aas-middleware (>=0.1.0 <=0.2.6), agency-skej-framework (>=0.0.1 <=0.0.7) +89 more potentially affected by unknown CVE via datamodel-code-generator (>=0.10.3 <=0.30.2)

datamodel-code-generator PYPI version =0.10.3, =0.1.0, =0.0.1, =0.2.5, =0.1.0a0, =0.0.0, =0.1.6, =0.1.4, =0.1.0, =0.1.0, =1.0.0, =0.10.2, =0.1.0, =2024.12.13.post0, =2024.12.13.post1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DATAMODELCODEGENERATOR-14829603...

@burger-editor/blocks (>=4.0.0-alpha.1 <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1 <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.10 <=2.1.15)

trix NPM version =2.0.10, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-TRIX-14825036...

@vietmoney/react-native-smart-gallery (=1.2.2) potentially affected by unknown CVE via @vietmoney/react-native-smart-page (=1.1.2)

@vietmoney/react-native-smart-page NPM version =1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-native-smart-page and may be impacted: - @vietmoney/react-native-smart-gallery =1.2.2 Source cves: unknown CVE Source advisory:...

muaddib-scanner (>=1.1.0 <=1.1.1) potentially affected by unknown CVE via @vietmoney/react-big-calendar (=0.0.1-security)

@vietmoney/react-big-calendar NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-big-calendar and may be impacted: - muaddib-scanner =1.1.0, =1.1.1 Source cves: unknown CVE Source advisory:...

@vietmoney/react-native-smart-gallery (=1.2.2) potentially affected by unknown CVE via @vietmoney/react-native-smart-page (=1.1.2)

@vietmoney/react-native-smart-page NPM version =1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-native-smart-page and may be impacted: - @vietmoney/react-native-smart-gallery =1.2.2 Source cves: unknown CVE Source advisory:...

1k-utils (>=2.1.0 <=2.2.3), 22ndtech-angular-lib (>=0.0.7 <=0.0.57) +8828 more potentially affected by CVE-2025-15284 via qs (>=6.0.0 <=6.14.0)

qs NPM version =6.0.0, =2.1.0, =0.0.7, =0.2.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.7.1-next.1, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.2 and more Source cves: CVE-2025-15284 Source advisory: SNYK:JS-QS-14724253...

3loc (>=0.1.0 <=0.4.0), 3scale (>=0.2.0 <=0.6.2) +657 more potentially affected by CVE-2025-25341 via libxmljs (>=0.10.0 <=1.0.11)

libxmljs NPM version =0.10.0, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =0.1.0, =1.0.1, =1.2.0 and more Source cves: CVE-2025-25341 Source advisory: OSV:GHSA-JV72-59WQ-8RXM...

careful (>=0.1.0 <=0.2.0), dxh-test-package (=1.1.2) +7 more potentially affected by CVE-2025-15095 via httpbin (=0.10.2)

httpbin PYPI version =0.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on httpbin and may be impacted: - careful =0.1.0, =0.1.4, =0.1.6, =0.3.2, =0.0.1, =0.7.1, =2.2.1, =2.7.5 Source cves: CVE-2025-15095 Source advisory: SNYK:PYTHON-HTTPBIN-14723357...

@acabai/android (>=1.0.0 <=2.0.6), @acabai/core (>=1.0.0 <=1.0.6) +926 more potentially affected by CVE-2025-68665 via @langchain/core (>=0.0.0 <=0.3.8)

@langchain/core NPM version =0.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6, =1.0.5, =0.1.2, =0.0.1, =1.2.27, =0.1.7, =3.0.0-beta.65.0, =8.0.0, =10.0.0, =11.0.0 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...

accessiqlue (=2025.12.21154255), agent-builder (>=0.0.2 <=0.1.7) +335 more potentially affected by CVE-2025-68664 via langchain-core (>=1.0.0 <=1.2.4)

langchain-core PYPI version =1.0.0, =0.0.2, =0.1.0, =0.1.0, =0.1.1 - ai-benchmark-analyzer =2025.12.21193050 - ai-claim-essence =2025.12.20202921 - ai-design-insights =2025.12.21145447 - ai-mysql-translator =2025.12.21101721 - ai-reliability-analyzer =2025.12.21171415 - ai-risk-extractor...

@fedify/botkit (>=0.3.0-dev.125 <=0.3.0-dev.131) potentially affected by CVE-2025-68475 via @fedify/fedify (=1.8.1-dev.1262)

@fedify/fedify NPM version =1.8.1-dev.1262 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.3.0-dev.125, =0.3.0-dev.131 Source cves: CVE-2025-68475 Source advisory: OSV:GHSA-RCHF-XWX2-HM93...

@fedify/botkit (>=0.3.0-dev.125 <=0.3.0-dev.131) potentially affected by CVE-2025-68475 via @fedify/fedify (=1.8.1-dev.1262)

@fedify/fedify NPM version =1.8.1-dev.1262 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.3.0-dev.125, =0.3.0-dev.131 Source cves: CVE-2025-68475 Source advisory: SNYK:JS-FEDIFYFEDIFY-14552161...

a-mailx (=0.1.0), acapy-agent (>=1.1.0 <=1.2.7rc0) +503 more potentially affected by CVE-2025-68480 via marshmallow (>=3.0.0rc1 <=3.26.1)

marshmallow PYPI version =3.0.0rc1, =1.1.0, =0.5.1, =4.8.2, =0.1.3, =0.1.31, =0.0.2, =0.0.7, =0.0.5, =0.0.5, =0.0.6, =0.4.2 - aicodebot =0.2.6 - aider-chat =0.43.0 - aiohttp-boilerplate =0.2.6 and more Source cves: CVE-2025-68480 Source advisory: SNYK:PYTHON-MARSHMALLOW-14550833...

@kimio/n8n-nodes-litellm (>=1.0.2 <=1.0.3), @klardaten/n8n-nodes-datevconnect (>=1.0.1 <=1.0.2) +29 more potentially affected by CVE-2025-68613 via n8n-workflow (>=1.0.0 <=1.118.0)

n8n-workflow NPM version =1.0.0, =1.0.2, =1.0.1, =0.13.0, =0.37.0, =0.6.0, =0.14.0, =1.7.0, =1.6.0, =1.10.0, =1.39.0, =1.1.7, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2025-68613 Source advisory: SNYK:JS-N8NWORKFLOW-14545463...

@tutao/tutanota-crypto (>=275.250320.0 <=314.251030.0) potentially affected by unknown CVE via @tutao/tutanota-utils (>=275.250320.0 <=314.251030.0)

@tutao/tutanota-utils NPM version =275.250320.0, =275.250320.0, =314.251030.0 Source cves: unknown CVE Source advisory: OSV:GHSA-24V3-254G-JV85...

@tutao/tutanota-crypto (>=314.251028.1 <=314.251030.0) potentially affected by unknown CVE via @tutao/tutanota-utils (>=314.251028.1 <=314.251030.0)

@tutao/tutanota-utils NPM version =314.251028.1, =314.251028.1, =314.251030.0 Source cves: unknown CVE Source advisory: SNYK:JS-TUTAOTUTANOTAUTILS-14545442...

org.apache.nifi:nifi-asana-processors-nar (>=1.20.0 <=2.6.0) potentially affected by CVE-2025-66524 via org.apache.nifi:nifi-asana-processors (>=1.20.0 <=2.6.0)

org.apache.nifi:nifi-asana-processors MAVEN version =1.20.0, =1.20.0, =2.6.0 Source cves: CVE-2025-66524 Source advisory: SNYK:JAVA-ORGAPACHENIFI-14545438...

org.apache.nifi:nifi-asana-processors-nar (>=1.20.0 <=2.6.0) potentially affected by CVE-2025-66524 via org.apache.nifi:nifi-asana-processors (>=1.20.0 <=2.6.0)

org.apache.nifi:nifi-asana-processors MAVEN version =1.20.0, =1.20.0, =2.6.0 Source cves: CVE-2025-66524 Source advisory: OSV:GHSA-V4P2-2W39-MHRJ...

com.aconex.scrutineer:scrutineer (>=6.8.13-1 <=7.9.3), com.bbossgroups.plugins:bboss-elasticsearch (>=5.0.3.7.4 <=6.2.0) +21 more potentially affected by CVE-2025-68390 via org.elasticsearch.plugin:x-pack-core (>=6.8.11 <=7.9.3)

org.elasticsearch.plugin:x-pack-core MAVEN version =6.8.11, =6.8.13-1, =5.0.3.7.4, =5.0.3.6, =5.1.1, =5.1.1, =0.3.11, =0.3.11, =2.0.0, =3.3.0, =6.2.2.0, =1.0, =1.2.0, =1.6.1 and more Source cves: CVE-2025-68390 Source advisory: OSV:GHSA-GPHJ-4H6P-37XQ...

a-mailx (=0.1.0), abracadabra (>=0.0.0 <=0.0.7) +354 more potentially affected by CVE-2025-53000 via nbconvert (>=4.2.0 <=7.16.6)

nbconvert PYPI version =4.2.0, =0.0.0, =0.3.0, =1.0.0, =1.3.4, =0.9.5, =0.1.0, =0.18.3, =1.0.0, =0.1.1, =1.0.1, =1.0.1, =1.0.1, =1.0.14 and more Source cves: CVE-2025-53000 Source advisory: OSV:GHSA-XM59-RQC7-HHVF...