3rd-party-cpu-abuser (>=1.0.0, <=1.4.0), @2lkit/devtools (0.0.1-0) +163 more potentially affected by CVE-2025-12907 via chrome-devtools-frontend (>=1.0.377119-1, <=1.0.746710)

chrome-devtools-frontend NPM version =1.0.377119-1, =1.0.0, =1.2.2-beta, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =1.3.0-1, =1.0.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2025-12907 Source advisory: SNYK:JS-CHROMEDEVTOOLSFRONTEND-13866859...

agentix-agent-sdk (0.1.0), agixt (>=1.7.0, <=1.7.11) +60 more potentially affected by CVE-2025-64512 via pdfminer-six (20231228.0.0)

pdfminer-six PYPI version 20231228.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - agentix-agent-sdk 0.1.0 - agixt =1.7.0, =1.0.0, =0.1.1, =5.2.161, =1.0.0, =0.1.0, =2.2.5rc1, =1.1.6, =0.1.0, =0.1.0, =2024.5.10,...

@dargmuesli/nuxt-vio (>=16.0.5, <=18.3.14) potentially affected by CVE-2025-52662 via @nuxt/devtools (>=2.0.0, <=2.6.3)

@nuxt/devtools NPM version =2.0.0, =16.0.5, =18.3.14 Source cves: CVE-2025-52662 Source advisory: OSV:GHSA-XMQ3-Q5PM-RP26...

@ai-sdk/angular (>=1.1.0-beta.0, <=1.1.0-beta.8), @ai-sdk/langchain (>=1.1.0-beta.0, <=1.1.0-beta.8) +5 more potentially affected by CVE-2025-48985 via ai (>=5.1.0-beta.0, <=5.1.0-beta.8)

ai NPM version =5.1.0-beta.0, =1.1.0-beta.0, =1.1.0-beta.0, =1.1.0-beta.0, =2.1.0-beta.0, =1.1.0-beta.0, =3.1.0-beta.0, =2.1.0-beta.0, =2.1.0-beta.8 Source cves: CVE-2025-48985 Source advisory: GHSA-RWVC-J5JR-MGVH...

@ai-sdk/angular (>=1.1.0-beta.0, <=1.1.0-beta.8), @ai-sdk/langchain (>=1.1.0-beta.0, <=1.1.0-beta.8) +5 more potentially affected by CVE-2025-48985 via ai (>=5.1.0-beta.0, <=5.1.0-beta.8)

ai NPM version =5.1.0-beta.0, =1.1.0-beta.0, =1.1.0-beta.0, =1.1.0-beta.0, =2.1.0-beta.0, =1.1.0-beta.0, =3.1.0-beta.0, =2.1.0-beta.0, =2.1.0-beta.8 Source cves: CVE-2025-48985 Source advisory: SNYK:JS-AI-13863465...

inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2025-64173 via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2025-64173 Source advisory: OSV:GHSA-X33C-7C2V-MRJ9...

inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2025-64347 via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2025-64347 Source advisory: OSV:GHSA-G8JH-VG5J-4H3F...

@kontaa/subgraph (>=1.0.1, <=1.2.3), @kontaa/utils (>=1.2.1, <=1.2.3) +4 more potentially affected by CVE-2025-64430 via parse-server (>=5.6.0, <=6.5.11)

parse-server NPM version =5.6.0, =1.0.1, =1.2.1, =2.4.46, =1.0.0, =1.0.1, =1.0.23 - servable-publishable 1.1.0 Source cves: CVE-2025-64430 Source advisory: SNYK:JS-PARSESERVER-13843716...

@kontaa/subgraph (>=1.0.1, <=1.2.3), @kontaa/utils (>=1.2.1, <=1.2.3) +4 more potentially affected by CVE-2025-64430 via parse-server (>=5.6.0, <=6.5.11)

parse-server NPM version =5.6.0, =1.0.1, =1.2.1, =2.4.46, =1.0.0, =1.0.1, =1.0.23 - servable-publishable 1.1.0 Source cves: CVE-2025-64430 Source advisory: OSV:GHSA-X4QJ-2F4Q-R4RX...

django-manifold (0.1.0), saltdash (0.9.1) potentially affected by CVE-2025-64458 via django (2.0.3)

django PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-manifold 0.1.0 - saltdash 0.9.1 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

drf-tus (1.21.1), richie (0.1.0) potentially affected by CVE-2025-64458 via django (1.11.14)

django PYPI version 1.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - drf-tus 1.21.1 - richie 0.1.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

nemo (>=1.11.1, <=1.14.0), opencensus-ext-django (>=0.1.0, <=0.3.1) potentially affected by CVE-2025-64459 via django (1.11.20)

django PYPI version 1.11.20 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - nemo =1.11.1, =0.1.0, =0.3.1 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

django-easy-login (>=0.1.0.dev0, <=0.1.0.dev2), nemo (>=1.14.2, <=1.14.3) potentially affected by CVE-2025-64459 via django (1.11.22)

django PYPI version 1.11.22 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-easy-login =0.1.0.dev0, =1.14.2, =1.14.3 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

arthexis (>=0.1.3, <=0.1.30), cdm-ecommerce-backend (0.1.0) +48 more potentially affected by CVE-2025-64458 via django (>=5.2.0a1, <=5.2.7)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.0.3, =1.2.0 and more Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

aimmo (>=2.9.1, <=2.10.8), arches (>=6.2.4, <=7.4.1) +16 more potentially affected by CVE-2025-64459 via django (3.2.20)

django PYPI version 3.2.20 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.9.1, =6.2.4, =6.33.2, =6.33.2, =4.1.1, =0.107.0rc1, =0.1.1, =0.12.0rc1, =1.8.2, =4.3.10, =4.6.0, =1.6.0, =5.11.1, =5.15.0 and more Source...

aimmo (>=0.61.9b59, <=0.67.1b256), caluma (6.7.0) +8 more potentially affected by CVE-2025-64458 via django (2.2.17)

django PYPI version 2.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.61.9b59, =4.15.0, =4.15.0, =0.0.8, =2.5.1, =1.24.11, =1.24.13 - umap-project 1.2.3 Source cves: CVE-2025-64458 Source advisory:...

terra-bonobo-nodes (>=0.1.1, <=0.1.4), terra-common (0.2.10) potentially affected by CVE-2025-64458 via django (2.1.12)

django PYPI version 2.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - terra-bonobo-nodes =0.1.1, =0.1.4 - terra-common 0.2.10 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

docker-compose-control-center (3.1.0) potentially affected by CVE-2025-64458 via django (2.1.10)

django PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center 3.1.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

boorunaut (0.4.3), caluma (>=6.3.2, <=6.4.0) potentially affected by CVE-2025-64458 via django (2.2.15)

django PYPI version 2.2.15 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - boorunaut 0.4.3 - caluma =6.3.2, =6.4.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

10minions-engine (>=0.0.1, <=0.0.4), 3ui (>=0.1.0, <=0.1.8) +2009 more potentially affected by CVE-2025-12735 via expr-eval (2.0.2)

expr-eval NPM version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on expr-eval and may be impacted: - 10minions-engine =0.0.1, =0.1.0, =1.0.2, =1.2.0, =1.0.0, =0.1.0, =0.1.4, =0.0.1, =0.0.3 and more Source cves: CVE-2025-12735 Source advisory:...