@doist/ui-extensions-server (3.5.7), @fdm-monster/server (1.9.1) +29 more potentially affected by CVE-2025-65944 via @sentry/node-core (>=10.11.0, <=10.26.0)

@sentry/node-core NPM version =10.11.0, =0.0.22, =0.1.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.0.19, =10.11.0, =10.11.0, =10.11.0, =10.26.0 and more Source cves: CVE-2025-65944 Source advisory: SNYK:JS-SENTRYNODECORE-14105055...

@sentry/nuxt (>=10.11.0, <=10.26.0), @sentry/sveltekit (>=10.11.0, <=10.26.0) potentially affected by CVE-2025-65944 via @sentry/cloudflare (>=10.11.0, <=10.26.0)

@sentry/cloudflare NPM version =10.11.0, =10.11.0, =10.11.0, =10.26.0 Source cves: CVE-2025-65944 Source advisory: SNYK:JS-SENTRYCLOUDFLARE-14105052...

@everreal/react-charts (>=1.0.0, <=1.0.1), @everreal/web-analytics (>=0.0.3, <=0.0.12) +1 more potentially affected by unknown CVE via undefsafe-typed (1.0.2)

undefsafe-typed NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on undefsafe-typed and may be impacted: - @everreal/react-charts =1.0.0, =0.0.3, =1.1.17, =1.2.5 Source cves: unknown CVE Source advisory: GHSA-2XXV-JCWP-F6MP...

@appium/base-driver (>=10.0.0-rc.2, <=10.1.1), @breautek/storm (>=9.0.0, <=9.2.4) +77 more potentially affected by CVE-2025-13466 via body-parser (2.2.0)

body-parser NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on body-parser and may be impacted: - @appium/base-driver =10.0.0-rc.2, =9.0.0, =3.8.8, =1.114.0, =11.8.0, =3.4.0, =11.0.19, =0.1.0, =8.13.0-nightly.20250611115025, =4.0.1,...

@asyncapi/cli (>=1.4.0, <=2.16.7) potentially affected by unknown CVE via @asyncapi/studio (0.20.2)

@asyncapi/studio NPM version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/studio and may be impacted: - @asyncapi/cli =1.4.0, =2.16.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190863...

1shot (>=0.0.3, <=0.0.9), @4via6/relay (>=1.0.0, <=1.1.3) +221 more potentially affected by CVE-2025-64755 via @anthropic-ai/claude-code (>=0.2.14, <=2.0.27)

@anthropic-ai/claude-code NPM version =0.2.14, =0.0.3, =1.0.0, =0.1.18, =1.0.0, =0.4.0, =0.2.3, =0.0.1, =0.0.1, =0.6.0-rc34, =1.0.0-canary.ad5397a, =1.3.2 and more Source cves: CVE-2025-64755 Source advisory: MEND:CVE-2025-64755...

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.31.0-alpha, <=1.49.5-alpha) +10 more potentially affected by CVE-2025-64755 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.27)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.31.0-alpha, =0.5.2, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =0.10.2, =0.11.2, =0.13.24 Source cves: CVE-2025-64755 Source advisory: OSV:GHSA-7MV8-J34Q-VP7Q...

@bpa-solutions/assistant (>=13.5.0-dev, <=13.5.0), @mazaal-dev/piece-markdown-to-pdf (0.0.2) +2 more potentially affected by CVE-2025-65108 via md-to-pdf (>=5.0.1, <=5.2.4)

md-to-pdf NPM version =5.0.1, =13.5.0-dev, =0.11.1, =0.5.52, =0.5.74 Source cves: CVE-2025-65108 Source advisory: OSV:GHSA-547R-QMJM-8HVW...

@bpa-solutions/assistant (>=13.5.0-dev, <=13.5.0), @mazaal-dev/piece-markdown-to-pdf (0.0.2) +2 more potentially affected by CVE-2025-65108 via md-to-pdf (>=5.0.1, <=5.2.4)

md-to-pdf NPM version =5.0.1, =13.5.0-dev, =0.11.1, =0.5.52, =0.5.74 Source cves: CVE-2025-65108 Source advisory: SNYK:JS-MDTOPDF-14089788...

@avalabs/avalanche-module (>=0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, <=5.0.0), @avalabs/bitcoin-module (>=0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, <=5.0.0) +20 more potentially affected by CVE-2025-64767 via @hpke/core (>=1.2.5, <=1.7.4)

@hpke/core NPM version =1.2.5, =0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, =0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197,...

@avalabs/avalanche-module (>=0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, <=5.0.0), @avalabs/bitcoin-module (>=0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, <=5.0.0) +20 more potentially affected by CVE-2025-64767 via @hpke/core (>=1.2.5, <=1.7.4)

@hpke/core NPM version =1.2.5, =0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, =0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197,...

@dadigua/hyper-chat (>=1.2.3, <=1.2.16), @rse/closingcredits (>=1.0.1, <=1.0.5) +3 more potentially affected by CVE-2025-13437 via zx (>=8.0.0, <=8.1.0)

zx NPM version =8.0.0, =1.2.3, =1.0.1, =2.15.6, =2.15.6, =3.0.5, =3.0.10 Source cves: CVE-2025-13437 Source advisory: SNYK:JS-ZX-14089787...

@aurehxa/componentstest (>=1.0.0, <=1.0.1), @codesyntax/ionic-react-photo-viewer (>=1.0.0, <=1.7.0) +64 more potentially affected by CVE-2025-5092 via lightgallery (>=1.2.14, <=2.9.0)

lightgallery NPM version =1.2.14, =1.0.0, =1.0.0, =0.1.139, =2.9.6, =1.7.8, =1.0.183, =1.0.1, =0.0.1-alpha, =2.0.1, =1.0.0, =0.0.2, =0.0.1, =3.3.0, =3.7.0 and more Source cves: CVE-2025-5092 Source advisory: SNYK:JS-LIGHTGALLERY-14101882...

ai-sdk-provider-claude-code (>=0.2.0, <=1.0.0-beta.1), locadex (0.0.2-alpha.1) potentially affected by CVE-2025-65099 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.24)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =1.0.0-beta.1 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-65099 Source advisory: OSV:GHSA-5HHX-V7F6-X7GV...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +411 more potentially affected by CVE-2025-65019 via @astrojs/internal-helpers (>=0.0.0-markdoc-config-changes-20230626153541, <=0.7.4)

@astrojs/internal-helpers NPM version =0.0.0-markdoc-config-changes-20230626153541, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =0.0.17, =0.0.2, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.0-ast-20240419160649, =0.0.0-10745-20240410180016, =1.0.0-beta.3 and more Source cves:...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +34 more potentially affected by CVE-2025-64765 +1 more via astro (>=5.0.0-beta.5, <=5.15.6)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =0.5.0, =0.0.1, =0.1.0, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.28, =0.0.28, =0.0.40 and more Source cves: CVE-2025-64765, CVE-2025-66202 Source advisory: OSV:GHSA-GGXQ-HP9W-J794...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +34 more potentially affected by CVE-2025-64764 via astro (>=5.0.0-beta.5, <=5.15.6)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =0.5.0, =0.0.1, =0.1.0, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.28, =0.0.28, =0.0.40 and more Source cves: CVE-2025-64764 Source advisory: SNYK:JS-ASTRO-14059122...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +34 more potentially affected by CVE-2025-64764 via astro (>=5.0.0-beta.5, <=5.15.6)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =0.5.0, =0.0.1, =0.1.0, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.28, =0.0.28, =0.0.40 and more Source cves: CVE-2025-64764 Source advisory: OSV:GHSA-WRWG-2HG8-V723...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +27 more potentially affected by CVE-2025-64757 via astro (>=5.0.0-beta.5, <=5.14.1)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.0-dev-20250414184926, =1.13.2, =0.0.1, =0.0.1, =1.0.21, =1.0.22 - @vdart-code/web 1.19.0 and more Source cves: CVE-2025-64757 Source advisory: OSV:GHSA-X3H8-62X9-952G...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +397 more potentially affected by CVE-2025-64757 via @astrojs/internal-helpers (>=0.0.0-markdoc-config-changes-20230626153541, <=0.7.3)

@astrojs/internal-helpers NPM version =0.0.0-markdoc-config-changes-20230626153541, =0.0.1, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.0-ast-20240419160649, =0.0.0-10745-20240410180016, =6.2.0, =4.1.0, =4.3.6 and more Source cves:...