@a.agiir/cinny (>=0.0.1, <=0.0.2), @a1tan/plugin-azure-openai (0.4.0) +800 more potentially affected by CVE-2025-8101 via linkifyjs (>=4.0.0-beta.4, <=4.3.1)

linkifyjs NPM version =4.0.0-beta.4, =0.0.1, =0.1.0, =0.1.0, =1.0.0, =0.1.8, =0.1.10 - @alithya-oss/backstage-plugin-rag-ai 1.2.7 - @alithya-oss/backstage-plugin-time-saver 1.4.5 and more Source cves: CVE-2025-8101 Source advisory: SNYK:JS-LINKIFYJS-11502189...

@multiversx/sdk-dapp (>=5.0.0-alpha.8, <=5.1.4), @terradharitri/sdk-dapp (>=0.0.13, <=0.0.14) +1 more potentially affected by CVE-2025-8101 via linkifyjs (4.3.1)

linkifyjs NPM version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on linkifyjs and may be impacted: - @multiversx/sdk-dapp =5.0.0-alpha.8, =0.0.13, =0.0.14 - @xapp/question-answering-handler 2.5.21 Source cves: CVE-2025-8101 Source advisory:...

@a.agiir/cinny (>=0.0.1, <=0.0.2), @a1tan/plugin-azure-openai (0.4.0) +1200 more potentially affected by CVE-2025-8101 via linkifyjs (>=2.1.4, <=4.3.1)

linkifyjs NPM version =2.1.4, =0.0.1, =0.1.0, =0.1.0, =3.0.0-beta.4, =0.4.1, =2.6.1, =0.1.1, =0.0.2, =0.25.0, =0.43.0 - @ajinkya-harness/backstage-ci-cd-test 0.9.0 - @alican.kuklaci/console-feed 3.5.0 - @alithya-oss/backstage-plugin-amazon-ecs 0.4.8 - @alithya-oss/backstage-plugin-aws-codebuild...

@skuhnow/directus (>=9.8.0, <=9.14.4) potentially affected by CVE-2025-54369 via node-saml (4.0.0-beta.2)

node-saml NPM version 4.0.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-saml and may be impacted: - @skuhnow/directus =9.8.0, =9.14.4 Source cves: CVE-2025-54369 Source advisory: SNYK:JS-NODESAML-10946571...

GHSA-RM8P-CX58-HCVX Withdrawn Advisory: Axios has Transitive Critical Vulnerability via form-data

Withdrawn Advisory This advisory has been withdrawn because users of Axios 1.10.0 have the flexibility to use a patched version of form-data, the software in which the vulnerability originates, without upgrading Axios to address GHSA-fjxv-7rqg-78g4. Original Description A critical vulnerability...

@0xvaibhav/divergent-node (>=0.0.1, <=0.0.3), @0xvaibhav/ipfs-messenger (>=1.0.3, <=1.0.9) +397 more potentially affected by CVE-2025-8020 via private-ip (3.0.2)

private-ip NPM version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on private-ip and may be impacted: - @0xvaibhav/divergent-node =0.0.1, =1.0.3, =0.0.1, =0.0.2, =9.3.0, =1.0.0, =1.3.2, =1.0.1, =1.17.1 - @adminforth/connector-clickhouse 1.0.1 -...

@ccci/micro-server (>=1.0.57, <=1.0.132), @kevinkidd/aicommit (1.0.3) +10 more potentially affected by CVE-2025-8022 via bun (>=1.0.2, <=1.1.38)

bun NPM version =1.0.2, =1.0.57, =1.0.0, =0.0.0, =1.2.27, =1.2.21, =0.0.2, =0.0.33, =0.0.19-beta.11, =0.0.3, =0.0.4, =0.0.7 Source cves: CVE-2025-8022 Source advisory: OSV:GHSA-4J66-8F4R-3PJX...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8011 via electron (>=37.0.0, <=37.2.4)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8011 Source advisory: SNYK:JS-ELECTRON-11023267...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8010 via electron (>=37.0.0, <=37.2.4)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8010 Source advisory: SNYK:JS-ELECTRON-11023263...

dagit (0.15.0), dagster-airbyte (0.15.0) +35 more potentially affected by CVE-2025-51481 via dagster (0.15.0)

dagster PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.15.0 - dagster-airbyte 0.15.0 - dagster-airflow 0.15.0 - dagster-aws 0.15.0 - dagster-azure 0.15.0 - dagster-celery 0.15.0 -...

dagit (0.9.12rc1), dagster-airflow (0.9.12rc1) potentially affected by CVE-2025-51481 via dagster (0.9.12rc1)

dagster PYPI version 0.9.12rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.9.12rc1 - dagster-airflow 0.9.12rc1 Source cves: CVE-2025-51481 Source advisory: OSV:GHSA-H7X8-JV97-FVVM...

dagit (0.14.18rc5), dagster-airbyte (0.14.18rc5) +35 more potentially affected by CVE-2025-51481 via dagster (0.14.18rc5)

dagster PYPI version 0.14.18rc5 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.18rc5 - dagster-airbyte 0.14.18rc5 - dagster-airflow 0.14.18rc5 - dagster-aws 0.14.18rc5 - dagster-azure 0.14.18rc5 - dagster-cele...

dagit (0.7.5), dagster-airflow (0.7.5) potentially affected by CVE-2025-51481 via dagster (0.7.5)

dagster PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.7.5 - dagster-airflow 0.7.5 Source cves: CVE-2025-51481 Source advisory: OSV:GHSA-H7X8-JV97-FVVM...

@haxtheweb/create (>=0.1.3, <=11.0.2), @haxtheweb/open-apis (11.0.2) potentially affected by CVE-2025-54134 via @haxtheweb/haxcms-nodejs (>=0.0.13, <=10.0.6)

@haxtheweb/haxcms-nodejs NPM version =0.0.13, =0.1.3, =11.0.2 - @haxtheweb/open-apis 11.0.2 Source cves: CVE-2025-54134 Source advisory: MEND:CVE-2025-54134...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @5ht/express (>=1.0.6, <=2.2.0) +625 more potentially affected by CVE-2025-7783 via form-data (>=3.0.0, <=3.0.3)

form-data NPM version =3.0.0, =1.17.6-next.0, =1.0.6, =1.0.0, =0.12.4, =1.1.3, =1.9.19, =1.1.0, =1.18.0, =2.13.1, =1.1.0, =10.1.0, =1.0.0, =1.9.2, =2.1.4 and more Source cves: CVE-2025-7783 Source advisory: OSV:GHSA-FJXV-7RQG-78G4...

10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +4186 more potentially affected by CVE-2025-7783 via form-data (>=4.0.0, <=4.0.3)

form-data NPM version =4.0.0, =1.0.0, =1.2.0, =1.0.0, =0.1.0, =0.0.1, =5.0.0, =0.0.1, =1.0.1, =1.0.32, =1.0.32, =1.1.11 and more Source cves: CVE-2025-7783 Source advisory: OSV:GHSA-FJXV-7RQG-78G4...

ai.mindconnect:mc-mail-imap (0.8.4), app.tozzi:pec-parser (>=5.0.0, <=5.1.2) +2253 more potentially affected by CVE-2025-7962 via org.eclipse.angus:angus-mail (>=2.0.0, <=2.0.3)

org.eclipse.angus:angus-mail MAVEN version =2.0.0, =5.0.0, =1.0.1, =1.0.1-rc14, =1.1.16, =1.0.1-rc14, =1.1.17, =29.v7c3891a434c3, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =8.2.2 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-ORGECLIPSEANGUS-12239873...

app.tozzi.mail:pec-parser (4.0.0), app.tozzi:uudecoder (4.0.0) +1269 more potentially affected by CVE-2025-7962 via com.sun.mail:jakarta.mail (>=2.0.0-rc1, <=2.0.1)

com.sun.mail:jakarta.mail MAVEN version =2.0.0-rc1, =0.2.0, =0.2.0, =2.0.1, =2.0.0, =0.1, =0.4, =1.0.0, =2022.3.4.0, =1.0.0-jdk21, =1.0.0, =1.0.3 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-COMSUNMAIL-12028709...

com.blazebit:blaze-notify-channel-smtp (1.0.0-alpha6), com.blazebit:blaze-notify-server (1.0.0-alpha6) +21 more potentially affected by CVE-2025-7962 via org.eclipse.angus:smtp (>=2.0.0, <=2.0.3)

org.eclipse.angus:smtp MAVEN version =2.0.0, =2.0.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.7 and more Source cves: CVE-2025-7962 Source advisory: OSV:GHSA-9342-92GG-6V29...

africa.absa:inception-mail (>=1.0.0, <=1.2.0), africa.absa:inception-mail-api (>=1.0.0, <=1.2.0) +3541 more potentially affected by CVE-2025-7962 via com.sun.mail:jakarta.mail (>=1.6.3, <=1.6.7)

com.sun.mail:jakarta.mail MAVEN version =1.6.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0, =5.3.1, =1.2.2, =1.6.2, =1.6.3, =1.0.0, =0.0.9, =0.0.12 and more Source cves: CVE-2025-7962 Source advisory: GHSA-9342-92GG-6V29...