@asyncapi/server-api (>=0.16.0 <=0.16.23) potentially affected by unknown CVE via @asyncapi/python-paho-template (=0.2.13)

@asyncapi/python-paho-template NPM version =0.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/python-paho-template and may be impacted: - @asyncapi/server-api =0.16.0, =0.16.23 Source cves: unknown CVE Source advisory:...

EUVD-2025-198726

Malicious code in @asyncapi/python-paho-template npm...

MAL-2025-190720 Malicious code in @asyncapi/python-paho-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7e91afb25619c373d083857f06f65945216536aa6308326de63dd33458f72c The package @asyncapi/python-paho-template was found to contain malicious code. Source: ghsa-malware...