47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +194 more potentially affected by CVE-2025-55183 +1 more via next (>=15.5.0, <=15.5.7)

next NPM version =15.5.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2025-55183, CVE-2025-55184 Source advisory: SNYK:JS-NEXT-14400644...

cn.slimjoy:web-plus-job (>=1.0.0, <=1.0.2), cn.slimjoy:web-plus-starter (>=1.0.0, <=1.0.2) +61 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (>=4.0.0, <=5.1.2)

tech.powerjob:powerjob-common MAVEN version =4.0.0, =1.0.0, =1.0.0, =0.0.3, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.6.1 and more Source cves: CVE-2025-14518 Source advisory: SNYK:JAVA-TECHPOWERJOB-14401157...

@bigchaindb/jwt (>=0.0.18, <=0.0.20), @compas/store (>=0.0.172, <=0.20.0) +35 more potentially affected by CVE-2025-65945 via jws (4.0.0)

jws NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jws and may be impacted: - @bigchaindb/jwt =0.0.18, =0.0.172, =11.8.0, =1.0.0-beta.2, =1.1.0, =15.2.0, =17.1.6, =13.0.0, =10.1.0, =10.4.0, =10.1.0, =10.3.0-snapshot, =0.1.11, =2.5.5,...

00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +3710 more potentially affected by CVE-2025-65945 via jws (>=3.0.0, <=3.2.2)

jws NPM version =3.0.0, =3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on jws and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su...

@c0va23/react-router-dev (7.8.3-alpha.2), @orange-js/vite (>=0.0.0-1ae0b37, <=0.0.0-fff5d2d) +9 more potentially affected by unknown CVE via @vitejs/plugin-rsc (>=0.4.11, <=0.5.2)

@vitejs/plugin-rsc NPM version =0.4.11, =0.0.0-1ae0b37, =0.0.0-experimental-14dc7c1, =0.0.0-pr-32412-sha-076721d1, =1.0.2, =0.0.1, =0.0.1-alpha.0, =1.0.0, =0.0.0-experimental-64e35ee-20250807, =0.24.0-alpha.0, =0.27.2 Source cves: unknown CVE Source advisory: OSV:GHSA-FMH4-WR37-44FP...

47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +178 more potentially affected by CVE-2025-71389 via next (>=15.5.0, <=15.5.6)

next NPM version =15.5.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2025-71389 Source advisory: OSV:GHSA-9QR9-H5GF-34MP...

@4399ywkf/router (>=0.0.1, <=0.0.4), @akash-aw/aw-wizard-forms (4.14.0) +129 more potentially affected by CVE-2025-55182 via @modern-js/utils (>=2.65.2, <=2.69.2)

@modern-js/utils NPM version =2.65.2, =0.0.1, =1.0.0, =1.0.0, =0.44.0, =2.23.0, =0.3.53, =1.0.1, =0.30.0, =0.3.0-alpha.1, =0.4.3, =1.3.0, =2.0.0 and more Source cves: CVE-2025-55182 Source advisory: SNYK:JS-MODERNJSUTILS-14723360...

ai-sdk-provider-claude-code (>=0.2.0, <=1.1.1), claude-code-webui (>=0.1.34, <=0.1.50) +6 more potentially affected by CVE-2025-66032 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.90)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.27, =0.0.28 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-66032 Source advisory: OSV:GHSA-XQ4M-MC3C-VVG3...

@alstar/studio (0.0.0-beta.20), @better-auth/cli (1.3.34) +7 more potentially affected by unknown CVE via better-auth (1.3.34)

better-auth NPM version 1.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on better-auth and may be impacted: - @alstar/studio 0.0.0-beta.20 - @better-auth/cli 1.3.34 - @bgord/bun =1.0.8, =7.0.9-canary.2, =7.0.9-canary.2, =0.0.22, =0.8.2,...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1104 more potentially affected by CVE-2025-66030 via node-forge (>=1.0.0, <=1.3.1)

node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66030 Source advisory: OSV:GHSA-65CH-62R8-G69G...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +421 more potentially affected by CVE-2025-65019 via @astrojs/internal-helpers (>=0.0.0-markdoc-config-changes-20230626153541, <=0.7.4)

@astrojs/internal-helpers NPM version =0.0.0-markdoc-config-changes-20230626153541, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.0-ast-20240419160649, =13.0.0-alpha.0 and more Source cves: CVE-2025-65019 Source...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +35 more potentially affected by CVE-2025-64764 via astro (>=5.0.0-beta.5, <=5.15.6)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.28, =0.0.40 and more Source cves: CVE-2025-64764 Source advisory: SNYK:JS-ASTRO-14059122...

dev.savantly.nexus:agents-module (3.4.0), dev.savantly.nexus:common-types-module (3.4.0) +156 more potentially affected by CVE-2025-64408 via org.apache.causeway.commons:causeway-commons (>=2.0.0, <=4.0.0-m2)

org.apache.causeway.commons:causeway-commons MAVEN version =2.0.0, =4.0.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.commons:causeway-commons and may be impacted: - dev.savantly.nexus:agents-module 3.4.0 -...

1k-tasks (>=3.3.0, <=3.6.1), @1delta/aggregators (>=0.1.0, <=0.1.6) +2277 more potentially affected by CVE-2025-64756 via glob (>=10.2.1, <=10.4.5)

glob NPM version =10.2.1, =3.3.0, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.0.0, =0.8.1, =1.0.0, =1.0.0, =1.0.1 - @aaronngray/typeorm-seeding 6.0.1 - @abasync/eslint-config 1.1.0 - @abc45676/mailer 1.0.0 and more Source cves: CVE-2025-64756 Source advisory:...

abe_gpsw (>=0.2.4, <=2.0.0), abstract-boot (>=0.2.0-beta.4, <=0.2.0-beta.7) +2544 more potentially affected by unknown CVE via gcc (>=0.3.35, <=0.3.55)

gcc CARGO version =0.3.35, =0.2.4, =0.2.0-beta.4, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0121...

actix-web-opentelemetry (>=0.2.0, <=0.11.0-beta.3), atomic-server (>=0.32.1, <=0.34.0) +42 more potentially affected by unknown CVE via opentelemetry-jaeger (>=0.1.0, <=0.22.0)

opentelemetry-jaeger CARGO version =0.1.0, =0.2.0, =0.32.1, =0.2.1, =4.1.0, =0.1.0, =0.6.1, =0.4.0-prerelease1, =0.3.2-rc2, =0.2.0-rc-10, =0.2.0-rc-10, =0.2.0-rc-10, =0.2.0-rc, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0123...

@apollo/gateway (>=2.10.0-alpha.0, <=2.10.3), @lenne.tech/nest-server (>=10.8.3, <=11.1.13) +2 more potentially affected by CVE-2025-64530 via @apollo/composition (>=2.10.0, <=2.10.3)

@apollo/composition NPM version =2.10.0, =2.10.0-alpha.0, =10.8.3, =11.1.13 - @pothos-examples/federation 3.1.13 - @pothos-examples/prisma-federation 3.1.24 Source cves: CVE-2025-64530 Source advisory: OSV:GHSA-MX7M-J9XF-62HW...

@apollo/gateway (>=2.12.0-preview.0, <=2.12.0), @lenne.tech/nest-server (>=11.3.0, <=11.5.0) potentially affected by CVE-2025-64530 via @apollo/composition (2.12.0-preview.4)

@apollo/composition NPM version 2.12.0-preview.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/composition and may be impacted: - @apollo/gateway =2.12.0-preview.0, =11.3.0, =11.5.0 Source cves: CVE-2025-64530 Source advisory:...

@apollo/gateway (>=2.12.0-preview.0, <=2.12.0), @lenne.tech/nest-server (>=11.3.0, <=11.5.0) potentially affected by CVE-2025-64530 via @apollo/composition (2.12.0-preview.4)

@apollo/composition NPM version 2.12.0-preview.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/composition and may be impacted: - @apollo/gateway =2.12.0-preview.0, =11.3.0, =11.5.0 Source cves: CVE-2025-64530 Source advisory:...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-15 (1.0.0)

aji-15 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-15 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152053...