@ccci/micro-server (>=1.0.57, <=1.0.132), @kevinkidd/aicommit (1.0.3) +10 more potentially affected by CVE-2025-8022 via bun (>=1.0.2, <=1.1.38)

bun NPM version =1.0.2, =1.0.57, =1.0.0, =0.0.0, =1.2.27, =1.2.21, =0.0.2, =0.0.33, =0.0.19-beta.11, =0.0.3, =0.0.4, =0.0.7 Source cves: CVE-2025-8022 Source advisory: OSV:GHSA-4J66-8F4R-3PJX...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8011 via electron (>=37.0.0, <=37.2.4)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8011 Source advisory: SNYK:JS-ELECTRON-11023267...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8010 via electron (>=37.0.0, <=37.2.4)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8010 Source advisory: SNYK:JS-ELECTRON-11023263...

dagit (0.7.5), dagster-airflow (0.7.5) potentially affected by CVE-2025-51481 via dagster (0.7.5)

dagster PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.7.5 - dagster-airflow 0.7.5 Source cves: CVE-2025-51481 Source advisory: OSV:GHSA-H7X8-JV97-FVVM...

dagit (0.15.0), dagster-airbyte (0.15.0) +35 more potentially affected by CVE-2025-51481 via dagster (0.15.0)

dagster PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.15.0 - dagster-airbyte 0.15.0 - dagster-airflow 0.15.0 - dagster-aws 0.15.0 - dagster-azure 0.15.0 - dagster-celery 0.15.0 -...

dagit (0.9.12rc1), dagster-airflow (0.9.12rc1) potentially affected by CVE-2025-51481 via dagster (0.9.12rc1)

dagster PYPI version 0.9.12rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.9.12rc1 - dagster-airflow 0.9.12rc1 Source cves: CVE-2025-51481 Source advisory: OSV:GHSA-H7X8-JV97-FVVM...

dagit (0.14.18rc5), dagster-airbyte (0.14.18rc5) +35 more potentially affected by CVE-2025-51481 via dagster (0.14.18rc5)

dagster PYPI version 0.14.18rc5 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.18rc5 - dagster-airbyte 0.14.18rc5 - dagster-airflow 0.14.18rc5 - dagster-aws 0.14.18rc5 - dagster-azure 0.14.18rc5 - dagster-cele...

@haxtheweb/create (>=0.1.3, <=11.0.2), @haxtheweb/open-apis (11.0.2) potentially affected by CVE-2025-54134 via @haxtheweb/haxcms-nodejs (>=0.0.13, <=10.0.6)

@haxtheweb/haxcms-nodejs NPM version =0.0.13, =0.1.3, =11.0.2 - @haxtheweb/open-apis 11.0.2 Source cves: CVE-2025-54134 Source advisory: MEND:CVE-2025-54134...

10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +4186 more potentially affected by CVE-2025-7783 via form-data (>=4.0.0, <=4.0.3)

form-data NPM version =4.0.0, =1.0.0, =1.2.0, =1.0.0, =0.1.0, =0.0.1, =5.0.0, =0.0.1, =1.0.1, =1.0.32, =1.0.32, =1.1.11 and more Source cves: CVE-2025-7783 Source advisory: OSV:GHSA-FJXV-7RQG-78G4...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @5ht/express (>=1.0.6, <=2.2.0) +625 more potentially affected by CVE-2025-7783 via form-data (>=3.0.0, <=3.0.3)

form-data NPM version =3.0.0, =1.17.6-next.0, =1.0.6, =1.0.0, =0.12.4, =1.1.3, =1.9.19, =1.1.0, =1.18.0, =2.13.1, =1.1.0, =10.1.0, =1.0.0, =1.9.2, =2.1.4 and more Source cves: CVE-2025-7783 Source advisory: OSV:GHSA-FJXV-7RQG-78G4...

com.blazebit:blaze-notify-channel-smtp (1.0.0-alpha6), com.blazebit:blaze-notify-server (1.0.0-alpha6) +21 more potentially affected by CVE-2025-7962 via org.eclipse.angus:smtp (>=2.0.0, <=2.0.3)

org.eclipse.angus:smtp MAVEN version =2.0.0, =2.0.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.7 and more Source cves: CVE-2025-7962 Source advisory: OSV:GHSA-9342-92GG-6V29...

africa.absa:inception-mail (>=1.0.0, <=1.2.0), africa.absa:inception-mail-api (>=1.0.0, <=1.2.0) +3541 more potentially affected by CVE-2025-7962 via com.sun.mail:jakarta.mail (>=1.6.3, <=1.6.7)

com.sun.mail:jakarta.mail MAVEN version =1.6.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0, =5.3.1, =1.2.2, =1.6.2, =1.6.3, =1.0.0, =0.0.9, =0.0.12 and more Source cves: CVE-2025-7962 Source advisory: GHSA-9342-92GG-6V29...

app.tozzi.mail:pec-parser (4.0.0), app.tozzi:uudecoder (4.0.0) +1255 more potentially affected by CVE-2025-7962 via com.sun.mail:jakarta.mail (>=2.0.0, <=2.0.1)

com.sun.mail:jakarta.mail MAVEN version =2.0.0, =0.2.0, =0.2.0, =2.0.1, =2.0.0, =0.1, =0.4, =1.0.0, =2022.3.4.0, =1.0.0-jdk21, =1.0.0, =1.0.3 and more Source cves: CVE-2025-7962 Source advisory: GHSA-9342-92GG-6V29...

africa.absa:inception-mail (>=1.0.0, <=1.2.0), africa.absa:inception-mail-api (>=1.0.0, <=1.2.0) +3541 more potentially affected by CVE-2025-7962 via com.sun.mail:jakarta.mail (>=1.6.3, <=1.6.7)

com.sun.mail:jakarta.mail MAVEN version =1.6.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0, =5.3.1, =1.2.2, =1.6.2, =1.6.3, =1.0.0, =0.0.9, =0.0.12 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-COMSUNMAIL-12028709...

ai.mindconnect:mc-mail-imap (0.8.4), app.tozzi:pec-parser (>=5.0.0, <=5.1.2) +2253 more potentially affected by CVE-2025-7962 via org.eclipse.angus:angus-mail (>=2.0.0, <=2.0.3)

org.eclipse.angus:angus-mail MAVEN version =2.0.0, =5.0.0, =1.0.1, =1.0.1-rc14, =1.1.16, =1.0.1-rc14, =1.1.17, =29.v7c3891a434c3, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =8.2.2 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-ORGECLIPSEANGUS-12239873...

app.tozzi.mail:pec-parser (4.0.0), app.tozzi:uudecoder (4.0.0) +1269 more potentially affected by CVE-2025-7962 via com.sun.mail:jakarta.mail (>=2.0.0-rc1, <=2.0.1)

com.sun.mail:jakarta.mail MAVEN version =2.0.0-rc1, =0.2.0, =0.2.0, =2.0.1, =2.0.0, =0.1, =0.4, =1.0.0, =2022.3.4.0, =1.0.0-jdk21, =1.0.0, =1.0.3 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-COMSUNMAIL-12028709...

com.blazebit:blaze-notify-channel-smtp (1.0.0-alpha6), com.blazebit:blaze-notify-server (1.0.0-alpha6) +21 more potentially affected by CVE-2025-7962 via org.eclipse.angus:smtp (>=1.0.0-m1, <=2.0.3)

org.eclipse.angus:smtp MAVEN version =1.0.0-m1, =1.0.0-m1, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.7 and more Source cves: CVE-2025-7962 Source advisory: MEND:CVE-2025-7962...

@4verburga/alpine-spanishplus (>=1.6.6, <=3.0.2), @4xeverburga/alpine-spanishplus (>=3.0.1, <=3.2.0) +143 more potentially affected by CVE-2025-54075 via @nuxtjs/mdc (>=0.1.6, <=0.17.0)

@nuxtjs/mdc NPM version =0.1.6, =1.6.6, =3.0.1, =0.0.1, =0.0.1, =0.1.1, =0.0.2, =1.0.7, =1.0.7, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.0.3, =0.10.6 - @copity/copity 0.0.3 and more Source cves: CVE-2025-54075 Source advisory: OSV:GHSA-CJ6R-RRR9-FG82...

@-xun/symbiote (>=3.7.0, <=4.11.4), @0x57/pierre (>=0.0.3, <=0.0.16) +888 more potentially affected by unknown CVE via @eslint/plugin-kit (>=0.1.0, <=0.2.8)

@eslint/plugin-kit NPM version =0.1.0, =3.7.0, =0.0.3, =1.1.44, =1.1.14, =0.0.1-alpha.3, =0.0.1, =10.0.0, =10.0.0, =8.3.0, =13.0.0, =2.6.0, =2.2.9, =0.0.2, =35.0.1, =38.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XFFM-G5W8-QVG7...

candid-extractor (>=0.1.0, <=0.1.2), deterministic-wasi-ctx (0.1.14) +22 more potentially affected by CVE-2025-53901 via wasmtime (>=10.0.2, <=12.0.2)

wasmtime CARGO version =10.0.2, =0.1.0, =0.5.0, =0.5.0, =0.18.0, =0.7.5, =0.1.0, =0.1.0, =10.0.0, =10.0.0, =10.0.0, =0.1.0, =0.1.2, =0.1.3 and more Source cves: CVE-2025-53901 Source advisory: OSV:GHSA-FM79-3F68-H2FC...