aa2nucaln (0.1.1), agent-stream-kit (>=0.9.0, <=0.14.0) +438 more potentially affected by unknown CVE via custom_derive (0.1.7)

customderive CARGO version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on customderive and may be impacted: - aa2nucaln 0.1.1 - agent-stream-kit =0.9.0, =0.4.0, =0.1.1, =0.2.0, =0.4.3, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =3.1.3, =0.3.7, =0.8...

com.47deg:freestyle-http-http4s_2.11 (0.1.0), com.azavea.geotrellis:geotrellis-server-core_2.11 (>=4.0.1, <=4.2.0) +197 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.11 (>=0.9.1, <=2.1.0)

co.fs2:fs2-io2.11 MAVEN version =0.9.1, =4.0.1, =4.0.1, =4.0.1, =0.4.0, =0.4.0, =5.0.0-m1, =1.3.0, =0.1.0, =0.0.2, =0.12.7, =0.12.7, =0.12.7, =0.14.1, =0.16.1 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-13180115...

a2d (>=0.1.0, <=0.1.11), abscissa (>=0.6.0-beta.1, <=0.6.0-rc.0) +1452 more potentially affected by unknown CVE via adler (>=0.2.3, <=1.0.2)

adler CARGO version =0.2.3, =0.1.0, =0.6.0-beta.1, =0.6.0-beta.1, =0.6.0-beta.1, =0.1.5, =0.21.0-alpha.1, =0.0.1-dev.10, =0.4.0, =4.0.1-alpha.1, =0.2.0, =0.1.0, =0.0.2, =0.5.4-rc.1, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0056...

a2d (>=0.1.0, <=0.1.11), aa2nucaln (0.1.1) +3972 more potentially affected by unknown CVE via fxhash (>=0.1.2, <=0.2.1)

fxhash CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1-dev.10, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0057...

@vdart-code/web (1.19.0), @wix/cloud-provider-fetch-adapter (>=1.0.1, <=1.0.5) +11 more potentially affected by CVE-2025-58179 via @astrojs/cloudflare (>=11.2.0, <=12.6.3)

@astrojs/cloudflare NPM version =11.2.0, =1.0.1, =0.37.0, =0.37.0, =0.32.7, =0.32.7, =0.32.7, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.0.11, =1.0.37, =1.1.3 Source cves: CVE-2025-58179 Source advisory: SNYK:JS-ASTROJSCLOUDFLARE-12496482...

@vdart-code/web (1.19.0), @wix/cloud-provider-fetch-adapter (>=1.0.1, <=1.0.5) +11 more potentially affected by CVE-2025-58179 via @astrojs/cloudflare (>=11.2.0, <=12.6.3)

@astrojs/cloudflare NPM version =11.2.0, =1.0.1, =0.37.0, =0.37.0, =0.32.7, =0.32.7, =0.32.7, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.0.11, =1.0.37, =1.1.3 Source cves: CVE-2025-58179 Source advisory: OSV:GHSA-QPR4-C339-7VQ8...

@ckeditor/ckeditor5-adapter-ckfinder (>=46.0.0-alpha.0, <=46.0.2), @ckeditor/ckeditor5-ai (>=46.0.0-alpha.0, <=46.0.2) +89 more potentially affected by CVE-2025-58064 via @ckeditor/ckeditor5-clipboard (>=46.0.0, <=46.0.2-alpha.1)

@ckeditor/ckeditor5-clipboard NPM version =46.0.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0,...

@agentforce/adk (>=0.9.0, <=0.12.1), @bgord/bun (>=0.11.2, <=0.25.4) +29 more potentially affected by CVE-2025-58362 via hono (>=4.8.0, <=4.9.5)

hono NPM version =4.8.0, =0.9.0, =0.11.2, =1.3.0-next.4, =1.3.2, =4.0.0-alpha.5, =0.67.0, =0.14.2, =0.4.0, =0.21.0, =0.21.0, =0.19.0, =0.16.0, =0.0.1, =0.0.6, =0.23.0, =9.0.2 and more Source cves: CVE-2025-58362 Source advisory: SNYK:JS-HONO-12485162...

@agentforce/adk (>=0.9.0, <=0.12.1), @bgord/bun (>=0.11.2, <=0.25.4) +29 more potentially affected by CVE-2025-58362 via hono (>=4.8.0, <=4.9.5)

hono NPM version =4.8.0, =0.9.0, =0.11.2, =1.3.0-next.4, =1.3.2, =4.0.0-alpha.5, =0.67.0, =0.14.2, =0.4.0, =0.21.0, =0.21.0, =0.19.0, =0.16.0, =0.0.1, =0.0.6, =0.23.0, =9.0.2 and more Source cves: CVE-2025-58362 Source advisory: OSV:GHSA-9HP6-4448-45G2...

@finsemble/finsemble-core (>=8.15.0-beta.1, <=9.8.1-test.1), @finsemble/finsemble-electron-adapter (>=8.15.0-beta.1, <=9.8.1-test.1) +4 more potentially affected by CVE-2025-55305 via electron (>=35.0.0, <=35.5.1)

electron NPM version =35.0.0, =8.15.0-beta.1, =8.15.0-beta.1, =1.1.0, =0.16.0, =1.0.10, =1.0.16 Source cves: CVE-2025-55305 Source advisory: OSV:GHSA-VMQV-HX8Q-J7MG...

@ascua/electron (>=0.5.0, <=0.6.0), @electron-plugins/fastify-protocol (>=0.0.0, <=0.0.1) +6 more potentially affected by CVE-2025-55305 via electron (>=36.0.0, <=36.5.0)

electron NPM version =36.0.0, =0.5.0, =0.0.0, =2.0.0, =0.9.0, =0.81.0-nightly-20250531-cddfe4a03, =0.18.0, =0.19.0 - yt-play-cli 0.16.0 Source cves: CVE-2025-55305 Source advisory: OSV:GHSA-VMQV-HX8Q-J7MG...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.9.4-iocd.1), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.9.4-iocd.1) +17 more potentially affected by CVE-2025-55305 via electron (>=37.0.0, <=37.2.6)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.0, =0.0.29, =0.0.38 and more Source cves: CVE-2025-55305 Source advisory: OSV:GHSA-VMQV-HX8Q-J7MG...

@ascua/electron (>=0.5.0, <=0.6.0), @electron-plugins/fastify-protocol (>=0.0.0, <=0.0.1) +6 more potentially affected by CVE-2025-55305 via electron (>=36.0.0, <=36.5.0)

electron NPM version =36.0.0, =0.5.0, =0.0.0, =2.0.0, =0.9.0, =0.81.0-nightly-20250531-cddfe4a03, =0.18.0, =0.19.0 - yt-play-cli 0.16.0 Source cves: CVE-2025-55305 Source advisory: SNYK:JS-ELECTRON-12485155...

@finsemble/finsemble-core (>=8.15.0-beta.1, <=9.8.1-test.1), @finsemble/finsemble-electron-adapter (>=8.15.0-beta.1, <=9.8.1-test.1) +4 more potentially affected by CVE-2025-55305 via electron (>=35.0.0, <=35.5.1)

electron NPM version =35.0.0, =8.15.0-beta.1, =8.15.0-beta.1, =1.1.0, =0.16.0, =1.0.10, =1.0.16 Source cves: CVE-2025-55305 Source advisory: SNYK:JS-ELECTRON-12485155...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.9.4-iocd.1), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.9.4-iocd.1) +17 more potentially affected by CVE-2025-55305 via electron (>=37.0.0, <=37.2.6)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.0, =0.0.29, =0.0.38 and more Source cves: CVE-2025-55305 Source advisory: SNYK:JS-ELECTRON-12485155...

ai-sdk-provider-claude-code (>=0.2.0, <=1.1.1), claude-code-webui (>=0.1.34, <=0.1.48) +5 more potentially affected by unknown CVE via @anthropic-ai/claude-code (>=1.0.8, <=1.0.83)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =0.1.34, =1.8.0, =1.9.0 - cyrus-ai 0.1.44 - cyrus-claude-runner 0.0.22 - cyrus-edge-worker 0.0.27 - locadex 0.0.2-alpha.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PH6W-F82W-28W6...

@ckeditor/ckeditor5-adapter-ckfinder (>=46.0.0-alpha.0, <=46.0.2), @ckeditor/ckeditor5-ai (>=46.0.0-alpha.0, <=46.0.2) +89 more potentially affected by CVE-2025-58064 via @ckeditor/ckeditor5-clipboard (>=46.0.0, <=46.0.2-alpha.1)

@ckeditor/ckeditor5-clipboard NPM version =46.0.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0,...

@_sh/strapi-plugin-ckeditor (>=5.0.0, <=6.0.1), @abcxyz123321555/ckeditor5-build-test-version (>=0.7.0, <=0.10.2) +132 more potentially affected by CVE-2025-58064 via ckeditor5 (>=44.2.0, <=45.2.1-alpha.10)

ckeditor5 NPM version =44.2.0, =5.0.0, =0.7.0, =0.0.2, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.3.0 and more Source cves: CVE-2025-58064 Source...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1055 more potentially affected by CVE-2025-57752 via next (>=15.0.0, <=15.4.1)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =1.5.0-beta.1, =0.1.0, =0.1.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =0.0.5-alpha-20250505070314-fe37055a9f31a5579df0224dd5a16cce090d542b and more Source cves: CVE-2025-57752 Source advisory:...

@adenta/cms (>=0.0.6, <=1.1.1-0), @edrlab/thorium-web (>=1.0.0-beta.3, <=1.0.0-beta.8) +18 more potentially affected by CVE-2025-57752 via next (>=15.4.3, <=15.4.4)

next NPM version =15.4.3, =0.0.6, =1.0.0-beta.3, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =2.1.5, =2.1.21 and more Source cves: CVE-2025-57752 Source advisory: SNYK:JS-NEXT-12301496...