dagit (0.14.18rc5), dagster-airbyte (0.14.18rc5) +35 more potentially affected by CVE-2025-51481 via dagster (0.14.18rc5)

dagster PYPI version 0.14.18rc5 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.18rc5 - dagster-airbyte 0.14.18rc5 - dagster-airflow 0.14.18rc5 - dagster-aws 0.14.18rc5 - dagster-azure 0.14.18rc5 - dagster-cele...

@haxtheweb/create (>=0.1.3, <=11.0.2), @haxtheweb/open-apis (11.0.2) potentially affected by CVE-2025-54134 via @haxtheweb/haxcms-nodejs (>=0.0.13, <=10.0.6)

@haxtheweb/haxcms-nodejs NPM version =0.0.13, =0.1.3, =11.0.2 - @haxtheweb/open-apis 11.0.2 Source cves: CVE-2025-54134 Source advisory: MEND:CVE-2025-54134...

10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +4186 more potentially affected by CVE-2025-7783 via form-data (>=4.0.0, <=4.0.3)

form-data NPM version =4.0.0, =1.0.0, =1.2.0, =1.0.0, =0.1.0, =0.0.1, =5.0.0, =0.0.1, =1.0.1, =1.0.32, =1.0.32, =1.1.11 and more Source cves: CVE-2025-7783 Source advisory: OSV:GHSA-FJXV-7RQG-78G4...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @5ht/express (>=1.0.6, <=2.2.0) +625 more potentially affected by CVE-2025-7783 via form-data (>=3.0.0, <=3.0.3)

form-data NPM version =3.0.0, =1.17.6-next.0, =1.0.6, =1.0.0, =0.12.4, =1.1.3, =1.9.19, =1.1.0, =1.18.0, =2.13.1, =1.1.0, =10.1.0, =1.0.0, =1.9.2, =2.1.4 and more Source cves: CVE-2025-7783 Source advisory: OSV:GHSA-FJXV-7RQG-78G4...

ai.mindconnect:mc-mail-imap (0.8.4), app.tozzi:pec-parser (>=5.0.0, <=5.1.2) +2253 more potentially affected by CVE-2025-7962 via org.eclipse.angus:angus-mail (>=2.0.0, <=2.0.3)

org.eclipse.angus:angus-mail MAVEN version =2.0.0, =5.0.0, =1.0.1, =1.0.1-rc14, =1.1.16, =1.0.1-rc14, =1.1.17, =29.v7c3891a434c3, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =8.2.2 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-ORGECLIPSEANGUS-12239873...

africa.absa:inception-mail (>=1.0.0, <=1.2.0), africa.absa:inception-mail-api (>=1.0.0, <=1.2.0) +3541 more potentially affected by CVE-2025-7962 via com.sun.mail:jakarta.mail (>=1.6.3, <=1.6.7)

com.sun.mail:jakarta.mail MAVEN version =1.6.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0, =5.3.1, =1.2.2, =1.6.2, =1.6.3, =1.0.0, =0.0.9, =0.0.12 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-COMSUNMAIL-12028709...

app.tozzi.mail:pec-parser (4.0.0), app.tozzi:uudecoder (4.0.0) +1255 more potentially affected by CVE-2025-7962 via com.sun.mail:jakarta.mail (>=2.0.0, <=2.0.1)

com.sun.mail:jakarta.mail MAVEN version =2.0.0, =0.2.0, =0.2.0, =2.0.1, =2.0.0, =0.1, =0.4, =1.0.0, =2022.3.4.0, =1.0.0-jdk21, =1.0.0, =1.0.3 and more Source cves: CVE-2025-7962 Source advisory: GHSA-9342-92GG-6V29...

africa.absa:inception-mail (>=1.0.0, <=1.2.0), africa.absa:inception-mail-api (>=1.0.0, <=1.2.0) +3541 more potentially affected by CVE-2025-7962 via com.sun.mail:jakarta.mail (>=1.6.3, <=1.6.7)

com.sun.mail:jakarta.mail MAVEN version =1.6.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0, =5.3.1, =1.2.2, =1.6.2, =1.6.3, =1.0.0, =0.0.9, =0.0.12 and more Source cves: CVE-2025-7962 Source advisory: GHSA-9342-92GG-6V29...

com.blazebit:blaze-notify-channel-smtp (1.0.0-alpha6), com.blazebit:blaze-notify-server (1.0.0-alpha6) +21 more potentially affected by CVE-2025-7962 via org.eclipse.angus:smtp (>=2.0.0, <=2.0.3)

org.eclipse.angus:smtp MAVEN version =2.0.0, =2.0.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.7 and more Source cves: CVE-2025-7962 Source advisory: OSV:GHSA-9342-92GG-6V29...

app.tozzi.mail:pec-parser (4.0.0), app.tozzi:uudecoder (4.0.0) +1269 more potentially affected by CVE-2025-7962 via com.sun.mail:jakarta.mail (>=2.0.0-rc1, <=2.0.1)

com.sun.mail:jakarta.mail MAVEN version =2.0.0-rc1, =0.2.0, =0.2.0, =2.0.1, =2.0.0, =0.1, =0.4, =1.0.0, =2022.3.4.0, =1.0.0-jdk21, =1.0.0, =1.0.3 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-COMSUNMAIL-12028709...

com.blazebit:blaze-notify-channel-smtp (1.0.0-alpha6), com.blazebit:blaze-notify-server (1.0.0-alpha6) +21 more potentially affected by CVE-2025-7962 via org.eclipse.angus:smtp (>=1.0.0-m1, <=2.0.3)

org.eclipse.angus:smtp MAVEN version =1.0.0-m1, =1.0.0-m1, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.7 and more Source cves: CVE-2025-7962 Source advisory: MEND:CVE-2025-7962...

@4verburga/alpine-spanishplus (>=1.6.6, <=3.0.2), @4xeverburga/alpine-spanishplus (>=3.0.1, <=3.2.0) +143 more potentially affected by CVE-2025-54075 via @nuxtjs/mdc (>=0.1.6, <=0.17.0)

@nuxtjs/mdc NPM version =0.1.6, =1.6.6, =3.0.1, =0.0.1, =0.0.1, =0.1.1, =0.0.2, =1.0.7, =1.0.7, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.0.3, =0.10.6 - @copity/copity 0.0.3 and more Source cves: CVE-2025-54075 Source advisory: OSV:GHSA-CJ6R-RRR9-FG82...

@-xun/symbiote (>=3.7.0, <=4.11.4), @0x57/pierre (>=0.0.3, <=0.0.16) +888 more potentially affected by unknown CVE via @eslint/plugin-kit (>=0.1.0, <=0.2.8)

@eslint/plugin-kit NPM version =0.1.0, =3.7.0, =0.0.3, =1.1.44, =1.1.14, =0.0.1-alpha.3, =0.0.1, =10.0.0, =10.0.0, =8.3.0, =13.0.0, =2.6.0, =2.2.9, =0.0.2, =35.0.1, =38.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XFFM-G5W8-QVG7...

candid-extractor (>=0.1.0, <=0.1.2), deterministic-wasi-ctx (0.1.14) +22 more potentially affected by CVE-2025-53901 via wasmtime (>=10.0.2, <=12.0.2)

wasmtime CARGO version =10.0.2, =0.1.0, =0.5.0, =0.5.0, =0.18.0, =0.7.5, =0.1.0, =0.1.0, =10.0.0, =10.0.0, =10.0.0, =0.1.0, =0.1.2, =0.1.3 and more Source cves: CVE-2025-53901 Source advisory: OSV:GHSA-FM79-3F68-H2FC...

candid-extractor (>=0.1.0, <=0.1.2), deterministic-wasi-ctx (0.1.14) +22 more potentially affected by CVE-2025-53901 via wasmtime (>=10.0.2, <=12.0.2)

wasmtime CARGO version =10.0.2, =0.1.0, =0.5.0, =0.5.0, =0.18.0, =0.7.5, =0.1.0, =0.1.0, =10.0.0, =10.0.0, =10.0.0, =0.1.0, =0.1.2, =0.1.3 and more Source cves: CVE-2025-53901 Source advisory: OSV:RUSTSEC-2025-0046...

@1inch/delegating (2.0.0), @1inch/farming (4.0.0) +33 more potentially affected by CVE-2025-54070 via @openzeppelin/contracts (>=5.2.0, <=5.3.0)

@openzeppelin/contracts NPM version =5.2.0, =1.0.0-alpha.9, =0.1.0, =0.1.0, =0.0.4, =1.0.0, =0.1.0, =0.3.0, =0.5.3, =7.9.0-main3c5a2f8, =7.9.0-maine3c28f1, =7.9.0-main01f77d70, =7.9.0-mainc91b9b3, =8.0.9 and more Source cves: CVE-2025-54070 Source advisory: OSV:GHSA-9RCW-C2F9-2J55...

10by10-react-app (1.2.1), 192.168.0.172 (4.6.1) +13874 more potentially affected by CVE-2025-7339 via on-headers (>=1.0.0, <=1.0.2)

on-headers NPM version =1.0.0, =1.0.2, =1.0.0, =0.30.0, =0.2.0, =0.0.28, =4.11.0, =4.11.46 and more Source cves: CVE-2025-7339 Source advisory: OSV:GHSA-76C9-3JPH-RJ3Q...

org.webjars.npm:nestjs__platform-express (>=8.4.7, <=9.0.0-next.2) potentially affected by CVE-2025-7338 via org.webjars.npm:multer (1.4.4-lts.1)

org.webjars.npm:multer MAVEN version 1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2025-7338 Source advisory:...

02url-querystring-http (>=1.0.1, <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5, <=1.0.6) +10129 more potentially affected by CVE-2025-7338 via multer (>=1.4.4-lts.1, <=2.0.1)

multer NPM version =1.4.4-lts.1, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - 6e-alpha-backend-admin 1.0.0 - 7-segunda-preentrega 1.0.0 and more Source cves: CVE-2025-7338 Source advisory: GHSA-FJGF-RC76-4X9P...

02url-querystring-http (>=1.0.1, <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5, <=1.0.6) +10129 more potentially affected by CVE-2025-7338 via multer (>=1.4.4-lts.1, <=2.0.1)

multer NPM version =1.4.4-lts.1, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - 6e-alpha-backend-admin 1.0.0 - 7-segunda-preentrega 1.0.0 and more Source cves: CVE-2025-7338 Source advisory: OSV:GHSA-FJGF-RC76-4X9P...