@andor83/mother-may-i (>=1.0.1, <=1.0.10), @bloggrify/bento (>=0.9.1, <=1.0.0) +27 more potentially affected by CVE-2025-24360 via @nuxt/vite-builder (>=3.8.1, <=3.15.2)

@nuxt/vite-builder NPM version =3.8.1, =1.0.1, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.0.1-alpha.1024, =3.2.0, =0.2.3, =0.2.0-alpha.2, =0.2.0 - @xizs/nuxt-base 0.0.2 and more Source cves: CVE-2025-24360 Source advisory: OSV:GHSA-2452-6XJ8-JH47...

@adebaraayomide/synchro_sdk (>=0.0.3, <=0.1.0-synchro-sdk), @akhmetovdev/avalanche (3.0.1) +169 more potentially affected by CVE-2024-57556 via store2 (>=2.3.0, <=2.14.3)

store2 NPM version =2.3.0, =0.0.3, =0.0.3, =1.0.0-alpha.3, =1.4.2, =1.0.0, =2.8.0, =3.0.6-statalanche, =0.1.0, =3.16.1, =1.0.0, =1.0.0, =3.0.5 and more Source cves: CVE-2024-57556 Source advisory: OSV:GHSA-W5HQ-HM5M-4548...

@directus/api (>=20.0.0-rc.0, <=23.2.2) potentially affected by CVE-2024-6533 via directus (>=11.0.0, <=11.3.2)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.2.2 Source cves: CVE-2024-6533 Source advisory: OSV:GHSA-9QRM-48QF-R2RW...

@directus/api (>=20.0.0-rc.0, <=23.1.0), directus (>=11.0.0-rc.1, <=11.1.2) potentially affected by CVE-2025-24353 via @directus/app (>=13.0.0, <=13.3.0)

@directus/app NPM version =13.0.0, =20.0.0-rc.0, =11.0.0-rc.1, =11.1.2 Source cves: CVE-2025-24353 Source advisory: OSV:GHSA-PMF4-V838-29HG...

@directus/api (>=20.0.0-rc.0, <=23.1.0) potentially affected by CVE-2025-24353 via directus (>=11.0.0, <=11.1.2)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.1.0 Source cves: CVE-2025-24353 Source advisory: OSV:GHSA-PMF4-V838-29HG...

@fibus-digital/sluby (>=0.4.0, <=0.4.14), @hexancore/core (>=0.15.0, <=0.16.0) +6 more potentially affected by CVE-2025-24033 via @fastify/multipart (>=8.0.0, <=8.3.0)

@fastify/multipart NPM version =8.0.0, =0.4.0, =0.15.0, =8.0.0-canary.1293, =8.0.0-canary.1293, =8.0.0-canary.1293, =0.0.1, =4.50.7-test.1, =0.0.1, =0.14.0 Source cves: CVE-2025-24033 Source advisory: OSV:GHSA-27C6-MCXV-X3FH...

@andesite-lab/andesite-core (>=1.60.2, <=1.62.0), @dzangolab/fastify-s3 (0.80.0) +6 more potentially affected by CVE-2025-24033 via @fastify/multipart (>=9.0.0, <=9.0.2)

@fastify/multipart NPM version =9.0.0, =1.60.2, =0.4.15, =1.0.36, =1.91.0, =5.0.0-beta.36, =0.15.0, =0.1.10, =0.1.15 Source cves: CVE-2025-24033 Source advisory: OSV:GHSA-27C6-MCXV-X3FH...

@aulazero/task (>=0.0.1, <=0.7.2), @aulazero/task-2 (>=2.0.1, <=2.0.5) +81 more potentially affected by CVE-2025-29049 via mathlive (>=0.25.0, <=0.103.0)

mathlive NPM version =0.25.0, =0.0.1, =2.0.1, =1.17.3, =0.2.6, =0.0.1, =0.1.0, =0.1.0, =1.20.0, =11.25.1, =1.0.0, =0.1.0, =0.1.0, =5.12.1, =8.1.0 and more Source cves: CVE-2025-29049 Source advisory: OSV:GHSA-QWJ6-Q94F-8425...

2002-app-demo (>=1.0.0, <=1.2.1), 3.21lianxi (1.0.0) +1979 more potentially affected by CVE-2025-22150 via undici (>=4.5.0, <=5.28.4)

undici NPM version =4.5.0, =1.0.0, =0.2.1, =0.5.0, =1.0.0, =0.1.23, =0.0.24, =0.0.0, =0.7.1, =3.2.4, =1.0.0, =1.0.0-beta.15, =1.0.0 and more Source cves: CVE-2025-22150 Source advisory: OSV:GHSA-C76H-2CCP-4975...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +1863 more potentially affected by CVE-2025-22150 via undici (>=6.0.0, <=6.21.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.3.3, =4.3.3, =4.3.3, =4.3.3, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2025-22150 Source advisory: OSV:GHSA-C76H-2CCP-4975...

@apt-repositories/generator (>=1.0.1-dev.120, <=1.0.2-dev.39), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.4) +58 more potentially affected by CVE-2025-22150 via undici (>=7.0.0, <=7.2.2)

undici NPM version =7.0.0, =1.0.1-dev.120, =1.6.3, =24.0.0, =12.0.0, =3.0.0, =0.92.0-alpha-20241217175715-33d88539e49f1b72d6dd1c7e5f8d3a0c16e8dcb9, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.38.0 and more Source cves: CVE-2025-22150...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +433 more potentially affected by CVE-2025-24010 +1 more via vite (>=5.0.0, <=5.4.11)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-24010, CVE-2025-24360 Source advisory: OSV:GHSA-VG6X-RCGG-RJX6...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) potentially affected by unknown CVE via platform-browser-dynamic (0.0.1-security)

platform-browser-dynamic NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser-dynamic and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 Source cves: unknown...

@0xgg/echomd (>=1.0.0, <=1.0.4), @21st-night/analytics-web (>=0.65.0, <=0.73.8) +1179 more potentially affected by CVE-2025-23207 via katex (>=0.12.0, <=0.16.19)

katex NPM version =0.12.0, =1.0.0, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.53.0, =0.48.0, =0.53.0, =0.16.0, =0.49.0, =0.76.0, =1.0.7, =0.3.0, =0.6.2 and more Source cves: CVE-2025-23207 Source advisory: OSV:GHSA-CG87-WMX4-V546...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +407 more potentially affected by CVE-2025-23206 via aws-cdk-lib (>=2.0.0, <=2.176.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =3.1.25 and more Source cves: CVE-2025-23206 Source advisory:...

acct (>=0.2.0, <=0.5.0), acid-store (>=0.8.0, <=0.14.2) +277 more potentially affected by CVE-2025-5791 via users (>=0.8.1, <=0.11.0)

users CARGO version =0.8.1, =0.2.0, =0.8.0, =0.4.0, =4.1.0, =0.1.0, =1.0.0, =0.1.0, =1.1.0, =0.3.0, =0.3.0, =0.3.0, =0.9.0, =0.9.0, =0.1.0, =0.1.1 and more Source cves: CVE-2025-5791 Source advisory: OSV:RUSTSEC-2025-0040...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +111 more potentially affected by CVE-2025-23061 via mongoose (>=7.0.0, <=7.8.3)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =1.0.0, =1.0.6-beta.0, =0.2.0-alpha.1, =0.2.0-alpha.0, =0.0.0, =1.0.2, =1.0.0, =7.6.10, =7.8.3 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +414 more potentially affected by CVE-2025-23061 via mongoose (>=6.0.1, <=6.13.5)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.1.16 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.a3b3f47e2c, <=1.24.0-rc.3)

@lodestar/reqresp NPM version =1.3.0-dev.a3b3f47e2c, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.24.0-rc.3 Source cves: unknown CVE Source advisory: OSV:GHSA-M9C9-MC2H-9WJW...

@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.a3b3f47e2c, <=1.24.0-rc.3)

@lodestar/reqresp NPM version =1.3.0-dev.a3b3f47e2c, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.24.0-rc.3 Source cves: unknown CVE Source advisory: OSV:GHSA-53RV-HCVM-RPP9...