@doist/ui-extensions-server (3.5.7), @fdm-monster/server (1.9.1) +24 more potentially affected by CVE-2025-65944 via @sentry/node-core (>=10.11.0, <=10.26.0)

@sentry/node-core NPM version =10.11.0, =0.0.22, =0.1.0, =0.0.19, =10.11.0, =10.11.0, =10.11.0, =7.1.0, =10.11.0, =0.19.0, =10.11.0, =10.11.0, =10.26.0 and more Source cves: CVE-2025-65944 Source advisory: SNYK:JS-SENTRYNODECORE-14105055...

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.31.0-alpha, <=1.49.5-alpha) +10 more potentially affected by CVE-2025-64755 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.27)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.31.0-alpha, =0.5.2, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =0.10.2, =0.11.2, =0.13.21 Source cves: CVE-2025-64755 Source advisory: OSV:GHSA-7MV8-J34Q-VP7Q...

@arianrhodsandlot/release-kit (>=0.1.0, <=0.1.6), @blueprintui/cli (>=0.7.2, <=0.11.3) +50 more potentially affected by CVE-2025-13437 via zx (>=8.0.0, <=8.8.4-lite)

zx NPM version =8.0.0, =0.1.0, =0.7.2, =0.9.0, =0.0.22, =1.2.3, =2.0.0-alpha.45, =0.1.0, =2.0.2-96651090, =1.1.0-beta-0acd9fac-20250513, =0.1.0, =0.3.1, =0.0.2, =0.0.1, =0.0.2, =0.0.6 and more Source cves: CVE-2025-13437 Source advisory: OSV:GHSA-W87R-VG9Q-CRQM...

1k-tasks (>=4.0.0, <=4.2.2), @514labs/sloan-mcp (0.0.68) +1189 more potentially affected by CVE-2025-64756 via glob (>=11.0.0, <=11.0.3)

glob NPM version =11.0.0, =4.0.0, =0.1.0, =4.10.0, =16.5.13, =1.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.5-alpha.2, =0.1.4-alpha.0, =0.1.1, =0.1.6 and more Source cves: CVE-2025-64756 Source advisory: OSV:GHSA-5J98-MCP5-4VW2...

1k-tasks (>=4.0.0, <=4.2.2), @514labs/sloan-mcp (0.0.68) +1189 more potentially affected by CVE-2025-64756 via glob (>=11.0.0, <=11.0.3)

glob NPM version =11.0.0, =4.0.0, =0.1.0, =4.10.0, =16.5.13, =1.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.5-alpha.2, =0.1.4-alpha.0, =0.1.1, =0.1.6 and more Source cves: CVE-2025-64756 Source advisory: SNYK:JS-GLOB-14040952...

02.aula (1.0.0), 0xrtest (1.0.0) +8080 more potentially affected by CVE-2025-64718 via js-yaml (>=4.0.0, <=4.1.0)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 and more Source cves: CVE-2025-64718 Source advisory: OSV:GHSA-MH29-5H37-FV8M...

@0xgg/echomd (>=1.0.2, <=1.0.4), @ajuhos/malloy-tests (>=0.0.332, <=0.0.334) +176 more potentially affected by CVE-2025-59840 via vega-expression (>=5.0.1, <=5.1.2)

vega-expression NPM version =5.0.1, =1.0.2, =0.0.332, =0.0.332, =1.1.5, =0.4.1-canary.195, =0.1.0, =3.0.0-alpha.2, =0.0.2, =0.0.1, =0.0.5, =0.0.1, =0.0.8 and more Source cves: CVE-2025-59840 Source advisory: SNYK:JS-VEGAEXPRESSION-13961124...

box-bin (0.3.1), box-format (>=0.3.0, <=0.3.3) +11 more potentially affected by unknown CVE via unic-normal (>=0.1.2, <=0.9.0)

unic-normal CARGO version =0.1.2, =0.3.0, =0.2.4-beta, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.5.0, =0.7.0, =0.1.1, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0082...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +29 more potentially affected by unknown CVE via unic-ucd-hangul (>=0.8.0, <=0.9.0)

unic-ucd-hangul CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.2.4-beta, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.0.111 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0079...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +19 more potentially affected by unknown CVE via unic-ucd-block (>=0.8.0, <=0.9.0)

unic-ucd-block CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.1.0, =1.1.1, =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0099...

@aem-screens/franklin-variation-creator (1.0.0-B001), @akord/ui (>=3.4.1, <=3.15.4) +180 more potentially affected by CVE-2025-11849 via mammoth (>=0.3.33, <=1.10.0)

mammoth NPM version =0.3.33, =3.4.1, =0.0.1, =1.0.0, =1.2.1, =1.4.2, =1.0.34, =1.2.1-a, =1.0.0, =1.2.2, =0.0.7, =0.0.1, =1.0.0, =1.10.3-spar and more Source cves: CVE-2025-11849 Source advisory: OSV:GHSA-RMJR-87WV-GF87...

@avorati/strapi-plugin-preview (1.0.1), @futurebrand/helpers-strapi (>=2.0.0, <=2.5.4) +10 more potentially affected by CVE-2025-3930 via @strapi/admin (>=5.0.0, <=5.23.6)

@strapi/admin NPM version =5.0.0, =2.0.0, =0.0.1-rc1, =2.0.0, =5.0.0-alpha.0, =5.0.0-alpha.7, =5.0.0-alpha.0, =3.0.0-beta.1, =3.0.4 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2025-3930 Source advisory: SNYK:JS-STRAPIADMIN-13601310...

Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability

Microsoft Security Advisory CVE-2025-55248 | .NET Information Disclosure Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers can do to update...

Ubuntu: Security Advisory (USN-7789-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2025-11230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests. CVE-2025-11230 No...

EUVD-2022-6474

Malicious code in bioql PyPI...

@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59536 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59536 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13299835...

007putra-my-bot (1.1.1), 10bis-shufersal-automation (1.0.0) +4594 more potentially affected by CVE-2025-59343 via tar-fs (>=2.0.0, <=2.1.3)

tar-fs NPM version =2.0.0, =0.2.0, =1.0.0, =1.0.0, =0.107.10, =1.19.19, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2025-59343 Source advisory: OSV:GHSA-VJ76-C3G6-QR5V...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

-fides-amor-et-lux (1.0.0), 0xppl-solana-portfolio (1.0.0) +12147 more potentially affected by CVE-2025-58754 via axios (>=1.0.0, <=1.11.0)

axios NPM version =1.0.0, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =2.0.0, =1.1.40, =0.0.2-beta.0, =2.1.0, =9.0.0-beta-bump-wagmi-viem.2 and more Source cves: CVE-2025-58754 Source advisory: OSV:GHSA-4HJH-WCWX-XVWJ...