cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10950 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10950 Source advisory: SNYK:PYTHON-MLLOGGER-13110026...

@abcpros/minimal-slp-wallet (>=3.0.1, <=3.0.4), @abcpros/minimal-xpi-slp-wallet (>=3.0.4, <=3.0.10) +151 more potentially affected by CVE-2025-57317 via apidoc-core (>=0.2.2, <=0.12.0)

apidoc-core NPM version =0.2.2, =3.0.1, =3.0.4, =0.2.2, =1.0.2, =3.0.10, =1.1.7, =1.0.1, =1.0.5, =0.6.9, =1.0.4, =0.0.3, =0.0.12 and more Source cves: CVE-2025-57317 Source advisory: OSV:GHSA-5Q53-78F2-6GF8...

@diningcity/capacitor-qr-scanner (>=0.0.7, <=0.0.8), @mojitonft/hooks (1.0.1-alpha.4) +93 more potentially affected by CVE-2025-26278 via dref (0.0.6)

dref NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on dref and may be impacted: - @diningcity/capacitor-qr-scanner =0.0.7, =1.7.0, =0.0.1, =11.1.1, =3.3.3, =0.0.0-beta, =0.0.2, =1.0.2, =0.0.40, =0.0.2, =0.0.1, =0.0.1, =0.1.0, =0.1.19 a...

@diningcity/capacitor-qr-scanner (>=0.0.7, <=0.0.8), @mojitonft/hooks (1.0.1-alpha.4) +93 more potentially affected by CVE-2025-26278 via dref (0.0.6)

dref NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on dref and may be impacted: - @diningcity/capacitor-qr-scanner =0.0.7, =1.7.0, =0.0.1, =11.1.1, =3.3.3, =0.0.0-beta, =0.0.2, =1.0.2, =0.0.40, =0.0.2, =0.0.1, =0.0.1, =0.1.0, =0.1.19 a...

algeb (>=1.0.0, <=5.4.0), anys (>=0.0.1, <=9.0.0) +37 more potentially affected by CVE-2025-57351 via ts-fns (>=0.0.11, <=13.1.3)

ts-fns NPM version =0.0.11, =1.0.0, =0.0.1, =0.0.1, =1.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.2, =9.0.0 and more Source cves: CVE-2025-57351 Source advisory: SNYK:JS-TSFNS-13109930...

@advclb/sassdoc-loader (0.1.0), @alifd/sassdoc-parser (>=0.1.0, <=2.0.1) +148 more potentially affected by CVE-2025-57326 via sassdoc-extras (>=1.0.3, <=3.0.0)

sassdoc-extras NPM version =1.0.3, =0.1.0, =0.0.3, =0.0.3, =0.0.8, =3.0.0, =3.2.0, =2.3.0-rc.0, =0.0.1, =0.1.2, =10.1.0, =10.18.0-rc.0, =0.1.18, =99.0.372 and more Source cves: CVE-2025-57326 Source advisory: SNYK:JS-SASSDOCEXTRAS-13110008...

@afif_hh/composable (1.0.2), @afif_hh/ui_components (>=1.0.5, <=1.0.30) +67 more potentially affected by CVE-2025-57325 via rollbar (>=2.1.0, <=2.26.4)

rollbar NPM version =2.1.0, =1.0.5, =1.0.0, =0.0.2, =0.0.5, =0.0.2-beta.1, =1.0.0-alpha.1, =1.0.5, =1.1.12, =1.3.10, =1.1.11, =1.0.3, =2.1.0-alpha.3, =2.1.0-alpha.3, =2.1.3 and more Source cves: CVE-2025-57325 Source advisory: SNYK:JS-ROLLBAR-13110036...

locize-cli (>=3.6.0, <=3.14.0) potentially affected by CVE-2025-57318 via csvjson (5.0.0)

csvjson NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on csvjson and may be impacted: - locize-cli =3.6.0, =3.14.0 Source cves: CVE-2025-57318 Source advisory: OSV:GHSA-XQ4F-3JXP-QV6M...

4d-oled (>=1.0.0, <=1.0.2), @abb92/holidates (>=1.0.0, <=1.0.1) +923 more potentially affected by CVE-2025-57328 via toggle-array (1.0.1)

toggle-array NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on toggle-array and may be impacted: - 4d-oled =1.0.0, =1.0.0, =5.0.0, =4.0.2, =0.0.0-snapshot-ZERO-3343-20250425065225, =0.8.1-beta.2, =0.1.0, =0.1.1-a, =0.1.0, =1.0.0, =1.0.0...

4d-oled (>=1.0.0, <=1.0.2), @abb92/holidates (>=1.0.0, <=1.0.1) +971 more potentially affected by CVE-2025-57328 via toggle-array (>=0.1.0, <=1.0.1)

toggle-array NPM version =0.1.0, =1.0.0, =1.0.0, =5.0.0, =4.0.2, =0.0.0-snapshot-ZERO-3343-20250425065225, =0.8.1-beta.2, =0.1.0, =0.1.1-a, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.11.0 and more Source cves: CVE-2025-57328 Source advisory: SNYK:JS-TOGGLEARRAY-13110016...

@orca-fe/datav-cli (>=2.8.3, <=2.9.4), @shuji-components/sjv-cli (0.0.3) +3 more potentially affected by CVE-2025-57348 via node-cube (>=0.0.10, <=5.0.0-beta.28)

node-cube NPM version =0.0.10, =2.8.3, =0.0.1, =1.0.2, =0.0.1, =1.0.9 Source cves: CVE-2025-57348 Source advisory: SNYK:JS-NODECUBE-13109830...

@amoscmc/dummy-package (>=1.3.1, <=1.3.3), @bitrefill/airfill-widget (>=4.2.2, <=4.8.3) +88 more potentially affected by CVE-2025-57318 via csvjson (>=1.0.5, <=5.1.0)

csvjson NPM version =1.0.5, =1.3.1, =4.2.2, =1.0.0, =1.0.6, =1.0.93, =0.0.4, =0.1.0, =0.5.1, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =1.1.1 and more Source cves: CVE-2025-57318 Source advisory: SNYK:JS-CSVJSON-13110014...

component-transformer (0.1.0), spm (>=3.0.0-rc18, <=3.1.1) +2 more potentially affected by CVE-2025-57327 via spmrc (>=1.0.0, <=1.1.0)

spmrc NPM version =1.0.0, =3.0.0-rc18, =0.3.1, =0.1.0, =0.2.2 Source cves: CVE-2025-57327 Source advisory: OSV:GHSA-R2RV-8PP3-65XW...

acharts (1.0.34), amb (>=2.1.1, <=2.1.3) +48 more potentially affected by CVE-2025-57327 via spmrc (>=0.1.0, <=1.2.0)

spmrc NPM version =0.1.0, =2.1.1, =1.4.1, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =0.1.3, =0.5.8, =0.0.1, =0.2.1, =0.5.12 and more Source cves: CVE-2025-57327 Source advisory: SNYK:JS-SPMRC-13110015...

003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +6200 more potentially affected by CVE-2025-57329 via web3-core-method (>=1.0.0-beta.52, <=3.0.0-rc.5)

web3-core-method NPM version =1.0.0-beta.52, =1.0.0-3, =0.0.3, =0.0.3, =0.0.31, =1.1.0, =0.9.9, =0.1.0, =0.1.1 - 55tools-block 1.0.0 - 55tools-block-ext 1.0.0 - 84447xe5t8 1.0.0 and more Source cves: CVE-2025-57329 Source advisory: SNYK:JS-WEB3COREMETHOD-13110028...

org.webjars.npm:angular-translate-interpolation-messageformat (>=2.15.2, <=2.19.1) potentially affected by CVE-2025-57349 via org.webjars.npm:messageformat (1.0.2)

org.webjars.npm:messageformat MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:messageformat and may be impacted: - org.webjars.npm:angular-translate-interpolation-messageformat =2.15.2, =2.19.1 Source cves:...

003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +6223 more potentially affected by CVE-2025-57330 via web3-core-subscriptions (>=1.0.0, <=3.0.0-rc.5)

web3-core-subscriptions NPM version =1.0.0, =1.0.0-3, =0.0.3, =0.0.3, =0.0.31, =1.1.0, =0.9.9, =0.1.0, =0.1.1 - 55tools-block 1.0.0 - 55tools-block-ext 1.0.0 - 84447xe5t8 1.0.0 and more Source cves: CVE-2025-57330 Source advisory: SNYK:JS-WEB3CORESUBSCRIPTIONS-13110022...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @7nohe/vite-plugin-vue-marked (0.2.1) +569 more potentially affected by CVE-2025-57347 via dagre-d3-es (>=7.0.4, <=7.0.11)

dagre-d3-es NPM version =7.0.4, =0.0.1-alpha.23, =0.18.0-beta.0, =0.3.0, =1.0.3, =0.17.0-alkemio-1, =0.4.0, =1.0.0, =3.130.1, =1.19.0, =1.0.0, =0.18.3, =0.18.0-1, =0.18.0 and more Source cves: CVE-2025-57347 Source advisory: SNYK:JS-DAGRED3ES-13110069...

ai-sdk-provider-claude-code (>=0.2.0, <=1.0.0-beta.1), locadex (0.0.2-alpha.1) potentially affected by CVE-2025-59828 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.24)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =1.0.0-beta.1 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59828 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13109605...

ai-sdk-provider-claude-code (>=0.2.0, <=1.0.0-beta.1), locadex (0.0.2-alpha.1) potentially affected by CVE-2025-59828 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.24)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =1.0.0-beta.1 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59828 Source advisory: OSV:GHSA-2JJV-QF24-VFM4...