cn.loyom.boot:loyom-boot-business-demo (=1.0.3-JDK21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (=1.0.3-JDK21) +101 more potentially affected by CVE-2025-9341 via org.bouncycastle:bcprov-lts8on (=2.73.7)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcprov-lts8on and may be impacted: - cn.loyom.boot:loyom-boot-business-demo =1.0.3-JDK21 -...

com.github.cafaudit:caf-audit-binding-elasticsearch (>=5.0.3-1321 <=5.0.4-1329), com.github.cafaudit:caf-audit-monkey-container (>=5.0.3-1321 <=5.0.4-1329) +78 more potentially affected by CVE-2025-9341 via org.bouncycastle:bc-fips (=2.1.0)

org.bouncycastle:bc-fips MAVEN version =2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bc-fips and may be impacted: - com.github.cafaudit:caf-audit-binding-elasticsearch =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321,...

agilerl (>=2.3.5 <=2.4.1.dev1), arbor-ai (=0.2.17) +7 more potentially affected by CVE-2025-48956 via vllm (>=0.10.0 <=0.10.1)

vllm PYPI version =0.10.0, =2.3.5, =0.1.5, =0.2.4, =0.1.2, =0.1.2, =0.1.0, =0.2.1, =0.3.0 Source cves: CVE-2025-48956 Source advisory: SNYK:PYTHON-VLLM-12177849...

@cloudbase/cli (>=2.8.19 <=2.11.7) potentially affected by CVE-2025-57755 via @musistudio/claude-code-router (=1.0.36)

@musistudio/claude-code-router NPM version =1.0.36 is affected by a known vulnerability. The following packages have a transitive dependency on @musistudio/claude-code-router and may be impacted: - @cloudbase/cli =2.8.19, =2.11.7 Source cves: CVE-2025-57755 Source advisory:...

card-ocr-fastmcp (=1.0.0) potentially affected by CVE-2025-9262 via @wong2/mcp-cli (=1.13.0)

@wong2/mcp-cli NPM version =1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on @wong2/mcp-cli and may be impacted: - card-ocr-fastmcp =1.0.0 Source cves: CVE-2025-9262 Source advisory: OSV:GHSA-P6RM-483J-37JF...

card-ocr-fastmcp (=1.0.0) potentially affected by CVE-2025-9262 via @wong2/mcp-cli (=1.13.0)

@wong2/mcp-cli NPM version =1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on @wong2/mcp-cli and may be impacted: - card-ocr-fastmcp =1.0.0 Source cves: CVE-2025-9262 Source advisory: SNYK:JS-WONG2MCPCLI-12205740...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0 <=0.8.7), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0 <=0.8.7) +326 more potentially affected by CVE-2025-54988 via org.apache.tika:tika-parser-pdf-module (>=2.0.0-ALPHA <=3.2.1)

org.apache.tika:tika-parser-pdf-module MAVEN version =2.0.0-ALPHA, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =1.2.0, =1.0.3.1-JDK21, =1.0.0, =1.0.0, =1.0, =1.4 and more Source cves: CVE-2025-54988 Source advisory: OSV:GHSA-P72G-PV48-7W9X...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0 <=0.8.7), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0 <=0.8.7) +324 more potentially affected by CVE-2025-54988 +1 more via org.apache.tika:tika-parser-pdf-module (>=2.0.0 <=3.2.1)

org.apache.tika:tika-parser-pdf-module MAVEN version =2.0.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =1.2.0, =1.0.3.1-JDK21, =1.0.0, =1.0.0, =1.0, =1.4 and more Source cves: CVE-2025-54988, CVE-2025-66516 Source advisory: SNYK:JAVA-ORGAPACHETIKA-12238980...

io.airlift:http-server (=324), io.airlift:jmx-http (=324) +5 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-server (>=12.1.0.alpha0 <=12.1.0.beta2)

org.eclipse.jetty.http2:jetty-http2-server MAVEN version =12.1.0.alpha0, =12.1.0.alpha2, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.beta2 Source cves: CVE-2025-5115 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYHTTP2-12047652...

@6missedcalls-ai/zora-mcp-server (>=0.1.2 <=0.1.3), @aurracloud/agentkit (>=0.9.0 <=0.10.0) +32 more potentially affected by unknown CVE via x402 (>=0.1.2 <=0.4.3)

x402 NPM version =0.1.2, =0.1.2, =0.9.0, =0.1.0-alpha.1, =0.0.1, =0.0.1, =0.0.1, =0.0.0-nightly-20250711210411, =0.3.0, =0.0.3, =0.1.2, =0.1.3 - @openflow-sh/sdk =1.0.0 - @thorium-dev-group/x402-mcp-extension =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3J63-5H8P-GF7C...

x402-native-token-payment-demo (>=0.0.0 <=0.0.1) potentially affected by unknown CVE via x402-hono (=0.3.4)

x402-hono NPM version =0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on x402-hono and may be impacted: - x402-native-token-payment-demo =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-3J63-5H8P-GF7C...

x402-native-token-payment-demo (>=0.0.0 <=0.0.1) potentially affected by unknown CVE via x402-hono (=0.3.4)

x402-hono NPM version =0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on x402-hono and may be impacted: - x402-native-token-payment-demo =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-X402HONO-12239901...

com.liferay:com.liferay.journal.content.web (>=1.0.0 <=2.0.8), com.liferay:com.liferay.journal.item.selector.web (>=1.0.0 <=1.0.5) potentially affected by CVE-2025-43737 via com.liferay:com.liferay.journal.web (>=1.0.0 <=1.5.0)

com.liferay:com.liferay.journal.web MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.5 Source cves: CVE-2025-43737 Source advisory: OSV:GHSA-VJWR-CQWF-6Q96...

electron-staff (=1.0.0), https-curl (=1.7.9) +2 more potentially affected by CVE-2025-55294 via screenshot-desktop (>=0.0.0-development <=1.15.1)

screenshot-desktop NPM version =0.0.0-development, =1.0.0, =1.0.1 Source cves: CVE-2025-55294 Source advisory: OSV:GHSA-GJX4-2C7G-FM94...

com.liferay:com.liferay.calendar.web (>=1.0.0 <=1.0.53), com.liferay:com.liferay.calevent.importer (>=1.0.0 <=1.0.11) potentially affected by CVE-2025-43739 via com.liferay:com.liferay.calendar.service (>=1.0.0 <=2.4.0)

com.liferay:com.liferay.calendar.service MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.11 Source cves: CVE-2025-43739 Source advisory: OSV:GHSA-7MXQ-H2R7-H449...

trinity-rft (>=0.1.0 <=0.1.1) potentially affected by CVE-2025-50461 via verl (=0.3.0.post1)

verl PYPI version =0.3.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on verl and may be impacted: - trinity-rft =0.1.0, =0.1.1 Source cves: CVE-2025-50461 Source advisory: SNYK:PYTHON-VERL-12027893...

net.aequologica.neo:geppaequo-tags (>=0.5.3 <=0.6.0), net.aequologica.neo:geppaequo-web (>=0.5.3 <=0.6.0) +4 more potentially affected by CVE-2025-4690 via org.webjars.npm:angular-sanitize (>=1.5.0-beta.0 <=1.8.3)

org.webjars.npm:angular-sanitize MAVEN version =1.5.0-beta.0, =0.5.3, =0.5.3, =0.6.0 - org.webjars.npm:angular-auto-complete =1.7.4 - org.webjars.npm:angular-material-calendar =0.2.14 - org.webjars.npm:angular-schema-form =0.8.13 - org.webjars.npm:github-com-showdownjs-ng-showdown =1.1.0 Source...

com.github.grantlittle:bdd-reporting-server (>=0.1.5 <=0.1.7), com.github.grantlittle:bdd-reporting-service (=0.1.9) +59 more potentially affected by CVE-2025-4690 via org.webjars.bower:angular-sanitize (>=1.2.29 <=1.8.2)

org.webjars.bower:angular-sanitize MAVEN version =1.2.29, =0.1.5, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1 and more Source cves: CVE-2025-4690 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-12177873...

5bb-task (=3.49.1rc1), aegis-stack (>=0.2.0 <=0.7.0) +167 more potentially affected by CVE-2025-55201 via copier (>=2.3.3 <=9.9.0)

copier PYPI version =2.3.3, =0.2.0, =0.1.0, =0.2.1, =0.2.1, =0.2.3, =0.2.3, =0.2.3, =0.2.1, =0.2.1, =0.1.0, =1.0.0, =0.2.0, =0.0.1b1, =0.0.1b4 and more Source cves: CVE-2025-55201 Source advisory: OSV:GHSA-3XW7-V6CJ-5Q8H...

1shot (>=0.0.3 <=0.0.9), @4xian/ccapi (=1.0.6) +210 more potentially affected by CVE-2025-55284 via @anthropic-ai/claude-code (>=1.0.108 <=1.0.24)

@anthropic-ai/claude-code NPM version =1.0.108, =0.0.3, =0.1.18, =1.0.0, =0.4.0, =0.2.3, =0.0.1, =0.6.0-rc34, =1.0.0, =1.3.2-canary.5af7e49 - @chittycorp/chittychat =3.0.0 and more Source cves: CVE-2025-55284 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-12028699...