EUVD-2025-54290

Malicious code in flexible-amaranth-haddock npm...

EUVD-2025-52497

Malicious code in racial-amaranth-lizard npm...

Malicious code in surprising-amaranth-mastodon (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9873 Malicious code in surprising-amaranth-mastodon (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in marked-amaranth-mastodon (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9700 Malicious code in marked-amaranth-mastodon (npm)

--- -= Per source details. Do not edit below this line.=-...

amaranth-yosys (0.40.0.0.post100), coreblocks (>=0.2026.7.3, <=0.2026.10.4) +4 more potentially affected by CVE-2024-47813 via wasmtime (25.0.0)

wasmtime PYPI version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.40.0.0.post100 - coreblocks =0.2026.7.3, =0.1.0, =0.5.0rc1, =0.5.1rc0 - yowasp-runtime 1.65.0 Source cves: CVE-2024-47813 Sour...

amaranth-yosys (0.25.0.0.post77), one-sdk (>=1.0.0b8, <=1.0.0b14) +2 more potentially affected by CVE-2024-47813 via wasmtime (13.0.2)

wasmtime PYPI version 13.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post77 - one-sdk =1.0.0b8, =0.2.2, =0.3.4 - yowasp-runtime 1.40.0 Source cves: CVE-2024-47813 Source advisory:...

amaranth-yosys (>=0.37.0.59.post85, <=0.38.0.0.post86), yowasp-runtime (1.50.0) potentially affected by CVE-2024-47813 via wasmtime (17.0.1)

wasmtime PYPI version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.37.0.59.post85, =0.38.0.0.post86 - yowasp-runtime 1.50.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (>=0.25.0.0.post61, <=0.25.0.0.post67), yowasp-runtime (>=1.7.0, <=1.12.0) potentially affected by CVE-2024-47813 via wasmtime (5.0.0)

wasmtime PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.25.0.0.post61, =1.7.0, =1.12.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.9.0.post3746.dev41), nmigen-yosys (>=0.9.0.post3746.dev34, <=0.9.0.post3746.dev38) +15 more potentially affected by CVE-2024-47813 via wasmtime (0.30.0)

wasmtime PYPI version 0.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.9.0.post3746.dev41 - nmigen-yosys =0.9.0.post3746.dev34, =0.0.0.post3849.dev224, =0.0.0.post3849.dev224, =0.0.0.post3849.dev22...

amaranth-yosys (0.25.0.0.post70), yowasp-runtime (1.19.0) potentially affected by CVE-2024-47813 via wasmtime (7.0.0)

wasmtime PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post70 - yowasp-runtime 1.19.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.25.0.0.post78), yowasp-runtime (>=1.41.0, <=1.42.0) potentially affected by CVE-2024-47813 via wasmtime (14.0.0)

wasmtime PYPI version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post78 - yowasp-runtime =1.41.0, =1.42.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (>=0.40.0.0.post96, <=0.40.0.0.post97), yowasp-runtime (>=1.60.0, <=1.62.0) potentially affected by CVE-2024-47813 via wasmtime (22.0.0)

wasmtime PYPI version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.40.0.0.post96, =1.60.0, =1.62.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.40.0.0.post98), devcycle-python-server-sdk (>=3.6.1, <=3.10.0) +1 more potentially affected by CVE-2024-47813 via wasmtime (23.0.0)

wasmtime PYPI version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.40.0.0.post98 - devcycle-python-server-sdk =3.6.1, =3.10.0 - yowasp-runtime 1.63.0 Source cves: CVE-2024-47813 Source advisory...

amaranth-yosys (>=0.38.0.0.post88, <=0.40.0.0.post93), yowasp-runtime (1.53.0) potentially affected by CVE-2024-47813 via wasmtime (19.0.0)

wasmtime PYPI version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.38.0.0.post88, =0.40.0.0.post93 - yowasp-runtime 1.53.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.10.0.dev44) potentially affected by CVE-2024-47813 via wasmtime (0.31.0)

wasmtime PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.10.0.dev44 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.25.0.0.post73), one-sdk (>=1.0.0b0, <=1.0.0b7) +2 more potentially affected by CVE-2024-47813 via wasmtime (10.0.1)

wasmtime PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post73 - one-sdk =1.0.0b0, =0.2.0, =1.23.0, =1.25.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.25.0.0.post71), yowasp-runtime (>=1.20.0, <=1.21.0) potentially affected by CVE-2024-47813 via wasmtime (8.0.1)

wasmtime PYPI version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post71 - yowasp-runtime =1.20.0, =1.21.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.38.0.0.post87), typegraph (>=0.3.5, <=0.3.6) +1 more potentially affected by CVE-2024-47813 via wasmtime (18.0.2)

wasmtime PYPI version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.38.0.0.post87 - typegraph =0.3.5, =0.3.6 - yowasp-runtime 1.52.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-3...