CuPs (>=0.0.0 <=0.0.5), IF (=0.0.0) +24 more potentially affected by unknown CVE via unic-ucd-common (>=0.7.0 <=0.9.0)

unic-ucd-common CARGO version =0.7.0, =0.0.0, =1.11.3, =0.3.0, =0.3.0, =0.0.102, =0.1.0, =0.0.7, =0.0.1, =1.0.0, =0.1.0, =0.0.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0101...

rustpython-vm (>=0.1.0 <=0.1.1), unic (>=0.8.0 <=0.9.0) +3 more potentially affected by unknown CVE via unic-char-basics (>=0.8.0 <=0.9.0)

unic-char-basics CARGO version =0.8.0, =0.1.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0093...

rev-up-your-harley (>=0.1.0 <=1.0.1), rustpython-vm (>=0.1.0 <=0.1.1) +1 more potentially affected by unknown CVE via unic (>=0.7.0 <=0.9.0)

unic CARGO version =0.7.0, =0.1.0, =0.1.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0095...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (=24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (=24.3.0.0) +25 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (>=21.1.1 <=26.2.5)

org.keycloak:keycloak-account-ui MAVEN version =21.1.1, =2.5.6-24.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.2.0, =26.2.0, =26.1.0, =26.1.0, =26.1.0, =26.2.5 a...

@cognigy/cognigy-cli (>=1.9.1 <=1.9.4), @iharkharytanovich/found (>=0.1.1 <=0.1.4) +2 more potentially affected by CVE-2025-11849 via mammoth (>=0.3.33 <=1.10.0)

mammoth NPM version =0.3.33, =1.9.1, =0.1.1, =1.0.0, =1.0.4 - youseeu =1.0.0 Source cves: CVE-2025-11849 Source advisory: OSV:GHSA-RMJR-87WV-GF87...

@manniwatch/client-desktop (>=0.30.0 <=0.30.1), @manniwatch/client-ng (>=0.30.0 <=0.30.1) +1 more potentially affected by CVE-2025-62427 via @angular/ssr (>=19.0.5 <=19.2.1)

@angular/ssr NPM version =19.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2025-62427 Source advisory: OSV:GHSA-Q63Q-PGMF-MXHR...

@manniwatch/client-desktop (>=0.30.0 <=0.30.1), @manniwatch/client-ng (>=0.30.0 <=0.30.1) +1 more potentially affected by CVE-2025-62427 via @angular/ssr (>=19.0.5 <=19.2.1)

@angular/ssr NPM version =19.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2025-62427 Source advisory: SNYK:JS-ANGULARSSR-13635722...

br.com.m4rc310:br-com-m4rc310-gql (=1.0.58), br.com.m4rc310:br-com-m4rc310-gtim (=1.0.58) +277 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (>=6.0.0 <=6.0.21)

org.springframework:spring-websocket MAVEN version =6.0.0, =3.1.1.0, =3.1.1.0, =2.0.35, =0.0.11, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.8.5 and more Source cves: CVE-2025-41254 Source advisory: OSV:GHSA-7FCH-4F2F-JCGM...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0 <=4.6.0.0), at.researchstudio.sat:won-owner (=0.3) +2228 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (>=4.0.0.RELEASE <=5.3.39)

org.springframework:spring-websocket MAVEN version =4.0.0.RELEASE, =4.4.0.0, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.6.0, =1.4, =5.3.0, =6.2.5 and more Source cves: CVE-2025-41254 Source advisory: OSV:GHSA-7FCH-4F2F-JCGM...

@avorati/strapi-plugin-preview (=1.0.1), @futurebrand/helpers-strapi (>=2.0.2 <=2.5.4) +8 more potentially affected by CVE-2025-3930 via @strapi/admin (>=5.0.0-alpha.0 <=5.23.6)

@strapi/admin NPM version =5.0.0-alpha.0, =2.0.2, =0.0.1, =5.0.0, =5.0.0, =5.0.0, =5.23.6 - custom-strapi-plugin-socket =1.0.2 - stronges =0.1.1 - test-lead =0.1.0 Source cves: CVE-2025-3930 Source advisory: SNYK:JS-STRAPIADMIN-13601310...

qrmark-logo (>=1.0.7 <=1.0.8) potentially affected by unknown CVE via components-flexibility (=6.1.25)

components-flexibility NPM version =6.1.25 is affected by a known vulnerability. The following packages have a transitive dependency on components-flexibility and may be impacted: - qrmark-logo =1.0.7, =1.0.8 Source cves: unknown CVE Source advisory: SNYK:JS-COMPONENTSFLEXIBILITY-13561387...

org.opensearch.dataprepper.plugins:otel-trace-group-processor (>=2.12.0 <=2.12.1) potentially affected by CVE-2025-62371 via org.opensearch.dataprepper.plugins:opensearch (>=2.12.0 <=2.12.1)

org.opensearch.dataprepper.plugins:opensearch MAVEN version =2.12.0, =2.12.0, =2.12.1 Source cves: CVE-2025-62371 Source advisory: OSV:GHSA-43FF-RR26-8HX4...

abi-ds-utils (>=0.1.2 <=1.2.3), abi-pyspark-utils (>=0.1.1 <=0.1.4) +231 more potentially affected by CVE-2025-55039 via pyspark (>=2.1.2 <=3.4.2)

pyspark PYPI version =2.1.2, =0.1.2, =0.1.1, =0.1.5, =0.0.1, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =0.2.0, =0.0.2, =1.0.0, =0.9.1, =1.0.2 and more Source cves: CVE-2025-55039 Source advisory: OSV:GHSA-6P6V-M64V-JX8Q...

beam-pyspark-runner (>=0.0.1 <=0.0.3), brel-xbrl (=0.8.2a1) +53 more potentially affected by CVE-2025-55039 via pyspark (>=3.5.0 <=3.5.1)

pyspark PYPI version =3.5.0, =0.0.1, =1.3.2, =0.13.0, =0.0.1, =1.2.17, =0.0.0, =5.0.0, =0.0.3, =1.1.0 - hari-data =0.1.5 - hermione-databricks =1.0.1 and more Source cves: CVE-2025-55039 Source advisory: OSV:GHSA-6P6V-M64V-JX8Q...

ai.catboost:catboost-spark_3.5_2.12 (>=1.2.3 <=1.2.10), ai.djl.spark:spark_2.12 (=0.29.0) +268 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (>=3.5.0 <=3.5.1)

org.apache.spark:spark-network-common2.12 MAVEN version =3.5.0, =1.2.3, =3.44.0.1-1-3.5, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.6.17, =0.0.3, =14.0.0, =14.0.0, =14.0.0, =14.17.3 - bio.ferlab:obo-parser2.12 =1.3.1 and more Source cves: CVE-2025-55039 Source advisory:...

ai.catboost:catboost-spark_3.0_2.12 (>=0.25 <=1.2.8), ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1 <=1.2.8) +1268 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (>=3.0.0-preview <=3.4.3)

org.apache.spark:spark-network-common2.12 MAVEN version =3.0.0-preview, =0.25, =1.0.1, =1.0.6, =1.1, =1.2, =0.0.25, =0.0.25, =0.0.62, =0.0.25, =0.0.86, =0.0.8, =0.0.6, =0.20.0, =0.22.0, =0.0.1, =0.1.14 and more Source cves: CVE-2025-55039 Source advisory: SNYK:JAVA-ORGAPACHESPARK-13553868...

tom-microservice (=3.2.28) potentially affected by CVE-2025-62366 via mailgen (=2.0.20)

mailgen NPM version =2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on mailgen and may be impacted: - tom-microservice =3.2.28 Source cves: CVE-2025-62366 Source advisory: SNYK:JS-MAILGEN-13552209...

sai-isaac (>=0.0.5 <=0.0.7) potentially affected by CVE-2025-23356 via isaaclab (=2.0.2)

isaaclab PYPI version =2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on isaaclab and may be impacted: - sai-isaac =0.0.5, =0.0.7 Source cves: CVE-2025-23356 Source advisory: SNYK:PYTHON-ISAACLAB-13553157...

com.liferay:com.liferay.mentions.service (>=1.0.0 <=2.0.15) potentially affected by CVE-2025-62246 via com.liferay:com.liferay.mentions.web (>=1.0.0 <=2.0.0)

com.liferay:com.liferay.mentions.web MAVEN version =1.0.0, =1.0.0, =2.0.15 Source cves: CVE-2025-62246 Source advisory: OSV:GHSA-MJ68-2XR5-28XH...

proto-types (>=0.1.0 <=0.1.1), protocheck-core (>=0.1.0 <=0.1.11) potentially affected by CVE-2025-62162 via cel (=0.11.0)

cel CARGO version =0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on cel and may be impacted: - proto-types =0.1.0, =0.1.0, =0.1.11 Source cves: CVE-2025-62162 Source advisory: OSV:GHSA-WXWX-9FH7-5MRW...