9977 matches found
11ty-nunjucks-md (1.0.0), 20ful (>=0.3.2, <=0.3.5) +2727 more potentially affected by CVE-2026-2327 via markdown-it (>=13.0.0, <=14.1.0)
markdown-it NPM version =13.0.0, =0.3.2, =0.0.2, =2.0.0-beta.1, =0.3.1, =0.42.46, =2.0.4, =0.0.1, =0.33.4, =0.3.0, =10.22.0, =3.7.0-beta.1, =3.9.0-beta.1, =3.9.3 and more Source cves: CVE-2026-2327 Source advisory: SNYK:JS-MARKDOWNIT-10666750...
xorc-notifications (0.1.0) potentially affected by CVE-2025-53604 via web-push (0.4.2)
web-push CARGO version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on web-push and may be impacted: - xorc-notifications 0.1.0 Source cves: CVE-2025-53604 Source advisory: OSV:GHSA-287X-9RFF-QVCG...
aoer-plotty-rs (>=0.3.0, <=0.4.1), d3_delaunay_rs (>=0.10.0, <=0.11.2) +46 more potentially affected by unknown CVE via i_tree (>=0.2.0, <=0.9.0)
itree CARGO version =0.2.0, =0.3.0, =0.10.0, =0.10.5, =0.1.0, =0.29.0, =0.0.2, =0.2.0, =0.7.0, =0.1.0, =0.1.1 - geodatafusion 0.1.0-dev - geograph 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0165...
3llm (0.0.1), @3bitmt/3bit-sidebar-dashboard (1.1.4) +330 more potentially affected by CVE-2025-49826 via next (>=15.0.4, <=15.1.7)
next NPM version =15.0.4, =0.0.3-alpha-20241208090947-7fef7769a72aeb2895978b4e7647afdba519b103, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.1, =0.1.1, =0.1.0, =0.1.22 and more Source cves: CVE-2025-49826 Source advisory: OSV:GHSA-67RR-84XM-4C7R...
0xmugitea (0.1.0), 300tea300 (0.1.2) +171 more potentially affected by CVE-2025-49005 via next (>=15.3.0, <=15.3.2)
next NPM version =15.3.0, =0.1.0, =0.0.5-alpha-20250409222818-a35bb677fde1e4e9cf3db443e9ae36abf4f8e21b, =0.0.20, =0.9.14, =0.0.73, =0.0.73, =0.0.73, =0.0.151, =0.1.0, =0.0.14, =0.0.22 and more Source cves: CVE-2025-49005 Source advisory: OSV:GHSA-R2FC-CCR8-96C4...
org.lucee:aws-sm (>=1.0.0.5-rc, <=1.1.0.4-rc), org.lucee:chart (>=3.0.0.0-beta, <=3.0.0.1-beta) +13 more potentially affected by CVE-2025-34074 via org.lucee:lucee (>=6.1.1.118, <=7.1.0.2-alpha)
org.lucee:lucee MAVEN version =6.1.1.118, =1.0.0.5-rc, =3.0.0.0-beta, =1.0.0.0-alpha, =1.0.0.0-alpha, =3.0.0.0-alpha, =1.0.0.17-beta, =3.0.0.0-beta, =2.1.0.0-beta, =1.0.0.2-rc, =1.0.0.3-rc Source cves: CVE-2025-34074 Source advisory: SNYK:JAVA-ORGLUCEE-10587798...
eth-utils (>=0.1.1, <=0.2.0), evm (>=0.17.3, <=0.36.0) +25 more potentially affected by CVE-2025-53359 via ethereum (>=0.4.2, <=0.12.0)
ethereum CARGO version =0.4.2, =0.1.1, =0.17.3, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - ovr-evm-precompile-ed25519 2.0.0 - ovr-evm-precompile-modexp 2.0.0 - ovr-evm-precompile-sha3fips 2.0.0 - ovr-evm-test-vector-support 1.0.0 and more Source cves: CVE-2025-53359 Source advisory: OSV:GHSA-3W94-VQ2X-V5WR...
@flinkhouse/servers (0.6.2), @iflow-mcp/leadfarmer-ai-mcp-server-example (>=1.0.0, <=1.0.2) +9 more potentially affected by CVE-2025-34072 via @modelcontextprotocol/server-slack (2025.4.25)
@modelcontextprotocol/server-slack NPM version 2025.4.25 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-slack and may be impacted: - @flinkhouse/servers 0.6.2 - @iflow-mcp/leadfarmer-ai-mcp-server-example =1.0.0, =1.0.0,...
edu.berkeley.cs:rocket-dsptools_2.12 (>=1.2.0-rc1, <=1.2.6) potentially affected by CVE-2025-45006 via edu.berkeley.cs:rocketchip_2.12 (>=1.2.0, <=1.2.6)
edu.berkeley.cs:rocketchip2.12 MAVEN version =1.2.0, =1.2.0-rc1, =1.2.6 Source cves: CVE-2025-45006 Source advisory: SNYK:JAVA-EDUBERKELEYCS-11188144...
@kakashi-ventures-accelerator/catalyst-cli (0.1.0), @mew-protocol/mew (>=0.5.0, <=0.11.0) +1 more potentially affected by CVE-2025-53110 via @modelcontextprotocol/server-filesystem (0.6.2)
@modelcontextprotocol/server-filesystem NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-filesystem and may be impacted: - @kakashi-ventures-accelerator/catalyst-cli 0.1.0 - @mew-protocol/mew =0.5.0, =0.11....
@iflow-mcp/alibabacloud-dataworks-mcp-server (1.0.43), @mseep/alibabacloud-dataworks-mcp-server (1.0.36) +1 more potentially affected by CVE-2025-53110 via @modelcontextprotocol/server-filesystem (2025.3.28)
@modelcontextprotocol/server-filesystem NPM version 2025.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-filesystem and may be impacted: - @iflow-mcp/alibabacloud-dataworks-mcp-server 1.0.43 -...
@kakashi-ventures-accelerator/catalyst-cli (0.1.0), @mew-protocol/mew (>=0.5.0, <=0.11.0) +1 more potentially affected by CVE-2025-53109 via @modelcontextprotocol/server-filesystem (0.6.2)
@modelcontextprotocol/server-filesystem NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-filesystem and may be impacted: - @kakashi-ventures-accelerator/catalyst-cli 0.1.0 - @mew-protocol/mew =0.5.0, =0.11....
cbs-sentry-dingding (1.0.24), cbs-sentry-qyweixin (1.0.1) +47 more potentially affected by CVE-2025-53099 via sentry (20.8.0)
sentry PYPI version 20.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry and may be impacted: - cbs-sentry-dingding 1.0.24 - cbs-sentry-qyweixin 1.0.1 - csnp =0.0.5, =1.0.0, =0.2.4, =1.0.0, =0.1.0, =0.4.0, =0.1.0, =0.2.0 and more Source cves:...
@finsemble/finsemble-core (>=8.11.0-beta.1, <=10.0.0-iocd-6), @finsemble/finsemble-electron-adapter (>=8.11.0-beta.1, <=10.0.0-iocd-6) +7 more potentially affected by CVE-2024-46993 via electron (>=29.0.1, <=29.3.1)
electron NPM version =29.0.1, =8.11.0-beta.1, =8.11.0-beta.1, =0.0.168-dev, =0.0.40, =2.0.125, =2024.4.146, =6.10.4, =10.0.53 Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...
@kumologica/kumologica-contrib-amazonbedrock (0.0.1-beta), @kumologica/sdk (>=3.6.0-alpha10, <=4.0.1) +2 more potentially affected by CVE-2024-46993 via electron (>=30.0.0, <=30.0.2)
electron NPM version =30.0.0, =3.6.0-alpha10, =2.0.131, =0.1.1, =0.1.3 Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...
@codeceptjs/ui (0.7.7), @epicdm/flowstate-shell (>=1.0.1, <=1.0.8) +7 more potentially affected by CVE-2024-46993 via electron (>=28.0.0, <=28.2.3)
electron NPM version =28.0.0, =1.0.1, =9.2.0, =2.0.119, =0.62.0, =0.79.19 - yt-play-cli 0.14.0 Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...
@devsoutinho/alfred-currency-converter (>=2.0.0, <=2.1.1), @felixcatto/ui (>=0.0.14, <=0.0.32) +13 more potentially affected by CVE-2025-45143 via string-math (1.2.2)
string-math NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on string-math and may be impacted: - @devsoutinho/alfred-currency-converter =2.0.0, =0.0.14, =0.4.0-beta.2, =1.5.12, =0.1.47, =0.0.32, =2.0.0, =4.0.0, =1.0.0, =1.2.0, =1.0.8,...
@ascua/electron (>=0.4.2, <=0.4.6), @kumologica/kumologica-contrib-amazonbedrock (0.0.1-beta) +3 more potentially affected by CVE-2024-46992 via electron (>=30.0.0, <=30.0.3)
electron NPM version =30.0.0, =0.4.2, =3.6.0-alpha10, =2.0.131, =0.1.1, =0.1.3 Source cves: CVE-2024-46992 Source advisory: OSV:GHSA-XW5Q-G62X-2QJC...
@akhmetovdev/ledger-connector (>=1.1.0, <=1.3.4), @ardenthq/sdk-btc (>=1.0.0, <=1.3.1) +184 more potentially affected by CVE-2024-49365 via tiny-secp256k1 (>=1.0.0, <=1.1.6)
tiny-secp256k1 NPM version =1.0.0, =1.1.0, =1.0.0, =0.0.0-CP-8940-20240801175729, =0.20.0-alpha.10, =0.0.0-CP-8940-20240801175729, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =0.0.0-CP-8940-20240801175729, =0.0.0-CP-9420-20250129154656, =0.0.0-CP-9420-20250129154656...
@akhmetovdev/ledger-connector (>=1.1.0, <=1.3.4), @ardenthq/sdk-btc (>=1.0.0, <=1.3.1) +184 more potentially affected by CVE-2024-49364 via tiny-secp256k1 (>=1.0.0, <=1.1.6)
tiny-secp256k1 NPM version =1.0.0, =1.1.0, =1.0.0, =0.0.0-CP-8940-20240801175729, =0.20.0-alpha.10, =0.0.0-CP-8940-20240801175729, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =0.0.0-CP-8940-20240801175729, =0.0.0-CP-9420-20250129154656, =0.0.0-CP-9420-20250129154656...