@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +24 more potentially affected by CVE-2025-55303 via astro (>=5.0.0-beta.5, <=5.12.8)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =1.25.426-4, =0.6.2, =0.0.0-dev-20250414184926, =0.0.1, =0.0.1, =0.0.1, =2.1.22, =1.0.3, =1.1.6 and more Source cves: CVE-2025-55303 Source advisory: OSV:GHSA-XF8X-J4P2-F749...

com.github.grantlittle:bdd-reporting-server (>=0.1.5, <=0.1.7), com.github.grantlittle:bdd-reporting-service (0.1.9) +59 more potentially affected by CVE-2025-4690 via org.webjars.bower:angular-sanitize (>=1.2.29, <=1.8.2)

org.webjars.bower:angular-sanitize MAVEN version =1.2.29, =0.1.5, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1 and more Source cves: CVE-2025-4690 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-12177873...

40au-isteven-angular-multiselect (4.0.0), @0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5) +502 more potentially affected by CVE-2025-4690 via angular-sanitize (>=1.2.27, <=1.8.3)

angular-sanitize NPM version =1.2.27, =4.13.7-rc4, =0.0.1, =0.0.1, =0.1.0, =2.0.0, =0.3.2, =0.2.7, =1.0.0, =1.0.0, =0.2.1, =0.0.1, =1.0.0, =3.0.2, =4.16.5 and more Source cves: CVE-2025-4690 Source advisory: SNYK:JS-ANGULARSANITIZE-12177871...

net.aequologica.neo:geppaequo-tags (>=0.5.3, <=0.6.0), net.aequologica.neo:geppaequo-web (>=0.5.3, <=0.6.0) +4 more potentially affected by CVE-2025-4690 via org.webjars.npm:angular-sanitize (>=1.5.0-beta.0, <=1.8.3)

org.webjars.npm:angular-sanitize MAVEN version =1.5.0-beta.0, =0.5.3, =0.5.3, =0.6.0 - org.webjars.npm:angular-auto-complete 1.7.4 - org.webjars.npm:angular-material-calendar 0.2.14 - org.webjars.npm:angular-schema-form 0.8.13 - org.webjars.npm:github-com-showdownjs-ng-showdown 1.1.0 Source cves:...

Linux Distros Unpatched Vulnerability : CVE-2022-33748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking...

aella-gateway-admin (>=1.0.5, <=1.0.9), angus-router (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2025-9095 via express-gateway (1.16.11)

express-gateway NPM version 1.16.11 is affected by a known vulnerability. The following packages have a transitive dependency on express-gateway and may be impacted: - aella-gateway-admin =1.0.5, =0.1.0, =1.0.0, =0.0.1, =0.0.5, =0.0.6 - factoria.rae.identity 1.0.0 - wawole-gateway 1.0.0 Source...

aella-gateway-admin (>=1.0.5, <=1.0.9), angus-router (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2025-9096 via express-gateway (1.16.11)

express-gateway NPM version 1.16.11 is affected by a known vulnerability. The following packages have a transitive dependency on express-gateway and may be impacted: - aella-gateway-admin =1.0.5, =0.1.0, =1.0.0, =0.0.1, =0.0.5, =0.0.6 - factoria.rae.identity 1.0.0 - wawole-gateway 1.0.0 Source...

choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2025-55207 via @astrojs/node (>=9.2.2, <=9.3.0)

@astrojs/node NPM version =9.2.2, =0.3.1, =0.4.0 Source cves: CVE-2025-55207 Source advisory: OSV:GHSA-9X9C-GHC5-JHW9...

choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2025-55207 via @astrojs/node (>=9.2.2, <=9.3.0)

@astrojs/node NPM version =9.2.2, =0.3.1, =0.4.0 Source cves: CVE-2025-55207 Source advisory: SNYK:JS-ASTROJSNODE-11951436...

radio-paradise-api (0.0.1), turkish-synonyms-api (0.0.0) potentially affected by unknown CVE via memoize-with-leveldb (>=0.0.1, <=2.0.0)

memoize-with-leveldb NPM version =0.0.1, =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on memoize-with-leveldb and may be impacted: - radio-paradise-api 0.0.1 - turkish-synonyms-api 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-261...

fox (0.0.8), lowkick (>=0.0.1, <=0.1.0) +2 more potentially affected by unknown CVE via combiner (1.2.1)

combiner NPM version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on combiner and may be impacted: - fox 0.0.8 - lowkick =0.0.1, =1.1.0, =0.3.1, =0.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17379...

my-testutil (1.0.1), storm-test (0.0.1) +1 more potentially affected by unknown CVE via wepack-cli (0.0.1-security)

wepack-cli NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wepack-cli and may be impacted: - my-testutil 1.0.1 - storm-test 0.0.1 - stormydb =0.1.1, =0.5.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39082...

on-duty-js (3.0.0), todo-app-23426 (1.0.0) potentially affected by unknown CVE via chalkk (0.0.1-security)

chalkk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chalkk and may be impacted: - on-duty-js 3.0.0 - todo-app-23426 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16776...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-openapi-generator (1.0.1-alpha.1)

h1-cli-ext-root-openapi-generator NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-openapi-generator and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unkno...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) +1 more potentially affected by unknown CVE via platform-browser (0.0.1-security)

platform-browser NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 - clinicaamandao 1.0.0 Source cves:...

declarative-js (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via andthen (0.0.2)

andthen NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on andthen and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14514...

nineone152 (>=1.1.9, <=1.1.11) potentially affected by unknown CVE via node-ftp (0.0.1-security)

node-ftp NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-ftp and may be impacted: - nineone152 =1.1.9, =1.1.11 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27624...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) potentially affected by unknown CVE via filename-id (0.0.0)

filename-id NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on filename-id and may be impacted: - brick-browser =0.0.0, =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20552...

6_0901 (1.0.0), @alu0101227610/gh-repo-rename (>=1.2.0, <=1.2.1) +27 more potentially affected by unknown CVE via comander (0.0.1-security)

comander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on comander and may be impacted: - 60901 1.0.0 - @alu0101227610/gh-repo-rename =1.2.0, =1.1.1, =1.2.0, =0.0.2, =1.0.0, =1.2.2, =1.0.1, =1.0.5 - hager1 1.0.0 and more Sourc...

@pirxpilot/confirmation (1.0.1), @pirxpilot/dialog (1.1.1) +46 more potentially affected by unknown CVE via macgyver (>=1.9.2, <=1.10.1)

macgyver NPM version =1.9.2, =1.1.0, =1.0.3, =2.0.0, =1.0.1, =1.0.0, =1.0.8 - democracyos-confirmation 0.0.5 - democracyos-popover 1.1.0 - democracyos-quill 0.19.12 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25744...