ai-sdk-provider-claude-code (>=0.2.0, <=1.1.1), claude-code-webui (>=0.1.34, <=0.1.48) +5 more potentially affected by unknown CVE via @anthropic-ai/claude-code (>=1.0.8, <=1.0.83)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =0.1.34, =1.8.0, =1.9.0 - cyrus-ai 0.1.44 - cyrus-claude-runner 0.0.22 - cyrus-edge-worker 0.0.27 - locadex 0.0.2-alpha.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PH6W-F82W-28W6...

@ckeditor/ckeditor5-adapter-ckfinder (>=46.0.0-alpha.0, <=46.0.2), @ckeditor/ckeditor5-ai (>=46.0.0-alpha.0, <=46.0.2) +89 more potentially affected by CVE-2025-58064 via ckeditor5 (>=46.0.0, <=46.0.2-alpha.1)

ckeditor5 NPM version =46.0.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.2 and...

@_sh/strapi-plugin-ckeditor (>=5.0.0, <=6.0.1), @abcxyz123321555/ckeditor5-build-test-version (>=0.7.0, <=0.10.2) +132 more potentially affected by CVE-2025-58064 via @ckeditor/ckeditor5-clipboard (>=44.2.0, <=45.2.1-alpha.10)

@ckeditor/ckeditor5-clipboard NPM version =44.2.0, =5.0.0, =0.7.0, =0.0.2, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.3.0 and more Source cves:...

0xkobold (>=0.5.0, <=0.8.0), 1dr-cli (>=0.2.10, <=0.5.14) +5635 more potentially affected by CVE-2025-9670 via turndown (>=4.0.1, <=7.2.4)

turndown NPM version =4.0.1, =0.5.0, =0.2.10, =0.1.0, =0.2.0, =0.0.1, =1.0.0, =1.0.0, =0.2.1, =0.1.0, =0.1.0, =0.1.1, =0.2.9, =0.5.0, =0.7.0 and more Source cves: CVE-2025-9670 Source advisory: SNYK:JS-TURNDOWN-12304081...

@contentql/core (>=0.1.2, <=0.3.5), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +12 more potentially affected by CVE-2025-4644 via @payloadcms/graphql (>=3.0.0, <=3.43.0-internal.693bd81)

@payloadcms/graphql NPM version =3.0.0, =0.1.2, =0.1.0, =3.0.0-alpha.0, =3.2.0, =0.2.0, =3.0.0-beta.10, =1.0.1, =0.1.0, =0.1.4, =1.0.0, =0.0.9-alpha.5, =3.0.0-beta.3, =0.0.3, =0.2.0, =0.2.42 Source cves: CVE-2025-4644 Source advisory: OSV:GHSA-26RV-H2HF-3FW4...

@copart/ops-tool-kit (>=1.10.20-alpha.15, <=1.13.0), @firedesktop/react-portal-base (>=0.1.46, <=0.1.52) +6 more potentially affected by CVE-2025-57810 via jspdf (>=3.0.0, <=3.0.1)

jspdf NPM version =3.0.0, =1.10.20-alpha.15, =0.1.46, =0.54.4-nightly, =0.47.5-MYUN-38209, =1.1.63, =7.3.5, =7.3.8 Source cves: CVE-2025-57810 Source advisory: OSV:GHSA-8MVJ-3J78-4QMW...

a2 (>=0.5.0-alpha.1, <=0.5.0), a_chat (0.1.0) +2617 more potentially affected by unknown CVE via async-std (>=0.99.4, <=1.13.2)

async-std CARGO version =0.99.4, =0.5.0-alpha.1, =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.7.0, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0052...

02.koa-demo (1.0.0), 0510test (1.0.0) +13557 more potentially affected by unknown CVE via koa (>=0.0.1, <=3.2.1)

koa NPM version =0.0.1, =1.3.7, =1.0.0, =0.0.1, =1.0.0, =1.0.1 - 2-26 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-KOA-12143256...

06demo-1 (1.0.0), 1337cli (>=0.0.1, <=0.0.2) +4581 more potentially affected by CVE-2025-9308 via yarn (>=0.15.1, <=2.4.3)

yarn NPM version =0.15.1, =0.0.1, =1.0.9, =0.0.2, =1.17.6-next.0, =1.0.0, =1.0.0, =0.0.3, =1.1.2, =1.1.5 and more Source cves: CVE-2025-9308 Source advisory: SNYK:JS-YARN-12143051...

@6missedcalls-ai/zora-mcp-server (>=0.1.2, <=0.1.3), @aurracloud/agentkit (>=0.9.0, <=0.10.0) +38 more potentially affected by unknown CVE via x402 (>=0.1.2, <=0.4.3)

x402 NPM version =0.1.2, =0.1.2, =0.9.0, =0.1.0-alpha.1, =0.0.1, =0.0.1, =0.0.1, =0.0.0-nightly-20250711210411, =0.3.0, =0.0.3, =0.1.2, =0.1.3 - @openflow-sh/sdk 1.0.0 - @thorium-dev-group/x402-mcp-extension 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3J63-5H8P-GF7C...

@bookshop/browser (3.11.0-rc.0), @bookshop/generate (3.11.0-rc.0) +24 more potentially affected by CVE-2025-55303 via astro (>=4.0.3, <=4.16.18)

astro NPM version =4.0.3, =0.40.5, =0.38.0, =0.38.0, =2.8.4, =0.2.0, =0.0.0-dev-20231211183354, =0.0.3, =0.0.3, =0.0.5, =0.0.1, =1.0.2, =1.0.9 - @thewebforge/astro-og-images 3.0.0 and more Source cves: CVE-2025-55303 Source advisory: SNYK:JS-ASTRO-12027668...

kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-form (0.1.4)

cli-form NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...

generator-anyms-ms (>=1.0.7, <=2.0.4), generator-diy (1.0.0) +1 more potentially affected by unknown CVE via yoeman-generator (0.0.1-security)

yoeman-generator NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on yoeman-generator and may be impacted: - generator-anyms-ms =1.0.7, =2.0.4 - generator-diy 1.0.0 - generator-owngen 1.0.0 Source cves: unknown CVE Source advisor...

big-integer-max (1.0.0), big-integer-min (>=1.0.0, <=1.0.1) +25 more potentially affected by unknown CVE via just-next-tick (0.0.0)

just-next-tick NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-next-tick and may be impacted: - big-integer-max 1.0.0 - big-integer-min =1.0.0, =0.0.3, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.9 and more Source cves: unknown CVE Sour...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +29 more potentially affected by unknown CVE via show-version (>=0.0.0, <=2.0.0)

show-version NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33163...

eksi-server (>=0.0.0, <=0.0.8), eksi-sozluk (>=0.0.0, <=0.0.13) +2 more potentially affected by unknown CVE via new-range (0.0.0)

new-range NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-range and may be impacted: - eksi-server =0.0.0, =0.0.0, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27367...

bismagul_project08_quiz (>=1.0.0, <=1.0.1), cli-advanture-game (1.0.0) +5 more potentially affected by unknown CVE via calk (0.0.1-security)

calk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on calk and may be impacted: - bismagulproject08quiz =1.0.0, =1.0.0, =1.0.0, =1.0.1 - todoterminallist 1.0.0 - zhs-cli-advanture-game 1.0.0 Source cves: unknown CVE Source...

-price-checker (>=1.0.0, <=1.0.5), 003-gas-convert (1.0.1) +17825 more potentially affected by unknown CVE via fs (>=0.0.0, <=0.0.2)

fs NPM version =0.0.0, =1.0.0, =1.0.0, =0.0.21, =1.0.0, =0.3.96, =1.0.2 - 2.4-qr-code-project 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-21003...

as-design-v1 (1.0.0) potentially affected by unknown CVE via preinstall (0.0.1-security)

preinstall NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on preinstall and may be impacted: - as-design-v1 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29612...

level-json-cache (0.0.0), midibin-api (0.0.0) +6 more potentially affected by unknown CVE via level-json (>=0.0.2, <=2.0.0)

level-json NPM version =0.0.2, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25199...