ai.h2o:h2o-admissibleml (>=3.34.0.1 <=3.46.0.11), ai.h2o:h2o-algos (>=0.1.9 <=3.46.0.11) +49 more potentially affected by CVE-2025-10768 via ai.h2o:h2o-core (>=0.1.10 <=3.8.3.4)

ai.h2o:h2o-core MAVEN version =0.1.10, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.11 and more Source cves: CVE-2025-10768 Source advisory: SNYK:JAVA-AIH2O-13003702...

bacpipe (>=1.2.0 <=1.3.2.dev0), decima2 (>=0.1.0 <=0.2.1) +11 more potentially affected by CVE-2025-9905 via keras (>=3.0.0 <=3.11.0)

keras PYPI version =3.0.0, =1.2.0, =0.1.0, =1.0.3, =0.0.28, =0.2.0, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-9905 Source advisory: OSV:PYSEC-2025-123...

@askinozgur/do-markdownit-cli (>=0.0.1 <=0.6.0) potentially affected by CVE-2025-59717 via @digitalocean/do-markdownit (=1.17.2)

@digitalocean/do-markdownit NPM version =1.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on @digitalocean/do-markdownit and may be impacted: - @askinozgur/do-markdownit-cli =0.0.1, =0.6.0 Source cves: CVE-2025-59717 Source advisory:...

edu.internet2.middleware.grouper:grouper-scim (>=5.1.0 <=5.20.2), edu.internet2.middleware.grouper:grouper-ui (>=5.1.0 <=5.20.2) +3 more potentially affected by CVE-2025-59714 via edu.internet2.middleware.grouper:grouper (>=5.17.1 <=5.20.2)

edu.internet2.middleware.grouper:grouper MAVEN version =5.17.1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.18.3 Source cves: CVE-2025-59714 Source advisory: SNYK:JAVA-EDUINTERNET2MIDDLEWAREGROUPER-13003670...

@adobe/aio-cli (>=7.0.0 <=8.3.0), @adobe/aio-cli-plugin-app (>=7.0.0 <=8.6.1) +31 more potentially affected by CVE-2025-56648 via @parcel/reporter-dev-server (>=2.0.0-beta.1 <=2.16.3)

@parcel/reporter-dev-server NPM version =2.0.0-beta.1, =7.0.0, =7.0.0, =1.0.0, =5.0.0, =2.3.0, =3.3.6, =2.1.0, =1.0.0-alpha.27, =2.0.0, =2.0.0, =0.0.2, =0.0.2, =2.0.0-beta.1, =2.13.4-canary.3389, =2.13.4-canary.3403 and more Source cves: CVE-2025-56648 Source advisory: OSV:GHSA-QM9P-F9J5-W83W...

ai.starlake:starlake-streaming_2.13 (>=1.3.3 <=1.3.5), chat.octet:llama-java-core (>=1.4.1 <=1.4.2) +296 more potentially affected by CVE-2025-59340 via com.hubspot.jinjava:jinjava (>=2.0.5 <=2.8.0)

com.hubspot.jinjava:jinjava MAVEN version =2.0.5, =1.3.3, =1.4.1, =0.0.80, =1.0.6, =1.0.6, =1.0.6, =1.0.2, =1.0.2, =0.1.0, =1.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6 and more Source cves: CVE-2025-59340 Source advisory: SNYK:JAVA-COMHUBSPOTJINJAVA-12878604...

@sit-onyx/demo-app (>=0.0.0 <=0.1.0-dev-20250919122003) potentially affected by CVE-2025-59414 via nuxt (=4.0.3)

nuxt NPM version =4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @sit-onyx/demo-app =0.0.0, =0.1.0-dev-20250919122003 Source cves: CVE-2025-59414 Source advisory: OSV:GHSA-P6JQ-8VC4-79F6...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0 <=0.7.0), com.charlyghislain.keycloak:keycloak-importexport (>=21.0.0 <=23.0.1) +137 more potentially affected by CVE-2025-8419 via org.keycloak:keycloak-services (>=1.0-alpha-1 <=26.2.5)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =21.0.0, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.0.1, =1.0.2 - com.kleegroup.accelerator:accelerator-security-keycloakmfa =1.0.1 and more Source cves: CVE-2025-8419 Source advisory:...

ai.starlake:starlake-streaming_2.13 (>=1.3.3 <=1.3.5), chat.octet:llama-java-core (>=1.4.1 <=1.4.2) +294 more potentially affected by CVE-2025-59340 via com.hubspot.jinjava:jinjava (>=1.0.3 <=2.7.4)

com.hubspot.jinjava:jinjava MAVEN version =1.0.3, =1.3.3, =1.4.1, =1.0.2, =1.0.2, =0.1.0, =1.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6 - com.elevenware.felson.examples:authserver =0.0.2 - com.elevenware.felson.examples:felson-examples-app =0.0.2 - com.elevenware.felson.examples:one =0.0...

cn.sliew:carp-framework-template-jinja (>=0.0.80 <=0.0.89), cn.sliew:flinkful-kubernetes-controller (>=1.0.6 <=1.0.7) +11 more potentially affected by CVE-2025-59340 via com.hubspot.jinjava:jinjava (=2.8.0)

com.hubspot.jinjava:jinjava MAVEN version =2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.hubspot.jinjava:jinjava and may be impacted: - cn.sliew:carp-framework-template-jinja =0.0.80, =1.0.6, =1.0.6, =1.0.6, =1.1, =1.19.4, =1.19.4, =1.19.4,...

@58860ed6ffd9e897/gold-finger-extension (=1.0.2), @ableaura/ableui (=0.1.0) +1496 more potentially affected by CVE-2025-56648 via @parcel/reporter-dev-server (>=2.0.0-beta.1 <=2.9.3)

@parcel/reporter-dev-server NPM version =2.0.0-beta.1, =5.1.9, =7.0.0, =8.3.0-pre.2022-06-22.sha-42703caf, =7.0.0, =0.1.0, =1.0.0, =5.0.0, =0.0.9, =0.0.1, =5.1.0, =5.2.5 and more Source cves: CVE-2025-56648 Source advisory: SNYK:JS-PARCELREPORTERDEVSERVER-12878606...

@sit-onyx/demo-app (>=0.0.0 <=0.1.0-dev-20250919122003) potentially affected by CVE-2025-59414 via nuxt (=4.0.3)

nuxt NPM version =4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @sit-onyx/demo-app =0.0.0, =0.1.0-dev-20250919122003 Source cves: CVE-2025-59414 Source advisory: SNYK:JS-NUXT-12878602...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1879 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.516.2)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.23 and more Source cves: CVE-2025-59476 Source advisory: OSV:GHSA-QRH5-JG98-CR48...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1879 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.516.2)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.23 and more Source cves: CVE-2025-59474 Source advisory: OSV:GHSA-67V4-38H7-9JJP...

com.datasqrl:sqrl-discovery (>=0.7.0 <=0.8.7), com.datasqrl:sqrl-planner (>=0.7.0 <=0.8.7) +20 more potentially affected by CVE-2025-59432 via com.ongres.scram:scram-common (>=3.0 <=3.1)

com.ongres.scram:scram-common MAVEN version =3.0, =0.7.0, =0.7.0, =0.7.0, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =1.0.0, =3.0, =2.4.0-RC1, =2.4.0-rc1 and more Source cves: CVE-2025-59432 Source advisory: SNYK:JAVA-COMONGRESSCRAM-12818392...

@shadypixel/mssql-mcp (=1.0.0) potentially affected by CVE-2025-59333 via @executeautomation/database-server (=1.1.0)

@executeautomation/database-server NPM version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @executeautomation/database-server and may be impacted: - @shadypixel/mssql-mcp =1.0.0 Source cves: CVE-2025-59333 Source advisory:...

@shadypixel/mssql-mcp (=1.0.0) potentially affected by CVE-2025-59333 via @executeautomation/database-server (=1.1.0)

@executeautomation/database-server NPM version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @executeautomation/database-server and may be impacted: - @shadypixel/mssql-mcp =1.0.0 Source cves: CVE-2025-59333 Source advisory:...

africa.absa:inception-reporting (>=1.0.0 <=1.2.0), africa.absa:inception-reporting-api (>=1.0.0 <=1.2.0) +425 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (>=3.7.0 <=7.0.3)

net.sf.jasperreports:jasperreports MAVEN version =3.7.0, =1.0.0, =1.0.0, =4.0.4, =1.0.0, =1.0.7, =2.1.0, =2.1.0, =0.0.1, =0.0.1, =20.3.0, =24.2.0, =20.3.0, =2.23.5, =2.23.5, =23.1.0, =25.12.0 and more Source cves: CVE-2025-10492 Source advisory: OSV:GHSA-7C3F-CG9X-F3GR...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (>=0.2.0 <=0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0 <=0.28.0) +23963 more potentially affected by CVE-2025-41249 via org.springframework:spring-core (>=6.0.0 <=6.2.10)

org.springframework:spring-core MAVEN version =6.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.12.1 and more Source cves: CVE-2025-41249 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-12817817...

org.webjars.npm:bonjour (=3.5.0), org.webjars.npm:dns-packet (>=1.3.1 <=4.2.0) +10 more potentially affected by CVE-2024-29415 +1 more via org.webjars.npm:ip (>=1.1.5 <=2.0.0)

org.webjars.npm:ip MAVEN version =1.1.5, =1.3.1, =1.0.1, =6.2.3, =4.2.0, =1.1.10, =3.0.1, =4.0.2 - org.webjars.npm:splitsoftwaresplitio =10.8.4 Source cves: CVE-2024-29415, CVE-2025-59436 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14101892...