@arc-directus/api (>=12.0.0, <=12.0.6), @deconz-community/directus-extension-ddf-store (0.1.0) +21 more potentially affected by CVE-2025-30350 via @directus/storage-driver-s3 (>=9.22.0, <=12.0.0)

@directus/storage-driver-s3 NPM version =9.22.0, =12.0.0, =9.25.0, =1.2.2, =11.1.0, =10.3.1, =1.0.5, =1.0.10, =0.1.0, =9.22.0, =11.4.1 and more Source cves: CVE-2025-30350 Source advisory: OSV:GHSA-RV78-QQRQ-73M5...

@arc-directus/api (>=12.0.0, <=12.0.6), @deconz-community/directus-extension-ddf-store (0.1.0) +21 more potentially affected by CVE-2025-30225 via @directus/storage-driver-s3 (>=9.22.0, <=12.0.0)

@directus/storage-driver-s3 NPM version =9.22.0, =12.0.0, =9.25.0, =1.2.2, =11.1.0, =10.3.1, =1.0.5, =1.0.10, =0.1.0, =9.22.0, =11.4.1 and more Source cves: CVE-2025-30225 Source advisory: OSV:GHSA-J8XJ-7JFF-46MX...

@clevercanyon/madrun (>=1.0.0, <=1.0.1), @snyk/snyk-cocoapods-plugin (2.6.0) +8 more potentially affected by CVE-2025-30222 via shescape (>=1.7.4, <=2.1.0)

shescape NPM version =1.7.4, =1.0.0, =0.1.2, =1.0.0, =1.0.0, =1.5.1, =6.5.0, =0.0.0-experimental-20221114-610843f6, =0.34.0-experimental.c2191de Source cves: CVE-2025-30222 Source advisory: OSV:GHSA-66PP-5P9W-Q87J...

0xkobold (>=0.5.0, <=0.8.0), @0xdwong/html-to-markdown (>=1.0.0, <=1.0.1) +410 more potentially affected by CVE-2025-2792 via @mozilla/readability (>=0.3.0, <=0.5.0)

@mozilla/readability NPM version =0.3.0, =0.5.0, =1.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =1.0.0, =0.1.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =1.6.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2025-2792 Source advisory: OSV:GHSA-3P6V-HRG8-8QJ7...

addr2line (>=0.1.0, <=0.3.0), ai4ose-tg-rcore-tutorial-ch8-doom (0.1.0-preview.1) +142 more potentially affected by unknown CVE via xmas-elf (>=0.3.0, <=0.9.1)

xmas-elf CARGO version =0.3.0, =0.1.0, =0.1.4, =0.1.0, =0.1.0, =0.1.1, =0.11.0-beta, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.0, =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0018...

fprime-ci (0.0.1a1), fprime-fpy (>=0.0.1a1, <=0.3.2) +1 more potentially affected by CVE-2024-55029 via fprime-gds (4.3.0)

fprime-gds PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on fprime-gds and may be impacted: - fprime-ci 0.0.1a1 - fprime-fpy =0.0.1a1, =0.1.0, =0.1.5 Source cves: CVE-2024-55029 Source advisory: SNYK:PYTHON-FPRIMEGDS-9749311...

fprime-ci (0.0.1a1), fprime-fpy (>=0.0.1a1, <=0.3.2) +1 more potentially affected by CVE-2024-55030 via fprime-gds (4.3.0)

fprime-gds PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on fprime-gds and may be impacted: - fprime-ci 0.0.1a1 - fprime-fpy =0.0.1a1, =0.1.0, =0.1.5 Source cves: CVE-2024-55030 Source advisory: SNYK:PYTHON-FPRIMEGDS-9749309...

fprime-ci (0.0.1a1), fprime-fpy (>=0.0.1a1, <=0.3.2) +1 more potentially affected by CVE-2024-55028 via fprime-gds (4.3.0)

fprime-gds PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on fprime-gds and may be impacted: - fprime-ci 0.0.1a1 - fprime-fpy =0.0.1a1, =0.1.0, =0.1.5 Source cves: CVE-2024-55028 Source advisory: SNYK:PYTHON-FPRIMEGDS-9749306...

@angular-devkit/build-angular (>=19.2.0-next.2, <=19.2.0), @angular/build (>=19.2.0-next.2, <=19.2.0) +40 more potentially affected by CVE-2025-30208 via vite (>=6.1.0, <=6.1.1)

vite NPM version =6.1.0, =19.2.0-next.2, =19.2.0-next.2, =1.0.7, =2.12.0, =2.12.0, =11.24.0, =0.0.1739797164641, =1.0.0, =0.0.0-experimental-989cf02-20250217-d62ba1cb, =0.0.0-experimental-0580205-20250209-2be35102, =0.0.0-snapshot-08bd566ea55152626f488c12d32ebce7e35b812d,...

@aicblock/cli (>=1.0.0, <=1.0.1), @angular-devkit/build-angular (>=19.2.1, <=20.0.0-next.2) +34 more potentially affected by CVE-2025-30208 via vite (>=6.2.0, <=6.2.2)

vite NPM version =6.2.0, =1.0.0, =19.2.1, =19.2.1, =0.55.0, =1.0.0, =1.0.410, =5.0.0-alpha.40, =1.0.0-next.1, =3.0.0-BETA.0, =19.1.1-snapshot-1741264224607, =19.1.1-snapshot-1741264224607, =19.1.3 and more Source cves: CVE-2025-30208 Source advisory: OSV:GHSA-X574-M823-4X7W...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +508 more potentially affected by CVE-2025-30208 via vite (>=4.0.0, <=4.5.9)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2025-30208 Source advisory: OSV:GHSA-X574-M823-4X7W...

@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +57 more potentially affected by CVE-2025-30208 via vite (>=6.0.0, <=6.0.11)

vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =5.0.0-alpha.38 and more Sour...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +443 more potentially affected by CVE-2025-30208 via vite (>=5.0.0, <=5.4.14)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-30208 Source advisory: OSV:GHSA-X574-M823-4X7W...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +23 more potentially affected by CVE-2025-29313 via org.opendaylight.sfc:sfc-ovs (>=0.2.0-beryllium, <=0.10.4)

org.opendaylight.sfc:sfc-ovs MAVEN version =0.2.0-beryllium, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.4.4-carbon and more Source cves: CVE-2025-29313 Source advisory:...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +17 more potentially affected by CVE-2025-29314 via org.opendaylight.sfc:odl-sfc-openflow-renderer (>=0.5.0-carbon, <=0.10.4)

org.opendaylight.sfc:odl-sfc-openflow-renderer MAVEN version =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.5.0, =0.5.2 and more Source cves: CVE-2025-29314 Source advisory:...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +19 more potentially affected by CVE-2025-29314 via org.opendaylight.sfc:odl-sfc-ovs (>=0.5.0-carbon, <=0.10.4)

org.opendaylight.sfc:odl-sfc-ovs MAVEN version =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.4.4-carbon and more Source cves: CVE-2025-29314 Source advisory:...

org.opendaylight.faas:features4-faas (>=1.2.0-carbon, <=1.3.3), org.opendaylight.faas:odl-faas-all (>=1.2.0-carbon, <=1.3.3) +67 more potentially affected by CVE-2025-29315 via org.opendaylight.sfc:sfc-provider (>=0.0.1-helium, <=0.10.4)

org.opendaylight.sfc:sfc-provider MAVEN version =0.0.1-helium, =1.2.0-carbon, =1.2.0-carbon, =1.2.0-carbon, =1.0.0-beryllium, =0.6.0, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.6.0, =0.9.0, =0.9.0, =0.11.4 and more Source cves: CVE-2025-29315 Source advisory:...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +18 more potentially affected by CVE-2025-29313 via org.opendaylight.sfc:sfc-openflow-renderer (>=0.5.0-carbon, <=0.10.4)

org.opendaylight.sfc:sfc-openflow-renderer MAVEN version =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.5.0, =0.5.2 and more Source cves: CVE-2025-29313 Source advisory:...

xorc-notifications (0.1.0) potentially affected by CVE-2025-53604 via web-push (0.4.2)

web-push CARGO version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on web-push and may be impacted: - xorc-notifications 0.1.0 Source cves: CVE-2025-53604 Source advisory: OSV:GHSA-FC83-9JWQ-GC2M...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +425 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.188.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =3.1.28 and more Source cves: unknown CVE Source advisory:...