@all-star/base (>=0.17.0, <=0.18.2), @all-star/react (>=0.17.0, <=0.18.2) +163 more potentially affected by CVE-2025-30359 via webpack-dev-server (>=5.0.0, <=5.2.0)

webpack-dev-server NPM version =5.0.0, =0.17.0, =0.17.0, =0.17.0, =18.0.0-next.0, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2-develop-1171, =0.4.0, =0.1.15, =0.0.2, =0.0.2, =0.1.3 and more Source cves: CVE-2025-30359 Source advisory: OSV:GHSA-4V9V-HFQ4-RM2V...

net.aequologica.neo:geppaequo-tags (>=0.5.3, <=0.6.0), net.aequologica.neo:geppaequo-web (>=0.5.3, <=0.6.0) +4 more potentially affected by CVE-2025-2336 via org.webjars.npm:angular-sanitize (>=1.5.0-beta.0, <=1.8.3)

org.webjars.npm:angular-sanitize MAVEN version =1.5.0-beta.0, =0.5.3, =0.5.3, =0.6.0 - org.webjars.npm:angular-auto-complete 1.7.4 - org.webjars.npm:angular-material-calendar 0.2.14 - org.webjars.npm:angular-schema-form 0.8.13 - org.webjars.npm:github-com-showdownjs-ng-showdown 1.1.0 Source cves:...

org.webjars:angular-markdown-directive (0.3.0) potentially affected by CVE-2025-2336 via org.webjars:angular-sanitize (1.2.16)

org.webjars:angular-sanitize MAVEN version 1.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:angular-sanitize and may be impacted: - org.webjars:angular-markdown-directive 0.3.0 Source cves: CVE-2025-2336 Source advisory:...

40au-isteven-angular-multiselect (4.0.0), @0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5) +500 more potentially affected by CVE-2025-2336 via angular-sanitize (>=1.3.11, <=1.8.3)

angular-sanitize NPM version =1.3.11, =4.13.7-rc4, =0.0.1, =0.0.1, =0.1.0, =2.0.0, =0.3.2, =0.2.7, =1.0.0, =1.0.0, =0.2.1, =0.0.1, =1.0.0, =3.0.2, =4.16.5 and more Source cves: CVE-2025-2336 Source advisory: OSV:GHSA-4P4W-6HG8-63WX...

com.github.grantlittle:bdd-reporting-server (>=0.1.5, <=0.1.7), com.github.grantlittle:bdd-reporting-service (0.1.9) +59 more potentially affected by CVE-2025-2336 via org.webjars.bower:angular-sanitize (>=1.2.29, <=1.8.2)

org.webjars.bower:angular-sanitize MAVEN version =1.2.29, =0.1.5, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1 and more Source cves: CVE-2025-2336 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-10337226...

@mwater/visualization (6.0.0), azharimm-ui (>=1.0.0, <=1.0.2) +2 more potentially affected by CVE-2025-49223 via billboard.js (>=3.1.5, <=3.14.0)

billboard.js NPM version =3.1.5, =1.0.0, =2.0.180, =2.4.42 - vuero 2.2.0 Source cves: CVE-2025-49223 Source advisory: OSV:GHSA-65P9-J6PG-72HJ...

com.astamuse:asta4d-sample (>=1.0-b1, <=1.0-b2), com.astamuse:asta4d-spring (1.0-b1) +147 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.0.2.final)

org.hibernate:hibernate-validator MAVEN version 5.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.astamuse:asta4d-sample =1.0-b1, =1.0-b1, =0.2.0-rc1, =1.0.1006, =0.10.0, =0.8, =0.9...

org.webjars.npm:nestjs__platform-express (>=8.4.7, <=9.0.0-next.2) potentially affected by CVE-2025-48997 via org.webjars.npm:multer (1.4.4-lts.1)

org.webjars.npm:multer MAVEN version 1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2025-48997 Source advisory:...

007putra-my-bot (1.1.1), 10bis-shufersal-automation (1.0.0) +4583 more potentially affected by CVE-2025-48387 via tar-fs (>=2.0.0, <=2.1.2)

tar-fs NPM version =2.0.0, =0.2.0, =1.0.0, =1.0.0, =0.107.10, =1.19.19, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2025-48387 Source advisory: OSV:GHSA-8CJ5-5RVV-WF4V...

0wcc9yywcywy (1.0.0), 0wu8yw8by8cw (1.0.0) +2409 more potentially affected by CVE-2025-48387 via tar-fs (>=3.0.2, <=3.0.8)

tar-fs NPM version =3.0.2, =0.0.1, =2.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-48387 Source advisory: OSV:GHSA-8CJ5-5RVV-WF4V...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +67 more potentially affected by CVE-2025-41235 via org.springframework.cloud:spring-cloud-gateway-server (>=4.1.0, <=4.1.7)

org.springframework.cloud:spring-cloud-gateway-server MAVEN version =4.1.0, =0.2.0, =1.0.0, =1.0.0, =2024.1.0.0, =jdk17-0.0.1, =15.0-release, =1.1.0, =0.11.0, =4.2.3, =1.3.0, =0.10.2, =0.12.8 and more Source cves: CVE-2025-41235 Source advisory: OSV:GHSA-6J2Q-C73V-97C5https://vulners.com/osv/OSV...

libreassist (0.0.1), virny (>=0.4.0, <=0.5.0) potentially affected by CVE-2025-48889 via gradio (4.10.0)

gradio PYPI version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - libreassist 0.0.1 - virny =0.4.0, =0.5.0 Source cves: CVE-2025-48889 Source advisory: OSV:GHSA-8JW3-6X8J-V96G...

depthflow (>=0.5.0, <=0.6.0) potentially affected by CVE-2025-48889 via gradio (4.22.0)

gradio PYPI version 4.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - depthflow =0.5.0, =0.6.0 Source cves: CVE-2025-48889 Source advisory: OSV:GHSA-8JW3-6X8J-V96G...

yolov2keras (>=0.0.2, <=0.0.6) potentially affected by CVE-2025-48889 via gradio (3.45.2)

gradio PYPI version 3.45.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - yolov2keras =0.0.2, =0.0.6 Source cves: CVE-2025-48889 Source advisory: OSV:GHSA-8JW3-6X8J-V96G...

org.onosproject:onos-drivers-arista (>=1.7.0, <=1.8.9), org.onosproject:onos-drivers-ciena (>=1.7.0, <=1.8.9) +13 more potentially affected by CVE-2023-41591 via org.onosproject:onos-core-net (>=1.7.0, <=2.5.7-rc2)

org.onosproject:onos-core-net MAVEN version =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.8.0, =1.7.1, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =3.0.0, =3.0.0, =3.0.0, =4.0.0 Source cves: CVE-2023-41591 Source advisory: SNYK:JAVA-ORGONOSPROJECT-10658543...

arbor-ai (>=0.2.2, <=0.2.4), axolotl-plugin-atropos (0.0.2) +16 more potentially affected by CVE-2025-48943 via vllm (>=0.8.3, <=0.8.5.post1)

vllm PYPI version =0.8.3, =0.2.2, =0.1.21, =0.1.10, =0.1.1, =0.1.2, =0.1.0, =0.2.2, =0.1.1, =0.3.1, =0.3.11.post3, =0.0.1, =1.0.0, =1.1.0 - trinity-rft 0.1.1 and more Source cves: CVE-2025-48943 Source advisory: GHSA-9HCF-V7M4-6M2J...

com.github.hazendaz:displaytag (>=2.8.0, <=3.3.0), com.github.hazendaz:displaytag-examples (>=2.8.0, <=3.3.0) +8 more potentially affected by CVE-2025-48734 via org.apache.commons:commons-beanutils2 (2.0.0-m1)

org.apache.commons:commons-beanutils2 MAVEN version 2.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.commons:commons-beanutils2 and may be impacted: - com.github.hazendaz:displaytag =2.8.0, =2.8.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0,...

acegisecurity:acegi-security-domain (0.9.0), ae.teletronics.nlp:entityextraction (1.3) +42465 more potentially affected by CVE-2025-48734 via commons-beanutils:commons-beanutils (>=1.0, <=1.10.1)

commons-beanutils:commons-beanutils MAVEN version =1.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.2.8 and more Source cves: CVE-2025-48734 Source advisory: OSV:GHSA-WXR5-93PH-8WR9...

@acedempire/piece-supabase-v2 (>=0.0.7, <=0.0.10), @activeboxes/piece-supabase (0.0.7) +77 more potentially affected by CVE-2025-48370 via @supabase/auth-js (>=2.58.1-canary.0, <=2.69.1)

@supabase/auth-js NPM version =2.58.1-canary.0, =0.0.7, =0.0.7, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.1, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.3 and more Source cves: CVE-2025-48370 Source...

@env-hopper/backend-core (>=2.0.1-alpha-20260224145405, <=3.0.0-alpha-20260929191308), @env-hopper/frontend-core (>=2.0.1-alpha, <=3.0.0-alpha-20260929191308) +4 more potentially affected by CVE-2025-48054 via radashi (12.5.0-beta.6d5c035)

radashi NPM version 12.5.0-beta.6d5c035 is affected by a known vulnerability. The following packages have a transitive dependency on radashi and may be impacted: - @env-hopper/backend-core =2.0.1-alpha-20260224145405, =2.0.1-alpha, =2.0.1-alpha-20260224145405, =0.0.1, =0.0.1, =0.0.1,...