@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-58752 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-58752 Source advisory: OSV:GHSA-JQFW-VQ24-V9C3...

@cllu/awp-sw (0.4.4) potentially affected by CVE-2025-58765 via @webrecorder/wabac (2.17.3)

@webrecorder/wabac NPM version 2.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on @webrecorder/wabac and may be impacted: - @cllu/awp-sw 0.4.4 Source cves: CVE-2025-58765 Source advisory: SNYK:JS-WEBRECORDERWABAC-12670884...

@142vip/vitepress (>=0.0.1-alpha.14, <=0.0.1-alpha.24), @56jun/fe-chat (>=1.0.0-beta.1, <=1.0.0-beta.26) +607 more potentially affected by CVE-2025-57665 via element-plus (>=2.0.0, <=2.10.7)

element-plus NPM version =2.0.0, =0.0.1-alpha.14, =1.0.0-beta.1, =0.6.1-annotator.1, =1.1.2, =2.4.2-beta.1, =1.1.2, =0.7.0-annotator.0, =1.0.3, =1.4.2, =1.0.1, =3.72.0, =2.0.6, =0.0.0, =0.0.11 and more Source cves: CVE-2025-57665 Source advisory: OSV:GHSA-5M5X-9J46-H678...

1997ckf-ui-comp (>=0.0.9, <=0.0.17), 1data-business (>=0.0.1, <=0.0.3) +6213 more potentially affected by CVE-2025-57665 via element-plus (>=1.0.1-beta.0, <=2.14.5)

element-plus NPM version =1.0.1-beta.0, =0.0.9, =0.0.1, =1.0.0, =0.1.11, =0.1.0, =1.0.0, =0.3.1, =1.0.0-beta.0, =1.0.0, =0.0.1-alpha.10, =0.1.6-alpha.17, =0.1.6-alpha.18 - @17mkh/ui 0.0.2 - @1api/serve 0.1.0 and more Source cves: CVE-2025-57665 Source advisory: SNYK:JS-ELEMENTPLUS-12670415...

keeshond_editor (>=0.1.0, <=0.13.0), keeshond_migrator (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via toodee (>=0.2.4, <=0.3.0)

toodee CARGO version =0.2.4, =0.1.0, =0.1.0, =0.10.0, =0.13.0 Source cves: unknown CVE Source advisory: OSV:GHSA-PFP7-VXGR-83PW...

drivesync (0.1.0), geckopanda (>=0.1.0, <=0.2.0) +601 more potentially affected by unknown CVE via google-apis-common (>=4.0.1, <=6.0.4)

google-apis-common CARGO version =4.0.1, =0.1.0, =5.0.2-beta-1+20230114, =5.0.2-beta-1+20230123, =5.0.2-beta-1+20230120, =5.0.2-beta-1+20200708, =5.0.2-beta-1+20230123, =5.0.2-beta-1+20230123, =5.0.2-beta-1+20210330, =5.0.4+20210330 and more Source cves: unknown CVE Source advisory:...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-58752 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-58752 Source advisory: SNYK:JS-VITE-12558116...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +461 more potentially affected by CVE-2025-58752 via vite (>=5.0.0, <=5.4.19)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-58752 Source advisory: SNYK:JS-VITE-12558116...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +194 more potentially affected by CVE-2025-58752 via vite (>=6.0.0, <=6.3.5)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source...

org.webjars.npm:vitepress (1.0.0-draft.8) potentially affected by CVE-2025-58752 via org.webjars.npm:vite (3.0.0-beta.9)

org.webjars.npm:vite MAVEN version 3.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vite and may be impacted: - org.webjars.npm:vitepress 1.0.0-draft.8 Source cves: CVE-2025-58752 Source advisory:...

@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.2), @angular/build (>=20.2.0-next.3, <=21.0.0-next.2) +30 more potentially affected by CVE-2025-58752 via vite (>=7.1.0, <=7.1.4)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =2.14.0, =30.0.0, =16.0.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =2.19.8, =2.19.8, =14.314.0, =14.314.0, =9.6.3, =0.0.0-snapshot-0360a7c2f707db55df213993503b56c6a1d96d0e, =0.4.0-dev.8 and more Source cves: CVE-2025-58752 Sourc...

@clidey/dory (0.35.0), @noooooooode/merv (0.1.0) +8 more potentially affected by CVE-2025-58751 via sirv (>=3.0.0, <=3.0.1)

sirv NPM version =3.0.0, =0.1.0, =0.0.1, =9.0.0-next.7, =0.1.0, =0.12.3, =1.6.0, =1.7.0 Source cves: CVE-2025-58751 Source advisory: SNYK:JS-SIRV-12558119...

@arturl/pulumi-mcp-server (0.1.9), @collegue/mcp (>=1.0.1, <=1.0.2) +76 more potentially affected by CVE-2025-58444 via @modelcontextprotocol/inspector-client (>=0.1.0, <=0.15.0)

@modelcontextprotocol/inspector-client NPM version =0.1.0, =1.0.1, =2.0.10, =0.0.0-semantically-released, =1.0.1, =0.0.0-alpha.0, =0.1.0, =0.1.0, =2.1.0, =2.1.1 - @iflow-mcp/cliffhall-gooseteam 0.3.0 - @iflow-mcp/dify-mcp-server-ts 1.0.0 - @iflow-mcp/dify-workflow-mcp 1.0.0 and more Source cves:...

@arturl/pulumi-mcp-server (0.1.9), @collegue/mcp (>=1.0.1, <=1.0.2) +71 more potentially affected by CVE-2025-58444 via @modelcontextprotocol/inspector (>=0.2.7, <=0.15.0)

@modelcontextprotocol/inspector NPM version =0.2.7, =1.0.1, =2.0.10, =0.0.0-semantically-released, =1.0.1, =0.0.0-alpha.0, =0.1.0, =0.1.0, =2.1.0, =2.1.1 - @iflow-mcp/cliffhall-gooseteam 0.3.0 - @iflow-mcp/dify-mcp-server-ts 1.0.0 - @iflow-mcp/dify-workflow-mcp 1.0.0 and more Source cves:...

@open-xchange/appsuite-codeceptjs (>=0.2.0, <=0.6.2), c-configure (>=1.0.1, <=2.1.5) +3 more potentially affected by CVE-2025-57285 via codeceptjs (>=3.0.7, <=3.6.10)

codeceptjs NPM version =3.0.7, =0.2.0, =1.0.1, =7.0.23, =1.0.4, =1.0.0, =1.0.4 Source cves: CVE-2025-57285 Source advisory: SNYK:JS-CODECEPTJS-12670804...

@open-xchange/appsuite-codeceptjs (>=0.2.0, <=0.6.2), create-fintech-automation-test (>=1.0.4, <=1.0.5) +1 more potentially affected by CVE-2025-57285 via codeceptjs (>=3.6.2, <=3.6.10)

codeceptjs NPM version =3.6.2, =0.2.0, =1.0.4, =1.0.0, =1.0.4 Source cves: CVE-2025-57285 Source advisory: OSV:GHSA-34W8-MCWR-VG29...

@antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1), @izzai/n8n-nodes-izzone (>=0.0.17, <=0.2.2) +38 more potentially affected by CVE-2025-56265 via n8n-workflow (>=1.24.0, <=1.103.3)

n8n-workflow NPM version =1.24.0, =0.1.5, =0.0.17, =0.2.0, =0.19.0, =0.4.0, =0.11.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1, =0.1.0, =0.21.34, =1.51.0, =1.4.1, =1.52.0 - ape-test-7-editor-ui 1.48.0 and more Source cves: CVE-2025-56265 Source advisory: SNYK:JS-N8NWORKFLOW-12997432...

keeshond_editor (>=0.1.0, <=0.13.0), keeshond_migrator (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via toodee (>=0.2.4, <=0.3.0)

toodee CARGO version =0.2.4, =0.1.0, =0.1.0, =0.10.0, =0.13.0 Source cves: unknown CVE Source advisory: SNYK:RUST-TOODEE-12670801...

accesskit_windows (>=0.5.0, <=0.10.4), accesskit_winit (>=0.2.0, <=0.7.2) +425 more potentially affected by unknown CVE via servo-fontconfig (>=0.4.0, <=0.5.1)

servo-fontconfig CARGO version =0.4.0, =0.5.0, =0.2.0, =0.5.0, =0.11.0, =0.2.0, =0.1.0, =0.8.0, =0.6.0, =0.4.0, =0.8.0, =0.2.0, =0.6.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0059...

alexa (>=0.1.0, <=0.1.2), alipay-rs (>=0.2.0, <=0.4.6) +225 more potentially affected by unknown CVE via iron (>=0.1.21, <=0.6.1)

iron CARGO version =0.1.21, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =0.8.0, =0.14.0, =0.5.0, =0.7.0, =0.0.6, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0061...