siddheshtea (=1.1.6) potentially affected by unknown CVE via muklis-51 (=1.0.0)

muklis-51 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-51 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160837...

cc.zhaoac:faith-permission (=1.1.0), cc.zhaoac:faith-tool-boot (=1.1.0) +838 more potentially affected by CVE-2025-56769 via cn.hutool:hutool-extra (>=5.0.0 <=5.8.4)

cn.hutool:hutool-extra MAVEN version =5.0.0, =1.0.0, =1.0.0, =1.2.0 - cn.fscode.common:common-core-spring-boot-starter =0.0.1 - cn.fscode.common:common-data-mate-spring-boot-starter =0.0.1 - cn.fscode.common:common-dynamic-datasource-spring-boot-starter =0.0.1 and more Source cves: CVE-2025-56769...

@citrineos/ocpi-base (>=2.0.0 <=2.0.1), @citrineos/ocpi-cdrs (>=2.0.0 <=2.0.1) +16 more potentially affected by unknown CVE via koa2-swagger-ui (>=5.0.5 <=5.11.0)

koa2-swagger-ui NPM version =5.0.5, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =0.5.0, =0.1.1, =0.1.0, =0.5.0 - @trey.turner/artifacts-mocks-counterfact =0.0.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-KOA2SWAGGERUI-12704865...

com.atlan:package-toolkit-testing (>=5.3.1 <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0 <=2.8.0) +916 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0 <=12.0.24)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.0.0, =5.3.1, =2.6.0, =2.0.0, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.223 and more Source cves: CVE-2025-5115 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYHTTP2-12047664...

0.app1 (=1.0.52), 0.edsql (>=1.0.49 <=1.0.50) +1809 more potentially affected by CVE-2024-46993 via electron (>=0.1.2 <=28.2.3)

electron NPM version =0.1.2, =1.0.49, =1.0.49, =1.0.49, =1.0.0, =1.0.0, =1.0.6, =1.0.1, =1.0.0, =4.0.23, =0.0.1, =0.0.2 and more Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...

aggregation-agent (>=0.1.2 <=0.1.11), airflow-add-ons (>=0.2.7 <=0.2.15) +125 more potentially affected by CVE-2025-5279 via redshift-connector (>=2.0.888 <=2.1.2)

redshift-connector PYPI version =2.0.888, =0.1.2, =0.2.7, =0.0.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =3.1.0rc1, =1.0.0, =1.0.4 - arrowjet =0.1.0 and more Source cves: CVE-2025-5279 Source advisory: SNYK:PYTHON-REDSHIFTCONNECTOR-10259369...

org.webjars.npm:firebase (=10.13.0), org.webjars.npm:firebase__auth (=1.7.7) +7 more potentially affected by CVE-2025-47279 via org.webjars.npm:undici (=5.28.4)

org.webjars.npm:undici MAVEN version =5.28.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:undici and may be impacted: - org.webjars.npm:firebase =10.13.0 - org.webjars.npm:firebaseauth =1.7.7 - org.webjars.npm:firebaseauth-compat...

nemo-tts (=0.9.0) potentially affected by CVE-2024-0081 via nemo-asr (=0.9.0)

nemo-asr PYPI version =0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-asr and may be impacted: - nemo-tts =0.9.0 Source cves: CVE-2024-0081 Source advisory: OSV:PYSEC-2024-289...

edu.gemini:gsp-graphql-circe_sjs1_2.13 (>=0.13.0 <=0.14.0), edu.gemini:gsp-graphql-generic_sjs1_2.13 (>=0.13.0 <=0.14.0) +2 more potentially affected by CVE-2023-50730 via edu.gemini:gsp-graphql-core_sjs1_2.13 (>=0.13.0 <=0.14.0)

edu.gemini:gsp-graphql-coresjs12.13 MAVEN version =0.13.0, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =0.14.0 Source cves: CVE-2023-50730 Source advisory: OSV:GHSA-G56X-7J6W-G8R8...

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +337 more potentially affected by CVE-2023-6015 via mlflow (>=0.8.2 <=2.8.0)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-6015 Source advisory: OSV:GHSA-F798-QM4R-23R5...

ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +1900 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=3.0.0.Alpha1 <=3.2.5.Final)

io.quarkus:quarkus-vertx-http MAVEN version =3.0.0.Alpha1, =0.1.0, =0.1.0, =0.0.2, =0.1.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.10 and more Source cves: CVE-2023-4853 Source advisory: OSV:GHSA-4F4R-WGV2-JJVG...

cn.leancloud:filter-service-core (>=1.9 <=1.13), cn.leancloud:filter-service-metrics (>=1.9 <=1.13) +348 more potentially affected by CVE-2023-38493 via com.linecorp.armeria:armeria (>=0.50.0 <=1.24.2)

com.linecorp.armeria:armeria MAVEN version =0.50.0, =1.9, =1.9, =0.3.1, =0.3.1, =0.3.1, =0.2.0, =0.13.0, =0.19.0, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =0.0.3 and more Source cves: CVE-2023-38493 Source advisory: OSV:GHSA-WVP2-9PPW-337J...

KeyBoxen (=0.1.0), accesskit_atspi_common (>=0.1.1 <=0.9.1) +313 more potentially affected by unknown CVE via enumflags2 (=0.7.12)

enumflags2 CARGO version =0.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on enumflags2 and may be impacted: - KeyBoxen =0.1.0 - accesskitatspicommon =0.1.1, =0.1.0, =0.1.0, =0.6.0, =5.4.0, =0.4.0, =0.8.12, =0.2.0, =0.1.0, =0.2.0 and more Source...

02-infrastructure (=1.0.0), 02vue_toast_demo (>=1.0.0 <=1.0.4) +12563 more potentially affected by unknown CVE via whet.extend (>=0.9.7 <=0.9.9)

whet.extend NPM version =0.9.7, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =1.0.0, =1.3.3 - 3vot-clay =2.0.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-WHETEXTEND-3178372...

a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +103 more potentially affected by CVE-2022-41897 via tensorflow-cpu (>=1.15.0 <=2.7.4)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: CVE-2022-41897 Source advisory: OSV:GHSA-F2W8-JW48-FR7J...

aggmap (>=1.1.1 <=1.2.1), molmap (>=1.3.1 <=1.4.0) potentially affected by CVE-2022-41891 via tensorflow-gpu (=2.9.1)

tensorflow-gpu PYPI version =2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - aggmap =1.1.1, =1.3.1, =1.4.0 Source cves: CVE-2022-41891 Source advisory: OSV:GHSA-66VQ-54FQ-6JVV...

aadhaar-detection (=0.5.0), accuinsight (>=1.0.84 <=1.0.87) +39 more potentially affected by CVE-2022-29194 via tensorflow (>=2.7.0 <=2.7.1)

tensorflow PYPI version =2.7.0, =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =1.2.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 and more Source cves: CVE-2022-29194 Source advisory: OSV:GHSA-H5G4-PPWX-48Q2...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1594 more potentially affected by CVE-2021-21683 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.30)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2021-21683 Source advisory: OSV:GHSA-4PW5-R58H-FV24...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1594 more potentially affected by CVE-2021-21607 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.26)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2021-21607 Source advisory: OSV:GHSA-CXQW-VJCR-GP5G...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10 <=2.0.2), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10 <=6.0.2) +59 more potentially affected by CVE-2017-9797 via org.apache.geode:geode-core (>=1.10.0 <=1.2.0)

org.apache.geode:geode-core MAVEN version =1.10.0, =0.10, =0.10, =2.0.0, =0.1.9, =2.4.0, =1.22.0, =1.14.0, =1.10.0, =1.10.0, =1.10.0, =1.12.0, =1.11.0, =1.15.4 and more Source cves: CVE-2017-9797 Source advisory: OSV:GHSA-VH98-FQFC-4HJ3...