@4via6/relay (>=1.0.0 <=1.1.3), @axonpush/wizard (>=0.0.1 <=0.0.4) +12 more potentially affected by CVE-2025-59536 via @anthropic-ai/claude-code (>=0.2.126 <=1.0.108)

@anthropic-ai/claude-code NPM version =0.2.126, =1.0.0, =0.0.1, =0.0.55, =1.0.0, =0.0.1, =0.0.1, =1.8.0, =0.1.51, =1.4.0, =0.0.1, =0.0.1, =0.0.5 Source cves: CVE-2025-59536 Source advisory: OSV:GHSA-4FGQ-FPQ9-MR3G...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0 <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0 <=2.8.0) +1 more potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-common (>=4.0.4 <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0, =2.5.0, =2.5.0, =2.8.0 Source cves: CVE-2025-61735 Source advisory: SNYK:JAVA-ORGAPACHEKYLIN-13181847...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0 <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0 <=2.8.0) +1 more potentially affected by CVE-2025-61733 via org.apache.kylin:kylin-core-common (>=4.0.4 <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0, =2.5.0, =2.5.0, =2.8.0 Source cves: CVE-2025-61733 Source advisory: SNYK:JAVA-ORGAPACHEKYLIN-13181893...

org.apache.ranger:ranger-kylin-plugin (>=2.5.0 <=2.8.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.5.0 <=2.8.0) potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-metadata (=4.0.4)

org.apache.kylin:kylin-core-metadata MAVEN version =4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-metadata and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.5.0, =2.5.0, =2.8.0 Source cves: CVE-2025-617...

org.apache.ranger:ranger-kylin-plugin (>=2.5.0 <=2.8.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.5.0 <=2.8.0) potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-metadata (=4.0.4)

org.apache.kylin:kylin-core-metadata MAVEN version =4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-metadata and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.5.0, =2.5.0, =2.8.0 Source cves: CVE-2025-617...

agentengine (>=0.1.5 <=0.1.8), deepmost (=0.5.2) +12 more potentially affected by CVE-2025-11844 via smolagents (>=1.12.0 <=1.21.1)

smolagents PYPI version =1.12.0, =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.16.0, =2.4.0, =0.0.1.dev0, =0.0.1, =0.3.0, =0.3.7 Source cves: CVE-2025-11844 Source advisory: SNYK:PYTHON-SMOLAGENTS-13537512...

01os (>=0.0.1 <=0.0.14), advanced-research (>=0.1.0 <=0.2.2) +416 more potentially affected by unknown CVE via litellm (>=1.0.0 <=1.77.0)

litellm PYPI version =1.0.0, =0.0.1, =0.1.0, =0.4.0, =0.8.1, =0.1.0, =0.1.39, =0.14.1a0, =0.1.0, =0.0.5, =0.3.1, =1.1.2, =1.4.3, =0.0.1, =0.1.0, =0.7.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-LITELLM-13449204...

behavex-images (>=3.0.7 <=3.3.0rc4) potentially affected by unknown CVE via behavex (>=4.0.7 <=4.4.2)

behavex PYPI version =4.0.7, =3.0.7, =3.3.0rc4 Source cves: unknown CVE Source advisory: SNYK:PYTHON-BEHAVEX-13506941...

aldryn-django (>=4.2.10.0 <=4.2.18.0), alertwise (=1.0.0) +113 more potentially affected by CVE-2025-59682 via django (>=4.2.0 <=4.2.24)

django PYPI version =4.2.0, =4.2.10.0, =65.10.0, =7.5.1, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.8.0, =0.0.4.dev0, =8.0.0, =8.5.1 and more Source cves: CVE-2025-59682 Source advisory: SNYK:PYTHON-DJANGO-13179425...

chromatrace (>=0.1.6 <=0.1.7), ddos-blocker (>=0.0.3 <=0.0.13) +21 more potentially affected by CVE-2025-59681 via django (>=5.1.0 <=5.1.12)

django PYPI version =5.1.0, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =1.0.3, =0.6.2, =5.1.0, =0.2.30, =1.42.2, =1.21.0, =1.21.1.dev5 and more Source cves: CVE-2025-59681 Source advisory: OSV:PYSEC-2025-106...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1463 more potentially affected by CVE-2025-59681 via django (>=5.2.0 <=5.2.6)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-59681 Source advisory: OSV:PYSEC-2025-106...

ai.acolite:openai-agent-sdk (>=0.1.0 <=0.4.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +23438 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (>=1.4.0 <=1.5.18)

ch.qos.logback:logback-core MAVEN version =1.4.0, =0.1.0, =0.1.0, =0.2.0, =0.114.0, =0.103.0, =0.114.0, =0.2.0, =0.8.0, =0.9.0 - ai.djl.spring:djl-spring-boot-starter-autoconfigure =0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto =0.26 -...

@criticide/maxfest (>=1.0.19 <=1.2.3), @criticide/maxfestvest (=0.1.0) +19 more potentially affected by CVE-2025-56571 +1 more via financejs (>=4.0.0 <=4.1.0)

financejs NPM version =4.0.0, =1.0.19, =1.0.2, =0.0.6, =0.0.1, =1.0.0, =0.0.1, =1.0.1, =1.0.47, =1.0.23, =1.0.32, =0.1.0, =0.9.0 - estiband =0.1.0 - gulp-hotcopy =0.5.6 and more Source cves: CVE-2025-56571, CVE-2025-56572 Source advisory: SNYK:JS-FINANCEJS-13169918...

cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (=1.0.0), cc.ddrpa.dorian:forvariz-spring-boot-starter (>=1.0.0 <=1.1.0) +997 more potentially affected by CVE-2025-59952 via io.minio:minio (>=0.2.3 <=8.5.9)

io.minio:minio MAVEN version =0.2.3, =1.0.0, =1.0, =1.0.1, =1.3.1, =1.0.1, =1.3.0.RELEASE, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =11.0.1-RELEASE, =12.0.1-RELEASE and more Source cves: CVE-2025-59952 Source advisory: OSV:GHSA-H7RH-XFPJ-HPCM...

cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (=1.0.0), cc.ddrpa.dorian:forvariz-spring-boot-starter (>=1.0.0 <=1.1.0) +827 more potentially affected by CVE-2025-59952 via io.minio:minio (>=7.0.1 <=8.5.9)

io.minio:minio MAVEN version =7.0.1, =1.0.0, =1.0, =1.0.1, =1.3.0.RELEASE, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =11.0.1-RELEASE, =11.0.1-RELEASE, =12.0.1-RELEASE - cn.bootx.platform:bootx-demo =1.2.3 and more Source cves: CVE-2025-59952 Source advisory: SNYK:JAVA-IOMINIO-13147656...

aiagents4pharma (>=1.3.0 <=1.48.1), aiagents4pharma-ansh (=0.0.0) +3 more potentially affected by CVE-2025-59940 via mkdocs-include-markdown-plugin (>=7.1.2 <=7.1.7)

mkdocs-include-markdown-plugin PYPI version =7.1.2, =1.3.0, =2025.9.131446, =2025.9.171811 Source cves: CVE-2025-59940 Source advisory: SNYK:PYTHON-MKDOCSINCLUDEMARKDOWNPLUGIN-13147780...

aiagents4pharma (>=1.3.0 <=1.48.1), aiagents4pharma-ansh (=0.0.0) +11 more potentially affected by CVE-2025-59940 via mkdocs-include-markdown-plugin (>=3.8.1 <=7.1.7)

mkdocs-include-markdown-plugin PYPI version =3.8.1, =1.3.0, =0.7.0, =2025.9.131446, =0.5.17, =0.1.0, =0.0.4, =2023.6.1, =0.0.130, =0.1.0, =0.1.1 Source cves: CVE-2025-59940 Source advisory: OSV:GHSA-V39M-5M9J-M9W9...

@revisium/admin (>=1.4.0 <=2.0.0) potentially affected by CVE-2025-59845 via @apollo/sandbox (=2.7.1)

@apollo/sandbox NPM version =2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/sandbox and may be impacted: - @revisium/admin =1.4.0, =2.0.0 Source cves: CVE-2025-59845 Source advisory: SNYK:JS-APOLLOSANDBOX-13110033...

@apollo/chakra-helpers (>=1.1.0 <=2.2.0), @backstage/plugin-apollo-explorer (>=0.0.0-nightly-20220719025614 <=0.1.17-next.2) potentially affected by CVE-2025-59845 via @apollo/explorer (>=0.2.1 <=2.0.2)

@apollo/explorer NPM version =0.2.1, =1.1.0, =0.0.0-nightly-20220719025614, =0.1.17-next.2 Source cves: CVE-2025-59845 Source advisory: OSV:GHSA-W87V-7W53-WWXV...

@revisium/admin (>=1.4.0 <=2.0.0) potentially affected by CVE-2025-59845 via @apollo/sandbox (=2.7.1)

@apollo/sandbox NPM version =2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/sandbox and may be impacted: - @revisium/admin =1.4.0, =2.0.0 Source cves: CVE-2025-59845 Source advisory: OSV:GHSA-W87V-7W53-WWXV...