feather (>=0.0.6, <=0.0.8) potentially affected by CVE-2024-6844 via flask-cors (1.1.2)

flask-cors PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - feather =0.0.6, =0.0.8 Source cves: CVE-2024-6844 Source advisory: OSV:GHSA-8VGW-P6QM-5GR7...

showcase (0.3.4) potentially affected by CVE-2024-6827 via gunicorn (19.7.0)

gunicorn PYPI version 19.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on gunicorn and may be impacted: - showcase 0.3.4 Source cves: CVE-2024-6827 Source advisory: OSV:GHSA-HC5X-X2VX-497G...

ag-llama-api (>=0.0.1, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.12) +298 more potentially affected by CVE-2024-6844 via flask-cors (3.0.10)

flask-cors PYPI version 3.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - ag-llama-api =0.0.1, =0.0.4, =0.0.13, =1.0.2, =2.5.0, =2.5.0, =0.1.0b2696.post0.dev1, =0.1.8, =0.0.1, =1.0.2, =1.0.1, =4.1.0, =3.4.0, =4.0....

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2024-10549 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2024-10549 Source advisory: SNYK:JAVA-AIH2O-9486742...

ai-agents (>=0.0.4, <=0.0.52), aiflows (>=0.1.5, <=1.1.1) +17 more potentially affected by CVE-2024-10188 via litellm (>=1.0.0, <=1.14.4)

litellm PYPI version =1.0.0, =0.0.4, =0.1.5, =2.5.8, =2.5.8, =2.7.3, =0.7.0, =2.2.9, =0.4.7, =0.1.22, =0.1.0, =1.9.1, =1.10.1 and more Source cves: CVE-2024-10188 Source advisory: SNYK:PYTHON-LITELLM-9511216...

dagster-mlflow (>=0.14.18rc5, <=0.17.21), sparkpipelineframework (1.0.18) potentially affected by CVE-2025-1474 via mlflow (1.26.0)

mlflow PYPI version 1.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.14.18rc5, =0.17.21 - sparkpipelineframework 1.0.18 Source cves: CVE-2025-1474 Source advisory: OSV:PYSEC-2025-17...

com.weicoder:seata (>=3.5.1, <=3.6.2), io.seata:seata-compressor-all (>=1.5.0, <=2.0.0) +7 more potentially affected by CVE-2024-54016 via io.seata:seata-compressor-zstd (>=1.5.0, <=2.0.0)

io.seata:seata-compressor-zstd MAVEN version =1.5.0, =3.5.1, =1.5.0, =1.5.0, =1.8.0, =1.5.0, =1.7.0, =1.8.0, =2.0.0 Source cves: CVE-2024-54016 Source advisory: SNYK:JAVA-IOSEATA-9521514...

ai.driftkit:driftkit-chat-assistant-framework (>=0.5.0, <=0.9.2), ai.driftkit:driftkit-clients-spring-ai-starter (>=0.6.0, <=0.9.2) +3025 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (>=6.3.0, <=6.3.7)

org.springframework.security:spring-security-crypto MAVEN version =6.3.0, =0.5.0, =0.6.0, =0.5.0, =0.8.4, =0.8.4, =0.9.1, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.9.2 and more Source cves: CVE-2025-22228 Source advisory: GHSA-MG83-C7GQ-RV5C...

com.github.ptomli.bedrock:bedrock-core (1.0.0), com.mnubo:sdk-android (>=1.0.1, <=1.3.0) +9 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (3.1.3.release)

org.springframework.security:spring-security-crypto MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - com.github.ptomli.bedrock:bedrock-core 1.0.0 -...

be.jidoka:jdk-keycloak-admin (>=2.0.0, <=2.2.0), br.com.devires.framework.boot:devires-framework-boot-audit (1.1.0) +1737 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (>=6.0.0, <=6.0.8)

org.springframework.security:spring-security-crypto MAVEN version =6.0.0, =2.0.0, =1.1.0, =1.1.0, =0.12.0, =0.12.0, =0.12.0, =0.13.0, =3.0.1.0, =3.0.4.0 and more Source cves: CVE-2025-22228 Source advisory: OSV:GHSA-MG83-C7GQ-RV5C...

ai.driftkit:driftkit-chat-assistant-framework (>=0.5.0, <=0.9.2), ai.driftkit:driftkit-clients-spring-ai-starter (>=0.6.0, <=0.9.2) +3025 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (>=6.3.0, <=6.3.7)

org.springframework.security:spring-security-crypto MAVEN version =6.3.0, =0.5.0, =0.6.0, =0.5.0, =0.8.4, =0.8.4, =0.9.1, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.9.2 and more Source cves: CVE-2025-22228 Source advisory: MEND:CVE-2025-22228...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @bloggrify/bento (>=0.9.1, <=1.0.0) +77 more potentially affected by CVE-2025-27415 via nuxt (>=3.0.0, <=3.15.4)

nuxt NPM version =3.0.0, =1.0.1, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =4.0.3, =0.1.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2025-27415 Source advisory: OSV:GHSA-JVHM-GJRH-3H93...

bespokelabs-curator (>=0.1.15rc1, <=0.1.15.post1), deepseek-coder (>=0.1.0a0, <=0.1.0) +21 more potentially affected by CVE-2025-29783 +1 more via vllm (>=0.6.6.post1, <=0.7.3)

vllm PYPI version =0.6.6.post1, =0.1.15rc1, =0.1.0a0, =0.0.2, =0.1.1, =0.0.2, =0.2.0, =2.0.0a2, =0.0.15, =0.0.7, =0.1.0, =0.0.7, =0.0.9 - orign 0.1.0 and more Source cves: CVE-2025-29783, CVE-2025-32444 Source advisory: OSV:GHSA-X3M8-F7G5-QHM7...

@fibus-digital/sluby (>=0.4.15, <=0.4.32-beta3), @jsprismarine/client (>=0.12.1-unstable-20241211144608, <=0.12.2-unstable-20250317172708) +2 more potentially affected by CVE-2025-30144 via fast-jwt (>=5.0.0, <=5.0.5)

fast-jwt NPM version =5.0.0, =0.4.15, =0.12.1-unstable-20241211144608, =0.12.1-unstable-20241211144608, =0.12.1-unstable-20241211144608, =0.12.2-unstable-20250317172708 Source cves: CVE-2025-30144 Source advisory: OSV:GHSA-GM45-Q3V2-6CF8...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +5842 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (>=6.0.0, <=6.3.7)

org.springframework.security:spring-security-crypto MAVEN version =6.0.0, =0.2.0, =0.5.0, =0.6.0, =0.5.0, =0.8.4, =0.8.4, =0.9.1, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.9.2 and more Source cves: CVE-2025-22228 Source advisory:...

org.webjars.bower:jspdf-autotable (>=2.0.2, <=2.1.0) potentially affected by CVE-2025-29907 via org.webjars.bower:jspdf (>=1.0.272, <=1.4.1)

org.webjars.bower:jspdf MAVEN version =1.0.272, =2.0.2, =2.1.0 Source cves: CVE-2025-29907 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-9480445...

org.webjars.bowergithub.simonbengtsson:jspdf-autotable (2.3.2) potentially affected by CVE-2025-29907 via org.webjars.bowergithub.mrrio:jspdf (1.4.1)

org.webjars.bowergithub.mrrio:jspdf MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.mrrio:jspdf and may be impacted: - org.webjars.bowergithub.simonbengtsson:jspdf-autotable 2.3.2 Source cves: CVE-2025-29907...

@firedesktop/react-portal-base (0.1.46), svgedit (7.3.5) potentially affected by CVE-2025-29907 via jspdf (3.0.0)

jspdf NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jspdf and may be impacted: - @firedesktop/react-portal-base 0.1.46 - svgedit 7.3.5 Source cves: CVE-2025-29907 Source advisory: OSV:GHSA-W532-JXJH-HJHJ...

qfast (1.0.1) potentially affected by CVE-2025-2000 via qiskit (0.16.1)

qiskit PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on qiskit and may be impacted: - qfast 1.0.1 Source cves: CVE-2025-2000 Source advisory: OSV:GHSA-6M2C-76FF-6VRF...

qwgc (0.0.3) potentially affected by CVE-2025-2000 via qiskit (0.15.0)

qiskit PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on qiskit and may be impacted: - qwgc 0.0.3 Source cves: CVE-2025-2000 Source advisory: OSV:GHSA-6M2C-76FF-6VRF...