.0-next.72), @theia/ai-codex (>=1.67.0 <=1.71.0-next.72) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0-next.112 <=1.71.0-next.8)

@theia/ai-chat-ui NPM version =1.57.0-next.112, =1.65.0, =1.67.0, =1.63.0, =1.62.0, =1.60.0, =1.57.0, =1.68.0, =1.71.0-next.72 Source cves: CVE-2026-44688 Source advisory: SNYK:JS-THEIAAICHATUI-17391851...