@antv/auto-chart (>=2.0.0 <=2.1.0-alpha.0), @antv/chart-advisor (>=2.0.0 <=2.1.0-alpha.1) +5 more potentially affected by unknown CVE via @antv/ckb (>=2.0.4 <=2.1.0-alpha.0)

@antv/ckb NPM version =2.0.4, =2.0.0, =2.0.0, =1.2.0-beta.0, =1.0.0-alpha.1, =2.0.0, =2.0.0, =0.0.1, =0.1.0-beta.57 Source cves: unknown CVE Source advisory: OSV:MAL-2026-3860...

@ardeora/start-devtools (>=1.0.0 <=1.0.1), @carvajalconsultants/headstart (>=1.0.0 <=1.0.2) +27 more potentially affected by unknown CVE via @tanstack/start-server-core (>=1.121.0-alpha.28 <=1.167.3)

@tanstack/start-server-core NPM version =1.121.0-alpha.28, =1.0.0, =1.0.0, =0.0.14, =1.20.3-alpha.1, =1.111.10, =1.121.23, =0.0.1, =1.121.0-alpha.28, =1.20.3-alpha.1, =1.114.29, =1.121.23, =1.121.0-alpha.28, =1.97.4, =1.111.10, =1.121.0-alpha.28, =1.169.18 and more Source cves: unknown CVE Source...

@2ly/runtime (>=0.0.3 <=0.2.5), @aa.tamura/lib-gqf (>=0.0.1 <=0.0.5) +551 more potentially affected by unknown CVE via @apollo/server (>=4.10.0 <=5.4.0)

@apollo/server NPM version =4.10.0, =0.0.3, =0.0.1, =0.0.0, =0.0.9, =1.0.6, =0.0.4, =0.0.29, =0.0.4, =0.0.4, =0.0.29, =0.0.32, =1.1.1, =4.1.0, =0.0.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q82-XGWF-VJ6H...

@localstack/localstack-mcp-server (>=0.2.0 <=0.4.0), @posthog/nuxt (>=0.0.5 <=1.2.8) +4 more potentially affected by unknown CVE via posthog-node (>=5.0.0 <=5.13.2)

posthog-node NPM version =5.0.0, =0.2.0, =0.0.5, =0.62.0, =20.7.1-alpha.134, =0.0.0-client-js-listmessages-agentid-fix-20251119175531, =1.0.0-beta.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190925...

ff-build (>=2.4.0 <=2.6.1) potentially affected by unknown CVE via gulp-inject-envs (=1.2.0)

gulp-inject-envs NPM version =1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on gulp-inject-envs and may be impacted: - ff-build =2.4.0, =2.6.1 Source cves: unknown CVE Source advisory: SNYK:JS-GULPINJECTENVS-14103633...

circle (>=0.0.0 <=0.0.9), democirclepackage (=1.0.3) +3 more potentially affected by unknown CVE via post-data (=0.0.0)

post-data NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on post-data and may be impacted: - circle =0.0.0, =0.0.40, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29531...

CVE-2025-5632

creationtimestamp| type| source ---|---|--- 2025-06-05 05:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqtkrxcnvp2s...

CVE-2025-30012

creationtimestamp| type| source ---|---|--- 2025-05-13 03:12:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lozjaam66w2l 2025-05-13 05:30:33+00:00| seen| https://t.me/cvedetector/25158 2025-05-13 14:30:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16125 2025-07-08...

CVE-2025-30645

creationtimestamp| type| source ---|---|--- 2025-04-09 23:28:20+00:00| seen| https://t.me/cvedetector/22602 2025-04-09 23:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmg5v3xe372i 2025-04-24 20:06:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13327...

CVE-2025-3134

creationtimestamp| type| source ---|---|--- 2025-04-03 02:35:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10159 2025-04-03 03:06:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lluwbctvzf2o 2025-04-03 05:12:00+00:00| seen|...

CVE-2025-25988

creationtimestamp| type| source ---|---|--- 2025-02-14 17:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdwos4i24 2025-02-14 18:45:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7fpwz2z 2025-02-14 19:57:01+00:00| seen|...

GHSA-C7W4-9WV8-7X7C

creationtimestamp| type| source ---|---|--- 2025-02-06 18:43:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113958415500125710 2025-02-06 21:00:33+00:00| published-proof-of-concept| Telegram/62ADuuFkUh-GLH8SzGnVJ77GwT3veDkQ-knb1-PeB1sA 2025-02-07 18:03:02+00:00|...

CVE-2024-13220

creationtimestamp| type| source ---|---|--- 2025-01-31 06:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxbgjqh2c 2025-01-31 06:34:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113921573123574612 2025-01-31 07:24:14+00:00| seen|...

CVE-2024-56028

creationtimestamp| type| source ---|---|--- 2025-01-02 10:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leqtt2k6xz2e 2025-01-02 10:42:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3leqvcv2m3u2k 2025-01-02 11:44:19+00:00| seen|...

dbs-arch (>=0.2.2 <=0.2.3), dbs-boot (>=0.3.0 <=0.4.0) +7 more potentially affected by unknown CVE via kvm-ioctls (>=0.10.0 <=0.18.0)

kvm-ioctls CARGO version =0.10.0, =0.2.2, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.0.29, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0428...

dagster-dbt (>=0.20.5 <=0.23.6), dbt-af (>=0.4.1 <=0.4.2) +53 more potentially affected by unknown CVE via dbt-core (>=1.7.0 <=1.7.2)

dbt-core PYPI version =1.7.0, =0.20.5, =0.4.1, =1.7.0, =1.7.0, =1.7.1, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.0.0, =1.7.0, =1.7.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J4G3-3Q8X-JXQP...

0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +2500 more potentially affected by unknown CVE via cryptography (>=0.8.1 <=41.0.2)

cryptography PYPI version =0.8.1, =0.0.2, =0.1.0, =0.5.0rc5, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =1.0.0, =2.6.3, =2.3.36, =1.0.4, =2.0.0rc0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-JM77-QPHF-C4W8...

a62-emotion (>=0.10.12 <=0.11.4), aiproteomics (=0.2.1) +98 more potentially affected by unknown CVE via tensorflow-cpu (>=1.15.0 <=2.7.4)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.0.1, =0.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XF83-Q765-XM6M...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4785 more potentially affected by CVE-2021-41200 via tensorflow (>=1.0.1 <=2.4.3)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2021-41200 Source advisory: OSV:GHSA-GH8H-7J2J-QV4F...

d3m-simon (=1.2.5), easyquake (>=1.3.0 <=1.4.0) potentially affected by CVE-2021-29522 via tensorflow-gpu (=2.2.0)

tensorflow-gpu PYPI version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - d3m-simon =1.2.5 - easyquake =1.3.0, =1.4.0 Source cves: CVE-2021-29522 Source advisory: OSV:PYSEC-2021-648...