-fides-amor-et-lux (1.0.0), -graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2) +50348 more potentially affected by CVE-2025-13465 +1 more via lodash (>=4.0.0, <=4.18.0)

lodash NPM version =4.0.0, =2.0.1, =1.0.49, =0.0.8, =0.2.0, =0.0.1, =1.0.0, =0.0.1, =2.3.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: SNYK:JS-LODASH-15869619...

@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +250 more potentially affected by CVE-2025-13465 +1 more via lodash.unset (>=4.0.2, <=4.5.2)

lodash.unset NPM version =4.0.2, =2.16.49, =1.8.28, =1.2.1, =1.8.4, =8.0.0, =1.0.75, =0.0.2, =0.1.0, =1.31.9, =0.0.4, =0.6.0 and more Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: SNYK:JS-LODASHUNSET-15869620...

@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2025-13465 +1 more via lodash-amd (>=4.16.4, <=4.17.23)

lodash-amd NPM version =4.16.4, =0.1.0, =4.1.1, =3.4.0, =0.0.1, =1.0.14, =0.0.7, =0.0.1, =0.1.5 - xirtam--matrix-operations 0.1.3 Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: SNYK:JS-LODASHAMD-15869622...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +5749 more potentially affected by CVE-2025-13465 +1 more via lodash-es (>=4.0.0, <=4.18.0)

lodash-es NPM version =4.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1-alpha.23, =1.0.0, =1.0.0, =2.14.1, =41.3.1, =2.1.0, =0.3.4, =0.4.5, =0.3.5, =0.3.5, =0.3.5, =0.3.5, =0.5.0 and more Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: SNYK:JS-LODASHES-15869621...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.11) potentially affected by CVE-2026-34784 via parse-server (>=9.6.0-alpha.37, <=9.7.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.11 Source cves: CVE-2026-34784 Source advisory: SNYK:JS-PARSESERVER-15864525...

@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2021-23337 +1 more via lodash-amd (>=4.16.4, <=4.17.23)

lodash-amd NPM version =4.16.4, =0.1.0, =4.1.1, =3.4.0, =0.0.1, =1.0.14, =0.0.7, =0.0.1, =0.1.5 - xirtam--matrix-operations 0.1.3 Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: SNYK:JS-LODASHAMD-15869626...

-fides-amor-et-lux (1.0.0), -graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2) +50348 more potentially affected by CVE-2021-23337 +1 more via lodash (>=4.0.0, <=4.18.0)

lodash NPM version =4.0.0, =2.0.1, =1.0.49, =0.0.8, =0.2.0, =0.0.1, =1.0.0, =0.0.1, =2.3.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: SNYK:JS-LODASH-15869625...

09-nodejs (1.0.0), 11.17r (1.0.0) +561 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.5.0)

lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.1, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.1.5 - @arezooq/webserverpackage 1.0.0 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: SNYK:JS-LODASHTEMPLATE-15869628...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +5749 more potentially affected by CVE-2021-23337 +1 more via lodash-es (>=4.0.0, <=4.18.0)

lodash-es NPM version =4.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1-alpha.23, =1.0.0, =1.0.0, =2.14.1, =41.3.1, =2.1.0, =0.3.4, =0.4.5, =0.3.5, =0.3.5, =0.3.5, =0.3.5, =0.5.0 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: SNYK:JS-LODASHES-15869627...

org.webjars.npm:autolinker (>=0.24.1, <=0.28.1), org.webjars.npm:github-com-mattslocum-ng-webworker (0.2.3) +10 more potentially affected by CVE-2021-23337 +1 more via org.webjars.npm:lodash.template (4.5.0)

org.webjars.npm:lodash.template MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:lodash.template and may be impacted: - org.webjars.npm:autolinker =0.24.1, =2.9.0, =1.8.12, =3.5.0, =2.3.4, =2.5.17-beta.0 -...

ai-xone-mcp-workflow (>=0.0.2a1, <=0.0.2a5), axians-mcp (>=0.1.0, <=1.2.2) +10 more potentially affected by CVE-2026-32871 via fastmcp (2.3.5)

fastmcp PYPI version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-xone-mcp-workflow =0.0.2a1, =0.1.0, =0.1.0, =0.1.0a0, =0.1.20, =0.10.5, =0.0.0, =0.0.1, =1.0.0 Source cves: CVE-2026-32871 Source advisory:...

cnry-mcp-server-qdrant (>=0.0.2, <=0.8.3), mad-mcp-qdrant (>=1.1.3, <=1.9.3) +4 more potentially affected by CVE-2026-27124 via fastmcp (2.7.0)

fastmcp PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - cnry-mcp-server-qdrant =0.0.2, =1.1.3, =0.8.1, =0.8.1.1 - mcp-server-qdrant-openai 0.8.1 Source cves: CVE-2026-27124 Source advisory:...

ai-xone-mcp-workflow (>=0.0.2a1, <=0.0.2a5), axians-mcp (>=0.1.0, <=1.2.2) +10 more potentially affected by CVE-2026-27124 via fastmcp (2.3.5)

fastmcp PYPI version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-xone-mcp-workflow =0.0.2a1, =0.1.0, =0.1.0, =0.1.0a0, =0.1.20, =0.10.5, =0.0.0, =0.0.1, =1.0.0 Source cves: CVE-2026-27124 Source advisory:...

biocontext-kb (>=0.1.0, <=0.1.1), chatmcp-memory (>=0.0.2, <=0.0.8) +9 more potentially affected by CVE-2026-27124 via fastmcp (2.10.5)

fastmcp PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - biocontext-kb =0.1.0, =0.0.2, =0.0.2, =0.3.5, =1.0.0, =0.9.8, =2.0.2, =0.0.5, =0.1.0.dev20, =0.2.1rc1 Source cves: CVE-2026-27124 Source advisory...

basic-memory (>=0.16.3, <=0.18.5), idb-mcp (>=0.0.1, <=0.1.2) +10 more potentially affected by CVE-2025-64340 via fastmcp (2.12.3)

fastmcp PYPI version 2.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - basic-memory =0.16.3, =0.0.1, =0.1.0, =3.5.12, =1.0.2, =1.1.1, =1.0.1, =1.0.1, =0.3.0rc0, =0.1.0a32, =0.1.3, =0.1.4 Source cves: CVE-2025-64340...

code-review-graph (>=1.8.0, <=2.2.3.1), iflow-mcp-automateyournetwork-aci-mcp (>=0.1.1, <=0.1.4) +4 more potentially affected by CVE-2025-64340 via fastmcp (1.0.0)

fastmcp PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - code-review-graph =1.8.0, =0.1.1, =0.1.8, =0.1.0, =0.1.0, =0.3.0 - repomind 1.8.4 Source cves: CVE-2025-64340 Source advisory:...

acex (>=3.0.0, <=6.17.0), acex-mcp (1.0.0) +470 more potentially affected by CVE-2025-64340 via fastmcp (2.14.7)

fastmcp PYPI version 2.14.7 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - acex =3.0.0, =0.2.0, =0.1.0, =0.1.7, =2.1.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =4.3.4, =0.2.0, =3.0.0b15, =0.1.0, =0.1.5 and more Source cves:...

ai-code-review (>=2.0.0.dev1, <=3.1.2), ai-cr (>=2.0.0.dev1, <=3.1.2) +24 more potentially affected by CVE-2025-64340 via fastmcp (2.8.1)

fastmcp PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-code-review =2.0.0.dev1, =2.0.0.dev1, =4.0.0.dev21, =0.0.1, =0.2.0, =2.0.0.dev1, =2.0.0.dev1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more...

alibaba-cloud-application-management-mcp-server (>=0.1.0, <=1.0.4), alibaba-cloud-ops-mcp-server (>=0.9.2, <=0.9.27) +19 more potentially affected by CVE-2025-64340 via fastmcp (2.8.0)

fastmcp PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - alibaba-cloud-application-management-mcp-server =0.1.0, =0.9.2, =0.0.1, =0.2.2, =0.2.0, =2.0.5, =2.0.7, =2.0.7, =0.9.8, =2.0.0, =0.2.0, =0.3.0 and...

ai-proxy-server (>=3.0.2, <=3.1.0), aiowhitebit-mcp (0.3.0) +48 more potentially affected by CVE-2025-64340 via fastmcp (2.12.5)

fastmcp PYPI version 2.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-proxy-server =3.0.2, =1.7.3, =0.1.2.dev0, =1.3.1, =1.0.8, =0.2.0, =0.2.1, =0.1.1, =0.2.12, =0.2.19 and more Source cves: CVE-2025-64340 Source...