@iflow-mcp/alibabacloud-dataworks-mcp-server (1.0.43), @mseep/alibabacloud-dataworks-mcp-server (1.0.36) +1 more potentially affected by CVE-2025-53109 via @modelcontextprotocol/server-filesystem (2025.3.28)

@modelcontextprotocol/server-filesystem NPM version 2025.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-filesystem and may be impacted: - @iflow-mcp/alibabacloud-dataworks-mcp-server 1.0.43 -...

@kakashi-ventures-accelerator/catalyst-cli (0.1.0), @mew-protocol/mew (>=0.5.0, <=0.11.0) +1 more potentially affected by CVE-2025-53109 via @modelcontextprotocol/server-filesystem (0.6.2)

@modelcontextprotocol/server-filesystem NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-filesystem and may be impacted: - @kakashi-ventures-accelerator/catalyst-cli 0.1.0 - @mew-protocol/mew =0.5.0, =0.11....

@kumologica/sdk (>=3.6.0-alpha10, <=4.0.1), niconizer (>=2.0.131, <=2.0.133) +1 more potentially affected by CVE-2024-46993 via electron (>=30.0.0, <=30.0.2)

electron NPM version =30.0.0, =3.6.0-alpha10, =2.0.131, =0.1.1, =0.1.3 Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...

@codeceptjs/ui (0.7.7), @epicdm/flowstate-shell (>=1.0.1, <=1.0.8) +7 more potentially affected by CVE-2024-46993 via electron (>=28.0.0, <=28.2.3)

electron NPM version =28.0.0, =1.0.1, =9.2.0, =2.0.119, =0.62.0, =0.79.19 - yt-play-cli 0.14.0 Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...

@finsemble/finsemble-core (>=8.11.0-beta.1, <=10.0.0-iocd-6), @finsemble/finsemble-electron-adapter (>=8.11.0-beta.1, <=10.0.0-iocd-6) +7 more potentially affected by CVE-2024-46993 via electron (>=29.0.1, <=29.3.1)

electron NPM version =29.0.1, =8.11.0-beta.1, =8.11.0-beta.1, =0.0.168-dev, =0.0.40, =2.0.125, =2024.4.146, =6.10.4, =10.0.53 Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...

@devsoutinho/alfred-currency-converter (>=2.0.0, <=2.1.1), @felixcatto/ui (>=0.0.14, <=0.0.32) +13 more potentially affected by CVE-2025-45143 via string-math (1.2.2)

string-math NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on string-math and may be impacted: - @devsoutinho/alfred-currency-converter =2.0.0, =0.0.14, =0.4.0-beta.2, =1.5.12, =0.1.47, =0.0.32, =2.0.0, =4.0.0, =1.0.0, =1.2.0, =1.0.8,...

@ascua/electron (>=0.4.2, <=0.4.6), @kumologica/sdk (>=3.6.0-alpha10, <=4.0.1) +2 more potentially affected by CVE-2024-46992 via electron (>=30.0.0, <=30.0.3)

electron NPM version =30.0.0, =0.4.2, =3.6.0-alpha10, =2.0.131, =0.1.1, =0.1.3 Source cves: CVE-2024-46992 Source advisory: OSV:GHSA-XW5Q-G62X-2QJC...

@akhmetovdev/ledger-connector (>=1.1.0, <=1.3.4), @ardenthq/sdk-btc (>=1.0.0, <=1.3.1) +184 more potentially affected by CVE-2024-49365 via tiny-secp256k1 (>=1.0.0, <=1.1.6)

tiny-secp256k1 NPM version =1.0.0, =1.1.0, =1.0.0, =0.0.0-CP-8940-20240801175729, =0.20.0-alpha.10, =0.0.0-CP-8940-20240801175729, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =0.0.0-CP-8940-20240801175729, =0.0.0-CP-9420-20250129154656, =0.0.0-CP-9420-20250129154656...

@akhmetovdev/ledger-connector (>=1.1.0, <=1.3.4), @ardenthq/sdk-btc (>=1.0.0, <=1.3.1) +184 more potentially affected by CVE-2024-49364 via tiny-secp256k1 (>=1.0.0, <=1.1.6)

tiny-secp256k1 NPM version =1.0.0, =1.1.0, =1.0.0, =0.0.0-CP-8940-20240801175729, =0.20.0-alpha.10, =0.0.0-CP-8940-20240801175729, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =0.0.0-CP-8940-20240801175729, =0.0.0-CP-9420-20250129154656, =0.0.0-CP-9420-20250129154656...

com.phasmidsoftware:majabigwaduce_3 (>=1.0.6, <=2.0.1) potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_3 (2.8.8)

com.typesafe.akka:akka-cluster-metrics3 MAVEN version 2.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-cluster-metrics3 and may be impacted: - com.phasmidsoftware:majabigwaduce3 =1.0.6, =2.0.1 Source cves: CVE-2025-53393...

com.ing.baker:bakery-interaction-k8s-interaction-manager_2.13 (>=3.6.2, <=5.0.0), com.ing.baker:bakery-state-k8s_2.13 (3.5.0) +8 more potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_2.13 (>=2.6.11, <=2.9.0-m2)

com.typesafe.akka:akka-cluster-metrics2.13 MAVEN version =2.6.11, =3.6.2, =3.5.0, =22.10.0-m1, =0.1.6, =0.1.0-beta2, =2.9.1, =3.30.0, =3.31.0 Source cves: CVE-2025-53393 Source advisory: SNYK:JAVA-COMTYPESAFEAKKA-10567746...

org.infinispan:infinispan-persistence-cli (8.2.10.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (8.2.10.final)

org.infinispan:infinispan-cli-client MAVEN version 8.2.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 8.2.10.final Source cves: CVE-2025-573...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +86 more potentially affected by CVE-2025-6624 via snyk (>=1.1.1, <=1.1297.1)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =1.6.0, =1.1.0, =1.0.1, =1.0.2, =1.0.16 and more Source cves: CVE-2025-6624 Source advisory: OSV:GHSA-6HWC-9H8R-3VMF...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +86 more potentially affected by CVE-2025-6624 via snyk (>=1.1.1, <=1.1297.1)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =1.6.0, =1.1.0, =1.0.1, =1.0.2, =1.0.16 and more Source cves: CVE-2025-6624 Source advisory: SNYK:JS-SNYK-10497607...

org.webjars.npm:ethereum-cryptography (0.1.3), org.webjars.npm:parse-asn1 (>=5.0.0, <=5.1.6) potentially affected by CVE-2025-6547 via org.webjars.npm:pbkdf2 (3.1.2)

org.webjars.npm:pbkdf2 MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:pbkdf2 and may be impacted: - org.webjars.npm:ethereum-cryptography 0.1.3 - org.webjars.npm:parse-asn1 =5.0.0, =5.1.6 Source cves: CVE-2025-6547...

@0cfg/utils-node (>=0.1.2, <=0.1.8), @b0ase/path402-api (4.0.0-alpha.1) +262 more potentially affected by CVE-2025-6547 via pbkdf2 (>=3.0.4, <=3.1.2)

pbkdf2 NPM version =3.0.4, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.38.0, =1.45.0, =1.1.14, =1.20.2, =1.3.13, =3.8.1, =4.26.0 and more Source cves: CVE-2025-6547 Source advisory: OSV:GHSA-V62P-RQ8G-8H59...

@0cfg/utils-node (>=0.1.2, <=0.1.8), @b0ase/path402-api (4.0.0-alpha.1) +228 more potentially affected by CVE-2025-6545 via pbkdf2 (>=3.0.12, <=3.1.2)

pbkdf2 NPM version =3.0.12, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.38.0, =1.45.0, =1.1.14, =1.20.2, =1.3.13, =3.8.1, =1.4.1, =1.34.4 and more Source cves: CVE-2025-6545 Source advisory: OSV:GHSA-H7CP-R72F-JXH6...

org.webjars.npm:ethereum-cryptography (0.1.3), org.webjars.npm:parse-asn1 (>=5.0.0, <=5.1.6) potentially affected by CVE-2025-6545 via org.webjars.npm:pbkdf2 (3.1.2)

org.webjars.npm:pbkdf2 MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:pbkdf2 and may be impacted: - org.webjars.npm:ethereum-cryptography 0.1.3 - org.webjars.npm:parse-asn1 =5.0.0, =5.1.6 Source cves: CVE-2025-6545...

@4via6/relay (>=1.0.0, <=1.1.3), @axonpush/wizard (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2025-52882 via @anthropic-ai/claude-code (>=0.2.126, <=1.0.8)

@anthropic-ai/claude-code NPM version =0.2.126, =1.0.0, =0.0.1, =0.0.4 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-52882 Source advisory: OSV:GHSA-9F65-56V6-GXW7...

org.webjars.bowergithub.advanced-rest-client:code-mirror (2.0.1), org.webjars.bowergithub.angular-ui:ui-codemirror (>=0.1.6, <=0.3.0) potentially affected by CVE-2025-6493 via org.webjars.bowergithub.components:codemirror (>=4.13.0, <=5.65.12)

org.webjars.bowergithub.components:codemirror MAVEN version =4.13.0, =0.1.6, =0.3.0 Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARSBOWERGITHUBCOMPONENTS-10494093...