siddheshtea (1.1.6) potentially affected by unknown CVE via aji-21 (1.0.0)

aji-21 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-21 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152060...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-29 (1.0.0)

aji-29 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-29 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152068...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iau (1.0.0)

makan-aigoa-iau NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iau and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159187...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-4 (1.0.0)

muklis-4 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-4 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160824...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-26 (1.0.0)

muklis-26 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-26 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160810...

siddheshtea (1.1.6) potentially affected by unknown CVE via maka-ani-gunalia (1.0.0)

maka-ani-gunalia NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on maka-ani-gunalia and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159144...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahaffheg-ga (1.0.0)

nudela-rahaffheg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahaffheg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163827...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-ga (1.0.0)

nudela-rahfeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163837...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-ggff-gafi (1.0.0)

nudela-ggff-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-ggff-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163788...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaof-gafi (1.0.0)

nudela-aaof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163715...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaff-ga (1.0.0)

nudela-aaff-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaff-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163704...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilav-rae-naha (1.0.0)

nuilav-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilav-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163858...

@aesx/aesx (1.1.6), @bocahajg75/bocahajg75 (1.1.5) +537 more potentially affected by unknown CVE via kellymanteasproject (1.1.9)

kellymanteasproject NPM version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on kellymanteasproject and may be impacted: - @aesx/aesx 1.1.6 - @bocahajg75/bocahajg75 1.1.5 - @bocahpripayer5/bocahpripayer5 1.1.5 - @boelboell75/boelboell75 1.1.5 -...

@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +50 more potentially affected by unknown CVE via next-auth (>=4.0.0-beta.6, <=4.24.11)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.0, =1.9.9, =0.1.0-0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =0.0.0-experimental-20251015143743, =5.6.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5JPX-9HW9-2FX4...

OSV-2025-855 Use-of-uninitialized-value in AlphaReplace_SSE2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=454314139 Crash type: Use-of-uninitialized-value Crash state: AlphaReplaceSSE2 WebPReplaceTransparentPixels WebPEncode...

mirror_sparse_matrix (>=0.1.1, <=0.1.17) potentially affected by unknown CVE via binary_vec_io (0.1.12)

binaryvecio CARGO version 0.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on binaryvecio and may be impacted: - mirrorsparsematrix =0.1.1, =0.1.17 Source cves: unknown CVE Source advisory: OSV:GHSA-WWXP-HXH6-8GF8...

alpha-g-analysis (0.1.0), apecrunch (>=0.0.1, <=0.0.3) +155 more potentially affected by unknown CVE via ncurses (>=5.94.0, <=6.0.1)

ncurses CARGO version =5.94.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0108...

alemat (>=0.3.0, <=0.8.0), audio-processor-analysis (>=0.1.0-alpha.4, <=0.1.0-alpha.9) +86 more potentially affected by unknown CVE via unic-ucd-bidi (>=0.1.1, <=0.9.0)

unic-ucd-bidi CARGO version =0.1.1, =0.3.0, =0.1.0-alpha.4, =0.3.0, =0.4.0, =0.0.0, =0.2.4-beta, =0.7.0, =0.4.0, =0.7.0, =0.8.3 - druid-ui 0.0.1 - druid-widget-nursery 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0083...

unic (>=0.5.0, <=0.6.0), unic-bidi (>=0.1.0, <=0.6.0) +10 more potentially affected by unknown CVE via unic-ucd-core (>=0.1.1, <=0.6.0)

unic-ucd-core CARGO version =0.1.1, =0.5.0, =0.1.0, =0.1.1, =0.4.0, =0.1.0, =0.5.0, =0.3.0, =0.1.0, =0.5.0, =0.1.0, =0.6.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0103...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +17 more potentially affected by unknown CVE via unic-ucd-block (>=0.8.0, <=0.9.0)

unic-ucd-block CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.1.0, =0.8.0, =0.8.0, =0.9.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0099...