@1771technologies/oneplay (>=0.0.1, <=0.0.6), @a11ywatch/pagemind (>=0.9.31, <=0.9.34) +653 more potentially affected by CVE-2025-59288 via playwright-core (>=1.0.0, <=1.55.0-beta-1758616447000)

playwright-core NPM version =1.0.0, =0.0.1, =0.9.31, =0.1.8, =0.0.18-patch.0, =0.0.33, =0.0.1, =0.1.1, =0.1.1, =0.0.10-a, =0.0.1, =0.1.466, =0.2.0, =0.0.1-beta, =0.1.4 and more Source cves: CVE-2025-59288 Source advisory: SNYK:JS-PLAYWRIGHTCORE-13553173...

atomr-persistence-mongodb (>=0.1.0, <=0.10.1), authifier (>=1.0.10, <=1.0.16) +35 more potentially affected by CVE-2025-11695 via mongodb (3.1.1)

mongodb CARGO version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongodb and may be impacted: - atomr-persistence-mongodb =0.1.0, =1.0.10, =0.2.0, =0.1.0, =1.0.0, =2.0.2 - mongodb-ensure-index 0.1.1 - mongodm 0.10.0 and more Source cves:...

proto-types (>=0.1.0, <=0.1.11), protocheck-core (>=0.1.0, <=0.1.11) potentially affected by CVE-2025-62162 via cel (0.11.0)

cel CARGO version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on cel and may be impacted: - proto-types =0.1.0, =0.1.0, =0.1.11 Source cves: CVE-2025-62162 Source advisory: OSV:GHSA-WXWX-9FH7-5MRW...

choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2025-61925 via @astrojs/node (>=9.2.2, <=9.3.0)

@astrojs/node NPM version =9.2.2, =0.3.1, =0.4.0 Source cves: CVE-2025-61925 Source advisory: SNYK:JS-ASTROJSNODE-13535086...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +28 more potentially affected by CVE-2025-61925 via astro (>=5.0.0-beta.5, <=5.14.1)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.0-dev-20250414184926, =1.13.2, =0.0.1, =0.0.1, =1.0.21, =1.0.22 and more Source cves: CVE-2025-61925 Source advisory: OSV:GHSA-5FF5-9FCW-VG88...

ai.ylyue:yue-library-data-es (>=j8.2.2.0, <=j11.2.2.0), ca.bc.gov.tno:elastic (>=0.0.1-alpha, <=0.0.5-alpha) +629 more potentially affected by CVE-2025-37727 via org.elasticsearch.plugin:reindex-client (>=5.0.0, <=7.17.29)

org.elasticsearch.plugin:reindex-client MAVEN version =5.0.0, =j8.2.2.0, =0.0.1-alpha, =0.1.0, =2.1.0.m8, =2.1.0.m8, =1.4.1, =1.4.0-alpha, =1.4.1, =1.4.0-alpha, =1.2.0.release, =1.1.1.release, =1.4.2.release - cn.patterncat:spring-boot-starter-elasticsearch 0.0.1 -...

@better-auth/cli (>=1.0.0-canary.2, <=1.3.25), @bgord/bun (>=0.18.0, <=0.29.10) +26 more potentially affected by CVE-2025-61928 via better-auth (>=1.0.0, <=1.3.25)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.18.0, =0.5.2, =0.0.0, =0.1.174, =1.0.2, =1.0.5, =0.1.8, =0.1.0, =0.10.0, =1.0.0, =0.0.5, =0.0.12 and more Source cves: CVE-2025-61928 Source advisory: OSV:GHSA-99H5-PJCV-GR6V...

@better-auth/cli (>=1.2.0-beta.1, <=1.3.25), @bgord/bun (>=0.18.0, <=0.29.10) +24 more potentially affected by CVE-2025-61928 via better-auth (>=1.2.0, <=1.3.25)

better-auth NPM version =1.2.0, =1.2.0-beta.1, =0.18.0, =0.5.2, =0.0.0, =0.1.174, =1.0.2, =1.0.5, =0.1.8, =0.1.0, =0.10.0, =1.0.0, =0.0.5, =0.0.6 and more Source cves: CVE-2025-61928 Source advisory: SNYK:JS-BETTERAUTH-13537497...

forc (>=0.1.3, <=0.33.0), forc-client (>=0.20.1, <=0.33.0) +29 more potentially affected by unknown CVE via fuel-vm (>=0.1.1, <=0.22.7)

fuel-vm CARGO version =0.1.1, =0.1.3, =0.20.1, =0.10.0, =0.10.0, =0.1.8, =0.10.0, =0.6.1, =0.30.1, =0.6.1, =0.9.1, =0.9.1, =0.9.1, =0.11.2, =0.1.2, =0.9.1, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2PGJ-5CV2-6XXW...

@activepieces/piece-imap (>=0.2.17, <=0.3.2), @akiflow/mailauth (>=0.0.1, <=0.0.2) +71 more potentially affected by CVE-2025-13033 via nodemailer (>=7.0.2, <=7.0.6)

nodemailer NPM version =7.0.2, =0.2.17, =0.0.1, =1.0.0, =3.3.1, =0.0.1, =0.6.0, =5.1.663-alpha, =1.2.4, =29.1.0, =1.0.1, =2.12.3-snapshot-1749038455154, =4.0.0, =1.0.25, =8.0.1, =7.0.7, =8.1.17 and more Source cves: CVE-2025-13033 Source advisory: OSV:GHSA-MM7P-FCC7-PG87...

@activepieces/piece-imap (>=0.2.17, <=0.3.2), @akiflow/mailauth (>=0.0.1, <=0.0.2) +71 more potentially affected by unknown CVE via nodemailer (>=7.0.2, <=7.0.6)

nodemailer NPM version =7.0.2, =0.2.17, =0.0.1, =1.0.0, =3.3.1, =0.0.1, =0.6.0, =5.1.663-alpha, =1.2.4, =29.1.0, =1.0.1, =2.12.3-snapshot-1749038455154, =4.0.0, =1.0.25, =8.0.1, =7.0.7, =8.1.17 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-13378253...

EUVD-2025-32644

Malicious code in vishutransitivefn npm...

EUVD-2025-22475

Malicious code in bioql PyPI...

wrflib_widget (>=0.0.2, <=0.0.3) potentially affected by unknown CVE via wrflib (>=0.0.2, <=0.0.3)

wrflib CARGO version =0.0.2, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-466C-PFVV-V83G...

@circleci/agents (>=2.13.0-canary.3413b9c, <=2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59829 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.119)

@anthropic-ai/claude-code NPM version =1.0.8, =2.13.0-canary.3413b9c, =0.21.0, =0.1.7, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59829 Source advisory: OSV:GHSA-66M2-GX93-V996...

@circleci/agents (>=2.13.0-canary.3413b9c, <=2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59829 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.119)

@anthropic-ai/claude-code NPM version =1.0.8, =2.13.0-canary.3413b9c, =0.21.0, =0.1.7, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59829 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13299550...

@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59536 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59536 Source advisory: OSV:GHSA-4FGQ-FPQ9-MR3G...

@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59536 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59536 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13299835...

wrflib_widget (>=0.0.2, <=0.0.3) potentially affected by unknown CVE via wrflib (>=0.0.2, <=0.0.3)

wrflib CARGO version =0.0.2, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0072...

mysticcelestial (1.0.1) potentially affected by CVE-2025-61668 via @plone/volto (18.10.1)

@plone/volto NPM version 18.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @plone/volto and may be impacted: - mysticcelestial 1.0.1 Source cves: CVE-2025-61668 Source advisory: OSV:GHSA-M8RJ-PPPH-MJ33...