aurelius (>=0.7.0, <=0.7.5), basiliq (>=0.1.0, <=0.1.2) +23 more potentially affected by unknown CVE via slice-deque (>=0.1.16, <=0.2.4)

slice-deque CARGO version =0.1.16, =0.7.0, =0.1.0, =0.7.0, =0.1.0, =0.13.1, =0.1.2, =0.9.0, =0.1.0, =0.2.0, =0.1.1, =0.1.0, =1.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7MCQ-F592-PF7V...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +83 more potentially affected by CVE-2024-52588 via @strapi/admin (>=4.0.0, <=4.25.1)

@strapi/admin NPM version =4.0.0, =4.12.2, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.1 - @cowprotocol/cms 0.1.0-rc.5 and more Source cves: CVE-2024-52588 Source advisory: OSV:GHSA-V8WJ-F5C7-PVXF...

autoxx (>=0.0.11, <=0.0.13), vuln-demo-math-ops (1.0.0) potentially affected by CVE-2025-31494 via agpt (0.2.2)

agpt PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on agpt and may be impacted: - autoxx =0.0.11, =0.0.13 - vuln-demo-math-ops 1.0.0 Source cves: CVE-2025-31494 Source advisory: SNYK:PYTHON-AGPT-9802206...

@abios/abios-redoc-cli (>=0.12.4, <=0.15.0), @acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94) +53 more potentially affected by CVE-2024-57083 via redoc (>=2.0.0, <=2.2.0)

redoc NPM version =2.0.0, =0.12.4, =2.13.1, =2.13.1, =0.0.1, =1.0.0, =2.6.10, =1.0.0, =1.0.1, =1.18.2, =0.0.2, =0.1.4, =0.2.1, =9.0.0, =0.1.0, =0.5.0 and more Source cves: CVE-2024-57083 Source advisory: OSV:GHSA-9RHG-254W-FH9X...

@alexssmusica/emissao-nota-fiscal (>=1.0.0, <=1.0.5), @borodutch-labs/in-app-purchase (1.13.2) +12 more potentially affected by CVE-2025-29775 via xml-crypto (>=2.0.0, <=2.1.5)

xml-crypto NPM version =2.0.0, =1.0.0, =0.1.0-beta.57, =0.2.1-beta.36, =1.14.0, =1.12.1, =0.7.1, =0.0.1, =0.0.9 Source cves: CVE-2025-29775 Source advisory: OSV:GHSA-X3M8-899R-F7C3...

@boxyhq/saml-jackson (>=1.3.2, <=1.11.1), @boxyhq/saml20 (>=1.0.11, <=1.2.3) +4 more potentially affected by CVE-2025-29775 via xml-crypto (>=3.0.0, <=3.2.0)

xml-crypto NPM version =3.0.0, =1.3.2, =1.0.11, =1.13.3, =1.13.5, =2.1.0, =1.0.0, =1.0.1 Source cves: CVE-2025-29775 Source advisory: OSV:GHSA-X3M8-899R-F7C3...

-fides-amor-et-lux (1.0.0), 0xppl-solana-portfolio (1.0.0) +9342 more potentially affected by CVE-2025-27152 via axios (>=1.0.0, <=1.8.1)

axios NPM version =1.0.0, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =2.1.0, =3.0.0-beta.10, =0.2.1, =0.5.0, =0.6.2 and more Source cves: CVE-2025-27152 Source advisory: OSV:GHSA-JR5F-V2JV-69X6...

blit-server (>=0.20.0, <=0.28.3), dahua-camera-rtsp (>=0.3.0, <=0.3.1) +8 more potentially affected by CVE-2025-27091 via openh264-sys2 (>=0.1.17, <=0.7.1)

openh264-sys2 CARGO version =0.1.17, =0.20.0, =0.3.0, =0.1.0, =0.1.9, =0.1.33, =0.2.0, =0.1.0, =0.4.0, =0.5.5 Source cves: CVE-2025-27091 Source advisory: OSV:RUSTSEC-2025-0008...

lemmy_api (>=0.18.0-rc.4, <=0.18.0), lemmy_api_crud (>=0.18.0-rc.4, <=0.18.0) +3 more potentially affected by CVE-2025-25194 +1 more via activitypub_federation (0.4.7)

activitypubfederation CARGO version 0.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on activitypubfederation and may be impacted: - lemmyapi =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0 Source cves: CVE-2025-25194,...

@better-auth/cli (>=0.0.1, <=1.1.15), @vxrn/better-auth (>=1.1.368, <=1.1.416) +2 more potentially affected by CVE-2025-71404 via better-auth (>=0.4.9, <=1.1.15-beta.7)

better-auth NPM version =0.4.9, =0.0.1, =1.1.368, =1.1.0, =1.1.2 - better-auth-monitor 1.0.0 Source cves: CVE-2025-71404 Source advisory: OSV:GHSA-9X4V-XFQ5-M8X5...

bitcoin-harness (0.1.0), bitcoin_rpc_client (>=0.5.0, <=0.6.1) +82 more potentially affected by CVE-2025-24898 via openssl (>=0.10.7, <=0.10.68)

openssl CARGO version =0.10.7, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.0.3, =0.1.24, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2025-24898 Source advisory: OSV:GHSA-RPMJ-RPGJ-QMPM...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +870 more potentially affected by CVE-2025-24898 via openssl (>=0.2.18, <=0.10.68)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: CVE-2025-24898 Source advisory: OSV:RUSTSEC-2025-0004...

com.jordi9:krat-pack-testlib (>=1.0.0, <=1.2.1), io.github.shuigedeng:taotao-boot-demo (>=2025.02, <=2025.12) +7 more potentially affected by CVE-2024-57083 via org.webjars:redoc (>=2.0.0, <=2.5.1)

org.webjars:redoc MAVEN version =2.0.0, =1.0.0, =2025.02, =2025.02, =2025.02, =5.0.0-beta.2, =3.3.3, =v6.3.0.0, =4.41.4.0, =5.47.0.0 Source cves: CVE-2024-57083 Source advisory: SNYK:JAVA-ORGWEBJARS-8664934...

31g-form-parser (>=1.0.1, <=1.0.126), 5p-buyform (>=0.0.1, <=0.0.4) +5462 more potentially affected by CVE-2024-39338 via axios (>=1.3.2, <=1.7.3)

axios NPM version =1.3.2, =1.0.1, =0.0.1, =0.0.1, =0.1.2, =2.1.0, =3.0.0-beta.10, =0.2.1, =0.5.0, =0.0.74, =0.0.14, =2.5.4, =1.0.1, =1.14.5, =1.0.30, =1.0.36 and more Source cves: CVE-2024-39338 Source advisory: OSV:GHSA-8HC4-VH64-CXMJ...

@automatedtf/catalog (>=0.0.1, <=0.0.27), @automatedtf/reactor (>=0.0.1, <=0.0.9) +3 more potentially affected by CVE-2024-41655 via tf2-item-format (4.3.5)

tf2-item-format NPM version 4.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on tf2-item-format and may be impacted: - @automatedtf/catalog =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.25 - @vendortf/catalog 0.0.27 Source cves: CVE-2024-41655 Source advisory...

01.webpack-study (1.0.0), 0226 (1.0.0) +3320 more potentially affected by CVE-2024-6485 via bootstrap (>=3.1.1, <=3.4.1)

bootstrap NPM version =3.1.1, =0.1.0, =4.13.7-rc4, =3.0.1, =3.0.4, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =0.0.2, =0.3.6, =0.4.35 and more Source cves: CVE-2024-6485 Source advisory: OSV:GHSA-VXMC-5X29-H64V...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +1097 more potentially affected by CVE-2024-21501 via sanitize-html (>=2.1.0, <=2.12.0)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =3.0.0, =1.3.0, =0.2.0-a0, =1.0.0, =3.7.0, =0.2.47, =0.4.37, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.8.21 and more Source cves: CVE-2024-21501 Source advisory: OSV:GHSA-RM97-X556-Q36H...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +1097 more potentially affected by CVE-2024-21501 via sanitize-html (>=2.1.0, <=2.12.0)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =3.0.0, =1.3.0, =0.2.0-a0, =1.0.0, =3.7.0, =0.2.47, =0.4.37, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.8.21 and more Source cves: CVE-2024-21501 Source advisory: SNYK:JS-SANITIZEHTML-6256334...

@amplicode/addon-email-templates (>=0.0.1-snapshot.8, <=0.1.0-snapshot.1.6), @dankolz/news-flash (>=1.0.1, <=1.0.2) +10 more potentially affected by CVE-2024-24816 via ckeditor4 (>=4.14.0, <=4.22.1)

ckeditor4 NPM version =4.14.0, =0.0.1-snapshot.8, =1.0.1, =1.0.0, =1.0.5, =1.0.0, =2.10.93, =2.10.0, =0.0.0, =1.0.36, =1.0.6, =1.0.59 Source cves: CVE-2024-24816 Source advisory: OSV:GHSA-MW2C-VX6J-MG76...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2) +63 more potentially affected by CVE-2021-4435 via yarn (>=1.0.2, <=1.22.11)

yarn NPM version =1.0.2, =1.17.6-next.0, =1.0.2-6river, =0.0.9, =0.0.1, =1.6.0, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.4.0-next.7, =0.3.0-next.1, =0.3.0-next.1, =1.1.0-dev.2, =5.6.4, =3.1.264, =1.15.3, =1.15.5 and more Source cves: CVE-2021-4435 Source advisory: OSV:GHSA-MPWJ-FCR6-X34C...