brick (0.0.0), bud (>=0.0.0, <=0.1.2) +16 more potentially affected by unknown CVE via first-val (0.0.0)

first-val NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on first-val and may be impacted: - brick 0.0.0 - bud =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =0.0.0, =3.1.1, =0.0.0, =0.0.4, =0.0.0, =0.0.2 and more Source cves:...

brick-node (>=0.0.13, <=0.0.17), bud-live-server (>=0.0.0, <=0.0.5) +9 more potentially affected by unknown CVE via set-content-type (>=0.0.0, <=0.0.3)

set-content-type NPM version =0.0.0, =0.0.13, =0.0.0, =0.0.0, =0.0.0, =2.0.4, =3.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33016...

@akitha/new-plugin (0.0.1), @akitha/plugin-chart-hello (>=0.0.1, <=0.0.3) +245 more potentially affected by CVE-2025-55672 via @superset-ui/core (>=0.3.0, <=1.5.0)

@superset-ui/core NPM version =0.3.0, =0.0.1, =0.17.61, =0.0.0, =0.15.2, =0.0.1, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =1.0.5 and more Source cves: CVE-2025-55672 Source advisory: SNYK:JS-SUPERSETUICORE-11953561...

Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection due to the unsafe implementation of a dynamic Function constructor. An attacker can execute arbitrary JavaScript code on the server by sending a crafted POST request...

adjutantvoice (>=0.2.0, <=0.2.1), aeiou (>=0.0.12, <=0.0.21) +201 more potentially affected by CVE-2025-23294 via webdataset (>=0.1.40, <=1.0.2)

webdataset PYPI version =0.1.40, =0.2.0, =0.0.12, =1.4.23, =1.0.0, =0.0.1, =1.0.2.1, =1.0.0, =0.1.1a1, =0.1.0, =0.0.13, =1.0.3, =1.0.4 - audio-transc 0.1.0 - audio-xai 0.0.2.post3 - audio2dataset 1.0.1 and more Source cves: CVE-2025-23294 Source advisory: SNYK:PYTHON-WEBDATASET-12089391...

Ubuntu: Security Advisory (USN-7688-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2025-1939)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : php-adodb (2025-c35c1e0e04)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c35c1e0e04 advisory. 5.22.10 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2025-1963)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libsoup (EulerOS-SA-2025-1934)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2025-23325 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2025-23325 Source advisory:...

@mastra/deployer-netlify (>=0.0.0-a2a-20250421213654, <=0.10.5), @rr0/cms (>=0.3.23, <=0.3.29) +14 more potentially affected by CVE-2025-54387 via ipx (>=2.0.1, <=2.1.0)

ipx NPM version =2.0.1, =0.0.0-a2a-20250421213654, =0.3.23, =1.1.6, =4.0.0, =2.0.3, =0.0.23, =1.0.0, =1.0.2, =21.5.0, =17.4.0, =0.0.7, =0.0.13 - tmp-package-registry 1.0.0 and more Source cves: CVE-2025-54387 Source advisory: SNYK:JS-IPX-11483961...

netlify (22.3.0), netlify-cli (>=22.2.2-pre.dd189fc, <=22.3.0) potentially affected by CVE-2025-54387 via ipx (3.0.3)

ipx NPM version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ipx and may be impacted: - netlify 22.3.0 - netlify-cli =22.2.2-pre.dd189fc, =22.3.0 Source cves: CVE-2025-54387 Source advisory: OSV:GHSA-MM3P-J368-7JCR...

openSUSE Security Advisory (SUSE-SU-2025:02586-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4260-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7682-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4259-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5968-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@4via6/relay (>=1.0.0, <=1.1.3), @circleci/agents (>=1.0.6, <=2.3.1) +4 more potentially affected by CVE-2025-54558 via @openai/codex (>=0.1.2504211509, <=0.8.0)

@openai/codex NPM version =0.1.2504211509, =1.0.0, =1.0.6, =0.23.0, =1.0.0, =0.0.1, =1.0.0, =1.0.2 Source cves: CVE-2025-54558 Source advisory: SNYK:JS-OPENAICODEX-10945018...

Fedora: Security Advisory (FEDORA-2025-2fac68f810)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...