@alvori/app (>=1.0.0-beta.11, <=1.0.0-beta.12), @enhanced-dom/intl (>=0.0.1, <=0.2.0) +111 more potentially affected by CVE-2024-57072 via module-from-string (>=3.3.0, <=3.3.1)

module-from-string NPM version =3.3.0, =1.0.0-beta.11, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.3.0 and more Source cves: CVE-2024-57072 Source advisory: OSV:GHSA-Q5J8-9M9G-X2JH...

@account-kit/react (>=4.0.0-alpha.0, <=4.88.5), @account-kit/react-native (>=4.15.0, <=4.88.5) +52 more potentially affected by CVE-2024-57068 via @tanstack/form-core (>=0.0.1, <=0.42.0)

@tanstack/form-core NPM version =0.0.1, =4.0.0-alpha.0, =4.15.0, =3.13.0, =0.0.1, =0.1.1, =0.0.1, =1.0.0, =0.3.5, =0.3.3, =5.0.0 and more Source cves: CVE-2024-57068 Source advisory: OSV:GHSA-GGV3-VMGW-XV2Q...

org.webjars.bower:datetimepicker (>=2.4.7, <=2.5.20), org.webjars.bower:github-com-xdan-datetimepicker (2.5.4) potentially affected by CVE-2024-57063 via org.webjars.bower:php-date-formatter (1.3.5)

org.webjars.bower:php-date-formatter MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bower:php-date-formatter and may be impacted: - org.webjars.bower:datetimepicker =2.4.7, =2.5.20 -...

org.webjars.bowergithub.xdan:datetimepicker (2.5.20) potentially affected by CVE-2024-57063 via org.webjars.bowergithub.kartik-v:php-date-formatter (1.3.6)

org.webjars.bowergithub.kartik-v:php-date-formatter MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.kartik-v:php-date-formatter and may be impacted: - org.webjars.bowergithub.xdan:datetimepicker 2.5.20 Source...

org.webjars.npm:github-com-xdan-datetimepicker (2.5.20), org.webjars.npm:jquery-datetimepicker (>=2.5.4, <=2.5.21) potentially affected by CVE-2024-57063 via org.webjars.npm:php-date-formatter (1.3.6)

org.webjars.npm:php-date-formatter MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:php-date-formatter and may be impacted: - org.webjars.npm:github-com-xdan-datetimepicker 2.5.20 - org.webjars.npm:jquery-datetimepick...

@better-auth/cli (>=0.0.1, <=1.1.15), @vxrn/better-auth (>=1.1.368, <=1.1.416) +2 more potentially affected by CVE-2025-71404 via better-auth (>=0.4.9, <=1.1.15-beta.7)

better-auth NPM version =0.4.9, =0.0.1, =1.1.368, =1.1.0, =1.1.2 - better-auth-monitor 1.0.0 Source cves: CVE-2025-71404 Source advisory: OSV:GHSA-9X4V-XFQ5-M8X5...

org.webjars.npm:catharsis (0.8.9) potentially affected by CVE-2024-57081 via org.webjars.npm:underscore-contrib (0.3.0)

org.webjars.npm:underscore-contrib MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:underscore-contrib and may be impacted: - org.webjars.npm:catharsis 0.8.9 Source cves: CVE-2024-57081 Source advisory:...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MX2J-7CMV-353C...

modern-web-swiss-army-knife (>=2.7.0, <=2.7.1), nuxt-ignis (>=0.1.7, <=0.1.9) +1 more potentially affected by CVE-2025-24964 via vitest (>=3.0.2, <=3.0.4)

vitest NPM version =3.0.2, =2.7.0, =0.1.7, =0.0.1, =0.0.2 Source cves: CVE-2025-24964 Source advisory: OSV:GHSA-9CRC-Q9X8-HGQQ...

@armit/eslint-config-bases (>=0.1.1, <=0.1.5), @bpinternal/expresso (0.2.4) +47 more potentially affected by CVE-2025-24964 via vitest (>=1.0.0-beta.0, <=1.6.0)

vitest NPM version =1.0.0-beta.0, =0.1.1, =1.2.3, =1.7.0, =1.7.0, =1.7.0, =0.10.0-vitest-0.0.2, =1.0.295, =8.22.0, =0.0.0, =1.4.0, =4.7.0, =4.21.0 and more Source cves: CVE-2025-24964 Source advisory: OSV:GHSA-9CRC-Q9X8-HGQQ...

@accelint/vitest-config (0.1.4), @ai16z/plugin-evm (>=0.1.5-alpha.2, <=0.1.5-alpha.5) +94 more potentially affected by CVE-2025-24964 via vitest (>=2.0.0-beta.13, <=2.1.8)

vitest NPM version =2.0.0-beta.13, =0.1.5-alpha.2, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.0.0, =0.0.1, =0.1.1, =1.2.1-preview-1bd7791.0, =0.0.1, =0.1.8-alpha.1, =0.1.9 and more Source cves: CVE-2025-24964 Source advisory: OSV:GHSA-9CRC-Q9X8-HGQQ...

bulk-release (2.15.30), zx-bulk-release (2.15.30) +1 more potentially affected by CVE-2025-24959 via zx (8.3.1)

zx NPM version 8.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on zx and may be impacted: - bulk-release 2.15.30 - zx-bulk-release 2.15.30 - zx-extra 3.0.28 Source cves: CVE-2025-24959 Source advisory: OSV:GHSA-QWP8-X4FF-5H87...

bitcoin-harness (0.1.0), bitcoin_rpc_client (>=0.5.0, <=0.6.1) +82 more potentially affected by CVE-2025-24898 via openssl (>=0.10.7, <=0.10.68)

openssl CARGO version =0.10.7, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.0.3, =0.1.24, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2025-24898 Source advisory: OSV:GHSA-RPMJ-RPGJ-QMPM...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +870 more potentially affected by CVE-2025-24898 via openssl (>=0.2.18, <=0.10.68)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: CVE-2025-24898 Source advisory: OSV:RUSTSEC-2025-0004...

@abaplint/database-snowflake (>=2.7.93, <=2.7.101), @altimateai/datamate (>=0.0.19-beta.2, <=0.4.4) +161 more potentially affected by CVE-2025-24791 via snowflake-sdk (>=1.13.1, <=1.15.0)

snowflake-sdk NPM version =1.13.1, =2.7.93, =0.0.19-beta.2, =0.0.5, =8.0.0, =1.8.0, =0.0.0, =0.4.4, =0.7.17, =0.0.2, =1.0.2, =1.0.93, =0.0.0-beta.1, =0.0.31, =0.0.1-beta.22, =0.0.30 and more Source cves: CVE-2025-24791 Source advisory: OSV:GHSA-XFHV-WQJ6-RX99...

com.jordi9:krat-pack-testlib (>=1.0.0, <=1.2.1), io.github.shuigedeng:taotao-boot-demo (>=2025.02, <=2025.12) +7 more potentially affected by CVE-2024-57083 via org.webjars:redoc (>=2.0.0, <=2.5.1)

org.webjars:redoc MAVEN version =2.0.0, =1.0.0, =2025.02, =2025.02, =2025.02, =5.0.0-beta.2, =3.3.3, =v6.3.0.0, =4.41.4.0, =5.47.0.0 Source cves: CVE-2024-57083 Source advisory: SNYK:JAVA-ORGWEBJARS-8664934...

@ronin-dist/render (>=1.0.386-leo-ron-885-experimental.35, <=1.0.490), @ronin/blade (>=0.0.1, <=0.2.7) +1 more potentially affected by unknown CVE via @sentry/bun (>=8.11.0, <=8.41.0)

@sentry/bun NPM version =8.11.0, =1.0.386-leo-ron-885-experimental.35, =0.0.1, =0.1.0, =0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

@mrmtech/splice-lambda (>=0.1.0, <=4.0.3) potentially affected by unknown CVE via @sentry/aws-serverless (>=8.26.0, <=8.30.0)

@sentry/aws-serverless NPM version =8.26.0, =0.1.0, =4.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

@capawesome/cli (>=1.2.0, <=1.6.3), @crowd-engineers/logger (>=1.0.2, <=1.0.8) +44 more potentially affected by unknown CVE via @sentry/node (>=8.10.0, <=8.48.0)

@sentry/node NPM version =8.10.0, =1.2.0, =1.0.2, =1.6.4, =8.31.1, =0.0.16, =0.1.0, =1.10.0, =1.12.17, =1.26.29, =1.4.23, =3.11.1, =1.0.0, =1.7.1, =1.0.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

@laboratory-one/api-components (>=0.0.16, <=0.0.21), @rxap/nest-sentry (>=10.4.5-dev.1, <=10.4.5) potentially affected by unknown CVE via @sentry/nestjs (>=8.18.0, <=8.26.0)

@sentry/nestjs NPM version =8.18.0, =0.0.16, =10.4.5-dev.1, =10.4.5 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...