org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-10031 Source advisory:...

org.glassfish.main.distributions:glassfish (>=4.0-b90, <=4.0), org.glassfish.main.distributions:web (>=4.0-b90, <=4.0) +4 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-cluster-plugin (>=4.0, <=9.0.0-m3)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version =4.0, =4.0-b90, =4.0-b90, =6.2.5, =4.1, =4.1, =4.0-b90, =5.0 Source cves: CVE-2024-10029 Source advisory: SNYK:JAVA-ORGGLASSFISHMAINADMINGUI-10946539...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-10029 Source advisory:...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-9342 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-9342 Source advisory:...

arfur (>=0.0.1, <=0.0.2), arfur-build (>=0.0.1, <=0.0.2) +20 more potentially affected by unknown CVE via zip-extract (>=0.1.3, <=0.2.3)

zip-extract CARGO version =0.1.3, =0.0.1, =0.0.1, =0.0.1, =0.1.3, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0172...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +14 more potentially affected by CVE-2025-7657 via electron (>=37.0.0, <=37.2.3)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.20.0-rc.0, =1.0.1, =2.6.31, =2.6.42 and more Source cves: CVE-2025-7657 Source advisory: SNYK:JS-ELECTRON-11023258...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +14 more potentially affected by CVE-2025-7656 via electron (>=37.0.0, <=37.2.3)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.20.0-rc.0, =1.0.1, =2.6.31, =2.6.42 and more Source cves: CVE-2025-7656 Source advisory: SNYK:JS-ELECTRON-11023254...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @directus/api (>=20.0.0-rc.0, <=27.1.0) potentially affected by CVE-2025-53889 via directus (>=11.0.0, <=11.8.0)

directus NPM version =11.0.0, =1.6.3, =20.0.0-rc.0, =27.1.0 Source cves: CVE-2025-53889 Source advisory: OSV:GHSA-7CVF-PXGP-42FC...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @directus/api (>=20.0.0-rc.0, <=27.1.0) potentially affected by CVE-2025-53887 via directus (>=11.0.0, <=11.8.0)

directus NPM version =11.0.0, =1.6.3, =20.0.0-rc.0, =27.1.0 Source cves: CVE-2025-53887 Source advisory: OSV:GHSA-RMJH-CF9Q-PV7Q...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @directus/api (>=20.0.0-rc.0, <=27.1.0) potentially affected by CVE-2025-53886 via directus (>=11.0.0, <=11.8.0)

directus NPM version =11.0.0, =1.6.3, =20.0.0-rc.0, =27.1.0 Source cves: CVE-2025-53886 Source advisory: OSV:GHSA-F24X-RM6G-3W5V...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @directus/api (>=15.0.0, <=27.1.0) +9 more potentially affected by CVE-2025-53885 via directus (>=9.6.0, <=11.8.0)

directus NPM version =9.6.0, =1.6.3, =15.0.0, =1.2.2, =0.1.0, =1.0.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2025-53885 Source advisory: OSV:GHSA-X3VM-88HF-GPXP...

@atomrigslab/better-auth (>=1.2.6-beta.6, <=1.2.6-beta.25), @better-auth/cli (>=1.2.0-beta.1, <=1.2.0-beta.9) +6 more potentially affected by unknown CVE via better-call (>=1.0.0-beta.4, <=1.0.11)

better-call NPM version =1.0.0-beta.4, =1.2.6-beta.6, =1.2.0-beta.1, =1.2.0-beta.1, =1.2.10-pkce-fix.4, =1.2.14, =1.2.0-beta.1, =1.2.0-beta.9 - chiron-sh 0.0.1-alpha.1 Source cves: unknown CVE Source advisory: OSV:GHSA-HQ75-XG7R-RX6C...

@kontaa/subgraph (>=1.0.1, <=1.2.3), @kontaa/utils (>=1.2.1, <=1.2.3) +4 more potentially affected by CVE-2025-53364 via parse-server (>=5.6.0, <=6.5.11)

parse-server NPM version =5.6.0, =1.0.1, =1.2.1, =2.4.46, =1.0.0, =1.0.1, =1.0.23 - servable-publishable 1.1.0 Source cves: CVE-2025-53364 Source advisory: OSV:GHSA-48Q3-PRGV-GM4W...

@unhook/cli (>=0.9.3, <=0.13.1) potentially affected by CVE-2025-53548 via @clerk/express (>=1.6.0, <=1.7.0)

@clerk/express NPM version =1.6.0, =0.9.3, =0.13.1 Source cves: CVE-2025-53548 Source advisory: OSV:GHSA-9MP4-77WG-RWX9...

@unhook/cli (>=0.9.3, <=0.13.1) potentially affected by CVE-2025-53548 via @clerk/backend (>=2.0.0, <=2.1.0)

@clerk/backend NPM version =2.0.0, =0.9.3, =0.13.1 Source cves: CVE-2025-53548 Source advisory: OSV:GHSA-9MP4-77WG-RWX9...

@wix/mcp-remote (>=0.0.2, <=0.0.6), mtmag (0.0.1) +3 more potentially affected by CVE-2025-6514 via mcp-remote (>=0.0.22, <=0.1.13)

mcp-remote NPM version =0.0.22, =0.0.2, =0.0.694, =0.0.1, =0.0.6 Source cves: CVE-2025-6514 Source advisory: OSV:GHSA-6XPM-GGF7-WC3P...

@toolsdk.ai/registry (1.0.83) potentially affected by CVE-2025-53355 +1 more via mcp-server-kubernetes (2.4.3)

mcp-server-kubernetes NPM version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-server-kubernetes and may be impacted: - @toolsdk.ai/registry 1.0.83 Source cves: CVE-2025-53355, CVE-2025-54073 Source advisory: OSV:GHSA-GJV4-GHM7-Q58Q...

x86: Transitive Scheduler Attacks

ISSUE DESCRIPTION Researchers from Microsoft and ETH Zurich have discovered several new speculative sidechannel attacks which bypass current protections. They are detailed in a paper titled "Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks". Two issues, whi...

@better-auth/cli (>=1.0.0-canary.2, <=1.2.9), @erquhart/convex-better-auth (0.4.1) +11 more potentially affected by CVE-2025-53535 via better-auth (>=1.0.0, <=1.2.9-beta.10)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.0, =0.1.174, =1.0.2, =1.0.5, =1.0.0, =0.0.5, =1.1.368, =3.7.1, =0.1.2-beta.2, =1.0.0, =1.1.0 Source cves: CVE-2025-53535 Source advisory: OSV:GHSA-36RG-GFQ2-3H56...

de.digitalcollections.cudami:dc-cudami-admin-webapp (>=7.0.0-rc1, <=8.0.3), io.github.dbmdz.cudami:cudami (>=9.0.0, <=11.0.0-rc.1) +17 more potentially affected by CVE-2026-2327 via org.webjars.npm:markdown-it (>=4.4.0, <=14.3.0)

org.webjars.npm:markdown-it MAVEN version =4.4.0, =7.0.0-rc1, =9.0.0, =1.8.8, =0.4.2, =3.8.0, =0.4.0, =1.5.1, =1.13.2 and more Source cves: CVE-2026-2327 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15282866...