0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8279 more potentially affected by unknown CVE via elliptic (>=6.0.2, <=6.6.0)

elliptic NPM version =6.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VJH7-7G9H-FJFH...

@oberd/olive-middleware-koa (>=1.2.7, <=1.3.2), @ysdn/admin (>=1.0.0, <=1.0.2) +211 more potentially affected by CVE-2025-25200 via koa (>=0.0.1, <=0.21.0)

koa NPM version =0.0.1, =1.2.7, =1.0.0, =0.1.0, =0.1.3, =0.0.2, =2.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.17 and more Source cves: CVE-2025-25200 Source advisory: OSV:GHSA-593F-38F6-JP5M...

@0xyy/elpis (>=1.0.0, <=1.0.2), @1234wu/elpis (>=1.0.0, <=1.0.4) +1408 more potentially affected by CVE-2025-25200 via koa (>=2.0.0, <=2.15.3)

koa NPM version =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =1.0.0, =1.1.0 and more Source cves: CVE-2025-25200 Source advisory: OSV:GHSA-593F-38F6-JP5M...

91jin (>=0.1.7, <=0.1.8), @aftonbladet/roc-package-web-app-gaea (>=0.1.0, <=0.4.1) +147 more potentially affected by CVE-2025-25200 via koa (>=1.0.0, <=1.7.0)

koa NPM version =1.0.0, =0.1.7, =0.1.0, =2.4.1, =0.0.2, =0.0.1, =0.1.0, =0.4.11, =0.1.0, =0.0.2, =1.2.1 and more Source cves: CVE-2025-25200 Source advisory: OSV:GHSA-593F-38F6-JP5M...

lemmy_api (>=0.18.0-rc.4, <=0.18.0), lemmy_api_crud (>=0.18.0-rc.4, <=0.18.0) +3 more potentially affected by CVE-2025-25194 +1 more via activitypub_federation (0.4.7)

activitypubfederation CARGO version 0.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on activitypubfederation and may be impacted: - lemmyapi =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0 Source cves: CVE-2025-25194,...

@aadarshjr/reweb-js (>=1.0.7, <=1.0.17), @acentswap/ace-core-trial (>=10.4.0, <=10.7.0) +1732 more potentially affected by CVE-2024-11831 via serialize-javascript (>=6.0.0, <=6.0.1)

serialize-javascript NPM version =6.0.0, =1.0.7, =10.4.0, =9.0.0, =10.0.0, =10.0.0, =10.5.0, =10.4.0, =1.1.8, =0.4.10, =5.0.0, =6.0.0 and more Source cves: CVE-2024-11831 Source advisory: OSV:GHSA-76P7-773F-R4Q5...

gpt-cli (>=0.0.13, <=0.0.20), htmlentity (>=0.1.0, <=1.2.0) +5 more potentially affected by unknown CVE via grcov (>=0.5.15, <=0.8.13)

grcov CARGO version =0.5.15, =0.0.13, =0.1.0, =0.2.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-QM2P-4W45-V2VR...

84447xe5t8 (1.0.0), @0xsquid/deposit-widget (>=0.0.2-beta.0, <=0.2.0) +255 more potentially affected by unknown CVE via @coinbase/wallet-sdk (>=4.0.0, <=4.2.4)

@coinbase/wallet-sdk NPM version =4.0.0, =0.0.2-beta.0, =2.1.11-beta.0, =3.0.0-beta.16, =0.0.1, =0.2.1, =5.50.0, =1.0.77-4.0, =0.0.1, =1.0.0-beta.1, =0.0.1, =0.0.1, =0.0.73-rc and more Source cves: unknown CVE Source advisory: OSV:GHSA-8RGJ-285W-QCQ4...

128981semzub (1.0.1), 1food-menu (>=0.0.1, <=0.3.8) +25248 more potentially affected by unknown CVE via esbuild (>=0.0.0, <=0.24.2)

esbuild NPM version =0.0.0, =0.0.1, =0.0.1, =1.0.0, =1.0.1, =0.1.0, =0.0.1, =0.0.4, =0.0.1, =1.0.0, =1.1.0 - 7qb-cli 2.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-67MH-4WV8-2F99...

at.reilaender.asciidoctorj.bootconfig2adoc:bootconfig2adoc-adoc (>=0.1.2, <=0.1.3), at.reilaender.asciidoctorj.bootconfig2adoc:bootconfig2adoc-core (>=0.1.2, <=0.1.3) +516 more potentially affected by CVE-2025-25186 via org.jruby:jruby-stdlib (>=1.6.7.2, <=10.1.1.0)

org.jruby:jruby-stdlib MAVEN version =1.6.7.2, =0.1.2, =0.1.2, =1.0.2, =1.0.0, =1.0, =2.0, =0.1.0, =0.1.0, =1.0.0, =1.0.2, =1.4.0, =2.0.0-m3, =2.0.0-m4 and more Source cves: CVE-2025-25186 Source advisory: SNYK:JAVA-ORGJRUBY-10557730...

datafu (>=0.0.6, <=0.0.7) potentially affected by unknown CVE via totally-safe-transmute (0.0.3)

totally-safe-transmute CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on totally-safe-transmute and may be impacted: - datafu =0.0.6, =0.0.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0030...

@4verburga/alpine-spanishplus (>=1.6.6, <=3.0.2), @4xeverburga/alpine-spanishplus (>=3.0.1, <=3.2.0) +134 more potentially affected by CVE-2025-24981 via @nuxtjs/mdc (>=0.1.6, <=0.12.1)

@nuxtjs/mdc NPM version =0.1.6, =1.6.6, =3.0.1, =0.1.1, =0.0.2, =1.0.7, =1.0.7, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.0.3, =0.0.2, =0.0.1, =0.0.4 and more Source cves: CVE-2025-24981 Source advisory: OSV:GHSA-J82M-PC2V-2484...

@rpldy/chunked-uploady (>=1.6.1-rc.0, <=1.9.0), @rpldy/retry-hooks (>=1.6.1-rc.0, <=1.9.0) +8 more potentially affected by CVE-2024-57082 via @rpldy/uploader (>=1.6.1, <=1.9.0-rc.2)

@rpldy/uploader NPM version =1.6.1, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.9.0 Source cves: CVE-2024-57082 Source advisory: OSV:GHSA-PC47-G7GV-4GPW...

@agniflow-ui/panda-preset (0.0.4), @agniflow-ui/react (>=0.0.1, <=0.0.4) +345 more potentially affected by CVE-2024-57079 via @zag-js/core (>=0.0.0-dev-20220406144843, <=0.82.1)

@zag-js/core NPM version =0.0.0-dev-20220406144843, =0.0.1, =0.0.1, =0.0.3-02402d7.0, =0.0.28-86b217d.0, =0.1.0, =0.0.0-rc-20221106094212, =0.0.0-rc-20221106094212, =0.1.0, =0.0.0-rc-20221106094212, =0.0.17, =0.0.2, =0.0.10 - @atlrdsgn/kit 0.3.7 - @beae-ui/accordion 1.0.0 - @beae-ui/pin-input 1.0...

@funboxteam/blueprinter (>=5.3.2, <=6.1.0), @henrycatalinismith/11tysnap (0.0.15) +1 more potentially affected by CVE-2024-57075 via eazy-logger (>=4.0.0, <=4.0.1)

eazy-logger NPM version =4.0.0, =5.3.2, =2.28.0, =2.28.2 Source cves: CVE-2024-57075 Source advisory: OSV:GHSA-R7JX-5M6M-CPG9...

@stryker-mutator/core (>=8.0.0, <=8.7.0), @stryker-mutator/cucumber-runner (>=8.0.0, <=8.7.0) +10 more potentially affected by CVE-2024-57085 via @stryker-mutator/util (>=8.0.0, <=8.7.0)

@stryker-mutator/util NPM version =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.2.2, =1.0.7, =1.0.14 Source cves: CVE-2024-57085 Source advisory: OSV:GHSA-9J5Q-479X-43G2...

1filecompiler (0.0.2), @adrian.u/adritoolbox (>=1.0.0, <=1.1.0) +801 more potentially affected by CVE-2024-57077 via utils-extend (1.0.8)

utils-extend NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on utils-extend and may be impacted: - 1filecompiler 0.0.2 - @adrian.u/adritoolbox =1.0.0, =0.1.1, =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.0.1, =0.37.8, =1.0.1, =0.1.0, =1.0.2,...

@frangoteam/fuxa (>=1.1.19, <=1.2.4), @frangoteam/fuxa-min (>=1.1.19, <=1.2.4) +13 more potentially affected by CVE-2024-57086 via node-opcua-alarm-condition (>=2.119.0, <=2.134.0)

node-opcua-alarm-condition NPM version =2.119.0, =1.1.19, =1.1.19, =2.3.1, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =0.1.0, =0.1.7 - node-red-contrib-opcua-test 0.0.3 Source cves: CVE-2024-57086 Source advisory: OSV:GHSA-GVWQ-6FMX-28XM...

3h1-ui (>=3.0.0-liingyun.1, <=3.0.0-next.266), @ayu-mu/core-common (>=1.0.0, <=1.0.2) +164 more potentially affected by CVE-2024-57080 via vxe-table (>=4.1.0, <=4.8.10)

vxe-table NPM version =4.1.0, =3.0.0-liingyun.1, =1.0.0, =1.2.3, =0.16.13, =0.1.1-beta.0, =1.0.0, =1.0.6, =1.0.0, =1.0.4, =0.13.25, =0.1.5-dev.9, =0.1.5-dev.9, =0.1.6-dev.1 and more Source cves: CVE-2024-57080 Source advisory: OSV:GHSA-89FP-F5MX-748X...

@adhawk/analytics-pixel-loader (>=0.0.2, <=2.0.2), @adhawk/analytics.js-integration-freshdesk (0.1.0) +141 more potentially affected by CVE-2024-57066 via @ndhoule/defaults (2.0.1)

@ndhoule/defaults NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @ndhoule/defaults and may be impacted: - @adhawk/analytics-pixel-loader =0.0.2, =1.2.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.1.0 -...