com.liferay:com.liferay.gradle.plugins.service.builder (=1.0.10), com.liferay:com.liferay.portal.tools.db.support (>=1.0.0 <=1.0.8) potentially affected by CVE-2025-43802 via com.liferay:com.liferay.portal.tools.service.builder (>=1.0.119 <=1.0.135)

com.liferay:com.liferay.portal.tools.service.builder MAVEN version =1.0.119, =1.0.0, =1.0.8 Source cves: CVE-2025-43802 Source advisory: SNYK:JAVA-COMLIFERAY-13003696...

flowise (>=2.0.0 <=2.2.8) potentially affected by unknown CVE via flowise-components (=2.2.8)

flowise-components NPM version =2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on flowise-components and may be impacted: - flowise =2.0.0, =2.2.8 Source cves: unknown CVE Source advisory: SNYK:JS-FLOWISECOMPONENTS-12878598...

flowise (>=1.6.1 <=2.2.8) potentially affected by unknown CVE via flowise-components (>=1.8.6 <=2.2.8)

flowise-components NPM version =1.8.6, =1.6.1, =2.2.8 Source cves: unknown CVE Source advisory: SNYK:JS-FLOWISECOMPONENTS-12818395...

com.aizuda:snail-job-client-common (>=1.7.2 <=1.8.0-jdk8), com.aizuda:snail-job-client-job-core (>=1.7.2 <=1.8.0-jdk8) +70 more potentially affected by CVE-2025-59328 via org.apache.fory:fory-core (>=0.11.0 <=0.12.1)

org.apache.fory:fory-core MAVEN version =0.11.0, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.7.2, =1.8.0-beta1 and more Source cves: CVE-2025-59328 Source advisory: OSV:GHSA-5HMF-8WX5-4QQ3...

better-config-loader (>=0.1.4 <=0.2.4), brainwires-skills (>=0.2.0 <=0.6.0) +57 more potentially affected by unknown CVE via libyml (>=0.0.4 <=0.0.5)

libyml CARGO version =0.0.4, =0.1.4, =0.2.0, =0.33.0, =0.14.0, =0.14.0, =0.1.5, =0.9.0, =0.3.0, =0.14.0, =0.1.0, =0.1.0, =0.3.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GFXP-F68G-8X78...

@lblod/ember-rdfa-editor (>=12.4.0-dev.1f5a5b71099288ff594f4d5de652b8af64917693 <=13.10.2) potentially affected by unknown CVE via ember-headless-form (=1.1.1)

ember-headless-form NPM version =1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on ember-headless-form and may be impacted: - @lblod/ember-rdfa-editor =12.4.0-dev.1f5a5b71099288ff594f4d5de652b8af64917693, =13.10.2 Source cves: unknown CVE Source...

@art-ws/fastify-http-server (>=2.0.1 <=2.0.23), @art-ws/openapi (>=0.1.1 <=0.1.8) potentially affected by unknown CVE via @art-ws/di (>=2.0.1 <=2.0.27)

@art-ws/di NPM version =2.0.1, =2.0.1, =0.1.1, =0.1.8 Source cves: unknown CVE Source advisory: SNYK:JS-ARTWSDI-12744471...

@art-ws/db-context (>=2.0.10 <=2.0.20) potentially affected by unknown CVE via @art-ws/common (>=2.0.10 <=2.0.21)

@art-ws/common NPM version =2.0.10, =2.0.10, =2.0.20 Source cves: unknown CVE Source advisory: SNYK:JS-ARTWSCOMMON-12744467...

@crowdstrike/ember-toucan-styles (>=3.0.0 <=3.0.1) potentially affected by unknown CVE via @crowdstrike/tailwind-toucan-base (=5.0.0)

@crowdstrike/tailwind-toucan-base NPM version =5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @crowdstrike/tailwind-toucan-base and may be impacted: - @crowdstrike/ember-toucan-styles =3.0.0, =3.0.1 Source cves: unknown CVE Source advisory:...

@crowdstrike/ember-toucan-styles (=3.0.1) potentially affected by unknown CVE via ember-browser-services (=5.0.1)

ember-browser-services NPM version =5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ember-browser-services and may be impacted: - @crowdstrike/ember-toucan-styles =3.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-EMBERBROWSERSERVICES-12744...

@art-ws/fastify-http-server (>=2.0.1 <=2.0.23), @art-ws/openapi (>=0.1.1 <=0.1.8) potentially affected by unknown CVE via @art-ws/http-server (>=2.0.1 <=2.0.20)

@art-ws/http-server NPM version =2.0.1, =2.0.1, =0.1.1, =0.1.8 Source cves: unknown CVE Source advisory: SNYK:JS-ARTWSHTTPSERVER-12744475...

@nstudio/focus (>=20.0.0 <=20.0.3) potentially affected by unknown CVE via @nstudio/xplat-utils (>=20.0.0 <=20.0.3)

@nstudio/xplat-utils NPM version =20.0.0, =20.0.0, =20.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-NSTUDIOXPLATUTILS-12744505...

@teselagen/ove (>=0.0.18 <=0.7.27), @teselagen/ui (>=0.0.23 <=0.7.27) +3 more potentially affected by unknown CVE via @teselagen/bounce-loader (>=0.0.12 <=0.3.11)

@teselagen/bounce-loader NPM version =0.0.12, =0.0.18, =0.0.23, =15.0.0, =17.0.12 - ove-electron =1.2.8 - teselagen-react-components =30.15.8 Source cves: unknown CVE Source advisory: SNYK:JS-TESELAGENBOUNCELOADER-12744519...

eslint-config-crowdstrike-node (=4.0.0-beta.2) potentially affected by unknown CVE via eslint-config-crowdstrike (=11.0.0-beta.0)

eslint-config-crowdstrike NPM version =11.0.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on eslint-config-crowdstrike and may be impacted: - eslint-config-crowdstrike-node =4.0.0-beta.2 Source cves: unknown CVE Source advisory:...

@opencloning/opencloning-elabftw (>=1.6.0 <=1.9.2), @opencloning/opencloningdb (>=1.7.1 <=1.8.3) +9 more potentially affected by unknown CVE via @teselagen/react-list (>=0.8.16 <=0.8.18)

@teselagen/react-list NPM version =0.8.16, =1.6.0, =1.7.1, =1.0.1, =0.0.15, =6.10.1, =0.0.14, =0.5.7, =10.1.14, =18.3.6, =28.0.0, =30.15.8 Source cves: unknown CVE Source advisory: SNYK:JS-TESELAGENREACTLIST-12744522...

@art-ws/common (>=2.0.3 <=2.0.24), @art-ws/db-context (>=2.0.3 <=2.0.20) potentially affected by unknown CVE via @art-ws/slf (>=2.0.1 <=2.0.2)

@art-ws/slf NPM version =2.0.1, =2.0.3, =2.0.3, =2.0.20 Source cves: unknown CVE Source advisory: SNYK:JS-ARTWSSLF-12744479...

@akylas/nativescript-sqlite (>=3.2.0 <=3.3.11) potentially affected by unknown CVE via @nativescript-community/typeorm (=0.2.29)

@nativescript-community/typeorm NPM version =0.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on @nativescript-community/typeorm and may be impacted: - @akylas/nativescript-sqlite =3.2.0, =3.3.11 Source cves: unknown CVE Source advisory:...

@aadharsh/orion-alpine-x934x (>=1.0.0 <=1.0.6), @idvidrine/create-express-app (>=1.0.0 <=1.1.5) +5 more potentially affected by CVE-2025-59364 via express-xss-sanitizer (>=1.2.1 <=2.0.2)

express-xss-sanitizer NPM version =1.2.1, =1.0.0, =1.0.0, =2.0.0, =1.0.0, =0.1.0, =1.0.0, =1.14.31, =1.15.2 Source cves: CVE-2025-59364 Source advisory: SNYK:JS-EXPRESSXSSSANITIZER-12670886...

abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +250 more potentially affected by CVE-2025-58065 via flask-appbuilder (>=1.10.0 <=4.6.3)

flask-appbuilder PYPI version =1.10.0, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =2022.9.19, =0.2.1, =0.2.9b1, =1.0.7, =0.4.0, =0.1.0a1, =0.1.0a7 and more Source cves: CVE-2025-58065 Source advisory: OSV:GHSA-765J-9R45-W2Q2...

better-config-loader (>=0.1.4 <=0.2.4), brainwires-skills (>=0.2.0 <=0.6.0) +61 more potentially affected by unknown CVE via serde_yml (>=0.0.10 <=0.0.9)

serdeyml CARGO version =0.0.10, =0.1.4, =0.2.0, =0.33.0, =0.14.0, =0.14.0, =0.3.0, =0.1.5, =0.9.0, =0.3.0, =0.8.0, =0.3.2, =0.1.0, =0.6.1 - fastconfig =1.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0068...