angr (>=8.18.10.5, <=9.3.2), angr-management (>=9.0.4378, <=9.3.2) +32 more potentially affected by unknown CVE via pyvex (>=8.18.10.5, <=9.3.2)

pyvex PYPI version =8.18.10.5, =8.18.10.5, =9.0.4378, =1.0.0rc2, =1.0.7, =1.0.4, =9.0.4378, =9.0.5610, =1.0.0, =0.2.0, =0.0.1, =9.0.4378, =1.0.3, =0.0.1, =0.1.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:OSV-2025-500...

allyaudio (>=0.1.0, <=0.4.0), ambisonic (>=0.4.0, <=0.4.1) +136 more potentially affected by unknown CVE via slice-ring-buffer (0.3.4)

slice-ring-buffer CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on slice-ring-buffer and may be impacted: - allyaudio =0.1.0, =0.4.0, =0.0.9, =0.0.3, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 - bevykiraaudio 0.4.0 and mo...

adx (>=4.0.0, <=4.1.0), aicommits-rs (>=0.1.0, <=0.2.0) +302 more potentially affected by unknown CVE via surf (>=1.0.1, <=2.3.2)

surf CARGO version =1.0.1, =4.0.0, =0.1.0, =1.0.0, =0.3.0, =0.10.0, =0.3.0, =0.5.0, =0.1.0, =0.6.0, =0.3.0, =0.1.0, =0.0.1, =0.2.4 - async-bybit 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0036...

@dm3-org/delivery-service (>=1.4.0, <=1.7.1), @dm3-org/dm3-backend (>=1.0.1, <=1.7.1) +18 more potentially affected by unknown CVE via @dm3-org/dm3-lib-shared (1.7.2)

@dm3-org/dm3-lib-shared NPM version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on @dm3-org/dm3-lib-shared and may be impacted: - @dm3-org/delivery-service =1.4.0, =1.0.1, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =0.0.1-alpha1, =1.0.5, =1.4.0,...

asn-tools (>=0.2.2, <=0.2.5), bitslideslib (>=0.1.1, <=0.1.2) +13 more potentially affected by unknown CVE via shaman (0.1.0)

shaman CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shaman and may be impacted: - asn-tools =0.2.2, =0.1.1, =0.2.0, =0.2.9, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory:...

@oconva/qvikchat (>=1.0.0, <=2.0.0-alpha.4), genkit-intro (1.0.0) +3 more potentially affected by unknown CVE via @genkit-ai/firebase (0.5.17)

@genkit-ai/firebase NPM version 0.5.17 is affected by a known vulnerability. The following packages have a transitive dependency on @genkit-ai/firebase and may be impacted: - @oconva/qvikchat =1.0.0, =0.0.1, =1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-GENKITAIFIREBASE-12671227...

@blinkk/root-cms (>=1.2.0, <=2.0.0-rc.1), @genkit-ai/ai (>=0.5.0-rc.0, <=0.9.0) +47 more potentially affected by unknown CVE via @genkit-ai/core (>=0.5.0, <=0.9.0-rc.3)

@genkit-ai/core NPM version =0.5.0, =1.2.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.7, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-GENKITAICORE-12671226...

audio-video-metadata (>=0.1.0, <=0.1.7), fselect (>=0.3.2, <=0.8.11) +4 more potentially affected by unknown CVE via mp3-metadata (>=0.1.1, <=0.3.4)

mp3-metadata CARGO version =0.1.1, =0.1.0, =0.3.2, =0.1.2, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:GHSA-927Q-G9W9-PM54...

mcai_worker_sdk (>=0.11.0-alpha, <=2.2.1), srt_media (>=0.0.1, <=0.1.0) potentially affected by unknown CVE via stainless_ffmpeg (>=0.2.4, <=0.3.10)

stainlessffmpeg CARGO version =0.2.4, =0.11.0-alpha, =0.0.1, =0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0169...

org.webjars.npm:datauri (>=1.1.0, <=2.0.0), org.webjars.npm:image-thumbnail (1.0.15) +1 more potentially affected by unknown CVE via org.webjars.npm:image-size (>=0.5.5, <=2.0.0-alpha.1)

org.webjars.npm:image-size MAVEN version =0.5.5, =1.1.0, =2.7.1, =2.7.2 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGWEBJARSNPM-9634165...

abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +630 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.23.5)

pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PPH8-GCV7-4QJ5...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +372 more potentially affected by unknown CVE via aws-cdk-lib (>=2.37.1, <=2.186.0)

aws-cdk-lib NPM version =2.37.1, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =3.1.28-next-4.0 and more Source cves: unknown CVE Source advisory:...

addr2line (>=0.1.0, <=0.3.0), ai4ose-tg-rcore-tutorial-ch8-doom (0.1.0-preview.1) +142 more potentially affected by unknown CVE via xmas-elf (>=0.3.0, <=0.9.1)

xmas-elf CARGO version =0.3.0, =0.1.0, =0.1.4, =0.1.0, =0.1.0, =0.1.1, =0.11.0-beta, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.0, =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9CC5-2PQ7-HFJ8...

adbdgl-adapter (>=1.0.0, <=3.0.1), alignn (>=2021.9.29, <=2025.4.1) +94 more potentially affected by unknown CVE via dgl (>=0.5.3, <=2.2.1)

dgl PYPI version =0.5.3, =1.0.0, =2021.9.29, =2022.10.23, =0.0.4, =1.0.0a2, =0.1.0, =1.0.21, =0.1.1, =1.0.0b3, =0.0.1, =0.2.0, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DGL-9295806...

a2 (>=0.2.0, <=0.8.1), aati (>=0.10.2, <=0.11.3) +5273 more potentially affected by unknown CVE via ring (>=0.13.5, <=0.16.20)

ring CARGO version =0.13.5, =0.2.0, =0.10.2, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.1.27, =0.2.2, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0010...

actix-elastic (>=1.0.0, <=1.0.7), actix-nats (>=0.4.0, <=0.4.1) +223 more potentially affected by unknown CVE via backoff (>=0.1.6, <=0.4.0)

backoff CARGO version =0.1.6, =1.0.0, =0.4.0, =0.2.0, =0.1.0, =0.2.0, =0.5.1, =0.2.0-beta.0, =0.6.0, =0.2.0, =0.5.0 - adventure-rusoto-ecs 0.4.0 - adventure-rusoto-sns 0.4.0 - adventure-rusoto-sqs 0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0012...

fyrox-animation (0.2.0), fyrox-graph (0.1.0) +2 more potentially affected by unknown CVE via fyrox-core (0.28.1)

fyrox-core CARGO version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on fyrox-core and may be impacted: - fyrox-animation 0.2.0 - fyrox-graph 0.1.0 - fyrox-resource 0.12.0 - fyrox-sound 0.35.0 Source cves: unknown CVE Source advisory:...

@ronin-dist/render (>=1.0.386-leo-ron-885-experimental.35, <=1.0.490), @ronin/blade (>=0.0.1, <=0.2.7) +1 more potentially affected by unknown CVE via @sentry/bun (>=8.11.0, <=8.41.0)

@sentry/bun NPM version =8.11.0, =1.0.386-leo-ron-885-experimental.35, =0.0.1, =0.1.0, =0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

@mrmtech/splice-lambda (>=0.1.0, <=4.0.3) potentially affected by unknown CVE via @sentry/aws-serverless (>=8.26.0, <=8.30.0)

@sentry/aws-serverless NPM version =8.26.0, =0.1.0, =4.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.a3b3f47e2c, <=1.24.0-rc.3)

@lodestar/reqresp NPM version =1.3.0-dev.a3b3f47e2c, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.24.0-rc.3 Source cves: unknown CVE Source advisory: OSV:GHSA-M9C9-MC2H-9WJW...