@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.8, <=2.1.15)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-G9JG-W8VM-G96V...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.8, <=2.1.15)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-TRIX-14825036...

@vietmoney/react-native-smart-gallery (1.2.2) potentially affected by unknown CVE via @vietmoney/react-native-smart-page (1.1.2)

@vietmoney/react-native-smart-page NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-native-smart-page and may be impacted: - @vietmoney/react-native-smart-gallery 1.2.2 Source cves: unknown CVE Source advisory:...

muaddib-scanner (>=1.1.0, <=1.1.1) potentially affected by unknown CVE via @vietmoney/react-big-calendar (0.0.1-security)

@vietmoney/react-big-calendar NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-big-calendar and may be impacted: - muaddib-scanner =1.1.0, =1.1.1 Source cves: unknown CVE Source advisory:...

@vietmoney/react-native-smart-gallery (1.2.2) potentially affected by unknown CVE via @vietmoney/react-native-smart-page (1.1.2)

@vietmoney/react-native-smart-page NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-native-smart-page and may be impacted: - @vietmoney/react-native-smart-gallery 1.2.2 Source cves: unknown CVE Source advisory:...

@adamstankiewicz/openedx-frontend-platform (>=8.2.0, <=8.3.6), @altipla/directus-sdk-utils (0.7.2) +38 more potentially affected by CVE-2025-69202 via axios-cache-interceptor (>=1.0.0, <=1.8.3)

axios-cache-interceptor NPM version =1.0.0, =8.2.0, =1.6.3, =1.1.0, =15.0.0, =11.0.4, =1.0.2-test-cache.1, =8.1.2-alpha.1, =8.1.0, =8.5.2 - @fahami/directus-pkce 1.0.0 and more Source cves: CVE-2025-69202 Source advisory: OSV:GHSA-X4M5-4CW8-VC44...

@bechara/crux (>=6.0.0-alpha.1, <=6.6.2), @dismissible/nestjs-api (1.0.3-alpha.cdc64a4.0) +6 more potentially affected by CVE-2025-69211 via @nestjs/platform-fastify (>=11.0.1, <=11.1.10)

@nestjs/platform-fastify NPM version =11.0.1, =6.0.0-alpha.1, =1.0.11, =0.1.51, =1.0.36, =1.3.0, =5.0.0-beta.36, =0.6.1-dev, =1.1.69 Source cves: CVE-2025-69211 Source advisory: OSV:GHSA-8WPR-639P-CCRJ...

@adamstankiewicz/openedx-frontend-platform (>=8.2.0, <=8.3.6), @altipla/directus-sdk-utils (0.7.2) +38 more potentially affected by CVE-2025-69202 via axios-cache-interceptor (>=1.0.0, <=1.8.3)

axios-cache-interceptor NPM version =1.0.0, =8.2.0, =1.6.3, =1.1.0, =15.0.0, =11.0.4, =1.0.2-test-cache.1, =8.1.2-alpha.1, =8.1.0, =8.5.2 - @fahami/directus-pkce 1.0.0 and more Source cves: CVE-2025-69202 Source advisory: SNYK:JS-AXIOSCACHEINTERCEPTOR-14724265...

blyss-rs (0.2.0), lunarbase-pmm-math (>=0.1.0, <=0.2.6) +8 more potentially affected by unknown CVE via ruint (>=1.8.0, <=1.16.0)

ruint CARGO version =1.8.0, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-9FJQ-45QV-PCM7...

@abcpros/minimal-slp-wallet (>=3.0.1, <=3.0.4), @abcpros/minimal-xpi-slp-wallet (>=3.0.4, <=3.0.10) +162 more potentially affected by CVE-2025-13158 via apidoc-core (>=0.2.2, <=0.15.0)

apidoc-core NPM version =0.2.2, =3.0.1, =3.0.4, =0.2.2, =1.4.3, =1.0.2, =3.0.10, =1.1.7, =1.0.1, =1.0.5, =0.6.9, =1.0.4, =1.0.10 - @comodinx/api-doc 1.0.0 and more Source cves: CVE-2025-13158 Source advisory: SNYK:JS-APIDOCCORE-14723211...

3scale (>=0.3.2, <=0.6.2), 3scale-cm (0.5.1) +188 more potentially affected by CVE-2025-25341 via libxmljs (>=1.0.9, <=1.0.11)

libxmljs NPM version =1.0.9, =0.3.2, =0.3.2, =1.10.4, =1.8.1, =1.8.8, =1.0.0, =1.1.0, =0.1.0, =250.1010.0, =250.1018.0, =252.1021.0 and more Source cves: CVE-2025-25341 Source advisory: OSV:GHSA-JV72-59WQ-8RXM...

3loc (>=0.1.0, <=0.4.0), 3scale (>=0.2.0, <=0.6.2) +651 more potentially affected by CVE-2025-25341 via libxmljs (>=0.4.1, <=1.0.11)

libxmljs NPM version =0.4.1, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =1.0.1, =1.0.0, =4.5.1 and more Source cves: CVE-2025-25341 Source advisory: SNYK:JS-LIBXMLJS-14723210...

careful (>=0.1.0, <=0.2.0), dxh-test-package (1.1.2) +7 more potentially affected by CVE-2025-15095 via httpbin (0.10.4)

httpbin PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on httpbin and may be impacted: - careful =0.1.0, =0.1.4, =0.1.6, =0.3.2, =0.0.1, =0.7.1, =2.2.1, =2.7.5 Source cves: CVE-2025-15095 Source advisory: SNYK:PYTHON-HTTPBIN-14723357...

aquatic (0.2.0), aquatic_http (0.2.0) +105 more potentially affected by unknown CVE via bitmaps (3.2.1)

bitmaps CARGO version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on bitmaps and may be impacted: - aquatic 0.2.0 - aquatichttp 0.2.0 - aquatichttploadtest 0.2.0 - aquaticws 0.2.0 - aquaticwsloadtest 0.2.0 - armvcpu =0.5.1, =0.4.3, =0.6.0, =0.3....

aperture-shared (0.1.0), assemblylift-awslambda-host (>=0.2.0, <=0.3.0) +117 more potentially affected by unknown CVE via capnp (>=0.0.1, <=0.23.2)

capnp CARGO version =0.0.1, =0.2.0, =0.3.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.23.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0143...

@aafe/ai-test (>=0.0.1, <=0.0.2), @acabai/android (>=1.0.0, <=2.0.6) +941 more potentially affected by CVE-2025-68665 via @langchain/core (>=0.0.0, <=0.3.79)

@langchain/core NPM version =0.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6, =1.0.5, =0.1.2, =0.0.1, =1.2.27, =0.1.7, =3.0.0-beta.65.0, =8.0.0, =11.0.0 and more Source cves: CVE-2025-68665 Source advisory: SNYK:JS-LANGCHAINCORE-14563113...

@atom8n/ai-workflow-builder (>=1.2.1, <=1.5.8), @atom8n/backend-test-utils (>=1.2.2, <=1.5.8) +39 more potentially affected by CVE-2025-68665 via @langchain/core (>=1.0.1, <=1.1.7)

@langchain/core NPM version =1.0.1, =1.2.1, =1.2.2, =1.2.2, =2.2.2, =2.2.2, =2.2.2, =2.1.9, =2.1.0, =2.1.0, =1.0.11, =2.1.0, =1.0.1, =2.1.0, =1.0.1, =2.1.0, =2.1.36 and more Source cves: CVE-2025-68665 Source advisory: SNYK:JS-LANGCHAINCORE-14563113...

0token (>=0.1.0, <=0.4.0), 3-04-2025-ttm (0.1.0) +12410 more potentially affected by CVE-2025-14927 via transformers (>=0.1.0, <=5.16.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.5, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.6 and more Source cves: CVE-2025-14927 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564366...

aana (>=0.2.1, <=0.2.2), abgrouponline (>=1.0.0, <=1.0.2) +563 more potentially affected by CVE-2025-14922 via diffusers (>=0.2.4, <=0.40.0)

diffusers PYPI version =0.2.4, =0.2.1, =1.0.0, =0.1.1, =0.2.1, =20260210.0.0, =0.2.14, =0.1.2, =0.0.1, =0.0.3, =0.10.6, =0.0.1, =0.0.1, =1.8.20, =1.19.0 and more Source cves: CVE-2025-14922 Source advisory: SNYK:PYTHON-DIFFUSERS-14567485...

0token (>=0.1.0, <=0.4.0), 3-04-2025-ttm (0.1.0) +12410 more potentially affected by CVE-2025-14928 via transformers (>=0.1.0, <=5.16.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.5, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.6 and more Source cves: CVE-2025-14928 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564364...