CVE-2024-49916

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-06-28 16:01:17+00:00| seen|...

CVE-2025-39745

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

agent-os-server (>=0.4.2 <=0.5.10), aiodatalayer (>=1.0.0 <=2.3.1) +59 more potentially affected by CVE-2025-65896 via asyncmy (>=0.2.10 <=0.2.11)

asyncmy PYPI version =0.2.10, =0.4.2, =1.0.0, =0.5.0, =1.0.8, =2.0.9, =1.0.8, =0.1.0, =1.0.0, =1.3.9, =0.1.1, =0.1.0, =0.2.0, =1.0.0, =0.1.0, =0.3.2 and more Source cves: CVE-2025-65896 Source advisory: OSV:GHSA-QHQW-RRW9-25RM...

@medusajs/medusa (>=2.10.0 <=2.11.4-preview-20251124032825), @medusajs/medusa-oas-cli (>=2.10.0 <=2.11.4-preview-20251124000311) potentially affected by unknown CVE via @medusajs/analytics-posthog (>=2.10.0-preview-20250818120145 <=2.11.4-preview-20251124032825)

@medusajs/analytics-posthog NPM version =2.10.0-preview-20250818120145, =2.10.0, =2.10.0, =2.11.4-preview-20251124000311 Source cves: unknown CVE Source advisory: SNYK:JS-MEDUSAJSANALYTICSPOSTHOG-14137959...

@alstar/studio (=0.0.0-beta.20), @better-auth/cli (>=1.3.4 <=1.4.0-beta.28) +16 more potentially affected by unknown CVE via better-auth (>=1.3.34 <=1.4.0-beta.9)

better-auth NPM version =1.3.34, =1.3.4, =0.18.9, =0.5.2, =7.0.9-canary.2, =7.0.9-canary.2, =0.1.8, =0.1.0, =0.0.22, =0.10.0, =0.11.1-canary.15, =0.8.2, =0.0.10, =1.0.0, =1.0.4, =3.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WMJR-V86C-M9JJ...

@asyncapi-actions-test/trusted-publishing-test_asyncapi-cli (>=4.1.3 <=5.4.0), @asyncapi/cli (>=0.13.0 <=6.0.2) +4 more potentially affected by unknown CVE via @asyncapi/diff (>=0.2.2 <=0.5.0)

@asyncapi/diff NPM version =0.2.2, =4.1.3, =0.13.0, =0.16.0, =0.10.0, =1.4.14, =1.4.50 - trusted-publishing-testasyncapi-cli =4.1.3 Source cves: unknown CVE Source advisory: SNYK:JS-ASYNCAPIDIFF-14103252...

@ampt/astro (=0.0.1-beta.1), @antonyfaris/prefix-node-builtins (>=1.0.0 <=1.0.1) +383 more potentially affected by CVE-2025-65019 via astro (>=0.20.12 <=5.15.6)

astro NPM version =0.20.12, =1.0.0, =0.5.0, =1.0.0, =0.0.17, =0.0.2, =0.0.1, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.5.1 - @astro-sanctuary/toolbar-drupal =0.1.1 - @astrojs/og =0.0.1 and more Source cves: CVE-2025-65019 Source advisory: OSV:GHSA-FVMW-CJ7J-J39Q...

@ampt/astro (=0.0.1-beta.1), @antonyfaris/prefix-node-builtins (>=1.0.0 <=1.0.1) +376 more potentially affected by CVE-2025-64757 via astro (>=0.20.12 <=5.14.1)

astro NPM version =0.20.12, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.0.1, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.1, =0.0.1, =0.0.7 and more Source cves: CVE-2025-64757 Source advisory: OSV:GHSA-X3H8-62X9-952G...

@0xgg/echomd (>=1.0.0 <=1.0.4), @ajuhos/malloy-tests (>=0.0.332 <=0.0.334) +361 more potentially affected by CVE-2025-59840 via vega-expression (>=1.2.1 <=5.1.2)

vega-expression NPM version =1.2.1, =1.0.0, =0.0.332, =0.0.332, =1.1.5, =0.0.1, =0.20.0, =0.20.0, =2.4.22, =0.4.1-canary.195, =0.0.0, =0.1.0, =0.3.0, =0.8.8 and more Source cves: CVE-2025-59840 Source advisory: OSV:GHSA-7F2V-3QQ3-VVJF...

tea_gunfinal (>=1.1.2 <=1.1.5) potentially affected by unknown CVE via tea_gunfinal (=1.1.6)

teagunfinal NPM version =1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on teagunfinal and may be impacted: - teagunfinal =1.1.2, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181568...

@doelsumbing87/teadoelsumbing87 (=1.0.0) potentially affected by unknown CVE via teadoelsumbing87 (=1.0.0)

teadoelsumbing87 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on teadoelsumbing87 and may be impacted: - @doelsumbing87/teadoelsumbing87 =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-171954...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nudela-rahfaeg-naahgsa (=1.0.0)

nudela-rahfaeg-naahgsa NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfaeg-naahgsa and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163830...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nokire-nakala3 (=1.0.0)

nokire-nakala3 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala3 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162982...

able_catfish_z3n (=3.2.4), absolute_eagle_z3n (=3.4.1) +391 more potentially affected by unknown CVE via rudiscammer (>=0.1.0 <=4.2.5)

rudiscammer NPM version =0.1.0, =4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on rudiscammer and may be impacted: - ablecatfishz3n =3.2.4 - absoluteeaglez3n =3.4.1 - abundantparrotz3n =4.2.3 - academiclimpetz3n =3.2.4 - acceptableemuz3n =3.1.4 -...

12boowjljk-notthedevs (=1.6.9), ahahscroot (=1.0.1) +14 more potentially affected by unknown CVE via 666-tea (=1.1.4)

666-tea NPM version =1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on 666-tea and may be impacted: - 12boowjljk-notthedevs =1.6.9 - ahahscroot =1.0.1 - bacoritul =1.0.1 - basuki =1.0.0 - df6fqftol9-notthedevs =1.6.9 - forilcuy =1.0.1 - gasmbut...

alertwise (=1.0.0), amusing-app (>=0.1.0 <=0.4.3) +213 more potentially affected by CVE-2025-6176 via brotli (>=0.6.0 <=1.1.0)

brotli PYPI version =0.6.0, =0.1.0, =22.5.13, =2.4.11, =0.72.2, =1.1.3, =8.3.1, =16.0.1b2, =9.1.2, =0.0.1, =0.0.6 and more Source cves: CVE-2025-6176 Source advisory: OSV:GHSA-2QFP-Q593-8484...

aenvironment (=0.1.7rc1), agentfetch-mcp (>=1.0.0 <=1.0.1) +210 more potentially affected by unknown CVE via fastmcp (>=0.1.0 <=2.12.5)

fastmcp PYPI version =0.1.0, =1.0.0, =0.4.6, =1.8.0, =3.2.0, =3.2.0, =4.2.2, =3.0.2, =0.2.7, =1.0.0rc1, =0.2.7, =1.7.3, =0.1.12, =0.9.30, =0.9.77 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C2JP-C369-7PVX...

@aws/nx-plugin (>=0.44.0 <=0.59.0), @botonic/nx-plugin (>=2.23.0 <=2.29.0) +47 more potentially affected by CVE-2025-62595 via koa (=3.0.1)

koa NPM version =3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @aws/nx-plugin =0.44.0, =2.23.0, =3.10.0, =0.4.0, =0.1.0-next.717, =4.0.0-beta.2, =0.0.0-feat-support-bridge-react-router-v7-20251015102312,...

CuPs (>=0.0.0 <=0.0.5), IF (=0.0.0) +110 more potentially affected by unknown CVE via unic-ucd-segment (>=0.7.0 <=0.9.0)

unic-ucd-segment CARGO version =0.7.0, =0.0.0, =1.11.3, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.3.0, =1.0.0, =0.1.0, =0.0.4, =0.1.0, =0.2.6, =0.0.15, =0.2.11 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0104...

CVE-2025-59203

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-24 06:24:42+00:00| seen|...