@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +38 more potentially affected by unknown CVE via n8n-core (>=1.0.0, <=1.122.16)

n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.26.0, =0.34.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =1.0.1, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =1.4.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NCORE-15825749...

@n8n/backend-test-utils (>=1.10.0, <=1.10.1), @n8n/db (>=1.10.0, <=1.10.2) +2 more potentially affected by unknown CVE via n8n-core (>=2.10.0, <=2.10.1)

n8n-core NPM version =2.10.0, =1.10.0, =1.10.0, =2.10.0, =2.10.1 - n8n-runner 0.0.4 Source cves: unknown CVE Source advisory: SNYK:JS-N8NCORE-15825749...

1dr-twig-templating (1.0.2), 433bf (0.0.1) +950 more potentially affected by CVE-2026-33994 via locutus (2.0.39)

locutus NPM version 2.0.39 is affected by a known vulnerability. The following packages have a transitive dependency on locutus and may be impacted: - 1dr-twig-templating 1.0.2 - 433bf 0.0.1 - @27works/posto 2.0.2 - @2gis/js-docs-generator =0.0.1, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.1.0, =1.0.0,...

1dr-twig-templating (1.0.2), 433bf (0.0.1) +950 more potentially affected by CVE-2026-25521 +1 more via locutus (2.0.39)

locutus NPM version 2.0.39 is affected by a known vulnerability. The following packages have a transitive dependency on locutus and may be impacted: - 1dr-twig-templating 1.0.2 - 433bf 0.0.1 - @27works/posto 2.0.2 - @2gis/js-docs-generator =0.0.1, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.1.0, =1.0.0,...

@omchat/common (>=1.0.0, <=1.0.4), @tverse/ui (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-33979 via express-xss-sanitizer (1.2.1)

express-xss-sanitizer NPM version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-xss-sanitizer and may be impacted: - @omchat/common =1.0.0, =0.1.0, =1.0.0, =1.14.31, =1.15.2 Source cves: CVE-2026-33979 Source advisory:...

jf-langflow (>=1.10.0, <=1.10.0.post7), langflow (>=1.8.0rc0, <=1.8.0rc2) +1 more potentially affected by CVE-2026-5022 via langflow-base (>=0.7.2, <=0.11.3rc0)

langflow-base PYPI version =0.7.2, =1.10.0, =1.8.0rc0, =1.8.0rc2 - langflow-nightly 1.8.0.dev24 Source cves: CVE-2026-5022 Source advisory: SNYK:PYTHON-LANGFLOWBASE-15840036...

@dargmuesli/nuxt-vio (>=20.6.0, <=21.0.0-beta.11), @darraghor/nest-backend-libs (>=5.0.10, <=5.0.11) +51 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.3)

nodemailer NPM version =8.0.0, =20.6.0, =5.0.10, =0.0.1-beta.0, =0.2.0-alpha.1, =6.0.0-beta.9, =11.14.0, =5.8.38, =2.9.4-beta.9766, =0.1.10, =1.11.4, =2.1.8, =0.0.0-experimental.09a2220201377abea1f719e6f8d201b10ae3f7af, =2.0.0, =3.2.11, =20260208.152.42, =20260327.0.55 and more Source cves: unkno...

@dargmuesli/nuxt-vio (>=20.6.0, <=21.0.0-beta.11), @darraghor/nest-backend-libs (>=5.0.10, <=5.0.11) +51 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.3)

nodemailer NPM version =8.0.0, =20.6.0, =5.0.10, =0.0.1-beta.0, =0.2.0-alpha.1, =6.0.0-beta.9, =11.14.0, =5.8.38, =2.9.4-beta.9766, =0.1.10, =1.11.4, =2.1.8, =0.0.0-experimental.09a2220201377abea1f719e6f8d201b10ae3f7af, =2.0.0, =3.2.11, =20260208.152.42, =20260327.0.55 and more Source cves: unkno...

07-calito-router (>=0.0.2, <=0.0.4), @adbl/cartridge (>=0.0.0, <=0.0.8) +253 more potentially affected by CVE-2026-33943 via happy-dom (>=15.10.2, <=20.8.7)

happy-dom NPM version =15.10.2, =0.0.2, =0.0.0, =0.1.1, =0.1.0, =18.0.11, =0.5.0, =0.4.2, =0.1.10, =0.3.0, =0.1.0-alpha.1, =0.1.0 - @chialab/sveltekit-utils 0.1.0-alpha.8 - @choiceform/design-js-tokens 0.1.0 - @codai/testing-utils 1.0.0 and more Source cves: CVE-2026-33943 Source advisory:...

07-calito-router (>=0.0.2, <=0.0.4), @adbl/cartridge (>=0.0.0, <=0.0.8) +253 more potentially affected by CVE-2026-33943 via happy-dom (>=15.10.2, <=20.8.7)

happy-dom NPM version =15.10.2, =0.0.2, =0.0.0, =0.1.1, =0.1.0, =18.0.11, =0.5.0, =0.4.2, =0.1.10, =0.3.0, =0.1.0-alpha.1, =0.1.0 - @chialab/sveltekit-utils 0.1.0-alpha.8 - @choiceform/design-js-tokens 0.1.0 - @codai/testing-utils 1.0.0 and more Source cves: CVE-2026-33943 Source advisory:...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3662 more potentially affected by CVE-2026-33916 via handlebars (>=4.0.0, <=4.7.8)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33916 Source advisory: OSV:GHSA-2QVQ-RJWJ-GVW9...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3662 more potentially affected by CVE-2026-33916 via handlebars (>=4.0.0, <=4.7.8)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33916 Source advisory: SNYK:JS-HANDLEBARS-15789775...

inigo-rs (>=0.1.1, <=0.1.4) potentially affected by unknown CVE via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-HFF2-GCPX-8F4P...

-fides-amor-et-lux (1.0.0), 1ib (>=1.0.9, <=1.0.11) +1161 more potentially affected by CVE-2026-33896 via node-forge (>=1.0.0, <=1.3.3)

node-forge NPM version =1.0.0, =1.0.9, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =0.0.1-custom-install-dir, =1.2.1, =1.0.0, =1.0.0, =1.2.6, =1.23.2, =1.35.0 - @arextest/arex-request-runtime 7.36.3 and more Source cves: CVE-2026-33896 Source advisory: SNYK:JS-NODEFORGE-15789771...

-fides-amor-et-lux (1.0.0), 1ib (>=1.0.9, <=1.0.11) +1161 more potentially affected by CVE-2026-33896 via node-forge (>=1.0.0, <=1.3.3)

node-forge NPM version =1.0.0, =1.0.9, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =0.0.1-custom-install-dir, =1.2.1, =1.0.0, =1.0.0, =1.2.6, =1.23.2, =1.35.0 - @arextest/arex-request-runtime 7.36.3 and more Source cves: CVE-2026-33896 Source advisory: OSV:GHSA-2328-F5F3-GJ25...

org.webjars.npm:github-com-cisco-node-jose (2.2.0), org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6) +7 more potentially affected by CVE-2026-33896 via org.webjars.npm:node-forge (>=0.7.1, <=1.3.3)

org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =2.1.1 Source cves: CVE-2026-33896 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15789772...

-fides-amor-et-lux (1.0.0), 1ib (>=1.0.9, <=1.0.11) +1161 more potentially affected by CVE-2026-33895 via node-forge (>=1.0.0, <=1.3.3)

node-forge NPM version =1.0.0, =1.0.9, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =0.0.1-custom-install-dir, =1.2.1, =1.0.0, =1.0.0, =1.2.6, =1.23.2, =1.35.0 - @arextest/arex-request-runtime 7.36.3 and more Source cves: CVE-2026-33895 Source advisory: OSV:GHSA-Q67F-28XG-22RW...

org.webjars.npm:github-com-cisco-node-jose (2.2.0), org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6) +7 more potentially affected by CVE-2026-33895 via org.webjars.npm:node-forge (>=0.7.1, <=1.3.3)

org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =2.1.1 Source cves: CVE-2026-33895 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15789768...

-fides-amor-et-lux (1.0.0), 1ib (>=1.0.9, <=1.0.11) +1161 more potentially affected by CVE-2026-33895 via node-forge (>=1.0.0, <=1.3.3)

node-forge NPM version =1.0.0, =1.0.9, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =0.0.1-custom-install-dir, =1.2.1, =1.0.0, =1.0.0, =1.2.6, =1.23.2, =1.35.0 - @arextest/arex-request-runtime 7.36.3 and more Source cves: CVE-2026-33895 Source advisory: SNYK:JS-NODEFORGE-15789767...

-fides-amor-et-lux (1.0.0), 1ib (>=1.0.9, <=1.0.11) +1161 more potentially affected by CVE-2026-33894 via node-forge (>=1.0.0, <=1.3.3)

node-forge NPM version =1.0.0, =1.0.9, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =0.0.1-custom-install-dir, =1.2.1, =1.0.0, =1.0.0, =1.2.6, =1.23.2, =1.35.0 - @arextest/arex-request-runtime 7.36.3 and more Source cves: CVE-2026-33894 Source advisory: OSV:GHSA-PPP5-5V6C-4JWP...

-fides-amor-et-lux (1.0.0), 1ib (>=1.0.9, <=1.0.11) +1161 more potentially affected by CVE-2026-33894 via node-forge (>=1.0.0, <=1.3.3)

node-forge NPM version =1.0.0, =1.0.9, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =0.0.1-custom-install-dir, =1.2.1, =1.0.0, =1.0.0, =1.2.6, =1.23.2, =1.35.0 - @arextest/arex-request-runtime 7.36.3 and more Source cves: CVE-2026-33894 Source advisory: SNYK:JS-NODEFORGE-15789773...

org.webjars.npm:github-com-cisco-node-jose (2.2.0), org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6) +7 more potentially affected by CVE-2026-33894 via org.webjars.npm:node-forge (>=0.7.1, <=1.3.3)

org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =2.1.1 Source cves: CVE-2026-33894 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15789774...

docassemble-webapp (>=1.5.3, <=1.9.5), mad-notifications (6.0.0rc9) +2 more potentially affected by unknown CVE via telnyx (>=2.1.2, <=4.172.0)

telnyx PYPI version =2.1.2, =1.5.3, =0.20.0, =0.4.0, =0.4.4 Source cves: unknown CVE Source advisory: SNYK:PYTHON-TELNYX-15790745...

-fides-amor-et-lux (1.0.0), 1ib (>=1.0.9, <=1.0.11) +1161 more potentially affected by CVE-2026-33891 via node-forge (>=1.0.0, <=1.3.3)

node-forge NPM version =1.0.0, =1.0.9, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =0.0.1-custom-install-dir, =1.2.1, =1.0.0, =1.0.0, =1.2.6, =1.23.2, =1.35.0 - @arextest/arex-request-runtime 7.36.3 and more Source cves: CVE-2026-33891 Source advisory: SNYK:JS-NODEFORGE-15789769...

org.webjars.npm:github-com-cisco-node-jose (2.2.0), org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6) +7 more potentially affected by CVE-2026-33891 via org.webjars.npm:node-forge (>=0.7.1, <=1.3.3)

org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =2.1.1 Source cves: CVE-2026-33891 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15789770...

-fides-amor-et-lux (1.0.0), 1ib (>=1.0.9, <=1.0.11) +1161 more potentially affected by CVE-2026-33891 via node-forge (>=1.0.0, <=1.3.3)

node-forge NPM version =1.0.0, =1.0.9, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =0.0.1-custom-install-dir, =1.2.1, =1.0.0, =1.0.0, =1.2.6, =1.23.2, =1.35.0 - @arextest/arex-request-runtime 7.36.3 and more Source cves: CVE-2026-33891 Source advisory: OSV:GHSA-5M6Q-G25R-MVWX...

@apollo/server-integration-testsuite (>=5.0.0-rc.0, <=5.4.0), @commitspark/graphql-api (>=1.0.0-beta.3, <=1.0.0-beta.6) +24 more potentially affected by unknown CVE via @apollo/server (>=5.0.0, <=5.4.0)

@apollo/server NPM version =5.0.0, =5.0.0-rc.0, =1.0.0-beta.3, =1.217.0, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.22.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-APOLLOSERVER-15790568...

2mxdev-gql-gateway (1.0.0), 4m-node-server (>=0.0.1, <=0.0.8) +3199 more potentially affected by unknown CVE via apollo-server-core (>=1.3.2, <=3.13.0)

apollo-server-core NPM version =1.3.2, =0.0.1, =1.0.2, =0.0.80, =3.10.1, =1.2.0-pre.24, =1.0.1, =1.0.0, =1.0.0, =0.5.0, =1.0.0, =0.1.3, =0.0.1, =0.1.1, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-APOLLOSERVERCORE-15790567...

@apollo/server-integration-testsuite (>=5.0.0-rc.0, <=5.4.0), @commitspark/graphql-api (>=1.0.0-beta.3, <=1.0.0-beta.6) +24 more potentially affected by unknown CVE via @apollo/server (>=5.0.0, <=5.4.0)

@apollo/server NPM version =5.0.0, =5.0.0-rc.0, =1.0.0-beta.3, =1.217.0, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.20.2, =2.22.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q82-XGWF-VJ6H...

@10life/strapi-plugin-advanced-cache-manager (>=1.0.1, <=1.0.6), @a11ywatch/a11ywatch (>=0.0.1, <=0.3.82) +52 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.12.1)

apollo-server-core NPM version =3.0.0-html.2, =1.0.1, =0.0.1, =0.1.1, =4.9.2, =1.0.1, =1.1.22, =1.1.19, =1.0.0, =1.1.0, =1.0.0, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q82-XGWF-VJ6H...

@agentholdings/agent-passport (0.1.0), @flomesh/ztm-chat (>=2026.3.25, <=2026.3.26) +9 more potentially affected by CVE-2026-35632 via openclaw (>=2026.3.22, <=2026.3.23-2)

openclaw NPM version =2026.3.22, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-35632 Source advisory: SNYK:JS-OPENCLAW-15797933...

07-calito-router (>=0.0.2, <=0.0.4), 07-dey-router (>=0.0.1, <=0.0.2) +1025 more potentially affected by CVE-2026-4926 via path-to-regexp (>=8.0.0, <=8.3.0)

path-to-regexp NPM version =8.0.0, =0.0.2, =0.0.1, =0.0.0, =0.0.1, =0.0.1, =0.0.0, =0.0.1, =0.0.2, =0.0.1-alpha.2, =0.0.1-alpha.1, =4.0.61, =4.0.61, =0.0.1, =0.3.1, =0.3.4 and more Source cves: CVE-2026-4926 Source advisory: SNYK:JS-PATHTOREGEXP-15789763...

07-calito-router (>=0.0.2, <=0.0.4), 07-dey-router (>=0.0.1, <=0.0.2) +1025 more potentially affected by CVE-2026-4923 via path-to-regexp (>=8.0.0, <=8.3.0)

path-to-regexp NPM version =8.0.0, =0.0.2, =0.0.1, =0.0.0, =0.0.1, =0.0.1, =0.0.0, =0.0.1, =0.0.2, =0.0.1-alpha.2, =0.0.1-alpha.1, =4.0.61, =4.0.61, =0.0.1, =0.3.1, =0.3.4 and more Source cves: CVE-2026-4923 Source advisory: SNYK:JS-PATHTOREGEXP-15789765...

com.codbex.aion:codbex-aion-platform (>=0.5.6, <=0.5.7), com.codbex.aion:codbex-aion-platform-keycloack (>=0.5.6, <=0.5.7) +95 more potentially affected by CVE-2026-4926 via org.webjars.npm:path-to-regexp (>=0.1.7, <=8.4.2)

org.webjars.npm:path-to-regexp MAVEN version =0.1.7, =0.5.6, =0.5.6, =0.5.6, =0.4.0, =0.4.0, =0.5.3, =0.5.5 - com.codbex.kronos:codbex-kronos-coverage-aggregate 0.4.0 - com.codbex.kronos:codbex-kronos-modules-all 0.4.0 - com.codbex.kronos:codbex-kronos-modules-engines-all 0.4.0 -...

com.codbex.aion:codbex-aion-platform (>=0.5.6, <=0.5.7), com.codbex.aion:codbex-aion-platform-keycloack (>=0.5.6, <=0.5.7) +95 more potentially affected by CVE-2026-4923 via org.webjars.npm:path-to-regexp (>=0.1.7, <=8.4.2)

org.webjars.npm:path-to-regexp MAVEN version =0.1.7, =0.5.6, =0.5.6, =0.5.6, =0.4.0, =0.4.0, =0.5.3, =0.5.5 - com.codbex.kronos:codbex-kronos-coverage-aggregate 0.4.0 - com.codbex.kronos:codbex-kronos-modules-all 0.4.0 - com.codbex.kronos:codbex-kronos-modules-engines-all 0.4.0 -...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35643 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35660 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35660 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35634 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35634 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35618 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

@antora/cli (>=2.3.2, <=3.0.0-alpha.9), @antora/playbook-builder (>=2.3.2, <=3.0.0-alpha.9) +113 more potentially affected by CVE-2026-33864 via convict (>=6.0.0, <=6.2.4)

convict NPM version =6.0.0, =2.3.2, =2.3.2, =2.3.2, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2026-33864 Source advisory: OSV:GHSA-44FC-8FM5-Q62H...

@antora/cli (>=2.3.2, <=3.0.0-alpha.9), @antora/playbook-builder (>=2.3.2, <=3.0.0-alpha.9) +113 more potentially affected by CVE-2026-33863 via convict (>=6.0.0, <=6.2.4)

convict NPM version =6.0.0, =2.3.2, =2.3.2, =2.3.2, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2026-33863 Source advisory: SNYK:JS-CONVICT-15790594...

@antora/cli (>=2.3.2, <=3.0.0-alpha.9), @antora/playbook-builder (>=2.3.2, <=3.0.0-alpha.9) +113 more potentially affected by CVE-2026-33863 via convict (>=6.0.0, <=6.2.4)

convict NPM version =6.0.0, =2.3.2, =2.3.2, =2.3.2, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2026-33863 Source advisory: OSV:GHSA-HF2R-9GF9-RWCH...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +315 more potentially affected by CVE-2026-33769 via astro (>=2.10.12, <=5.18.0)

astro NPM version =2.10.12, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.1, =0.0.1, =0.0.1, =0.3.3 and more Source cves: CVE-2026-33769 Source advisory: OSV:GHSA-G735-7G2W-HH3F...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by CVE-2026-32846 via openclaw (>=2026.3.22, <=2026.3.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-32846 Source advisory: SNYK:JS-OPENCLAW-15789429...

01-numacert (>=1.0.0, <=3.0.0), 05day (1.0.0) +15987 more potentially affected by CVE-2024-45296 +1 more via path-to-regexp (>=0.0.2, <=0.1.12)

path-to-regexp NPM version =0.0.2, =1.0.0, =1.0.1, =1.0.3, =0.2.0, =1.0.2, =1.0.0, =2.0.0, =0.2.0, =0.2.0, =0.2.3 and more Source cves: CVE-2024-45296, CVE-2026-4867 Source advisory: SNYK:JS-PATHTOREGEXP-15789761...

com.codbex.aion:codbex-aion-platform (>=0.5.6, <=0.5.7), com.codbex.aion:codbex-aion-platform-keycloack (>=0.5.6, <=0.5.7) +95 more potentially affected by CVE-2024-45296 +1 more via org.webjars.npm:path-to-regexp (>=0.1.7, <=8.4.2)

org.webjars.npm:path-to-regexp MAVEN version =0.1.7, =0.5.6, =0.5.6, =0.5.6, =0.4.0, =0.4.0, =0.5.3, =0.5.5 - com.codbex.kronos:codbex-kronos-coverage-aggregate 0.4.0 - com.codbex.kronos:codbex-kronos-modules-all 0.4.0 - com.codbex.kronos:codbex-kronos-modules-engines-all 0.4.0 -...

@100x/application (>=0.0.1, <=0.0.6), @abysslabs/cli (>=0.0.1, <=0.0.2) +250 more potentially affected by CVE-2026-33131 +1 more via srvx (>=0.1.4, <=0.11.12)

srvx NPM version =0.1.4, =0.0.1, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =2.4.0-alpha.2, =2.4.0-alpha.2, =0.3.7, =0.3.10 and more Source cves: CVE-2026-33131, CVE-2026-33732 Source advisory: SNYK:JS-SRVX-15790571...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by CVE-2026-32846 via openclaw (>=2026.3.22, <=2026.3.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-32846 Source advisory: OSV:GHSA-HGGM-X7R9-MM7V...