@action.sustainability/storybook-dashboard (>=0.1.1 <=0.1.5), @agentlab/ldkg-ui-charts (>=0.1.4 <=0.1.7) +172 more potentially affected by unknown CVE via @antv/xflow-hook (>=1.0.0 <=1.1.52)

@antv/xflow-hook NPM version =1.0.0, =0.1.1, =0.1.4, =1.1.15, =0.1.0, =1.3.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =0.0.0, =1.0.0, =1.0.0, =0.2.0, =0.2.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-ANTVXFLOWHOOK-16755077...

app.cash.trifle:common (>=0.2.9 <=0.2.10), app.cash.trifle:jvm (>=0.1.0 <=0.2.10) +1009 more potentially affected by CVE-2026-5588 via org.bouncycastle:bcpkix-jdk15to18 (>=1.63 <=1.83)

org.bouncycastle:bcpkix-jdk15to18 MAVEN version =1.63, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =1.0.0, =1.0.1, =0.2.0, =0.2.0, =3.5.0.0, =2.6.4, =2.6.4, =2.6.4, =2.6.4, =2.6.4, =0.1.1, =0.1.4.2 and more Source cves: CVE-2026-5588 Source advisory: OSV:GHSA-WG6Q-6289-32HP...

EUVD-2025-29639

Malicious code in bioql PyPI...

CVE-2025-57624

CVE-2025-57624 is a DLL hijacking vulnerability in CYRISMA Agent prior to version 444 that enables local privilege escalation and arbitrary code execution via multiple DLLs. The CVSS vector indicates a LOCAL attack with LOW attack complexity, requiring LOW privileges and no user interaction, with...

app.cash.lilbitcoinj:lilbitcoinj-core (>=0.0.2 <=0.0.3), app.cash.lninvoice:ln-invoice (>=0.0.1 <=0.0.6) +1309 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-jdk15to18 (>=1.63 <=1.77)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.63, =0.0.2, =0.0.1, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =1.0.0, =1.0.1, =0.2.0, =0.2.0, =1.0.0.RELEASE, =1.0.0, =1.0.0.RELEASE, =2.7.0 and more Source cves: CVE-2025-8885 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11777845...

be.thematchbox:AbstractRiver (>=1.0.1 <=1.1.0), br.com.starcode.trex:t-rex (=0.7.1) +408 more potentially affected by CVE-2014-9527 via org.apache.poi:poi (>=3.0-FINAL <=3.10.1)

org.apache.poi:poi MAVEN version =3.0-FINAL, =1.0.1, =0.1, =0.1, =1.0.4, =5.0.1.1, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.6.4 and more Source cves: CVE-2014-9527 Source advisory: OSV:GHSA-X9MM-6GPF-F749...

46c-sector (>=1.0.0 <=1.2.1), @aatishgh/antora_site_generator_lunr_custom (>=0.4.0 <=0.4.3) +430 more potentially affected by CVE-2022-22143 via convict (>=0.0.6 <=6.2.2)

convict NPM version =0.0.6, =1.0.0, =0.4.0, =0.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.0, =2.2.0, =0.0.1, =1.0.0, =0.0.1, =2.1.0, =2.0.0, =3.0.2 and more Source cves: CVE-2022-22143 Source advisory: OSV:GHSA-X2W5-725J-GF2G...

Swisscom TVMediaHelper DLL Loading Vulnerability

Swisscom TVMediaHelper is a set-top box device from Swisscom, Switzerland. A security vulnerability exists in the handling of multiple DLLs files in Swisscom TVMediaHelper version 1.1.0.50. A remote attacker can exploit this vulnerability to execute arbitrary code on the target system. Multiple...