packagesss (=1.0.0) potentially affected by unknown CVE via ldash (=0.0.1-security)

ldash NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldash and may be impacted: - packagesss =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25004...

brick-node (>=0.0.8 <=0.0.17), bud (=0.0.3) +18 more potentially affected by unknown CVE via new-command (>=0.0.0 <=2.0.0)

new-command NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.3, =0.0.4, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27359...

devel_core (>=0.0.1 <=0.0.8) potentially affected by unknown CVE via requets (=0.0.1-security)

requets NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requets and may be impacted: - develcore =0.0.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32115...

http-run (=0.0.1) potentially affected by unknown CVE via requet (=0.0.1-security)

requet NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requet and may be impacted: - http-run =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32114...

watch-array (>=0.0.0 <=0.0.4) potentially affected by unknown CVE via new-list (>=0.0.5 <=2.0.0)

new-list NPM version =0.0.5, =0.0.0, =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27362...

confluence-static-site-builder (>=1.0.0-m04 <=1.0.0-m08) potentially affected by unknown CVE via commnader (=0.0.1-security)

commnader NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commnader and may be impacted: - confluence-static-site-builder =1.0.0-m04, =1.0.0-m08 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17424...

bakpiabathok-3 (=1.1.6), bonteng-1 (=1.1.6) +1 more potentially affected by unknown CVE via bonteng (=0.0.1-security)

bonteng NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bonteng and may be impacted: - bakpiabathok-3 =1.1.6 - bonteng-1 =1.1.6 - kolekcau-2 =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15953...

sutter-rdd-authentication (>=0.1.0 <=0.2.1) potentially affected by unknown CVE via sutter-rdd-services (=0.0.1-security)

sutter-rdd-services NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on sutter-rdd-services and may be impacted: - sutter-rdd-authentication =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34247...

xiaojs-5tools (>=1.0.5 <=1.0.6) potentially affected by unknown CVE via reatc (=0.0.1-security)

reatc NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reatc and may be impacted: - xiaojs-5tools =1.0.5, =1.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31897...

failing-line (=0.0.1), mp3s (=0.0.0) +3 more potentially affected by unknown CVE via findall (=0.0.4)

findall NPM version =0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on findall and may be impacted: - failing-line =0.0.1 - mp3s =0.0.0 - ourtunes =0.0.0, =0.0.2, =0.0.3, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20572...

as-design-v1 (=1.0.0) potentially affected by unknown CVE via preinstall (=0.0.1-security)

preinstall NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on preinstall and may be impacted: - as-design-v1 =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29612...

declarative-js (>=0.0.0 <=0.0.2) potentially affected by unknown CVE via andthen (=0.0.2)

andthen NPM version =0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on andthen and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14514...

@purplegate/chat-sdk (>=1.0.7 <=1.0.8), mock-json-response (=1.0.9) potentially affected by unknown CVE via rimraff (=0.0.1-security)

rimraff NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on rimraff and may be impacted: - @purplegate/chat-sdk =1.0.7, =1.0.8 - mock-json-response =1.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32235...

01memories (>=0.0.27 <=0.0.32), 01os (>=0.0.1 <=0.0.13) +8384 more potentially affected by CVE-2025-50817 via future (>=0.14.1 <=1.0.0)

future PYPI version =0.14.1, =0.0.27, =0.0.1, =1.0.0, =2.0.0, =0.0.2, =0.1.1, =0.9.2, =0.1.1, =0.4.24b0, =0.4.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-50817 Source advisory: SNYK:PYTHON-FUTURE-11951438...

quantguard (>=0.1.37 <=0.1.38) potentially affected by CVE-2025-55672 via apache-superset (=4.1.4)

apache-superset PYPI version =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-superset and may be impacted: - quantguard =0.1.37, =0.1.38 Source cves: CVE-2025-55672 Source advisory: OSV:GHSA-FJ97-2V9X-W5M4...

quantguard (>=0.1.37 <=0.1.38) potentially affected by CVE-2025-55674 via apache-superset (=4.1.4)

apache-superset PYPI version =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-superset and may be impacted: - quantguard =0.1.37, =0.1.38 Source cves: CVE-2025-55674 Source advisory: OSV:GHSA-FXGF-3XH6-M2PP...

datashadric (=0.2.2), superset-hetuengine-connector (=0.1.11) +1 more potentially affected by CVE-2025-55674 via apache-superset (=6.0.0)

apache-superset PYPI version =6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-superset and may be impacted: - datashadric =0.2.2 - superset-hetuengine-connector =0.1.11 - superset-sqlalchemy-gizmosql-adbc-dialect =0.0.10 Source cves:...

quantguard (>=0.1.37 <=0.1.38) potentially affected by CVE-2025-55675 via apache-superset (=4.1.4)

apache-superset PYPI version =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-superset and may be impacted: - quantguard =0.1.37, =0.1.38 Source cves: CVE-2025-55675 Source advisory: OSV:GHSA-MHPQ-M962-MG92...

bridgecrew (>=3.0.0 <=3.2.414), codesecure-core (>=1.0.0b10 <=1.0.29) +3 more potentially affected by CVE-2025-2180 via checkov (>=3.0.0 <=3.2.414)

checkov PYPI version =3.0.0, =3.0.0, =1.0.0b10, =0.2.0, =1.0.0, =1.0.56 Source cves: CVE-2025-2180 Source advisory: SNYK:PYTHON-CHECKOV-11800950...

ai.acolite:openai-agent-sdk (>=0.1.0 <=0.4.0), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +11788 more potentially affected by CVE-2025-8671 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.0 <=5.3.4)

org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.0, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =1.0.0, =1.0.2 and more Source...