@tessl/cli (>=0.21.0, <=0.21.2), @zed-industries/claude-code-acp (0.1.7) +8 more potentially affected by CVE-2025-58764 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.98)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-58764 Source advisory: OSV:GHSA-QXFV-FCPC-W36X...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +191 more potentially affected by CVE-2025-58751 via vite (>=6.0.0, <=6.3.5)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-58752 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-58752 Source advisory: SNYK:JS-VITE-12558116...

armory_cli (>=0.3.3, <=0.3.28), armory_lib (>=0.1.0, <=0.3.28) +157 more potentially affected by unknown CVE via crypto-hash (0.3.4)

crypto-hash CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on crypto-hash and may be impacted: - armorycli =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.0, =0.23.0, =0.1.0, =0.5.0, =0.3.10, =0.1.0, =0.5.2 and more Source cves...

@ascua/electron (>=0.5.0, <=0.6.0), @electron-plugins/fastify-protocol (>=0.0.0, <=0.0.1) +6 more potentially affected by CVE-2025-55305 via electron (>=36.0.0, <=36.5.0)

electron NPM version =36.0.0, =0.5.0, =0.0.0, =2.0.0, =0.9.0, =0.81.0-nightly-20250531-cddfe4a03, =0.18.0, =0.19.0 - yt-play-cli 0.16.0 Source cves: CVE-2025-55305 Source advisory: SNYK:JS-ELECTRON-12485155...

ai-sdk-provider-claude-code (>=0.2.0, <=1.1.1), claude-code-webui (>=0.1.34, <=0.1.48) +5 more potentially affected by unknown CVE via @anthropic-ai/claude-code (>=1.0.8, <=1.0.83)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =0.1.34, =1.8.0, =1.9.0 - cyrus-ai 0.1.44 - cyrus-claude-runner 0.0.22 - cyrus-edge-worker 0.0.27 - locadex 0.0.2-alpha.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PH6W-F82W-28W6...

@ckeditor/ckeditor5-adapter-ckfinder (>=46.0.0-alpha.0, <=46.0.2), @ckeditor/ckeditor5-ai (>=46.0.0-alpha.0, <=46.0.2) +89 more potentially affected by CVE-2025-58064 via ckeditor5 (>=46.0.0, <=46.0.2-alpha.1)

ckeditor5 NPM version =46.0.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.2 and...

@_sh/strapi-plugin-ckeditor (>=5.0.0, <=6.0.1), @abcxyz123321555/ckeditor5-build-test-version (>=0.7.0, <=0.10.2) +132 more potentially affected by CVE-2025-58064 via @ckeditor/ckeditor5-clipboard (>=44.2.0, <=45.2.1-alpha.10)

@ckeditor/ckeditor5-clipboard NPM version =44.2.0, =5.0.0, =0.7.0, =0.0.2, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.3.0 and more Source cves:...

0xkobold (>=0.5.0, <=0.8.0), 1dr-cli (>=0.2.10, <=0.5.14) +5427 more potentially affected by CVE-2025-9670 via turndown (>=4.0.1, <=7.2.4)

turndown NPM version =4.0.1, =0.5.0, =0.2.10, =0.1.0, =0.2.0, =0.0.1, =1.0.0, =1.0.0, =0.2.1, =0.1.0, =0.1.0, =0.1.1, =0.2.9, =0.5.0, =0.7.0 and more Source cves: CVE-2025-9670 Source advisory: SNYK:JS-TURNDOWN-12304081...

@contentql/core (>=0.1.2, <=0.3.5), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +12 more potentially affected by CVE-2025-4644 via @payloadcms/graphql (>=3.0.0, <=3.43.0-internal.693bd81)

@payloadcms/graphql NPM version =3.0.0, =0.1.2, =0.1.0, =3.0.0-alpha.0, =3.2.0, =0.2.0, =3.0.0-beta.10, =1.0.1, =0.1.0, =0.1.4, =1.0.0, =0.0.9-alpha.5, =3.0.0-beta.3, =0.0.3, =0.2.0, =0.2.42 Source cves: CVE-2025-4644 Source advisory: OSV:GHSA-26RV-H2HF-3FW4...

@copart/ops-tool-kit (>=1.10.20-alpha.15, <=1.13.0-beta.37), @firedesktop/react-portal-base (>=0.1.46, <=0.1.52) +6 more potentially affected by CVE-2025-57810 via jspdf (>=3.0.0, <=3.0.1)

jspdf NPM version =3.0.0, =1.10.20-alpha.15, =0.1.46, =0.54.4-nightly, =0.47.5-MYUN-38209, =1.1.63, =7.3.5, =7.3.8 Source cves: CVE-2025-57810 Source advisory: OSV:GHSA-8MVJ-3J78-4QMW...

a2 (>=0.5.0-alpha.1, <=0.5.0), a_chat (0.1.0) +2623 more potentially affected by unknown CVE via async-std (>=0.99.4, <=1.13.2)

async-std CARGO version =0.99.4, =0.5.0-alpha.1, =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.7.0, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0052...

02.koa-demo (1.0.0), 0510test (1.0.0) +13450 more potentially affected by unknown CVE via koa (>=0.0.1, <=3.2.1)

koa NPM version =0.0.1, =1.3.7, =1.0.0, =0.0.1, =1.0.0, =1.0.1 - 2-26 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-KOA-12143256...

06demo-1 (1.0.0), 1337cli (>=0.0.1, <=0.0.2) +4568 more potentially affected by CVE-2025-9308 via yarn (>=0.15.1, <=2.4.3)

yarn NPM version =0.15.1, =0.0.1, =1.0.9, =0.0.2, =1.17.6-next.0, =1.0.0, =1.0.0, =0.0.3, =1.1.2, =1.1.5 and more Source cves: CVE-2025-9308 Source advisory: SNYK:JS-YARN-12143051...

@6missedcalls-ai/zora-mcp-server (>=0.1.2, <=0.1.3), @aurracloud/agentkit (>=0.9.0, <=0.10.0) +36 more potentially affected by unknown CVE via x402 (>=0.1.2, <=0.4.3)

x402 NPM version =0.1.2, =0.1.2, =0.9.0, =0.1.0-alpha.1, =0.0.1, =0.0.1, =0.0.1, =0.0.0-nightly-20250711210411, =0.3.0, =0.0.3, =0.1.2, =0.1.3 - @openflow-sh/sdk 1.0.0 - @thorium-dev-group/x402-mcp-extension 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3J63-5H8P-GF7C...

@bookshop/browser (3.11.0-rc.0), @bookshop/generate (3.11.0-rc.0) +24 more potentially affected by CVE-2025-55303 via astro (>=4.0.3, <=4.16.18)

astro NPM version =4.0.3, =0.40.5, =0.38.0, =0.38.0, =2.8.4, =0.2.0, =0.0.0-dev-20231211183354, =0.0.3, =0.0.3, =0.0.5, =0.0.1, =1.0.2, =1.0.9 - @thewebforge/astro-og-images 3.0.0 and more Source cves: CVE-2025-55303 Source advisory: SNYK:JS-ASTRO-12027668...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +29 more potentially affected by unknown CVE via show-version (>=0.0.0, <=2.0.0)

show-version NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33163...

big-integer-max (1.0.0), big-integer-min (>=1.0.0, <=1.0.1) +25 more potentially affected by unknown CVE via just-next-tick (0.0.0)

just-next-tick NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-next-tick and may be impacted: - big-integer-max 1.0.0 - big-integer-min =1.0.0, =0.0.3, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.9 and more Source cves: unknown CVE Sour...

kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-form (0.1.4)

cli-form NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...

generator-anyms-ms (>=1.0.7, <=2.0.4), generator-diy (1.0.0) +1 more potentially affected by unknown CVE via yoeman-generator (0.0.1-security)

yoeman-generator NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on yoeman-generator and may be impacted: - generator-anyms-ms =1.0.7, =2.0.4 - generator-diy 1.0.0 - generator-owngen 1.0.0 Source cves: unknown CVE Source advisor...