com.phasmidsoftware:majabigwaduce_3 (>=1.0.6, <=2.0.1) potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_3 (2.8.8)

com.typesafe.akka:akka-cluster-metrics3 MAVEN version 2.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-cluster-metrics3 and may be impacted: - com.phasmidsoftware:majabigwaduce3 =1.0.6, =2.0.1 Source cves: CVE-2025-53393...

com.ing.baker:bakery-interaction-k8s-interaction-manager_2.13 (>=3.6.2, <=5.0.0), com.ing.baker:bakery-state-k8s_2.13 (3.5.0) +8 more potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_2.13 (>=2.6.11, <=2.9.0-m2)

com.typesafe.akka:akka-cluster-metrics2.13 MAVEN version =2.6.11, =3.6.2, =3.5.0, =22.10.0-m1, =0.1.6, =0.1.0-alpha1, =2.9.1, =3.30.0, =3.31.0 Source cves: CVE-2025-53393 Source advisory: SNYK:JAVA-COMTYPESAFEAKKA-10567746...

dbgpt-app (0.8.0rc1), dbgpt-client (>=0.7.0rc0, <=0.8.2) +2 more potentially affected by CVE-2025-6772 via dbgpt (0.8.2)

dbgpt PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbgpt and may be impacted: - dbgpt-app 0.8.0rc1 - dbgpt-client =0.7.0rc0, =0.7.0rc0, =0.8.0rc1, =0.8.2 Source cves: CVE-2025-6772 Source advisory: SNYK:PYTHON-DBGPT-10562212...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +87 more potentially affected by CVE-2025-6624 via snyk (>=1.1.1, <=1.1297.1)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =1.6.0, =1.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2025-6624 Source advisory: OSV:GHSA-6HWC-9H8R-3VMF...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +87 more potentially affected by CVE-2025-6624 via snyk (>=1.1.1, <=1.1297.1)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =1.6.0, =1.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2025-6624 Source advisory: SNYK:JS-SNYK-10497607...

@0cfg/utils-node (>=0.1.2, <=0.1.8), @b0ase/path402-api (4.0.0-alpha.1) +262 more potentially affected by CVE-2025-6547 via pbkdf2 (>=3.0.4, <=3.1.2)

pbkdf2 NPM version =3.0.4, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.38.0, =1.45.0, =1.1.14, =1.20.2, =1.3.13, =3.8.1, =4.26.0 and more Source cves: CVE-2025-6547 Source advisory: OSV:GHSA-V62P-RQ8G-8H59...

org.webjars.npm:ethereum-cryptography (0.1.3), org.webjars.npm:parse-asn1 (>=5.0.0, <=5.1.6) potentially affected by CVE-2025-6547 via org.webjars.npm:pbkdf2 (3.1.2)

org.webjars.npm:pbkdf2 MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:pbkdf2 and may be impacted: - org.webjars.npm:ethereum-cryptography 0.1.3 - org.webjars.npm:parse-asn1 =5.0.0, =5.1.6 Source cves: CVE-2025-6547...

@0cfg/utils-node (>=0.1.2, <=0.1.8), @b0ase/path402-api (4.0.0-alpha.1) +228 more potentially affected by CVE-2025-6545 via pbkdf2 (>=3.0.12, <=3.1.2)

pbkdf2 NPM version =3.0.12, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.38.0, =1.45.0, =1.1.14, =1.20.2, =1.3.13, =3.8.1, =1.4.1, =1.34.4 and more Source cves: CVE-2025-6545 Source advisory: OSV:GHSA-H7CP-R72F-JXH6...

org.webjars.npm:ethereum-cryptography (0.1.3), org.webjars.npm:parse-asn1 (>=5.0.0, <=5.1.6) potentially affected by CVE-2025-6545 via org.webjars.npm:pbkdf2 (3.1.2)

org.webjars.npm:pbkdf2 MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:pbkdf2 and may be impacted: - org.webjars.npm:ethereum-cryptography 0.1.3 - org.webjars.npm:parse-asn1 =5.0.0, =5.1.6 Source cves: CVE-2025-6545...

@4via6/relay (>=1.0.0, <=1.1.3), @axonpush/wizard (>=0.0.1, <=0.0.4) +9 more potentially affected by CVE-2025-52882 via @anthropic-ai/claude-code (>=0.2.126, <=1.0.8)

@anthropic-ai/claude-code NPM version =0.2.126, =1.0.0, =0.0.1, =0.0.55, =1.0.0, =0.0.1, =0.0.1, =0.0.1-beta.2, =0.0.1, =0.0.5 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-52882 Source advisory: OSV:GHSA-9F65-56V6-GXW7...

org.webjars.bowergithub.advanced-rest-client:code-mirror (2.0.1), org.webjars.bowergithub.angular-ui:ui-codemirror (>=0.1.6, <=0.3.0) potentially affected by CVE-2025-6493 via org.webjars.bowergithub.components:codemirror (>=4.13.0, <=5.65.12)

org.webjars.bowergithub.components:codemirror MAVEN version =4.13.0, =0.1.6, =0.3.0 Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARSBOWERGITHUBCOMPONENTS-10494093...

de.chandre.admin-tools:admin-tools-dbbrowser (>=1.1.1, <=1.1.7.3), de.chandre.admin-tools:admin-tools-filebrowser (>=1.1.1, <=1.1.7.3) +3 more potentially affected by CVE-2025-6493 via org.webjars.bower:codemirror (>=3.23.0, <=5.58.2)

org.webjars.bower:codemirror MAVEN version =3.23.0, =1.1.1, =1.1.1, =3.4.3, =3.4.4 - org.webjars.bower:mergely 3.3.6 Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-10494097...

com.gitblit.fathom:fathom-integration-test (>=0.5.0, <=1.0.1), com.github.dreampie:jfinal-dreampie (1.0) +30 more potentially affected by CVE-2025-6493 via org.webjars:codemirror (>=3.15, <=5.62.2)

org.webjars:codemirror MAVEN version =3.15, =0.5.0, =1.0.0, =1.0.1, =2.3.0.cr1, =2.1.8.0, =2.1.8.0, =2.1.8.0, =2.1.8.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =1.7.0, =1.7.5 and more Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARS-10494095...

org.apache.marmotta:marmotta-ldpath (3.1.0-incubating), org.apache.marmotta:marmotta-sparql (3.1.0-incubating) potentially affected by CVE-2025-6493 via org.apache.marmotta.webjars:codemirror (3.1.0-incubating)

org.apache.marmotta.webjars:codemirror MAVEN version 3.1.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.marmotta.webjars:codemirror and may be impacted: - org.apache.marmotta:marmotta-ldpath 3.1.0-incubating -...

7ghost (>=4.11.0, <=4.11.46), @accordproject/concerto-ui-react (>=0.6.0-alpha.1, <=0.83.1-20200224151908) +272 more potentially affected by CVE-2026-1615 via jsonpath (>=1.0.0, <=1.2.1)

jsonpath NPM version =1.0.0, =4.11.0, =0.6.0-alpha.1, =0.82.10-20200221024018, =1.0.0, =1.1.0-dev.2, =3.0.6371, =4.0.2, =2.0.4, =0.2.0-dev.1, =4.0.149, =3.0.129, =4.0.174, =0.11.8, =1.2.5, =1.4.0 and more Source cves: CVE-2026-1615 Source advisory: SNYK:JS-JSONPATH-13645034...

@accounter/server (>=0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @dossierhq/test-data (1.0.1) +4 more potentially affected by CVE-2025-12613 via cloudinary (>=2.0.3, <=2.6.1)

cloudinary NPM version =2.0.3, =0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, =7.1.0, =1.0.0-alpha.88, =1.0.0-alpha.88, =0.0.1, =0.0.6 Source cves: CVE-2025-12613 Source advisory: SNYK:JS-CLOUDINARY-10495740...

better-auth-cloudflare (0.1.0) potentially affected by CVE-2025-6087 +1 more via @opennextjs/cloudflare (1.0.1)

@opennextjs/cloudflare NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @opennextjs/cloudflare and may be impacted: - better-auth-cloudflare 0.1.0 Source cves: CVE-2025-6087, CVE-2026-3125 Source advisory: OSV:GHSA-RVPW-P7VW-WJ3M...

allyaudio (>=0.1.0, <=0.4.0), ambisonic (>=0.4.0, <=0.4.1) +136 more potentially affected by unknown CVE via slice-ring-buffer (0.3.4)

slice-ring-buffer CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on slice-ring-buffer and may be impacted: - allyaudio =0.1.0, =0.4.0, =0.0.9, =0.0.3, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 - bevykiraaudio 0.4.0 and mo...

letta-nory (0.1.0) potentially affected by CVE-2025-6101 via letta (0.16.8)

letta PYPI version 0.16.8 is affected by a known vulnerability. The following packages have a transitive dependency on letta and may be impacted: - letta-nory 0.1.0 Source cves: CVE-2025-6101 Source advisory: SNYK:PYTHON-LETTA-10494065...

@cyanheads/git-mcp-server (>=2.0.10, <=2.1.0), @dsazz/mcp-confluence (0.2.0) +34 more potentially affected by CVE-2025-49596 via @modelcontextprotocol/inspector (>=0.2.7, <=0.13.0)

@modelcontextprotocol/inspector NPM version =0.2.7, =2.0.10, =1.0.1, =0.0.0-alpha.0, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-49596 Source advisory: OSV:GHSA-7F8R-222P-6F5G...