@oconva/qvikchat (>=1.0.0 <=2.0.0-alpha.4), genkit-intro (=1.0.0) +3 more potentially affected by unknown CVE via @genkit-ai/firebase (=0.5.17)

@genkit-ai/firebase NPM version =0.5.17 is affected by a known vulnerability. The following packages have a transitive dependency on @genkit-ai/firebase and may be impacted: - @oconva/qvikchat =1.0.0, =0.0.1, =1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-GENKITAIFIREBASE-12671227...

@blinkk/root-cms (>=1.2.0 <=2.0.0-rc.1), @genkit-ai/ai (>=0.5.0 <=0.9.0-rc.3) +47 more potentially affected by unknown CVE via @genkit-ai/core (>=0.5.0-rc.0 <=0.9.0)

@genkit-ai/core NPM version =0.5.0-rc.0, =1.2.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-GENKITAICORE-12671226...

acolor (>=0.0.2 <=0.0.11), amberwindow (>=0.1.0 <=0.3.61) +106 more potentially affected by unknown CVE via macroquad (>=0.2.9 <=0.4.15)

macroquad CARGO version =0.2.9, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.6.0 - coldiron =0.1.0 - color-splotch =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0035...

ibc (>=0.11.0 <=0.19.0), ibc-client-tendermint (>=0.48.0 <=0.55.1) +11 more potentially affected by unknown CVE via tendermint-light-client-verifier (>=0.23.5 <=0.38.1)

tendermint-light-client-verifier CARGO version =0.23.5, =0.11.0, =0.48.0, =0.48.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.15.0, =0.1.0, =0.23.5, =0.32.0, =0.23.0, =0.1.0, =0.1.0-pre.1 Source cves: unknown CVE Source advisory: OSV:GHSA-6JRF-4JV4-R9MW...

tough-kms (>=0.2.0 <=0.5.0), tough-ssm (>=0.5.0 <=0.8.0) +1 more potentially affected by unknown CVE via tough (>=0.10.0 <=0.1.0)

tough CARGO version =0.10.0, =0.2.0, =0.5.0, =0.1.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:GHSA-J8X2-777P-23FC...

io.github.robothy:local-s3-jupiter (>=1.2 <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0 <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.10 <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.10, =1.2, =6.0.0, =7.3.7 Source cves: unknown CVE Source advisory: SNYK:JAVA-IOGITHUBROBOTHY-9399373...

adbdgl-adapter (>=1.0.0 <=3.0.1), alignn (>=2021.9.29 <=2025.4.1) +95 more potentially affected by unknown CVE via dgl (>=0.5.3 <=2.2.1)

dgl PYPI version =0.5.3, =1.0.0, =2021.9.29, =2022.10.23, =0.0.4, =1.0.0, =1.0.0, =0.1.0, =1.0.21, =0.1.1, =1.0.0b3, =0.0.1, =0.2.0, =1.26.2 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DGL-9295806...

ISP-SDK (=0.2.3), actix-elastic (>=1.0.0 <=1.0.7) +236 more potentially affected by unknown CVE via backoff (>=0.1.6 <=0.4.0)

backoff CARGO version =0.1.6, =1.0.0, =0.4.0, =0.2.0, =0.1.0, =0.2.0, =0.5.1, =0.2.0-beta.0, =0.6.0, =0.2.0, =0.5.0 - adventure-rusoto-ecs =0.4.0 - adventure-rusoto-sns =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0012...

01os (>=0.0.5 <=0.0.13), airbyte-source-azure-blob-storage (>=0.3.3 <=0.6.12) +77 more potentially affected by unknown CVE via unstructured (>=0.10.10 <=0.16.17)

unstructured PYPI version =0.10.10, =0.0.5, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =1.1.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-UNSTRUCTURED-9055244...

ablator (>=0.0.1b1 <=0.0.1b2), ablator-ken-test (=0.0.1b2) +125 more potentially affected by unknown CVE via ray (>=2.0.0 <=2.41.0)

ray PYPI version =2.0.0, =0.0.1b1, =0.2.5, =0.2.2, =1.1.1, =0.5.3b20221011, =0.1.1b20230324, =0.4.2 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-RAY-9055245...

qgate-sln-mlrun (>=0.1.0 <=0.2.8) potentially affected by unknown CVE via mlrun (>=1.5.2 <=1.6.4)

mlrun PYPI version =1.5.2, =0.1.0, =0.2.8 Source cves: unknown CVE Source advisory: SNYK:PYTHON-MLRUN-9296273...

datafu (>=0.0.6 <=0.0.7) potentially affected by unknown CVE via totally-safe-transmute (=0.0.3)

totally-safe-transmute CARGO version =0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on totally-safe-transmute and may be impacted: - datafu =0.0.6, =0.0.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0030...

cauuu (>=0.1.0 <=0.1.1), cosmwasm-check (>=1.1.0 <=1.3.4) +16 more potentially affected by unknown CVE via cosmwasm-vm (>=0.10.1 <=1.3.4)

cosmwasm-vm CARGO version =0.10.1, =0.1.0, =1.1.0, =0.13.2, =0.4.0, =0.4.0, =0.2.0, =0.4.0, =0.2.0, =0.2.1, =0.1.12, =0.1.13 - terra-math =0.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MX2J-7CMV-353C...

a2a-smol-adapter (=0.1.0), agent-lifecycle-toolkit (>=0.2.1 <=0.10.1) +102 more potentially affected by unknown CVE via smolagents (>=1.12.0 <=1.26.0)

smolagents PYPI version =1.12.0, =0.2.1, =0.1.0, =0.1.5, =0.1.6, =0.0.1, =0.3.4, =1.0.0, =1.0.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-SMOLAGENTS-8688410...

io.kestra:jdbc (>=0.10.0 <=0.20.10), io.kestra:jdbc-h2 (>=0.18.0 <=0.20.10) +5 more potentially affected by unknown CVE via io.kestra:core (>=0.10.0 <=0.20.10)

io.kestra:core MAVEN version =0.10.0, =0.10.0, =0.18.0, =0.10.0, =0.10.0, =0.16.5, =0.10.0, =0.18.0, =0.20.10 Source cves: unknown CVE Source advisory: SNYK:JAVA-IOKESTRA-8687935...

ambientagi (>=0.1.1 <=0.2.12), dataflex (=1.0.0) +10 more potentially affected by unknown CVE via gradio (>=5.0.0 <=5.12.0)

gradio PYPI version =5.0.0, =0.1.1, =1.0.1, =0.0.2, =1.1.8b3, =2025.1.24, =0.3.0, =0.0.1, =0.0.5, =0.9.1, =0.9.5 Source cves: unknown CVE Source advisory: SNYK:PYTHON-GRADIO-8685062...

@wcd/gqio.angular-element-starter-kit (=0.1.0), @wcd/gqio.angular-element-todo (=0.1.0) potentially affected by unknown CVE via platform-browser-dynamic (=0.0.1-security)

platform-browser-dynamic NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser-dynamic and may be impacted: - @wcd/gqio.angular-element-starter-kit =0.1.0 - @wcd/gqio.angular-element-todo =0.1.0 Source cves: unkno...

@chainsafe/lodestar (>=1.10.0-dev.00b94f3802 <=1.25.0-rc.0), @lodestar/beacon-node (>=1.10.0-dev.00b94f3802 <=1.25.0-rc.0) potentially affected by unknown CVE via @lodestar/reqresp (>=1.10.0-dev.a208afb45a <=1.25.0-rc.0)

@lodestar/reqresp NPM version =1.10.0-dev.a208afb45a, =1.10.0-dev.00b94f3802, =1.10.0-dev.00b94f3802, =1.25.0-rc.0 Source cves: unknown CVE Source advisory: OSV:GHSA-M9C9-MC2H-9WJW...

Boa (>=0.13.0 <=0.13.1), arci-urdf-viz (>=0.0.7 <=0.1.0) +87 more potentially affected by unknown CVE via fast-float (=0.2.0)

fast-float CARGO version =0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-float and may be impacted: - Boa =0.13.0, =0.0.7, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.19.0, =0.3.0, =0.4.1, =0.6.2, =0.3.2, =0.4.1, =0.3.2, =0.20.2 and more Source cves...

gpt-cli (>=0.0.13 <=0.0.20), htmlentity (>=0.1.0 <=1.2.0) +4 more potentially affected by unknown CVE via grcov (>=0.5.15 <=0.8.13)

grcov CARGO version =0.5.15, =0.0.13, =0.1.0, =0.2.0, =0.2.3 - rye-grain =0.0.1 - slobberchops-test1 =1.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0005...