qrmark-logo (>=1.0.7, <=1.0.8) potentially affected by unknown CVE via components-flexibility (6.1.25)

components-flexibility NPM version 6.1.25 is affected by a known vulnerability. The following packages have a transitive dependency on components-flexibility and may be impacted: - qrmark-logo =1.0.7, =1.0.8 Source cves: unknown CVE Source advisory: SNYK:JS-COMPONENTSFLEXIBILITY-13561387...

wrflib_widget (>=0.0.2, <=0.0.3) potentially affected by unknown CVE via wrflib (>=0.0.2, <=0.0.3)

wrflib CARGO version =0.0.2, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-466C-PFVV-V83G...

p2panda-rs (>=0.3.0, <=0.9.0) potentially affected by unknown CVE via openmls (0.4.1)

openmls CARGO version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openmls and may be impacted: - p2panda-rs =0.3.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:GHSA-QR9H-X63W-VQFM...

marked-sanitizer (0.0.0) potentially affected by unknown CVE via ammonia (3.1.4)

ammonia CARGO version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on ammonia and may be impacted: - marked-sanitizer 0.0.0 Source cves: unknown CVE Source advisory: SNYK:RUST-AMMONIA-13004667...

pingora (>=0.1.0, <=0.5.0), pingora-cache (>=0.1.0, <=0.5.0) +4 more potentially affected by unknown CVE via pingora-core (>=0.1.1, <=0.5.0)

pingora-core CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0 - revoke-gateway 0.3.0 - static-files-module 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-393W-9X6H-8GC7...

flowise (>=2.0.0, <=2.2.8) potentially affected by unknown CVE via flowise-components (2.2.8)

flowise-components NPM version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on flowise-components and may be impacted: - flowise =2.0.0, =2.2.8 Source cves: unknown CVE Source advisory: SNYK:JS-FLOWISECOMPONENTS-12878598...

CVE-2022-50335

In the Linux kernel, the following vulnerability has been resolved: 9p: set req refcount to zero to avoid uninitialized usage When a new request is allocated, the refcount will be zero if it is reused, but if the request is newly allocated from slab, it is not fully initialized before being added...

better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +97 more potentially affected by unknown CVE via libyml (>=0.0.4, <=0.0.5)

libyml CARGO version =0.0.4, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.2, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GFXP-F68G-8X78...

@aarc-dev/auth-widget (>=0.0.1, <=0.0.20), @aarc-dev/wallet-auth (>=0.0.11, <=0.0.20) +9 more potentially affected by unknown CVE via @metamask/sdk-react (>=0.16.0, <=0.30.2)

@metamask/sdk-react NPM version =0.16.0, =0.0.1, =0.0.11, =0.0.12, =0.16.0, =0.3.0, =0.5.6, =0.9.0, =0.0.7, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-QJ3P-XC97-XW74...

@0xshogun/sdk-react (1.1.40), @0xsquid/deposit-widget (>=0.0.2-beta.0, <=0.2.0) +243 more potentially affected by unknown CVE via @metamask/sdk-communication-layer (>=0.16.0, <=0.33.0)

@metamask/sdk-communication-layer NPM version =0.16.0, =0.0.2-beta.0, =2.1.11-beta.0, =3.0.0-beta.16, =0.0.1, =0.0.11, =0.2.1, =4.0.0-alpha.0, =3.16.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QJ3P-XC97-XW74...

keeshond_editor (>=0.1.0, <=0.13.0), keeshond_migrator (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via toodee (>=0.2.4, <=0.3.0)

toodee CARGO version =0.2.4, =0.1.0, =0.1.0, =0.10.0, =0.13.0 Source cves: unknown CVE Source advisory: OSV:GHSA-PFP7-VXGR-83PW...

accesskit_windows (>=0.5.0, <=0.10.4), accesskit_winit (>=0.2.0, <=0.7.2) +426 more potentially affected by unknown CVE via servo-fontconfig (>=0.4.0, <=0.5.1)

servo-fontconfig CARGO version =0.4.0, =0.5.0, =0.2.0, =0.5.0, =0.11.0, =0.2.0, =0.1.0, =0.8.0, =0.6.0, =0.4.0, =0.8.0, =0.2.0, =0.6.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0059...

aa2nucaln (0.1.1), agent-stream-kit (>=0.9.0, <=0.14.0) +435 more potentially affected by unknown CVE via custom_derive (0.1.7)

customderive CARGO version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on customderive and may be impacted: - aa2nucaln 0.1.1 - agent-stream-kit =0.9.0, =0.4.0, =0.1.1, =0.2.0, =0.4.3, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =3.1.3, =0.3.7, =0.8...

a2d (>=0.1.0, <=0.1.11), abscissa (>=0.6.0-beta.1, <=0.6.0-rc.0) +1452 more potentially affected by unknown CVE via adler (>=0.2.3, <=1.0.2)

adler CARGO version =0.2.3, =0.1.0, =0.6.0-beta.1, =0.6.0-beta.1, =0.6.0-beta.1, =0.1.5, =0.21.0-alpha.1, =0.0.1-dev.10, =0.4.0, =4.0.1-alpha.1, =0.2.0, =0.1.0, =0.0.2, =0.5.4-rc.1, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0056...

a2d (>=0.1.0, <=0.1.11), aa2nucaln (0.1.1) +3954 more potentially affected by unknown CVE via fxhash (>=0.1.2, <=0.2.1)

fxhash CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1-dev.10, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0057...

remenu (>=0.0.3, <=0.0.5) potentially affected by unknown CVE via xcb (1.2.2)

xcb CARGO version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on xcb and may be impacted: - remenu =0.0.3, =0.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-655H-HG88-5QMF...

x402-native-token-payment-demo (>=0.0.0-alpha, <=0.0.1) potentially affected by unknown CVE via x402-hono (0.3.4)

x402-hono NPM version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on x402-hono and may be impacted: - x402-native-token-payment-demo =0.0.0-alpha, =0.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-X402HONO-12239901...

@6missedcalls-ai/zora-mcp-server (>=0.1.2, <=0.1.3), @aurracloud/agentkit (>=0.9.0, <=0.10.0) +36 more potentially affected by unknown CVE via x402 (>=0.1.2, <=0.4.3)

x402 NPM version =0.1.2, =0.1.2, =0.9.0, =0.1.0-alpha.1, =0.0.1, =0.0.1, =0.0.1, =0.0.0-nightly-20250711210411, =0.3.0, =0.0.3, =0.1.2, =0.1.3 - @openflow-sh/sdk 1.0.0 - @thorium-dev-group/x402-mcp-extension 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3J63-5H8P-GF7C...

@akaiv/core (>=1.2.6, <=1.8.3), @akaiv/discord-client (>=1.0.0, <=1.4.1) +3 more potentially affected by unknown CVE via minimst (0.0.1-security)

minimst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on minimst and may be impacted: - @akaiv/core =1.2.6, =1.0.0, =0.1.0, =0.4.0 - @akaiv/kakao-client 2.0.1 - netlify-minutes 0.1.0 Source cves: unknown CVE Source advisory:...

bakpiabathok-3 (1.1.6), bonteng-1 (1.1.6) +1 more potentially affected by unknown CVE via bonteng (0.0.1-security)

bonteng NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bonteng and may be impacted: - bakpiabathok-3 1.1.6 - bonteng-1 1.1.6 - kolekcau-2 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15953...