@5ht/express (>=1.0.6, <=2.2.0), @audius/sdk (>=0.0.3-beta.1, <=7.1.1) +7 more potentially affected by CVE-2025-9287 via cipher-base (1.0.4)

cipher-base NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cipher-base and may be impacted: - @5ht/express =1.0.6, =0.0.3-beta.1, =6.0.4, =1.0.1, =1.5.2-beta.1, =1.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.11 Source cves: CVE-2025-9287...

@audius/sdk (0.0.36), @cardinal/squads-utils (>=0.0.2, <=0.0.6) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.53.0)

@solana/web3.js NPM version 1.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @audius/sdk 0.0.36 - @cardinal/squads-utils =0.0.2, =0.0.6 - @snowflake-so/wallet-adapter-snowflake 1.0.12 Source cves:...

@audius/sdk (>=0.0.3-beta.1, <=3.0.8-beta.12), @audius/stems (>=1.5.2-beta.1, <=1.5.4) +14 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.37.0, <=1.37.2)

@solana/web3.js NPM version =1.37.0, =0.0.3-beta.1, =1.5.2-beta.1, =0.0.3, =0.0.1, =0.2.0, =1.5.1, =0.3.3, =3.2.8, =3.3.0 - @winter-love/wallet 1.0.25-alpha.14 - kyzr-marketplace-sdk 0.0.1 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@audius/fetch-nft (>=0.1.8-beta.1, <=0.2.6), @audius/sdk (>=3.0.8-beta.13, <=4.2.0) +52 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.78.0, <=1.78.7)

@solana/web3.js NPM version =1.78.0, =0.1.8-beta.1, =3.0.8-beta.13, =0.0.10, =2.20.1-beta.306, =14.2.1-beta.306, =2.2.3-alpha.61, =1.0.1-rc.0, =2.21.0-hotfix.0, =2.6.0, =0.0.5-beta.0, =1.1.0-alpha.1, =1.1.11 - @ctrl-tech/chains-controller 2.0.5 - @ctrl-tech/chains-solana 2.0.18 and more Source...